last executing test programs: 7m27.31324081s ago: executing program 2 (id=552): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0xb35522, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0xb35522, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = landlock_create_ruleset(&(0x7f0000000280)={0x2000, 0x0, 0x2}, 0x18, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, r1, 0x4, 0x6, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x4, 0x1]}, {0x100, @struct, 0x0, 0x401, 0x6, 0x2, 0x7ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xee, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0xff0, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x7f, 0x8}, 0xc0000000, 0xd, [0x7, 0x7, 0x8, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xffdffffa) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x5fae, 0x4) 7m26.86555596s ago: executing program 2 (id=554): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)=""/199, 0xc7}], 0x1}, 0x2}], 0x1, 0x40000020, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x11}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x3b9aca00, &(0x7f0000003700)={0x77359400}) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000000)=0xffffffff, 0x4) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x2000, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400000000000001]}) 7m25.889345398s ago: executing program 2 (id=557): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000005030000002e005f00757a185078509193babfff13dfcd318f111eca0913a6a9ffd4e742426cb6a910a53ff621d7ac94c5a53fea786cde7eee782e9d742d56b4974961211e6fb98cd0854b6ecbdb663542957cc3839c1fc95a805c7511ec5f1d29990db4675b539c3344f9cbb3a7cfb2a9df"], 0x0, 0xfffffffffffffe60}, 0x28) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000001c0)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000000340)={&(0x7f0000000100), 0x0, &(0x7f0000000280)}, 0x0) fcntl$dupfd(r2, 0x0, r0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000002ac0), 0x0, 0x101400) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 7m24.258397152s ago: executing program 2 (id=560): r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x78, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, @in6={0xa, 0x4e24, 0x55e, @private2, 0x4eb08966}, @in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r1, &(0x7f0000000300)=0x4) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000400), &(0x7f0000000440)=0x4) chdir(&(0x7f00000000c0)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8, 0x8000000004, 0x4, 0x0, 0x4, 0x6, 0x6, 0x0, 0x100fff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x0) pread64(r3, &(0x7f0000000340)=""/140, 0x8c, 0x2) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r4 = socket$nl_rdma(0x10, 0x3, 0x14) syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) fcntl$lock(r4, 0x6, &(0x7f0000000180)={0x0, 0x4, 0x1, 0x8, r5}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000000000008900000008000300", @ANYRES32=r10, @ANYBLOB="18001d801400008006000500c000000005000b0000000000"], 0x34}}, 0x0) r11 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000a98000/0x400000)=nil) r12 = syz_kvm_add_vcpu$x86(r11, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r12, 0x4138ae84, &(0x7f0000000200)={{0x25000, 0xd000, 0xe, 0x0, 0x7, 0xee, 0x11, 0xfe, 0x0, 0x0, 0x8, 0xeb}, {0x4000, 0xeeef0000, 0xa, 0x7, 0x5, 0x7, 0x4, 0x14, 0x0, 0x5, 0x8, 0x63}, {0x80a0000, 0x2000, 0xb, 0xc, 0x26, 0x8, 0x81, 0x3, 0x80, 0x4, 0x1, 0x70}, {0xdddd0000, 0x10000, 0xc, 0xfe, 0x6, 0x5, 0xc3, 0xfb, 0x0, 0x2, 0x5, 0xe}, {0xb000, 0xeeee8000, 0x10, 0xff, 0xc, 0x9, 0x6, 0x7, 0x5, 0x6, 0x28, 0xfc}, {0x4, 0x10000, 0x9, 0xb9, 0x3, 0x5, 0x42, 0x7, 0xb0, 0x1, 0xff, 0x10}, {0x8080000, 0x0, 0xe, 0x1, 0xc, 0x8, 0x2, 0x62, 0xe4, 0x1, 0x14, 0x5}, {0x1, 0x200000, 0x0, 0x21, 0xc, 0x8, 0x9, 0x9, 0x6, 0x8, 0x43, 0x3}, {0x1000, 0x5}, {0x4000, 0xe}, 0x40000000, 0x0, 0xeeef0002, 0x200, 0x2, 0x901, 0xeeee0c00, [0x1, 0x1004, 0x5, 0x9]}) syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$VIDIOC_QUERYMENU(r13, 0xc040564a, &(0x7f0000000140)={0xdfffffff, 0x4, @name="dd32c90638a84c210e9e45a4b5aa5a9da43ed46a0431749dbbef905596bbe57b"}) 7m22.878195476s ago: executing program 2 (id=562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'dummy0\x00', {}, 0x4}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10, 0x0, 0x5, 0x3b0}, 0x62}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c001400004000ff8400000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 7m21.547069171s ago: executing program 2 (id=567): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x3, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000008040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x89}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7m20.694737785s ago: executing program 32 (id=567): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x3, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000008040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x89}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 15.293845864s ago: executing program 3 (id=2225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r3, 0x0, &(0x7f00000005c0)=""/32}, 0x20) 15.170221449s ago: executing program 3 (id=2227): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f0000001080)}, 0xff00) read(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000001100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001140)=0x18) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r6, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000540)="dce82fb4feadc231e05fbf83351c66a707ceb6d7", 0x14}], 0x2) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000300)={0xc, @raw_data="3beff6b0dc7b395d06c4063d40f49089e5913997371626b292812ca2a9612e3b462e57e8e6b5dc7ee26670ae05d3466c3cfabd72a2fa8426941e3e48bdad85cd49875f8bf8eb8f8bd6f98a2bd03e9f569723c3f06a1b50d4fc585f49fb08dea04c155d620b9d5435b8bb2f38fbeb827f33b8d527674be0edf21f4d03523df72d0806f1d3a223b352b9d3696d5e25080539a79ead73afee55862749c76b485f0e622797a4ffca9788cd800365f67b7accc3497ba6a0a37433d34e1035b512faf337e8cb451fda5289"}) tkill(r0, 0x7) 13.736735113s ago: executing program 5 (id=2229): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000080)) 13.705320086s ago: executing program 1 (id=2230): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="57fa1a6a", @ANYRES16=r1, @ANYBLOB="01007c0000000000040001000000080001000200000008000200020000"], 0x24}, 0x1, 0x0, 0x0, 0x2000c016}, 0x4000000) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffd08}}]}}, 0x7fe782539b0b) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) lseek(r3, 0x10001, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400601000004b3"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b750000000109021b0001000000000904"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100080}, [@generic={0x73, 0x1, 0x1, 0x37}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 12.358997956s ago: executing program 4 (id=2232): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x36}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000012}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e0c047f2edd11f67546ceafc951062d3ffa57875192e3ab9603fe7fb30cb68cc14a5e50068d66f8401ab639d5e24a7fe30c4679f2caa64be32863a5f5300cc588fe0cfb75243a3d6b9f455b31f077e1f2b4d5d3e84d56619fb19704e6fd788deada7590af3c44cd287302ebb327e8def0a9150fddad20962b1c8393e864c72b8d98d7076bc96e3850f0e7c36d1064df1267be3d30b4d1319876ad1403901978be0b40a7cc3b1135c9c2341370492ccb5ecad4f66dd13fa83f8457571310df722f26bddaee3869cf5a039f08f00bd3a36f6740bf487ce0e9a1bfdee2ac7e551047b0635f092879d9fa"], 0xf) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f000000a000/0x18000)=nil, 0x0, 0x0, 0x39, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x200000000000006a, &(0x7f00000001c0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x23}, 0x94) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000005c0)={0x100, {{0x2, 0x4e20, @empty}}}, 0x88) timer_settime(0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x47) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e1f, @loopback}, {0x20000010304, @local}, 0x6, {0x2, 0x4e21, @rand_addr=0x64010101}}) setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000140), 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) 11.76153976s ago: executing program 3 (id=2234): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x800) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0) r2 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) gettid() mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c0004805800018054b9400a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c0001007061796c6f6164001400028005000340000000b908000240000000020900010073797a30000000000900020073797a"], 0xb0}}, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x204, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0x1, 0x8401, 0x7fffffff, 0xe69, 0x4, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) socket$packet(0x11, 0x3, 0x300) 11.675401351s ago: executing program 0 (id=2235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) close(0x3) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0b06000000000000080030000000050035000000000008000200", @ANYRES32=r6, @ANYBLOB="050033000800000005003600"], 0x34}}, 0x4008010) 10.653249921s ago: executing program 0 (id=2236): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x401, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x400000009) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbf42504eb115b3b20d3fe24c9f279d139fbdc7fae44af0ccc385ece7ebcd248ffc35a"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020}, 0x2020) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) 10.428984407s ago: executing program 1 (id=2237): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x42, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xafef, 0x7, 0xa8, 0x8005, [0xb, 0x8]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000895}, 0xc000) 10.354451147s ago: executing program 5 (id=2238): syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x42, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xafef, 0x7, 0xa8, 0x8005, [0xb, 0x8]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000895}, 0xc000) 8.986936917s ago: executing program 5 (id=2239): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x5000) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xb4, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'geneve1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xb6d6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3201}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'dvmrp0\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000200)=0x8) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r4 = accept4(r0, 0x0, 0x0, 0x800) r5 = open_tree(r3, &(0x7f0000000100)='./file0\x00', 0x84000) dup(r5) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee", 0x13}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) fsopen(&(0x7f0000000180)='vfat\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef5, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x1f4, 0xf, 0x0, &(0x7f0000000380)="050000ffffffe70062a536c801d720", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 8.827790341s ago: executing program 4 (id=2240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) close(0x3) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0b06000000000000080030000000050035000000000008000200", @ANYRES32=r6, @ANYBLOB="050033000800000005003600"], 0x34}}, 0x4008010) 8.137811593s ago: executing program 1 (id=2241): socket$kcm(0xa, 0x1, 0x106) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f0000000040)=0x401) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 7.523487015s ago: executing program 4 (id=2242): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f0000001080)}, 0xff00) read(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001140)=0x18) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r5, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000540)="dce82fb4feadc231e05fbf83351c66a707ceb6d7", 0x14}], 0x2) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000300)={0xc, @raw_data="3beff6b0dc7b395d06c4063d40f49089e5913997371626b292812ca2a9612e3b462e57e8e6b5dc7ee26670ae05d3466c3cfabd72a2fa8426941e3e48bdad85cd49875f8bf8eb8f8bd6f98a2bd03e9f569723c3f06a1b50d4fc585f49fb08dea04c155d620b9d5435b8bb2f38fbeb827f33b8d527674be0edf21f4d03523df72d0806f1d3a223b352b9d3696d5e25080539a79ead73afee55862749c76b485f0e622797a4ffca9788cd800365f67b7accc3497ba6a0a37433d34e1035b512faf337e8cb451fda5289"}) tkill(r0, 0x7) 7.244507587s ago: executing program 3 (id=2243): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x401, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x280449d, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d31eea03ddc3caa801dd0569e3e261e9510d7b300b4a83e6b7e8c6c93750a6778986716d7b5d676d04331a198d374fb2ab25512a8407ee7a763372418fc0d3bc2", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbf42504eb115b3b20d3fe24c9f279d139fbdc7fae44af0ccc385ece7ebcd248ffc35a"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020}, 0x2020) 7.049342565s ago: executing program 1 (id=2244): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x714, @empty}, {0xa, 0x4e20, 0x169f801f, @empty, 0x8}, r5, 0x4}}, 0x48) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000180)) syz_emit_ethernet(0x1c2, &(0x7f0000002800)={@random="419fbc47f1e2", @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x4, 0x1b4, 0x65, 0x0, 0x7f, 0x2f, 0x0, @multicast1, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x45, 0x0, [0x7fff], "b01d93007c473b2aabb7a90e47750ce0685644128ccca3c7236471eac1a44aea98767dc07736d4710760624181819277deffffce5b97652d3a6044ceb5e2ae565620fad49a"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "c5cd3e4d0ef497f8452ff300d37168d6caef4f2c4ea7f92bdec727d34b8375ec10f388cf0586e137ed59e82f0d4ee5ba506a759b4a908909d907ca5e56eda6b209c0c6c23f2e384dde56a53e05"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x7, 0x1], "ec8d2408d5ccdd07a00a4e6c3c45c38d8feda785681d937f60227ca10687fff1d46f786b6bbac17b1fc4fc4b6a39e95c6b142aa1dc95aba979ac4a4adb7e3a7d4fc5abc2d531f18248b9e269235483e063f093987395d051f82fc4d9d2c5a95caeca2a33ba7e90b9407230626e2877fa0760166cdab2e93580d11651bbd95981b610bab234bee1a6394774c3ae232ff6d00af4e34da0214f3ec8aec6d4981449e845ffdfd468e65ea94f70f58a9536f2665a493eaf83f9065246bfbff8cb9a9bba965f6d"}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x8e, 0x0, 0x0, 0x3, 0x0, 0x81}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x2, {{0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2, {0x4, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 6.384895886s ago: executing program 5 (id=2245): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x42, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xafef, 0x7, 0xa8, 0x8005, [0xb, 0x8]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000895}, 0xc000) 6.164960677s ago: executing program 0 (id=2246): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) symlink(0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0200000000000000140012800900010076657468"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x56, &(0x7f00000014c0)=ANY=[@ANYRES32=r3, @ANYRESDEC=r4, @ANYRES64=r0, @ANYBLOB="b8a03d37ece311d1e51b34dc327874cbd405f4c3f380481914cfcd57fdfed57207a328311f1bf5c4b56108bdee00edc21f57e597205adff204516cc25b149904a7695a4198c61e1fc119c8ae677d704ce8de9a6ae0ca4b53f6dc2af9eb586a3646ebb1b9d8d476c474111ba4194bcc93963b195ba2e883e75231"], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 6.044611152s ago: executing program 1 (id=2247): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="57fa1a6a", @ANYRES16=r1, @ANYBLOB="01007c0000000000040001000000080001000200000008000200020000"], 0x24}, 0x1, 0x0, 0x0, 0x2000c016}, 0x4000000) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffd08}}]}}, 0x7fe782539b0b) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) lseek(r3, 0x10001, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400601000004b3"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b750000000109021b0001000000000904"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100080}, [@generic={0x73, 0x1, 0x1, 0x37}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 5.337019056s ago: executing program 5 (id=2248): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000080)) 5.118068601s ago: executing program 0 (id=2249): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="57fa1a6a", @ANYRES16=r1, @ANYBLOB="01007c0000000000040001000000080001000200000008000200020000"], 0x24}, 0x1, 0x0, 0x0, 0x2000c016}, 0x4000000) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffd08}}]}}, 0x7fe782539b0b) mkdirat(0xffffffffffffff9c, 0x0, 0x0) lseek(r3, 0x10001, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="40060100"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b750000000109021b0001000000000904"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100080}, [@generic={0x73, 0x1, 0x1, 0x37}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 4.433774749s ago: executing program 4 (id=2250): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000014c0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRES64=r0, @ANYBLOB="b8a03d37ece311d1e51b34dc327874cbd405f4c3f380481914cfcd57fdfed57207a328311f1bf5c4b56108bdee00edc21f57e597205adff204516cc25b149904a7695a4198c61e1fc119c8ae677d704ce8de9a6ae0ca4b53f6dc2af9eb586a3646ebb1b9d8d476c474111ba4194bcc93963b195ba2e883e75231"], 0x0) 4.128485681s ago: executing program 3 (id=2251): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) statx(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000f00)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_usb_connect(0x5, 