last executing test programs: 9.465161908s ago: executing program 2 (id=2615): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, 0x0, 0x2000007ff) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) fsetxattr$security_capability(r3, &(0x7f0000000000), &(0x7f0000000100)=@v2={0x2000000, [{0x401, 0x7788}, {0x8, 0xf88}]}, 0x14, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9.072155181s ago: executing program 1 (id=2618): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c0100001900010000000000fbdbdf25e0000002000000000000000000000000000000000000000000ffffffffffffff80000040000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000010000000800000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd0200000000000000000000000000000200000200000000c4000500ff020000000000000000000000000001000004d62b0000000000000000000000000000000000000000000001000000000000ff00040000000000000000000000ac1414bb0000000000000000000000000000000032"], 0x17c}}, 0x0) 8.954055417s ago: executing program 1 (id=2621): syz_open_dev$video4linux(0x0, 0x6, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b00)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x107734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 7.790936144s ago: executing program 4 (id=2627): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet(0x2, 0xa, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x0, 0x1, 0xcb}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x1d, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) 7.480732253s ago: executing program 2 (id=2629): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = dup3(r1, r0, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x800000000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 7.086863838s ago: executing program 4 (id=2630): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) r3 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) flock(r3, 0x5) flock(0xffffffffffffffff, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc0200000000000000000000f5fffffffe8000000000000000000000000000aa"], 0x0) 7.086335996s ago: executing program 1 (id=2631): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x80, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, 0x0}}], 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x3, 0x7c9, 0x1, 0x1, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x8, 0x722, 0xe72, 0x7, 0x8, 0x27, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) syz_pidfd_open(0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='.\x00', 0x400, &(0x7f0000000380)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize}], [{@appraise}, {@dont_hash}]}}, 0x0, 0x0, &(0x7f0000000480)="a0514e42b00ee52212d98230bd55df3bcc043e8a5dee5529e115a248e0488d1ea41f47dec72758e5232401791805c80bc695afecf8cea699cbe345140510c1cb898e3152fb0b0022ccaec850a9389b20d64a402f1b37e9648eadfff6425b175a853b1030b89f6aac439fd8aa3f8d71ae6021a88d12aefb0d5d5c97e4c023e4ab6b2cddc3f83b0f355822c7d65496c5") linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r7, &(0x7f0000000540)='./file0\x00', 0x400) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000000000002"]) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x1}) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f00000000c0)={0x0, 0x9}) r8 = dup(r4) write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 7.013550815s ago: executing program 2 (id=2632): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x2, 0x9}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x1, 0x3, 0x0, 0x700}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2b}, 0x0, @in6=@local, 0x0, 0x1}]}]}, 0x13c}}, 0x0) 6.87945904s ago: executing program 0 (id=2633): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}}, 0x810) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000001f0000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 6.795106309s ago: executing program 3 (id=2634): syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000df6e00000000000000bb0000000000000000000007000000000024206558"], 0x0) 6.794740204s ago: executing program 4 (id=2635): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2, 0x22, 0x25}, 0x18) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000100), 0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x411, 0x8, 0x8001, 0xb}) 6.79434171s ago: executing program 2 (id=2636): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000190c0)=@abs={0x1}, 0x6e) (async) connect$unix(r0, &(0x7f00000190c0)=@abs={0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) (async) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x24f7, &(0x7f00000002c0)={0x0, 0xcb3d, 0x8000, 0x100000, 0x0, 0x0, r3}, &(0x7f0000000240), &(0x7f0000019080)) (async) syz_io_uring_setup(0x24f7, &(0x7f00000002c0)={0x0, 0xcb3d, 0x8000, 0x100000, 0x0, 0x0, r3}, &(0x7f0000000240), &(0x7f0000019080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, 0x0, 0x118) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'batadv_slave_0\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000340)={'virt_wifi0\x00', 0x400}) close(0x3) (async) close(0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) 6.597622443s ago: executing program 3 (id=2637): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, &(0x7f00000000c0)={0x1, 0x135d}) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0x4, 0x7ffb, 0x6, 0x80000001, 0x5, 0x0}) fcntl$lock(r4, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r5}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0xd86, &(0x7f0000000140)={0x0, 0x2c32, 0x400, 0x1, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x238582}) io_uring_enter(r7, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 6.562278191s ago: executing program 4 (id=2638): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)={0x2c, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x90, 0x0, 0x0, @u64}]}, @typed={0xc, 0x36, 0x0, 0x0, @u64}]}, 0x2c}], 0x1}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000000)='./file0\x00', 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)={0x2c, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x90, 0x0, 0x0, @u64}]}, @typed={0xc, 0x36, 0x0, 0x0, @u64}]}, 0x2c}], 0x1}, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r2) (async) write$UHID_INPUT(r3, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x3) (async) 6.155073374s ago: executing program 0 (id=2639): syz_emit_ethernet(0xfc1, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "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"}}}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000040)=""/63, 0x3f}], 0x2}, 0x0) 5.922828872s ago: executing program 4 (id=2640): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000280)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53dedc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000001807030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004704000001ed00006203000000ffffff9c440000000000007a0a00fe00ffffffc3030000f1000000b4000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204ab3949006c3172171652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0e3adde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) io_submit(r8, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r7, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x4c, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x8cf75717b895ab4e, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) socket(0x10, 0x803, 0x0) 5.895815391s ago: executing program 0 (id=2641): syz_open_dev$video4linux(0x0, 0x6, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b00)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x107734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 4.766772948s ago: executing program 2 (id=2642): syz_clone3(&(0x7f0000000ec0)={0xa010200, 0x0, 0x0, 0x0, {}, &(0x7f0000000d80), 0x0, 0x0, 0x0}, 0x58) socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) getdents64(r3, &(0x7f0000001f00)=""/4111, 0x100f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2}) fcntl$getownex(r5, 0x10, &(0x7f0000000200)) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000002c0)='u', 0x1}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x1, &(0x7f0000000280)=0x9, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r8 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) writev(r8, &(0x7f0000000140)=[{&(0x7f0000001240)="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", 0x5a0}, {&(0x7f0000000240)="18ea33f8edd94f16d18a28b139fe4eeff53b18a0497e4cbb97ac61f3ff9323e581727cc92bf0800383d64c5e991932aeef4705b56de75899b4b9a94ca8160f761d9a65cc03f6f22e45df6551d50286046b4bff63b1b89c533013aae066aa38c8fdb055e23cda45a2a8263d6e1cdda70b19cf406e839d1e7e7589cd8cdd048c7bedda85000aeeeb9b50e1b8013b0051832c35b229d431b1d780ce4152738708a5b749e4587fb3e659c87c1eafe14af674801e092ce55cfb8210b5485bd35ed82c9808fe", 0xffffff2e}], 0x2) 4.764873916s ago: executing program 1 (id=2643): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = dup3(r1, r0, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x1100000000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 3.78442689s ago: executing program 1 (id=2644): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3517, 0x173d, 0x42, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) syz_emit_ethernet(0x11, &(0x7f00000000c0)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, 0x0, 0x0, 0x4) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) 3.244966317s ago: executing program 0 (id=2645): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfebc, 0x0, 0x0, 0x0, 0xb}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000800400000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.918986445s ago: executing program 0 (id=2646): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa02, 0x5, 0x1, 0x4, 0xd59f83, 0x19f5, 0x3f, 0x19ef, 0x3, 0x0, 0x2800, 0x2800, 0x2, 0xba0, 0x8, 0x33, {0x8, 0xffffffff}, 0xd0, 0x6}}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) syz_clone3(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0xffffffff, @local, 0x8}, 0x1c) timer_create(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x401}) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x401}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x48c15) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) (async) r5 = socket(0x2a, 0x2, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x0, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000140)={'ipvlan0\x00'}) (async) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000140)={'ipvlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 2.412673695s ago: executing program 2 (id=2647): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002d00de0600007000fcdbdf250400000008000c00020000006390323daf845da22a907e72d00f7f51d5762b7f892743bbe15702c46478551e9e7f9f655d41ab889038938debf3c39dc98d4df8748583bab6245279b75410628e95ff7bf3e452deaa079d772fef0973ba471c0a2f0f44edec594d423a59e9f7209c0000000000000000bdf822af830188877d31e0d572290ed8362bb80dc3d903d8b24b9e6edec289980210cf1894f7b4eb7c224f2ed54b84aedf77ac264d49500e9c2d1fb27a83e88ad19579244292f20788a0f062184a1109"], 0x1c}}, 0x4000804) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4040) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000280)=ANY=[@ANYRES64=r3], 0x8e79f035216f6e94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff47, 0x0, 0x1, 0x0, 0x0, 0x480c0}, 0x20000800) request_key(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000640)=ANY=[@ANYBLOB="180000002d00010026bdf0007cdbdf250400000004001080"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x8, 0xdb, 0x0, 0x7ffc0004}, {0x111, 0xb, 0x4, 0x1}, {0xf, 0x8, 0x8, 0x9}]}) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) 2.376213652s ago: executing program 3 (id=2648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="4efa04000000de346e5b25a883bff699f97e843d20b042fa2fd69a396298d47e22", 0x21}], 0x1}}], 0x1, 0xc880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1c56589c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040000) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x24, 0x3}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r10, 0x7}, 0x8) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 2.292944673s ago: executing program 4 (id=2649): openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x200002, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x50, &(0x7f00000001c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x1a, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x1}], "b9365394fc379af00659ab39e65121dd3e8c"}}}}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x80, &(0x7f0000000480)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xffff}}], [{@smackfshat={'smackfshat', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@fowner_eq}, {@obj_role={'obj_role', 0x3d, '\x00'}}]}}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r3], 0x2c2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r6 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000300)={0x50, 0xffff, 0x0, {0x0, 0x68bd}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 1.522873707s ago: executing program 3 (id=2650): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@empty, @empty, 0x0, "daf86eed51d59c3b227a93fc7264db425e9d015e14f17c0900497e00b3bb00", 0x7, 0x6, 0xffffff9d, 0xffffe6df}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) syz_io_uring_setup(0xd0, &(0x7f0000000600)={0x0, 0x4525, 0x6880, 0x105, 0x32d}, &(0x7f0000000140)=0x0, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="92f2d523c7310bb49e0900af6457dd9231"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0xc884) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(0x0, &(0x7f0000000780)='./file2\x00') accept4(r3, 0x0, &(0x7f0000000400), 0x80000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x6e080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 1.459427446s ago: executing program 3 (id=2651): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r6, &(0x7f0000000000)=0x2b00, 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 514.284326ms ago: executing program 1 (id=2652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="6930d8697c97a65b36159a023034632628cd4474514a1368f1e71dd9b7c48436c2ea07f3bd58a6bbc0f065ddba346122dff6ad81d21cea72e7d951c5c5b21a9f0ba768cd18ddcc7de78e2ba9ac88654a1d99806fb236617ff138f15994a6259de4f933ae62cdc98b2e33514066dd1b9ae1546df8db973d467507b2ecb6a4ece57b2ba7b9df20a0d6817b9fc2ee34e709a8bdef99624ab97472db298354edf3c072c710b9ba9d9a0ae44928172ce6a0d2695a17057255ec6e0b09c684a7f808e38302eb375390ae65d665da7f176a45ed0144a762fc666931f1a4c0ed03fb42e8f7ed4439add1a96b90904330d8e3c91527b405f36e89e44599c5ba4e742f1a281f0dab5fc2dc8855a78e1812ba99ce71fbabef429e87295d941c555c0fdacfa1f3256b70c1fc84b2d0df2c589dac34698d8d108474f84dce58efcbe580b8f348c550c6ca9abe230330d05dffea89475391015c707ddc45a3958a68ea44b5f7d81a84b9064111954da3b5c832df657efd5f0849b32834a053f4a052d7fd7d4db17be80879bf6859bc9605664557eceeb74753416e41b92fb84b572b3c78b6aab6f0bdfcfd7d3a830f12d1b3046e615889ae554db34d35775c6272243d7132426dfc9027ea50d62b91f356c58093933ad75013f9470ec90bfe1d9376002dbbcba9b7e7a1e023f878bfa4d88a9421c035951fd3169c5508ecf28c3a8691605242cc858fb56af44956bb5e677d1d90f0a3b97ad30c74adfc2f22232f7f1fa022c1f0492619cf98381039f26c784ca4d4706f67013bf457fe927aad53c1aa0da90d2730155664d84e41792f3f461840e41135c5b82c87834156b9d6403b7001e5ebb1846a6ad80723387bb92f8d991fa8db1fa65ef90a5054798635c18e7ff7649c41e867fb070bcfef61445a7d0c0c5fa02da82969db96aada4095e8cb2bf7728bf95eb020594c0d3617467701d8c4dd01c750712dae33dfba7548032b48ab93ff3c82e104b08116c1a68fb3b28a1b8ccc23c2698803828d1da099a5437b248078b502f7ccd867af9f8c79bc55643414c57466a781032bdd6dea9acd5cde821480a85c308dd03af012d03cb552b3770124ac279c9427c0e1b761c525eb251598d326bc650b5f055b610688fdaf9789e60fc234f1881536016901ddb2597b47e7bc675cac3ae8c50169230af084998dd6be35dc3609c5edbc93da3fe98ebb475a0d30437017ef640b96fd48ef52f509cf57e65c73ac09603081cd980e8b9d73ef4acf4511cfbb07d5074a6561192c2b2bce29cef8ec70ff599d4751103ffec500a8657d6ef30499b9ad0b10f3e7b6b53fc61dfbbb209e3691b1cba1af62468ebcb61c4c0a776fbfc92c5d2a10350bad29915e44cc952de4226ab646e28ab008683e470ccae3486bdb4ab4a6ffea9a671237bf0943660d929667ebe4a5f9cd1bdecbb53262a4fe3eaeed7fbb4ed1ca40da9e2efdaae4da05b14c754360f3c3e5b96f203c4f87e5feeb73abb88aa57fb850702339b5ac192810597e99fefedd52558fc6aad5d2ac0eaec00dda68467a3c7c7cdc3b724990f1b2f4f65e9181e5ebd0a343c491a1fe0e4378f241bd071fabeb1487044fe5c5eb942eb92dc80ff317cabfa10c75434441716a7339115a3071e45eb2d0800627b99a4fb59e260b26d53953ff3f255dc4bf40d3cc8797287fe3d6356d1eaaf67745ef73844b4c64e89ca0f04a87659427c26f0d6bfa2f4881ef69dc5c7b4515c7c4394f621fb98f2c6f496b7ac640d3a1fcd483ae10c4ee9710a896e67175a679f2461be09c722be20df30c9670299db21bc8aeae63e57ebeab1ca61c265f10d8def8243583e6967c5e40162110025a65f0c658db29f5eb0e50b2dd318ac55209721c8c0d51fb05c9ff3106731b058e14c8c89dd33bef6333f218c9f66e2bd9fd897b985bda3747c88fbd24d90cc8428380048330abb044f9e7107ccae059b961e0c6a53d182de21cb77e12d1ed0faeeb214c9ab6b7dd5f99d9278df393958a7a46aa734726938ca2172e4cba5f0a68cc2823bd5aa622c099fd936e303549ea4a80521b12b616526fdaf00779de369a5a83dcedbb739d426eb7f3864cbe346ff458433ca67a86ccbc703939216e4a001d9ccc84b4c438e5bb583e733973b3b0d2fa9a1bd4be4fc2b497b80e1455657a3f339f512cd38428e022d311075190c8d443cd94505dc52b0c7b6138f2279dcfd0a20a564e45b8f144a6f09e5beda5303f885a7d9fbdb4a6f3778ff9e9fc6e0dbee5bdd0330c3c956ddc36f10fb6811320ab30b4817934bd7e11bdcefb58132a17ac76fb54aaab0188a32eec2284f1a24835cc79c6909f742ab35631b919673eb84d53715dc8bdac9b6d28a24b869929d7fb7bcb34b5b5bab1ee69ee38c86541982806b84db06d0dc81e940a872ca89a5a7e1c191bec2808ac6aa0d733c1d647f88df8455ccfbd35fd5bef780bc8c4fb86efb1951b8382915939779493c20279b165c2b775b7d5b63ea0ceec09a17472bab7ec8122dbcf5ebaf4ac3db25fd0776f13cd67a36ce6cfa58acd262cbf4bdcbf2fa7239c79386dc580121e986de5b78a4351388e7fa6461a7657bdb4383c659409f16c7508d5e5618d116a659bc0462c130b088d63ac4bb69c0d756b5fa2e80004019d6ca5371ea361e8cc613954332ee959de1766f8f3689ab8daf45b69ec0810d0ab7e3b402860c8b94ffc25de57920f8da7a3bc7badc4dc9088bc7f6c71b1d4d960c258cd87abcd739bbd5115aef29f994f062318e8accab85f5c64a263ca14c1629284f7369d86436d174f6f2b1a5e014dc5cc3021efbce66bb88d7b3827be33365d8ab2daed7c6dc0651b77af1dd289684df8e21b6a81c66a27294c7cbf5cd90add094477cd6dec894b140a409add754727459c695c4e63dc73fb491af8c22edf1dbabe56a9969146056259a65f9c1c62973abba625b8065fdcccddda10cd7ff7b2144c63b754af792cfe395902608da630aeed913e9f014bdd184c9341c62fe0c7dd2660e26eab22cbd0d9e21ba0552e71f1ce17407672f01ef1012877fb7da93cdc92056ecad3ab01922b3a8e13661ef1372d84ce5167153ca2551edfed8c2c6557626f2554d67a852a8d2b566fa40c6dfeee3b63e2be83523f64365922531ac93ae196fa6a98b3b8708eb90f410f150c3e8680d9cb7265f108f2b860e7d8c7dd64405bd545eea08520cb33857b3090fe1b364e47151eb847ff444fab989dbe1e03b29409d46fff338d6ae