last executing test programs: 4m35.966032057s ago: executing program 3 (id=706): syz_open_dev$vim2m(&(0x7f0000000000), 0x3fffffff, 0x2) syz_emit_ethernet(0x92, &(0x7f0000000240)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "4f3bf5", 0x58, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "056e5a", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [@dstopts={0x11, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}, @fragment={0x0, 0x6}]}}}}}}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade38ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f386c", 0x53}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x75, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000000)=0x1) unshare(0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) (async) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r6, r6, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_buf(r1, 0x29, 0x2c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) 4m35.554281152s ago: executing program 3 (id=708): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r0, 0x4e0d, 0x371d, 0x0, &(0x7f0000000040)={[0x2]}, 0x8) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='itimer_state\x00', r0, 0x0, 0x3}, 0x18) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000100)={0x2, 0xd3a}) faccessat(r0, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000180)) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x9, 0x4, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7800, 0x11e00000, 0x1}}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x3, r2, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) connect$packet(r0, &(0x7f0000000300)={0x11, 0x5, r3, 0x1, 0x3, 0x6, @multicast}, 0x14) r4 = dup(r1) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000340)={'macvlan0\x00', {0x2, 0x0, @remote}}) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000440)={0x9, &(0x7f00000003c0)=[{0x123e, 0x1, 0x86, 0xbb8}, {0x6, 0x5, 0x9, 0x3ff}, {0x80, 0x4, 0x5}, {0x4f0a, 0x4, 0x5, 0xfffffff7}, {0x5, 0xa1, 0x8, 0x4}, {0x7, 0x24, 0x2}, {0x7fff, 0x81, 0xe}, {0x4, 0xe, 0x9a, 0x10}, {0x1, 0x7f, 0xe8, 0x4}]}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000480)={0x18}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x19) mkdirat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x80) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000500)) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x50, r6, 0x1f165000) sendmsg$NFT_BATCH(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x304, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x2008044}, 0x40000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000700)={0x5, &(0x7f00000006c0)=[{0x9, 0x3, 0x2, 0x6}, {0x100, 0x8, 0x8, 0x81}, {0x8, 0x1, 0x0, 0x5}, {0x4126, 0x8, 0x4, 0x6}, {0x7, 0x4, 0xff, 0x5}]}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@deltaction={0x28, 0x31, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000880)={r6, 0x9, 0x2, r5}) r8 = syz_usb_connect$cdc_ecm(0x4, 0xed, &(0x7f00000008c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x1, 0x1, 0xd, 0x50, 0xe, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0xf8, {{0x9, 0x24, 0x6, 0x0, 0x0, "784cd112"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x99c6, 0x2, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0x40, 0x5, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x1}, @mdlm_detail={0x77, 0x24, 0x13, 0x8, "795ad518ea44c93b49d60801ef211e48fc7af85fece7b556a1c6d0d149662ce2a8714df5e81527a05248e9e2a9b069c996669183e0c17b48e07439a4e8076a238977f929054a7ac500d243d0c631026f497aa366125552b0a789a8ab27de2d6d0a00cee991fa3e0c979db9733327f63dd65238"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x20, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x7f, 0xd5}}}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x200, 0x2, 0x5, 0x8, 0x40, 0x3}, 0x152, &(0x7f0000000a00)={0x5, 0xf, 0x152, 0x2, [@generic={0xb2, 0x10, 0xa, "7131bfbf56f20b97b91aae9cb922744e0076bc9967e76b0fea526b0f9558422bd8c511dc764a09b9b03fc8a7742697c727bb75c59a7f040438062685260aafb94bdd84c8ee5d57125bbe9d54b068f92b41c593b46a4e64a98e8222024b48e6b32919f50d406f99898f41babfa952ca6b49f813e8f15813a3f58bc721bf6c6f74de5fc8c8bc5870563c84b9d165c728642f0fe932be92be7e5cc3ce8ba329d9fdae3be61b542208a33f11702ea2d44e"}, @generic={0x9b, 0x10, 0xb, "4e444047488b935523a6aff25b5c7027dbc02b93bdec181f558159c1077845ac7341a9db6acec5fb94f63df075e3b17b87ec93f94b4954a6968dde37ceac683b5a3f947aca638e97d870d6e272dcd1cd197703726bb30f0148d9d4e3e89b38907006ca0efb00cf96eeea92ce85ed27943aa8641a84c19f717a704e30296930d4bffd893b8ca68688226f1c505044b6f751d54b3ea1c22ad3"}]}, 0x6, [{0x4, &(0x7f0000000b80)=@lang_id={0x4}}, {0xe8, &(0x7f0000000bc0)=@string={0xe8, 0x3, "58cc1013aaf16e98fac6188d107e423c5ae29792a4e12b17da73e6bd553da885034b21231be6b0e66ae24c44b6b7707cf7456ee69c39aab038b02735d0c9ab798f9f38feb23152aedebad0d6b90308f8ea6005341c808b3e009d0183cffdfdd2726cd67802b18396cab6d69d0a3cfd87c572ceb7417291ddcfe9a782362c22a1294b0aa63724ff6d720628e36ab39f24d9e04caaaa5460bf3aa08edaa9e816d872c5c2e63188f6cf4af3b0f2c9794f6c10af64288099bdd69d98b6ca1d350bd59b318b251c429a5c43e14a818bc7a5b6fd9161002fcc0d65d14aa0d88a14836c64e6ca78d4e8"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x449}}, {0xc2, &(0x7f0000000d00)=@string={0xc2, 0x3, "9b30fe5567ca06d88cee83743e3293d6c49843bcf54cc8b66745cdbb50dd75f83dc8737badcdcd66bd987083b2f5f7ea5127ac4ea728fd2456efa085c333a04661354214c998417e780e265811df35bb75b5fe6bf30ca6e863fc1535ef232e21bed54e3d8caf1a2b7eefa34e84400867b1876c83078064673f681a930fc33f968762b4269521547ceee0c2cabf8e624fa07c5139ef77ade105bc2fb1703e8e9d79ddad04db0bfe4d639d82ef5aa2fc711d819dafd74dd32d5d6e7587a92ecbf1"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x3c0a}}]}) syz_usb_control_io(r8, &(0x7f0000001080)={0x2c, &(0x7f0000000f00)={0x20, 0x31, 0x4, {0x4, 0x9, "1226"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, &(0x7f0000000f80)={0x0, 0xf, 0x6b, {0x5, 0xf, 0x6b, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x800, 0xf00f, 0x8, [0xff0000, 0x30, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x9, 0xd0}, @wireless={0xb, 0x10, 0x1, 0x8, 0x9a, 0x1, 0x8, 0xfc01, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0xd0, 0x50, 0x7, 0xc00, 0x8d}, @generic={0x1d, 0x10, 0x4, "8077ffdf47e5ea37d628215d19b5e3658239ea082c1915acb60d"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "aaf55c7e86d2cc58d9122efb70f957a7"}]}}, &(0x7f0000001000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x8, 0x9, 0x81, "381f45f1", "cfc13e49"}}, &(0x7f0000001040)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x76, 0x9, 0x6, 0xfff9, 0x9}}}, &(0x7f0000001580)={0x84, &(0x7f00000010c0)={0x20, 0xb, 0xf9, "cb04faa593b043ba02359f4703c91d2388f00bc4049bbb5a633727159c00980dffa504b32748a648acb8245c69a93c2d5ac65006f689d56b9fc0511cdc792ed60705ed06932fb5e4da4b96c9bb2656ecd46b6ee3c627250e026ae238110a8993cefadce84e7183f94a4a0d293ee7b63374944651dd447d11855a2febd389b05ba8dd7b57a25bd138dc9dce6cf299b1c65c7cc8018e5230bf187b488e7fbd963db401184d841d8c1ffa7c63e65c9f32d4a54ceb4a6e7fe5004baeee7b940d50dbc30d33367c78fabb743f57e661230b76b677eba91c9feb4f8c2378c99318aff08b2c86060c6617751ebe4c4222a1d26bf9b685e2eda10da869"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f00000012c0)={0x40, 0x7, 0x2, 0xb6}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000001340)={0x40, 0xb, 0x2, "d902"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000013c0)={0x40, 0x13, 0x6}, &(0x7f0000001400)={0x40, 0x17, 0x6}, &(0x7f0000001440)={0x40, 0x19, 0x2, "d5d2"}, &(0x7f0000001480)={0x40, 0x1a, 0x2}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x1c}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0x11}}) 4m34.982789427s ago: executing program 3 (id=712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r1, 0x8920, &(0x7f0000000200)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047ce4ff07004280040008000c00018006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047ce4ff07004280040008000c00018006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 4m34.943292617s ago: executing program 3 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000fc0)={&(0x7f0000000e40)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000e80)="0fa5e4b103", 0x5}, {&(0x7f0000001000)="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", 0xd98}], 0x100000e4, 0x0, 0x0, 0x4000070}, 0x0) (async, rerun: 32) mount$fuseblk(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x20000, 0x0) (async, rerun: 32) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 4m34.870296434s ago: executing program 3 (id=714): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x1d0, &(0x7f0000000280)=ANY=[@ANYBLOB="2400004e6be8f0b6ee2420bf926f6af7edbb052ef8dd8f9221b900585564babc748c4fbea31865b89200004e"]) r3 = fsmount(r1, 0x0, 0x0) fchdir(r3) gettid() r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000600)="28617cb915351091a5dbe3682bce074354008ca578a9120aaed45ed49f89360f3cb16d5ea2405f48b82f54fc2a160278497ad290a6d6a817dd7eecd94cf6d9e95f5e469d100da10bc1f74fbc2723ac868f8b08d5630ab86c405c06b36346395466583ce90095ac7205a83be8693559949300c2626983f623e8b803514996deae1c87dd61f28fd363568c55a99ebd9742587afbb2d5047f103530b2565fd37f4f1ad77e736e67cc4eae791bfaeba199c0164edcc801bc8b866ac340cdce868e8341d94dfe39f7ee5e466f", &(0x7f0000000300)="c75162e8b4d50433166f4ac7f3bfd59186d2f114d2e433ed7d2a93098c0b78a5da04bf4e18af87ffacdcd30f526a3e9275b45147a7f907d01ffeb2cb5a28b537ab379c7f7539255cd45b95e6f4fe66b0f310069a36a3619bdd744c6f0c8d37f251bedb754816b506c6d5086495a63dcc99c13b1039a5a4d028ca7f0d"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000140)={'#! ', '', [{0x20, '!