last executing test programs: 10.871613851s ago: executing program 2 (id=2641): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x400, 0x2}, {0x4, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x15e84000}, 0x0, 0x0, 0x2, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x5, 0x0, 0x0, 0x4}}, 0xe8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000009}]}}}}}}}, 0x0) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x6, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x400, 0xfd}, [@extension_unit={0xd, 0x24, 0x8, 0x1, 0x4, 0x5, "5f55b9e4721a"}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0xe, 0x3}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0x88, "00bdbe"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x74, 0x5, {0x7, 0x25, 0x1, 0x2, 0x6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2b, 0x4, 0xe8}, @as_header={0x7, 0x24, 0x1, 0x5, 0x7, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0xfc, 0x87, {0x7, 0x25, 0x1, 0x2, 0x5c, 0xd5e5}}}}}}}]}}, 0x0) 10.22403861s ago: executing program 4 (id=2644): r0 = socket$kcm(0x2, 0x1, 0x0) lseek(r0, 0x9, 0x3) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011101000000206d1dcbc200000000000109022400010000c08f090400810703000300092100000001220700090300"], 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) 9.324544524s ago: executing program 2 (id=2645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xf1ff}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x4, 0x17}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 9.092237915s ago: executing program 2 (id=2647): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd27, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) recvmmsg(r2, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) readv(r3, &(0x7f0000001440)=[{0x0}], 0x1) connect$qrtr(r3, &(0x7f0000000140)={0x2a, 0x3, 0x7fff}, 0xc) r4 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8001902}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0x84, 0x9, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_COMMENT={0xb, 0x1a, ',-)\\]\'\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'bridge_slave_1\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4010) socket$nl_rdma(0x10, 0x3, 0x14) close(r4) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}]}, 0x24}}, 0x10) 8.497615937s ago: executing program 1 (id=2650): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='pagemap\x00') socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r3 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x80086601, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) fchdir(r3) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) 6.977429669s ago: executing program 4 (id=2653): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) epoll_create1(0x80000) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xa599, 0x0, 0x0, 0x0, 0x0, 0xad}, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @rand_addr, {[@noop, @timestamp={0x44, 0x10, 0xa, 0x0, 0x7, [0x7, 0x5b, 0xf]}]}}, {0x0, 0x4e21, 0x8}}}}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0xd39, 0x1, 0x782, 0x11b2, 0x9, 0xffffffffffffffff}) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x400001, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) 6.125688785s ago: executing program 1 (id=2655): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x1d, 0x6, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000200)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r6, 0x1, 0x42, 0x0, &(0x7f0000000080)) r7 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x8040600) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) syz_usb_control_io$printer(r7, &(0x7f0000001600)={0x14, &(0x7f0000001480)={0x20, 0x24, 0xeb, {0xeb, 0x7, "52ca909c0785df26bc81d0d5392757f0a449fe569d6cd8374224705c94346edefb8c066655ee37f8dc9a5a76bab6ceb9d499257f4def5e45d28f8c9d66f25c373adfbcd8b5a0978e8908f6bbc5dc0b72ee7094cbfb29e3319196ada1013f7705fbd2b839c97b712c3dc24ee4af036ba8f8ca88f2a76d84daaf7a19e46de350755eea66df031fdc6f1a029280be566aab7f8cd68c44414d9d1be9eb5b26f1da0f57c63003ab39db6fd3b0923e5c2a37926b0be536e281b547252f07648bd5d810df175ed735f9907539f8c0eb2423dd688bc1715622b8f8bbb97ae586ede3454955dcc16310b95c82e0"}}, &(0x7f0000001580)={0x0, 0x3, 0x60, @string={0x60, 0x3, "37c83930d5ffb17458d56b73bbbe5d5ee9c73d004e3eef8a9835c1841f03666ba33787586ec4c17dc32d8c17ba0255921963d7ca8ca36b658e6d1baed24cf2c0157bbb2be7bd42f23c402ea69634a3528c13bd4a533aba1308a0cda7ccec"}}}, &(0x7f00000017c0)={0x34, &(0x7f0000001640)={0x40, 0x5, 0x2c, "94a2d46c09ed1c43ac3667818e53bb56c99418b7b20d9bd17b54d26066dc3827c969b766e9185796aa7e447b"}, &(0x7f0000001680)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0xb2}, &(0x7f0000001700)={0x20, 0x0, 0x12, {0x10, "764170223a313db01810f10fce7561d4"}}, &(0x7f0000001740)={0x20, 0x1, 0x1, 0xaa}, &(0x7f0000001780)={0x20, 0x0, 0x1, 0xe4}}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000400)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000180)={0x14, &(0x7f0000001300)={0x0, 0x10, 0xa3, {0xa3, 0x23, "0be62643a415c72195e36baedb952be10ddd305ab6dc9c4e0835c9fcda2c97d5440375b9143ac5184287d43c5f485e3be8127c6bcce22711bd160a99deb1441010d0bec5d3b69229d82537fd6b16b0ce24cb808219269d60c7fa8ba768823a15eceeb1b4bc8934bc5656af5e08c7abc71ec83965ec6a90429ad25620a8b07e59ae657182f8e91c921f8fe5375434431b8dd512c88cfcdfbc3fb32bfd75a3cd7af0"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001400)={0x1c, &(0x7f0000001440)=ANY=[@ANYBLOB="200d08000000ffff94f89b82cf408c7763"], &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x69}}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0xffffffffffffffdb, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0xa000006, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) unlinkat(r0, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 5.564193314s ago: executing program 2 (id=2658): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4a, 0x9, 0x8, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x81, 0x0, 0x2, 0x20}, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xf00, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b00070066696c746572"], 0xc4}}, 0xc000) syz_usb_connect(0x2, 0x10e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000077249f08ec1888323a3f010203010902fc0001870000000904e67e"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000440)='./cgroup\x00', 0x24802, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB='=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0xee00, @ANYBLOB=',\x00'], 0x1, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 3.846916942s ago: executing program 4 (id=2663): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x100) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011101000000206d1dcbc200000000000109022400010000c08f090400810703000300092100000001220700090300"], 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) 3.354147094s ago: executing program 0 (id=2667): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) close(r3) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010005000500070000000000080009000000000014002000fec00000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 3.273285893s ago: executing program 3 (id=2668): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x4, 0x0, 0x0, 0x2}, 0x4, [0x8, 0xe74, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf605, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x100000, 0x0, 0x9, 0x9, 0x0, 0x8, 0x9, 0x0, 0xfffffffc], [0x80000000, 0x0, 0x0, 0xb16, 0x10000, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000], [0xfffffffa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x3, 0xfffffffe, 0x2, 0x100e, 0x7, 0x100000, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0xa0d, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x1c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x7], [0x3, 0x3, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x8000, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}, 0x45c) 2.830388484s ago: executing program 3 (id=2669): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x2, 0x300) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/128, 0x80}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f0000000300)=""/162, 0xa2}], 0x3, &(0x7f00000003c0)=""/164, 0xa4}, 0x40) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 2.735656328s ago: executing program 3 (id=2670): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a2401000000"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x7475f52084f6d927}}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{0x3, 0xb}, {0x0, 0x6}}}], 0x38) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000000)={0x7, {0x80000001, 0x7, 0x8, 0x8001}}) 2.431121765s ago: executing program 1 (id=2671): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) landlock_create_ruleset(0x0, 0x0, 0x0) io_uring_enter(r0, 0x20af, 0x6d82, 0x0, 0x0, 0x0) (fail_nth: 3) 2.08263062s ago: executing program 1 (id=2672): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000003c00013a"], 0xfdef) 1.772919623s ago: executing program 1 (id=2673): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="14"], 0x38, 0x2404c002}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000cc0)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r5, 0xae80, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000034c0)={&(0x7f0000000000), 0x6e, &(0x7f00000033c0)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000080)=""/155, 0x9b}, {&(0x7f0000000140)=""/220, 0xdc}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/246, 0xf6}, {&(0x7f0000002380)=""/52, 0x34}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x7, &(0x7f0000003440)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x21) 1.470113509s ago: executing program 2 (id=2674): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a00016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r2, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) 1.327794443s ago: executing program 0 (id=2675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) (async, rerun: 64) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (rerun: 64) fsopen(0x0, 0x0) (async) madvise(&(0x7f0000ede000/0x3000)=nil, 0x3000, 0x3) (async) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) (async, rerun: 32) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000c5b000/0x3000)=nil) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x7, 0x100000000, 0x0, 0x85, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x1, 0xf012, 0x0, 0x0, 0x0, 0x2, 0x5da], 0x0, 0x200}) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a88800892f4803", 0x10000, 0x0, &(0x7f0000000140), 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0xf8, 0x5, 0x6cb, 0x6, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x0, 0x700, 0x2, 0x3}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000480)={@mcast2, 0x0}, &(0x7f0000000080)=0x14) (async) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000051}, 0x90) (async, rerun: 32) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xf}, {0x0, 0xfffe}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x9}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x20084084) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="78020000", @ANYRES16=0x0, @ANYBLOB="100025bd7000fddbdf25040000002800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d7265670000000000000000000008000300030000002c000180140002006970766c616e300000000000000000001400020076657468305f746f5f626174616476001c000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="28000180140002007465616d300000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="7c000180140002007069a307005030000000001900000000080003000100000008000100941d88fd98686096b342e81525cf28755f4c2459cb9154303b5fef76b129306aa6c785d6c3943516901ba86ba67e001d44228dc66fd65dc643f03dcf7de459700f0d2d1c448b0b2d5ef9028a055e172fecd7371cdc571e7c8a492a39922cc6304e4eedf687a00465d4df640f12c6e819fb5dbb77ec84c13ee5941da3b57f195d3cd9fb908ff6331a4712f8b575ee59e1d57bf92e21fc84486536905ce701b7a0d319f1123785aebf37b90000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020070696d72656731000000000000000000080003000200000008000300010000001400020076657468305f746f5f7465616d0000001400020076657468315f746f5f7465616d0000006c0001800800030003000000080003000000000014000200726f736530000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="0000000000000000000000000c5f8ceec01a94a99b1548165d6f8c82fc62697e28e09b96804c54b91ece25870faff8caae605e6230bab4f7b320dc7e088c0ed03aae7834987599a954cbaeffa7646418413ad725511a8ab74bf4dbec81004688eb102e0002a6bf4f46899d686eb84901f9373d61c7b1329a9a06f6d0d0206f205bd177", @ANYRES32=r6, @ANYBLOB="080003000100000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="1400020073797a6b616c6c657230000000000000480001801400020076657468305f746f5f626f6e6400000014000200766c616e300000000000000000000000080003000100000014000200776c616e3100000000000000000000001c000180080003000000000008000100", @ANYRES32=r9, @ANYBLOB="0800030001000000400001801400020076657468315f6d616376746170000000080003000100000008000300020000000800030001000000080003000000000008000100", @ANYRES32=r1, @ANYBLOB="400001800800030002000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d616376746170300000000000000000080003000200000008000100", @ANYRES16=r13, @ANYBLOB], 0x278}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.27777037s ago: executing program 2 (id=2676): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/keys\x00', 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) read$FUSE(r2, &(0x7f0000000840)={0x2020}, 0x2020) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x100, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r6, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.205795319s ago: executing program 0 (id=2677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000ff000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) (async) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) (async) pipe2$9p(&(0x7f0000000080), 0x88980) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 1.098021126s ago: executing program 0 (id=2678): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000240)) 1.00579127s ago: executing program 3 (id=2679): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee'}, 0x30) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x4000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) connect(r0, &(0x7f0000000340)=@pptp={0x18, 0x2, {0x2, @private=0xa010101}}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0)}, 0x240000c1) recvmsg$unix(r3, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/80, 0x50}], 0x1}, 0x21) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0xff, 0x4}, 0xfd}, 0x18) ioctl$LOOP_SET_STATUS(r2, 0x1277, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0xc, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x8001, 0x9]}) io_setup(0x7, &(0x7f0000000280)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) splice(r8, 0x0, r10, 0x0, 0x4ffe6, 0x0) write$P9_RAUTH(r9, &(0x7f0000000100)={0x14, 0x67, 0x1, {0x20, 0x1, 0x5}}, 0x14) r11 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r7, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r11, &(0x7f00000001c0)='7', 0x1, 0x4}]) ioctl$SNDRV_PCM_IOCTL_PREPARE(r11, 0x4140, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) 921.16565ms ago: executing program 0 (id=2680): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x4, 0x0, 0x0, 0x2}, 0x4, [0x8, 0xe74, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf605, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x100000, 0x0, 0x9, 0x9, 0x0, 0x8, 0x9, 0x0, 0xfffffffc], [0x80000000, 0x0, 0x0, 0xb16, 0x10000, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000], [0xfffffffa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x3, 0xfffffffe, 0x2, 0x100e, 0x7, 0x100000, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0xa0d, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x1c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x7], [0x3, 0x3, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x8000, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}, 0x45c) 768.536267ms ago: executing program 0 (id=2681): socket(0x2a, 0x2, 0x0) (async) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) (async) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000001c0)={0xcc2}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) (async) socket(0x2a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$media(0x0, 0x10000, 0x80000) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0xfff3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x96, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 654.041989ms ago: executing program 4 (id=2682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) 653.537754ms ago: executing program 3 (id=2683): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000023a"], 0xfdef) 314.361173ms ago: executing program 4 (id=2684): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sync_file_range(r0, 0x9, 0x0, 0x1) 207.787966ms ago: executing program 4 (id=2685): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4a, 0x9, 0x8, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x81, 0x0, 0x2, 0x20}, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xf00, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b00070066696c746572"], 0xc4}}, 0xc000) syz_usb_connect(0x2, 0x10e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000077249f08ec1888323a3f010203010902fc0001870000000904e67e"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000440)='./cgroup\x00', 0x24802, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB='=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0xee00, @ANYBLOB=',\x00'], 0x1, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 133.665172ms ago: executing program 1 (id=2686): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'dvmrp0\x00', 0x1}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC=r0], 0x1293) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = gettid() sigaltstack(&(0x7f0000000080)={&(0x7f0000002040)=""/4096, 0x0, 0x1000}, 0x0) (async) sigaltstack(&(0x7f0000000080)={&(0x7f0000002040)=""/4096, 