5a4c61426ba4b170d96617774b6f3ae64beb7f791334f4d48d3fd26969d4a4342a8f1088bafdbefbcb1990e9d0fc95edf96113137e619cb15df9c4d9a21de468e40d284f5af88cb8b038540b91ba070f311efe1b081000da886eaddb3aaad90bca70e2ed34dadacccebb095d8e116ac9911c2c4f2a7a95e939853950b5e04a98b6bc9340b28e323ad7cc58888e33ef8bf438080dc26c71c8e12e0bbccb1fde98231ebf61a9011a2190b33c941d927128d30570c11b2a51d919d4caf1fbca673931fb2016b81c12e4a31b3458d0f215c97c9dfec8d514d66e748931b6e8bd06085c7ee8e7b845912053766ceaa20f1917d075fdcf2e9cca3e21bbbb1dc0a5cad36ee44e7a4e136ec5e5fc233cb63d5f035f96628a7abb281b493d9cf8fc4251fc9c3c004bd5d64713c05ba68de2318826b01db27661561b6dd381e5973b887797bb21f7a7f30c9343696a60775c36e5b05eb19dc62fef3ff99f8f00e8ccd25e00bd1863609f51e6a69f7e9c650aff3c8897ed6ee4c8d0b0356627cf69a3a3abd0c352e255b2c6250834c9fb272d83bdeb959ebc1e7207546da012b3eb4861c98fa1fd126b18a14585a2e142b98e5fe902a4961ccbdf7b7728588b7559511b30a2d2e86857d0281bd5e08103dcd11becfeb8e9c5b3e4813c79c14055e46203a5cebaa30fedec57ed23538afa85711e0ef3f72541af4d3e6c938590ee053d4ad1de8ecac6c49f1d70707c4d93e031b6f930658425fb0dfc3cde7c9f775eb3cf28fff76097c35e532335a80053fc198b6de7fb09b87e2219ec04782f35bedffef4c08e6316b25824caffef257d7a072fcd6251450dd9882e25e3e0a05a63b022e53ffcbff4097ad150095fb7065c47f7b8a9fc2c8186a5942663e661d80649af235707a87619d277dc8b5ef70190663991a531d67660c74f778301f9939d4511eca1f8bdee0706fec004a6042e45954f710a9e90081a8b297bcde440bc8d54676ba38397734196aa3835d361d8f36acbe4c1bf0f2782d27611555b19d1b9bd1ba493ab4c3a884216bc143629d8d418518f9a06b2b0d25a5e10ce515f47c5a54fa63212a686eab067600d56b234fba7be63b4d40f8be1fef0e69a55373f8faaa8f02b2b85aaee0720d0dff9a0e84850d998959df6397cd824c1a7bed9b73ca92f83ba66e3f170c3b34a3f7ad509d7bdf916d5367c22454f2252ecbb9a334e2fd2032c569fbf4bfcf6f41bd003ed10911f2644d66f4a6ec4a2eca936fcaff29ea9f454d5fc68575cfcb7e6cf8cffca37d1c5d374ca1ed77ffde5a01d349e4d18ddd15cc7397e696d6a92e0ed7260efd42ac23b5396840df636f85f83b6fcfb27f3503e130200a77c61c01b3c80a5b77c90eff390e27c3c1256efae5da2cb7ca7169cb824a164da49078e461f4640ff4d7b074a32676aac9f96746c36fa151145e1d13187191dc9739fe3c3af9418d6258e525ac82f626666278fc888cc0b8616d851469d3c676c1a0ac6c71b5914009b9797a914f1498f6f439a92205f855a4bf69843489dd425c4b5482522b96f385ab8138aefa8833eaf2056cfd068da37229fc7a5900d30c152cf92cf2a4f7a7505190268b08c9acd3839d560ab5762a0dfca0f2db56e2298c1f7d894b98ae8c98dfc81ef6e8e7a8a7138f12005f54bcfb93c9244468b7c76fc3afdc4c59abea57ce6302291c5130697834e838147d62112c96acefb57900eef463048068a0344f2e09d4c5a9488b63b92c5a67d1486ef56aff7f79c06fc5eb3eed23ea56f4331a638bbde8e9b022c29c08a803fb2e386012a1cf008106e619b5fab2a60653fba60c6ec7fd19f33a8e2ff6dc8046c117d3d8131d5f23b70f900ae5d632a51bf76420b9a1055c4bf49e22b5011e0fd12c12c403b42f54f799ba61b57c0bc0933adabdb909f0609602e73e583a9747a8f0477f0ea3621669343960f2dad82056471f596449ba52bef2fb24959f80659df251df5443dfe6b6a91fe0919cf0193afb37a786f9d13eeeafacd839f876e70c791e911b6e8c35fff3e4dbb787bf50fdcf9c8d001d8c078c0cb994f17a95f08d8de87700286c251011ffd8baf2e976e587730390e412e35b664a1dbff7744b68c91eee7356348c2fbe5a2e38985337cdeceb12c836cb1bade7c4c999eff6333bc5c0f779573080d046f96cca17802a0a2b7b0d36560868c2e54a883bf3ed16d5067adb0f4ff81d246b00ab30aaa58ba139e0e2d84c2b86e77934ff04cbb05f5ce568ceeb3ceb1baaf084160617f6821fc503c238a6daa5ffc19321a878ebad11a898f8d0d27b823c2e3ce57a9333d9d40a492da5ba26593ccf97b25c7b6698d9b8b4a46dce1c81c98093a790075411a6a7abca59e592f37eac9d588ab3a2e86edfbba12bbb83af804afb015a8c240dda9124a0c9c9691569eae6e948b48d4cf470f898075a1d5f13a239b3c1e31e8d98ddde799d8c3035d1e3949c2ec5a760a0f38314f66b3bf40de785c7a60a8f22d701a9e70d6a3f1b35d6d1e94038f8a7f4c97fb5370c9f83e31daa73a6e648a21e929324faa27482b039bf2d55032bfd8d1b5712b9250c8269b0daae8dbb5c8d4a243484b0d5f941a987242d06987bedfa97a3e062510c9b4cd3b82222ef22a4927749f38bd4259c3e6c8d8cbf0a1224bb80d8a5923827e18b18778dd44e7e3fa8b8b407c0cdec6fbccb5e33c2fbd9f5f0a7e35c4a04dedd69cdda7d888f2082903dd86e45732a687568a248a9af16253db86bae7e893a8a8c380e53d596733523499c74ab1c1b1ab26888533bf2d3ccfe221033442ce0d34aa34bd9c420d4e39413c95de2c2acdc520fc6ce524149bc80e9bd32bc7d72e7def1c425391fdee15cd89a090ec7aa29a4b9c0bfc01df19b9bf692c4569a9f3e0e19b288710089f677905780d2c3132c909cb29bee3bd6d62f060a944d66c78493b01279203e7a1185001ee8f6cb0967e8b3ce9aa50106c5576912a7dae46229ff03b65cc659cf49dae6aa6b162d6dba82119c511119225d6a536fc24bbc55f6e237d957a43f351c50378d0efc9ba1eac7d6a1b280c16454452294c457b8eb10dabc768edd67877b2ed08abba8768bc6579eccde4839ee7d68f80cc4aa318fd458f97ea9609f3135ea417aa455592e394b1f5ab6ccc14385ddbb416d47279e5748ee4e02e76ecba7d7474fb6ed6a851da3e156a7542bb9ad9b48b8362bff43755ce5b657d5a752ef632bb416184e70f1937c494ed9db084cc1177ac6c491772b739fba1b4be52acc2cc0975c8dc0b00929f503fb3cfe4c7e6670295edaef2327cec950737f0cc96eb30e7fa8217d9b9968274c413ec79e1b050814145432bf164f6e7b75a43424dec600502011190097ffd1edf795be01c4135a9be178b6b050d82d8542375abb40f0fe776965bf3f0630a2652e5bcf3dc237a84a4634081d0a9ba1842e6ddd4faf787aa6449a50fa9498ffe97c2759558112d1b0ec0db512d7990fc0efce6bde80f4b1ec9799d0cdcd41e6863eb473c3edb5c2e70ddc7d3aba52c2ad2e054b01eb3d92c2023b33975b23a72211fec063bb4fbaa49abacc47efea7d5ede3675ad49eb74b7fdaa5667b9ddff2e6007eccc90a7cfda32a053d9fd2aa1d01fe54c112b955d8c26e3e0ac2994fcf3f50d1fb129ee3df3db886d93faad74cec81c11e2e0922fcd0b2187cb75369598a3b5c8c8495870403b2593647a8a2d4d86601da9fbf49f1222dcfe5b64d0102d3c9296d0c0d459c5a7bab1580fb0b25a5ef71eb579546bda6ea58be241ec8ac9737e0e30ea47fa93c4cf2d44d2b6421c856dd5e1c2c3569040113d7006be693b293074a2a6188b228129fc79f9984f5bafd6f7a32f68bd3dc7197a7094e93561d208f0c948d364743854efc6af051a3e2a7eea8f132442d1e3a87e670190f3752ef0699f470ed15719ba274371179935ff79853b928cda754d1045929f8db75ca71825f21642f738622e392bc0b35ca98eff3821b7d122732f8ccf8d251d84589ce028d2efe7d7cbd34e8137f518e2feda64d9c788713df3e1450e8a36dc031c22f3d5bf7d294a66f90b64fd285aeded6e4a07b82c740c87598a9684f8f6d47b266169696b126e66d7b4532ace038a2b7921bd62fc806bb552676abb8204b4ad975d449d1be97ec9b55dc8b2b10a3dfe4880487de3f8c6a3b4426ac6adfa03845b4d0cf1e6cbd86be473d154bf7439dee05d555268a769ab339b299379cb8546f16ed8bbb789049eb57dcaca48c26e78982cc331ba474bcdd9f893f5f6526b4999fabcadc7bc6e8805ecc68902a31522e20b3f1817c1b516f16ab5bcdc7101165d59ce074e633dc68202221d2bae4ea62a13f6a5e7c82e8fd232fc076ca7399b5d01c325d67ab82f50acc789dfe8cab35de7e2131081a9d90606e5dc5a9c3af3fc9bc895174215d8aeae8dfe75b33be25298a11eabf2e0481050731edb27894df45a17985ffb4f3f27ad6393af9ac6f461737394ffc89f9549b7607dbecbf7803899d2e6513a74473ec0fb6569f6d27cc9a83f242f4ab78aea3c293ee846a2e0b3114991d5543902c848a7e451da4789e478f707e585defb47e3ce3525cfa17571772e1526c16c1065e5f438442c25e43e1023511022647244415f0bb7d28be2f7a75dae78b5da0f9d063c66ac396ef0b66fdb7e701e4caf9a435ccc476cdf3e5356ade531a3e33640ede4af542bcdb1ec54fcfe6f0ba105e0fd72b707611020ae1adc3f794b3c66e3c1f9ab0c87e5641a4891d74a194b9cd8ce14c81ad35df9a3c7862921e2d8c3942d4a57f4f4d13a6d82d75a21f1b862e8f4402c8b2c0fe2fb788ab761a22a4377497b34d137d0184d2d7bce69826e7ecbf63a89b133f263d58945627bd79472e3cbef5595a0c9d2e512605b578f2e558d4c4b31416c12f5709f68bd4e7ab1b0954f395299d634102bbbc97506e2dc938c5ecd9fdb26566eeb4de1621954ecb5af9b0d9d39b0fb1b972fd92b959277bf78d0a1763df9d9bc4182ad3f3b8eeb19d00cf41016f4d0d4623f2541a73f588f5108cde960b0bdc93ec260c14a498931226c981b41804bc09ca8a9168d9a4e17d269815e7ada71be1fc410b38874aa5782abc7ba7976daa94d724c9687c419165e77b7effe77d07e5fd6f55993b8a151889e57166c2ff63f04e3e09eead6f8c92e49e926c8f60a2f933c8926be5fb83b650b126cdbd9d239f6f11d717f8f32fd757350e7db0bd32e191052524922b2bf2b92801a717be7504ab79d55e425b09a79c8a84af1cf94c66dada7789e6d67dc041b4ac0e57c4e658d11be13af2fc3c200086e147a2223296a4253297155210440f0f17c3aa21ab7e15fe2e12bb9e9356d1018cc68313034b469152b650adab57f73350a6c0f76a36580a7dd8af218d656fa4bdd57b9d584e5acd1fa95e14120d7f9ed1fc3a83aa24135ca45472844d115f0a1bdebe2f6bc37cabdd0d7f9aab4fdc6a2c58aa0beb0ce431620d5ede6ef98e2b77e8d0558d250aa20c54c62d4b61d9bdd63286c6887ee3a556677e0673c94e46b9f834c6e4996b1c91141cd0d39b712f93e5195a7f7838f3af8325f649938d8c319ceebfa8154d23197bcbcf616be6f1f5d6fc070ed76abe89d6b94bf8a8d3f5b9bedce758b17d1e0be38bce845c8c3209d3fc30901494408c96956d050d14548d6edf55f4add18c91fb6da723a0c7c3c3f4c4b3a7056e611bdabdfd4edfb7a79a2b02c05ef4027c15db8bf2bcd015c66ae6d3203164615c56dba94606702caa577777e05e642ce3df5573ba3ae268f4ce4b38cc9013faf21d7dd7174ce7ea498c9451a1626f02398e49a33def46d228edb6de6fe8dec11f553634fb923849e3cdfbe645cff327b8251afc107b7fb8cf3cd735ed9bb1275ecc804a4f126bfeb853e13e636a74a4efc9faf01118aa82d00ac20ce0c0af140c756ab90e5dfa238707318c353c7bc9342c36ddcb6e74400933c8fa99448f3a169b95cd6d2558d755e1dd53f3fcfc46b057c550de64829e556c8cae40e796ef76fcb953086168fb2eae89349f29d3dd26ac6282292355be3b123b0c02e553bfb8948afe8d7e8ae5d63184b20795481a9385be05e9eff807b94eb1e977d50a7dd7da582695aa496a9a7587d01f970c3ed8d63db217164824d8b8bf4c5e493f801e1ed241afda4b695a4c606d6b5344493d9922dff76b4be7021d26b60d1f785d205c39d83694b0585eff60c9e1bb2f7023c5b5d3d043897baa9a9ef3507c280d9580d43c7985db146694b8649e2bf67e37081a945c4c81fad0a48e64d8877dd149443c8f4d2267b4aeaec8f168b44d5af109f505644e2a545fefb13d673210bd2b418b054cb4fc9fb7f2041e87be5f31466b51b308deff16bd9878a3ec72d0a1ad27c5cbd497b2c9585d914392da52b3708b198a3693d2988f03c7d3a41762c78cb9c268dbbcb0d1efc800fab4183286d924604a5fe9657cebad2d8bb0ef0006a46a4ef9fe92c3fdc1682b993239421879cb5626bae2368b646e61c870342b5cbb7f7baab7142a9ca2378805310c1abc12098c796550a20f3d5f01141470c1b5550857202ec712e3813d1ff7150111f4730bd83c8516aa86b345c280fb461c7bc6ff6f0bea507033d312027f51b4a90becfb048e676bfecfe2b1cd7504a226e89bb4df31d13436db7765062fc74789b75f82e77a6e83f49092558d38da47755ca0373ee0979c880e224bd5f70d6a69d8e2463d9b70bc7dbbdc9f27e1ba38d5adfdd6a5a0c564cda76a9ed6dc0e5117b06b9817d6d47f2a82d41a5a821431fe5f38eb3417d820c769afc09ffd001fd0a6f3c3879dc74ffcba15b8b29a4f435249226ee1cd7fb8c0bb6ec9012178bd25c05e69cb1d6e7121295a4e166c80d918b915232e6e8823ed6529eda300f2541142092df194de0cc255beed438afa94cbd350acf809e7f0467830b20108b95c9b653b030e311026cecc32332697cc2f8ef9cecb227de6de7144fc4b25e2180784f55204b17612228548fc825e60c88144c72abf3cb468a2d5491c431f38d858fb5471ce84c69d1d2b38e8ae2b134f4f94aa03996b2e0f1edc538ff32f7ee409b79922660b0f3421083298b14f26733577ff59b672b7214bd0e4508503c61da0b70cb6186b01ed575f9e5bf8f3bf538c2260f4a82755094c33c931ad0bb346518cff593de0985602852749610e073f20dd0be87ec8c452c3dfb4ac19d73a489e74a8a48411faac7ecf7e53d76ced94495ec2e814259fb5114a7986fb81a936d38c99443ebd55026acc6c78e1b14728551bae0bdb86cd518eeeb22dbfd7f7a32d2b94f7b0f757f34d6d22156e4dc1e7b9533fcf7a0d0cc3e41480345ddc68c11e47f8c514f1ed601d69e5b36e03962643544064ddbf689a3cbf378074879f6cd33d56c0a728a2050ab202981d6723b99a0e505cd8fea39da000bc7608a53024614407a5ebd5e034b9a59fa952841ab4f0758e988161e56fb454db449b3090eb1c4154ea6e34ea13101bb3a62dfa1878448952b1955a3c462432d7035228caf6ed4381e3ec1295e90decc62ebed5e60acbae3d26982e7834ee00a7632f581b6198f9bf42161a4980d08fac53d40b81731e4c727f5a24e75f6a262a1d2ab37b3ebc09ca6b0ffb0a1edf942e93d17d95eb3532b57488469575d9d47c2d08eec166f8fc1f6183795e1d5e48f46ae05a173af5765e03e98e6710b408cbeb169fb67f1d79a1999a977b7df51d7ede5aca5d31e9d75d2be3838a014d8283c3566ef5ea37955d6e66628d755c927e14d40f723428a69e03c8b100924b72e2c49926208044ff49536b0a1eca6c7c42ff9c90716fa35b02d2d869bcceb60e91dacf34ac1249f5d7934a078417e4fd416da2fbf9122fd37c042712ad9ce8592806b556d26163990b11466bf759615d2b852e75681a8b87571b5f0a21a4b5617cb94e2dc9efb264c0a331a752994d10a958b245cb40d9985365c4dd3b9551c4d03157aa29222a2af29ada6c123eaf08722310da16f7611cfe729255044642a8c5cb9f94c3f778248bf35520ac980af12ddd3b001df23404e49e3a57cc11fd12e51e422a92b5bf9e2ad225d42ad5d0325ca35804340fdde061c5bf2a4c8cc86e946a60040130ce831b9be93885f4ddb9fb7584ad875b05d59128f533c40c541ec03dfccba2af6fbdae4efb10a45e0f7d9851126b1dd9d374cec36067cdf2eefcb0a0cbf5619fa7ac2027d4b5c9da389bc1ffee655aef769a5aa542b291c0d71c8dc5e54268dc5f86a4133cc917a84efaf1456de9106c6fb3f5d41ff9f9a76a1dd3243a5e99c95e933d32e13f3eeb5a550", 0x2000, 0x0) (async) r6 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200e00000000a0dc4d663b"], 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000001c0)="f22e268f426df30fc7f96626dcdf66baf80cb8f426338aef66bafc0c66ed0f79a9b6000000b9800000c00f3235002000000f300f206466bad104b0faee0f01c8b9a80800000f32", 0x47}], 0x1, 0x30, 0x0, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) fcntl$setstatus(r5, 0x4, 0x400) (async, rerun: 32) socket$key(0xf, 0x3, 0x2) (rerun: 32) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/219, 0xdb}], 0x1, 0x2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_to_bond\x00', 0x1}) (async) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r9 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0x0) (async, rerun: 64) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0xffffffffffffffff) (async, rerun: 64) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 370.978564ms ago: executing program 0 (id=2653): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f000000bec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000000aa40)=[{0xc, 0x1}], 0xc}}], 0x2, 0x40840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) add_key(0x0, 0x0, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in=@dev, 0x0, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {}, {0x0, 0x4000000}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'essiv-cbc-aes-sha256-neon\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@initdev={0xac, 0x1e, 0x4, 0x0}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@loopback}}]}, 0x170}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="d705000000edf17210001280080001206772650004"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r7, @ANYBLOB="0000800000000000180034"], 0x38}, 0x1, 0x300}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r8, 0x100000e00000, 0x1) 0s ago: executing program 3 (id=2654): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = dup3(r1, r0, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x2000000000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) kernel console output (not intermixed with test programs): s leftover after parsing attributes in process `syz.0.2116'. [ 554.499128][ T3091] usb 1-1: USB disconnect, device number 69 [ 554.575295][ T10] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 554.726104][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 554.733414][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 554.745998][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 554.755643][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.820363][ T10] usb 4-1: Product: syz [ 554.833962][ T10] usb 4-1: Manufacturer: syz [ 554.842805][ T10] usb 4-1: SerialNumber: syz [ 554.878415][ T10] usb 4-1: config 0 descriptor?? [ 554.910692][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 554.927291][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 555.086924][ T3091] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 555.362222][ T3091] usb 5-1: unable to get BOS descriptor or descriptor too short [ 555.397568][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 555.468264][ T3091] usb 5-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.509772][ T3091] usb 5-1: config 1 interface 0 has no altsetting 0 [ 555.570350][ T3091] usb 5-1: New USB device found, idVendor=2e81, idProduct=0898, bcdDevice= 0.40 [ 555.584227][ T3091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.601314][ T3091] usb 5-1: Product: syz [ 555.609364][ T3091] usb 5-1: Manufacturer: syz [ 555.618723][ T3091] usb 5-1: SerialNumber: syz [ 555.789011][ T5896] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 555.850008][ T6573] usb 2-1: USB disconnect, device number 48 [ 555.919398][T13712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.938307][T13712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.948806][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short [ 555.958279][ T5896] usb 1-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.988661][ T5896] usb 1-1: config 1 interface 0 has no altsetting 0 [ 556.000790][ T5896] usb 1-1: New USB device found, idVendor=2e81, idProduct=0898, bcdDevice= 0.40 [ 556.015068][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.028753][ T5896] usb 1-1: Product: syz [ 556.034138][ T5896] usb 1-1: Manufacturer: syz [ 556.041769][ T10] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 556.068667][ T5896] usb 1-1: SerialNumber: syz [ 556.129779][ T10] em28xx 4-1:0.0: board has no eeprom [ 556.293084][T13720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.302281][T13720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.365464][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 556.375240][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 556.386258][ T9007] em28xx 4-1:0.0: Binding DVB extension [ 556.447505][ T6573] usb 4-1: USB disconnect, device number 77 [ 556.456420][ T6573] em28xx 4-1:0.0: Disconnecting em28xx [ 556.622305][ T9007] em28xx 4-1:0.0: Registering input extension [ 556.644557][ T6573] em28xx 4-1:0.0: Closing input extension [ 556.713387][ T6573] em28xx 4-1:0.0: Freeing device [ 556.726775][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2137'. [ 556.977375][T13745] netlink: 'syz.2.2140': attribute type 1 has an invalid length. [ 556.995570][ T30] audit: type=1326 audit(1759589231.440:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.2.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed438eec9 code=0x7ffc0000 [ 557.081766][ T30] audit: type=1326 audit(1759589231.440:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.2.