0x36, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x51}}, 0x0, 0x1a}, 0x28) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="d40000001b00010027bd7000fedbdf2500000000000000000000000000000000e00000010000000000000000000000004e2400054e2300020a0020003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000005000000000000007d0c0000000000000c000000000000000000000000000000480d00000000000001000080000000000300000000000000cd6200000000000003000000000000000800000000000000040000000000000010000000b76b6e00010000020000000001000000000000000a0010"], 0xd4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c000280050001000000000008000740000000010b0016"], 0x78}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x8, 0x4) 3.43095338s ago: executing program 4 (id=2252): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0800a0002609000028809e000d000000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4004008}, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f00000000c0)=0xa, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0xf2, &(0x7f0000fff000/0x1000)=nil, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], 0x8) shutdown(r3, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.041576862s ago: executing program 0 (id=2253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @private, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xd}, {0xfff3, 0x6}, {0xd, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @TCA_RATE={0x6, 0x5, {0xf4, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r8 = openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.pending_reads\x00', 0x610000, 0x31) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r7, r8, 0x3, 0x2, 0x3}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) 1.570011273s ago: executing program 1 (id=2254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x21, 0x0, 0x0, 0x1, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x1) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x8, 0x50, 0x0, 0x1, 0x2, 0x4, 0x6, 0x99, 0xb, 0x4, 0x7, 0x3, 0xd1, 0x5, 0x8, 0x5}}) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80020, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb7}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="c4448f5a83b9709b3355751666e8528737cec052df2f1eedf20e1db17c5415968df0f289f2d3f49935c23604f9336611adbd5816a9186f83a156d8320f2a85f3fb013fd1195306c35c80917d8defee17d22fa0924e92d8217ae0743222c76ee4cddfaaa73189467f9f77178c34e888cf9ac28232bfc37c0c7a3955b17c86909e0cbb61d1e6e4f10120c48dd2e73cb09b65e9cff860dfbb02b13ecdbbb18a57774e80b0ae887f13a71b491baea2a31304075397beaa8623a6e5d14a9f5cfeb44352410ed631e98a32297e", @ANYBLOB="03000000000000001c0012800b00010062726964676500000c000280050017000000000008000400000200001c97cfc6c5f835fd636222bce0bb0fa53e649d035e2fed3bc5bf3cbdc26821738f90e8e428504ed7b2456d4f7fb41620143db17b5244287538faaac399e40aaf96b9fc965503004e6570512b5d3a98cbae44f358407a9e976158ea5581de84c37328ec181ce0502c00e60e677825e51b77cf64c27f931b6ca5af580c3a277f2aecb2796a89688989d25c672630"], 0x44}}, 0x804) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x5, 0x5, &(0x7f0000000040)=0x4}) 1.474430207s ago: executing program 5 (id=2255): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x5000) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xac, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'geneve1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xb6d6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3201}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000200)=0x8) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r4 = accept4(r0, 0x0, 0x0, 0x800) r5 = open_tree(r3, &(0x7f0000000100)='./file0\x00', 0x84000) dup(r5) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee", 0x13}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) fsopen(&(0x7f0000000180)='vfat\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef5, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x1f4, 0xf, 0x0, &(0x7f0000000380)="050000ffffffe70062a536c801d720", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 1.04844605s ago: executing program 4 (id=2256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x401, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x400000009) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x280449d, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d31eea03ddc3caa801dd0569e3e261e9510d7b300b4a83e6b7e8c6c93750a6778986716d7b5d676d04331a198d374fb2ab25512a8407ee7a763372418fc0d3bc2", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbf42504eb115b3b20d3fe24c9f279d139fbdc7fae44af0ccc385ece7ebcd248ffc35a"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) 982.105294ms ago: executing program 0 (id=2257): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000895}, 0xc000) 0s ago: executing program 3 (id=2258): bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "7a636c77a3274a01", "ceb4fbddd2e1e484067d42694d7ce5b8", "55e5d6ee", "d7a6de2e2e9376b8"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "7cf56f776d00"}, 0x28) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) writev(r3, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd", 0xcf}], 0x3) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0xff1}], 0x1) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}], 0x1) kernel console output (not intermixed with test programs): ax is 1 [ 655.549903][ T5701] usb 2-1: config 10 contains an unexpected descriptor of type 0x1, skipping [ 655.559100][ T5701] usb 2-1: config 10 has an invalid interface number: 200 but max is 1 [ 655.567466][ T5701] usb 2-1: config 10 has no interface number 0 [ 655.573683][ T5701] usb 2-1: config 10 has no interface number 1 [ 655.579901][ T5701] usb 2-1: config 10 interface 5 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 655.591167][ T5701] usb 2-1: config 10 interface 5 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 655.601839][ T5701] usb 2-1: config 10 interface 5 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 655.613598][ T5701] usb 2-1: config 10 interface 5 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 655.624423][ T5701] usb 2-1: config 10 interface 5 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 655.635256][ T5701] usb 2-1: config 10 interface 200 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 655.646276][ T5701] usb 2-1: config 10 interface 200 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 655.657097][ T5701] usb 2-1: config 10 interface 200 has no altsetting 0 [ 655.665877][ T5701] usb 2-1: New USB device found, idVendor=19d2, idProduct=1270, bcdDevice=35.b1 [ 655.675127][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.683176][ T5701] usb 2-1: Product: ⥩ᗤ箩츽贈स㤙痖둺ࠏ滖れ䄢ࠌ胆髟尻᝜韰驸穨謟ꃈ嗦ﲎ弣鬋锺䢁ꪖ仢㐣ᡇ糸ሢ퐗粝찵获勺쪃彾☚ᚿ䣳쭊鋤鹳⏋榕켍귇踱炟㒯儲 [ 655.704155][ T5701] usb 2-1: Manufacturer: 巓苑နቜ侎▶Ꝙ딬ᡍꕙళ䙢赀芑ἍꟐ茆饗ꐐ箼ⅎ [ 655.714367][ T5701] usb 2-1: SerialNumber: syz [ 655.733564][ T5701] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 655.745542][ T5701] usb 2-1: no configuration chosen from 1 choice [ 655.782385][ T804] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 655.815639][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.828299][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.839307][ T5802] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 655.853192][ T5802] em28xx 4-1:0.132: board has no eeprom [ 655.942440][ T804] usb 1-1: Using ep0 maxpacket: 16 [ 655.950833][ T804] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 655.960384][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.971915][ T804] usb 1-1: Product: syz [ 655.976282][ T804] usb 1-1: Manufacturer: syz [ 655.980880][ T804] usb 1-1: SerialNumber: syz [ 656.000154][ T804] usb 1-1: config 0 descriptor?? [ 656.010576][ T804] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 656.096204][T13358] comedi comedi2: pcl818: I/O base address or length out of range [ 656.142333][ T5802] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 656.150244][ T5802] em28xx 4-1:0.132: analog set to bulk mode. [ 656.156781][ T24] em28xx 4-1:0.132: Registering V4L2 extension [ 656.260681][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.274140][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.284335][T13338] trusted_key: encrypted_key: insufficient parameters specified [ 656.298887][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 656.299520][ T5701] usb 4-1: USB disconnect, device number 85 [ 656.326519][ T5701] em28xx 4-1:0.132: Disconnecting em28xx [ 656.395629][ T24] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 656.402885][ T24] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 656.410151][ T24] em28xx 4-1:0.132: No AC97 audio processor [ 656.444256][ T24] usb 4-1: Decoder not found [ 656.454582][ T24] em28xx 4-1:0.132: failed to create media graph [ 656.466247][ T804] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 656.477056][ T24] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 656.490314][ T804] visor 1-1:0.0: probe with driver visor failed with error -71 [ 656.502433][ T24] em28xx 4-1:0.132: Remote control support is not available for this card. [ 656.528186][ T804] usb 1-1: USB disconnect, device number 91 [ 656.538163][ T5701] em28xx 4-1:0.132: Closing input extension [ 656.576200][ T5701] em28xx 4-1:0.132: Freeing device [ 656.617204][ T2238] usb 2-1: USB disconnect, device number 70 [ 657.316192][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'. [ 657.326011][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'. [ 657.342394][ T804] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 657.362344][ T24] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 657.532313][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 657.537503][ T804] usb 1-1: Using ep0 maxpacket: 32 [ 657.545216][ T804] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 657.554126][ T24] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 657.563505][ T804] usb 1-1: config 0 has no interface number 0 [ 657.569737][ T24] usb 6-1: config 0 has no interface number 0 [ 657.576527][ T804] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 657.588187][ T24] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 657.605024][ T804] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 657.617429][ T24] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 657.633111][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.641256][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.650134][ T804] usb 1-1: Product: syz [ 657.654474][ T24] usb 6-1: Product: syz [ 657.658691][ T804] usb 1-1: Manufacturer: syz [ 657.663469][ T24] usb 6-1: Manufacturer: syz [ 657.668181][ T804] usb 1-1: SerialNumber: syz [ 657.672894][ T24] usb 6-1: SerialNumber: syz [ 657.679131][ T804] usb 1-1: config 0 descriptor?? [ 657.689938][ T24] usb 6-1: config 0 descriptor?? [ 657.696159][ T804] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 657.707175][ T804] em28xx 1-1:0.132: Video interface 132 found: [ 657.716279][ T24] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 657.726310][ T24] em28xx 6-1:0.132: Video interface 132 found: [ 658.110786][ T804] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 658.118477][ T24] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 658.580068][ T5830] Bluetooth: hci5: Frame reassembly failed (-84) [ 658.803388][T13369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.812121][T13369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.821364][T13373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.848119][T13373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.860636][ T804] em28xx 1-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 658.863378][T13369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.872432][ T804] em28xx 1-1:0.132: board has no eeprom [ 658.884921][T13369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.962310][ T804] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 658.970308][ T804] em28xx 1-1:0.132: analog set to bulk mode. [ 658.976444][ T5802] em28xx 1-1:0.132: Registering V4L2 extension [ 658.987870][ T804] usb 1-1: USB disconnect, device number 92 [ 658.995395][ T804] em28xx 1-1:0.132: Disconnecting em28xx [ 659.067393][ T5802] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 659.074695][ T5802] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 659.076682][T13373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.081979][ T24] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 659.097161][T13373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.103221][ T5802] em28xx 1-1:0.132: No AC97 audio processor [ 659.118858][ T5802] usb 1-1: Decoder not found [ 659.123711][ T24] em28xx 6-1:0.132: board has no eeprom [ 659.129447][ T5802] em28xx 1-1:0.132: failed to create media graph [ 659.136058][ T5802] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 659.145721][ T5802] em28xx 1-1:0.132: Remote control support is not available for this card. [ 659.155443][ T804] em28xx 1-1:0.132: Closing input extension [ 659.166365][ T804] em28xx 1-1:0.132: Freeing device [ 659.202339][ T24] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 659.215392][ T24] em28xx 6-1:0.132: analog set to bulk mode. [ 659.221585][ T5802] em28xx 6-1:0.132: Registering V4L2 extension [ 659.235511][ T24] usb 6-1: USB disconnect, device number 54 [ 659.243349][ T24] em28xx 6-1:0.132: Disconnecting em28xx [ 659.426638][ T5802] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 659.433814][ T5802] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 659.440937][ T5802] em28xx 6-1:0.132: No AC97 audio processor [ 659.451631][ T5802] usb 6-1: Decoder not found [ 659.456351][ T5802] em28xx 6-1:0.132: failed to create media graph [ 659.465393][ T5802] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 659.538025][ T5802] em28xx 6-1:0.132: Remote control support is not available for this card. [ 659.580791][ T24] em28xx 6-1:0.132: Closing input extension [ 659.599080][ T24] em28xx 6-1:0.132: Freeing device [ 659.780242][T13418] comedi comedi2: pcl818: I/O base address or length out of range [ 660.198885][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1997'. [ 660.242875][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1997'. [ 660.352406][T11010] Bluetooth: hci5: command 0xfc11 tx timeout [ 660.360157][ T4928] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 661.512328][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 662.063401][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 662.071784][ T10] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 662.080642][ T10] usb 2-1: config 0 has no interface number 0 [ 662.086983][ T10] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 662.100282][ T10] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 662.109631][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.118979][ T10] usb 2-1: Product: syz [ 662.124097][ T10] usb 2-1: Manufacturer: syz [ 662.128704][ T10] usb 2-1: SerialNumber: syz [ 662.137178][ T10] usb 2-1: config 0 descriptor?? [ 662.150235][ T10] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 662.160164][ T10] em28xx 2-1:0.132: Video interface 132 found: [ 662.551917][ T10] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 662.762376][ T24] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 662.850996][T13468] netlink: zone id is out of range [ 662.866018][T13466] comedi comedi2: pcl818: I/O base address or length out of range [ 662.953340][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 662.964068][T13443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.976863][T13443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.997056][ T24] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 663.011812][ T24] usb 6-1: config 0 has no interface number 0 [ 663.018419][ T24] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 663.031918][ T24] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 663.042997][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.060064][ T24] usb 6-1: Product: syz [ 663.069998][ T24] usb 6-1: Manufacturer: syz [ 663.082529][ T24] usb 6-1: SerialNumber: syz [ 663.101717][ T24] usb 6-1: config 0 descriptor?? [ 663.123013][ T24] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 663.151927][ T24] em28xx 6-1:0.132: Video interface 132 found: [ 663.232406][ T10] em28xx 2-1:0.132: failed to read eeprom (err=-110) [ 663.251519][ T10] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 663.420603][T13443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.464226][T13443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.524125][ T24] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 663.548640][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 663.565486][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 663.613011][ T10] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 663.627588][ T10] em28xx 2-1:0.132: analog set to bulk mode. [ 663.644468][ T5701] em28xx 2-1:0.132: Registering V4L2 extension [ 663.665904][ T10] usb 2-1: USB disconnect, device number 71 [ 663.697556][ T10] em28xx 2-1:0.132: Disconnecting em28xx [ 663.861167][ T5701] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 663.891390][ T5701] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 663.928078][ T5701] em28xx 2-1:0.132: No AC97 audio processor [ 663.933890][T13462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.955267][ T5701] usb 2-1: Decoder not found [ 663.969514][T13462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.000018][ T5701] em28xx 2-1:0.132: failed to create media graph [ 664.030025][ T5701] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 664.077649][ T5701] em28xx 2-1:0.132: Remote control support is not available for this card. [ 664.172725][ T10] em28xx 