0x0, 0x1000}, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f0000000000)={0x33, 0x40000000, 0x2}) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x2, 0x2, 0x4, {0xa, 0x4e21, 0xcd, @local, 0x7c}}}, 0x3a) (async) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x2, 0x2, 0x4, {0xa, 0x4e21, 0xcd, @local, 0x7c}}}, 0x3a) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() (async) r3 = getpid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x0, 0x5c8cff7d, {{0xd, 0x4, 0x3, 0x7, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @private=0xa010100, {[@timestamp_prespec={0x44, 0x4, 0x47, 0x3, 0x6}, @end, @ssrr={0x89, 0x13, 0x71, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @empty]}, @timestamp={0x44, 0x4, 0x5e, 0x0, 0x8}, @ssrr={0x89, 0x3, 0xf6}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x0, 0x5c8cff7d, {{0xd, 0x4, 0x3, 0x7, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @private=0xa010100, {[@timestamp_prespec={0x44, 0x4, 0x47, 0x3, 0x6}, @end, @ssrr={0x89, 0x13, 0x71, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @empty]}, @timestamp={0x44, 0x4, 0x5e, 0x0, 0x8}, @ssrr={0x89, 0x3, 0xf6}]}}}}}) pipe2$9p(0x0, 0x80000) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000340)={0x7, 0x47, 0x1}, 0x7) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000000380)=0xff7ffffc, 0x8, 0x0, 0x0, 0x0, 0xfffdffff) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x800) syz_usbip_server_init(0x0) 0s ago: executing program 3 (id=2687): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x23, 0xfffffffd}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x40, 0x48d, 0x8595, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x3, "29b45de7"}, @local=@item_012={0x1, 0x2, 0x1, 'U'}]}}, 0x0}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000300)=ANY=[], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, 'is\x1dx\xbd\x85\xb3\x03', 0x3a, '\x83\twerdir', 0x3a, './file7', 0x3a, [0x4f, 0x4f]}, 0x39) socket$inet6_tcp(0xa, 0x1, 0x0) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x92, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000000005c06fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="74c2"], 0x0) kernel console output (not intermixed with test programs): get.3 gadget.3: fail, usb_ep_enable returned -22 [ 709.541828][ T5964] ipaq 4-1:0.12: PocketPC PDA converter detected [ 709.548958][ T5964] usb 4-1: active config #0 != 1 ?? [ 709.585192][ T5870] usb 2-1: config 129 has an invalid interface number: 135 but max is 1 [ 709.593845][ T5870] usb 2-1: config 129 has no interface number 1 [ 709.606584][ T5870] usb 2-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 709.620057][ T5870] usb 2-1: config 129 interface 135 has no altsetting 0 [ 709.627131][ T5870] usb 2-1: config 129 interface 0 has no altsetting 0 [ 709.641721][ T5870] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 709.651035][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.659119][ T5870] usb 2-1: Product: syz [ 709.663380][ T5870] usb 2-1: Manufacturer: syz [ 709.668302][ T5870] usb 2-1: SerialNumber: syz [ 709.702114][T14673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.895113][T13936] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 710.237008][T13936] usb 5-1: config 0 has no interfaces? [ 710.240577][ T5870] au0828: au0828: Device initialization failed. [ 710.251590][T13936] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 710.261040][T13936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.269400][T13936] usb 5-1: Product: syz [ 710.273681][T13936] usb 5-1: Manufacturer: syz [ 710.278872][T13936] usb 5-1: SerialNumber: syz [ 710.300509][T13936] usb 5-1: config 0 descriptor?? [ 710.335708][ T5870] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 710.434710][ T5870] usb 2-1: USB disconnect, device number 18 [ 710.547299][ T891] usb 5-1: USB disconnect, device number 13 [ 711.488746][T13936] usb 4-1: USB disconnect, device number 3 [ 711.885379][ T891] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 712.016982][ T891] usb 5-1: device descriptor read/64, error -71 [ 712.275221][ T891] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 712.428338][ T891] usb 5-1: device descriptor read/64, error -71 [ 712.553219][ T891] usb usb5-port1: attempt power cycle [ 712.895402][ T891] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 712.915078][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 712.915871][ T891] usb 5-1: device descriptor read/8, error -71 [ 713.135781][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 713.331421][ T10] usb 3-1: config 0 has an invalid descriptor of length 162, skipping remainder of the config [ 713.338963][ T891] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 713.388651][ T891] usb 5-1: device descriptor read/8, error -71 [ 713.416415][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 713.482250][ T10] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 713.495421][ T891] usb usb5-port1: unable to enumerate USB device [ 713.560679][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.605211][ T10] usb 3-1: Product: syz [ 713.621598][ T10] usb 3-1: Manufacturer: syz [ 713.628461][ T10] usb 3-1: SerialNumber: syz [ 713.763717][ T10] usb 3-1: config 0 descriptor?? [ 713.886300][T14729] syzkaller1: entered promiscuous mode [ 713.892001][T14729] syzkaller1: entered allmulticast mode [ 714.022981][T14720] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2367'. [ 714.035251][T14720] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2367'. [ 714.045177][T14720] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2367'. [ 715.029284][T14738] FAULT_INJECTION: forcing a failure. [ 715.029284][T14738] name failslab, interval 1, probability 0, space 0, times 0 [ 715.044210][T14738] CPU: 1 UID: 0 PID: 14738 Comm: syz.4.2374 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 715.044239][T14738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 715.044263][T14738] Call Trace: [ 715.044273][T14738] [ 715.044283][T14738] dump_stack_lvl+0x189/0x250 [ 715.044330][T14738] ? __pfx____ratelimit+0x10/0x10 [ 715.044351][T14738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 715.044374][T14738] ? __pfx__printk+0x10/0x10 [ 715.044404][T14738] ? __pfx___might_resched+0x10/0x10 [ 715.044441][T14738] should_fail_ex+0x414/0x560 [ 715.044475][T14738] should_failslab+0xa8/0x100 [ 715.044506][T14738] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 715.044535][T14738] ? __alloc_skb+0x112/0x2d0 [ 715.044562][T14738] __alloc_skb+0x112/0x2d0 [ 715.044588][T14738] netlink_sendmsg+0x5c6/0xb30 [ 715.044618][T14738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.044645][T14738] ? aa_sock_msg_perm+0x94/0x160 [ 715.044683][T14738] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 715.044702][T14738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.044723][T14738] __sock_sendmsg+0x219/0x270 [ 715.044755][T14738] ____sys_sendmsg+0x505/0x830 [ 715.044786][T14738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 715.044820][T14738] ? import_iovec+0x74/0xa0 [ 715.044851][T14738] ___sys_sendmsg+0x21f/0x2a0 [ 715.044879][T14738] ? __pfx____sys_sendmsg+0x10/0x10 [ 715.044937][T14738] ? __fget_files+0x2a/0x420 [ 715.044965][T14738] ? __fget_files+0x3a0/0x420 [ 715.045004][T14738] __x64_sys_sendmsg+0x19b/0x260 [ 715.045033][T14738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 715.045082][T14738] ? __pfx_ksys_write+0x10/0x10 [ 715.045123][T14738] ? rcu_is_watching+0x15/0xb0 [ 715.045166][T14738] ? do_syscall_64+0xbe/0x3b0 [ 715.045193][T14738] do_syscall_64+0xfa/0x3b0 [ 715.045214][T14738] ? lockdep_hardirqs_on+0x9c/0x150 [ 715.045235][T14738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.045266][T14738] ? clear_bhb_loop+0x60/0xb0 [ 715.045292][T14738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.045325][T14738] RIP: 0033:0x7f54f738eb69 [ 715.045344][T14738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.045362][T14738] RSP: 002b:00007f54f810f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.045385][T14738] RAX: ffffffffffffffda RBX: 00007f54f75b5fa0 RCX: 00007f54f738eb69 [ 715.045400][T14738] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 715.045415][T14738] RBP: 00007f54f810f090 R08: 0000000000000000 R09: 0000000000000000 [ 715.045428][T14738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.045441][T14738] R13: 0000000000000000 R14: 00007f54f75b5fa0 R15: 00007f54f76dfa28 [ 715.045473][T14738] [ 715.485144][ T5964] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 715.546890][ T9] usb 3-1: USB disconnect, device number 16 [ 715.616277][ T5964] usb 1-1: device descriptor read/64, error -71 [ 715.714985][ T5870] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 715.867941][ T5964] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 715.878116][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.931486][ T5870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 715.965667][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.991904][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 716.006035][ T5870] usb 5-1: Product: syz [ 716.025193][ T5964] usb 1-1: device descriptor read/64, error -71 [ 716.033188][ T5870] usb 5-1: Manufacturer: syz [ 716.042330][ T5870] usb 5-1: SerialNumber: syz [ 716.148907][ T5964] usb usb1-port1: attempt power cycle [ 716.195338][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 716.202419][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 716.216029][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 716.228892][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 716.263443][T14751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 716.392683][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.409486][ T9] usb 3-1: Product: syz [ 716.420986][ T9] usb 3-1: Manufacturer: syz [ 716.432130][ T9] usb 3-1: SerialNumber: syz [ 716.670667][ T9] usb 3-1: config 0 descriptor?? [ 716.685480][ T5964] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 716.706621][ T5964] usb 1-1: device descriptor read/8, error -71 [ 716.779075][ T9] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 716.965110][ T5964] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 716.986849][ T5964] usb 1-1: device descriptor read/8, error -71 [ 717.091663][ T9] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 717.095756][ T5964] usb usb1-port1: unable to enumerate USB device [ 717.144475][ T9] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 717.166605][ T9] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 717.368161][ T5870] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 717.410330][ T5870] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 717.419516][ T5870] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 717.602258][ T5870] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 717.625335][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2377'. [ 717.719930][ T5870] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 717.745985][ T5870] usb 5-1: USB disconnect, device number 18 [ 717.757935][ T5870] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 718.134294][T14740] ip6tnl2: entered promiscuous mode [ 718.152538][T14740] ip6tnl2: entered allmulticast mode [ 718.692594][ T891] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 718.915184][ T891] usb 1-1: Using ep0 maxpacket: 16 [ 719.660069][T13936] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 719.845045][T13936] usb 5-1: Using ep0 maxpacket: 8 [ 719.856549][T13936] usb 5-1: config 0 has an invalid descriptor of length 162, skipping remainder of the config [ 719.931394][T13936] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 720.104271][T13936] usb 5-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 720.208113][T13936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.330625][T13936] usb 5-1: Product: syz [ 720.874425][ T5870] usb 3-1: USB disconnect, device number 17 [ 720.904879][T13936] usb 5-1: Manufacturer: syz [ 720.931384][T13936] usb 5-1: SerialNumber: syz [ 721.072124][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2391'. [ 721.124537][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 721.141706][T14797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2391'. [ 721.192216][T13936] usb 5-1: config 0 descriptor?? [ 721.290508][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2391'. [ 721.584732][T14801] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2387'. [ 721.645325][T14801] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2387'. [ 721.658675][T14801] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2387'. [ 721.965617][ T891] usb 1-1: unable to get BOS descriptor or descriptor too short [ 721.983571][ T891] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 721.991601][ T891] usb 1-1: can't read configurations, error -71 [ 722.078091][T14808] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2394'. [ 723.325177][T13936] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 723.373495][T14823] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2396'. [ 723.495148][T13936] usb 3-1: Using ep0 maxpacket: 32 [ 723.532568][T13936] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 723.615012][ T891] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 724.242215][T13936] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 724.276424][T13936] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 724.303905][T13936] usb 3-1: Product: syz [ 724.310405][ T891] usb 1-1: Using ep0 maxpacket: 32 [ 724.315795][T13936] usb 3-1: Manufacturer: syz [ 724.320702][T13936] usb 3-1: SerialNumber: syz [ 724.326594][ T891] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 724.336613][T13936] usb 3-1: config 0 descriptor?? [ 724.343102][ T891] usb 1-1: config 0 has no interface number 0 [ 724.350228][ T891] usb 1-1: config 0 interface 12 has no altsetting 0 [ 724.357673][T14817] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 724.360039][ T891] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 724.384505][ T891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.407696][T13936] hub 3-1:0.0: bad descriptor, ignoring hub [ 724.413643][T13936] hub 3-1:0.0: probe with driver hub failed with error -5 [ 724.465266][ T891] usb 1-1: Product: syz [ 724.469492][ T891] usb 1-1: Manufacturer: syz [ 724.485942][ T891] usb 1-1: SerialNumber: syz [ 724.535663][ T891] usb 1-1: config 0 descriptor?? [ 724.661576][T14817] netlink: 'syz.2.2397': attribute type 22 has an invalid length. [ 724.669932][T14817] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2397'. [ 724.844090][ T5870] usb 5-1: USB disconnect, device number 19 [ 725.000448][T14828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.028890][T14828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.085129][T13936] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 725.239398][T14841] fuse: blksize only supported for fuseblk [ 725.257169][T13936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.275172][T13936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.285643][T13936] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 725.298845][T13936] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 725.307944][T13936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.337811][T13936] usb 2-1: config 0 descriptor?? [ 725.365669][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.417378][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.485219][ T5870] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 725.639133][ T5870] usb 5-1: config 65 has an invalid interface number: 95 but max is 0 [ 725.650602][ T5870] usb 5-1: config 65 has no interface number 0 [ 725.661841][ T5870] usb 5-1: language id specifier not provided by device, defaulting to English [ 725.688788][ T5870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 725.702038][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.710978][ T5870] usb 5-1: Manufacturer:   [ 725.848361][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.857459][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.904223][T13936] plantronics 0003:047F:FFFF.002A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 726.041608][ T891] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 726.192043][ T891] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 726.200570][ T891] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 726.208706][ T891] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 726.222048][ T891] usb 1-1: USB disconnect, device number 108 [ 726.686567][ T891] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 726.924982][ T891] usb 1-1: Using ep0 maxpacket: 16 [ 727.204366][T14861] loop9: detected capacity change from 0 to 8 [ 727.292337][T14861] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 727.324869][T14861] loop9: partition table partially beyond EOD, truncated [ 727.413558][T14861] loop9: p1 size 81768186 extends beyond EOD, truncated [ 727.508552][ T6199] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 727.537739][ T6199] loop9: partition table partially beyond EOD, truncated [ 727.598634][ T6199] loop9: p1 size 81768186 extends beyond EOD, truncated [ 727.666578][T14862] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 727.685617][T14862] loop9: partition table partially beyond EOD, truncated [ 727.736738][T14862] loop9: p1 size 81768186 extends beyond EOD, truncated [ 727.847109][ T10] usb 2-1: USB disconnect, device number 19 [ 728.025814][ T6199] udevd[6199]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 728.088155][ T6199] udevd[6199]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 728.143090][ T6199] udevd[6199]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 728.219471][T14867] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2407'. [ 728.333335][ T5870] usbtest 5-1:65.95: Linux gadget zero [ 728.339878][ T5870] usbtest 5-1:65.95: low-speed {control in/out} tests (+alt) [ 728.383796][ T5870] usb 5-1: USB disconnect, device number 20 [ 728.637334][T14871] 8021q: adding VLAN 0 to HW filter on device