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed438eec9 code=0x7ffc0000 [ 557.488473][ T6573] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 557.655319][ T6573] usb 2-1: Using ep0 maxpacket: 8 [ 557.662888][ T6573] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.673633][ T6573] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 557.683351][ T6573] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 557.702068][ T6573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.733141][ T6573] usb 2-1: config 0 descriptor?? [ 557.735769][T13763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2146'. [ 557.783903][T13763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2146'. [ 558.308812][ T3091] usbhid 5-1:1.0: can't add hid device: -71 [ 558.335429][ T3091] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 558.414359][ T3091] usb 5-1: USB disconnect, device number 95 [ 558.432539][ T5896] usbhid 1-1:1.0: can't add hid device: -71 [ 558.453772][ T5896] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 558.518159][ T5896] usb 1-1: USB disconnect, device number 70 [ 558.529591][T13774] netlink: 'syz.4.2151': attribute type 27 has an invalid length. [ 558.551556][T13774] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 558.632785][T13774] ip6erspan0: left promiscuous mode [ 558.772146][T13774] bridge3: left allmulticast mode [ 558.818620][T13785] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 558.879289][T13793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2156'. [ 558.900646][T13793] veth0_to_bond: left allmulticast mode [ 558.906506][T13793] veth0_to_bond: left promiscuous mode [ 558.937611][T13793] bridge3: port 1(veth0_to_bond) entered disabled state [ 558.955565][ T5889] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 558.979398][T13793] bridge4: port 1(veth0_to_bond) entered blocking state [ 558.995780][T13793] bridge4: port 1(veth0_to_bond) entered disabled state [ 559.005477][T13793] veth0_to_bond: entered allmulticast mode [ 559.017746][T13793] veth0_to_bond: entered promiscuous mode [ 559.115257][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 559.137215][ T5889] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 559.231327][ T5889] usb 5-1: config 0 has no interface number 0 [ 559.277783][T13800] binder: 13799:13800 unknown command 0 [ 559.290028][ T5889] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 559.294404][T13800] binder: 13799:13800 ioctl c0306201 200000000080 returned -22 [ 559.308445][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.360847][ T5889] usb 5-1: Product: syz [ 559.372068][ T5889] usb 5-1: Manufacturer: syz [ 559.386561][ T5889] usb 5-1: SerialNumber: syz [ 559.407004][ T5889] usb 5-1: config 0 descriptor?? [ 559.425817][ T5889] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 559.842280][ T5889] gspca_spca1528: reg_w err -71 [ 559.885666][ T5889] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 559.902444][ T5889] usb 5-1: USB disconnect, device number 96 [ 560.632810][ T5889] usb 2-1: USB disconnect, device number 49 [ 561.141784][T13849] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 561.893758][T13861] netlink: 'syz.4.2174': attribute type 27 has an invalid length. [ 562.305313][ T5889] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 562.416628][T13866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2177'. [ 562.475634][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 562.503629][T13868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2178'. [ 562.515123][ T5889] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 562.523571][ T5889] usb 5-1: config 0 has no interface number 0 [ 562.555781][ T5889] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 562.589000][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.599300][ T5889] usb 5-1: Product: syz [ 562.603498][ T5889] usb 5-1: Manufacturer: syz [ 562.608850][ T5889] usb 5-1: SerialNumber: syz [ 562.636815][ T5889] usb 5-1: config 0 descriptor?? [ 562.654361][ T5889] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 562.892059][ T9007] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 563.068573][ T9007] usb 2-1: Using ep0 maxpacket: 8 [ 563.079695][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.089764][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.090265][ T9007] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.120325][ T9007] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 563.138360][ T9007] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 563.156609][ T9007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.181726][ T9007] usb 2-1: config 0 descriptor?? [ 563.415806][ T5889] gspca_spca1528: reg_w err -110 [ 563.445294][ T5889] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 564.285042][T13899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2188'. [ 564.345290][ T5896] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 564.497703][ T5896] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 564.498894][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 564.520836][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.536986][ T5903] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 564.551437][ T5896] usb 1-1: config 0 descriptor?? [ 564.601252][ T5889] usb 5-1: USB disconnect, device number 97 [ 564.650726][T13903] geneve2: entered promiscuous mode [ 564.659660][T13903] geneve2: entered allmulticast mode [ 564.706064][T13908] netlink: 'syz.4.2192': attribute type 1 has an invalid length. [ 564.720081][ T5903] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 564.732775][ T5903] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 564.744319][ T5903] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 564.758228][ T5903] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 564.768742][ T5903] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 564.784881][ T5903] usb 4-1: Manufacturer: syz [ 564.792864][ T5903] usb 4-1: SerialNumber: syz [ 564.804671][T13908] 8021q: adding VLAN 0 to HW filter on device bond2 [ 564.817882][T13899] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 564.851755][T13910] ipvlan2: entered promiscuous mode [ 564.861309][T13910] ipvlan2: entered allmulticast mode [ 564.866810][T13910] bond2: entered allmulticast mode [ 564.872757][T13910] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 564.907975][T13908] bond2: (slave gretap2): making interface the new active one [ 564.917818][T13908] gretap2: entered allmulticast mode [ 564.924544][T13908] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 565.032547][ T5903] yealink 4-1:36.0: invalid payload size 1024, expected 16 [ 565.054031][ T5903] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input35 [ 565.080208][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.087371][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.094336][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.101344][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.108399][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.115361][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.122317][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.129417][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.138566][ C1] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 565.145378][ C1] yealink 4-1:36.0: unexpected response 0 [ 565.152398][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.159505][ C1] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 565.166335][ C1] yealink 4-1:36.0: unexpected response 0 [ 565.172656][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.179626][ C1] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 565.186414][ C1] yealink 4-1:36.0: unexpected response 0 [ 565.192952][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.200001][ C1] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 565.206790][ C1] yealink 4-1:36.0: unexpected response 0 [ 565.213633][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.222888][ C1] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 565.229692][ C1] yealink 4-1:36.0: unexpected response 0 [ 565.235910][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.243131][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.250134][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.258008][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.264974][ C1] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 565.271761][ C1] yealink 4-1:36.0: unexpected response 0 [ 565.277701][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.284656][ C1] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 565.291441][ C1] yealink 4-1:36.0: unexpected response 0 [ 565.297421][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.304210][ T30] audit: type=1326 audit(1759589239.760:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed438eec9 code=0x7ffc0000 [ 565.304483][ C1] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 565.333314][ C1] yealink 4-1:36.0: unexpected response 0 [ 565.342920][T13921] futex_wake_op: syz.4.2197 tries to shift op by -1; fix this program [ 565.345707][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.359161][ T30] audit: type=1326 audit(1759589239.760:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f4ed438eec9 code=0x7ffc0000 [ 565.360496][ C1] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 565.382757][ T30] audit: type=1326 audit(1759589239.760:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed438eec9 code=0x7ffc0000 [ 565.388254][ C1] yealink 4-1:36.0: unexpected response 0 [ 565.395281][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.415003][ T30] audit: type=1326 audit(1759589239.760:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed438eec9 code=0x7ffc0000 [ 565.419528][ C1] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 565.452472][ C1] yealink 4-1:36.0: unexpected response 0 [ 565.458470][ T5903] usb 4-1: USB disconnect, device number 78 [ 565.465599][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 565.472382][ C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 565.490760][ T30] audit: type=1326 audit(1759589239.760:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ed438d710 code=0x7ffc0000 [ 565.515881][ T30] audit: type=1326 audit(1759589239.760:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ed438eacb code=0x7ffc0000 [ 565.535330][ T10] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 565.539159][ T30] audit: type=1326 audit(1759589239.760:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ed438eacb code=0x7ffc0000 [ 565.585296][ T30] audit: type=1326 audit(1759589239.800:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ed438eacb code=0x7ffc0000 [ 565.634568][ T5896] usb 1-1: Cannot set autoneg [ 565.641123][ T5896] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 565.678743][ T30] audit: type=1326 audit(1759589239.800:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ed438eacb code=0x7ffc0000 [ 565.709710][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 565.731925][ T30] audit: type=1326 audit(1759589239.870:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ed438eacb code=0x7ffc0000 [ 565.744221][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 565.778285][ T5896] usb 2-1: USB disconnect, device number 50 [ 565.829398][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 565.855983][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 565.869276][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2200'. [ 565.870471][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.905076][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.919440][ T10] usb 3-1: config 0 descriptor?? [ 566.056380][T13932] netlink: 'syz.1.2201': attribute type 27 has an invalid length. [ 566.338984][T13941] loop2: detected capacity change from 0 to 7 [ 566.347727][ T5847] Dev loop2: unable to read RDB block 7 [ 566.353123][ T10] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max [ 566.354548][ T5847] loop2: AHDI p1 p2 [ 566.391935][ T10] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 566.419753][ T5847] loop2: partition table partially beyond EOD, truncated [ 566.441947][ T5847] loop2: p1 start 1818582900 is beyond EOD, truncated [ 566.477756][T13941] Dev loop2: unable to read RDB block 7 [ 566.483615][T13941] loop2: AHDI p1 p2 [ 566.487990][T13941] loop2: partition table partially beyond EOD, truncated [ 566.508405][T13941] loop2: p1 start 1818582900 is beyond EOD, truncated [ 566.987990][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 567.250913][T13955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.813972][T13955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.889952][T13932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.915465][ T9007] usb 3-1: reset high-speed USB device number 75 using dummy_hcd [ 567.937151][T13932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.015293][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 568.026210][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 568.075742][ T24] usb 2-1: config 0 has no interface number 0 [ 568.101222][ T24] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 568.158964][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.225287][ T24] usb 2-1: Product: syz [ 568.244332][ T43] usb 1-1: USB disconnect, device number 71 [ 568.252210][ T24] usb 2-1: Manufacturer: syz [ 568.272043][ T24] usb 2-1: SerialNumber: syz [ 568.299621][ T24] usb 2-1: config 0 descriptor?? [ 568.323198][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 568.419755][T13932] gretap1: left allmulticast mode [ 568.559400][ T6002] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.587884][ T6002] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.612848][ T6002] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.616083][ T9] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 568.635703][ T6002] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.696972][ T5919] usb 3-1: USB disconnect, device number 75 [ 568.816566][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 568.826604][ T9] usb 4-1: config 162 has an invalid interface number: 253 but max is 0 [ 568.835669][ T9] usb 4-1: config 162 has no interface number 0 [ 568.847877][ T9] usb 4-1: config 162 interface 253 has no altsetting 0 [ 568.856335][ T5976] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 568.868813][ T9] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 568.886622][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.902569][ T9] usb 4-1: Product: syz [ 568.907341][ T9] usb 4-1: Manufacturer: syz [ 568.912044][ T9] usb 4-1: SerialNumber: syz [ 569.025528][ T24] gspca_spca1528: reg_w err -110 [ 569.035282][ T5976] usb 1-1: Using ep0 maxpacket: 32 [ 569.042322][ T5976] usb 1-1: config 0 has an invalid descriptor of length 122, skipping remainder of the config [ 569.055378][ T24] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 569.055528][ T5976] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 569.073100][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.086214][ T5976] usb 1-1: Product: syz [ 569.092524][ T5976] usb 1-1: Manufacturer: syz [ 569.102173][ T5976] usb 1-1: SerialNumber: syz [ 569.112371][ T5976] usb 1-1: config 0 descriptor?? [ 569.121089][ T5976] usb 1-1: bad CDC descriptors [ 569.128411][ T5976] usb 1-1: unsupported MDLM descriptors [ 569.146707][T13967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.156683][T13967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.168718][ T9] go7007 4-1:162.253: probe with driver go7007 failed with error -12 [ 569.182263][ T9] usb 4-1: USB disconnect, device number 79 [ 569.190734][ T5919] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 569.346230][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 569.366012][ T5919] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 569.380866][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.389555][ T5919] usb 3-1: Product: syz [ 569.394404][ T5919] usb 3-1: Manufacturer: syz [ 569.399164][ T5919] usb 3-1: SerialNumber: syz [ 569.408586][ T5919] usb 3-1: config 0 descriptor?? [ 569.767196][ T5976] usb 2-1: USB disconnect, device number 51 [ 569.828237][ T5919] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 569.853619][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 569.890912][ T5919] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 569.905761][ T5919] usb 3-1: media controller created [ 569.993970][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.062650][T13984] syzkaller1: entered promiscuous mode [ 570.071091][ T5919] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 570.075278][T13984] syzkaller1: entered allmulticast mode [ 570.112408][ T5919] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 570.205253][ T5976] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 570.276086][T13974] dtv5100: wlen = 0, aborting. [ 570.284967][ T5919] usb 3-1: USB disconnect, device number 76 [ 570.345477][T13943] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 570.349923][ T5919] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 570.368367][ T5976] usb 2-1: Using ep0 maxpacket: 8 [ 570.377204][ T5976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.389666][ T5976] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 570.413307][ T5976] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 570.422815][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.441338][ T5976] usb 2-1: config 0 descriptor?? [ 570.518477][T13943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 570.537124][T13943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 570.549685][T13943] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 570.559114][T13943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.573409][T13943] usb 5-1: config 0 descriptor?? [ 570.579493][T13984] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 571.293302][ T5919] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 571.320634][ T5976] usb 1-1: USB disconnect, device number 72 [ 571.557092][ T5919] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 571.572858][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 571.584669][ T5919] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 571.594682][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 571.603136][ T5919] usb 3-1: Product: syz [ 571.611547][ T5919] usb 3-1: Manufacturer: syz [ 571.624127][ T5919] usb 3-1: SerialNumber: syz [ 571.634207][ T5919] usb 3-1: config 0 descriptor?? [ 571.647395][ T5919] usb 3-1: selecting invalid altsetting 0 [ 571.876045][ T5976] usb 3-1: USB disconnect, device number 77 [ 572.721301][T14021] netlink: 'syz.0.2221': attribute type 27 has an invalid length. [ 573.275344][T13943] usbhid 5-1:0.0: can't add hid device: -71 [ 573.311416][T14021] bond_slave_0: left promiscuous mode [ 573.323347][T13943] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 573.355477][T14021] bond_slave_1: left promiscuous mode [ 573.389795][T14021] batman_adv: batadv0: Interface deactivated: dummy0 [ 573.505452][T13943] usb 5-1: USB disconnect, device number 98 [ 573.555357][T13946] usb 2-1: USB disconnect, device number 52 [ 573.578678][T14021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.929742][T14021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.281127][ T1207] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 574.466202][ T1207] usb 1-1: Using ep0 maxpacket: 16 [ 574.497337][ T1207] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 574.530445][ T1207] usb 1-1: config 0 has no interface number 0 [ 574.537091][T14021] ip6erspan0: left promiscuous mode [ 574.570129][T14039] netlink: 'syz.3.2225': attribute type 32 has an invalid length. [ 574.586361][ T1207] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 574.605821][T14021] ipvlan2: left promiscuous mode [ 574.610777][T14021] ipvlan2: left allmulticast mode [ 574.616064][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.620598][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2225'. [ 574.624065][ T1207] usb 1-1: Product: syz [ 