2-1:0.132: Closing input extension [ 664.206353][T13462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.222712][T13462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.261734][ T24] em28xx 6-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 664.292921][ T24] em28xx 6-1:0.132: failed to read eeprom (err=-5) [ 664.305423][ T24] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 664.369955][ T10] em28xx 2-1:0.132: Freeing device [ 664.412763][ T24] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 664.497098][ T24] em28xx 6-1:0.132: analog set to bulk mode. [ 664.510032][ T804] em28xx 6-1:0.132: Registering V4L2 extension [ 664.527962][ T24] usb 6-1: USB disconnect, device number 55 [ 664.558241][ T24] em28xx 6-1:0.132: Disconnecting em28xx [ 664.808703][ T804] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 664.830638][ T804] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 664.857442][ T804] em28xx 6-1:0.132: No AC97 audio processor [ 664.881533][ T804] usb 6-1: Decoder not found [ 664.898769][ T804] em28xx 6-1:0.132: failed to create media graph [ 664.935216][ T804] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 664.970966][ T804] em28xx 6-1:0.132: Remote control support is not available for this card. [ 665.017361][ T24] em28xx 6-1:0.132: Closing input extension [ 665.079628][ T24] em28xx 6-1:0.132: Freeing device [ 665.473868][T13515] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 665.682422][ T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 666.104944][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 666.154189][ T5701] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 666.225497][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 666.236758][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 666.249445][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 666.262488][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 666.275379][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 666.295043][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 666.305542][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.352394][ T5701] usb 2-1: Using ep0 maxpacket: 16 [ 666.361815][ T5701] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 666.371565][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.379958][ T5701] usb 2-1: Product: syz [ 666.384606][ T5701] usb 2-1: Manufacturer: syz [ 666.389288][ T5701] usb 2-1: SerialNumber: syz [ 666.404060][ T5701] usb 2-1: config 0 descriptor?? [ 666.416933][ T5701] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 666.637049][ T5615] Bluetooth: hci6: sending frame failed (-49) [ 666.644160][T11010] Bluetooth: hci6: Entering manufacturer mode failed (-49) [ 667.123448][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 667.129006][ T10] usbtmc 4-1:16.0: can't read capabilities [ 667.302682][ T5701] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 667.311169][ T5701] visor 2-1:0.0: probe with driver visor failed with error -71 [ 667.326293][ T5701] usb 2-1: USB disconnect, device number 72 [ 667.376421][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 667.385484][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 667.394522][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 667.403564][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 667.412622][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 667.421670][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 667.430699][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 667.439735][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 667.448763][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 667.459230][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 667.468291][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 667.478271][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 667.487340][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 667.496369][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 667.505402][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 667.514432][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 667.539085][ T5701] usb 4-1: USB disconnect, device number 86 [ 667.897768][T11010] Bluetooth: hci5: command 0xfc11 tx timeout [ 667.904243][ T4928] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 669.297019][T13547] comedi comedi2: pcl818: I/O base address or length out of range [ 669.622320][ T5701] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 669.785261][ T5701] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 669.802951][ T5701] usb 1-1: config 0 has no interface number 0 [ 669.821140][ T5701] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 669.852131][ T5701] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.876448][ T5701] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 669.905869][ T5701] usb 1-1: config 0 interface 1 has no altsetting 0 [ 669.922728][ T5701] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 669.942448][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.965463][ T5701] usb 1-1: config 0 descriptor?? [ 670.626147][ T5701] usbhid 1-1:0.1: can't add hid device: -71 [ 670.635393][ T5701] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 670.646507][ T5701] usb 1-1: USB disconnect, device number 93 [ 670.882335][ T804] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 671.053920][ T804] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 671.065219][ T804] usb 4-1: config 1 interface 0 has no altsetting 0 [ 671.074294][ T804] usb 4-1: string descriptor 0 read error: -22 [ 671.080575][ T804] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 671.089717][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.192985][ T5802] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 671.392579][ T5802] usb 6-1: Using ep0 maxpacket: 16 [ 671.403511][ T5802] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 671.412304][ T5701] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 671.420774][ T5802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.431252][ T5802] usb 6-1: Product: syz [ 671.435823][ T5802] usb 6-1: Manufacturer: syz [ 671.440695][ T5802] usb 6-1: SerialNumber: syz [ 671.466848][ T5802] usb 6-1: config 0 descriptor?? [ 671.480627][ T5802] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 671.507644][T13565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.531013][T13565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.553989][ T5701] usb 1-1: device descriptor read/64, error -71 [ 671.582075][ T804] usbhid 4-1:1.0: can't add hid device: -71 [ 671.588881][ T804] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 671.614382][ T804] usb 4-1: USB disconnect, device number 87 [ 671.792333][ T5701] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 671.932466][ T5701] usb 1-1: device descriptor read/64, error -71 [ 671.954930][ T5802] usb 6-1: clie_3_5_startup: get interface number failed: -71 [ 671.972645][ T5802] visor 6-1:0.0: probe with driver visor failed with error -71 [ 672.021093][ T5802] usb 6-1: USB disconnect, device number 56 [ 672.050984][ T5701] usb usb1-port1: attempt power cycle [ 672.602308][ T5701] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 672.623697][ T5701] usb 1-1: device descriptor read/8, error -71 [ 672.673840][ T5802] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 672.833982][ T5802] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.844248][ T5802] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 672.853415][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.862797][ T5802] usb 4-1: config 0 descriptor?? [ 672.871701][ T5802] pwc: Askey VC010 type 2 USB webcam detected. [ 672.882379][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 672.890035][ T5701] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 672.912702][ T5701] usb 1-1: device descriptor read/8, error -71 [ 673.023935][ T5701] usb usb1-port1: unable to enumerate USB device [ 673.043662][ T10] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 673.055081][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 673.064430][ T10] usb 6-1: string descriptor 0 read error: -22 [ 673.074092][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 673.083373][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.147042][T13589] comedi comedi2: pcl818: I/O base address or length out of range [ 673.281667][ T5802] pwc: recv_control_msg error -32 req 02 val 2b00 [ 673.298541][ T5802] pwc: recv_control_msg error -32 req 02 val 2700 [ 673.309274][ T5802] pwc: recv_control_msg error -32 req 02 val 2c00 [ 673.326353][ T5802] pwc: recv_control_msg error -32 req 04 val 1000 [ 673.354952][ T5802] pwc: recv_control_msg error -32 req 04 val 1300 [ 673.373064][ T5802] pwc: recv_control_msg error -32 req 04 val 1400 [ 673.394763][ T5802] pwc: recv_control_msg error -32 req 02 val 2000 [ 673.415642][ T5802] pwc: recv_control_msg error -32 req 02 val 2100 [ 673.436130][ T5802] pwc: recv_control_msg error -32 req 04 val 1500 [ 673.452911][ T5802] pwc: recv_control_msg error -32 req 02 val 2500 [ 673.518421][T13585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.533860][T13585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.565587][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 673.578941][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 673.595001][ T10] usb 6-1: USB disconnect, device number 57 [ 673.674072][ T5802] pwc: recv_control_msg error -71 req 02 val 2600 [ 673.684781][ T5802] pwc: recv_control_msg error -71 req 02 val 2900 [ 673.692216][ T5802] pwc: recv_control_msg error -71 req 02 val 2800 [ 674.113830][ T5802] pwc: recv_control_msg error -71 req 04 val 1100 [ 674.123926][ T5802] pwc: recv_control_msg error -71 req 04 val 1200 [ 674.150715][ T5802] pwc: Registered as video103. [ 674.173513][ T5802] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input52 [ 674.188397][ T5802] usb 4-1: USB disconnect, device number 88 [ 675.252299][ T10] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 675.402350][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 675.419450][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 675.442169][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.458859][ T10] usb 4-1: Product: syz [ 675.467155][ T10] usb 4-1: Manufacturer: syz [ 675.477975][ T10] usb 4-1: SerialNumber: syz [ 675.496015][ T10] usb 4-1: config 0 descriptor?? [ 675.512009][ T10] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 676.524865][ T10] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 676.538395][ T10] visor 4-1:0.0: probe with driver visor failed with error -71 [ 676.556246][ T10] usb 4-1: USB disconnect, device number 89 [ 677.102415][ T5802] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 677.254922][ T5802] usb 2-1: device descriptor read/64, error -71 [ 677.522994][ T5802] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 677.672531][ T5802] usb 2-1: device descriptor read/64, error -71 [ 677.784864][ T5802] usb usb2-port1: attempt power cycle [ 678.112343][T11010] Bluetooth: hci5: command 0xfc11 tx timeout [ 678.120351][ T4928] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 678.185163][ T5802] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 678.212707][ T5802] usb 2-1: device descriptor read/8, error -71 [ 678.452404][ T5802] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 678.474226][ T5802] usb 2-1: device descriptor read/8, error -71 [ 678.583622][ T5802] usb usb2-port1: unable to enumerate USB device [ 678.912374][ T10] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 679.073599][ T10] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 679.084742][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 679.110563][ T10] usb 6-1: string descriptor 0 read error: -22 [ 679.117061][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 679.126310][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.547523][T13657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.557984][T13657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.581600][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 679.590481][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 679.600833][ T10] usb 6-1: USB disconnect, device number 58 [ 679.752486][ T5701] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 679.912827][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 679.912888][ T5802] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 679.920378][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.936878][ T5701] usb 4-1: language id specifier not provided by device, defaulting to English [ 679.949615][ T5701] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 679.960532][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.968637][ T5701] usb 4-1: Product: syz [ 679.973191][ T5701] usb 4-1: Manufacturer: 㫲嵲䐈╼㹪崞⋔茯莔시芥鍪󐇢㿴 [ 679.981829][ T5701] usb 4-1: SerialNumber: syz [ 680.072364][ T5802] usb 1-1: Using ep0 maxpacket: 32 [ 680.082029][ T5802] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 680.092168][ T5802] usb 1-1: config 0 has no interface number 0 [ 680.098833][ T5802] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 680.111561][ T5802] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 680.124917][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.140174][ T5802] usb 1-1: Product: syz [ 680.161820][ T5802] usb 1-1: Manufacturer: syz [ 680.177618][ T5802] usb 1-1: SerialNumber: syz [ 680.193347][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.202911][ T5802] usb 1-1: config 0 descriptor?? [ 680.212787][ T5802] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 680.222764][ T5802] em28xx 1-1:0.132: Video interface 132 found: [ 680.473409][ T5701] usb 4-1: No union descriptors [ 680.488057][ T5701] usb 4-1: USB disconnect, device number 90 [ 680.492374][ T24] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 680.618632][ T5802] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 680.632344][ T804] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 680.665123][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 680.677241][ T24] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 680.696462][ T24] usb 6-1: config 0 has no interface number 0 [ 680.713215][ T24] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 680.735228][ T24] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 680.754088][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.773264][ T24] usb 6-1: Product: syz [ 680.782346][ T24] usb 6-1: Manufacturer: syz [ 680.792414][ T24] usb 6-1: SerialNumber: syz [ 680.799860][ T804] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 680.813706][ T24] usb 6-1: config 0 descriptor?? [ 680.833299][ T804] usb 2-1: config 1 interface 0 has no altsetting 0 [ 680.841989][ T24] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 680.862421][ T24] em28xx 6-1:0.132: Video interface 132 found: [ 680.872573][ T5701] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 680.880774][ T804] usb 2-1: string descriptor 0 read error: -22 [ 680.887384][ T804] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 680.902275][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.004108][ T5701] usb 4-1: device descriptor read/64, error -71 [ 681.059670][T13664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.072976][T13664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.242938][ T24] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 681.243746][ T5701] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 681.371806][T13676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.372393][ T5802] em28xx 1-1:0.132: failed to read eeprom (err=-110) [ 681.380563][T13676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.389702][ T5802] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 681.403955][ T5701] usb 4-1: device descriptor read/64, error -71 [ 681.639927][T13664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.661890][ T804] usbhid 2-1:1.0: can't add hid device: -71 [ 681.695851][ T804] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 681.710931][T13675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.724728][T13664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.730003][ T5701] usb usb4-port1: attempt power cycle [ 681.743684][T13675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.759082][ T804] usb 2-1: USB disconnect, device number 77 [ 681.822283][ T5802] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 681.830190][ T5802] em28xx 1-1:0.132: analog set to bulk mode. [ 681.836353][ T5804] em28xx 1-1:0.132: Registering V4L2 extension [ 681.859127][ T5802] usb 1-1: USB disconnect, device number 98 [ 681.875904][ T5802] em28xx 1-1:0.132: Disconnecting em28xx [ 681.951771][ T5804] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 681.962033][ T5804] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 681.970745][ T5804] em28xx 1-1:0.132: No AC97 audio processor [ 681.979779][T13675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.988727][ T5804] usb 1-1: Decoder not found [ 681.989693][T13675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.994398][ T5804] em28xx 1-1:0.132: failed to create media graph [ 682.009236][ T5804] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 682.020189][ T24] em28xx 6-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 682.029562][ T24] em28xx 6-1:0.132: failed to read eeprom (err=-5) [ 682.036711][ T5804] em28xx 1-1:0.132: Remote control support is not available for this card. [ 682.046124][ T24] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 682.055114][ T5802] em28xx 1-1:0.132: Closing input extension [ 682.063713][ T5802] em28xx 1-1:0.132: Freeing device [ 682.072341][ T5701] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 