bond2 [ 728.661662][T14871] bond0: (slave bond2): Enslaving as an active interface with an up link [ 728.846921][T14875] openvswitch: netlink: Actions may not be safe on all matching packets [ 729.245206][T14421] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 729.425088][T13936] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 729.467272][T14421] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 729.597117][T14888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.620837][T14421] usb 2-1: config 0 has no interface number 0 [ 729.653739][T14888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.672912][T14421] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 729.701322][T14421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.798186][T14888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.831625][T14421] usb 2-1: config 0 descriptor?? [ 729.879383][T14888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.119286][ T891] usb 1-1: unable to get BOS descriptor or descriptor too short [ 730.128142][ T891] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 730.137110][ T891] usb 1-1: can't read configurations, error -71 [ 730.177525][T14421] usb 2-1: USB disconnect, device number 20 [ 730.210523][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2415'. [ 730.543042][T14895] input: syz0 as /devices/virtual/input/input60 [ 730.884025][T14899] loop9: detected capacity change from 0 to 8 [ 730.922467][T14899] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 730.939257][T14899] loop9: partition table partially beyond EOD, truncated [ 730.951955][T14899] loop9: p1 size 81768186 extends beyond EOD, truncated [ 731.060784][ T6211] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 731.079919][T14903] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2420'. [ 731.113536][ T6211] loop9: partition table partially beyond EOD, truncated [ 731.192114][ T6211] loop9: p1 size 81768186 extends beyond EOD, truncated [ 731.299600][T14901] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 731.305323][T14901] loop9: partition table partially beyond EOD, truncated [ 731.380532][T14901] loop9: p1 size 81768186 extends beyond EOD, truncated [ 731.505103][ T891] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 731.677548][ T891] usb 5-1: Using ep0 maxpacket: 32 [ 731.692504][ T6199] udevd[6199]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 731.707854][ T891] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 731.832857][ T891] usb 5-1: config 0 has no interface number 0 [ 731.839860][T14421] usb 3-1: USB disconnect, device number 18 [ 731.884011][ T6199] udevd[6199]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 731.895127][ T891] usb 5-1: config 0 interface 89 has no altsetting 0 [ 732.156086][ T891] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 732.200523][ T891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.324327][ T891] usb 5-1: Product: syz [ 732.356745][ T891] usb 5-1: Manufacturer: syz [ 732.365483][T14932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.382921][ T891] usb 5-1: SerialNumber: syz [ 732.426064][T14932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.435220][ T891] usb 5-1: config 0 descriptor?? [ 732.496490][T14932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.537370][T14932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.549016][T14932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.557467][T14421] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 732.585111][ T5964] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 732.603016][T14932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.702730][T14932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.771181][ T5964] usb 1-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 732.784673][T14421] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 732.795440][T14932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.797294][T14421] usb 2-1: config 0 has no interface number 0 [ 732.815195][ T5964] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.834001][T14421] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 732.840040][T14932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.858654][ T5964] usb 1-1: config 1 interface 0 has no altsetting 0 [ 732.866109][T14421] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 732.878261][ T5964] usb 1-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 732.887862][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.896613][ T5964] usb 1-1: Product: syz [ 732.903212][ T5964] usb 1-1: Manufacturer: syz [ 732.909594][T14932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.912265][T14421] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 732.929129][T14421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.940732][ T5964] usb 1-1: SerialNumber: syz [ 732.947541][T14421] usb 2-1: Product: syz [ 732.968079][T14421] usb 2-1: Manufacturer: syz [ 732.975762][T14421] usb 2-1: SerialNumber: syz [ 733.046673][T14421] usb 2-1: config 0 descriptor?? [ 733.076208][T14922] delete_channel: no stack [ 733.189552][ T5964] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 733.206721][ T5964] usb 1-1: USB disconnect, device number 111 [ 733.275370][T14421] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 733.306151][T14421] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 733.366860][T14421] usb 2-1: USB disconnect, device number 21 [ 733.447728][T14938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.459596][T14938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.476062][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2421'. [ 733.839711][T14940] random: crng reseeded on system resumption [ 734.475086][ T5870] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 734.524704][ T5964] usb 5-1: USB disconnect, device number 21 [ 734.577321][T14960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2434'. [ 734.605899][T14960] vlan3: entered promiscuous mode [ 734.627362][T14960] veth0: entered promiscuous mode [ 734.635016][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 734.646988][ T5870] usb 3-1: config 0 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 734.692201][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 734.705833][ T5870] usb 3-1: New USB device found, idVendor=1d6d, idProduct=c2cb, bcdDevice= 0.00 [ 734.732015][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.753987][ T5870] usb 3-1: config 0 descriptor?? [ 734.773829][ T5870] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 735.025038][ T5964] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 735.193380][T14965] FAULT_INJECTION: forcing a failure. [ 735.193380][T14965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.217003][T14965] CPU: 0 UID: 0 PID: 14965 Comm: syz.2.2431 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 735.217031][T14965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 735.217044][T14965] Call Trace: [ 735.217052][T14965] [ 735.217060][T14965] dump_stack_lvl+0x189/0x250 [ 735.217088][T14965] ? __pfx____ratelimit+0x10/0x10 [ 735.217107][T14965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.217148][T14965] ? __pfx__printk+0x10/0x10 [ 735.217175][T14965] ? __might_fault+0xb0/0x130 [ 735.217213][T14965] should_fail_ex+0x414/0x560 [ 735.217249][T14965] _copy_to_iter+0x1db/0x16f0 [ 735.217284][T14965] ? __pfx__copy_to_iter+0x10/0x10 [ 735.217311][T14965] ? _copy_to_iter+0x24c/0x16f0 [ 735.217333][T14965] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 735.217367][T14965] __skb_datagram_iter+0xf8/0x990 [ 735.217395][T14965] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 735.217431][T14965] skb_copy_datagram_iter+0xc5/0x230 [ 735.217462][T14965] packet_recvmsg+0x66a/0x15b0 [ 735.217509][T14965] ? __pfx_packet_recvmsg+0x10/0x10 [ 735.217536][T14965] ? __pfx_aa_sk_perm+0x10/0x10 [ 735.217563][T14965] ? __lock_acquire+0xab9/0xd20 [ 735.217595][T14965] ? aa_sock_msg_perm+0x94/0x160 [ 735.217621][T14965] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 735.217642][T14965] ? security_socket_recvmsg+0x7e/0x2e0 [ 735.217677][T14965] ? __pfx_packet_recvmsg+0x10/0x10 [ 735.217704][T14965] sock_recvmsg+0x229/0x270 [ 735.217739][T14965] ____sys_recvmsg+0x1c9/0x460 [ 735.217773][T14965] ? __pfx_____sys_recvmsg+0x10/0x10 [ 735.217814][T14965] ? import_iovec+0x74/0xa0 [ 735.217844][T14965] ___sys_recvmsg+0x1b5/0x510 [ 735.217876][T14965] ? __pfx____sys_recvmsg+0x10/0x10 [ 735.217927][T14965] ? __fget_files+0x3a0/0x420 [ 735.217968][T14965] do_recvmmsg+0x307/0x770 [ 735.218006][T14965] ? __pfx_do_recvmmsg+0x10/0x10 [ 735.218045][T14965] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 735.218084][T14965] __x64_sys_recvmmsg+0x190/0x240 [ 735.218113][T14965] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 735.218164][T14965] ? do_syscall_64+0xbe/0x3b0 [ 735.218190][T14965] do_syscall_64+0xfa/0x3b0 [ 735.218210][T14965] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.218231][T14965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.218252][T14965] ? clear_bhb_loop+0x60/0xb0 [ 735.218277][T14965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.218297][T14965] RIP: 0033:0x7fc0d458eb69 [ 735.218316][T14965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.218336][T14965] RSP: 002b:00007fc0d53f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 735.218358][T14965] RAX: ffffffffffffffda RBX: 00007fc0d47b6080 RCX: 00007fc0d458eb69 [ 735.218374][T14965] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000004 [ 735.218389][T14965] RBP: 00007fc0d53f8090 R08: 0000000000000000 R09: 0000000000000000 [ 735.218402][T14965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.218415][T14965] R13: 0000000000000001 R14: 00007fc0d47b6080 R15: 00007fc0d48dfa28 [ 735.218447][T14965] [ 735.355037][ T5964] usb 5-1: Using ep0 maxpacket: 32 [ 735.544591][ T5964] usb 5-1: config 0 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 735.809152][ T5964] usb 5-1: config 0 interface 0 has no altsetting 0 [ 735.831740][ T5964] usb 5-1: New USB device found, idVendor=1d6d, idProduct=c2cb, bcdDevice= 0.00 [ 735.848008][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.859385][ T5964] usb 5-1: config 0 descriptor?? [ 735.894762][ T5964] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 736.104575][T14970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.114037][T14970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.122308][T13936] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 736.286690][T13936] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 736.298656][T13936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 736.309672][T13936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 736.319671][T13936] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 736.333033][T13936] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 736.342177][ T5964] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 736.349935][T13936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.361874][T13936] usb 4-1: config 0 descriptor?? [ 736.385027][T14421] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 736.485020][ T5964] usb 1-1: device descriptor read/64, error -71 [ 736.515290][T14421] usb 2-1: device descriptor read/64, error -71 [ 736.735079][ T5964] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 736.755197][T14421] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 736.774395][T13936] usbhid 4-1:0.0: can't add hid device: -71 [ 736.780963][T13936] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 736.791409][T13936] usb 4-1: USB disconnect, device number 5 [ 736.865011][ T5964] usb 1-1: device descriptor read/64, error -71 [ 736.895024][T14421] usb 2-1: device descriptor read/64, error -71 [ 736.975175][ T5964] usb usb1-port1: attempt power cycle [ 737.005382][T14421] usb usb2-port1: attempt power cycle [ 737.208020][T13936] usb 3-1: USB disconnect, device number 19 [ 737.315618][ T5964] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 737.326005][T14979] fuse: Bad value for 'fd' [ 737.346047][T14421] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 737.368920][ T5964] usb 1-1: device descriptor read/8, error -71 [ 737.379617][T14979] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 737.407150][T14421] usb 2-1: device descriptor read/8, error -71 [ 737.506114][T14979] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 737.643851][ T5964] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 737.666841][T14421] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 737.670553][ T5870] usb 5-1: USB disconnect, device number 22 [ 737.676326][ T5964] usb 1-1: device descriptor read/8, error -71 [ 737.695979][T14421] usb 2-1: device descriptor read/8, error -71 [ 737.795622][ T5964] usb usb1-port1: unable to enumerate USB device [ 737.816231][T14421] usb usb2-port1: unable to enumerate USB device [ 738.132328][T14992] syz.4.2442: attempt to access beyond end of device [ 738.132328][T14992] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 739.235301][ T5964] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 739.462707][T15008] FAULT_INJECTION: forcing a failure. [ 739.462707][T15008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.485215][T15008] CPU: 0 UID: 0 PID: 15008 Comm: syz.1.2447 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 739.485237][T15008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 739.485247][T15008] Call Trace: [ 739.485253][T15008] [ 739.485259][T15008] dump_stack_lvl+0x189/0x250 [ 739.485280][T15008] ? __pfx____ratelimit+0x10/0x10 [ 739.485295][T15008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.485313][T15008] ? __pfx__printk+0x10/0x10 [ 739.485360][T15008] should_fail_ex+0x414/0x560 [ 739.485400][T15008] _copy_to_user+0x31/0xb0 [ 739.485421][T15008] simple_read_from_buffer+0xe1/0x170 [ 739.485445][T15008] proc_fail_nth_read+0x1b3/0x220 [ 739.485463][T15008] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 739.485480][T15008] ? rw_verify_area+0x2a6/0x4d0 [ 739.485497][T15008] ? __lock_acquire+0xab9/0xd20 [ 739.485516][T15008] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 739.485532][T15008] vfs_read+0x1fd/0x980 [ 739.485550][T15008] ? fdget_pos+0x247/0x320 [ 739.485573][T15008] ? __pfx___mutex_lock+0x10/0x10 [ 739.485589][T15008] ? __pfx_vfs_read+0x10/0x10 [ 739.485608][T15008] ? __fget_files+0x2a/0x420 [ 739.485631][T15008] ? __fget_files+0x3a0/0x420 [ 739.485651][T15008] ? __fget_files+0x2a/0x420 [ 739.485678][T15008] ksys_read+0x145/0x250 [ 739.485697][T15008] ? __pfx_ksys_read+0x10/0x10 [ 739.485713][T15008] ? rcu_is_watching+0x15/0xb0 [ 739.485731][T15008] ? do_syscall_64+0xbe/0x3b0 [ 739.485748][T15008] do_syscall_64+0xfa/0x3b0 [ 739.485762][T15008] ? lockdep_hardirqs_on+0x9c/0x150 [ 739.485775][T15008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.485789][T15008] ? clear_bhb_loop+0x60/0xb0 [ 739.485807][T15008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.485820][T15008] RIP: 0033:0x7f56e378d57c [ 739.485833][T15008] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 739.485845][T15008] RSP: 002b:00007f56e4651030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 739.485861][T15008] RAX: ffffffffffffffda RBX: 00007f56e39b5fa0 RCX: 00007f56e378d57c [ 739.485872][T15008] RDX: 000000000000000f RSI: 00007f56e46510a0 RDI: 0000000000000004 [ 739.485881][T15008] RBP: 00007f56e4651090 R08: 0000000000000000 R09: 0000000000000000 [ 739.485890][T15008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.485898][T15008] R13: 0000000000000000 R14: 00007f56e39b5fa0 R15: 00007f56e3adfa28 [ 739.485919][T15008] [ 740.036669][ T5964] usb 3-1: Using ep0 maxpacket: 16 [ 740.576092][T13936] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 740.766666][T13936] usb 1-1: Using ep0 maxpacket: 32 [ 740.803397][T13936] usb 1-1: config 0 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 740.875495][T15030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2452'. [ 740.915926][T13936] usb 1-1: config 0 interface 0 has no altsetting 0 [ 740.926567][T13936] usb 1-1: New USB device found, idVendor=1d6d, idProduct=c2cb, bcdDevice= 0.00 [ 740.983506][T13936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.000002][T13936] usb 1-1: config 0 descriptor?? [ 741.022733][T13936] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 741.075226][ T5870] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 741.164887][T15034] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 741.171458][T15034] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 741.182756][T15034] vhci_hcd vhci_hcd.0: Device attached [ 741.225111][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 741.232982][ T5870] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 741.258006][T15035] tipc: Started in network mode [ 741.263025][T15035] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 741.271869][T15040] FAULT_INJECTION: forcing a failure. [ 741.271869][T15040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.288324][T15035] tipc: Enabled bearer , priority 10 [ 741.301650][ T5870] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 741.314273][T15040] CPU: 0 UID: 0 PID: 15040 Comm: syz.0.2450 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 741.314294][T15040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 741.314303][T15040] Call Trace: [ 741.314309][T15040] [ 741.314315][T15040] dump_stack_lvl+0x189/0x250 [ 741.314347][T15040] ? __pfx____ratelimit+0x10/0x10 [ 741.314369][T15040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 741.314391][T15040] ? __pfx__printk+0x10/0x10 [ 741.314419][T15040] ? __might_fault+0xb0/0x130 [ 741.314446][T15040] should_fail_ex+0x414/0x560 [ 741.314474][T15040] _copy_from_user+0x2d/0xb0 [ 741.314504][T15040] ___sys_recvmsg+0x12e/0x510 [ 741.314536][T15040] ? __pfx____sys_recvmsg+0x10/0x10 [ 741.314585][T15040] ? __might_fault+0xb0/0x130 [ 741.314606][T15040] do_recvmmsg+0x307/0x770 [ 741.314635][T15040] ? __pfx_do_recvmmsg+0x10/0x10 [ 741.314683][T15040] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 741.314730][T15040] __x64_sys_recvmmsg+0x190/0x240 [ 741.314751][T15040] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 741.314772][T15040] ? do_syscall_64+0xbe/0x3b0 [ 741.314788][T15040] do_syscall_64+0xfa/0x3b0 [ 741.314808][T15040] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.314843][T15040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.314862][T15040] ? clear_bhb_loop+0x60/0xb0 [ 741.314896][T15040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.314917][T15040] RIP: 0033:0x7f63f738eb69 [ 741.314934][T15040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.314952][T15040] RSP: 002b:00007f63f817c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 741.314973][T15040] RAX: ffffffffffffffda RBX: 00007f63f75b6080 RCX: 00007f63f738eb69 [ 741.314988][T15040] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000004 [ 741.315001][T15040] RBP: 00007f63f817c090 R08: 0000000000000000 R09: 0000000000000000 [ 741.315013][T15040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.315025][T15040] R13: 0000000000000001 R14: 00007f63f75b6080 R15: 00007f63f76dfa28 [ 741.315055][T15040] [ 741.525138][ T9] vhci_hcd: vhci_device speed not set [ 741.605056][ T9] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 741.744384][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 741.755116][ T5870] usb 4-1: Product: syz [ 741.759314][ T5870] usb 4-1: Manufacturer: syz [ 741.764025][ T5870] usb 4-1: SerialNumber: syz [ 741.775451][ T5870] usb 4-1: config 0 descriptor?? [ 741.781324][T15028] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 741.798518][ T5870] hub 4-1:0.0: bad descriptor, ignoring hub [ 741.834086][ T5870] hub 4-1:0.0: probe with driver hub failed with error -5 [ 742.044102][T15028] netlink: 'syz.3.2453': attribute type 22 has an invalid length. [ 742.061865][ T5964] usb 3-1: unable to get BOS descriptor or descriptor too short [ 742.092783][ T5964] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 742.118591][T15028] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2453'. [ 742.123127][ T5964] usb 3-1: can't read configurations, error -71 [ 742.375095][ T5870] tipc: Node number set to 43690 [ 742.393590][T15047] loop9: detected capacity change from 0 to 8 [ 742.416883][T15047] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 742.434603][T15047] loop9: partition table partially beyond EOD, truncated [ 742.442810][T15047] loop9: p1 size 81768186 extends beyond EOD, truncated [ 742.508375][ T6199] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 742.532039][ T6199] loop9: partition table partially beyond EOD, truncated [ 742.557900][T15036] vhci_hcd: connection reset by peer [ 742.573022][ T49] vhci_hcd: stop threads [ 742.585258][ T6199] loop9: p1 size 81768186 extends beyond EOD, truncated [ 742.606731][ T49] vhci_hcd: release socket [ 742.632190][ T49] vhci_hcd: disconnect device [ 742.655351][T15050] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 742.660691][T15050] loop9: partition table partially beyond EOD, truncated [ 742.692650][T15050] loop9: p1 size 81768186 extends beyond EOD, truncated [ 742.839391][ T6199] udevd[6199]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 742.900778][ T6199] udevd[6199]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 743.174569][T13936] usb 1-1: USB disconnect, device number 116 [ 743.216394][ T5964] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 743.365525][T15068] syz.3.2462: attempt to access beyond end of device [ 743.365525][T15068] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 743.455722][ T5964] usb 3-1: Using ep0 maxpacket: 8 [ 743.965436][T15073] netlink: 'syz.1.2463': attribute type 10 has an invalid length. [ 743.975768][T15073] bond0: (slave wlan1): Opening slave failed [ 744.063487][ T5964] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 744.105005][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.125443][T14421] usb 4-1: USB disconnect, device number 6 [ 744.145010][T13936] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 744.249733][ T5964] pvrusb2: Hardware description: Terratec Grabster AV400 [ 744.274231][ T5964] pvrusb2: ********** [ 744.278402][ T5964] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 744.323222][ T5964] pvrusb2: Important functionality might not be entirely working. [ 744.323387][T13936] usb 1-1: unable to get BOS descriptor or descriptor too short [ 744.341595][ T5964] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 744.373203][ T5964] pvrusb2: ********** [ 744.378924][T13936] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 744.405202][T13936] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 250, changing to 11 [ 744.435433][T13936] usb 1-1: config 1 interface 0 has no altsetting 0 [ 744.451119][ T5964] usb 3-1: USB disconnect, device number 21 [ 744.455699][ T2345] pvrusb2: Invalid write control endpoint [ 744.480935][T13936] usb 1-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 744.492193][T13936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.509842][T13936] usb 1-1: Product: 㐊 [ 744.533785][T13936] usb 1-1: Manufacturer: 謒嫩뷓ꞝۅ袗昗킙醽弪Ὠ膨悢갛칀⸪팭≥⓫腈푗ᶽ㭊콘퍶鴖嘊켴ﻹ瓄槪紩ᲄ፦쯷撋곲隩嗉퇸芾禦奃늏즾찗驔鱭 [ 744.586119][T13936] usb 1-1: SerialNumber: 倊 [ 744.624097][ T2345] pvrusb2: Invalid write control endpoint [ 744.630240][ T5870] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 744.662874][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 744.678630][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 744.687244][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 744.702150][ T2345] pvrusb2: Device being rendered inoperable [ 744.708527][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 744.719949][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 744.850693][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 744.947081][ T2345] pvrusb2: Attached sub-driver cx25840 [ 745.034418][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 745.055128][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 745.182226][ T5870] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 745.201739][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.210306][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 745.282858][ T5870] usb 2-1: Product: syz [ 745.347237][ T5870] usb 2-1: Manufacturer: syz [ 745.354106][ T5870] usb 2-1: SerialNumber: syz [ 745.381297][ T5870] usb 2-1: config 0 descriptor?? [ 745.797711][T15095] loop9: detected capacity change from 0 to 8 [ 745.846341][T15095] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 745.852144][ T5870] gs_usb 2-1:0.0: Configuring for 224 interfaces [ 745.857165][T15095] loop9: partition table partially beyond EOD, truncated [ 745.895216][ T5870] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 745.903939][T15095] loop9: p1 size 81768186 extends beyond EOD, truncated [ 745.935029][ T5870] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 745.979785][T15099] vxlan0: entered promiscuous mode [ 746.004431][T15099] vxlan0: entered allmulticast mode [ 746.042191][ T6211] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 746.052180][ T6211] loop9: partition table partially beyond EOD, truncated [ 746.076493][ T5964] usb 2-1: USB disconnect, device number 26 [ 746.150979][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.177937][ T6211] loop9: p1 size 81768186 extends beyond EOD, truncated [ 746.201533][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.230221][T15098] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 746.232445][ T3493] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.248796][T15098] loop9: partition table partially beyond EOD, truncated [ 746.283043][T15098] loop9: p1 size 81768186 extends beyond EOD, truncated [ 746.349430][ T3493] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.490027][ T6201] udevd[6201]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 746.588757][ T6201] udevd[6201]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 746.755118][ T9] vhci_hcd: vhci_device speed not set [ 746.885116][T15115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2476'. [ 746.934637][T15115] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2476'. [ 746.964753][T15115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2476'. [ 747.264786][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.271278][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.531510][T15134] ======================================================= [ 747.531510][T15134] WARNING: The mand mount option has been deprecated and [ 747.531510][T15134] and is ignored by this kernel. Remove the mand [ 747.531510][T15134] option from the mount to silence this warning. [ 747.531510][T15134] ======================================================= [ 747.898788][T15145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2485'. [ 748.135248][ T5870] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 748.223118][T15148] syzkaller1: entered promiscuous mode [ 748.255001][T15148] syzkaller1: entered allmulticast mode [ 748.325004][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 748.333100][ T5870] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 748.383919][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.480074][ T5870] pvrusb2: Hardware description: Terratec Grabster AV400 [ 748.613172][ T5870] pvrusb2: ********** [ 748.635224][ T5870] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 748.671515][T15162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2490'. [ 748.697990][ T5870] pvrusb2: Important functionality might not be entirely working. [ 748.721472][ T5870] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 748.745217][T15162] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2490'. [ 748.779583][T15162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2490'. [ 748.789115][ T5870] pvrusb2: ********** [ 748.799133][ T2345] pvrusb2: Invalid write control endpoint [ 748.815576][ T5870] usb 2-1: USB disconnect, device number 27 [ 748.936707][ T2345] pvrusb2: Invalid write control endpoint [ 748.948152][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 748.971494][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 749.042067][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 749.082058][ T2345] pvrusb2: Device being rendered inoperable [ 749.093282][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 749.101169][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 749.129554][ T2345] pvrusb2: Attached sub-driver cx25840 [ 749.139807][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 749.151059][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 749.275134][ T5964] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 749.455265][ T5964] usb 5-1: Using ep0 maxpacket: 16 [ 749.664617][T13936] usbhid 1-1:1.0: can't add hid device: -32 [ 749.703427][T13936] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 750.085039][T13936] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 750.115092][ T891] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 750.247905][T13936] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=66.21 [ 750.260667][T13936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.277411][ T891] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 750.286561][ T891] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 750.301641][T13936] usb 3-1: config 0 descriptor?? [ 750.307931][ T891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 750.322207][T15188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.332836][T13936] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 750.335814][T15188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.348088][ T891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 750.363961][T13936] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 750.374078][ T891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 750.396829][ T891] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 750.405951][ T891] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 750.414133][ T891] usb 2-1: Product: syz [ 750.449028][ T891] usb 2-1: Manufacturer: syz [ 750.476533][ T891] cdc_wdm 2-1:1.0: skipping garbage [ 750.481817][ T891] cdc_wdm 2-1:1.0: skipping garbage [ 750.505510][ T891] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 750.524561][ T5925] usb 3-1: USB disconnect, device number 22 [ 750.557385][ T891] cdc_wdm 2-1:1.0: Unknown control protocol [ 750.677673][ T891] usb 2-1: USB disconnect, device number 28 [ 751.286982][ T30] audit: type=1326 audit(1754243501.164:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.2.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d458eb69 code=0x7ffc0000 [ 751.316684][ T30] audit: type=1326 audit(1754243501.164:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.2.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d458eb69 code=0x7ffc0000 [ 751.340665][ T30] audit: type=1326 audit(1754243501.164:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.2.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc0d458eb69 code=0x7ffc0000 [ 751.365858][ T30] audit: type=1326 audit(1754243501.164:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.2.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d458eb69 code=0x7ffc0000 [ 751.389069][ T30] audit: type=1326 audit(1754243501.164:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.2.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d458eb69 code=0x7ffc0000 [ 751.413983][ T30] audit: type=1326 audit(1754243501.164:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.2.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc0d458eb69 code=0x7ffc0000 [ 751.415304][ T5925] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 751.759486][ T5925] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 751.768247][ T5925] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 751.784589][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 751.808129][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 751.826789][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 751.856094][ T5925] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 751.868135][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 751.876693][ T5925] usb 2-1: Product: syz [ 751.881009][ T5925] usb 2-1: Manufacturer: syz [ 751.906353][ T891] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 751.922178][ T5925] cdc_wdm 2-1:1.0: skipping garbage [ 751.927740][ T5925] cdc_wdm 2-1:1.0: skipping garbage [ 751.942809][ T5925] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 751.954739][ T5925] cdc_wdm 2-1:1.0: Unknown control protocol [ 751.995081][T14421] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 752.065192][ T891] usb 3-1: Using ep0 maxpacket: 32 [ 752.113173][ T891] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 752.122168][ T891] usb 3-1: config 0 has no interface number 0 [ 752.129424][ T891] usb 3-1: config 0 interface 85 has no altsetting 0 [ 752.140240][ T891] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 752.152383][ T891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.160662][T14421] usb 4-1: Using ep0 maxpacket: 16 [ 752.197712][T14421] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 752.231400][ T891] usb 3-1: Product: syz [ 752.241676][ T891] usb 3-1: Manufacturer: syz [ 752.252346][T14421] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 752.261780][ T891] usb 3-1: SerialNumber: syz [ 752.285837][ T891] usb 3-1: config 0 descriptor?? [ 752.297970][T14421] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 752.313995][ T891] appletouch 3-1:0.85: Could not find int-in endpoint [ 752.324843][T14421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.335443][ T891] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 752.350028][T14421] usb 4-1: Product: syz [ 752.358949][ T891] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 752.366493][T14421] usb 4-1: Manufacturer: syz [ 752.392817][T14421] usb 4-1: SerialNumber: syz [ 752.467015][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.472732][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 752.478960][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.484816][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.490808][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.496771][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.502661][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.508514][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.514555][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.520678][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.526641][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.534468][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.540208][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 752.555202][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.560938][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 