-$*'}, {0x20, '/\x0f\xb1\rQ\x04\x86\x86\xa6c-\x99\xae\xfa\x06\x90\xa4?\x8f\x18e\xe9\"'}, {0x20, '\x11*!'}, {0x20, ')['}, {0x20, 'cgroup.controllers\x00'}, {0x20, '#'}]}, 0x3e) mmap(&(0x7f000092e000/0x2000)=nil, 0x2000, 0x200000a, 0x28011, r0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000009000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r10 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r11 = creat(&(0x7f0000000200)='./bus\x00', 0x84) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r10, 0x4) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', './file0', [{0x20, ':]'}, {0x20, 'hugetlb.1GB.usage_in_bytes\x00'}, {0x20, '[{/'}, {0x20, ')['}], 0xa, "9d4bcca8f0f7c45941eb88295ceeb5b2293828ddc731b591ae4e3c43780d59ef0c068e81e09fd5388d6eabde2652674f989ba54417f49ac419234c7a28c794f3847a7acae6de0911eea1f74b11e70c9d1330c9cc0058daf97a9cc37dff38fbbaca693f0eff177b6b3f66210e5edc6cb37671f47cd0ec125152811b781f2b161c299cc4be076710dac7930e6f51e46f862d6bc404952484a8a802dbea773a95b7442feb65e81724312587f3d27155a0bfc340a350507e6de96ee74663a9fbbcf928aee90bf096f79c459112e7664cc32d"}, 0x101) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000180)=ANY=[@ANYRESHEX=r11], 0x2b) 4m34.576066132s ago: executing program 3 (id=716): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_per_queue_op={0x4b, 0xe, [0xffffffff, 0xc, 0x9, 0x7fff, 0x9, 0xe, 0x27, 0x401, 0x9cc5, 0x0, 0x7, 0xf, 0xc, 0xa, 0xfffffffd, 0x1, 0x13, 0xff, 0x6, 0x5a3bc671, 0x1ff, 0x0, 0xfff, 0x5, 0x9, 0xffff, 0xfff, 0x6, 0xb7b9, 0x7, 0x7, 0x5, 0x824e, 0x6, 0xfffffff9, 0xfffffffd, 0x0, 0x9, 0x5, 0x0, 0x8, 0x2, 0x6, 0x8001, 0x8, 0x2, 0xb, 0x1, 0x3, 0xd259, 0x1, 0x7, 0x8000, 0x3ff, 0x97f, 0xb3c, 0x4, 0x5f4, 0x0, 0x80, 0x9, 0xe, 0x7, 0x1dbd, 0x0, 0xc70d, 0x6, 0x4, 0x2, 0x4, 0x9, 0x4, 0x7b, 0x7658, 0x0, 0x1, 0x10001, 0x10001, 0x4, 0xfffffff8, 0x3, 0x3d1800, 0x80, 0x4, 0xfff, 0xb, 0x4, 0xd8, 0x47d, 0x7, 0x8, 0x6, 0x2, 0x9, 0xffff, 0x2, 0x3, 0x5, 0x8, 0x3, 0x80000001, 0x81, 0x1, 0x7, 0x1, 0x8001, 0x9, 0x0, 0x80000001, 0x6, 0x2, 0x2, 0xffff, 0x33a6, 0x0, 0xb, 0x0, 0x3, 0x10001, 0xffff2b8a, 0x60, 0xa55, 0x2, 0xa, 0xeea5d92d, 0x3, 0xb, 0xeb3e], "f4b4b9c6c1c2b059fde51ea0604662505eeb0f3005ff30e773e1dd7e6b74ea38547d5f4b248855a3407f76df29cf194ed8b787eee340f79e9912734d64b5295d4eb02c839f360b867bc15f856fb69f9228c8cd768782e9a011b5243fdfe680ce94818846423fee90f82c7af22d48383920c22b877a6a830c3228011e552cfb811b226dc3bf8c60d0850e3421de018853c88b996f20843db1f445a8a56673f4d54dd235d6de1e0da685321ce8e66917115340718c62143c6dad7560bad37a61f976b1216a49ab5df49deca9cb3aaf1ab92d69"}}) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xa79, 0x0, 0x714}]}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bind$inet(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000180001000000000000000000020000000000000900000000060015000a0000000c001680080002007f00000133307dcb1a8294062a9af3e0e85d8c88a13253550419d0b7b919e697532590b6490ce05e32be6e8fa2ed09afb8670af0"], 0x30}}, 0x0) r5 = dup(r3) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000300000000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000340), 0x11000) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="addca88801200500180012800e0001"], 0x38}}, 0x440088c4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0) vmsplice(r8, &(0x7f0000000580)=[{&(0x7f0000000080)="d9", 0x1}], 0x1, 0x1) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) 4m34.317866566s ago: executing program 32 (id=716): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_per_queue_op={0x4b, 0xe, [0xffffffff, 0xc, 0x9, 0x7fff, 0x9, 0xe, 0x27, 0x401, 0x9cc5, 0x0, 0x7, 0xf, 0xc, 0xa, 0xfffffffd, 0x1, 0x13, 0xff, 0x6, 0x5a3bc671, 0x1ff, 0x0, 0xfff, 0x5, 0x9, 0xffff, 0xfff, 0x6, 0xb7b9, 0x7, 0x7, 0x5, 0x824e, 0x6, 0xfffffff9, 0xfffffffd, 0x0, 0x9, 0x5, 0x0, 0x8, 0x2, 0x6, 0x8001, 0x8, 0x2, 0xb, 0x1, 0x3, 0xd259, 0x1, 0x7, 0x8000, 0x3ff, 0x97f, 0xb3c, 0x4, 0x5f4, 0x0, 0x80, 0x9, 0xe, 0x7, 0x1dbd, 0x0, 0xc70d, 0x6, 0x4, 0x2, 0x4, 0x9, 0x4, 0x7b, 0x7658, 0x0, 0x1, 0x10001, 0x10001, 0x4, 0xfffffff8, 0x3, 0x3d1800, 0x80, 0x4, 0xfff, 0xb, 0x4, 0xd8, 0x47d, 0x7, 0x8, 0x6, 0x2, 0x9, 0xffff, 0x2, 0x3, 0x5, 0x8, 0x3, 0x80000001, 0x81, 0x1, 0x7, 0x1, 0x8001, 0x9, 0x0, 0x80000001, 0x6, 0x2, 0x2, 0xffff, 0x33a6, 0x0, 0xb, 0x0, 0x3, 0x10001, 0xffff2b8a, 0x60, 0xa55, 0x2, 0xa, 0xeea5d92d, 0x3, 0xb, 0xeb3e], "f4b4b9c6c1c2b059fde51ea0604662505eeb0f3005ff30e773e1dd7e6b74ea38547d5f4b248855a3407f76df29cf194ed8b787eee340f79e9912734d64b5295d4eb02c839f360b867bc15f856fb69f9228c8cd768782e9a011b5243fdfe680ce94818846423fee90f82c7af22d48383920c22b877a6a830c3228011e552cfb811b226dc3bf8c60d0850e3421de018853c88b996f20843db1f445a8a56673f4d54dd235d6de1e0da685321ce8e66917115340718c62143c6dad7560bad37a61f976b1216a49ab5df49deca9cb3aaf1ab92d69"}}) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xa79, 0x0, 0x714}]}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bind$inet(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000180001000000000000000000020000000000000900000000060015000a0000000c001680080002007f00000133307dcb1a8294062a9af3e0e85d8c88a13253550419d0b7b919e697532590b6490ce05e32be6e8fa2ed09afb8670af0"], 0x30}}, 0x0) r5 = dup(r3) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000300000000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000340), 0x11000) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="addca88801200500180012800e0001"], 0x38}}, 0x440088c4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0) vmsplice(r8, &(0x7f0000000580)=[{&(0x7f0000000080)="d9", 0x1}], 0x1, 0x1) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) 7.294037371s ago: executing program 5 (id=1773): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x600, 0x0, 0x1}, 0x18, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) clock_gettime(0x73d120d1a3af8f7f, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x22000096) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011b0000f300402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x10000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000680)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, r5, {0x7, 0x27, 0x2, 0x4a1dd8c1, 0xfffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008680)="265ed300624cee917954148609d0f2ac52561da46fe5c8ce8b3d649d8b59dfb0c633a2151990de893de399d507986121aa114fd87163065d2988807d3e0953e6b084d8b607280f9207193bb76a79bb6d4f638d070435bddb76667d5dee6329e71b2c9befbb22bbde0c1b6da63b845f2c28d2c5f4deb07b4ae015fc576702112f75a755e76b6dc450719f63cd1939961e4c895f9054760c61f933bf74d185520f9aebaf3ab397a2089640ec41ab5cfe6c828b53c4cc544f9812034c719e712532763eff6e69ad7cc4d2f29f97ccce18f298ce417251430929d422e21cac05093609d97896d0beb7d4cce9f1975f01e7dd29ea061a868bb6607b7cf88a2e33dd5c5db31cbead98e06c2c7add9012b0483fe662532c81ab1a1ca8f20f1cd9020e06c2bdade3f311d08b47503b5b63b279a9be019006e6929670f53d5688c194e9f046d2322d71bc26245e698cd44d655c59b2e0ff43771a386abc38cd6e493e0a475ef525fa78671fd9954e7df71a3b7c7ed90379dffa4fd76f0367eca11c1d8de813979951eccc8c93b4f9fdb4785c0a9d207e65742bdd358e9dfbf29203c36b91fdd78db55b53ad1e713e32fc1f47bf3390f3db8dfbd514b4b31095c818e18b63ebad5cc3b406557f3a9380c5025ab11c64522b1752b2296bb00b7750ab82704ba197f26ab76e35da02ae87d25669d54d212aa680b579773c889902782d1c8067b16ff957bfa70cd8af4c366c1629e871cfb033d46c0d308c3ff5072fd8e23ee02986a128051b8e6dbaa2bc46bdc8772d923f2906eef68015bdb4cd66a2525269a91cbd7336c930c08190a8606d762c768d164d05eea38d63e99e1fab83ce2683b885e1619065acb1bed0bfd63e3cea5c9d7c9994df4036aa17f9eb0850f9eb42b17b19926fd9d814529c3cf4397e3f38f9626f0bb4f229b51c35773cbecc42ba22f8346c9c3a6f3ca7d8b25d0bbf30baf48bde92ea192e2484ef9b2160492edb5f2ce296b0b6b420d020b7d14d77f7b436b1a23b733051369536eae7c7148927c3ba3a968516039b0b14d9918a41a1bdd5002847e1c3d02f0dc2235857a9797038d164591757820e7d74dbadd42b8903f20434c6ac0f401fdbfcbed5dd3c5b5fb0ce1f9c81e8d1037fde8dd3fef1d5d7af6af8f36c0f4462909dbf694cc6fe80070bd5fac5a5ca4dffae4b2c67892f7c53af3644ffec29ab3d791bd7934ad38929a9d5fb9ecf10b9dec62e315ccb0e0de60bb1620daa8154a4cdec98d94d42ac1a4b5f8da6afcb7dfb53544fbbcaa3aa444182ff25064ace51a825fe89236e850a2c90e1c7db17871ea809c4a11a26f49b213cab87d4a42b747546fb9b15068faf1a8556f909f2c47202e7b65cddc708ded90bdde68725b787bdc2d4eeda60204bd0028f07ffc3052f93eb6343d1b2a9a5292e6574baa4a096fda6dd54f6d39e9462b6839b8ee2426e3fbf42a016dc0963145e602f2b0c351f123df48f608f74b04fc7e9cd018e7ab25bc1c12f8f58c0b2dce5714faa54820ef72f38566e3d776ea2d5b061a2e94710176f15d2221420abad8b8b733de253e602277848e7f1e0eb4d07f5eb0cc4d9f874e632007cbca23a5d7e4109cf5c4fafe5f607149bac37938734b77d9b183cf76014aa61507bd4eb44524e8326c58932c8b9f6a10e334cc602b5b8c956c7cb5ffa099274b599fc9c58327f85553e00263e548c93c89edf7a7c83cc10348662fc344c85378572a40b49ae65972fb40abd5e0a38af48207983f86c7bb6bf9b7853c4b1fb522d135a83bbdbb78130b4df3aa7cfa930868cd5a2d995ca9fe4f64c79485ab19d85b0c82a72f4a09ccab267320a61208ccef13c3546ab0f16e34cdc56d6e48a6d9c14c626528a3b191e3723b19d4388d5b9b61c7aec726b8752455f96e888ba7af82c127796e9b67432d1f60a3470c7bf4b924cf10f06a3e3f64c60c7c2b0fba4d1ebe4e52014b4052c2ba0d5b649c46e5cdc6c7159faff2adad2db2d3db9f4f9e9735ba28b7aa1c6c2fea9dab6c9617160d182dfc13e18f44e73c4377df42080d08a87fcfd46b4a4f30205457ad19ddd473fc3a67153d04e960f1dc7556fb158a1d584eb2bde917792892a30e9cd25d37a318cf06bd6541463adaf5d12adc50252f364ba05f89182018ded2179c23a1fc0b31d87139da39298b8d387446c70c4577a27f6df841d9f43106bc1bf44f5c7a41460e2afc9eea98f8e256919c0befd53d7d015412391963c9ad39a19aad265cdbd609628e1913adc2467b69c00865a88635c46a851e7252cf3dc5c3cc5dcb04e97c0742d1a844556744036c97710dd9b55f661506f36cfef2c6b7305b63f5c33469b33ad09e1b593a7ddfc97777954c71c8e4857ca49aa7e5de0d25d760f633660e1fd783cdc43b00a0ec149cc9c8385807c2f6b4cb255d6a15ac75ef63d0871b176d503f332c069ccfa7a2bacd11999ea792024b35c9faae5bf02bd5c844d04d9680c1fe35c2d90ce808b45932e754e4e1dd142ba5a7bd9ecdf7717094ed4359eba666fbdc1e849ccede72b0b37f0b8bc4f76b99222f8d199de11dbd0ff396236f4a37aab955126a60c9f0d457c7a394920aa9014611e5d994c8373516f061dcc5ac881bdda5132b5ee984b15fd007828401c72df63c2efbc5f0e8545310ce65d0635dc73f0cb1c796c24b7ee62616116c13369ceb74ff8bda64a98e903dfcfd88b3c0c5f86191bcc8342578f23dc70fa6ceebde822ffedb7587a3f204d330be4977bbbc2529cf0ddf4c85b17f1088f48d878e72fb00e15a6144231108be816d2718c360e2fa8a236691c775a9a0ef3559696e9b8f85eec0aa2b1c4f01a2df6065bd31b23dd37718613fcbbb1566dc0607bf487c1a91f2b39a83755a6048e46d02ede0f5aaea8ee9e245d6c37891f5ebc9bb7ad2462b4ea4f1167b8c8e97e2f7b62c1c98ae0b808ee6033818d28a00ee72120820b2227da50d7f66d3318f6acc6398c81e529c5cb0df75e303954c2fa828760c1133fdbdf1fd7675b8634bdb496b054b91672fc7ac344a37bf60988870d54e5baf91334db883b2c69acb50676c2f871fd577747dd1d26c00a56e757b6a0edcd609ef5c3b3ef669ced2af5f19ad19194d04f23ff23546df47bc67ad596672a40cca2e87f8fcc3a318e37c73f9f50bd06926c74078356ddddba42ee273e0c33c2fc6cdd1fd50daa6ed3b7b6ce558f89449fca6d8b05c90639283d44e14a854eb29d65ce5b9552597072cb148ccea15ef430630559293afaf204f22a890fc3009a2bc1b0844a49668354a940fbd0d5919faadfe5cb80e4c93d138ae28269a99c877426298b9ec7f01e9005da2d7977f34103de38b2f65bdc1c899ba96745ca977c46db6003b1ab840e677f0d8960b4e9f71e82fb89a8cc0702739276ec7a040c69e6dc0e439658d420737a2f6cbe7cb1ce904f4a39dbe8284971e527ef50976c89855f75d5e129a09a117a5c042411696f8a3bf02879a287b2b1ea2a6e1adaed0374341113bb8363f33aacd361339c9c06b4bd6e04f8fbf1f120f1992856608426d44abb6cc429a075c7bd22bdffc9493f218286f8eb585001fdf79327c8c17d462cc2ca5b435d444659767150c6e1000a74f001be398a1bb48863d3a4d4a71a4623e1721b003d7d2c038fdb405b814f37a95a6a53bbb365dddeefb83451676c7b57a23dd1d523958e2e2eb8d889c47cb7aa515e9b11b2c3accfe6739a8ef56b7a02adfd63ec9f9232c38e2aef3773a9a7d6f4844ea1d609f146f19e6c46fb6b961b8037e5d9ba34c0ca5c10a668ddc5d6f4c7951732f68c56ad9c1b3e53e09d33d9b377258ab2de957c8adcd4b68923ed6eaf2441e2d888d1d4653c5686ab712a82ca16cf475009e238e5a8df04ca2fa719e6308bd60026deea44355a6e878157ffc7f14a8d34275a9ed5f810ea4ed1827e4c91998aebe9aacbae14d95eed96a9de17463ae852f53d2bf3e92df959564e9550c1eeb0b052c00cd44c07b7f021cdad5c70908a74bca9ec4fa372f491aeadb297e8f571de1b376ef1b7194d8e434ba3867940606521399595be0ec4daab0b45c42e439adc5cbecc7310025ed8761a1d78adf3ee6b223577e473423cece99cde0807269de6929624ed1739b2380ed4688779ce9808595e9b87ed6f42d89b1676014cb8c9a3f7484aacdf794f056439fd1e5233de23141d5b87ca95b54721a01212666e8067cf683025f1219f4d0569c8cfb2d6ed67e7f051e2ef9d0b70a390ac7d53bf9c4e537c74afd223e311341583282ac6e4ab209a591ab0f4d7205512a74a01cd33b57d993fc5c548a757d757e1f32272c22b86fb2428b338eac75c21e4ce3fbfdc6f04a62856610308e65dca82a7637d7113a48c6ce0357fa454f6d58a1b61698c7b65dc9b8678f9d279b883f76e04ad1f1154e2f490afb7e397ce65ce297f6599b0671f3129bc87cf4221d8ce101f71a1df23b6343dc3d6e35ee2eb0a1e37e67e091fab994b8948e956320d7e512308641a129526ff2e73ba026fb72fd3da3482fde5374d54bc3ed6ae53f2b9b4d222db5f3126760285683ecbbd0f8b5bb964e5a1cfe404ce21588a21c2244e0f76520e139992f65a15299548f4dc5e4d1e54acf7592ee1f04e36987606bf10e4632c79d00e1ed985553b00a8e828dd193f5cbd7101cd36745804d474532fc51e708c7f124bf9231b9a7bd1ca4446060535054b4bfd5a61607f3ae45cf1deebfb9d8710e5523c8cd03565cd378e77b1b3323a7d97f28fd1a13aa40626abf69d7b66ee9db3d604b293966347a4fb36d089078f9808bc209109690ea47941ad7c146367b78eee93131a57b5e12690b7288ffecf22f39f308a80457ac6052b8f477bafc15a3ab30cfa3cbd7dda9803e5a5664694e77f528087de197c02fd4d133ea9133b9aa4377bcc0b62801982b999b6e7f76dff371dfd998704e340b4e5da88384fa8cf08d747c977105e4574bda02c56361338a0a9bd800e94c861a31d5d64d71cb65c0655f5b5cf5f900e348d7cc05d9c2dcf711859cbb8ffa54065e2e5462f4c1d80d28e5d5400090d4bf61565422b8df0f34f7a7c1e153d39c9d7340d15b8db226d323b4e3c50fd8aaa87ec9e5c3fbb3ad66462c6ec5ff31877024d119fdb7a16e69d324ca9819512c45c3852409f4899a41a4d16ca77dc3dba1ffbdc2af2fccaba1f04e048444154d5019a267bbcd440d7bb3516e9741e5f9c3ef1135e8c0d70e3c7800c10c000e9cfbddbb5aba9e43b3dc0164f92733590f6921bfb53aa1466a53b6146113795fc13d1621b3cbe0eadec02c469a4899232c23a5a88a9d659984c22ee523b5c5de84223a0f0f9bf1fcdb1efb4709252c0fab477823bf2505f9a2e4a36d0bdae824ecad15a4c313f0c9eb4423ea249710e353e61264630927f778c01978f5b50213d71fd746e40009432bf50b7932b7659942f0d1b6375b87d9b038ce271d7333ed282beb3925a330d881ac7611d3e8b869601b146fd82c06b340ae4823c4c429af4c15f2a2a2bdf383788e86b68c001866a86188cfd71b02bc8abef13703264f3ad08ff6602e15ff84715b7796541c87e26b0c6e086211943e52629f8c1e71fdaec972ab5a2c690c78b08d65651ae4b64070f7bb37931119881ef14c4c8e228d67d34f1c9eb855b39ad6e615bf24f7b453a76547edf2fa025c53bda95d783fb3f735852f28318a8a67c8ceb5279d380d724ee6eb2e76ba8807a0865fcafac50d09a92b85d27a238e4461a80cbbeaed62a844c17e498f6457aa642ebbd0aaeabf127b8f8fbdc2e28ff7fafaafe3016603461f256d7fca690a8643b9697800b3cd59e09ecae48baabccb63cad4a627f6bfba0759f1c186977e9698e6fbc16ec9d1c95ca8e2e075a1eed3ba6223e4df44be7da59a444715a78fdb90a1645c069ca0fd1609b7dce29ffa11f17266c32856f9ebc853c0c7cbbbd82667a5106b5b63f5328ae9d653dc5dd53194988f0e421db3851eee53c557e40a7ad293a22ffd3445d296347cef4187aab3c9c3c2a8e40be66919c30cef3de8125f3cc7342a43791cf1b3b117af99b04e0fd8170f17f4ba25bdcb24965501025188a430df86239d369a6e2c9245e914fe4be3a1eb48e22e2e1c72caeb4b0d1b69e8a817cc7ddf644d33e56ae32215604f267a80754619440ddb3621280a4b388c14ca19dfd398d744977849247d0bbc55d5a54ef062ad3cb3689168b28a0981946fa01737e081101b9c571d0ec4e5775159daccc110588fbd35bf6f0d55f99da967a3d3db1999e158958d7ce128571efaabc09c1aa7137c35f3edf7cfff386a79ba5acfa974366c442207a39ce67afc8469c2ddc6f45413dd654d9f59ae7fd31115dfeccc43c27bbcffab119106735b7782f9694a3e30159aee341f04540a54443562cafad5cf3336c6e900343b053d7c93bab45d8846cb5b880e11b979c13dfea06267932d89e258ef30768ec2ce1d7b020609a5ea6ad9eda78219542567029d1d4d2ffe797b7f95f16b8f599390b0b630decdc6e17593b7e4992d48e62c27cca2e423eded85cd4b436065496984d59044d38f317d0ba649837e5377ab3793c3f66c0509eb37ba365c94273b3cad97c5f607bcd312cdf3c8605dd5569e293d21c588969d7bfb17a228b53f2cd0387995945253c6ec8fad3777cafafcbb9151a54e653a142b5ad0c62682b8ec4b99f525dd853f75c17ae6264b7bf975