574.624084][ T1207] usb 1-1: Manufacturer: syz [ 574.624098][ T1207] usb 1-1: SerialNumber: syz [ 574.646619][T14021] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 574.722612][ T1207] usb 1-1: config 0 descriptor?? [ 574.748338][ T1207] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 574.763824][ T77] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.879644][T14039] bond3: option coupled_control: invalid value (110) [ 574.895954][T14039] bond3 (unregistering): Released all slaves [ 574.970630][T14049] delete_channel: no stack [ 574.979037][ T77] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.000681][T14049] debugfs: '!' already exists in 'ieee80211' [ 575.019517][ T77] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.155270][ T10] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 575.414279][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 575.425857][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 575.449486][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 575.459028][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.467760][ T10] usb 2-1: Product: syz [ 575.472139][ T10] usb 2-1: Manufacturer: syz [ 575.477995][ T1207] gspca_spca1528: reg_w err -110 [ 575.483085][ T10] usb 2-1: SerialNumber: syz [ 575.505716][ T1207] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 575.587732][T14047] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 576.213575][T13962] usb 1-1: USB disconnect, device number 73 [ 576.625799][ T5917] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 576.757536][ T10] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 576.763985][ T10] cdc_ncm 2-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 576.782063][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 576.802576][ T10] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 576.814393][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.825328][ T5917] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 576.834356][ T5917] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 576.902616][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.921603][ T5917] usb 1-1: config 0 descriptor?? [ 576.962195][ T10] cdc_ncm 2-1:1.0: setting tx_max = 48 [ 577.021046][ T10] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 577.058139][ T10] usb 2-1: USB disconnect, device number 53 [ 577.071194][ T10] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 577.089308][T14070] fuse: Unknown parameter 'f¯¥W6€À{’' [ 577.115359][ T1207] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 577.227904][T14066] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 577.283877][ T1207] usb 5-1: Using ep0 maxpacket: 8 [ 577.290685][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.311971][ T1207] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 577.372477][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.404602][ T1207] usb 5-1: config 0 descriptor?? [ 577.793014][ T1207] usbhid 5-1:0.0: can't add hid device: -71 [ 577.854887][ T1207] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 577.910404][ T1207] usb 5-1: USB disconnect, device number 99 [ 578.332999][T14104] veth0: entered promiscuous mode [ 578.360980][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2242'. [ 578.480795][T14102] veth0 (unregistering): left promiscuous mode [ 578.895609][ T1207] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 579.238230][ T1207] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.306957][ T1207] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 579.350233][ T1207] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 579.360111][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.370665][ T1207] usb 5-1: Product: syz [ 579.375700][ T1207] usb 5-1: Manufacturer: syz [ 579.380395][ T1207] usb 5-1: SerialNumber: syz [ 579.525347][T13962] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 579.739895][T13962] usb 3-1: Using ep0 maxpacket: 16 [ 579.761421][ T6573] usb 1-1: USB disconnect, device number 74 [ 579.783582][T13962] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.841848][T13962] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 579.874537][T13962] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 580.022582][T13962] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 61 [ 580.037570][ T1207] usb 5-1: 0:2 : does not exist [ 580.055227][T13962] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 580.100136][T13962] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 580.110448][T13962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 580.129193][T13962] usb 3-1: SerialNumber: syz [ 580.144367][T14115] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 580.151959][T14115] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 580.255701][ T6573] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 580.387446][T13962] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 580.416747][ T6573] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 580.429369][ T6573] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 580.457295][ T5896] usb 5-1: USB disconnect, device number 100 [ 580.476641][ T6573] usb 1-1: config 8 has an invalid descriptor of length 78, skipping remainder of the config [ 580.536755][T13962] usb 3-1: USB disconnect, device number 78 [ 580.557835][ T6573] usb 1-1: config 8 has no interface number 0 [ 580.573650][ T6573] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 580.587349][ T6573] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.587952][T14131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.603344][ T6573] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 580.613590][T14132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.618650][ T6573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.650728][T14132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.666537][ T6573] usb 1-1: Product: syz [ 580.670749][ T6573] usb 1-1: Manufacturer: syz [ 580.676213][ T6573] usb 1-1: SerialNumber: syz [ 580.690259][T14131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.856523][T14142] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2249'. [ 580.870526][T14142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2249'. [ 580.891641][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'. [ 580.925564][T14143] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2250'. [ 580.937308][T14143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2250'. [ 581.041722][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2250'. [ 581.176506][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 581.398465][ T10] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 581.424070][ T10] usb 2-1: config 0 has no interface number 0 [ 581.438763][ T10] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 581.464968][ T10] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 581.473826][ T10] usb 2-1: config 0 has no interface number 0 [ 581.480317][ T10] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 581.506315][ T10] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 581.514663][ T10] usb 2-1: config 0 has no interface number 0 [ 581.525326][ T1207] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 581.538849][ T10] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 581.610050][ T10] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 581.639268][ T10] usb 2-1: config 0 has no interface number 0 [ 581.671789][T14159] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2257'. [ 581.693541][T14159] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2257'. [ 581.731179][ T1207] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 581.739670][ T10] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 581.949714][ T1207] usb 4-1: config 0 has no interface number 0 [ 581.977353][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2259'. [ 582.004607][T14165] netlink: 'syz.2.2259': attribute type 2 has an invalid length. [ 582.038187][ T1207] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 582.059098][ T10] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 582.088079][ T10] usb 2-1: config 0 has no interface number 0 [ 582.122254][ T10] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 582.211834][ T1207] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 582.254051][ T1207] usb 4-1: config 0 has no interface number 0 [ 582.328050][ T10] usb 2-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 582.337263][ T1207] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 582.428221][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.458753][ T1207] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 582.507930][ T10] usb 2-1: Product: syz [ 582.522962][ T1207] usb 4-1: config 0 has no interface number 0 [ 582.529456][ T10] usb 2-1: Manufacturer: syz [ 582.543334][ T10] usb 2-1: SerialNumber: syz [ 582.548198][ T1207] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 582.571685][ T10] usb 2-1: config 0 descriptor?? [ 582.600809][ T10] cdc_ncm 2-1:0.47: CDC Union missing and no IAD found [ 582.613386][ T1207] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 582.626821][ T10] cdc_ncm 2-1:0.47: bind() failure [ 582.637641][ T1207] usb 4-1: config 0 has no interface number 0 [ 582.736224][ T1207] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 582.879896][ T1207] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 582.892924][ T1207] usb 4-1: config 0 has no interface number 0 [ 582.905004][ T1207] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 583.047210][ T1207] usb 4-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 583.078733][ T6573] usb 1-1: USB disconnect, device number 75 [ 583.115092][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.170164][ T1207] usb 4-1: Product: syz [ 583.186883][ T1207] usb 4-1: Manufacturer: syz [ 583.455246][ T1207] usb 4-1: SerialNumber: syz [ 583.525879][ T1207] usb 4-1: config 0 descriptor?? [ 583.568124][ T1207] cdc_ncm 4-1:0.47: CDC Union missing and no IAD found [ 583.598996][ T1207] cdc_ncm 4-1:0.47: bind() failure [ 584.269792][T13962] usb 4-1: USB disconnect, device number 80 [ 584.592447][ T5917] usb 2-1: USB disconnect, device number 54 [ 584.655286][ T1207] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 584.745309][T13962] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 584.805238][ T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 584.815253][ T6573] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 584.815840][ T1207] usb 5-1: config 0 has no interfaces? [ 584.833503][ T1207] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 584.846876][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.864830][ T1207] usb 5-1: config 0 descriptor?? [ 584.895788][T13962] usb 4-1: Using ep0 maxpacket: 16 [ 584.905015][T13962] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.920862][T13962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 584.933275][T13962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 584.944320][T13962] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 584.957311][T13962] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.972458][T13962] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 584.981778][ T6573] usb 3-1: Using ep0 maxpacket: 16 [ 584.985757][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 584.988189][T13962] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 585.002017][T13962] usb 4-1: Manufacturer: syz [ 585.008790][ T6573] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 585.018402][ T6573] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 585.028558][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.030541][T13962] usb 4-1: config 0 descriptor?? [ 585.044566][ T6573] usb 3-1: Product: syz [ 585.050582][ T6573] usb 3-1: Manufacturer: syz [ 585.058083][ T6573] usb 3-1: SerialNumber: syz [ 585.076134][ T6573] usb 3-1: config 0 descriptor?? [ 585.085273][ T5896] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 585.115240][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.172834][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 585.204729][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.228635][ T10] usb 1-1: config 0 descriptor?? [ 585.235283][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 585.243614][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 585.253772][ T5896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 585.269622][ T6573] usb 5-1: USB disconnect, device number 101 [ 585.282160][ T5896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 585.301546][T14194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.310370][T14194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.324474][ T10] hub 1-1:0.0: USB hub found [ 585.328568][ T24] usb 3-1: USB disconnect, device number 79 [ 585.357814][ T5896] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 585.374006][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.389423][ T5896] usb 2-1: Product: syz [ 585.393739][ T5896] usb 2-1: Manufacturer: syz [ 585.401863][ T5896] usb 2-1: SerialNumber: syz [ 585.413671][ T5896] usb 2-1: config 0 descriptor?? [ 585.436264][T14201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 585.460331][ T5896] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 585.467040][ T5896] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 585.474100][ T5896] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 585.480325][T13962] rc_core: IR keymap rc-hauppauge not found [ 585.487292][T13962] Registered IR keymap rc-empty [ 585.492386][T13962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 585.500783][ T5896] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 585.508695][ T5896] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 585.516571][T13962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 585.531372][ T10] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 585.537362][T13962] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 585.573314][T13962] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input36 [ 585.594988][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 585.603980][T13962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 585.604584][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 585.626952][T13962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 585.717526][T13962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 585.724330][ T10] usb 1-1: USB disconnect, device number 76 [ 585.735393][T13962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 585.814349][T13962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 585.865433][T13962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 585.915759][T13962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 585.955645][T13962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 585.995798][T13962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 586.135755][T13962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 586.227250][T14221] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 586.268274][T13962] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 586.279192][T13962] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 586.323610][T13962] usb 4-1: USB disconnect, device number 81 [ 586.697041][T14226] bridge0: entered promiscuous mode [ 586.704374][T14226] bridge0: entered allmulticast mode [ 587.055661][T13962] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 587.245227][T13962] usb 4-1: Using ep0 maxpacket: 8 [ 587.257529][T13962] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 587.266785][T13962] usb 4-1: config 0 has no interface number 0 [ 587.285304][T14243] loop2: detected capacity change from 0 to 7 [ 587.312958][T13962] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 587.345579][T14243] Dev loop2: unable to read RDB block 7 [ 587.348287][T13962] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 587.351252][T14243] loop2: AHDI p1 p2 [ 587.403451][T14243] loop2: partition table partially beyond EOD, truncated [ 587.421464][T14243] loop2: p1 start 1818582900 is beyond EOD, truncated [ 587.464060][T13962] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 587.568074][T13962] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 587.670937][T13962] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 587.682681][T13962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.696014][T13962] usb 4-1: config 0 descriptor?? [ 587.730146][T13962] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 587.751070][T14252] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2278'. [ 587.777177][T14252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2278'. [ 587.842841][T14254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2279'. [ 587.852113][T13962] usb 2-1: USB disconnect, device number 55 [ 587.861634][T13962] mcba_usb 2-1:0.0 can0: device disconnected [ 587.876719][T14252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2278'. [ 587.896911][T14254] bridge0: port 1(veth0_to_bond) entered blocking state [ 587.904180][T14254] bridge0: port 1(veth0_to_bond) entered disabled state [ 587.923731][T14235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.951620][T14254] veth0_to_bond: entered allmulticast mode [ 587.955944][T14235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.038049][T14254] veth0_to_bond: entered promiscuous mode [ 588.136637][T14235] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 588.255290][ T1207] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 588.422027][T14264] netlink: 'syz.1.2281': attribute type 1 has an invalid length. [ 588.510891][ T1207] usb 1-1: config 0 has an invalid interface number: 47 but max is 0 [ 588.551952][ T1207] usb 1-1: config 0 has no interface number 0 [ 588.558862][T14264] netlink: 'syz.1.2281': attribute type 2 has an invalid length. [ 588.640623][ T1207] usb 1-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 588.759744][ T1207] usb 1-1: config 0 has an invalid interface number: 47 but max is 0 [ 588.913395][ T1207] usb 1-1: config 0 has no interface number 0 [ 589.007396][ T1207] usb 1-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 589.065359][T13962] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 589.087400][ T1207] usb 1-1: config 0 has an invalid interface number: 47 but max is 0 [ 589.096258][ T1207] usb 1-1: config 0 has no interface number 0 [ 589.102388][ T1207] usb 1-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 589.129209][ T1207] usb 1-1: config 0 has an invalid interface number: 47 but max is 0 [ 589.137617][ T1207] usb 1-1: config 0 has no interface number 0 [ 589.154159][ T1207] usb 1-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 