752.568382][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.574940][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.580961][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.587595][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.594948][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.600807][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.606661][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.612506][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.618532][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.624384][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.630234][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.636100][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.641958][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.647805][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.653629][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.659458][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.665370][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.671308][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.677176][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.683027][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.688862][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.694711][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.700596][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.706453][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.712307][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.718128][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.723962][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.730084][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.736004][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.741869][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.747693][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.753530][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.759450][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.765300][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.771140][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.777003][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.782836][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.788660][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.794481][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.800325][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.806159][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.812017][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.817844][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.823694][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.829547][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.835382][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.841205][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.847068][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.852905][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.858740][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.864563][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.870491][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.876344][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.882190][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.888047][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.893916][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.899750][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.905617][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.911460][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.917296][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.923142][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.928993][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.934856][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.940807][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.946667][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.952507][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.958402][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.964260][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.970113][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.975959][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.981817][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.987668][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.993507][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 752.999335][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.005185][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.011023][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.016918][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.022755][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.028587][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.034554][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.040398][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.046326][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.052144][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.057964][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.063788][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.069641][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.075463][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.081316][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.087139][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.092973][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.098791][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.104612][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.110435][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.116280][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.122126][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.127963][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.133779][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.139593][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.145446][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.151296][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.157115][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.162985][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.168825][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.174701][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.180628][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.186470][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.192305][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.198128][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.203953][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.209772][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.215608][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.221472][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.227296][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.233339][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.239164][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.244986][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.250813][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.256733][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.262560][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.268383][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.274215][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.280036][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.285898][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.291736][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.297587][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.303425][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.309267][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.315134][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.320967][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.326795][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.332624][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.338562][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.344395][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.350225][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.356058][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.361907][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.367746][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.373590][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.379414][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.385240][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.391079][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.396934][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.402778][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.408616][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.414440][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.420293][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.426157][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.432007][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.437863][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.443691][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.449551][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.455402][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.461241][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.466934][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.472693][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.478621][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.484465][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.490196][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.496132][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.501835][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.507605][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.513304][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.519511][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.525196][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.532150][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.538466][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.544976][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.550664][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.556613][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.562322][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.568080][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.573928][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.579804][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.585646][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.591479][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.597337][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.603161][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.608989][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.614814][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.620654][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.626488][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.632304][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.638119][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.643943][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.649789][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.655781][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.661618][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.667443][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.673315][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.679152][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.684980][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.690841][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.696684][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.702539][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.708488][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.714342][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.720194][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.725899][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.731649][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.737340][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.743237][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.748931][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.754834][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.760513][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.766355][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.772186][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.778017][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.783855][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.789705][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.795388][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.801164][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.806846][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.812573][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.818474][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.824313][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.830164][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.836036][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.841892][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.847841][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.853693][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.859521][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.865388][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.871217][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.876911][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.882653][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.888359][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.894096][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.899778][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.905543][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.911232][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.917104][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.922785][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.928558][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.934245][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.940007][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.945720][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.951525][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.957380][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.963057][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.968775][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.974620][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.980331][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 753.986124][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.991968][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 753.997909][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.003746][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.009602][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.015426][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.021290][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.027195][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.033035][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.038870][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.044707][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.050620][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.056320][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 754.062198][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.068044][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.073735][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 754.079492][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.085324][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.091228][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.097078][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.102944][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.109157][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.114998][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.120842][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.126657][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.132485][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.138350][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.144284][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.149978][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 754.155758][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.161620][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.167346][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 754.173104][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.179010][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.184697][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 754.190465][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.196320][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.202180][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.208037][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.213886][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.219727][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.225592][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.231330][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 754.237099][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 754.242894][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 754.248541][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 754.311637][T13936] usb 2-1: USB disconnect, device number 29 [ 754.418562][T14421] usb 4-1: 0:2 : does not exist [ 754.547266][ T5964] usb 5-1: unable to get BOS descriptor or descriptor too short [ 754.576789][ T5964] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 754.600513][ T5964] usb 5-1: chopping to 0 config(s) [ 754.614053][ T5964] usb 5-1: can't read configurations, error -32 [ 754.780605][ T5964] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 755.153592][T14421] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 755.224264][T14421] usb 4-1: USB disconnect, device number 7 [ 755.416266][ T5964] usb 5-1: device descriptor read/64, error -32 [ 755.491313][ T6199] udevd[6199]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 755.555042][T15252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.593590][T15252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.616050][ T5964] usb usb5-port1: attempt power cycle [ 755.645819][T15254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2516'. [ 755.656538][T15254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2516'. [ 755.819530][T14421] usb 3-1: USB disconnect, device number 23 [ 755.955112][ T5964] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 755.976008][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 755.982745][ T5964] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 756.035002][ T5870] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 