138de9932d40be9f35ce25dd2a1e307fcf506eb6db8803c19b9880f96299ef58a6bdf32708346db540dae112b0f7ebfbe6f3f46635b7d98e232cc91eff29c7fed6dd53d448db2fb8fc4c0dd661d47585c7966f9338f165e53b3d7777dd844be6a6c8885d95b839a32ea0bc83ec0ef8a5bd11b666d11fd8e27561d8afc4686e978ba31ff2f812f81a6a82956b95a0cce2966a37a4b9e33bd297ab8b1667f6ca5a6be65e4485a305651a4230b7a010a960b035dfb7a8474dec1965c6a9177f62484817807e0dc43ab2770b27adcb40f76c0e78639c55fdecb6c008f2e859ed496818b48e5fbe32376fb3c434afc0ff780867e7374a8d659cc1580e49678f4542e5cd3e54d5f4bd1ff6d186827d588ace5a8adf437dea11def7b57b6b8c992b86695d09c65aaf532d6b8cf12686df8b07bfb5a8aef7944f04c8bd00d500b8b7eb24516dbec0f5514dc48f70eb26a2b78042fb6b4726a20fcf73ccc9a14b75bb82e558e8bc4f7ff5453850f83d12896e9abf322e5b81b6efe679c8c98ee092e06302f9f1472931dbe5a815ac38b1bff79363c4f846caa755ab3ed5b60a938d5f1a9e10950aaa0c5d10c5c4f09abb8ce6b98867e6f8644e3b9d603f07f9c2d1044600635d432ce796b0b96baf572238711302f8fe486f3bd4b5a0463eefb0cb04271393cb1b47b033db62840b4c535da356de3db90961deefbf43060d57b303489aaf9c3bed935f8750d47b8e6aed8eba71f08d93246c92c7cfddea99f6e052bf18e787aca4cc04779dda1f67a420cbb5fbcee2f2ae28be664fad18b478e171dc3699116ae71421b86a5fa9732767c994f38519874b33f07b12b8baa5bc672017cb1e2c8e8897e541358da9a9e3bf8bf57ad3541fb434534190ddb95a5ad701e20548b269268fef7c20c15adb8a86dc8ed756f760370ef2bfff1261349b535b77f67a4118dc8f95c70e977ae39c7c77f2d4e2248028439b72325c033c68684fc8dd6050f0449e2c87debc00fb8bd5d1d9b9f31219b4243cb089362b345f2b9aa7089eb618e1407223ef1022dbaa856197f6cd8dcb7fc53afc16731e0f21b45a17fdc2c49bfd9f14e454c98536c507c3aca95ad57be395ea9d737a4a3237825cf102ca080e013230cd7a46e91237b2214a2b175ffb390ac9f12e5dd3124ffe1e152e148371425c6ae5c603715d5439e0f9e49e8048b56489ce79c26df2dab6ad0c8ac0b37e5d4fe10061f44f3d2314e1ee6245ed600c62a9c448faf905267cdb125ed7dd2a7a539770bd1ddeefd13a521991cae16160cadef434edc23fec333ec7b328c4a6213c5040848e835c6b3e0aebcae1d5884f7e8f654adb512c2f0227fae83ddae0dfa848e0ba9344404ef1d6da880f8eac71fb7e02f197859fdc1ec634dca3f46932e5f022689ed253e60f232e1acd96fce398961d62c4d63d7f37d48c26175298658c224bc1db73b8baaeab139065a9bd004bcaa24493c17f09961c09bd0cb828a8cb3cab56df2991646ff370040bc8507d3d16e66dc075c8d302c6586dbee27b32f93ea563a2692f65ada174e35bcd8cd3214c1a38cc00c90067828b9980da7dec04fbeaa2e550c8d069712efd0853e7daf007b0de5c9e361d75c40ad5f9f2923c10ea479e5852ad35f232d6d141ca7b4328c9d72dc5c247d1431688b2a325d88582733953ee50f997a5d8324cdcb01fda11a773093f344fb38b55c5f9e7706e1024cfb4f2e47544ebbaf792de3c4d8f1522e9d9ce73fdaf1740d3dc134a78b53c6167aec45c730016b8ad9d9bc4042b6835a5ff34c9d36da7418719a86be6637c896fa4a4eda862a9e73ab97e5a977aebf0fe64a7d507dc210a677873e155fe4b2cc3a96e558f4d54db6fc5fcdf166c4cd58bb5d1721378ccff170c0eba14b990ef610606909c205e34aabd15eb7a62406df5451871b18ae3cfb5af37b7f7bb2be80590d3be02c5d0c4143be66efcbe13c6927f54ed27884b3d6a73e90516552a0bbd81f7c76ed5f84ecfef2225e52b9cf6021895716aa29b540750eb64b31cd7be1e9fdaaf132681b23cfb2742fbeb4d1f40fd0bb1d13ba044b252f2f04b0d5fcb121977486c5754a569b81be7577cc0c9e918affbf9abc1b6dd567aab66b7e2aca396e79d53ced9695a65a704bbd9700b55ac8c968c5f43557060c6507a3557c8762a7dc8263eaba22d51fb7df435e20beeaa700609d774d1e212e7493b672324e1a907fc1546cdf7d4ff88029dd7e9c92fc530e3f55b6c1b103c69f14859524d07e454a3c5f987e01d21d9a5a6f842370cc3dadcde1b5822b0d0c47883dfee62b9b7209c3a7c399ed34604e164f806e68a5a24a53d0c5beccdc1389e87a5894061f95e7e8e8bf84ead6e7fb155938230f22b426d9041e8bea72dae14911824db9b65bb0ea0d0404cc8fabcb8f1863e13c8475beb68138e043dd67bf1b0d7e038f9f3d25c8ab1a52173af6b46d8260d677bf066058e89dd18b03fa20e79938dab01876102992f9df49dbe983526b9e0bc83c15cb9d52511eff20d18dcdd316bf334b98aed9024051b87bd3d767054470f4b7f59a207e9b9f17827497bec146aa1b0d18ef54ae5927c64b05f34c8508a0cfea02cf59b3c97a1d3e83a00b7ca495167f411b3f41c1409a8ac007e1cb08ef83c4cbe38117d4b1ef9b58dc0092371b1dbb1a1834f780282dc2f3b6bf36fd0dcc7619c28785b76910757376adfb014ca9ff8bfa3e291e7cba2caa05efad48b1506337b61f74b7b0f4abc18846af682f34708bbee9dee76837bcd192876d1861a20b3e77c9984aff5ebf0a2a4741d6e43b4ac056ea138e79230144578bfd4ae82b84ed109e4d5ff0f955ca481ac0231cae963b7d4db76d89d07e265973a16899fb3a6f8dba53473954589134b520e680f4c5e707fd056e75edb194004b81a40bce0407b6c294078b77e8abd8873c01f6918b2c7c6095c9f23b9841e90e8acde53ba60cd78911cac6fc2ef6bb5fcbb0d3da3e63d70b47495f2177afce5da37c59efde49aae133761847a6f0c8aa374790522ba04d466bd1f7860f53371f5eb2f506c5bc7bb6ab449e4a5c37866c31684b285cf5da17f36434b809f69c542c989449fd0eca50f5eacf8080cbbe8b84d1183095ae7416b8f2b98311451cf7cad2d8fb721e589f9e611376430359cf855444fd1415011e8c313834bf0e217ac7b03f8add941427b0d15b56378b2cd1e3925008c16cd5f95dd149c7e050e0a153e4333e63bd14816b4357fbaa5f706af6ee225057eb599bbe5714c9ff23204d1902230569839d8836e6b2525570b00eca8534aa0c29cf62dce61ec66d9c195be81279b698ec8565fd6754f636b9288247657efdb2b6356a82f014a1e6b24926fdd67810ef0a01295c664980f2057ca17362b0a5888c23ac21842f931a7d57cdeea73c4848c6c1cce20be979faa611f86509ce031fb4102a0fd30bea4f4f840c75d238362a2c4f8de16e81733ca90119f8c1ae148b184d0b113685594088ad8a947455dcfb782f8beb69e255dbed46ae2ee6f094168a52501fc68ed669fac390cd9320ba16d69c86d6f642aea836bb1d7c14593f15d8d33d452d8c87003d7ada1995e2b43f788b4ab00ec6f58869968f098218a3ca21a6f369d47a14cd3de7de8357902e8ecfb5f2e6beb5d3d32a6a6224fe3d6dc5c06eb117af0ab396acfcae58b2b1b9981cc71cc1cde07491b6b6d97e04c10ff216393dd28737d31c8f2cc9ebe161b96d407088b2bc456c331b676a0d7dca3df7f7080697d154fa14f351fd467e30b4ac3f4eb7b4adfb173ff20594cfe539c775c4275795d54782bae4b59cc64a45740ff73d21f5d6cf39e10bae4fbc48ac7799023796d7408ff9220a07a49552b18c5e35f98082297d2b4a0932e4d224c6807d49bf9b5de2eff1a8130da56124ecb5509241fe95be11eb0df066f5f819bc7db0f1ee90ea0aaf4ca4458ae7b5105d574de028c82714ad0d53bfc8ffab31c57762b38e433d6991d83ba5616162e27e8ac122c145547c4abe18260c6d32c755a44390ed41241ef375e1f5a4311263881a02dae71f837206413fc37ddf40a9bb72256d1625ee0b94c1c5715809bdb24224cd0698a5802a83e2328dfa22b80e31b9a5c7dc2fe0c68545905368806c308334c194803eed4a24a96bc5021b837a293dde7ba22b9ed27369b3584deda6489bd1b3fa2925beeacb7d3be367fd014547f82b4561c0120978b6ec2b32ac2634589b819a2c94fd20c081fe9eac7b0745f73a1981e21b05b1bd97a9a1d7218c0e6d0e473e15a1a7465cea98ba0c72af2f270b6a61bc51d1a0a9603b91fcdcc7314fe7aa007ecffe6c7eebf5a65e82a96325e86f9aec39feac6eee9501495c74000ec1f0923e79ad1fbf6dc581539047537794151473e00be353b3b8dbb6da0053826c7bdf16c43867cc9cab9d1220466ca29ef2d6172c4c0ff9067eba9d9775225efaeab1b8c634b4001d2a5c01628bd5550c4573fa017afa3f501f1a6b7d7a483dc0885ab9c2ee959a596ffbb68c7ea99e48f4304697edf7fdba5567735ace3433c15aa59863f87e4605206a31ccf268588de7ed37fcacf6bde80c68ad53de63feb4399cce137c5776abd15395402af07250938aa1c466511bd5754f9cf2f938faa37a683996c801c8fc8aae36a706c5d6e2d36e96ab77eec817ce4d56d2bcf5a43702a883b127a1da8b6ceae1b82573a9e9e9e297560f8d65a1f5fd4bf3d45af0841e691b6e637bd8b9f7c8e51b813b818b0baf2d9c5c9d116781d327b4b43309c7265612089f1dce60a41fd0aff4bcd1335d696f01cee7b371e13584c731a3c3ef7e1b9f3f41f91c4dc647b948c93a99c1ae79f5f530c68c3cc28bbd00", 0x2000, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008600)={0x78, 0x0, 0x4, {0x0, 0x0, 0x0, {0x6, 0xfbffffffffffa631, 0x3, 0x5, 0xfffffffffffffffe, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa000, 0xd3bbb4a7, r6, 0x0, 0x9, 0x20006}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000180)='./file0\x00', r6, r7) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="6cd81fe33457a1c95799ab8acfe7cbd8fedff838539504736563756d69"], 0x0, 0x40) landlock_restrict_self(r0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') 5.9109286s ago: executing program 5 (id=1779): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0) (async) syz_usb_connect$uac1(0x2, 0xe0, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x8, 0x80, 0xb4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xee, 0x5}, [@feature_unit={0x9, 0x24, 0x6, 0x1, 0x4, 0x1, [0x4], 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x303, 0x2, 0x1, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x4, 0x1, [0x2], 0x81}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0xc7, "01"}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x65, "4215ad40"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xa, 0xa, 0x6, "409828"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0xfe, 0xf9, "fbab65af"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x1, 0x2}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x6, 0x65, "e463"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0x0, 0x81, "eec801b14f"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x1, 