589.217982][T13962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.239562][T13962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.306423][T13962] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 589.325654][ T1207] usb 1-1: config 0 has an invalid interface number: 47 but max is 0 [ 589.333773][ T1207] usb 1-1: config 0 has no interface number 0 [ 589.350362][T13962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.386069][T13962] usb 3-1: config 0 descriptor?? [ 589.441317][ T1207] usb 1-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 589.529714][ T1207] usb 1-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 589.543150][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.569743][ T1207] usb 1-1: Product: syz [ 589.584316][ T1207] usb 1-1: Manufacturer: syz [ 589.598227][ T1207] usb 1-1: SerialNumber: syz [ 589.648036][ T1207] usb 1-1: config 0 descriptor?? [ 589.735745][ T24] usb 4-1: USB disconnect, device number 82 [ 589.747593][ T1207] cdc_ncm 1-1:0.47: CDC Union missing and no IAD found [ 589.765042][ T24] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 589.818635][ T1207] cdc_ncm 1-1:0.47: bind() failure [ 590.009809][T13962] usbhid 3-1:0.0: can't add hid device: -71 [ 590.018414][T13962] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 590.045464][T13962] usb 3-1: USB disconnect, device number 80 [ 590.200708][T14298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.239441][T14302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2292'. [ 590.378295][T14308] veth0_to_bond: left allmulticast mode [ 590.384004][T14308] veth0_to_bond: left promiscuous mode [ 590.390275][T14308] bridge4: port 1(veth0_to_bond) entered disabled state [ 590.420114][T14308] bridge5: port 1(veth0_to_bond) entered blocking state [ 590.428423][T14308] bridge5: port 1(veth0_to_bond) entered disabled state [ 590.460554][T14308] veth0_to_bond: entered allmulticast mode [ 590.528792][T14311] input: syz0 as /devices/virtual/input/input37 [ 590.567924][T14308] veth0_to_bond: entered promiscuous mode [ 590.788104][T14317] kvm: pic: non byte write [ 590.969175][T13962] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 591.106559][ T24] usb 1-1: USB disconnect, device number 77 [ 591.161904][T13962] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.172361][T13962] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 591.194446][T13962] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 591.205374][T13962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 591.213453][T13962] usb 3-1: SerialNumber: syz [ 591.225589][ T1207] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 591.375501][ T1207] usb 4-1: Using ep0 maxpacket: 32 [ 591.382756][ T1207] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 591.396273][ T1207] usb 4-1: config 0 has no interface number 0 [ 591.418267][ T1207] usb 4-1: config 0 interface 85 has no altsetting 0 [ 591.431932][T13962] usb 3-1: 0:2 : does not exist [ 591.450080][T13962] usb 3-1: USB disconnect, device number 81 [ 591.491289][ T1207] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 591.503559][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.510821][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.585380][ T1207] usb 4-1: Product: syz [ 591.589634][ T1207] usb 4-1: Manufacturer: syz [ 591.594229][ T1207] usb 4-1: SerialNumber: syz [ 591.640941][T14343] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2303'. [ 591.696400][ T1207] usb 4-1: config 0 descriptor?? [ 591.733967][ T1207] appletouch 4-1:0.85: Could not find int-in endpoint [ 591.762916][ T1207] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 591.878557][ T1207] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 591.925340][T14329] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2297'. [ 591.938271][T14329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.026865][T14329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.152564][ T1207] usb 4-1: USB disconnect, device number 83 [ 592.212593][T14351] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 592.224913][T14351] batman_adv: batadv0: Adding interface: ip6gretap1 [ 592.231668][T14351] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.279999][T14351] batman_adv: batadv0: Interface activated: ip6gretap1 [ 592.961687][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 592.961705][ T30] audit: type=1326 audit(1759589267.420:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.2.2313" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ed438eec9 code=0x0 [ 593.995663][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2317'. [ 594.099522][T14400] netlink: 'syz.2.2319': attribute type 10 has an invalid length. [ 594.436547][T14406] netlink: 'syz.2.2322': attribute type 27 has an invalid length. [ 594.468671][T14406] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 594.485663][T14406] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 594.595321][ T1207] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 594.625452][T14411] vivid-000: ================= START STATUS ================= [ 594.636669][T14411] vivid-000: Test Pattern: 75% Colorbar [ 594.653644][T14411] vivid-000: Fill Percentage of Frame: 100 [ 594.670905][T14411] vivid-000: Horizontal Movement: No Movement [ 594.710400][T14411] vivid-000: Vertical Movement: No Movement [ 594.735274][T14411] vivid-000: OSD Text Mode: All [ 594.740600][T14411] vivid-000: Show Border: false [ 594.753769][T14411] vivid-000: Show Square: false [ 594.770952][T14411] vivid-000: Sensor Flipped Horizontally: true [ 594.805338][T13962] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 594.806642][ T1207] usb 1-1: Using ep0 maxpacket: 16 [ 594.813400][T14411] vivid-000: Sensor Flipped Vertically: false [ 594.911070][T14411] vivid-000: Insert SAV Code in Image: false [ 594.948658][ T1207] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 594.957495][ T1207] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.979516][ T1207] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.988648][T13962] usb 3-1: Using ep0 maxpacket: 16 [ 594.995015][T14411] vivid-000: Insert EAV Code in Image: false [ 595.020143][T14411] vivid-000: Insert Video Guard Band: false [ 595.042418][ T1207] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 595.055229][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.071946][ T1207] usb 1-1: Product: syz [ 595.078390][T14411] vivid-000: Reduced Framerate: false [ 595.087528][ T1207] usb 1-1: Manufacturer: syz [ 595.092787][ T1207] usb 1-1: SerialNumber: syz [ 595.098388][T14411] vivid-000: HDMI 000-0 Is Connected To: None [ 595.124425][T13962] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 595.125885][T14411] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 595.142307][T14411] vivid-000: Enable Capture Cropping: true grabbed [ 595.148297][T13962] usb 3-1: config 0 has no interface number 0 [ 595.169481][T13962] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 595.182412][T14411] vivid-000: Enable Capture Composing: true grabbed [ 595.196563][T13962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.205082][T14411] vivid-000: Enable Capture Scaler: true grabbed [ 595.217125][T14411] vivid-000: Timestamp Source: End of Frame [ 595.223165][T14411] vivid-000: Colorspace: SMPTE 170M [ 595.229152][T14411] vivid-000: Transfer Function: Default [ 595.234848][T14411] vivid-000: Y'CbCr Encoding: Default [ 595.241881][T14411] vivid-000: HSV Encoding: Hue 0-179 [ 595.256157][T14411] vivid-000: Quantization: Default [ 595.261514][T14411] vivid-000: Apply Alpha To Red Only: false [ 595.271006][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 595.272903][T13962] usb 3-1: Product: syz [ 595.286833][T14411] vivid-000: Standard Aspect Ratio: 4x3 [ 595.309438][T14411] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 595.326313][T14411] vivid-000: DV Timings: 640x480p59 inactive [ 595.333186][T14411] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 595.341526][ T1207] usb 1-1: 0:2 : does not exist [ 595.347388][T14411] vivid-000: Maximum EDID Blocks: 2 [ 595.352619][T14411] vivid-000: Limited RGB Range (16-235): false [ 595.359017][T14411] vivid-000: Rx RGB Quantization Range: Automatic [ 595.366142][T13962] usb 3-1: Manufacturer: syz [ 595.366244][T14411] vivid-000: Power Present: 0x00000000 [ 595.425585][T14411] tpg source WxH: 720x480 (Y'CbCr) [ 595.431643][T14411] tpg field: 4 [ 595.435777][T13962] usb 3-1: SerialNumber: syz [ 595.440693][T14411] tpg crop: (0,0)/720x480 [ 595.445675][T14411] tpg compose: (0,0)/720x480 [ 595.450362][T14411] tpg colorspace: 1 [ 595.454332][T14411] tpg transfer function: 0/1 [ 595.459173][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 595.469331][T14411] tpg Y'CbCr encoding: 3/3 [ 595.471507][ T10] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 595.476496][T13962] usb 3-1: config 0 descriptor?? [ 595.491055][T14411] tpg quantization: 0/2 [ 595.493913][ T10] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 595.510115][T14411] tpg RGB range: 0/2 [ 595.646871][T14411] vivid-000: ================== END STATUS ================== [ 595.661651][T13962] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 595.675543][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.846686][ T10] usb 4-1: Product: syz [ 595.852565][ T1207] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 595.892949][ T10] usb 4-1: Manufacturer: syz [ 596.012185][ T10] usb 4-1: SerialNumber: syz [ 596.039114][ T10] usb 4-1: config 0 descriptor?? [ 596.045292][ T5917] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 596.140016][ T10] usb 4-1: bad CDC descriptors [ 596.153211][ T1207] usb 1-1: USB disconnect, device number 78 [ 596.163367][ T10] usb 4-1: unsupported MDLM descriptors [ 596.281613][ T5917] usb 5-1: device descriptor read/64, error -71 [ 596.385473][T13962] gspca_spca1528: reg_w err -110 [ 596.405297][T13962] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 596.429909][T14433] fuse: Unknown parameter '00000000000000000000' [ 596.610133][T14435] program syz.0.2329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 596.635263][ T5917] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 596.757237][T14435] loop2: detected capacity change from 0 to 7 [ 596.771876][T14435] Dev loop2: unable to read RDB block 7 [ 596.778881][T14435] loop2: AHDI p2 p3 [ 596.783153][T14435] loop2: partition table partially beyond EOD, truncated [ 596.791335][T14435] loop2: p2 start 1702059890 is beyond EOD, truncated [ 596.815406][ T5917] usb 5-1: device descriptor read/64, error -71 [ 596.943442][ T5917] usb usb5-port1: attempt power cycle [ 597.271058][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2331'. [ 597.282659][T14440] netlink: 'syz.0.2331': attribute type 2 has an invalid length. [ 597.306014][ T1207] usb 3-1: USB disconnect, device number 82 [ 597.316065][ T5917] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 597.350807][T14445] netlink: 'syz.2.2332': attribute type 10 has an invalid length. [ 597.361444][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2331'. [ 597.371925][ T5917] usb 5-1: device descriptor read/8, error -71 [ 597.403768][T14440] netlink: 'syz.0.2331': attribute type 18 has an invalid length. [ 597.452009][T14440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2331'. [ 597.531356][ T24] usb 4-1: USB disconnect, device number 84 [ 597.627755][ T5917] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 597.656964][ T5917] usb 5-1: device descriptor read/8, error -71 [ 597.749801][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'. [ 597.767614][ T5917] usb usb5-port1: unable to enumerate USB device [ 598.034457][T14454] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2334'. [ 598.401769][T14464] loop2: detected capacity change from 0 to 7 [ 598.413926][T14464] Dev loop2: unable to read RDB block 7 [ 598.426909][T14464] loop2: AHDI p1 p2 [ 598.545060][T14464] loop2: partition table partially beyond EOD, truncated [ 598.552762][T14464] loop2: p1 start 1818582900 is beyond EOD, truncated [ 598.596074][T14466] netlink: 'syz.3.2338': attribute type 1 has an invalid length. [ 598.596494][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 598.805406][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 598.812799][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 598.919225][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 598.947203][T14473] loop2: detected capacity change from 0 to 7 [ 599.006306][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.026392][T14473] Dev loop2: unable to read RDB block 7 [ 599.045291][T14473] loop2: AHDI p1 p2 [ 599.048693][ T24] usb 2-1: config 0 descriptor?? [ 599.057500][T14473] loop2: partition table partially beyond EOD, truncated [ 599.106047][T14473] loop2: p1 start 1818582900 is beyond EOD, truncated [ 599.266060][ T24] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 599.468978][ T24] usb 2-1: USB disconnect, device number 56 [ 599.583125][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 599.655273][ T5917] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 599.805256][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 599.812164][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 599.823688][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 599.895247][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 600.008239][ T1207] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 600.327982][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 600.361984][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 600.440051][T14486] netlink: 'syz.0.2343': attribute type 10 has an invalid length. [ 600.448605][ T1207] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 600.460446][ T5917] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 600.478832][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.488661][ T1207] usb 4-1: config 0 has no interface number 0 [ 600.496640][ T1207] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 600.508054][ T5917] usb 3-1: Product: syz [ 600.512216][ T5917] usb 3-1: Manufacturer: syz [ 600.555297][ T5917] usb 3-1: SerialNumber: syz [ 600.588661][ T1207] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 600.615465][ T5917] usb 3-1: config 0 descriptor?? [ 600.630790][ T1207] usb 4-1: config 0 has no interface number 0 [ 600.655543][ T1207] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 600.671688][ T1207] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 600.683588][ T1207] usb 4-1: config 0 has no interface number 0 [ 600.720411][ T1207] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 600.783325][ T1207] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 600.793653][ T1207] usb 4-1: config 0 has no interface number 0 [ 600.821151][ T1207] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 600.979405][T14508] debugfs: '!' already exists in 'ieee80211' [ 601.204234][ T1207] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 601.444539][ T1207] usb 4-1: config 0 has no interface number 0 [ 601.488920][ T1207] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 601.838823][ T1207] usb 4-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 601.882971][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.912909][ T1207] usb 4-1: Product: syz [ 601.953333][ T1207] usb 4-1: Manufacturer: syz [ 601.967145][ T1207] usb 4-1: SerialNumber: syz [ 601.997461][ T1207] usb 4-1: config 0 descriptor?? [ 602.042307][ T1207] cdc_ncm 4-1:0.47: CDC Union missing and no IAD found [ 602.055355][ T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 602.089714][ T1207] cdc_ncm 4-1:0.47: bind() failure [ 602.255390][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 602.281825][ T24] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 602.330380][ T24] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 602.364107][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.383545][ T24] usb 5-1: Product: syz [ 602.447394][T14524] netlink: 'syz.1.2355': attribute type 10 has an invalid length. [ 602.540593][ T24] usb 5-1: Manufacturer: syz [ 602.544990][T14526] tipc: Cannot configure node identity twice [ 602.549662][ T24] usb 5-1: SerialNumber: syz [ 602.588655][ T24] usb 5-1: config 0 descriptor?? [ 602.613508][ T24] usb 5-1: bad CDC descriptors [ 602.623806][ T24] usb 5-1: unsupported MDLM descriptors [ 603.605662][ T5917] rc_core: IR keymap rc-imon-rsc not found [ 603.625958][ T5917] Registered IR keymap rc-empty [ 603.644269][ T5917] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 603.653557][ T1207] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 603.676591][ T5917] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input38 [ 603.713754][ T5917] usb 3-1: USB disconnect, device number 83 [ 603.731918][ T24] usb 4-1: USB disconnect, device number 85 [ 603.816861][ T1207] usb 1-1: Using ep0 maxpacket: 16 [ 603.830543][ T1207] usb 1-1: unable to get BOS descriptor or descriptor too short [ 603.840072][ T1207] usb 1-1: config 9 has an invalid interface number: 48 but max is 0 [ 603.856413][ T1207] usb 1-1: config 9 has no interface number 0 [ 603.897345][ T1207] usb 1-1: config 9 interface 48 has no altsetting 0 [ 603.932517][ T1207] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 603.967668][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.978788][T14546] fuse: Unknown parameter 'òootmode' [ 603.992902][ T1207] usb 1-1: Product: syz [ 604.001327][ T1207] usb 1-1: Manufacturer: syz [ 604.013916][T14548] fuse: Unknown parameter 'òootmode' [ 604.033001][ T1207] usb 1-1: SerialNumber: syz [ 604.264062][ T1207] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 604.435712][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 604.495332][ T24] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 604.563893][ T5917] usb 5-1: USB disconnect, device number 106 [ 604.595476][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 604.613882][ T10] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 604.642693][ T10] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 604.654474][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 604.664247][ T10] usb 2-1: config 1 has no interface number 0 [ 604.666641][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 604.681813][ T10] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 604.693487][ T10] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 604.706863][ T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 604.708954][ T24] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 604.716932][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.739600][T14559] netlink: 'syz.4.2367': attribute type 10 has an invalid length. [ 604.748563][ T24] usb 4-1: config 0 has no interface number 0 [ 604.754801][ T24] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 604.772288][ T24] usb 4-1: config 0 interface 85 has no altsetting 0 [ 604.778583][ T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 604.799326][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 604.809180][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.817718][ T24] usb 4-1: Product: syz [ 604.822205][ T24] usb 4-1: Manufacturer: syz [ 604.827884][ T24] usb 4-1: SerialNumber: syz [ 604.839467][ T24] usb 4-1: config 0 descriptor?? [ 604.877987][ T1207] gspca_vc032x: reg_r err -71 [ 604.882761][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 604.889780][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 604.901115][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 604.907688][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 604.918778][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 604.924158][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 604.945222][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 604.950581][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 604.969738][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 604.982257][ T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 604.992539][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.001827][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.007336][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.012659][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.035504][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.040974][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.047957][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.053385][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.058880][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.064239][ T1207] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.072126][ T1207] gspca_vc032x: Unknown sensor... [ 605.085478][ T1207] vc032x 1-1:9.48: probe with driver vc032x failed with error -22 [ 605.125619][ T1207] usb 1-1: USB disconnect, device number 79 [ 605.260368][ T24] appletouch 4-1:0.85: Geyser mode initialized. [ 605.268750][ T24] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input39 [ 605.399603][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.427725][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.445578][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2372'. [ 605.509888][ T24] usb 4-1: USB disconnect, device number 86 [ 605.522553][ T10] usb 2-1: USB disconnect, device number 57 [ 605.588191][ T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 605.627800][ T24] appletouch 4-1:0.85: input: appletouch disconnected [ 605.649015][T14586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2374'. [ 605.865692][T14591] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2373'. [ 605.875282][T14591] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2373'. [ 605.972464][ T1207] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 606.230859][ T1207] usb 3-1: config 0 has an invalid interface number: 47 but max is 0 [ 606.239107][ T1207] usb 3-1: config 0 has no interface number 0 [ 606.258984][ T1207] usb 3-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 606.297540][ T1207] usb 3-1: config 0 has an invalid interface number: 47 but max is 0 [ 606.309318][T14591] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2373'. [ 606.355242][ T1207] usb 3-1: config 0 has no interface number 0 [ 606.373461][T14591] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2373'. [ 606.401156][T14601] IPv6: syztnl1: Disabled Multicast RS [ 606.406817][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 606.414814][ T1207] usb 3-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 606.493146][T14603] netlink: 'syz.0.2378': attribute type 10 has an invalid length. [ 606.533526][ T1207] usb 3-1: config 0 has an invalid interface number: 47 but max is 0 [ 606.543866][ T1207] usb 3-1: config 0 has no interface number 0 [ 606.550585][ T1207] usb 3-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 606.629148][ T1207] usb 3-1: config 0 has an invalid interface number: 47 but max is 0 [ 606.645225][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 606.659255][ T1207] usb 3-1: config 0 has no interface number 0 [ 606.669069][ T10] usb 2-1: config 0 has no interfaces? [ 606.674616][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 606.711537][ T1207] usb 3-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 606.723532][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.755315][ T1207] usb 3-1: config 0 has an invalid interface number: 47 but max is 0 [ 606.783530][T14591] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2373'. [ 606.785538][ T1207] usb 3-1: config 0 has no interface number 0 [ 606.805885][ T10] usb 2-1: config 0 descriptor?? [ 606.815752][T14591] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2373'. [ 606.843131][ T1207] usb 3-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 606.934104][ T1207] usb 3-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 606.980020][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.092289][ T1207] usb 3-1: Product: syz [ 607.102451][ T1207] usb 3-1: Manufacturer: syz [ 607.147115][ T1207] usb 3-1: SerialNumber: syz [ 607.162745][ T1207] usb 3-1: config 0 descriptor?? [ 607.190778][ T1207] cdc_ncm 3-1:0.47: CDC Union missing and no IAD found [ 607.198294][ T1207] cdc_ncm 3-1:0.47: bind() failure [ 607.455612][T14628] binder: 14627:14628 ioctl c0306201 2000000001c0 returned -14 [ 608.803534][ T24] usb 3-1: USB disconnect, device number 84 [ 609.245448][ T24] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 609.401532][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 609.413960][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 35, changing to 7 [ 609.425304][ T1207] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 609.446811][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 41963, setting to 1024 [ 609.615525][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 609.632968][T13962] usb 2-1: USB disconnect, device number 58 [ 609.635321][ T1207] usb 3-1: Using ep0 maxpacket: 8 [ 609.643951][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.643975][ T24] usb 5-1: Product: syz [ 609.643988][ T24] usb 5-1: Manufacturer: syz [ 609.644001][ T24] usb 5-1: SerialNumber: syz [ 609.719751][ T24] usb 5-1: config 0 descriptor?? [ 609.766996][ T24] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 7f [ 609.814278][ T1207] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 609.848011][ T1207] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 54240, setting to 1024 [ 609.879598][ T1207] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 609.895333][ T1207] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.911094][ T1207] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 609.920532][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.494691][T13962] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 610.640101][ T24] usb 5-1: USB disconnect, device number 107 [ 610.691699][ T1207] usb 3-1: Product: syz [ 610.708376][ T1207] usb 3-1: Manufacturer: syz [ 610.723941][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.736962][T13962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 610.745181][ T1207] usb 3-1: SerialNumber: syz [ 610.751167][T13962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 610.864581][T13962] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 610.866875][T14646] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 610.923029][T14646] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 610.997779][T13962] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 611.015418][T14658] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 611.035215][T13962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.074784][T13962] usb 2-1: config 0 descriptor?? [ 611.101286][T14652] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 611.235583][ T24] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 611.422625][T14667] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2396'. [ 611.449330][T14665] netlink: 'syz.3.2397': attribute type 3 has an invalid length. [ 611.457518][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 611.462981][T14665] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2397'. [ 611.475069][ T24] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 611.497505][ T24] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 611.511061][ T24] usb 1-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 611.529441][ T24] usb 1-1: config 168 interface 0 has no altsetting 0 [ 611.588358][ T24] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 611.605971][ T24] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 611.750397][T13962] usbhid 2-1:0.0: can't add hid device: -71 [ 611.756677][T13962] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 611.767989][ T24] usb 1-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 611.820303][T13962] usb 2-1: USB disconnect, device number 59 [ 611.838479][ T24] usb 1-1: config 168 interface 0 has no altsetting 0 [ 611.864567][ T24] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 611.875868][ T24] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 611.923250][ T24] usb 1-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 611.973221][ T24] usb 1-1: config 168 interface 0 has no altsetting 0 [ 611.997016][ T24] usb 1-1: string descriptor 0 read error: -22 [ 611.997654][T14670] loop2: detected capacity change from 0 to 7 [ 612.009845][ T24] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 612.019851][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.019936][ T5847] Dev loop2: unable to read RDB block 7 [ 612.131325][ T5847] loop2: AHDI p1 p2 [ 612.143333][ T5847] loop2: partition table partially beyond EOD, truncated [ 612.154004][ T5847] loop2: p1 start 1818582900 is beyond EOD, truncated [ 612.154055][ T24] adutux 1-1:168.0: interrupt endpoints not found [ 612.169603][T14670] Dev loop2: unable to read RDB block 7 [ 612.175418][T14670] loop2: AHDI p1 p2 [ 612.179453][T14670] loop2: partition table partially beyond EOD, truncated [ 612.186797][T14670] loop2: p1 start 1818582900 is beyond EOD, truncated [ 612.458726][ T1207] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 612.470595][ T1207] usbtest 3-1:1.0: Linux user mode ISO test driver [ 612.484909][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2399'. [ 612.495244][ T1207] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 612.623091][ T1207] usb 3-1: USB disconnect, device number 85 [ 612.763150][ T10] usb 1-1: USB disconnect, device number 80 [ 612.895313][ T24] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 613.257220][ T24] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 613.265397][ T24] usb 4-1: config 0 has no interface number 0 [ 613.274924][ T24] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 613.386122][ T24] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 613.397232][ T24] usb 4-1: config 0 has no interface number 0 [ 613.408276][ T24] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 613.951473][ T24] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 613.976128][ T24] usb 4-1: config 0 has no interface number 0 [ 613.995621][ T24] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 614.035938][ T24] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 614.044042][ T24] usb 4-1: config 0 has no interface number 0 [ 614.065284][ T24] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 614.101094][ T24] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 614.155089][ T24] usb 4-1: config 0 has no interface number 0 [ 614.235276][ T24] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 614.302051][ T24] usb 4-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 614.316059][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.325789][ T24] usb 4-1: Product: syz [ 614.339474][ T24] usb 4-1: Manufacturer: syz [ 614.344666][ T24] usb 4-1: SerialNumber: syz [ 614.352792][ T24] usb 4-1: config 0 descriptor?? [ 614.384791][ T24] cdc_ncm 4-1:0.47: CDC Union missing and no IAD found [ 614.399716][ T24] cdc_ncm 4-1:0.47: bind() failure [ 615.175227][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 615.677519][T14714] PKCS8: Unsupported PKCS#8 version [ 615.699476][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.723443][ T10] usb 4-1: USB disconnect, device number 87 [ 615.756644][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 615.777283][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.894125][ T24] usb 2-1: config 0 descriptor?? [ 616.128878][T14726] rtc_cmos 00:00: Alarms can be up to one day in the future [ 616.324462][T14730] loop6: detected capacity change from 0 to 524279808 [ 616.349408][T14730] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2413'. [ 616.377258][T14733] netlink: 'syz.2.2412': attribute type 3 has an invalid length. [ 616.398648][ T24] logitech-djreceiver 0003:046D:C71F.0010: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 616.607813][ T24] usb 2-1: USB disconnect, device number 60 [ 617.575233][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 617.752632][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.770408][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 617.853224][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.104603][ T10] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 618.158769][T14757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2419'. [ 618.191072][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.278742][ T10] usb 1-1: Product: syz [ 618.394407][ T10] usb 1-1: Manufacturer: syz [ 618.403492][ T10] usb 1-1: SerialNumber: syz [ 618.450947][ T10] usb 1-1: config 0 descriptor?? [ 618.476921][ T10] usb 1-1: ucan: probing device on interface #0 [ 618.483659][ T10] usb 1-1: ucan: invalid EP count (1) [ 618.489228][ T10] usb 1-1: ucan: probe failed; try to update the device firmware [ 618.515279][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 618.696492][T14760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2420'. [ 618.711191][T14736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.720643][T14736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.886580][ T24] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 618.894678][ T24] usb 2-1: config 0 has no interface number 0 [ 619.023475][ T24] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 619.095773][ T24] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 619.146311][ T24] usb 2-1: config 0 has no interface number 0 [ 619.152544][ T24] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 619.521048][ T24] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 619.546937][ T24] usb 2-1: config 0 has no interface number 0 [ 619.583125][ T24] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 619.800453][T14779] bond2 (unregistering): Released all slaves [ 619.863578][ T24] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 619.880826][ T24] usb 2-1: config 0 has no interface number 0 [ 619.917828][ T24] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 619.975563][ T24] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 619.989575][ T24] usb 2-1: config 0 has no interface number 0 [ 620.007173][ T24] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 620.064359][ T24] usb 2-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 620.077557][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.086142][ T24] usb 2-1: Product: syz [ 620.103696][ T24] usb 2-1: Manufacturer: syz [ 620.187087][ T24] usb 2-1: SerialNumber: syz [ 620.223975][T14791] rtc_cmos 00:00: Alarms can be up to one day in the future [ 620.465537][ T24] usb 2-1: config 0 descriptor?? [ 620.508083][ T24] cdc_ncm 2-1:0.47: CDC Union missing and no IAD found [ 620.508336][T14794] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2430'. [ 620.524335][ T24] cdc_ncm 2-1:0.47: bind() failure [ 620.804162][T14794] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2430'. [ 621.058918][ T24] usb 1-1: USB disconnect, device number 81 [ 621.927105][T14820] netlink: 'syz.3.2440': attribute type 32 has an invalid length. [ 621.956754][T14821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2439'. [ 622.005305][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2440'. [ 622.109274][ T24] usb 2-1: USB disconnect, device number 61 [ 622.118847][T14820] bond3: option coupled_control: invalid value (110) [ 622.223564][T14820] bond3 (unregistering): Released all slaves [ 622.393253][T14821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.405961][T14821] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.457256][T14821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.510151][T14827] input: syz0 as /devices/virtual/input/input42 [ 622.529084][ T10] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 622.622009][T14833] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2444'. [ 622.794773][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 622.897106][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 622.915022][ T10] usb 5-1: config 0 has no interface number 0 [ 622.938521][ T10] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 622.947897][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.956453][ T10] usb 5-1: Product: syz [ 622.961475][ T10] usb 5-1: Manufacturer: syz [ 622.968695][ T10] usb 5-1: SerialNumber: syz [ 623.106686][ T10] usb 5-1: config 0 descriptor?? [ 623.150888][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 623.875520][ T10] gspca_spca1528: reg_w err -110 [ 623.896506][ T10] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 624.535789][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.542198][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.599190][T14867] loop2: detected capacity change from 0 to 7 [ 624.614481][ T5847] Dev loop2: unable to read RDB block 7 [ 624.681426][T14868] netdevsim netdevsim1: Direct firmware load for x failed with error -2 [ 624.709657][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'. [ 625.039392][T14868] netdevsim netdevsim1: Falling back to sysfs fallback for: x [ 625.054297][T14872] warning: `syz.1.2448' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 625.066734][ T5847] loop2: AHDI p1 p2 [ 625.075976][ T5847] loop2: partition table partially beyond EOD, truncated [ 625.092430][ T5847] loop2: p1 start 1818582900 is beyond EOD, truncated [ 625.118855][T14867] Dev loop2: unable to read RDB block 7 [ 625.210243][T14867] loop2: AHDI p1 p2 [ 625.217647][ T24] usb 5-1: USB disconnect, device number 108 [ 625.240126][T14867] loop2: partition table partially beyond EOD, truncated [ 625.316694][T14867] loop2: p1 start 1818582900 is beyond EOD, truncated [ 625.335568][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 625.812533][ T10] usb 1-1: config 0 has an invalid interface number: 47 but max is 0 [ 625.821647][ T10] usb 1-1: config 0 has no interface number 0 [ 625.828027][ T10] usb 1-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 625.846801][ T10] usb 1-1: config 0 has an invalid interface number: 47 but max is 0 [ 625.856311][ T10] usb 1-1: config 0 has no interface number 0 [ 625.862920][ T10] usb 1-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 625.908635][T14884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2459'. [ 625.931682][ T10] usb 1-1: config 0 has an invalid interface number: 47 but max is 0 [ 625.940376][ T10] usb 1-1: config 0 has no interface number 0 [ 625.947127][ T10] usb 1-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 625.963731][ T10] usb 1-1: config 0 has an invalid interface number: 47 but max is 0 [ 625.972725][ T10] usb 1-1: config 0 has no interface number 0 [ 625.979561][ T10] usb 1-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 626.015291][ T10] usb 1-1: config 0 has an invalid interface number: 47 but max is 0 [ 626.023465][ T10] usb 1-1: config 0 has no interface number 0 [ 626.033049][ T10] usb 1-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 626.066852][ T10] usb 1-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 626.076225][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.084262][ T10] usb 1-1: Product: syz [ 626.092052][ T10] usb 1-1: Manufacturer: syz [ 626.107066][ T10] usb 1-1: SerialNumber: syz [ 626.183042][ T10] usb 1-1: config 0 descriptor?? [ 626.198683][ T10] cdc_ncm 1-1:0.47: CDC Union missing and no IAD found [ 626.206225][ T10] cdc_ncm 1-1:0.47: bind() failure [ 626.719703][T14897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 627.492826][T14907] veth1: entered promiscuous mode [ 627.774590][ T6573] usb 1-1: USB disconnect, device number 82 [ 627.994947][T14920] netlink: 'syz.0.2469': attribute type 32 has an invalid length. [ 628.035655][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2469'. [ 628.053042][T14922] netlink: 'syz.4.2471': attribute type 10 has an invalid length. [ 628.159062][T14920] bond4: option coupled_control: invalid value (110) [ 628.222991][T14920] bond4 (unregistering): Released all slaves [ 628.375402][ T10] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 628.537178][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.595284][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 628.658513][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 628.688042][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 628.935172][ T10] usb 4-1: SerialNumber: syz [ 628.942019][ T6573] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 629.115974][ T6573] usb 1-1: Using ep0 maxpacket: 16 [ 629.129780][ T6573] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 629.141584][ T6573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.150107][ T6573] usb 1-1: Product: syz [ 629.159442][ T10] usb 4-1: 0:2 : does not exist [ 629.163509][ T6573] usb 1-1: Manufacturer: syz [ 629.394099][ T6573] usb 1-1: SerialNumber: syz [ 629.424872][ T10] usb 4-1: USB disconnect, device number 89 [ 629.520512][ T6573] r8152-cfgselector 1-1: Unknown version 0x0000 [ 629.555197][ T6573] r8152-cfgselector 1-1: config 0 descriptor?? [ 629.578716][ T6573] hub 1-1:0.0: bad descriptor, ignoring hub [ 629.605325][ T6573] hub 1-1:0.0: probe with driver hub failed with error -5 [ 629.714437][T14941] tipc: Can't bind to reserved service type 0 [ 630.185912][ T6573] r8152-cfgselector 1-1: reset high-speed USB device number 83 using dummy_hcd [ 630.358304][T14955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2478'. [ 630.440098][T14955] veth0_to_bond: left allmulticast mode [ 630.446148][T14955] veth0_to_bond: left promiscuous mode [ 630.453348][T14955] bridge4: port 1(veth0_to_bond) entered disabled state [ 630.463720][T14955] bridge5: port 1(veth0_to_bond) entered blocking state [ 630.480106][T14955] bridge5: port 1(veth0_to_bond) entered disabled state [ 630.493851][T14955] veth0_to_bond: entered allmulticast mode [ 630.608323][T14955] veth0_to_bond: entered promiscuous mode [ 630.746962][T14967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.769706][T14967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.035407][ T24] r8152-cfgselector 1-1: USB disconnect, device number 83 [ 631.542661][ T50] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.555974][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.571288][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.581382][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.725664][T14942] Bluetooth: hci4: command 0x0405 tx timeout [ 632.029296][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2488'. [ 632.791371][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2491'. [ 633.727135][T15017] netlink: 'syz.4.2496': attribute type 32 has an invalid length. [ 633.735014][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2496'. [ 633.891242][T15017] bond3: option coupled_control: invalid value (110) [ 633.989570][T15017] bond3 (unregistering): Released all slaves [ 634.207860][T15036] rtc_cmos 00:00: Alarms can be up to one day in the future [ 634.215494][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2500'. [ 637.132925][T15070] fuse: Unknown parameter '00000000000000000000' [ 637.260340][T15072] netlink: 'syz.4.2507': attribute type 21 has an invalid length. [ 637.377424][T15072] netlink: 'syz.4.2507': attribute type 1 has an invalid length. [ 637.407374][T15072] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2507'. [ 638.735736][T15091] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2507'. [ 639.135369][ T1207] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 639.153611][T15099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2516'. [ 639.315569][ T1207] usb 4-1: Using ep0 maxpacket: 32 [ 639.323222][ T1207] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 639.333613][ T1207] usb 4-1: config 0 has no interface number 0 [ 639.341366][ T1207] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.353928][ T1207] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.364638][ T1207] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 639.374826][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.475400][ T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 639.597329][ T1207] usb 4-1: config 0 descriptor?? [ 639.645229][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 639.653615][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.665995][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.769559][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 639.812799][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.897600][ T10] usb 1-1: config 0 descriptor?? [ 641.086365][ T30] audit: type=1326 audit(1759589315.540:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15117 comm="syz.2.2520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ed438eec9 code=0x0 [ 641.349138][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2521'. [ 642.101772][T15127] fuse: Unknown parameter '00000000000000000000' [ 642.233884][ T10] usb 1-1: USB disconnect, device number 84 [ 642.949350][T15136] netlink: 'syz.4.2524': attribute type 32 has an invalid length. [ 642.959170][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2524'. [ 643.248566][T15136] bond3: option coupled_control: invalid value (110) [ 643.438553][T15136] bond3 (unregistering): Released all slaves [ 643.478162][ T1207] usbhid 4-1:0.1: can't add hid device: -71 [ 643.511648][ T1207] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 643.667023][ T1207] usb 4-1: USB disconnect, device number 90 [ 643.785502][T15145] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2526'. [ 645.365423][ T24] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 645.665226][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 645.693351][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.729701][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 645.745904][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 645.756024][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.770207][ T24] usb 1-1: config 0 descriptor?? [ 645.855557][ T6573] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 646.069869][ T6573] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 646.170981][ T6573] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 646.181921][ T6573] usb 5-1: config 220 interface 0 has no altsetting 0 [ 646.290638][ T6573] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 646.307843][ T6573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.423698][ T24] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 646.431608][ T6573] usb 5-1: Product: syz [ 646.438081][ T6573] usb 5-1: Manufacturer: syz [ 646.444735][ T6573] usb 5-1: SerialNumber: syz [ 646.672489][ T24] usb 2-1: config 0 has an invalid interface number: 115 but max is 0 [ 647.004764][ T24] usb 2-1: config 0 has no interface number 0 [ 647.011158][ T24] usb 2-1: config 0 interface 115 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 647.022469][ T24] usb 2-1: config 0 interface 115 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 647.041971][ T24] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a45, bcdDevice=39.9b [ 647.051571][T15172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.052150][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.127630][T15172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.172408][ T6573] uvcvideo 5-1:220.0: Found Unit with invalid ID 0 [ 647.207739][ T6573] uvcvideo 5-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 647.250662][ T24] usb 2-1: Product: syz [ 647.258856][ T6573] uvcvideo 5-1:220.0: No valid video chain found. [ 647.268036][ T24] usb 2-1: Manufacturer: syz [ 647.276836][ T24] usb 2-1: SerialNumber: syz [ 647.286897][ T6573] usb 5-1: USB disconnect, device number 109 [ 647.381185][ T24] usb 2-1: config 0 descriptor?? [ 647.513090][T15180] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 647.809882][ T24] usb 2-1: USB disconnect, device number 62 [ 647.915274][ T1207] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 648.055334][ T1207] usb 4-1: device descriptor read/64, error -71 [ 648.296757][ T1207] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 648.317775][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2541'. [ 648.345515][T15204] veth0_to_bond: left allmulticast mode [ 648.351963][T15204] veth0_to_bond: left promiscuous mode [ 648.359937][T15204] bridge5: port 1(veth0_to_bond) entered disabled state [ 648.395862][T15204] bridge6: port 1(veth0_to_bond) entered blocking state [ 648.403630][T15204] bridge6: port 1(veth0_to_bond) entered disabled state [ 648.412198][T15204] veth0_to_bond: entered allmulticast mode [ 648.424024][T15204] veth0_to_bond: entered promiscuous mode [ 648.435964][ T1207] usb 4-1: device descriptor read/64, error -71 [ 648.545384][ T1207] usb usb4-port1: attempt power cycle [ 648.725255][ T10] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 648.735221][ T24] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 648.895207][ T1207] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 648.915205][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 648.921499][ T1207] usb 4-1: device descriptor read/8, error -71 [ 648.922645][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.944919][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.967148][ T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 648.993954][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.010381][ T24] usb 5-1: config 0 descriptor?? [ 649.012304][ T5917] usb 1-1: USB disconnect, device number 85 [ 649.098687][T15213] bond2 (unregistering): Released all slaves [ 649.165662][ T1207] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 649.198497][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 649.206241][ T10] usb 2-1: can't read configurations, error -71 [ 649.228091][ T1207] usb 4-1: device descriptor read/8, error -71 [ 649.335669][ T1207] usb usb4-port1: unable to enumerate USB device [ 649.415180][ T5917] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 649.433002][ T24] corsair-psu 0003:1B1C:1C03.0011: unbalanced collection at end of report description [ 649.459901][ T24] corsair-psu 0003:1B1C:1C03.0011: probe with driver corsair-psu failed with error -22 [ 649.578831][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.605950][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.628893][T15226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.639155][ T5917] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 649.651779][T15226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.659616][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.695017][ T5917] usb 1-1: config 0 descriptor?? [ 649.755482][T15231] fuse: Unknown parameter '00000000000000000000' [ 649.986127][ T1207] usb 5-1: USB disconnect, device number 110 [ 650.208483][T15234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2550'. [ 650.452353][ T5917] arvo 0003:1E7D:30D4.0012: unknown main item tag 0x0 [ 650.479610][ T5917] arvo 0003:1E7D:30D4.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 650.513094][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2553'. [ 650.608626][T15245] veth0_to_bond: left allmulticast mode [ 650.614280][T15245] veth0_to_bond: left promiscuous mode [ 650.652764][T15245] bridge4: port 1(veth0_to_bond) entered disabled state [ 650.739467][T15245] bridge5: port 1(veth0_to_bond) entered blocking state [ 650.785347][T15245] bridge5: port 1(veth0_to_bond) entered disabled state [ 650.802896][T15245] veth0_to_bond: entered allmulticast mode [ 650.826399][T15245] veth0_to_bond: entered promiscuous mode [ 650.894236][ T24] usb 1-1: USB disconnect, device number 86 [ 651.147078][T15259] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2556'. [ 651.165259][T15259] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2556'. [ 651.307725][ T5917] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 651.465943][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 651.472864][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.484685][ T5917] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 651.494730][ T5917] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 651.517953][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.530767][ T5917] usb 5-1: config 0 descriptor?? [ 653.575339][ T5917] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 653.735784][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 653.759406][ T5917] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 653.773594][ T5917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.814940][ T5917] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 653.960197][ T5917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 654.003171][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.029541][ T5917] usb 2-1: Product: syz [ 654.042908][ T5917] usb 2-1: Manufacturer: syz [ 654.058424][ T5917] usb 2-1: SerialNumber: syz [ 654.479427][ T5917] usb 2-1: 0:2 : does not exist [ 654.507591][T15293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2567'. [ 654.598334][T15293] veth0_to_bond: left allmulticast mode [ 654.604098][T15293] veth0_to_bond: left promiscuous mode [ 654.611517][T15293] bridge0: port 1(veth0_to_bond) entered disabled state [ 654.628192][T15293] bridge2: port 1(veth0_to_bond) entered blocking state [ 654.636028][T15293] bridge2: port 1(veth0_to_bond) entered disabled state [ 654.648038][T15293] veth0_to_bond: entered allmulticast mode [ 654.670772][T15293] veth0_to_bond: entered promiscuous mode [ 654.850231][ T5975] usb 5-1: USB disconnect, device number 111 [ 654.948993][T15303] fuse: Unknown parameter 'ÿÿÿÿ00000000000000000003' [ 655.734885][ T5917] usb 2-1: USB disconnect, device number 65 [ 655.885253][ T6573] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 656.065285][ T6573] usb 1-1: Using ep0 maxpacket: 32 [ 656.077163][ T6573] usb 1-1: config 8 has an invalid interface number: 183 but max is 0 [ 656.107080][ T6573] usb 1-1: config 8 has an invalid interface descriptor of length 5, skipping [ 656.137568][ T6573] usb 1-1: config 8 has an invalid interface descriptor of length 5, skipping [ 656.175201][ T6573] usb 1-1: config 8 has an invalid descriptor of length 1, skipping remainder of the config [ 656.198491][ T6573] usb 1-1: config 8 has no interface number 0 [ 656.215481][ T6573] usb 1-1: config 8 interface 183 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 656.245187][ T6573] usb 1-1: config 8 interface 183 has no altsetting 0 [ 656.261133][ T6573] usb 1-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=69.50 [ 656.285610][ T6573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.318554][ T6573] usb 1-1: Product: syz [ 656.339086][ T6573] usb 1-1: Manufacturer: syz [ 656.343739][ T6573] usb 1-1: SerialNumber: syz [ 656.440009][T15323] binder: 15322:15323 ioctl c0306201 200000000080 returned -14 [ 656.654519][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2578'. [ 656.848491][ T6573] gspca_main: tv8532-2.14.0 probing 0545:808b [ 656.928626][ T6573] usb 1-1: USB disconnect, device number 87 [ 656.985297][ T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 657.267022][ T24] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 657.276192][ T24] usb 2-1: config 0 has no interface number 0 [ 657.282458][ T24] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 657.309358][ T24] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 657.320148][ T24] usb 2-1: config 0 has no interface number 0 [ 657.326942][ T24] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 657.342895][ T24] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 657.362318][ T24] usb 2-1: config 0 has no interface number 0 [ 657.373899][ T24] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 657.431787][ T24] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 657.440944][ T24] usb 2-1: config 0 has no interface number 0 [ 657.460991][ T24] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 657.504294][ T24] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 657.515211][ T24] usb 2-1: config 0 has no interface number 0 [ 657.521788][ T24] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 657.553169][ T24] usb 2-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 657.562747][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.572130][ T24] usb 2-1: Product: syz [ 657.607422][ T24] usb 2-1: Manufacturer: syz [ 657.637300][ T24] usb 2-1: SerialNumber: syz [ 657.702879][ T24] usb 2-1: config 0 descriptor?? [ 657.786282][ T24] cdc_ncm 2-1:0.47: CDC Union missing and no IAD found [ 657.936662][ T24] cdc_ncm 2-1:0.47: bind() failure [ 658.285236][ T5917] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 658.438686][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 658.446069][ T5917] usb 1-1: too many configurations: 160, using maximum allowed: 8 [ 658.458135][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 658.466293][ T5917] usb 1-1: can't read configurations, error -61 [ 658.684915][ T5917] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 658.781034][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2595'. [ 658.836000][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 658.842143][ T5917] usb 1-1: too many configurations: 160, using maximum allowed: 8 [ 658.852723][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 658.860799][ T5917] usb 1-1: can't read configurations, error -61 [ 658.870444][ T5917] usb usb1-port1: attempt power cycle [ 659.215321][ T5917] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 659.235702][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 659.241397][ T5917] usb 1-1: too many configurations: 160, using maximum allowed: 8 [ 659.251177][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 659.259049][ T5917] usb 1-1: can't read configurations, error -61 [ 659.285241][ T5975] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 659.345320][ T24] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 659.395349][ T5917] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 659.415393][ T5975] usb 5-1: device descriptor read/64, error -71 [ 659.422197][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 659.428150][ T5917] usb 1-1: too many configurations: 160, using maximum allowed: 8 [ 659.437450][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 659.445074][ T5917] usb 1-1: can't read configurations, error -61 [ 659.451788][ T5917] usb usb1-port1: unable to enumerate USB device [ 659.475278][ T24] usb 4-1: device descriptor read/64, error -71 [ 659.655230][ T5975] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 659.725256][ T24] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 659.738039][ T5917] usb 2-1: USB disconnect, device number 66 [ 659.785259][ T5975] usb 5-1: device descriptor read/64, error -71 [ 659.865253][ T24] usb 4-1: device descriptor read/64, error -71 [ 659.895538][ T5975] usb usb5-port1: attempt power cycle [ 659.975688][ T24] usb usb4-port1: attempt power cycle [ 660.093788][T15398] loop2: detected capacity change from 0 to 7 [ 660.101018][T15398] Dev loop2: unable to read RDB block 7 [ 660.106971][T15398] loop2: AHDI p1 p2 [ 660.110900][T15398] loop2: partition table partially beyond EOD, truncated [ 660.118605][T15398] loop2: p1 start 1818582900 is beyond EOD, truncated [ 660.235331][ T5975] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 660.257379][ T5975] usb 5-1: device descriptor read/8, error -71 [ 660.335272][ T24] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 660.356267][ T24] usb 4-1: device descriptor read/8, error -71 [ 660.495272][ T5975] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 660.518136][ T5975] usb 5-1: device descriptor read/8, error -71 [ 660.605178][ T24] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 660.635842][ T5975] usb usb5-port1: unable to enumerate USB device [ 660.642796][ T24] usb 4-1: device descriptor read/8, error -71 [ 660.755560][ T24] usb usb4-port1: unable to enumerate USB device [ 660.869037][T15413] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2606'. [ 660.878331][T15413] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2606'. [ 661.130558][T15425] netlink: 'syz.1.2611': attribute type 10 has an invalid length. [ 661.142526][T15426] netlink: 'syz.0.2609': attribute type 3 has an invalid length. [ 661.150954][T15426] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2609'. [ 661.153815][T15425] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 661.229641][T15428] loop2: detected capacity change from 0 to 7 [ 661.263346][ T5847] Dev loop2: unable to read RDB block 7 [ 661.270724][ T5847] loop2: AHDI p1 p2 [ 661.275770][ T5847] loop2: partition table partially beyond EOD, truncated [ 661.283390][ T5847] loop2: p1 start 1818582900 is beyond EOD, truncated [ 661.292645][T15428] Dev loop2: unable to read RDB block 7 [ 661.299663][T15428] loop2: AHDI p1 p2 [ 661.303659][T15428] loop2: partition table partially beyond EOD, truncated [ 661.307336][T15431] bridge1: entered promiscuous mode [ 661.311736][T15428] loop2: p1 start 1818582900 is beyond EOD, truncated [ 661.324386][T15431] bridge1: entered allmulticast mode [ 661.696526][T15442] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2617'. [ 661.705668][T15442] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2617'. [ 662.880942][ T30] audit: type=1326 audit(1759589337.340:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15468 comm="syz.3.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e38eec9 code=0x7ffc0000 [ 662.913233][T15469] netlink: 'syz.3.2625': attribute type 1 has an invalid length. [ 662.967584][ T30] audit: type=1326 audit(1759589337.370:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15468 comm="syz.3.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f752e38eec9 code=0x7ffc0000 [ 663.009338][T15470] vivid-000: kernel_thread() failed [ 663.120917][ T30] audit: type=1326 audit(1759589337.370:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15468 comm="syz.3.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e38eec9 code=0x7ffc0000 [ 663.177682][T15477] binder: 15476:15477 ioctl c0306201 200000000080 returned -14 [ 663.233480][ T30] audit: type=1326 audit(1759589337.370:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15468 comm="syz.3.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e38eec9 code=0x7ffc0000 [ 663.324360][ T30] audit: type=1326 audit(1759589337.370:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15468 comm="syz.3.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f752e38eec9 code=0x7ffc0000 [ 663.510669][T15482] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2629'. [ 663.565830][T15482] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2629'. [ 663.572672][T15480] bond3 (unregistering): Released all slaves [ 664.079042][T15495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2633'. [ 664.145420][T15502] loop4: detected capacity change from 0 to 2560 [ 664.195758][T15502] fuse: Bad value for 'fd' [ 664.227235][ T5847] buffer_io_error: 9 callbacks suppressed [ 664.227253][ T5847] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.247046][ T5847] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.330907][T15502] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 664.341540][T15502] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 664.353034][T15502] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 664.365239][T15502] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 664.375404][T15502] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 664.384571][T15502] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 664.394479][T15502] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 664.404270][T15502] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 664.965385][ T5975] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 665.115187][ T5975] usb 4-1: Using ep0 maxpacket: 32 [ 665.125867][ T5975] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 665.134103][ T5975] usb 4-1: config 0 has no interface number 0 [ 665.148001][ T5975] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.205568][ T5975] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.316226][ T5975] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 665.333651][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.352508][ T5975] usb 4-1: config 0 descriptor?? [ 666.897924][T15535] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2643'. [ 666.908524][T15535] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2643'. [ 667.001812][ T30] audit: type=1326 audit(1759589341.190:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15528 comm="syz.2.2642" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ed438eec9 code=0x0 [ 668.391919][ T5975] usbhid 4-1:0.1: can't add hid device: -71 [ 668.398005][ T5975] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 668.450692][ T5975] usb 4-1: USB disconnect, device number 99 [ 668.757141][T15551] sctp: [Deprecated]: syz.3.2648 (pid 15551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 668.757141][T15551] Use struct sctp_sack_info instead [ 668.913062][ T30] audit: type=1326 audit(1759589343.370:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.2.2647" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ed438eec9 code=0x0 [ 668.934909][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.552940][T15568] netlink: 'syz.3.2651': attribute type 4 has an invalid length. [ 669.573983][T15568] netlink: 'syz.3.2651': attribute type 4 has an invalid length. [ 669.955469][ T5917] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 670.325470][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 670.469320][ T5917] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 670.477806][ T5917] usb 5-1: config 179 has no interface number 0 [ 670.484247][ T5917] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 670.529648][ T5917] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 670.587104][ T5917] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 670.695923][ T5917] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 670.797552][T15579] netlink: 'syz.0.2653': attribute type 32 has an invalid length. [ 670.821795][ T5917] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 670.870135][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.960388][T15561] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 671.025863][T15581] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2654'. [ 671.053057][T15581] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2654'. [ 671.240655][ T5917] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input43 [ 671.455825][T15561] [ 671.458183][T15561] ====================================================== [ 671.465183][T15561] WARNING: possible circular locking dependency detected [ 671.472204][T15561] syzkaller #0 Not tainted [ 671.476605][T15561] ------------------------------------------------------ [ 671.483606][T15561] syz.4.2649/15561 is trying to acquire lock: [ 671.489656][T15561] ffff88807d2b1070 (&newdev->mutex){+.+.}-{4:4}, at: uinput_request_submit+0x188/0x6f0 [ 671.499316][T15561] [ 671.499316][T15561] but task is already holding lock: [ 671.506694][T15561] ffff8880531aa0b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0x398/0xb30 [ 671.515487][T15561] [ 671.515487][T15561] which lock already depends on the new lock. [ 671.515487][T15561] [ 671.525879][T15561] [ 671.525879][T15561] the existing dependency chain (in reverse order) is: [ 671.534881][T15561] [ 671.534881][T15561] -> #3 (&ff->mutex){+.+.}-{4:4}: [ 671.542092][T15561] lock_acquire+0x120/0x360 [ 671.547118][T15561] __mutex_lock+0x187/0x1350 [ 671.552227][T15561] input_ff_flush+0x5d/0x170 [ 671.557337][T15561] input_flush_device+0xb4/0x110 [ 671.562801][T15561] evdev_release+0xe1/0x800 [ 671.567820][T15561] __fput+0x449/0xa70 [ 671.572333][T15561] fput_close_sync+0x119/0x200 [ 671.577609][T15561] __x64_sys_close+0x7f/0x110 [ 671.582806][T15561] do_syscall_64+0xfa/0x3b0 [ 671.587837][T15561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.594239][T15561] [ 671.594239][T15561] -> #2 (&dev->mutex#2){+.+.}-{4:4}: [ 671.601706][T15561] lock_acquire+0x120/0x360 [ 671.606742][T15561] __mutex_lock+0x187/0x1350 [ 671.611866][T15561] input_register_handle+0x18f/0x530 [ 671.617682][T15561] kbd_connect+0xc3/0x140 [ 671.622543][T15561] input_register_device+0xcfd/0x1140 [ 671.628432][T15561] acpi_button_add+0x6b1/0xb50 [ 671.633715][T15561] acpi_device_probe+0xa5/0x2d0 [ 671.639095][T15561] really_probe+0x26a/0x9e0 [ 671.644131][T15561] __driver_probe_device+0x18c/0x2f0 [ 671.649956][T15561] driver_probe_device+0x4f/0x430 [ 671.655512][T15561] __driver_attach+0x452/0x700 [ 671.660795][T15561] bus_for_each_dev+0x230/0x2b0 [ 671.666162][T15561] bus_add_driver+0x345/0x640 [ 671.671350][T15561] driver_register+0x23a/0x320 [ 671.676651][T15561] do_one_initcall+0x233/0x820 [ 671.681942][T15561] do_initcall_level+0x104/0x190 [ 671.687395][T15561] do_initcalls+0x59/0xa0 [ 671.692237][T15561] kernel_init_freeable+0x334/0x4b0 [ 671.697950][T15561] kernel_init+0x1d/0x1d0 [ 671.702794][T15561] ret_from_fork+0x436/0x7d0 [ 671.707899][T15561] ret_from_fork_asm+0x1a/0x30 [ 671.713181][T15561] [ 671.713181][T15561] -> #1 (input_mutex){+.+.}-{4:4}: [ 671.720480][T15561] lock_acquire+0x120/0x360 [ 671.725512][T15561] __mutex_lock+0x187/0x1350 [ 671.730651][T15561] input_register_device+0xa76/0x1140 [ 671.736535][T15561] uinput_create_device+0x422/0x670 [ 671.742254][T15561] uinput_ioctl_handler+0x3f0/0x1570 [ 671.748053][T15561] __se_sys_ioctl+0xfc/0x170 [ 671.753157][T15561] do_syscall_64+0xfa/0x3b0 [ 671.758170][T15561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.764578][T15561] [ 671.764578][T15561] -> #0 (&newdev->mutex){+.+.}-{4:4}: [ 671.772131][T15561] validate_chain+0xb9b/0x2140 [ 671.777410][T15561] __lock_acquire+0xab9/0xd20 [ 671.782597][T15561] lock_acquire+0x120/0x360 [ 671.787613][T15561] __mutex_lock+0x187/0x1350 [ 671.792715][T15561] uinput_request_submit+0x188/0x6f0 [ 671.798520][T15561] uinput_dev_upload_effect+0x150/0x1e0 [ 671.804581][T15561] input_ff_upload+0x5f8/0xb30 [ 671.809862][T15561] evdev_ioctl_handler+0x1644/0x1f10 [ 671.815931][T15561] __se_sys_ioctl+0xfc/0x170 [ 671.821121][T15561] do_syscall_64+0xfa/0x3b0 [ 671.826136][T15561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.832555][T15561] [ 671.832555][T15561] other info that might help us debug this: [ 671.832555][T15561] [ 671.842766][T15561] Chain exists of: [ 671.842766][T15561] &newdev->mutex --> &dev->mutex#2 --> &ff->mutex [ 671.842766][T15561] [ 671.855102][T15561] Possible unsafe locking scenario: [ 671.855102][T15561] [ 671.862544][T15561] CPU0 CPU1 [ 671.867897][T15561] ---- ---- [ 671.873247][T15561] lock(&ff->mutex); [ 671.877217][T15561] lock(&dev->mutex#2); [ 671.883974][T15561] lock(&ff->mutex); [ 671.890469][T15561] lock(&newdev->mutex); [ 671.894787][T15561] [ 671.894787][T15561] *** DEADLOCK *** [ 671.894787][T15561] [ 671.902918][T15561] 2 locks held by syz.4.2649/15561: [ 671.908104][T15561] #0: ffff88805a7fc118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_ioctl_handler+0x121/0x1f10 [ 671.918023][T15561] #1: ffff8880531aa0b0 (&ff->mutex){+.+.}-{4:4}, at: input_ff_upload+0x398/0xb30 [ 671.927238][T15561] [ 671.927238][T15561] stack backtrace: [ 671.933122][T15561] CPU: 0 UID: 0 PID: 15561 Comm: syz.4.2649 Not tainted syzkaller #0 PREEMPT(full) [ 671.933140][T15561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 671.933151][T15561] Call Trace: [ 671.933160][T15561] [ 671.933167][T15561] dump_stack_lvl+0x189/0x250 [ 671.933187][T15561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.933202][T15561] ? __pfx__printk+0x10/0x10 [ 671.933222][T15561] ? print_lock_name+0xde/0x100 [ 671.933240][T15561] print_circular_bug+0x2ee/0x310 [ 671.933259][T15561] check_noncircular+0x134/0x160 [ 671.933277][T15561] validate_chain+0xb9b/0x2140 [ 671.933292][T15561] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.933312][T15561] ? finish_task_switch+0x266/0x950 [ 671.933332][T15561] ? rcu_is_watching+0x15/0xb0 [ 671.933348][T15561] ? trace_sched_exit_tp+0x36/0x110 [ 671.933369][T15561] __lock_acquire+0xab9/0xd20 [ 671.933384][T15561] ? uinput_request_submit+0x188/0x6f0 [ 671.933403][T15561] lock_acquire+0x120/0x360 [ 671.933419][T15561] ? uinput_request_submit+0x188/0x6f0 [ 671.933442][T15561] __mutex_lock+0x187/0x1350 [ 671.933461][T15561] ? uinput_request_submit+0x188/0x6f0 [ 671.933481][T15561] ? preempt_schedule+0xae/0xc0 [ 671.933498][T15561] ? preempt_schedule_common+0x83/0xd0 [ 671.933515][T15561] ? uinput_request_submit+0x188/0x6f0 [ 671.933532][T15561] ? preempt_schedule+0xae/0xc0 [ 671.933549][T15561] ? __pfx___mutex_lock+0x10/0x10 [ 671.933572][T15561] ? _raw_spin_unlock+0x3f/0x50 [ 671.933588][T15561] ? uinput_request_alloc_id+0x3cf/0x400 [ 671.933607][T15561] uinput_request_submit+0x188/0x6f0 [ 671.933626][T15561] ? __pfx___schedule+0x10/0x10 [ 671.933643][T15561] ? __pfx_uinput_request_submit+0x10/0x10 [ 671.933661][T15561] ? rcu_is_watching+0x15/0xb0 [ 671.933681][T15561] uinput_dev_upload_effect+0x150/0x1e0 [ 671.933699][T15561] ? input_ff_upload+0x398/0xb30 [ 671.933717][T15561] ? __pfx_uinput_dev_upload_effect+0x10/0x10 [ 671.933739][T15561] ? __pfx_uinput_dev_upload_effect+0x10/0x10 [ 671.933760][T15561] input_ff_upload+0x5f8/0xb30 [ 671.933781][T15561] evdev_ioctl_handler+0x1644/0x1f10 [ 671.933799][T15561] ? __pfx___schedule+0x10/0x10 [ 671.933815][T15561] ? __pfx_evdev_ioctl_handler+0x10/0x10 [ 671.933839][T15561] ? rcu_is_watching+0x15/0xb0 [ 671.933853][T15561] ? trace_irq_disable+0x37/0x110 [ 671.933866][T15561] ? preempt_schedule_irq+0xde/0x150 [ 671.933883][T15561] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 671.933902][T15561] ? irqentry_exit+0x74/0x90 [ 671.933920][T15561] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.933939][T15561] ? __pfx_evdev_ioctl+0x10/0x10 [ 671.933954][T15561] ? __se_sys_ioctl+0xea/0x170 [ 671.933970][T15561] ? __pfx_evdev_ioctl+0x10/0x10 [ 671.933984][T15561] __se_sys_ioctl+0xfc/0x170 [ 671.934006][T15561] do_syscall_64+0xfa/0x3b0 [ 671.934019][T15561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.934032][T15561] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 671.934046][T15561] ? clear_bhb_loop+0x60/0xb0 [ 671.934060][T15561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.934074][T15561] RIP: 0033:0x7f79dc58eec9 [ 671.934088][T15561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.934100][T15561] RSP: 002b:00007f79da7ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 671.934115][T15561] RAX: ffffffffffffffda RBX: 00007f79dc7e6180 RCX: 00007f79dc58eec9 [ 671.934125][T15561] RDX: 0000200000000300 RSI: 0000000040304580 RDI: 000000000000000c [ 671.934134][T15561] RBP: 00007f79dc611f91 R08: 0000000000000000 R09: 0000000000000000 [ 671.934143][T15561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.934152][T15561] R13: 00007f79dc7e6218 R14: 00007f79dc7e6180 R15: 00007f79dc90fa28 [ 671.934167][T15561] [ 671.934262][ C0] vkms_vblank_simulate: vblank timer overrun [ 672.302616][ C0] vkms_vblank_simulate: vblank timer overrun