682.092750][ T5701] usb 4-1: device descriptor read/8, error -71 [ 682.151976][ T24] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 682.174930][ T24] em28xx 6-1:0.132: analog set to bulk mode. [ 682.181950][ T5804] em28xx 6-1:0.132: Registering V4L2 extension [ 682.208289][ T24] usb 6-1: USB disconnect, device number 59 [ 682.225660][ T24] em28xx 6-1:0.132: Disconnecting em28xx [ 682.360518][ T5804] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 682.395181][ T5804] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 682.420447][ T5804] em28xx 6-1:0.132: No AC97 audio processor [ 682.432914][ T5701] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 682.441855][ T5804] usb 6-1: Decoder not found [ 682.447816][ T5804] em28xx 6-1:0.132: failed to create media graph [ 682.458177][ T5804] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 682.467285][ T5804] em28xx 6-1:0.132: Remote control support is not available for this card. [ 682.472843][ T5701] usb 4-1: device descriptor read/8, error -71 [ 682.476572][ T24] em28xx 6-1:0.132: Closing input extension [ 682.500961][ T24] em28xx 6-1:0.132: Freeing device [ 682.584601][ T5701] usb usb4-port1: unable to enumerate USB device [ 682.642938][ T2238] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 682.779296][ T30] audit: type=1400 audit(1778604170.054:681): avc: denied { write } for pid=13705 comm="syz.3.2082" path="socket:[39218]" dev="sockfs" ino=39218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 682.824060][ T2238] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 682.839031][ T2238] usb 2-1: config 0 has no interface number 0 [ 682.845746][ T2238] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 682.858941][ T2238] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.869490][ T2238] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 682.883663][ T2238] usb 2-1: config 0 interface 1 has no altsetting 0 [ 682.890397][ T2238] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 682.899912][ T2238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.912130][ T2238] usb 2-1: config 0 descriptor?? [ 682.923280][ T24] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 683.092293][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 683.107106][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.140318][ T24] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 683.156070][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.164399][ T24] usb 6-1: Product: syz [ 683.169587][ T24] usb 6-1: Manufacturer: syz [ 683.174773][ T24] usb 6-1: SerialNumber: syz [ 683.209098][ T24] usb 6-1: config 0 descriptor?? [ 683.530491][ T24] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 683.565990][ T24] usb 6-1: selecting invalid altsetting 1 [ 683.573158][ T24] gspca_stk014: init reg: 0x00 [ 683.578685][ T24] stk014 6-1:0.0: probe with driver stk014 failed with error -5 [ 683.679592][ T2238] usbhid 2-1:0.1: can't add hid device: -71 [ 683.696569][ T2238] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 683.726144][ T2238] usb 2-1: USB disconnect, device number 78 [ 683.802361][ T5802] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 683.865919][ T24] usb 6-1: USB disconnect, device number 60 [ 684.399325][T13723] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 685.682334][ T5804] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 685.772310][ T2238] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 685.844362][ T5804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.856220][ T5804] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 685.866124][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.878765][ T5804] usb 6-1: config 0 descriptor?? [ 685.898093][ T5804] pwc: Askey VC010 type 2 USB webcam detected. [ 685.942304][ T2238] usb 2-1: Using ep0 maxpacket: 32 [ 685.957451][ T2238] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 685.970612][ T2238] usb 2-1: config 0 has no interface number 0 [ 685.980497][ T2238] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 686.004729][ T2238] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 686.016206][ T2238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.024639][ T2238] usb 2-1: Product: syz [ 686.028938][ T2238] usb 2-1: Manufacturer: syz [ 686.047812][ T2238] usb 2-1: SerialNumber: syz [ 686.055868][ T2238] usb 2-1: config 0 descriptor?? [ 686.070139][ T2238] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 686.080392][ T2238] em28xx 2-1:0.132: Video interface 132 found: [ 686.386181][ T5804] pwc: recv_control_msg error -32 req 02 val 2b00 [ 686.454218][ T5804] pwc: recv_control_msg error -32 req 02 val 2700 [ 686.463338][ T5804] pwc: recv_control_msg error -32 req 02 val 2c00 [ 686.475758][ T5804] pwc: recv_control_msg error -32 req 04 val 1000 [ 686.501757][ T5804] pwc: recv_control_msg error -32 req 04 val 1300 [ 686.516008][T13742] fuse: fd is not a fuse device [ 686.529427][ T5804] pwc: recv_control_msg error -32 req 04 val 1400 [ 686.543006][ T5804] pwc: recv_control_msg error -32 req 02 val 2000 [ 686.551116][ T5804] pwc: recv_control_msg error -32 req 02 val 2100 [ 686.564145][ T5804] pwc: recv_control_msg error -32 req 04 val 1500 [ 686.564738][T13749] syzkaller0: entered promiscuous mode [ 686.586182][ T5804] pwc: recv_control_msg error -32 req 02 val 2500 [ 686.596800][T13749] syzkaller0: entered allmulticast mode [ 686.663665][ T2238] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 686.799562][ T5804] pwc: recv_control_msg error -71 req 02 val 2600 [ 686.811880][ T5804] pwc: recv_control_msg error -71 req 02 val 2900 [ 686.833975][ T5804] pwc: recv_control_msg error -71 req 02 val 2800 [ 686.851212][ T5804] pwc: recv_control_msg error -71 req 04 val 1100 [ 686.877166][ T5804] pwc: recv_control_msg error -71 req 04 val 1200 [ 686.898504][ T5804] pwc: Registered as video103. [ 686.917346][ T5804] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input54 [ 686.966210][ T5804] usb 6-1: USB disconnect, device number 61 [ 687.127597][T13740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.136355][ T5820] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 687.154646][T13740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.229592][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 687.240000][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 687.333945][ T5820] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 687.352357][ T5820] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.423874][ T5820] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 687.433149][ T2238] em28xx 2-1:0.132: failed to read eeprom (err=-110) [ 687.441590][ T2238] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 687.451049][ T5820] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.465821][ T5820] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 687.475316][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 687.483396][ T5820] usb 1-1: Product: syz [ 687.487682][ T5820] usb 1-1: Manufacturer: syz [ 687.499584][ T5820] cdc_wdm 1-1:1.0: skipping garbage [ 687.507980][ T5820] cdc_wdm 1-1:1.0: skipping garbage [ 687.515211][ T5820] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 687.730758][ T5820] cdc_wdm 1-1:1.0: Unknown control protocol [ 688.083290][T13740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.105628][ T5804] usb 1-1: USB disconnect, device number 99 [ 688.114594][T13740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.212443][ T2238] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 688.227796][ T2238] em28xx 2-1:0.132: analog set to bulk mode. [ 688.238537][ T5820] em28xx 2-1:0.132: Registering V4L2 extension [ 688.252591][ T2238] usb 2-1: USB disconnect, device number 79 [ 688.273882][ T2238] em28xx 2-1:0.132: Disconnecting em28xx [ 688.360566][ T5820] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 688.368406][ T5820] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 688.375573][ T5820] em28xx 2-1:0.132: No AC97 audio processor [ 688.382358][ T5820] usb 2-1: Decoder not found [ 688.387116][ T5820] em28xx 2-1:0.132: failed to create media graph [ 688.393581][ T5820] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 688.406825][ T5820] em28xx 2-1:0.132: Remote control support is not available for this card. [ 688.416713][ T2238] em28xx 2-1:0.132: Closing input extension [ 688.434183][ T2238] em28xx 2-1:0.132: Freeing device [ 688.593488][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 688.762326][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 688.769063][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.779841][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 688.789055][ T10] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 688.800063][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.826292][ T10] usb 4-1: config 0 descriptor?? [ 689.262299][ T10] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 689.412347][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 689.418875][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 689.439527][ T10] usb 1-1: config 0 has no interface number 0 [ 689.449206][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 689.463185][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 689.472621][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.480649][ T10] usb 1-1: Product: syz [ 689.516369][ T10] usb 1-1: Manufacturer: syz [ 689.685798][ T10] usb 1-1: SerialNumber: syz [ 689.692359][ T5804] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 689.859703][ T10] usb 1-1: config 0 descriptor?? [ 689.873395][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 689.883202][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 689.894791][ T5804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.905979][ T5804] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 689.915131][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.925094][ T5804] usb 2-1: config 0 descriptor?? [ 689.933778][ T5804] pwc: Askey VC010 type 2 USB webcam detected. [ 690.277262][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 690.334578][ T5804] pwc: recv_control_msg error -32 req 02 val 2b00 [ 690.341596][ T5804] pwc: recv_control_msg error -32 req 02 val 2700 [ 690.349435][ T5804] pwc: recv_control_msg error -32 req 02 val 2c00 [ 690.356933][ T5804] pwc: recv_control_msg error -32 req 04 val 1000 [ 690.364175][ T5804] pwc: recv_control_msg error -32 req 04 val 1300 [ 690.371109][ T5804] pwc: recv_control_msg error -32 req 04 val 1400 [ 690.378432][ T5804] pwc: recv_control_msg error -32 req 02 val 2000 [ 690.385596][ T5804] pwc: recv_control_msg error -32 req 02 val 2100 [ 690.392690][ T5804] pwc: recv_control_msg error -32 req 04 val 1500 [ 690.399717][ T5804] pwc: recv_control_msg error -32 req 02 val 2500 [ 690.610822][ T5804] pwc: recv_control_msg error -71 req 02 val 2600 [ 690.624854][ T5804] pwc: recv_control_msg error -71 req 02 val 2900 [ 690.637945][ T5804] pwc: recv_control_msg error -71 req 02 val 2800 [ 690.651370][ T5804] pwc: recv_control_msg error -71 req 04 val 1100 [ 690.665480][ T5804] pwc: recv_control_msg error -71 req 04 val 1200 [ 690.683929][ T5804] pwc: Registered as video103. [ 690.691633][T13786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.705265][ T5804] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input55 [ 690.726162][T13786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.746113][ T5804] usb 2-1: USB disconnect, device number 80 [ 690.760799][ T10] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 690.781662][ T24] libceph: connect (1)[c::]:6789 error -101 [ 690.788718][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 690.806584][ T10] em28xx 1-1:0.132: board has no eeprom [ 690.809393][ T24] libceph: connect (1)[c::]:6789 error -101 [ 690.813984][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 691.042289][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 691.050178][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 691.056296][ T5701] em28xx 1-1:0.132: Registering V4L2 extension [ 691.094500][ T24] libceph: connect (1)[c::]:6789 error -101 [ 691.103578][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 691.203191][T13786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.214403][T13786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.227795][T13786] trusted_key: encrypted_key: insufficient parameters specified [ 691.240528][ T5701] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 691.250269][ T10] usb 1-1: USB disconnect, device number 100 [ 691.256689][ T5701] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 691.266535][ T10] em28xx 1-1:0.132: Disconnecting em28xx [ 691.305223][ T5701] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 691.317295][ T5701] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 691.324579][ T5701] em28xx 1-1:0.132: No AC97 audio processor [ 691.331439][ T5701] usb 1-1: Decoder not found [ 691.336117][ T5701] em28xx 1-1:0.132: failed to create media graph [ 691.342560][ T5701] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 691.353691][ T5701] em28xx 1-1:0.132: Remote control support is not available for this card. [ 691.369325][T13798] ceph: No mds server is up or the cluster is laggy [ 691.372884][ T10] em28xx 1-1:0.132: Closing input extension [ 691.385858][ T5701] usb 4-1: USB disconnect, device number 96 [ 691.431633][ T10] em28xx 1-1:0.132: Freeing device [ 691.463818][ T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 691.624507][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 691.635153][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.646516][ T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 691.655895][ T24] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 691.667357][ T24] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 691.688974][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 691.702766][ T24] usb 2-1: config 1 interface 1 has no altsetting 0 [ 691.713940][ T24] usb 2-1: string descriptor 0 read error: -22 [ 691.720958][ T24] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 691.730600][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.772408][ T5820] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 691.872311][ T5701] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 691.934188][ T5820] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 691.943159][ T5820] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.954382][ T5820] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 691.963657][ T5820] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.978793][ T5820] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 691.990757][ T30] audit: type=1400 audit(1778604179.274:682): avc: denied { mount } for pid=13807 comm="syz.1.2113" name="/" dev="hugetlbfs" ino=39442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 692.013840][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 692.022269][ T5820] usb 6-1: Product: syz [ 692.026454][ T5820] usb 6-1: Manufacturer: syz [ 692.041023][ T5820] cdc_wdm 6-1:1.0: skipping garbage [ 692.052279][ T5820] cdc_wdm 6-1:1.0: skipping garbage [ 692.063982][ T5820] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 692.070084][ T5820] cdc_wdm 6-1:1.0: Unknown control protocol [ 693.049792][ T24] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 693.171053][ T24] usb 2-1: USB disconnect, device number 81 [ 693.482424][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 693.642418][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 693.658788][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.686424][ T10] usb 1-1: language id specifier not provided by device, defaulting to English [ 693.720426][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 693.732200][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.741430][ T10] usb 1-1: Product: syz [ 693.746708][ T10] usb 1-1: Manufacturer: 㫲嵲䐈╼㹪崞⋔茯莔시芥鍪󐇢㿴 [ 693.758592][ T10] usb 1-1: SerialNumber: syz [ 694.221629][ T10] usb 1-1: No union descriptors [ 694.265232][ T10] usb 1-1: USB disconnect, device number 101 [ 694.536960][ T5802] usb 6-1: USB disconnect, device number 62 [ 694.634141][ T10] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 694.665813][ T30] audit: type=1400 audit(1778604181.944:683): avc: denied { name_bind } for pid=13834 comm="syz.3.2120" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 694.852555][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 694.870818][ T10] usb 1-1: config 10 has an invalid interface number: 5 but max is 1 [ 694.901157][ T10] usb 1-1: config 10 contains an unexpected descriptor of type 0x1, skipping [ 694.927704][ T10] usb 1-1: config 10 has an invalid interface number: 200 but max is 1 [ 694.954307][ T10] usb 1-1: config 10 has no interface number 0 [ 694.971686][ T10] usb 1-1: config 10 has no interface number 1 [ 694.987854][ T10] usb 1-1: config 10 interface 5 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 695.019962][ T10] usb 1-1: config 10 interface 5 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 695.049447][ T10] usb 1-1: config 10 interface 5 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 695.064668][ T10] usb 1-1: config 10 interface 5 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 695.076098][ T10] usb 1-1: config 10 interface 5 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 695.087475][ T10] usb 1-1: config 10 interface 200 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 695.099261][ T10] usb 1-1: config 10 interface 200 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 695.110362][ T10] usb 1-1: config 10 interface 200 has no altsetting 0 [ 695.126443][ T10] usb 1-1: New USB device found, idVendor=19d2, idProduct=1270, bcdDevice=35.b1 [ 695.136346][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.145976][ T10] usb 1-1: Product: ⥩ᗤ箩츽贈स㤙痖둺ࠏ滖れ䄢ࠌ胆髟尻᝜韰驸穨謟ꃈ嗦ﲎ弣鬋锺䢁ꪖ仢㐣ᡇ糸ሢ퐗粝찵获勺쪃彾☚ᚿ䣳쭊鋤鹳⏋榕켍귇踱炟㒯儲 [ 695.167880][ T10] usb 1-1: Manufacturer: 巓苑နቜ侎▶Ꝙ딬ᡍꕙళ䙢赀芑ἍꟐ茆饗ꐐ箼ⅎ [ 695.178338][ T10] usb 1-1: SerialNumber: syz [ 695.207997][ T10] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 695.217907][ T10] usb 1-1: no configuration chosen from 1 choice [ 695.712329][ T5701] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 695.763143][ T5802] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 695.864500][ T5701] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 695.888075][ T5701] usb 2-1: config 1 interface 0 has no altsetting 0 [ 695.906315][ T5701] usb 2-1: string descriptor 0 read error: -22 [ 695.915449][ T5701] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 695.924623][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.932331][ T5802] usb 4-1: Using ep0 maxpacket: 16 [ 695.943767][ T5802] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.963802][ T5802] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 695.981890][ T5802] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 696.002982][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.023127][ T5802] usb 4-1: config 0 descriptor?? [ 696.174235][T13865] trusted_key: encrypted_key: insufficient parameters specified [ 696.227940][ T2238] usb 1-1: USB disconnect, device number 102 [ 696.306070][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2130'. [ 696.358090][T13845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.371525][T13845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.397522][ T5701] usbhid 2-1:1.0: can't add hid device: -71 [ 696.410578][ T5701] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 696.428483][ T5701] usb 2-1: USB disconnect, device number 82 [ 698.002353][ T5802] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 698.162332][ T5802] usb 1-1: Using ep0 maxpacket: 8 [ 698.172960][ T5802] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 698.181557][ T5802] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 698.191474][ T5802] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 698.201433][ T5802] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 698.261303][ T5802] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.304463][ T5802] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 698.314056][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.592913][T13899] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 698.613275][ T24] usb 4-1: USB disconnect, device number 98 [ 699.041815][ T5802] usb 1-1: GET_CAPABILITIES returned 0 [ 699.058321][ T5802] usbtmc 1-1:16.0: can't read capabilities [ 699.102334][ T24] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 699.264166][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.287878][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 699.381166][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.395056][ T24] usb 6-1: config 0 descriptor?? [ 699.403711][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 699.412793][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 699.421869][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 699.430934][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 699.439990][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 699.449040][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 699.458084][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 699.467120][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 699.476144][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 699.569881][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 699.609273][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 699.618329][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 699.627383][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 699.636417][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 699.645444][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 699.687497][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 699.696605][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 699.779923][ T5701] usb 1-1: USB disconnect, device number 103 [ 699.869011][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 699.883511][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 699.890798][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 699.898458][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 699.906699][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 699.914837][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 699.924007][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 699.933347][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 699.941686][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 699.949560][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 699.962328][ T804] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 700.114005][ T804] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 700.122424][ T804] usb 2-1: config 0 has no interface number 0 [ 700.128969][ T804] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 700.141769][ T804] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.155087][ T804] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 700.171541][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 700.186495][ T804] usb 2-1: config 0 interface 1 has no altsetting 0 [ 700.186664][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 700.201690][ T804] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 700.213853][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 700.223352][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 700.231269][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 700.238497][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.260836][ T804] usb 2-1: config 0 descriptor?? [ 700.315411][ T24] pwc: Registered as video103. [ 700.341558][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input56 [ 700.429812][ T24] usb 6-1: USB disconnect, device number 63 [ 701.099283][ T804] usbhid 2-1:0.1: can't add hid device: -71 [ 701.105712][ T804] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 701.143630][ T804] usb 2-1: USB disconnect, device number 83 [ 701.526103][ T24] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 701.682388][ T804] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 702.072479][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 702.081652][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 702.108314][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 702.132837][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 702.154010][ T804] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 702.173152][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 702.183436][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.190997][T13941] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 702.191531][ T804] usb 1-1: Product: syz [ 702.204138][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.218777][ T804] usb 1-1: Manufacturer: syz [ 702.224650][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 702.234282][ T804] usb 1-1: SerialNumber: syz [ 702.246338][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.337144][ T804] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 702.526468][ T5804] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 702.639775][ T30] audit: type=1400 audit(1778604189.914:684): avc: denied { read } for pid=13944 comm="syz.3.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 703.224384][ T5701] usb 1-1: USB disconnect, device number 104 [ 703.853635][ T5804] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 703.885964][ T5804] ath9k_htc: Failed to initialize the device [ 703.919419][ T5701] usb 1-1: ath9k_htc: USB layer deinitialized [ 704.725338][ T24] usb 6-1: usb_control_msg returned -71 [ 704.751965][ T24] usbtmc 6-1:16.0: can't read capabilities [ 704.800570][ T24] usb 6-1: USB disconnect, device number 64 [ 704.909067][ T30] audit: type=1400 audit(1778604192.184:685): avc: denied { set_context_mgr } for pid=13965 comm="syz.5.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 704.952990][ T30] audit: type=1400 audit(1778604192.234:686): avc: denied { call } for pid=13965 comm="syz.5.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 705.912429][T13983] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 706.258276][T13981] comedi comedi2: pcl818: I/O base address or length out of range [ 706.295672][ T804] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 706.552317][ T804] usb 1-1: Using ep0 maxpacket: 16 [ 706.563961][ T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.703397][ T804] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 707.139417][ T804] usb 1-1: config 0 interface 0 has no altsetting 0 [ 707.146189][ T804] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 707.155356][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.175790][ T804] usb 1-1: config 0 descriptor?? [ 707.225444][ T804] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 707.392407][ T4928] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 707.401048][T11010] Bluetooth: hci5: command 0xfc11 tx timeout [ 707.560958][ T2238] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 707.736409][ T2238] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 707.752315][ T2238] usb 2-1: config 0 has no interface number 0 [ 707.758515][ T2238] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 707.769916][ T2238] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.781712][ T2238] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 707.816083][ T2238] usb 2-1: config 0 interface 1 has no altsetting 0 [ 707.838395][ T2238] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 707.857883][ T2238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.883649][ T2238] usb 2-1: config 0 descriptor?? [ 709.147049][ T2238] usbhid 2-1:0.1: can't add hid device: -71 [ 709.157305][ T2238] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 709.167992][ T2238] usb 2-1: USB disconnect, device number 84 [ 709.280118][ T10] usb 1-1: USB disconnect, device number 105 [ 709.382488][ T5701] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 709.532285][ T5701] usb 6-1: Using ep0 maxpacket: 32 [ 709.538736][ T5701] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 709.547184][ T5701] usb 6-1: config 0 has no interface number 0 [ 709.553420][ T5701] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 709.564949][ T5701] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 709.574152][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.582145][ T5701] usb 6-1: Product: syz [ 709.586498][ T5701] usb 6-1: Manufacturer: syz [ 709.591094][ T5701] usb 6-1: SerialNumber: syz [ 709.598186][ T5701] usb 6-1: config 0 descriptor?? [ 709.608020][ T5701] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 709.617769][ T5701] em28xx 6-1:0.132: Video interface 132 found: [ 709.886361][T14019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48673 sclass=netlink_route_socket pid=14019 comm=syz.1.2174 [ 710.100567][ T30] audit: type=1400 audit(1778604197.344:687): avc: denied { bind } for pid=14017 comm="syz.1.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 710.331433][ T5701] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 710.679857][ T24] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 710.864810][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 710.874053][ T24] usb 2-1: config 0 has no interface number 0 [ 710.880364][ T24] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 710.894884][ T24] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.905317][ T24] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 710.926649][ T24] usb 2-1: config 0 interface 1 has no altsetting 0 [ 710.933865][ T24] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 710.943542][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.981186][T14033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.983263][ T24] usb 2-1: config 0 descriptor?? [ 711.022649][T14033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.543705][T14033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.588088][ T24] usbhid 2-1:0.1: can't add hid device: -71 [ 711.602591][ T24] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 711.626846][T14033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.656430][ T24] usb 2-1: USB disconnect, device number 85 [ 711.821570][ T5701] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 711.867275][ T5701] em28xx 6-1:0.132: board has no eeprom [ 711.953835][ T5701] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 711.981197][ T5701] em28xx 6-1:0.132: analog set to bulk mode. [ 712.016546][ T5737] em28xx 6-1:0.132: Registering V4L2 extension [ 712.060868][ T5701] usb 6-1: USB disconnect, device number 65 [ 712.091834][ T5615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 712.107576][ T5615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 712.118904][ T5701] em28xx 6-1:0.132: Disconnecting em28xx [ 712.127173][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 712.139565][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 712.148951][ T5615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 712.196530][T11010] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 712.212463][T11010] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 712.227913][T11010] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 712.247795][T11010] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 712.255414][T11010] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 712.450574][ T5737] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 712.485937][ T5737] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 712.510701][ T5737] em28xx 6-1:0.132: No AC97 audio processor [ 712.537717][ T5737] usb 6-1: Decoder not found [ 712.559230][ T5737] em28xx 6-1:0.132: failed to create media graph [ 712.649255][T11010] Bluetooth: hci5: command 0xfc11 tx timeout [ 712.656367][ T4928] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 712.676738][ T5737] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 712.692101][ T5737] em28xx 6-1:0.132: Remote control support is not available for this card. [ 713.123615][ T5701] em28xx 6-1:0.132: Closing input extension [ 713.146224][ T5701] em28xx 6-1:0.132: Freeing device [ 713.505112][ T5701] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 713.624184][ T5834] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.663230][ T5701] usb 6-1: Using ep0 maxpacket: 16 [ 713.682010][ T5701] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.707645][ T5701] usb 6-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 713.722912][ T5701] usb 6-1: config 0 interface 0 has no altsetting 0 [ 713.729549][ T5701] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 713.731259][ T5834] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.739475][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.758780][ T5701] usb 6-1: config 0 descriptor?? [ 713.771320][ T5701] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 713.810060][ T5834] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.827222][T14041] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.834378][T14041] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.841476][T14041] bridge_slave_0: entered allmulticast mode [ 713.848335][T14041] bridge_slave_0: entered promiscuous mode [ 713.854222][ T5737] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 713.863354][T14041] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.870588][T14041] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.878042][T14041] bridge_slave_1: entered allmulticast mode [ 713.884890][T14041] bridge_slave_1: entered promiscuous mode [ 713.894692][ T5834] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.921117][T14041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.932065][T14041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.955094][T14041] team0: Port device team_slave_0 added [ 713.962790][T14041] team0: Port device team_slave_1 added [ 713.991650][T14041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.998744][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.024865][T14041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.037824][T14041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.044992][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.071364][T14041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.083178][ T5737] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 714.094170][ T5737] usb 4-1: config 1 interface 0 has no altsetting 0 [ 714.110028][ T5737] usb 4-1: string descriptor 0 read error: -22 [ 714.121786][ T5737] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 714.130878][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.298239][T14041] hsr_slave_0: entered promiscuous mode [ 714.313241][T14041] hsr_slave_1: entered promiscuous mode [ 714.327088][T14041] debugfs: 'hsr0' already exists in 'hsr' [ 714.334049][T14041] Cannot create hsr debugfs directory [ 714.352815][T11010] Bluetooth: hci6: command tx timeout [ 714.500493][ T5834] bridge_slave_1: left allmulticast mode [ 714.510204][ T5834] bridge_slave_1: left promiscuous mode [ 714.524988][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.536690][T14089] comedi comedi2: pcl818: I/O base address or length out of range [ 714.560949][ T5834] bridge_slave_0: left allmulticast mode [ 714.566928][ T5834] bridge_slave_0: left promiscuous mode [ 714.589299][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.607164][ T5834] dvmrp8: left allmulticast