0x4, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x4, 0x6, {0x7, 0x25, 0x1, 0x0, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x4, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0xb, 0x1, {0x7, 0x25, 0x1, 0x80, 0x5, 0x9}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0xbcd0b2a3e8062fb6, 0x9, 0x3, 0x5, 0x20}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x413}}, {0x32, &(0x7f0000000280)=@string={0x32, 0x3, "daaf84e7787543516f5cb997f341c367d02efc2456156489c4439af2c872f7640775778f3fb135475bcf06e4c72072d7"}}]}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0xfc}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_disconnect(r1) write$binfmt_misc(r2, 0x0, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000140), 0x3, 0x121003) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r3, 0x5f1f, 0xe665, 0x31, &(0x7f0000000000)={[0x4]}, 0x8) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x40}}, 0x40080c0) 4.710782041s ago: executing program 4 (id=1785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x37, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)='l', 0x1}], 0x1}, 0x4001) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x56) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000340)=0x1) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="d8", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xb0, 0x9, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'erspan0\x00'}}]}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x24008000) 4.414812605s ago: executing program 4 (id=1786): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = dup(r1) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x98}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x80, 0x400002) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f00000000c0)={0x5, "1f70c559b1d3c859be576e711b0a1f3e9fe0fa60f86e9cee0d2a9845d1f637defdd369d8395d1a3bb0c6e06c40ed97fe15fb19f7024ce15e20b7a630bb508fce", {0xffffffffffffffff, 0x1ff}}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 4.354306281s ago: executing program 4 (id=1787): r0 = fsmount(0xffffffffffffffff, 0x1, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000009c000040"]) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x0, 0x8}) prctl$PR_SET_PDEATHSIG(0x1, 0x1c) 4.196404637s ago: executing program 4 (id=1788): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX], 0x0) 4.094762124s ago: executing program 0 (id=1789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8947, &(0x7f0000000000)={'bond0\x00', 0x2}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x1244, &(0x7f00000004c0)={0x0, 0xd5a5, 0x1, 0x1, 0x147}, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x8, 0x0, 0x0, 0xdfffffffffffffff, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r9, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r11, @ANYBLOB="2100000000000000280012800b000100697036746e6c00001800028014000300ff0200d869"], 0x48}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x40088d4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r8, &(0x7f0000000000)="1925f8", &(0x7f0000000100)=""/188}, 0x20) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x40000105, 0x0, 0x0, 0xfffffd30}) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r13 = dup(r12) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000007010040"]) 3.763989911s ago: executing program 2 (id=1790): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000001000000050000000000000000000000800000000000000000000000000000000000000000000000010001000000000004010500ac1414aa000000000000000000000000000000003c00000000000000fc0200000000000000000000000000004000000000000000000000000000000000000000ffffffff000000000000000000000000000000003c00000000000000fe8000000000000000000000000000fd00000000000000000008000000000000000000007f000001000000000000000300000000000000002b000000000000000000000000000000000000000301000000000000000000000000000020010000000000000000000000000000000000003300000000000000fc0100000000000100000000000000000000000001008000010000000a"], 0x1bc}}, 0x0) 3.53070669s ago: executing program 2 (id=1791): socket$unix(0x1, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) fsopen(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = mq_open(&(0x7f0000000200)='ech0\x008\x90\x14!i>\xfa\x85i\xa5\x10c\xed\xf6\xfa{E[\xad\xf5\xd6\xc3\xda\xe7\xcd\xd2\xd9E\x80\xb0\x16\x9aE\x9dv\xfd-\x06\xed\x00\xb3\xa0\x10T\xb6\x11\x97\xbb \xb2[\xfa', 0x42, 0x24, 0x0) mq_notify(r2, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000000ec0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x401, @mcast1, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000002900000008ddffffff00000000000000584341368123f13b032ffb555c75d21ab14efb70d6b69f37d8c2f08cdbcf99544fc55d4eea457dbbbb61c0d33404fe9baedc2581d571a9ec45776c50544aec285e5f78c8be5c283b9b6da978dd332d6450807f162fe3"], 0x18}}], 0x1, 0x0) mq_notify(r2, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0xbab, &(0x7f0000000000)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x8, &(0x7f00000019c0)) io_destroy(r6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r7}) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, 0x0) socket$inet6_sctp(0xa, 0xfffffffffffffffe, 0x84) 2.731383773s ago: executing program 5 (id=1794): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 2.47111282s ago: executing program 5 (id=1795): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) (async) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) unshare(0x60480) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x2c8ad000) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c90000cf47d16331aef6ee13ff7f266e13da7be839b35e9ae1a333f2d8fd8e1983903166f4d8f3d5e043b8eb3a4dd0a04b39df97c82009b793cd734558a268aac6cea0ca6aa40899810bc164d8ad6b2ce23bf4b88d9b72991218c6c68e9a992582d217f639c8ad76405b511163edb9ca95e8123830003ab82fc86a517ac2aff77866914ebb9aca4a6e530d80f19ee31eeb1e5b8139b72264f8fceb54ee9980e771c5f11155b69e12e65e6a3699d1b80648dd949081f1a612b7b5950f41554c9b832f7cf9efa4987bd88887917199318d28808204e7638ca5932c066d2a662e600ac0a8f27b86c066f2bceabd1b3af66c12fefa311c5afe0821a14432925187a05476e0a972e85f26a24832c357d70d354ade966e6963234e4956658ac9ece3780485fcb3decb69a029ffbeda1c7b27bb020f4137624286d8a2d22221028b3efd3433e7fd3ba291446947a274a748f45bb347fa49e295cfa305f5dd46b662afde61cfee33ea823d23f46a662146886c6e3c30e660d765f46dcc14914b3e342e44436410fedeb6594f37ac94cd336dea463e0541daadbe70b5b925741db16240afc85f391539569ac14e5dccb9ca5790c33f8a6cdd7abc1cb762972634968ecb9f1dff8b6b6cd6f5f56db31c24ac5b2b1bed2efea1f4e67f686a8abfa41f297a165b9fcb4800230ed07af34727fe6c2cc6daf796cc38e8f03ee4fb786a92fabfbded442086d657dec598edb21ba428d4bb28ac974c38218bcf08ad3b4f6698ae05855769dbe5693eac83a223b76a5f452195795d3d485e5c0a18caf2315c3a21acb4bb661082b1c4fccfff8f0c52c353dedd3b9e575b800cfec557e43527228abf820e16411b45c77e99f308dcc5dcd1c3b8ddb828e6481c1fc6275c3e1ed4a1f0fe6d97db39cb3ad5b08400cc990ed5797e23fcd81ee76eed1caaf2ec709c18b014dfcfac7eb658f1c07a894dca1d8e23ebbc18c7b0acefacd915235a54637d13965681a6a527325d13b4a88a21505860873038bc6ca68e25bed80496e65b53a4817e7dba3cbe31eebb770ab04202486634b7210500238707cd664735c07e539e8ccb09ec82d7fad69c4f31113b4a01089a81d4a1787d69957a2dfcf371f0c357eba5a587f0d09d64588f3fade99726d786085b513e720fd1d889104e1d98bf4fe23d6bd8c408c44fc702880e6c53a733aaafec836a80b9e69d1432225dda63a755bde5103fbba7af46f81b3b0c3457d49e187c7fa53e9410d4ff7dd1c9a954d549b49197f350e8451e850279ba4690a4ff3fa4f91ebfa4dda7d2a60257d70c09ad6520387baf2cd734bf1f993565f7ccf80f29b1414e595de79ec03faf7afbeff3daf0034aeecfe41640366ae3c1d1b9437cb7580b9a94fe71a5ffe7be4f959cc5972e1672c5f5c5d252a63804d1a292aac2582b78ac73ea143095bc1283b210c66ecc5b5b9be4d6649920118d51429328f8a983a89f8f5d6ec383c89f07e91e0726ed40776d72d7499652a84f9d0bb086e9479a6d703907ee17345ed763ae817751515c744d428ac51fb10eba495f9a477809a4c1b447a94a3f6d1a092b109478ca36c3da494552d34f30d74a32958c53ec091e32ca8aaf5c814881d4bb3add2b07f362e9e4ea17b3f8b6e7310fcbea4ea6f2d9f5505b011011b75eb4dbf2455f665027abe2bb73dd37dff9c6aab6e9454bbd7bb887aef12f19f446bcbf257ada0e5144f708ccf350f07b861b813eb4cdab02d74b660d960c737f553f84b2d027da58f02345704583717199f693c913bfc2704cfde1b31270c43f17d51c82b672796fd6e1d09e34659d7e5fd9a1a69dcdde367c074b47beeb88f374740a64d9e9a99f4fabdbfca311174da518f868704e3fe259e6069330b04d2d3804a3428d2e04a483599f5ff47ff8c877601fcae33999575180fb540ff00c55728d0ee8eb6550658c7cbc8be4f87b50a9650a33aa164c6bae4044dfc080cf43a1c80e8a8132f973faefcf2ee23f9c2f3119fa93c0e5875832d4f8b6c2a1c347d480f15ead27ba7fb6e2ba9f2204982023b15b0f9df44ce9bba765c9598810593dd32a520ba72a5bfc375f36f4ea4a55017b1494c392568ef6828c18a1f2cec1442f705687695e42f62734ac2c1b0fed399ccf29b20fccd476afc72217182a73c970029c7679dffaebfc2ab9e8d18f5e757ccde87ac69b2bb0243b2e86d225dd2edad4919977bde1806bd6305eff22f2d63646c3a856a002aaea40d96e4811fe0cf5ad942e087c55551fdccc65835686320aa635ec50872f1c30cd8a732515b4dbfa132f905205f4b2ec64d1b9a9101ee2c3d0a110e40fd40d2c0b19f9a77b43f0b14e283ad1038de31cb21c2857d278933fd4bf106a7a93e16b28d71dfa73fa0695c77c0b1236e4cc7f17837be252d1011edf8ba626315e416b2963e96172b3294ec1f087"], 