756.215087][ T5964] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 756.378775][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.464272][ T5964] usb 5-1: Product: syz [ 756.479275][ T5964] usb 5-1: Manufacturer: syz [ 756.486940][ T5964] usb 5-1: SerialNumber: syz [ 756.504213][ T5964] usb 5-1: config 0 descriptor?? [ 756.537198][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.549438][ T5964] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 756.576007][ T5870] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 756.585420][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 756.620473][ T5870] usb 4-1: Product: syz [ 756.627841][ T5964] usb 5-1: setting power ON [ 756.638329][ T5964] dvb-usb: bulk message failed: -22 (2/0) [ 756.658920][ T5964] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 756.682053][ T5870] usb 4-1: Manufacturer: syz [ 756.689054][ T5964] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 756.689157][ T5870] usb 4-1: SerialNumber: syz [ 756.714395][ T5964] usb 5-1: media controller created [ 756.716447][T15241] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2513'. [ 756.741575][ T5870] usb 4-1: config 0 descriptor?? [ 756.769936][ T5870] gspca_main: conex-2.14.0 probing 0572:0041 [ 756.822342][ T5964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 756.827522][T15270] loop9: detected capacity change from 0 to 8 [ 756.913652][ T5964] usb 5-1: selecting invalid altsetting 6 [ 756.919949][ T5964] usb 5-1: digital interface selection failed (-22) [ 756.929285][ T6211] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 756.937871][ T6211] loop9: partition table partially beyond EOD, truncated [ 756.952224][ T5964] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 756.973757][ T6211] loop9: p1 size 81768186 extends beyond EOD, truncated [ 757.001802][ T5964] usb 5-1: setting power OFF [ 757.032488][ T5964] dvb-usb: bulk message failed: -22 (2/0) [ 757.054493][T15270] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 757.061648][T15270] loop9: partition table partially beyond EOD, truncated [ 757.075380][T15270] loop9: p1 size 81768186 extends beyond EOD, truncated [ 757.084235][ T5964] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 757.104980][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 757.105044][ T5964] (NULL device *): no alternate interface [ 757.130854][T15271] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 757.206190][T15271] loop9: partition table partially beyond EOD, truncated [ 757.223741][T15271] loop9: p1 size 81768186 extends beyond EOD, truncated [ 757.233578][ T5870] usb 4-1: USB disconnect, device number 8 [ 757.254081][ T5964] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 757.265028][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 757.296729][ T5964] usb 5-1: USB disconnect, device number 25 [ 757.363805][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 757.423508][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.551014][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'. [ 757.563150][ T6201] udevd[6201]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 757.631277][ T6199] udevd[6199]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 757.686927][ T6199] udevd[6199]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 757.835256][ T5964] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 758.037272][ T5964] usb 2-1: config 0 has no interfaces? [ 758.042976][ T5964] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 758.060798][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.097990][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 758.114436][ T10] pvrusb2: ********** [ 758.124778][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 758.146965][ T10] pvrusb2: Important functionality might not be entirely working. [ 758.488031][ T5964] usb 2-1: config 0 descriptor?? [ 758.506447][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 758.612037][ T10] pvrusb2: ********** [ 758.723806][T15278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.762804][T15278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.777873][T15278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.807048][T15278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.876183][ T5964] usb 2-1: USB disconnect, device number 30 [ 758.971543][T15290] netlink: 'syz.4.2526': attribute type 4 has an invalid length. [ 759.023673][T15290] netlink: 'syz.4.2526': attribute type 4 has an invalid length. [ 759.337297][ T5964] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 759.496796][ T5964] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.510648][ T5964] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 759.561621][T15295] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2527'. [ 759.664150][ T5964] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 759.684983][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.725631][ T5964] usb 2-1: Product: syz [ 759.729855][ T5964] usb 2-1: Manufacturer: syz [ 759.836716][ T5964] usb 2-1: SerialNumber: syz [ 759.919105][ T2345] pvrusb2: Invalid write control endpoint [ 759.943528][ T10] usb 3-1: USB disconnect, device number 24 [ 760.092899][ T2345] pvrusb2: Invalid write control endpoint [ 760.127069][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 760.154284][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 760.177469][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 760.202898][ T2345] pvrusb2: Device being rendered inoperable [ 760.271357][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 760.282087][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 760.299642][ T2345] pvrusb2: Attached sub-driver cx25840 [ 760.309260][T15291] delete_channel: no stack [ 760.318405][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 760.331822][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 760.366954][ T5964] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 760.382844][T15307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.415331][ T5964] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 760.422488][T15307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.439262][T15307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.459039][T15307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.555445][ T5964] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 760.592344][ T5964] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 760.657480][ T5964] usb 2-1: USB disconnect, device number 31 [ 761.018699][T15311] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2532'. [ 761.128558][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2535'. [ 761.725155][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 761.881962][T15324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.905409][T15324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.924958][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 761.931489][ T10] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 761.955046][T14421] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 761.959350][ T10] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 761.981287][T15324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.014608][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.016276][T15324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.046431][ T10] usb 3-1: Product: syz [ 762.050891][ T10] usb 3-1: Manufacturer: syz [ 762.066456][ T10] usb 3-1: SerialNumber: syz [ 762.078010][ T10] usb 3-1: config 0 descriptor?? [ 762.092558][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 762.103145][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'. [ 762.105821][ T10] usb 3-1: setting power ON [ 762.124953][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 762.147543][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 762.161760][T14421] usb 5-1: config 0 has no interfaces? [ 762.168842][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 762.178521][ T10] usb 3-1: media controller created [ 762.201700][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 762.235549][T14421] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 762.252392][ T10] usb 3-1: selecting invalid altsetting 6 [ 762.264517][T14421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.268458][ T10] usb 3-1: digital interface selection failed (-22) [ 762.279650][ T5870] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 762.288635][T14421] usb 5-1: Product: syz [ 762.292828][T14421] usb 5-1: Manufacturer: syz [ 762.302606][T15314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2533'. [ 762.316533][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 762.329554][T14421] usb 5-1: SerialNumber: syz [ 762.350788][T14421] usb 5-1: config 0 descriptor?? [ 762.355467][ T10] usb 3-1: setting power OFF [ 762.370460][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 762.385075][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 762.409506][ T10] (NULL device *): no alternate interface [ 762.464133][ T5870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 762.492218][ T5870] usb 2-1: not running at top speed; connect to a high speed hub [ 762.501889][ T5870] usb 2-1: config 1 interface 0 altsetting 129 endpoint 0x82 has invalid wMaxPacketSize 0 [ 762.514636][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 762.537773][ T5870] usb 2-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 762.552848][ T10] usb 3-1: USB disconnect, device number 25 [ 762.616531][ T5870] usb 2-1: config 1 interface 0 has no altsetting 0 [ 762.634692][ T5870] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 762.643922][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.655603][ T5870] usb 2-1: Product: syz [ 762.659820][ T5870] usb 2-1: Manufacturer: 줥뫪ﾅ勧뼕ⱶ틑럠漈셥㝡뀖瞅欳瀌ⲮԆ漅ꏱ데퐛첗隣䏐ꙭᦇ닚ฤ䱺邲ꘃꈹ嵒䴊獣ﳰ⡶㤚Ցz [ 762.679462][ T5870] usb 2-1: SerialNumber: syz [ 762.744275][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2534'. [ 763.130530][T15343] netlink: 'syz.2.2544': attribute type 4 has an invalid length. [ 763.170958][T15343] netlink: 'syz.2.2544': attribute type 4 has an invalid length. [ 763.325151][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 763.364666][T15345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2545'. [ 763.413820][T15345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2545'. [ 763.495295][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 763.532832][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.571994][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.606448][T15346] erspan0: entered promiscuous mode [ 763.628500][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 763.756368][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.823906][ T10] usb 4-1: config 0 descriptor?? [ 763.850652][ T10] hub 4-1:0.0: USB hub found [ 764.125897][T15351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2546'. [ 764.140184][T15351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.149289][T15351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.257147][T15339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2543'. [ 764.276067][ T10] hub 4-1:0.0: 26 ports detected [ 764.300295][ T10] hub 4-1:0.0: insufficient power available to use all downstream ports [ 764.591686][ T5964] usb 5-1: USB disconnect, device number 26 [ 764.720216][T15357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2547'. [ 765.087188][ T5870] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 765.268225][ T5870] usb 2-1: USB disconnect, device number 32 [ 765.336826][ T10] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 765.344018][ T10] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 765.406086][ T10] usbhid 4-1:0.0: can't add hid device: -32 [ 765.422108][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 765.785807][ T5870] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 765.995333][ T5870] usb 2-1: config 0 has no interfaces? [ 766.033394][ T5870] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 766.059621][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.117706][ T5964] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 766.117785][ T5870] usb 2-1: Product: syz [ 766.165648][T14421] usb 4-1: USB disconnect, device number 9 [ 766.195579][ T5870] usb 2-1: Manufacturer: syz [ 766.213507][ T5870] usb 2-1: SerialNumber: syz [ 766.291374][ T5870] usb 2-1: config 0 descriptor?? [ 766.295094][ T5964] usb 5-1: Using ep0 maxpacket: 32 [ 766.303255][ T5964] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 766.313019][ T5964] usb 5-1: config 0 has no interface number 0 [ 766.344589][ T5964] usb 5-1: config 0 interface 89 has no altsetting 0 [ 766.371392][ T5964] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 766.391817][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.415587][ T5964] usb 5-1: Product: syz [ 766.448624][ T5964] usb 5-1: Manufacturer: syz [ 766.458989][ T5964] usb 5-1: SerialNumber: syz [ 766.476823][ T5964] usb 5-1: config 0 descriptor?? [ 766.575949][T15385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2558'. [ 766.969033][T15391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.981766][T15391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.994977][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 767.125182][ T10] usb 4-1: device descriptor read/64, error -71 [ 767.288545][T15394] input: syz0 as /devices/virtual/input/input63 [ 767.395219][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 767.410185][T15397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.419432][T15397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.429135][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2553'. [ 767.502571][T15399] netlink: 'syz.2.2562': attribute type 4 has an invalid length. [ 767.524952][ T10] usb 4-1: device descriptor read/64, error -71 [ 767.551188][T15399] netlink: 'syz.2.2562': attribute type 4 has an invalid length. [ 767.637257][ T10] usb usb4-port1: attempt power cycle [ 767.995071][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 768.037423][ T10] usb 4-1: device descriptor read/8, error -71 [ 768.181839][ T5870] usb 2-1: USB disconnect, device number 33 [ 768.324967][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 768.345775][ T10] usb 4-1: device descriptor read/8, error -71 [ 768.545646][ T10] usb usb4-port1: unable to enumerate USB device [ 768.881916][ T10] usb 5-1: USB disconnect, device number 27 [ 769.434970][ T5964] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 770.035273][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 770.057032][ T5964] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 770.065440][ T5964] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 770.075795][ T5964] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 770.102740][ T5964] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 770.205557][ T5964] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.219047][ T5964] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 770.290551][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.815114][ T5964] usb 5-1: usb_control_msg returned -32 [ 770.906004][ T5964] usbtmc 5-1:16.0: can't read capabilities [ 770.908818][ T5870] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 771.220553][ T5870] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 771.280516][T15417] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 771.474537][ T5870] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 771.525224][ T5964] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 771.621761][ T5870] usb 4-1: config 135 has no interface number 0 [ 771.696393][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.711929][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.739210][ T5964] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 771.760892][ T5964] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 771.798099][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.808258][ T5870] usb 4-1: config 135 interface 230 has no altsetting 0 [ 771.838511][ T5964] usb 3-1: config 0 descriptor?? [ 771.867689][ T5870] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 771.989955][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.004704][ T5870] usb 4-1: Product: syz [ 772.021151][ T5870] usb 4-1: Manufacturer: syz [ 772.062786][ T5870] usb 4-1: SerialNumber: syz [ 772.268070][ T5964] itetech 0003:048D:8595.002B: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.2-1/input0 [ 772.430553][T15453] fuse: Unknown parameter 'grup_id' [ 772.484821][T15444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.494429][T15444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.559174][ T5870] usb 3-1: USB disconnect, device number 26 [ 772.638716][T15452] fido_id[15452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 772.668508][T15457] netlink: 'syz.1.2579': attribute type 4 has an invalid length. [ 772.767800][T15460] netlink: 'syz.1.2579': attribute type 4 has an invalid length. [ 773.089102][ T891] usb 5-1: USB disconnect, device number 28 [ 773.474502][ T5964] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 773.665007][ T5964] usb 3-1: Using ep0 maxpacket: 8 [ 773.679235][ T5964] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 773.742326][ T5964] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 773.784058][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.838333][ T5964] usb 3-1: Product: syz [ 773.852030][ T5964] usb 3-1: Manufacturer: syz [ 773.861957][ T5964] usb 3-1: SerialNumber: syz [ 773.892563][ T5964] usb 3-1: config 0 descriptor?? [ 773.923132][ T5964] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 773.940538][ T5964] usb 3-1: setting power ON [ 773.965896][ T5964] dvb-usb: bulk message failed: -22 (2/0) [ 773.995565][ T5964] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 774.037431][ T5964] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 774.168345][T15463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2581'. [ 774.186319][T15468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 774.291406][ T5964] usb 3-1: media controller created [ 