mode [ 714.626378][ T30] audit: type=1400 audit(1778604201.904:688): avc: denied { write } for pid=14075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.657649][T14092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.691642][T14092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.825031][ T30] audit: type=1400 audit(1778604202.104:689): avc: denied { write } for pid=14094 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.912354][ T4928] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 715.006522][ T5834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.018559][ T5834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.035864][ T5834] bond0 (unregistering): Released all slaves [ 715.074066][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 715.089452][ T5737] usbhid 4-1:1.0: can't add hid device: -71 [ 715.116482][ T5737] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 715.136926][ T5834] tipc: Left network mode [ 715.162376][ T5737] usb 4-1: USB disconnect, device number 99 [ 715.578069][ T5834] hsr_slave_0: left promiscuous mode [ 715.595356][ T5834] hsr_slave_1: left promiscuous mode [ 715.607110][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.626584][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.651124][ T5834] veth1_macvtap: left promiscuous mode [ 715.657036][ T5834] veth0_macvtap: left promiscuous mode [ 715.662989][ T5834] veth1_vlan: left promiscuous mode [ 715.669427][ T5834] veth0_vlan: left promiscuous mode [ 716.288848][ T5834] team0 (unregistering): Port device vlan0 removed [ 716.344618][ T1051] smbdirect: ib_dev[syz0] removed [ 716.398696][ T24] usb 6-1: USB disconnect, device number 66 [ 716.438268][ T30] audit: type=1400 audit(1778604203.644:690): avc: denied { write } for pid=14097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.441456][ T4928] Bluetooth: hci6: command tx timeout [ 716.621731][ T30] audit: type=1400 audit(1778604203.894:691): avc: denied { write } for pid=14115 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.456611][ T5834] team0 (unregistering): Port device team_slave_1 removed [ 718.057596][T11010] Bluetooth: hci1: sending frame failed (-49) [ 718.069869][ T4928] Bluetooth: hci1: Entering manufacturer mode failed (-49) [ 718.134929][ T5834] team0 (unregistering): Port device team_slave_0 removed [ 718.227485][ T5802] infiniband syz0: ib_query_port failed (-19) [ 718.512341][T11010] Bluetooth: hci6: command tx timeout [ 719.200137][T14041] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 719.251865][T14041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.266776][ T5804] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 719.272695][T14041] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 719.297734][T14041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.315454][T14041] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 719.346367][T14041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.363273][ T5834] IPVS: stop unused estimator thread 0... [ 719.371018][T14041] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 719.392180][T14041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 719.422414][ T5804] usb 1-1: Using ep0 maxpacket: 16 [ 719.441741][ T5804] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.479084][ T5804] usb 1-1: language id specifier not provided by device, defaulting to English [ 719.506935][ T5804] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 719.518939][T14041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.524780][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.534130][T14041] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.548595][ T5804] usb 1-1: Product: syz [ 719.553020][ T5804] usb 1-1: Manufacturer: 㫲嵲䐈╼㹪崞⋔茯莔시芥鍪󐇢㿴 [ 719.564063][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.567889][ T5804] usb 1-1: SerialNumber: syz [ 719.571902][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.597202][ T30] audit: type=1400 audit(1778604206.834:692): avc: denied { write } for pid=14135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.614713][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.627359][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.725258][ T30] audit: type=1400 audit(1778604207.004:693): avc: denied { write } for pid=14161 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.147715][ T5804] usb 1-1: No union descriptors [ 720.185684][ T5804] usb 1-1: USB disconnect, device number 106 [ 720.512059][ T30] audit: type=1400 audit(1778604207.784:694): avc: denied { write } for pid=14164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.537472][ T5804] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 720.595984][ T4928] Bluetooth: hci6: command tx timeout [ 720.703772][ T5804] usb 1-1: Using ep0 maxpacket: 32 [ 720.899259][ T5804] usb 1-1: config 10 has an invalid interface number: 5 but max is 1 [ 720.900216][T14041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.957804][ T5804] usb 1-1: config 10 contains an unexpected descriptor of type 0x1, skipping [ 720.994877][ T5804] usb 1-1: config 10 has an invalid interface number: 200 but max is 1 [ 721.041318][ T5804] usb 1-1: config 10 has no interface number 0 [ 721.077588][ T5804] usb 1-1: config 10 has no interface number 1 [ 721.124008][ T30] audit: type=1400 audit(1778604208.394:695): avc: denied { write } for pid=14189 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.151320][ T5804] usb 1-1: config 10 interface 5 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 721.247324][T11010] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 721.258101][ T4928] Bluetooth: hci1: command 0xfc11 tx timeout [ 721.338169][ T5804] usb 1-1: config 10 interface 5 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 721.350884][ T5804] usb 1-1: config 10 interface 5 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 721.435559][ T5804] usb 1-1: config 10 interface 5 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 721.491756][ T5804] usb 1-1: config 10 interface 5 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 721.519044][ T5804] usb 1-1: config 10 interface 200 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 721.549426][ T5804] usb 1-1: config 10 interface 200 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 721.580860][ T5804] usb 1-1: config 10 interface 200 has no altsetting 0 [ 721.603484][ T5804] usb 1-1: New USB device found, idVendor=19d2, idProduct=1270, bcdDevice=35.b1 [ 721.622079][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.639744][ T5804] usb 1-1: Product: ⥩ᗤ箩츽贈स㤙痖둺ࠏ滖れ䄢ࠌ胆髟尻᝜韰驸穨謟ꃈ嗦ﲎ弣鬋锺䢁ꪖ仢㐣ᡇ糸ሢ퐗粝찵获勺쪃彾☚ᚿ䣳쭊鋤鹳⏋榕켍귇踱炟㒯儲 [ 721.683768][ T5804] usb 1-1: Manufacturer: 巓苑နቜ侎▶Ꝙ딬ᡍꕙళ䙢赀芑ἍꟐ茆饗ꐐ箼ⅎ [ 721.706860][ T5804] usb 1-1: SerialNumber: syz [ 721.726774][T14041] veth0_vlan: entered promiscuous mode [ 721.728655][ T5804] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 721.738636][T14041] veth1_vlan: entered promiscuous mode [ 721.762740][ T5804] usb 1-1: no configuration chosen from 1 choice [ 721.790569][T14041] veth0_macvtap: entered promiscuous mode [ 721.792353][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 721.810387][T14041] veth1_macvtap: entered promiscuous mode [ 721.841848][T14041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.880860][T14041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.895904][ T1051] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.905577][ T30] audit: type=1400 audit(1778604209.184:696): avc: denied { write } for pid=14195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.915019][ T1051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.962582][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 721.970506][ T1051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.973132][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.032550][ T30] audit: type=1400 audit(1778604209.284:697): avc: denied { write } for pid=14214 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.068044][ T5701] usb 1-1: USB disconnect, device number 107 [ 722.081040][ T1051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.116926][ T24] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 722.133867][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 722.140608][ T24] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 722.166113][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.221712][ T24] usb 4-1: config 0 descriptor?? [ 722.245158][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 722.255210][ T6645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.276274][ T6645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.316545][ T6645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.401351][ T6645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.434686][ T30] audit: type=1400 audit(1778604209.714:698): avc: denied { mounton } for pid=14041 comm="syz-executor" path="/root/syzkaller.BPcpaQ/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 722.460320][ T5802] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 722.484154][ T30] audit: type=1400 audit(1778604209.754:699): avc: denied { mounton } for pid=14041 comm="syz-executor" path="/root/syzkaller.BPcpaQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 722.581937][ T30] audit: type=1400 audit(1778604209.784:700): avc: denied { mounton } for pid=14041 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 722.606843][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2199'. [ 722.618251][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2199'. [ 723.147876][ T5802] usb 2-1: Using ep0 maxpacket: 16 [ 723.245790][ T5802] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 723.357642][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.453225][ T5802] usb 2-1: Product: syz [ 723.516327][ T5802] usb 2-1: Manufacturer: syz [ 723.564325][ T5802] usb 2-1: SerialNumber: syz [ 723.883220][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 723.897575][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 724.018200][ T5802] usb 2-1: config 0 descriptor?? [ 724.043960][ T24] usb 5-1: device descriptor read/64, error -32 [ 724.308031][ T5802] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 724.316288][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 724.522766][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 724.550438][ T5804] usb 4-1: USB disconnect, device number 100 [ 724.564792][ T24] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 724.599356][ T24] usb 5-1: config 0 has no interface number 0 [ 724.617337][ T24] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 724.640314][ T24] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 724.651857][ T5802] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 724.660649][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.668854][ T5802] visor 2-1:0.0: probe with driver visor failed with error -71 [ 724.676973][ T24] usb 5-1: Product: syz [ 724.682895][ T5802] usb 2-1: USB disconnect, device number 86 [ 724.691347][ T24] usb 5-1: Manufacturer: syz [ 724.699699][ T24] usb 5-1: SerialNumber: syz [ 724.713124][ T24] usb 5-1: config 0 descriptor?? [ 724.721232][ T24] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 724.732051][ T24] em28xx 5-1:0.132: Video interface 132 found: [ 724.782351][ T5701] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 724.942318][ T5701] usb 6-1: Using ep0 maxpacket: 32 [ 724.942332][ T5804] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 724.948762][ T5701] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 724.965075][ T5701] usb 6-1: config 0 has no interface number 0 [ 724.971145][ T5701] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 724.983158][ T5701] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 724.995506][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.003553][ T5701] usb 6-1: Product: syz [ 725.007696][ T5701] usb 6-1: Manufacturer: syz [ 725.012347][ T5701] usb 6-1: SerialNumber: syz [ 725.019090][ T5701] usb 6-1: config 0 descriptor?? [ 725.027481][ T5701] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 725.052379][ T5701] em28xx 6-1:0.132: Video interface 132 found: [ 725.114251][ T5804] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 725.123391][ T5804] usb 4-1: config 0 has no interface number 0 [ 725.131112][ T24] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 725.137684][ T5804] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 725.150742][ T5804] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.169261][ T5804] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 725.183327][ T5804] usb 4-1: config 0 interface 1 has no altsetting 0 [ 725.193246][ T5804] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 725.210810][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.225077][ T5804] usb 4-1: config 0 descriptor?? [ 725.818152][ T5701] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 726.122759][ T24] em28xx 5-1:0.132: failed to read eeprom (err=-110) [ 726.176945][ T24] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 726.326444][T14224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.351859][T14224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.372934][T14232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.399152][ T5804] usbhid 4-1:0.1: can't add hid device: -71 [ 726.412986][T14232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.425549][ T5804] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 726.465076][ T5804] usb 4-1: USB disconnect, device number 101 [ 726.503948][ T24] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 726.511869][ T24] em28xx 5-1:0.132: analog set to bulk mode. [ 726.525483][T14230] em28xx 5-1:0.132: Registering V4L2 extension [ 726.541305][ T24] usb 5-1: USB disconnect, device number 23 [ 726.559402][ T24] em28xx 5-1:0.132: Disconnecting em28xx [ 726.642158][T14230] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 726.649740][T14230] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 726.656982][T14230] em28xx 5-1:0.132: No AC97 audio processor [ 726.665084][ T5701] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 726.679072][T14232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.687843][T14230] usb 5-1: Decoder not found [ 726.689060][T14232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.700288][ T5701] em28xx 6-1:0.132: board has no eeprom [ 726.706013][ T5820] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 726.717342][T14230] em28xx 5-1:0.132: failed to create media graph [ 726.727441][T14230] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 726.738395][T14230] em28xx 5-1:0.132: Remote control support is not available for this card. [ 726.751390][ T24] em28xx 5-1:0.132: Closing input extension [ 726.761299][ T24] em28xx 5-1:0.132: Freeing device [ 726.802298][ T5701] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 726.810320][ T5701] em28xx 6-1:0.132: analog set to bulk mode. [ 726.818056][ T5737] em28xx 6-1:0.132: Registering V4L2 extension [ 726.830759][ T5701] usb 6-1: USB disconnect, device number 67 [ 726.839829][ T5701] em28xx 6-1:0.132: Disconnecting em28xx [ 726.873609][ T5820] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 726.890705][ T5820] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.902737][ T5820] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 726.911861][ T5820] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.924191][ T5737] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 726.931306][ T5737] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 726.938870][ T5737] em28xx 6-1:0.132: No AC97 audio processor [ 726.945008][ T5820] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 726.955976][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 726.964394][ T5737] usb 6-1: Decoder not found [ 726.969008][ T5737] em28xx 6-1:0.132: failed to create media graph [ 726.975506][ T5820] usb 1-1: Product: syz [ 726.979697][ T5737] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 726.987021][ T5820] usb 1-1: Manufacturer: syz [ 726.993838][ T5737] em28xx 6-1:0.132: Remote control support is not available for this card. [ 727.003625][ T5701] em28xx 6-1:0.132: Closing input extension [ 727.011024][ T5820] cdc_wdm 1-1:1.0: skipping garbage [ 727.016510][ T5820] cdc_wdm 1-1:1.0: skipping garbage [ 727.024492][ T5701] em28xx 6-1:0.132: Freeing device [ 727.031013][ T5820] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 727.038618][ T5820] cdc_wdm 1-1:1.0: Unknown control protocol [ 727.632985][ T4928] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 728.872317][ T5804] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 729.032276][ T5804] usb 6-1: Using ep0 maxpacket: 8 [ 729.044939][ T5804] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 729.060229][ T5804] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 729.071418][ T5804] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 729.073185][ T5820] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 729.082765][ T5804] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 729.099149][ T5804] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 729.112561][ T5804] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 729.121680][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.274240][ T5820] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 729.282984][ T5820] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.293324][ T5820] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 729.302372][ T5701] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 729.310145][ T5820] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.322738][ T5820] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 729.331920][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 