0x1004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000c00)={0x0, 0x3, 0xfffffffffffffffc, 0x9, 0x0, 0xf0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="970102ff60000064620a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x1d, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x40045b0a, &(0x7f0000000700)) 2.429111084s ago: executing program 2 (id=1796): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0xed, [{{0x9, 0x4, 0x0, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$cdc_ecm(0x4, 0x75, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x8, 0xa0, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, '-v_?'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x2, 0x53, 0xb}, [@ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x81, 0x5, 0x83}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x5, 0xd5}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x3, 0xec, 0x31, 0xff, 0x3}, 0x20, &(0x7f0000000180)={0x5, 0xf, 0x20, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0xc, 0x4, 0x80, 0x2, 0x4}, @ssp_cap={0x10, 0x10, 0xa, 0x10, 0x1, 0x9, 0xf00f, 0x572, [0xff00c0]}]}, 0x9, [{0x9b, &(0x7f00000009c0)=ANY=[@ANYBLOB="9b03d72579f1c47bc94f91fb07206ab5c404b0d65f6cf9c9a246952780bd734e9e7872d1123f63ef622248a07162d8561f935b5d50027ca6902e99aec71cc27ee7275fbc4e72a979d4cf296a4fc000be4011dfb7bac684125056c661ddd1b9de36292280fe1e7bf3d1cdce93950fa7388f24778ffbada2c753ac6f57ae017749060fbe75d4d196f88effaa2191a88b54bc8be3c5f80579271ef34870865517343d5aa548b0e96162568949a061ac97b92dce38188cf897e7ef0643dce2bd8ae2c41f8748739ba78f843a16dd19030a63c433e3ecdea0177edfc0732ba337abe28d5109a5d069f8e85da99e8ad9c4048aa447d5f5979d91bb2fe1ae991ddb29310c870cb5a22441a7f4e917ceda7072365c032538b866e134d27860ad6d4e004f29f91f9b9ecc0e18674dfa70bc6f24bbb0e4b7cd64d9482713cb000000"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x7a, &(0x7f0000000300)=@string={0x7a, 0x3, "5d76e46d8bea099d58fca9ef80793b635777a51071da661d39be520c94256a0466b229d661dd776d45eb5c315d27bd83d6595f2fd7f1f7955b260e806e25e6346616064f78ce6b4050f543f6af264ab34441ee75e655133d8fb76f2821a246a628779c56af9d4935ebfb14110e7b37eefdb7249b8687aaf4"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x408}}, {0xa9, &(0x7f00000003c0)=@string={0xa9, 0x3, "d55a5e64cacaa8a1e23082568f3d1e9315b98fbdccdb418b7d207af215e19fea1ff6a89852d90ed554e3479efffa113231412b053b31eeae1fb4d6bc6ee4cd978d6f13f8eedd33df5183aef3d1c6fd4bf152109fc4ad493b17cc703d96a5f943a3b6a9489dbe109915cd3057c48875269f7cdbbb293d944ab92846ca830491ba5ea7820491c91ad0b84078d7cdd466ce54bf992dc6e5d3813a53c706d9b541c460866422a0a6e0"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x180c}}, {0xde, &(0x7f00000004c0)=@string={0xde, 0x3, "4c0d47afa45b78fd086d0d349c707aadbcba5e91427e955c5c34320386b70c5db2e44ea9a56c4c7b6cbd2f53f782ea48d1fa93b7268fdf8f02ad924b9c7d6eb2a824208ed5b04140969ed42c3a3bb48e20ed3e7a1cf97ddb387c9f6f6ae639136f847df86a21b11a348b4ac8f959e2701a63a16249a1d858308a90340891bacc641b1321203793e5faced50c1ac84aa22d396195baff369f857e21cf85102a63bf0e2d87478d55b8989bf68088cf656681243582112685a05baa28cd8d98229fd3d14f5710ba808e813c2deda53732eefa6fa6460be93e538bcb08fe"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x458}}]}) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r3, &(0x7f0000003f40)=[{{&(0x7f0000000480)=@nl=@kern={0x10, 0x0, 0x0, 0x2000}, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1, &(0x7f0000000600)=[{0x10, 0x111, 0x3}], 0x10}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000840)="88", 0x1}], 0x1, &(0x7f0000002940)=[{0x10, 0x1e1, 0x1}], 0x10}}], 0x2, 0x40002) (async, rerun: 64) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x404404c) (rerun: 64) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000008c0)={0x14, &(0x7f00000006c0)={0x0, 0x24, 0xa1, {0xa1, 0x24, "2dc2d68d0b105eca5702865708180df6bbd1a11e299db3e8fc6943ca25054cb769404ce6ccba9350d22ca1eaa2ba87f1872ac794abfec74f9840061582421f6f38b343c549255b3ea98f5ad962ede26c6e1d43c99ee20f41b7b6a1e320db7f85fe0543f52c9dc7fcfbeabe120dee50c53072b255a4e9b9ebc5569e4d5019befc4c64ab72a75d2a3a7113ac9d245f9049f77687318fc859ac327aaeba3168ba"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x1c, &(0x7f0000000800)={0x40, 0x1, 0xab, "e93faea9477f17dd8d61932000bd1d72f752f02e38e81bf285bea6637b1f10e1015e52b103c1d59c3eaf2c8341967c69a2311e8fd572c9db2ce7b769642f2674e177fa985d07618776e252e216141fad5cc11541d47cb5d433bfd23741acb1c152da0c12a4d8819b61fcfbcafabec156937ae13b33f7ce0aad85de6969a2e008e1a6d596a0f4005dd4d7be5c48493c8c825045974dec769f1c6ca6d56a42db4c361e86c4ff9cec61185ed0"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000900)={0x0, 0x8, 0xfffffffffffffca7, 0x5}}) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000c0000000001a0000f7", @ANYRES32=0x1], 0x48) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000d04d800000a000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.312550771s ago: executing program 1 (id=1797): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x134, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xcc1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xd}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x16}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x925}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x134}, 0x1, 0x0, 0x0, 0x4044040}, 0x20004000) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x14, 0x3a, 0x9, 0x70bd26, 0xffffffff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) (async) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async) fchdir(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5f8, 0x0, 0x1e0, 0xf0, 0x2b0, 0x400, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, &(0x7f0000000140), {[{{@ipv6={@mcast1, @mcast2, [0xffffffff, 0xff, 0xffffffff, 0xff000000], [0xffffff00, 0x7f00007f, 0x0, 0xff], 'pim6reg\x00', 'veth0_vlan\x00', {0xff}, {}, 0xb4, 0x8, 0x3, 0x6}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3, 0x39, 0xff9d}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], 'veth0_to_team\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@multicast1, 0x4, 0x37}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xff, 0xff000000, 0xffffff00], [0xff, 0xff, 0xff, 0xffffffff], 'nicvf0\x00', 'team_slave_0\x00', {0xff}, {}, 0x84, 0x3, 0x2, 0x24}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private2, @local, [0xff, 0x0, 0x0, 0xff], [0xffffff00, 0xff, 0x0, 0xffffff00], 'veth1_macvtap\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x2c, 0x10, 0x7, 0x4}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x3}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0x98, 0x9, 0x3}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@rand_addr=' \x01\x00', 0x32, 0x34, 0x3}}}, {{@ipv6={@private2, @private0, [0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0x0, 0xff], 'vlan1\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x67, 0x1, 0x1, 0xb}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0xe9, 0xf], 0xffffffff, 0x0, 0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x800}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) 2.21075868s ago: executing program 0 (id=1798): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf5}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0000008019ffffffee00", [0x0, 0x2000000000001]}}) 2.200302857s ago: executing program 1 (id=1799): r0 = open(0x0, 0x0, 0x0) flock(r0, 0x1) r1 = open(0x0, 0x0, 0x0) flock(r1, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flock(0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) 2.052884905s ago: executing program 1 (id=1800): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) inotify_init1(0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x9, 0xfffffffffffffff9}) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f00000004c0)=""/120, 0x78}], 