774.756100][ T5870] usb 4-1: USB disconnect, device number 14 [ 774.788224][ T5964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 774.883578][T15475] TCP: TCP_TX_DELAY enabled [ 774.967512][ T5964] usb 3-1: selecting invalid altsetting 6 [ 775.004254][ T5964] usb 3-1: digital interface selection failed (-22) [ 775.046610][ T5964] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 775.104456][ T5964] usb 3-1: setting power OFF [ 775.140847][ T5964] dvb-usb: bulk message failed: -22 (2/0) [ 775.174363][ T5964] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 775.235363][ T5964] (NULL device *): no alternate interface [ 775.371519][ T5964] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 775.433290][ T5964] usb 3-1: USB disconnect, device number 27 [ 775.768885][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2588'. [ 775.782306][T15491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2588'. [ 775.794214][T15491] netlink: 'syz.2.2588': attribute type 11 has an invalid length. [ 775.825684][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2588'. [ 775.835211][T15496] netlink: 'syz.4.2590': attribute type 12 has an invalid length. [ 775.843071][T15496] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2590'. [ 775.852439][T15491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2588'. [ 775.927094][T15491] netlink: 'syz.2.2588': attribute type 11 has an invalid length. [ 776.228876][ T5870] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 776.405140][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 776.424434][ T5870] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 776.444610][ T5870] usb 3-1: config 0 has no interface number 0 [ 776.464747][ T5870] usb 3-1: config 0 interface 184 has no altsetting 0 [ 776.494989][ T891] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 776.511731][ T5870] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 776.521688][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.534173][ T5870] usb 3-1: Product: syz [ 776.538674][ T5870] usb 3-1: Manufacturer: syz [ 776.543761][ T5870] usb 3-1: SerialNumber: syz [ 776.556957][ T5870] usb 3-1: config 0 descriptor?? [ 776.564665][ T5870] smsc75xx v1.0.0 [ 776.571476][ T5870] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 776.583676][ T5870] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 776.656631][ T891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.671435][ T891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.691876][ T891] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 776.710202][ T891] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 776.720290][ T891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.736756][ T891] usb 5-1: config 0 descriptor?? [ 777.172745][ T891] itetech 0003:048D:8595.002C: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.4-1/input0 [ 777.359555][T15508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.381199][T15508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.413439][ T5870] usb 5-1: USB disconnect, device number 29 [ 778.445273][ T5870] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 778.577536][T15521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2595'. [ 778.590690][T15521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2595'. [ 778.615172][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 778.623412][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 778.638459][ T5870] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.670235][ T5870] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 778.679895][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.756377][ T5870] usb 5-1: Product: syz [ 778.760670][ T5870] usb 5-1: Manufacturer: syz [ 778.765447][T14421] usb 3-1: USB disconnect, device number 28 [ 778.774142][ T5870] usb 5-1: SerialNumber: syz [ 779.065062][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 779.309308][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 779.320154][ T10] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 779.355124][ T10] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 779.364227][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.464978][ T10] usb 4-1: Product: syz [ 779.554688][ T10] usb 4-1: Manufacturer: syz [ 779.569022][ T10] usb 4-1: SerialNumber: syz [ 779.592785][ T10] usb 4-1: config 0 descriptor?? [ 779.602407][T15531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.617052][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 779.628462][ T10] usb 4-1: setting power ON [ 779.633001][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 779.698023][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 779.698573][T15531] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.735768][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 779.744481][ T10] usb 4-1: media controller created [ 779.852876][T15524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2596'. [ 779.882368][T15531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 779.903579][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 779.923699][T15536] loop9: detected capacity change from 0 to 8 [ 779.959219][ T10] usb 4-1: selecting invalid altsetting 6 [ 779.973638][T15536] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 779.979586][ T10] usb 4-1: digital interface selection failed (-22) [ 779.986353][T15536] loop9: partition table partially beyond EOD, truncated [ 779.993598][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 780.002237][T15536] loop9: p1 size 81768186 extends beyond EOD, truncated [ 780.021822][ T10] usb 4-1: setting power OFF [ 780.096650][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 780.125897][T14421] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 780.126666][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 780.146242][ T10] (NULL device *): no alternate interface [ 780.155800][ T6201] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 780.194856][ T6201] loop9: partition table partially beyond EOD, truncated [ 780.222987][ T6201] loop9: p1 size 81768186 extends beyond EOD, truncated [ 780.276276][T15537] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 780.281826][T15537] loop9: partition table partially beyond EOD, truncated [ 780.289613][ T3533] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 780.298941][T15537] loop9: p1 size 81768186 extends beyond EOD, truncated [ 780.378444][ T6201] udevd[6201]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 780.528329][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 780.589778][ T10] usb 4-1: USB disconnect, device number 15 [ 780.726522][T14421] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 780.779735][ T6199] udevd[6199]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 780.816225][ T6199] udevd[6199]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 780.925892][T15542] netlink: 'syz.0.2602': attribute type 16 has an invalid length. [ 780.933841][T15542] netlink: 'syz.0.2602': attribute type 17 has an invalid length. [ 780.942095][T15542] netlink: 'syz.0.2602': attribute type 27 has an invalid length. [ 781.212425][ T6083] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 781.366303][ T2956] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 781.393797][ T6083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.415311][ T6083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.425817][ T6083] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 781.425860][ T2956] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 781.457361][ T6083] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 781.572639][ T6083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.642898][ T6083] usb 2-1: config 0 descriptor?? [ 781.926529][ T5870] usbhid 5-1:1.0: can't add hid device: -71 [ 781.932994][ T5870] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 781.951781][ T5870] usb 5-1: USB disconnect, device number 30 [ 781.978640][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 782.122078][ T6083] itetech 0003:048D:8595.002D: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.1-1/input0 [ 782.190518][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 782.203391][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 782.225721][T14421] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 782.227907][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 782.268810][T15547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.345464][T15547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.370152][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 782.418246][T14421] usb 2-1: USB disconnect, device number 34 [ 782.435396][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 782.490783][ T9] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 782.538557][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.572176][ T9] usb 4-1: Product: syz [ 782.612246][ T9] usb 4-1: Manufacturer: syz [ 782.663939][ T9] usb 4-1: SerialNumber: syz [ 782.710463][T15564] tipc: Resetting bearer [ 782.824823][T15559] fido_id[15559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 782.845948][ T9] usb 4-1: config 0 descriptor?? [ 782.934538][ T9] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 784.107590][ T9] usb 4-1: USB disconnect, device number 16 [ 784.570870][ T30] audit: type=1326 audit(1754243534.444:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15583 comm="syz.1.2613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56e378eb69 code=0x80000000 [ 784.593334][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.147925][T14421] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 785.255186][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 785.305144][T14421] usb 3-1: Using ep0 maxpacket: 8 [ 785.311883][T14421] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 785.324816][T14421] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 785.352428][T14421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.362460][T14421] usb 3-1: Product: syz [ 785.369648][T14421] usb 3-1: Manufacturer: syz [ 785.374728][T14421] usb 3-1: SerialNumber: syz [ 785.391657][T14421] usb 3-1: config 0 descriptor?? [ 785.408190][T14421] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 785.441903][T14421] usb 3-1: setting power ON [ 785.451822][T14421] dvb-usb: bulk message failed: -22 (2/0) [ 785.480189][T14421] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 785.512861][T14421] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 785.532948][T14421] usb 3-1: media controller created [ 785.594667][T14421] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 785.605444][T15592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2616'. [ 785.669415][T14421] usb 3-1: selecting invalid altsetting 6 [ 785.684660][T14421] usb 3-1: digital interface selection failed (-22) [ 785.723744][T14421] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 785.745961][T14421] usb 3-1: setting power OFF [ 785.753768][T14421] dvb-usb: bulk message failed: -22 (2/0) [ 785.765797][T14421] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 785.814962][T14421] (NULL device *): no alternate interface [ 785.932443][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2621'. [ 785.979201][T14421] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 786.035363][T14421] usb 3-1: USB disconnect, device number 29 [ 786.375092][T14421] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 786.545178][T14421] usb 4-1: Using ep0 maxpacket: 16 [ 786.563295][T14421] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.603526][T14421] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 786.639918][T14421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 786.669711][T14421] usb 4-1: SerialNumber: syz [ 786.680358][T14421] hub 4-1:1.0: bad descriptor, ignoring hub [ 786.711102][T14421] hub 4-1:1.0: probe with driver hub failed with error -5 [ 787.016296][T14421] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 787.164979][ T5964] usb 4-1: reset high-speed USB device number 17 using dummy_hcd [ 787.207130][T14421] usb 5-1: Using ep0 maxpacket: 8 [ 787.227308][T15628] netlink: 'syz.2.2628': attribute type 5 has an invalid length. [ 787.259377][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2628'. [ 787.315439][T14421] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 787.366118][T14421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.384355][T14421] usb 5-1: Product: syz [ 787.393614][T14421] usb 5-1: Manufacturer: syz [ 787.411621][T14421] usb 5-1: SerialNumber: syz [ 787.444656][T14421] usb 5-1: config 0 descriptor?? [ 787.681735][T14421] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 787.798631][ T5964] usb 4-1: USB disconnect, device number 17 [ 788.825304][ T5964] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 788.944300][T15623] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 788.955949][T15655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.975100][ T5964] usb 2-1: Using ep0 maxpacket: 16 [ 788.993796][T15655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.000207][T15623] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 789.005180][ T5964] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 789.090518][T15655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.104776][ T5964] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.126733][T15655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.174705][T15657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2638'. [ 789.190607][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 789.203212][ T5964] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.205970][T15655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2636'. [ 789.269656][ T5964] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 789.281626][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.291538][ T5964] usb 2-1: Product: syz [ 789.299390][ T5964] usb 2-1: Manufacturer: syz [ 789.304795][ T5964] usb 2-1: SerialNumber: syz [ 789.395464][ T9] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 789.571875][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 789.584266][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.655163][ T9] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 789.677853][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.702751][ T9] usb 3-1: config 0 descriptor?? [ 789.739065][ T5964] usb 2-1: 0:2 : does not exist [ 789.935553][ T9] bigben 0003:146B:0902.002E: unexpected rdesc, please submit for review [ 790.007326][ T9] bigben 0003:146B:0902.002E: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.2-1/input0 [ 790.068907][T14421] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 790.068975][ T9] bigben 0003:146B:0902.002E: not enough fields in HID_OUTPUT_REPORT 0 [ 790.201996][ T9] bigben 0003:146B:0902.002E: no output report found [ 790.269449][ T9] usb 3-1: USB disconnect, device number 30 [ 790.384449][T14421] usb 5-1: USB disconnect, device number 31 [ 790.427229][T15670] fido_id[15670]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 790.705816][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 790.878931][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 790.889301][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 790.898767][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.960002][ T9] usb 3-1: Product: syz [ 790.971794][ T9] usb 3-1: Manufacturer: syz [ 790.978226][ T9] usb 3-1: SerialNumber: syz [ 791.145477][T14421] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 791.175579][ T5964] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 791.221049][ T5964] usb 2-1: USB disconnect, device number 35 [ 791.227195][ T9] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 791.227221][ T9] usb 3-1: 2:1 : sample bitwidth 232 in over sample bytes 4 [ 791.227246][ T9] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 791.325575][T14421] usb 5-1: Using ep0 maxpacket: 32 [ 791.342313][T14421] usb 5-1: config 0 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 791.391232][T14421] usb 5-1: config 0 interface 0 has no altsetting 0 [ 791.423043][ T9] usb 3-1: USB disconnect, device number 31 [ 791.423555][T14421] usb 5-1: New USB device found, idVendor=1d6d, idProduct=c2cb, bcdDevice= 0.00 [ 791.480390][T14421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.537544][T14421] usb 5-1: config 0 descriptor?? [ 791.558998][T14421] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 792.655122][T14421] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 792.806663][T15699] netlink: 'syz.0.2651': attribute type 6 has an invalid length. [ 792.819996][T15699] netlink: 'syz.0.2651': attribute type 6 has an invalid length. [ 792.833226][T14421] usb 3-1: config 0 has no interfaces? [ 792.874977][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 792.894420][T14421] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 792.908280][T14421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.934170][T14421] usb 3-1: Product: syz [ 792.944192][T14421] usb 3-1: Manufacturer: syz [ 792.958437][T14421] usb 3-1: SerialNumber: syz [ 793.030269][T14421] usb 3-1: config 0 descriptor?? [ 793.052616][ T9] usb 4-1: config 9 has an invalid interface number: 32 but max is 0 [ 793.061298][ T9] usb 4-1: config 9 has no interface number 0 [ 793.113727][ T9] usb 4-1: config 9 interface 32 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 793.150089][T15700] syz.1.2650: attempt to access beyond end of device [ 793.150089][T15700] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 793.322976][ T9] usb 4-1: config 9 interface 32 has no altsetting 0 [ 793.335274][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 793.350989][ T9] usb 4-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 793.360801][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.376872][ T9] usb 4-1: Product: syz [ 793.390460][ T9] usb 4-1: Manufacturer: syz [ 793.475403][ T9] usb 4-1: SerialNumber: syz [ 793.735849][T15706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.755063][T15706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.977043][ T9] usb 4-1: USB disconnect, device number 18 [ 794.048466][ T6083] usb 5-1: USB disconnect, device number 32 [ 794.524955][ T6083] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 794.821659][ T6083] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 794.834116][ T6083] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.857668][ T6083] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 794.872237][ T6083] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.994245][ T6083] usb 5-1: Product: syz [ 795.053885][ T6083] usb 5-1: Manufacturer: syz [ 795.073404][ T6083] usb 5-1: SerialNumber: syz [ 795.084101][T15719] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2656'. [ 795.121742][ T6083] usb 5-1: config 0 descriptor?? [ 795.178158][ T6083] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 795.198337][ T6083] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 795.226953][T15716] can: request_module (can-proto-0) failed. [ 795.345876][T13936] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 795.466756][ T6083] usb 3-1: USB disconnect, device number 32 [ 795.510093][T13936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.523203][T13936] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 795.540568][T13936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 795.559014][T13936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 795.586895][T13936] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 795.618010][T13936] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 795.627773][T13936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 795.639587][T13936] usb 2-1: Product: syz [ 795.643936][T13936] usb 2-1: Manufacturer: syz [ 795.649991][T13936] usb 2-1: SerialNumber: syz [ 795.692656][T13936] usb 2-1: config 0 descriptor?? [ 795.730607][T15731] fuse: Unknown parameter 'group_id00000000000000000000' [ 796.000107][T13936] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 796.012460][T13936] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 796.202352][T13936] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 796.218393][T13936] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 796.242166][T13936] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 796.242167][ T6083] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 796.411733][T13936] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 796.631592][ T6083] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 796.645063][ T6083] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 796.726175][ T6083] usb 3-1: config 135 has no interface number 0 [ 796.751829][ T6083] usb 3-1: config 135 interface 230 has no altsetting 0 [ 796.768908][ T6083] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 796.785049][ T6083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.799009][ T6083] usb 3-1: Product: syz [ 796.809326][ T6083] usb 3-1: Manufacturer: syz [ 796.823831][ T6083] usb 3-1: SerialNumber: syz [ 796.930013][T15743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.988758][T15743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.160406][ T5964] usb 5-1: USB disconnect, device number 33 [ 797.259601][T13936] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 797.268784][T13936] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 797.675016][ T5964] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 797.828116][T15759] input: syz0 as /devices/virtual/input/input64 [ 797.835013][ T5964] usb 5-1: Using ep0 maxpacket: 32 [ 797.842335][ T5964] usb 5-1: config 0 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 797.906219][ T5964] usb 5-1: config 0 interface 0 has no altsetting 0 [ 797.965292][ T5964] usb 5-1: New USB device found, idVendor=1d6d, idProduct=c2cb, bcdDevice= 0.00 [ 798.061527][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.084579][ T5964] usb 5-1: config 0 descriptor?? [ 798.103223][ T5964] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 798.246768][T15765] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2669'. [ 798.258570][T15765] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2669'. [ 798.561441][T13936] usb 2-1: USB disconnect, device number 36 [ 798.605138][ T6083] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 798.795152][ T6083] usb 4-1: Using ep0 maxpacket: 16 [ 798.807012][ T6083] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.832993][ T6083] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 798.863959][ T6083] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 798.875112][ T6083] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.883397][ T6083] usb 4-1: Product: syz [ 798.922800][ T6083] usb 4-1: Manufacturer: syz [ 798.953970][ T6083] usb 4-1: SerialNumber: syz [ 799.413231][ T6083] usb 4-1: skipping empty audio interface (v1) [ 799.449854][ T9] usb 3-1: USB disconnect, device number 33 [ 799.508894][ T6083] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 799.551983][ T6083] usb 4-1: USB disconnect, device number 19 [ 799.589062][T15776] netlink: 'syz.2.2674': attribute type 21 has an invalid length. [ 799.590048][ T6199] udevd[6199]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 799.626539][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'. [ 799.631247][ T5870] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 799.799690][ T5870] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 799.821525][ T5870] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 799.833277][ T5870] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 799.855670][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.194136][T15797] input: syz0 as /devices/virtual/input/input66 [ 800.290528][ T5870] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 800.314558][T13936] usb 5-1: USB disconnect, device number 34 [ 800.339757][ T5870] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input65 [ 800.429022][ T5870] input: failed to attach handler kbd to device input65, error: -5 [ 800.449121][T15800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2682'. [ 800.476757][T15800] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2682'. [ 800.518748][T15800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2682'. [ 800.597746][ T5870] usb 2-1: USB disconnect, device number 37 [ 801.385067][T14421] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 801.455543][ T5870] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 801.550732][T14421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.562708][T14421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.586331][T14421] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 801.627655][T14421] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 801.655387][ T31] INFO: task kworker/1:5:5945 blocked for more than 143 seconds. [ 801.664616][ T31] Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 [ 801.674130][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 801.684589][T14421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.693215][T13936] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 801.707071][ T31] task:kworker/1:5 state:D stack:20680 pid:5945 tgid:5945 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 801.707746][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.726793][T14421] usb 4-1: config 0 descriptor?? [ 801.738766][ T31] Workqueue: usb_hub_wq hub_event [ 801.747660][ T31] Call Trace: [ 801.751175][ T31] [ 801.765143][ T31] __schedule+0x1798/0x4cc0 [ 801.773552][ T31] ? __pfx___schedule+0x10/0x10 [ 801.783776][ T31] ? schedule+0x91/0x360 [ 801.790780][ T31] schedule+0x165/0x360 [ 801.873504][ T31] schedule_preempt_disabled+0x13/0x30 [ 801.874508][T13936] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 801.891520][T13936] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 801.909240][ T5870] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 801.918469][ T31] __mutex_lock+0x7e6/0x1360 [ 801.927694][ T31] ? __mutex_lock+0x5b6/0x1360 [ 801.933367][T13936] usb 5-1: config 135 has no interface number 0 [ 801.941996][ T31] ? hub_event+0x21e5/0x4a20 [ 801.944990][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.953048][T13936] usb 5-1: config 135 interface 230 has no altsetting 0 [ 801.963885][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 801.978103][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 801.998265][ T31] hub_event+0x21e5/0x4a20 [ 802.002873][ T31] ? do_raw_spin_lock+0x121/0x290 [ 802.015421][T13936] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 802.028254][T13936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.036572][T13936] usb 5-1: Product: syz [ 802.040826][T13936] usb 5-1: Manufacturer: syz [ 802.048217][ T31] ? __pfx_hub_event+0x10/0x10 [ 802.054178][T13936] usb 5-1: SerialNumber: syz [ 802.062795][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 802.089666][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 802.099856][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 802.105050][ T5870] usb 2-1: config 0 descriptor?? [ 802.122002][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 802.136675][ T31] process_scheduled_works+0xade/0x17b0 [ 802.143377][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 802.182014][T14421] itetech 0003:048D:8595.002F: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.3-1/input0 [ 802.209700][ T31] worker_thread+0x8a0/0xda0 [ 802.227138][ T31] kthread+0x711/0x8a0 [ 802.239115][ T31] ? __pfx_worker_thread+0x10/0x10 [ 802.252026][ T31] ? __pfx_kthread+0x10/0x10 [ 802.263989][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 802.279730][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 802.294131][ T31] ? __pfx_kthread+0x10/0x10 [ 802.351183][ T31] ret_from_fork+0x3f9/0x770 [ 802.356326][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 802.361721][ T31] ? __switch_to_asm+0x39/0x70 [ 802.371399][ T5870] pwc: Askey VC010 type 2 USB webcam detected. [ 802.376727][T15817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.398593][ T31] ? __switch_to_asm+0x33/0x70 [ 802.409712][ T31] ? __pfx_kthread+0x10/0x10 [ 802.418965][T15817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.430363][ T31] ret_from_fork_asm+0x1a/0x30 [ 802.468758][ T31] [ 802.486805][ T31] [ 802.486805][ T31] Showing all locks held in the system: [ 802.541484][ T31] 1 lock held by khungtaskd/31: [ 802.620103][ T31] #0: ffffffff8e139e60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 802.675262][ T31] 5 locks held by kworker/1:1/43: [ 802.728188][ T31] #0: ffff8881452cf948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 802.824500][ T31] #1: ffffc90000b37bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 802.893232][ T31] #2: ffff888028a69198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 802.918370][ T31] #3: ffff888028a6c518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 802.984639][ T31] #4: ffff888145b76568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 803.047424][ T31] 2 locks held by getty/5621: [ 803.063500][ T31] #0: ffff888033a740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 803.270589][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 803.325933][ T31] 5 locks held by kworker/0:3/5870: [ 803.340154][ T31] #0: ffff8881452cf948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 803.416756][ T31] #1: ffffc900045cfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 803.421440][ T5870] pwc: send_video_command error -71 [ 803.430962][ T31] #2: ffff888145310198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 803.443478][ T31] #3: ffff88805766c198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 803.453114][ T31] #4: ffff888079b49160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 803.462862][ T31] 5 locks held by kworker/1:5/5945: [ 803.463539][ T5870] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 803.496827][ T31] #0: ffff8881452cf948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 803.502805][ T5870] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 803.508934][ T31] #1: ffffc90004a3fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 803.566032][ T31] #2: ffff888145f35198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 803.581284][ T31] #3: ffff888145f8e518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 803.595043][ T31] #4: ffff888145b76568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 803.608834][ T31] 2 locks held by syz.4.2685/15815: [ 803.614191][ T31] 2 locks held by syz.1.2686/15823: [ 803.620084][ T31] #0: ffffffff8f532948 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 803.629532][ T31] #1: ffffffff8e13f8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 803.630369][ T5870] usb 2-1: USB disconnect, device number 38 [ 803.641189][ T31] 4 locks held by syz.3.2687/15816: [ 803.684741][ T31] #0: ffff888054b8dc08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 803.697655][ T31] #1: ffffffff8f596270 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 803.709233][ T31] #2: ffff88803053e0d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640 [ 803.719982][ T31] #3: ffffffff8e13f8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 803.731933][ T31] [ 803.737622][ T9] usb 4-1: USB disconnect, device number 20 [ 803.750110][ T31] ============================================= [ 803.750110][ T31] [ 803.766822][ T31] NMI backtrace for cpu 0 [ 803.766840][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 803.766865][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 803.766878][ T31] Call Trace: [ 803.766887][ T31] [ 803.766896][ T31] dump_stack_lvl+0x189/0x250 [ 803.766931][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 803.766956][ T31] ? __pfx__printk+0x10/0x10 [ 803.766999][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 803.767032][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 803.767064][ T31] ? __pfx__printk+0x10/0x10 [ 803.767098][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 803.767133][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 803.767168][ T31] watchdog+0xf93/0xfe0 [ 803.767202][ T31] ? watchdog+0x1de/0xfe0 [ 803.767236][ T31] kthread+0x711/0x8a0 [ 803.767271][ T31] ? __pfx_watchdog+0x10/0x10 [ 803.767307][ T31] ? __pfx_kthread+0x10/0x10 [ 803.767327][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 803.767349][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 803.767362][ T31] ? __pfx_kthread+0x10/0x10 [ 803.767381][ T31] ret_from_fork+0x3f9/0x770 [ 803.767398][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 803.767420][ T31] ? __switch_to_asm+0x39/0x70 [ 803.767440][ T31] ? __switch_to_asm+0x33/0x70 [ 803.767459][ T31] ? __pfx_kthread+0x10/0x10 [ 803.767479][ T31] ret_from_fork_asm+0x1a/0x30 [ 803.767522][ T31] [ 803.767555][ T31] Sending NMI from CPU 0 to CPUs 1: [ 803.920233][ C1] NMI backtrace for cpu 1 [ 803.920252][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 803.920273][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 803.920285][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 803.920319][ C1] Code: 93 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 cf 10 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 803.920335][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 803.920352][ C1] RAX: e6715e456a13eb00 RBX: ffffffff819680b8 RCX: e6715e456a13eb00 [ 803.920366][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b1663 RDI: ffffffff8be2fd00 [ 803.920379][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 803.920393][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa32530 [ 803.920406][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039dcb40 [ 803.920418][ C1] FS: 0000000000000000(0000) GS:ffff888125d2a000(0000) knlGS:0000000000000000 [ 803.920455][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 803.920468][ C1] CR2: 00007f54f51f5f98 CR3: 000000007e296000 CR4: 00000000003526f0 [ 803.920485][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 803.920498][ C1] DR3: 00000000000023dd DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 803.920512][ C1] Call Trace: [ 803.920520][ C1] [ 803.920528][ C1] default_idle+0x13/0x20 [ 803.920553][ C1] default_idle_call+0x74/0xb0 [ 803.920578][ C1] do_idle+0x1e8/0x510 [ 803.920602][ C1] ? __pfx_do_idle+0x10/0x10 [ 803.920628][ C1] ? do_idle+0xa/0x510 [ 803.920649][ C1] cpu_startup_entry+0x44/0x60 [ 803.920669][ C1] start_secondary+0x101/0x110 [ 803.920700][ C1] common_startup_64+0x13e/0x147 [ 803.920738][ C1] [ 803.938459][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 803.938484][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 803.938516][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 803.938534][ T31] Call Trace: [ 803.938559][ T31] [ 803.938569][ T31] dump_stack_lvl+0x99/0x250 [ 803.938601][ T31] ? __asan_memcpy+0x40/0x70 [ 803.938629][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 803.938655][ T31] ? __pfx__printk+0x10/0x10 [ 803.938697][ T31] vpanic+0x27a/0x730 [ 803.938726][ T31] ? __pfx_vpanic+0x10/0x10 [ 803.938751][ T31] ? preempt_schedule+0xae/0xc0 [ 803.938787][ T31] ? preempt_schedule_common+0x83/0xd0 [ 803.938827][ T31] panic+0xb9/0xc0 [ 803.938851][ T31] ? __pfx_panic+0x10/0x10 [ 803.938877][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 803.938916][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 803.938952][ T31] watchdog+0xfd2/0xfe0 [ 803.938987][ T31] ? watchdog+0x1de/0xfe0 [ 803.939021][ T31] kthread+0x711/0x8a0 [ 803.939052][ T31] ? __pfx_watchdog+0x10/0x10 [ 803.939080][ T31] ? __pfx_kthread+0x10/0x10 [ 803.939111][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 803.939145][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 803.939165][ T31] ? __pfx_kthread+0x10/0x10 [ 803.939194][ T31] ret_from_fork+0x3f9/0x770 [ 803.939219][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 803.939247][ T31] ? __switch_to_asm+0x39/0x70 [ 803.939273][ T31] ? __switch_to_asm+0x33/0x70 [ 803.939301][ T31] ? __pfx_kthread+0x10/0x10 [ 803.939328][ T31] ret_from_fork_asm+0x1a/0x30 [ 803.939371][ T31] [ 804.266531][ T31] Kernel Offset: disabled [ 804.270859][ T31] Rebooting in 86400 seconds..