729.340411][ T5820] usb 2-1: Product: syz [ 729.345635][ T5820] usb 2-1: Manufacturer: syz [ 729.358796][ T5820] cdc_wdm 2-1:1.0: skipping garbage [ 729.365557][ T5820] cdc_wdm 2-1:1.0: skipping garbage [ 729.375639][ T5820] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 729.383350][ T5820] cdc_wdm 2-1:1.0: Unknown control protocol [ 729.422837][ T5820] usb 1-1: USB disconnect, device number 108 [ 729.463056][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 729.470740][ T5701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.481626][ T5701] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 729.499962][ T5701] usb 4-1: config 0 interface 0 has no altsetting 0 [ 729.507130][ T5701] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 729.523625][ T5804] usb 6-1: GET_CAPABILITIES returned 0 [ 729.527688][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.531252][ T5804] usbtmc 6-1:16.0: can't read capabilities [ 729.563520][ T5701] usb 4-1: config 0 descriptor?? [ 729.563602][ T24] usb 2-1: USB disconnect, device number 87 [ 729.576225][ T5701] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 729.742043][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.751115][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.760143][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.769160][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.778195][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.792076][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.801160][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.810187][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.819214][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.828253][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.837307][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.851467][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.860940][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.870003][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.879039][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 729.888069][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 729.905930][ T5804] usb 6-1: USB disconnect, device number 68 [ 729.972299][ T5820] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 730.132397][ T5820] usb 1-1: Using ep0 maxpacket: 32 [ 730.142103][ T5820] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 730.152622][ T5820] usb 1-1: config 0 has no interface number 0 [ 730.160282][ T5820] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 730.182728][ T5820] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 730.192894][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.205907][ T5820] usb 1-1: Product: syz [ 730.210073][ T5820] usb 1-1: Manufacturer: syz [ 730.215391][ T5820] usb 1-1: SerialNumber: syz [ 730.227297][ T5820] usb 1-1: config 0 descriptor?? [ 730.235622][ T5820] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 730.245443][ T5820] em28xx 1-1:0.132: Video interface 132 found: [ 730.272313][T11010] Bluetooth: hci1: command 0xfc11 tx timeout [ 730.282030][ T4928] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 730.462347][ T2238] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 730.632481][ T2238] usb 2-1: Using ep0 maxpacket: 16 [ 730.638079][ T5820] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 730.647052][ T2238] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 730.656265][ T2238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.664527][ T2238] usb 2-1: Product: syz [ 730.669553][ T2238] usb 2-1: Manufacturer: syz [ 730.674217][ T2238] usb 2-1: SerialNumber: syz [ 730.680329][ T2238] usb 2-1: config 0 descriptor?? [ 730.688203][ T2238] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 730.733182][ T5701] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 730.893587][ T5701] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 730.901689][ T5701] usb 6-1: config 0 has no interface number 0 [ 730.907829][ T5701] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 730.920707][ T5701] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.931708][ T5701] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 730.944787][ T5701] usb 6-1: config 0 interface 1 has no altsetting 0 [ 730.951430][ T5701] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 730.960565][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.972466][ T5701] usb 6-1: config 0 descriptor?? [ 731.047193][T14286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.056795][T14286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.067320][ T5820] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 731.080526][ T5820] em28xx 1-1:0.132: board has no eeprom [ 731.134167][ T2238] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 731.144166][ T2238] visor 2-1:0.0: probe with driver visor failed with error -71 [ 731.154188][ T2238] usb 2-1: USB disconnect, device number 88 [ 731.362295][ T5820] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 731.510199][ T5820] em28xx 1-1:0.132: analog set to bulk mode. [ 731.532780][T14286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.560237][ T2238] em28xx 1-1:0.132: Registering V4L2 extension [ 731.589451][T14286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.627697][ T5701] usbhid 6-1:0.1: can't add hid device: -71 [ 731.648451][ T5701] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 731.652011][T14286] trusted_key: encrypted_key: insufficient parameters specified [ 731.679722][ T5701] usb 6-1: USB disconnect, device number 69 [ 731.681681][ T24] usb 1-1: USB disconnect, device number 109 [ 731.695288][ T2238] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 731.698261][ T24] em28xx 1-1:0.132: Disconnecting em28xx [ 732.044993][ T2238] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 732.074236][ T2238] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 732.086263][ T2238] em28xx 1-1:0.132: No AC97 audio processor [ 732.107303][ T2238] usb 1-1: Decoder not found [ 732.111966][ T2238] em28xx 1-1:0.132: failed to create media graph [ 732.119565][ T5820] usb 4-1: USB disconnect, device number 102 [ 732.136268][ T2238] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 732.157639][ T2238] em28xx 1-1:0.132: Remote control support is not available for this card. [ 732.179100][ T24] em28xx 1-1:0.132: Closing input extension [ 732.221210][ T24] em28xx 1-1:0.132: Freeing device [ 732.292549][T14230] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 732.384777][T14314] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 732.485332][T14230] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 732.495652][T14230] usb 2-1: config 0 has no interface number 0 [ 732.502039][T14230] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 732.514092][T14230] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.524946][T14230] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 732.538367][T14230] usb 2-1: config 0 interface 1 has no altsetting 0 [ 732.545225][T14230] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 732.555109][T14230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.572439][T14230] usb 2-1: config 0 descriptor?? [ 732.612423][ T24] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 732.782975][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 732.810391][ T24] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 732.846451][ T24] usb 1-1: config 0 has no interface number 0 [ 732.934323][ T24] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 733.274052][ T24] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 733.307752][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.344477][ T24] usb 1-1: Product: syz [ 733.374480][ T24] usb 1-1: Manufacturer: syz [ 733.391838][ T24] usb 1-1: SerialNumber: syz [ 733.418987][ T24] usb 1-1: config 0 descriptor?? [ 733.425570][T14324] syzkaller0: entered promiscuous mode [ 733.432485][T14324] syzkaller0: entered allmulticast mode [ 733.459794][ T24] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 733.470738][ T24] em28xx 1-1:0.132: Video interface 132 found: [ 733.487108][T14230] usbhid 2-1:0.1: can't add hid device: -71 [ 733.495095][T14230] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 733.532520][T14230] usb 2-1: USB disconnect, device number 89 [ 733.662286][ T2238] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 733.837894][ T2238] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 733.850665][ T2238] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.904139][ T5820] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 734.188289][ T24] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 734.228163][ T2238] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 734.285410][ T2238] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.299968][ T2238] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 734.310326][ T2238] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 734.318800][ T2238] usb 5-1: Product: syz [ 734.323597][ T2238] usb 5-1: Manufacturer: syz [ 734.360756][ T2238] cdc_wdm 5-1:1.0: skipping garbage [ 734.368534][ T2238] cdc_wdm 5-1:1.0: skipping garbage [ 734.375446][ T2238] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 734.410955][ T2238] cdc_wdm 5-1:1.0: Unknown control protocol [ 734.423588][ T5820] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 734.432972][ T5820] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.445637][ T5820] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 734.455356][ T5820] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.471171][ T5820] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 734.481285][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 734.489755][ T5820] usb 4-1: Product: syz [ 734.494753][ T5820] usb 4-1: Manufacturer: syz [ 734.928818][T14312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.932347][ T5820] cdc_wdm 4-1:1.0: skipping garbage [ 734.944236][ T5820] cdc_wdm 4-1:1.0: skipping garbage [ 734.951349][ T5820] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 734.953604][T14312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.972979][ T5820] cdc_wdm 4-1:1.0: Unknown control protocol [ 735.183937][ T24] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 735.186587][T14312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.196811][ T24] em28xx 1-1:0.132: board has no eeprom [ 735.205570][T14312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.292320][ T24] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 735.300292][ T24] em28xx 1-1:0.132: analog set to bulk mode. [ 735.306359][ T5738] em28xx 1-1:0.132: Registering V4L2 extension [ 735.319457][ T24] usb 1-1: USB disconnect, device number 110 [ 735.333432][ T24] em28xx 1-1:0.132: Disconnecting em28xx [ 735.372362][ T5820] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 735.382285][T14230] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 735.414467][ T5738] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 735.421667][ T5738] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 735.429016][ T5738] em28xx 1-1:0.132: No AC97 audio processor [ 735.436305][ T5738] usb 1-1: Decoder not found [ 735.440913][ T5738] em28xx 1-1:0.132: failed to create media graph [ 735.447465][ T5738] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 735.455582][ T5738] em28xx 1-1:0.132: Remote control support is not available for this card. [ 735.464809][ T24] em28xx 1-1:0.132: Closing input extension [ 735.476969][ T24] em28xx 1-1:0.132: Freeing device [ 735.532324][ T5820] usb 6-1: Using ep0 maxpacket: 16 [ 735.540651][ T5820] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.542985][T14230] usb 2-1: Using ep0 maxpacket: 32 [ 735.551541][ T5820] usb 6-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 735.559959][T14230] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 735.570083][ T5820] usb 6-1: config 0 interface 0 has no altsetting 0 [ 735.579485][T14230] usb 2-1: config 0 has no interface number 0 [ 735.590214][T14230] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 735.601906][ T5820] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 735.606638][T14230] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 735.611129][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.620535][T14230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.630463][ T5820] usb 6-1: config 0 descriptor?? [ 735.646039][ T5820] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 735.647642][T14230] usb 2-1: Product: syz [ 735.659198][T14230] usb 2-1: Manufacturer: syz [ 735.664113][T14230] usb 2-1: SerialNumber: syz [ 735.670387][T14230] usb 2-1: config 0 descriptor?? [ 735.678591][T14230] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 735.688565][T14230] em28xx 2-1:0.132: Video interface 132 found: [ 736.078509][T14230] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 736.092318][ T24] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 736.256178][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 736.265545][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.273668][ T24] usb 1-1: Product: syz [ 736.277918][ T24] usb 1-1: Manufacturer: syz [ 736.282580][ T24] usb 1-1: SerialNumber: syz [ 736.292044][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 736.307480][ T5738] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 736.393361][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 736.400109][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 736.408813][ T5820] usb 5-1: USB disconnect, device number 24 [ 736.411234][ T24] usb 4-1: USB disconnect, device number 103 [ 736.489067][T14345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.505137][T14345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.515883][T14230] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 736.544683][T14230] em28xx 2-1:0.132: board has no eeprom [ 736.579685][ T5804] usb 1-1: USB disconnect, device number 111 [ 736.792309][T14230] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 736.800346][T14230] em28xx 2-1:0.132: analog set to bulk mode. [ 736.808346][ T24] em28xx 2-1:0.132: Registering V4L2 extension [ 736.884225][ T5820] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 737.044821][T14345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.093144][T14345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.114347][T14345] trusted_key: encrypted_key: insufficient parameters specified [ 737.131285][ T24] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 737.136983][ T5820] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 737.142376][ T29] usb 2-1: USB disconnect, device number 90 [ 737.157711][ T24] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 737.170316][ T24] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 737.170915][ T5820] usb 5-1: config 0 has no interface number 0 [ 737.179839][ T24] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-19) [ 737.195249][ T29] em28xx 2-1:0.132: Disconnecting em28xx [ 737.206794][ T5820] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 737.328046][ T5820] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.338330][ T5820] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 737.351345][ T5820] usb 5-1: config 0 interface 1 has no altsetting 0 [ 737.357992][ T5820] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 737.369679][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.381368][ T5820] usb 5-1: config 0 descriptor?? [ 737.394674][ T5738] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 737.405491][ T5738] ath9k_htc: Failed to initialize the device [ 737.933189][ T5804] usb 1-1: ath9k_htc: USB layer deinitialized [ 738.180030][ T24] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 738.323675][ T24] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 738.388373][ T24] em28xx 2-1:0.132: No AC97 audio processor [ 738.400801][ T5802] usb 6-1: USB disconnect, device number 70 [ 738.446621][ T24] usb 2-1: Decoder not found [ 738.472151][ T5820] usbhid 5-1:0.1: can't add hid device: -71 [ 738.473665][ T24] em28xx 2-1:0.132: failed to create media graph [ 738.572831][ T24] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 739.358496][ T5820] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 739.858140][ T5820] usb 5-1: USB disconnect, device number 25 [ 740.151134][ T24] em28xx 2-1:0.132: Remote control support is not available for this card. [ 740.303364][ T29] em28xx 2-1:0.132: Closing input extension [ 740.551419][ T29] em28xx 2-1:0.132: Freeing device [ 741.153434][T14405] xt_hashlimit: size too large, truncated to 1048576 [ 741.357272][T14407] bridge_slave_0 (unregistering): left allmulticast mode [ 741.388430][T14407] bridge_slave_0 (unregistering): left promiscuous mode [ 741.396255][T11010] Bluetooth: hci1: command 0xfc11 tx timeout [ 741.402396][ T4928] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 741.414821][T14407] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.606736][ T29] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 741.633565][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.868187][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 741.877810][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.888629][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 742.213297][T11010] Bluetooth: hci1: sending frame failed (-49) [ 742.261282][ T4928] Bluetooth: hci1: Entering manufacturer mode failed (-49) [ 742.320086][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.334306][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 742.344863][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 742.353296][ T29] usb 5-1: Product: syz [ 742.357526][ T29] usb 5-1: Manufacturer: syz [ 742.368781][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 742.377098][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 742.385242][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 742.391258][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 743.396174][T14429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2246'. [ 743.435085][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2246'. [ 743.592487][ T5820] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 743.752269][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 743.758689][ T5820] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 743.766880][ T5820] usb 2-1: config 0 has no interface number 0 [ 743.773688][ T5820] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 743.786748][ T5820] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 743.796287][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.804295][ T5820] usb 2-1: Product: syz [ 743.808446][ T5820] usb 2-1: Manufacturer: syz [ 743.813049][ T5820] usb 2-1: SerialNumber: syz [ 743.819390][ T5820] usb 2-1: config 0 descriptor?? [ 743.827435][ T5820] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 743.837471][ T5820] em28xx 2-1:0.132: Video interface 132 found: [ 743.852290][ T5701] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 743.962308][ T29] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 744.002302][ T5701] usb 6-1: Using ep0 maxpacket: 16 [ 744.009036][ T5701] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.019488][ T5701] usb 6-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 744.033754][ T5701] usb 6-1: config 0 interface 0 has no altsetting 0 [ 744.040425][ T5701] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 744.049688][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.059388][ T5701] usb 6-1: config 0 descriptor?? [ 744.067907][ T5701] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 744.123796][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 744.130297][ T29] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 744.138584][ T29] usb 1-1: config 0 has no interface number 0 [ 744.144821][ T29] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 744.156564][ T29] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 744.165729][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.173863][ T29] usb 1-1: Product: syz [ 744.178063][ T29] usb 1-1: Manufacturer: syz [ 744.182704][ T29] usb 1-1: SerialNumber: syz [ 744.189360][ T29] usb 1-1: config 0 descriptor?? [ 744.205850][ T29] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 744.215757][ T29] em28xx 1-1:0.132: Video interface 132 found: [ 744.241040][ T5820] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 744.349802][ T5701] usb 5-1: USB disconnect, device number 26 [ 744.606802][ T29] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 744.688372][T14428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.724055][T14428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.827814][T14434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.855915][T14434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.871836][ T5820] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 744.910398][ T5820] em28xx 2-1:0.132: board has no eeprom [ 745.115303][ T29] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 745.133273][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2251'. [ 745.143119][T14434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.154800][ T29] em28xx 1-1:0.132: board has no eeprom [ 745.172436][T14434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.180370][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2251'. [ 745.295214][T14428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.375514][ T29] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 745.398835][T14428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.449063][ T29] em28xx 1-1:0.132: analog set to bulk mode. [ 745.492283][ T5820] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 745.496835][T14428] trusted_key: encrypted_key: insufficient parameters specified [ 745.515790][ T5804] em28xx 1-1:0.132: Registering V4L2 extension [ 745.688120][ T29] usb 1-1: USB disconnect, device number 112 [ 745.888622][ T29] em28xx 1-1:0.132: Disconnecting em28xx [ 746.302960][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2252'. [ 747.118467][ T5820] em28xx 2-1:0.132: analog set to bulk mode. [ 747.148497][ T30] audit: type=1400 audit(1778604234.424:701): avc: denied { shutdown } for pid=14445 comm="syz.4.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 747.258773][ T5802] usb 6-1: USB disconnect, device number 71 [ 747.282083][ T5820] usb 2-1: USB disconnect, device number 91 [ 747.290048][ T5820] em28xx 2-1:0.132: Disconnecting em28xx [ 747.344095][ T5804] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 747.388781][ T5804] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 747.418617][ T30] audit: type=1400 audit(1778604234.694:702): avc: denied { setattr } for pid=14452 comm="syz.1.2254" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 747.441811][ T5804] em28xx 1-1:0.132: No AC97 audio processor [ 747.464132][ T5804] usb 1-1: Decoder not found [ 747.469007][ T5804] em28xx 1-1:0.132: failed to create media graph [ 747.550274][ T5804] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 747.557584][ T30] audit: type=1400 audit(1778604234.744:703): avc: denied { ioctl } for pid=14452 comm="syz.1.2254" path="socket:[42389]" dev="sockfs" ino=42389 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 747.585159][ T5804] em28xx 1-1:0.132: Remote control support is not available for this card. [ 747.593862][ T29] em28xx 1-1:0.132: Closing input extension [ 747.612002][ T2238] em28xx 2-1:0.132: Registering V4L2 extension [ 747.625310][ T29] em28xx 1-1:0.132: Freeing device [ 747.840266][ T2238] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 747.852368][ T2238] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 747.859502][ T2238] em28xx 2-1:0.132: No AC97 audio processor [ 747.867064][ T2238] usb 2-1: Decoder not found [ 747.875827][ T2238] em28xx 2-1:0.132: failed to create media graph [ 747.906090][ T2238] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 748.945413][ T2238] em28xx 2-1:0.132: Remote control support is not available for this card. [ 748.955212][ T5820] em28xx 2-1:0.132: Closing input extension [ 748.961136][ T5820] ================================================================== [ 748.969187][ T5820] BUG: KASAN: slab-use-after-free in media_device_unregister+0x59d/0x610 [ 748.977599][ T5820] Read of size 8 at addr ffff888036884210 by task kworker/0:8/5820 [ 748.985459][ T5820] [ 748.987760][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.987777][ T5820] Tainted: [L]=SOFTLOCKUP [ 748.987782][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 748.987789][ T5820] Workqueue: usb_hub_wq hub_event [ 748.987808][ T5820] Call Trace: [ 748.987813][ T5820] [ 748.987818][ T5820] dump_stack_lvl+0x100/0x190 [ 748.987832][ T5820] print_report+0x13d/0x4b0 [ 748.987848][ T5820] ? __virt_addr_valid+0x239/0x430 [ 748.987862][ T5820] ? media_device_unregister+0x59d/0x610 [ 748.987874][ T5820] kasan_report+0xdf/0x1d0 [ 748.987885][ T5820] ? media_device_unregister+0x59d/0x610 [ 748.987898][ T5820] media_device_unregister+0x59d/0x610 [ 748.987911][ T5820] em28xx_unregister_media_device+0x4e/0xe0 [ 748.987929][ T5820] em28xx_release_resources+0x79/0x1b0 [ 748.987946][ T5820] em28xx_usb_disconnect.cold+0x17d/0x253 [ 748.987964][ T5820] usb_unbind_interface+0x1dd/0x9e0 [ 748.987985][ T5820] ? __pfx_usb_unbind_interface+0x10/0x10 [ 748.988013][ T5820] device_remove+0x12a/0x180 [ 748.988038][ T5820] device_release_driver_internal+0x44e/0x620 [ 748.988051][ T5820] bus_remove_device+0x2bc/0x560 [ 748.988068][ T5820] ? __pfx_bus_remove_device+0x10/0x10 [ 748.988083][ T5820] ? __pfx_device_remove_attrs+0x10/0x10 [ 748.988099][ T5820] device_del+0x376/0x9b0 [ 748.988116][ T5820] ? __pfx_device_del+0x10/0x10 [ 748.988131][ T5820] ? kobject_put+0xb9/0x640 [ 748.988149][ T5820] usb_disable_device+0x367/0x810 [ 748.988165][ T5820] usb_disconnect+0x2e2/0x9a0 [ 748.988181][ T5820] hub_event+0x1d0c/0x4af0 [ 748.988199][ T5820] ? __lock_acquire+0x4a5/0x2630 [ 748.988214][ T5820] ? do_raw_spin_unlock+0x145/0x1e0 [ 748.988231][ T5820] ? __pfx_hub_event+0x10/0x10 [ 748.988246][ T5820] ? assoc_array_insert+0x3090/0x32c0 [ 748.988263][ T5820] ? rcu_is_watching+0x12/0xc0 [ 748.988280][ T5820] process_one_work+0xa0e/0x1980 [ 748.988297][ T5820] ? __pfx_process_one_work+0x10/0x10 [ 748.988313][ T5820] ? __pfx_hub_event+0x10/0x10 [ 748.988328][ T5820] worker_thread+0x5ef/0xe50 [ 748.988343][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 748.988358][ T5820] ? kthread+0x13a/0x450 [ 748.988371][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 748.988385][ T5820] kthread+0x370/0x450 [ 748.988397][ T5820] ? __pfx_kthread+0x10/0x10 [ 748.988410][ T5820] ret_from_fork+0x72b/0xd50 [ 748.988424][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 748.988437][ T5820] ? __switch_to+0x800/0x1100 [ 748.988453][ T5820] ? __pfx_kthread+0x10/0x10 [ 748.988466][ T5820] ret_from_fork_asm+0x1a/0x30 [ 748.988484][ T5820] [ 748.988488][ T5820] [ 749.237733][ T5820] Allocated by task 2238: [ 749.242033][ T5820] kasan_save_stack+0x30/0x50 [ 749.246684][ T5820] kasan_save_track+0x14/0x30 [ 749.251339][ T5820] __kasan_kmalloc+0xaa/0xb0 [ 749.255904][ T5820] em28xx_v4l2_init.cold+0x94/0x3a40 [ 749.261212][ T5820] em28xx_init_extension+0x13a/0x200 [ 749.266482][ T5820] request_module_async+0x61/0x80 [ 749.271479][ T5820] process_one_work+0xa0e/0x1980 [ 749.276391][ T5820] worker_thread+0x5ef/0xe50 [ 749.280953][ T5820] kthread+0x370/0x450 [ 749.284995][ T5820] ret_from_fork+0x72b/0xd50 [ 749.289557][ T5820] ret_from_fork_asm+0x1a/0x30 [ 749.294300][ T5820] [ 749.296607][ T5820] Freed by task 2238: [ 749.300552][ T5820] kasan_save_stack+0x30/0x50 [ 749.305210][ T5820] kasan_save_track+0x14/0x30 [ 749.309866][ T5820] kasan_save_free_info+0x3b/0x70 [ 749.314869][ T5820] __kasan_slab_free+0x5f/0x80 [ 749.319618][ T5820] kfree+0x223/0x6c0 [ 749.323484][ T5820] kref_put.isra.0+0x53/0x75 [ 749.328041][ T5820] em28xx_v4l2_init.cold+0x280/0x3a40 [ 749.333384][ T5820] em28xx_init_extension+0x13a/0x200 [ 749.338648][ T5820] request_module_async+0x61/0x80 [ 749.343642][ T5820] process_one_work+0xa0e/0x1980 [ 749.348555][ T5820] worker_thread+0x5ef/0xe50 [ 749.353121][ T5820] kthread+0x370/0x450 [ 749.357162][ T5820] ret_from_fork+0x72b/0xd50 [ 749.361728][ T5820] ret_from_fork_asm+0x1a/0x30 [ 749.366478][ T5820] [ 749.368775][ T5820] The buggy address belongs to the object at ffff888036884000 [ 749.368775][ T5820] which belongs to the cache kmalloc-8k of size 8192 [ 749.382795][ T5820] The buggy address is located 528 bytes inside of [ 749.382795][ T5820] freed 8192-byte region [ffff888036884000, ffff888036886000) [ 749.396653][ T5820] [ 749.398947][ T5820] The buggy address belongs to the physical page: [ 749.405327][ T5820] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36880 [ 749.414053][ T5820] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 749.422533][ T5820] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 749.430044][ T5820] page_type: f5(slab) [ 749.433996][ T5820] raw: 00fff00000000040 ffff88813fe35280 dead000000000122 0000000000000000 [ 749.442546][ T5820] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 749.451098][ T5820] head: 00fff00000000040 ffff88813fe35280 dead000000000122 0000000000000000 [ 749.459739][ T5820] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 749.468385][ T5820] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 749.477037][ T5820] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 749.485676][ T5820] page dumped because: kasan: bad access detected [ 749.492070][ T5820] page_owner tracks the page as allocated [ 749.497754][ T5820] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14455, tgid 14452 (syz.1.2254), ts 747470243864, free_ts 747324349662 [ 749.518645][ T5820] post_alloc_hook+0x153/0x170 [ 749.523388][ T5820] get_page_from_freelist+0x11a6/0x33b0 [ 749.528907][ T5820] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 749.534772][ T5820] new_slab+0xa6/0x6c0 [ 749.538813][ T5820] refill_objects+0x277/0x420 [ 749.543464][ T5820] __pcs_replace_empty_main+0x375/0x650 [ 749.548984][ T5820] __kmalloc_cache_noprof+0x493/0x6f0 [ 749.554330][ T5820] audit_log_d_path+0xed/0x210 [ 749.559064][ T5820] audit_log_lsm_data+0x5bc/0x1fa0 [ 749.564161][ T5820] common_lsm_audit+0x229/0x2b0 [ 749.568983][ T5820] slow_avc_audit+0x186/0x210 [ 749.573634][ T5820] avc_has_extended_perms+0x9b7/0x1080 [ 749.579084][ T5820] ioctl_has_perm.constprop.0.isra.0+0x376/0x540 [ 749.585382][ T5820] selinux_file_ioctl+0x13b/0x290 [ 749.590377][ T5820] security_file_ioctl+0xfb/0x230 [ 749.595371][ T5820] __x64_sys_ioctl+0xb7/0x210 [ 749.600016][ T5820] page last free pid 14456 tgid 14456 stack trace: [ 749.606504][ T5820] __free_frozen_pages+0x747/0x1040 [ 749.611685][ T5820] qlist_free_all+0x47/0xf0 [ 749.616166][ T5820] kasan_quarantine_reduce+0x1a0/0x1f0 [ 749.621598][ T5820] __kasan_slab_alloc+0x69/0x90 [ 749.626418][ T5820] kmem_cache_alloc_noprof+0x241/0x6e0 [ 749.631850][ T5820] vm_area_alloc+0x1f/0x160 [ 749.636324][ T5820] __mmap_region+0x104d/0x2da0 [ 749.641059][ T5820] mmap_region+0x35d/0x620 [ 749.645448][ T5820] do_mmap+0xc63/0x12f0 [ 749.649574][ T5820] vm_mmap_pgoff+0x29e/0x470 [ 749.654135][ T5820] ksys_mmap_pgoff+0x3cb/0x610 [ 749.658866][ T5820] __x64_sys_mmap+0x125/0x190 [ 749.663513][ T5820] do_syscall_64+0x10b/0xf80 [ 749.668077][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.673939][ T5820] [ 749.676246][ T5820] Memory state around the buggy address: [ 749.681842][ T5820] ffff888036884100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 749.689872][ T5820] ffff888036884180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 749.697899][ T5820] >ffff888036884200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 749.705924][ T5820] ^ [ 749.710479][ T5820] ffff888036884280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 749.718508][ T5820] ffff888036884300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 749.726537][ T5820] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 749.829660][T14455] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2254'. [ 749.847505][ T30] audit: type=1400 audit(1778604237.094:704): avc: denied { read } for pid=4959 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 749.997003][ T30] audit: type=1400 audit(1778604237.094:705): avc: denied { search } for pid=4959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.052307][ T5820] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 750.059530][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 750.070435][ T5820] Tainted: [L]=SOFTLOCKUP [ 750.074739][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 750.084775][ T5820] Workqueue: usb_hub_wq hub_event [ 750.089795][ T5820] Call Trace: [ 750.093052][ T5820] [ 750.095958][ T5820] dump_stack_lvl+0x100/0x190 [ 750.100608][ T5820] vpanic+0x552/0x970 [ 750.104559][ T5820] ? __pfx_vpanic+0x10/0x10 [ 750.109036][ T5820] ? media_device_unregister+0x59d/0x610 [ 750.114651][ T5820] panic+0xd1/0xe0 [ 750.118370][ T5820] ? __pfx_panic+0x10/0x10 [ 750.122773][ T5820] ? media_device_unregister+0x59d/0x610 [ 750.128375][ T5820] ? preempt_schedule_common+0x42/0xc0 [ 750.133808][ T5820] check_panic_on_warn.cold+0x19/0x34 [ 750.139165][ T5820] end_report.part.0+0x3a/0x90 [ 750.143902][ T5820] kasan_report.cold+0xe/0x18 [ 750.148553][ T5820] ? media_device_unregister+0x59d/0x610 [ 750.154154][ T5820] media_device_unregister+0x59d/0x610 [ 750.159581][ T5820] em28xx_unregister_media_device+0x4e/0xe0 [ 750.165459][ T5820] em28xx_release_resources+0x79/0x1b0 [ 750.170893][ T5820] em28xx_usb_disconnect.cold+0x17d/0x253 [ 750.176588][ T5820] usb_unbind_interface+0x1dd/0x9e0 [ 750.181762][ T5820] ? __pfx_usb_unbind_interface+0x10/0x10 [ 750.187454][ T5820] device_remove+0x12a/0x180 [ 750.192017][ T5820] device_release_driver_internal+0x44e/0x620 [ 750.198057][ T5820] bus_remove_device+0x2bc/0x560 [ 750.202967][ T5820] ? __pfx_bus_remove_device+0x10/0x10 [ 750.208398][ T5820] ? __pfx_device_remove_attrs+0x10/0x10 [ 750.214007][ T5820] device_del+0x376/0x9b0 [ 750.218316][ T5820] ? __pfx_device_del+0x10/0x10 [ 750.223139][ T5820] ? kobject_put+0xb9/0x640 [ 750.227618][ T5820] usb_disable_device+0x367/0x810 [ 750.232616][ T5820] usb_disconnect+0x2e2/0x9a0 [ 750.237265][ T5820] hub_event+0x1d0c/0x4af0 [ 750.241660][ T5820] ? __lock_acquire+0x4a5/0x2630 [ 750.246570][ T5820] ? do_raw_spin_unlock+0x145/0x1e0 [ 750.251744][ T5820] ? __pfx_hub_event+0x10/0x10 [ 750.256480][ T5820] ? assoc_array_insert+0x3090/0x32c0 [ 750.261827][ T5820] ? rcu_is_watching+0x12/0xc0 [ 750.266566][ T5820] process_one_work+0xa0e/0x1980 [ 750.271478][ T5820] ? __pfx_process_one_work+0x10/0x10 [ 750.276823][ T5820] ? __pfx_hub_event+0x10/0x10 [ 750.281558][ T5820] worker_thread+0x5ef/0xe50 [ 750.286131][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 750.291213][ T5820] ? kthread+0x13a/0x450 [ 750.295426][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 750.300506][ T5820] kthread+0x370/0x450 [ 750.304556][ T5820] ? __pfx_kthread+0x10/0x10 [ 750.309117][ T5820] ret_from_fork+0x72b/0xd50 [ 750.313684][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 750.318782][ T5820] ? __switch_to+0x800/0x1100 [ 750.323437][ T5820] ? __pfx_kthread+0x10/0x10 [ 750.327999][ T5820] ret_from_fork_asm+0x1a/0x30 [ 750.332749][ T5820] [ 750.336023][ T5820] Kernel Offset: disabled [ 750.340324][ T5820] Rebooting in 86400 seconds..