0x4) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = msgget$private(0x0, 0x100) msgsnd(r5, &(0x7f0000002900)={0x3, "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"}, 0x2000, 0x0) 1.926968326s ago: executing program 0 (id=1801): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000001000000000000000100000000000000800000000000000000000000000000000000000000000000010001000000000004010500ac1414aa000000000000000000000000000000003c00000000000000fc0200000000000000000000000000004000000000000000000000000000000000000000ffffffff000000000000000000000000000000003c00000000000000fe8000000000000000000000000000fd00000000000000000008000000000000000000007f000001000000000000000300000000000000002b000000000000000000000000000000000000000301000000000000000000000000000020010000000000000000000000000000000000003300000000000000fc0100000000000100000000000000000000000001008000010000000a"], 0x1bc}}, 0x0) 1.866923827s ago: executing program 0 (id=1802): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ftruncate(r0, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0x88001, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x11, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f00000001c0)) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r2, 0x81ff) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x420000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) mount_setattr(r5, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)={0x6, 0x78, 0x3a0000, {r6}}, 0x20) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) 1.669529136s ago: executing program 5 (id=1803): openat$ptp0(0xffffffffffffff9c, 0x0, 0x481, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket(0xed770a1e954ff883, 0x800, 0x35) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'veth1_to_batadv\x00', &(0x7f0000000600)=@ethtool_perm_addr={0x20, 0x6, "29dc4cd20ca3"}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x80801) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@security={'security\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0xd0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@remote, @local, 0x0, 0xffffffff, 'nr0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x8, 0x2, 0x1b}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x2, 0x2, [0x6, 0x30, 0x7, 0x33, 0x8, 0x17, 0x6, 0x2f, 0x32, 0x39, 0x8, 0x2, 0x0, 0x2d, 0x29, 0x20], 0x3, 0x9, 0xef2}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x81, 0x6, 0x1, 0x0, "3c676aaacb46cd751c07a9f819a2c40230f50dee63f7dbd1794751ddf2c931d16ac84997ad5eecec830890d542e0f6d19805de2016593461f2440dec45d85cae"}}}, {{@ip={@broadcast, @multicast2, 0xffffff00, 0xffffff00, 'sit0\x00', 'caif0\x00', {}, {0xff}, 0x84, 0x1, 0x8}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xb, 0xe, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3000, &(0x7f0000002380)=ANY=[@ANYRES64=r2, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES8=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000006e40)={0x2020, 0x0, 0x0}, 0xfffffffffffffebd) write$FUSE_INIT(r5, &(0x7f0000002200)={0x50, 0x0, r7, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50) read$FUSE(r5, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r5, &(0x7f0000002140)={0x20, 0x0, r8, {0x403, 0x4, 0x80003ff, 0xffe}}, 0x20) syz_fuse_handle_req(r5, &(0x7f0000004340)="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", 0x2000, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x55, 0x0, 0x0, {0xfffffffffffffffd, 0x2, 0x3, 0x19, 0x9, 0x70, 0x800, 0x4000000, 0x0, 0x0, 0xbca4, 0x0, 0x0, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000006e00)='./file0\x00', 0x0) lstat(&(0x7f0000002580)='./file0\x00', &(0x7f0000002280)) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000002180)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) getdents64(r6, 0x0, 0x20000) ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbb555b0149450000780000000800019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000017f00000100186371ae9b1c03"], 0x0) 1.382802007s ago: executing program 5 (id=1804): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9259}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_XDP={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8044) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589", @ANYBLOB="df1ecffcbd89ce3a80313910aec0200848197243ebca274f8b1850b8a1c44cf7f3d41fd8007d68d6d68a37854ef380eb5f5d04441988fc5129968932f1eab8bb390c981377c7a08a23caee5b1abe19a17e768a742cf22e2fd01151b208d578d439cae717e446ec039ed3cb506921588a35ad31367b1024eb972a1de5281980011133", @ANYRESHEX=r0], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) 1.274853766s ago: executing program 2 (id=1805): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xf3, 0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x9c) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) io_uring_enter(r2, 0x47ba, 0x3e80, 0x100000000000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x25, &(0x7f00000002c0), 0x8) 1.121533914s ago: executing program 1 (id=1806): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) write(r0, &(0x7f00000001c0)="882dcc5810fcff7de9f339b23f8a69956102c4fc013daac03ef03d4ea5a129155b2ac8434baed4063be63a8315c0cdde8c656ae6498b20641471836fe476c019659f38a7c9f8f91adbd0a87a8cd0ac00b009a5c5df1ec449c8a857f9be", 0x5d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x2c000000, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 994.96133ms ago: executing program 4 (id=1807): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x2, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1c3, 0x80, 0x0, 0x42, 0x17}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)=ANY=[@ANYBLOB="38000000490001002abd7000fbdbdf250a", @ANYRES32], 0x38}}, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000000c0)=0x8, 0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x101182) 994.459092ms ago: executing program 0 (id=1808): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@empty, @remote, [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c, 0x0, 0x1}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 947.878922ms ago: executing program 1 (id=1809): fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x40002042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7, 0x103802) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000006002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) syz_open_dev$sg(0x0, 0x0, 0x601) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x1000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xd}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) timer_create(0x0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x24, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/58, 0x328000, 0xc00, 0xb, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) dup(r4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 802.140314ms ago: executing program 4 (id=1810): syz_usb_connect(0x0, 0x50, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x20, 0x8c, 0x73, 0x40, 0x3f0, 0x811c, 0xac0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x54, 0x1, 0x10, 0x4, [{{0x9, 0x4, 0x74, 0x7, 0x0, 0x4f, 0xd1, 0x9f, 0x4, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0x81, 0xc, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x7184}]}]}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 500.892725ms ago: executing program 0 (id=1811): r0 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527a006c3c0020010000000000000000200000000001ff0200000000000000000000000000017304000400000000c910fef3"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/185) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffc, 0xd}}) gettid() 500.278391ms ago: executing program 2 (id=1812): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000010001000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="850b010000000000140003006d6163736563300000000000000000000a000100aaaaaaaaaaaa00004800c50680b1c6ced1529e9af9cdda7fe8a1d550de620785c2262f111976b78629d81d75bb84037ea500d2d9c49ef4222cc50bdc0cc2a5b81f6cb3d0cab609657222f3da6d1c2aa100e46350f2663d9393cda57be5d416d2dcfb138291103f54467b171afcc3b227431d3ccd1830dc9df80b2e55ca813bd61fa9eca536632827dcdbeb0ed0db5ee7"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x800, 0x0) 51.309644ms ago: executing program 2 (id=1813): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000001000000000000000500000000000000800000000000000000000000000000000000000000000000010001000000000004010500ac1414aa000000000000000000000000000000003c00000000000000fc0200000000000000000000000000004000000000000000000000000000000000000000ffffffff000000000000000000000000000000003c00000000000000fe8000000000000000000000000000fd00000000000000000008000000000000000000007f000001000000000000000300000000000000002b000000000000000000000000000000000000000301000000000000000000000000000020010000000000000000000000000000000000003300000000000000fc0100000000000100000000000000000000000001008000010000000a"], 0x1bc}}, 0x0) 0s ago: executing program 1 (id=1814): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4d, 0xda, 0xcc, 0x20, 0xe41, 0x4750, 0x269c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xf4, 0x2, 0x1, 0xd2, 0x98, 0x2c, 0x0, [], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): iovec+0x74/0xa0 [ 448.012063][T11499] ___sys_sendmsg+0x21f/0x2a0 [ 448.012089][T11499] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.012146][T11499] ? __fget_files+0x2a/0x420 [ 448.012166][T11499] ? __fget_files+0x3a0/0x420 [ 448.012197][T11499] __x64_sys_sendmsg+0x19b/0x260 [ 448.012223][T11499] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.012256][T11499] ? __pfx_ksys_write+0x10/0x10 [ 448.012271][T11499] ? rcu_is_watching+0x15/0xb0 [ 448.012304][T11499] ? do_syscall_64+0xbe/0x3b0 [ 448.012325][T11499] do_syscall_64+0xfa/0x3b0 [ 448.012341][T11499] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.012366][T11499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.012385][T11499] ? clear_bhb_loop+0x60/0xb0 [ 448.012415][T11499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.012433][T11499] RIP: 0033:0x7fb9a218e929 [ 448.012450][T11499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.012467][T11499] RSP: 002b:00007fb9a2f73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.012487][T11499] RAX: ffffffffffffffda RBX: 00007fb9a23b5fa0 RCX: 00007fb9a218e929 [ 448.012501][T11499] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 448.012513][T11499] RBP: 00007fb9a2f73090 R08: 0000000000000000 R09: 0000000000000000 [ 448.012525][T11499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.012536][T11499] R13: 0000000000000000 R14: 00007fb9a23b5fa0 R15: 00007fb9a24dfa28 [ 448.012565][T11499] [ 448.012764][T11497] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 448.752681][T11511] netlink: 368 bytes leftover after parsing attributes in process `syz.5.1379'. [ 449.069315][ T5902] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 449.352103][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 449.363796][T11512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.461293][ T5902] usb 6-1: config 4 has an invalid interface number: 51 but max is 0 [ 449.472083][ T5902] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 449.484321][ T5902] usb 6-1: config 4 has no interface number 0 [ 449.545328][ T5902] usb 6-1: config 4 interface 51 has no altsetting 0 [ 449.937437][ T5902] usb 6-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 449.964915][T11522] netlink: 'syz.0.1383': attribute type 3 has an invalid length. [ 449.992906][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.054400][ T5902] usb 6-1: Product: syz [ 450.306817][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1388'. [ 450.343506][ T5902] usb 6-1: Manufacturer: syz [ 450.348162][ T5902] usb 6-1: SerialNumber: syz [ 450.392248][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1388'. [ 450.576630][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 450.587126][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'. [ 450.754684][T11542] misc userio: No port type given on /dev/userio [ 450.887536][T11544] loop2: detected capacity change from 0 to 7 [ 450.907466][ T5200] Dev loop2: unable to read RDB block 7 [ 450.922159][ T5200] loop2: unable to read partition table [ 450.949510][ T5200] loop2: partition table beyond EOD, truncated [ 450.985408][T11544] Dev loop2: unable to read RDB block 7 [ 451.012953][T11544] loop2: unable to read partition table [ 451.024525][T11544] loop2: partition table beyond EOD, truncated [ 451.078394][T11544] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 451.109991][ T5200] Dev loop2: unable to read RDB block 7 [ 451.173807][ T5200] loop2: unable to read partition table [ 451.249428][ T5200] loop2: partition table beyond EOD, truncated [ 451.668545][ T5902] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 451.944536][ T5902] usb 3-1: unable to get BOS descriptor or descriptor too short [ 451.960116][ T5902] usb 3-1: not running at top speed; connect to a high speed hub [ 451.974401][ T5902] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 451.983891][ T5902] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 451.999305][ T5902] usb 3-1: config 1 has no interface number 1 [ 452.021771][ T5902] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 83, changing to 4 [ 452.063203][ T5902] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 452.063735][ T5919] usb 6-1: USB disconnect, device number 46 [ 452.138525][ T5902] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 452.152106][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.216535][ T5902] usb 3-1: Product: syz [ 452.237416][ T5902] usb 3-1: Manufacturer: syz [ 452.300212][ T5902] usb 3-1: SerialNumber: syz [ 452.310382][T11574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1396'. [ 452.612736][ T5902] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 452.696497][ T5902] usb 3-1: USB disconnect, device number 104 [ 452.731824][T11576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1396'. [ 452.824162][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.172685][T11581] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 453.179274][T11581] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 453.201769][T11581] vhci_hcd vhci_hcd.0: Device attached [ 453.380732][ T119] vhci_hcd: vhci_device speed not set [ 453.479986][ T119] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 454.069533][T11582] vhci_hcd: connection reset by peer [ 454.268899][ T6059] vhci_hcd: stop threads [ 454.277439][ T6059] vhci_hcd: release socket [ 454.295265][ T6059] vhci_hcd: disconnect device [ 454.384799][T11601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.851274][T11604] loop2: detected capacity change from 0 to 7 [ 454.889549][T11604] Dev loop2: unable to read RDB block 7 [ 454.895249][T11604] loop2: unable to read partition table [ 454.956807][T11604] loop2: partition table beyond EOD, truncated [ 455.009370][T11604] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 455.639328][ T5882] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 455.809301][ T5882] usb 2-1: device descriptor read/64, error -71 [ 455.851021][T11625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.890334][T11625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.002484][T11634] bridge0: port 3(vlan0) entered blocking state [ 456.008871][T11634] bridge0: port 3(vlan0) entered disabled state [ 456.049559][T11634] vlan0: entered allmulticast mode [ 456.054748][T11634] bond0: entered allmulticast mode [ 456.060205][ T5882] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 456.091293][T11634] bond_slave_0: entered allmulticast mode [ 456.097355][T11634] bond_slave_1: entered allmulticast mode [ 456.103770][T11634] bond2: entered allmulticast mode [ 456.118150][T11634] vlan0: entered promiscuous mode [ 456.123878][T11634] bond0: entered promiscuous mode [ 456.129046][T11634] bond_slave_0: entered promiscuous mode [ 456.139339][ T24] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 456.147492][T11634] bond_slave_1: entered promiscuous mode [ 456.159160][T11634] bond2: entered promiscuous mode [ 456.219301][ T5882] usb 2-1: device descriptor read/64, error -71 [ 456.302553][ T24] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 456.312742][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.329594][ T24] usb 6-1: Product: syz [ 456.329853][ T5882] usb usb2-port1: attempt power cycle [ 456.333883][ T24] usb 6-1: Manufacturer: syz [ 456.349409][ T24] usb 6-1: SerialNumber: syz [ 456.366928][ T24] usb 6-1: config 0 descriptor?? [ 456.597727][ T24] usb 6-1: USB disconnect, device number 47 [ 456.681860][ T5882] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 456.742073][ T5882] usb 2-1: device descriptor read/8, error -71 [ 456.806379][T11649] loop2: detected capacity change from 0 to 7 [ 456.814918][ T5954] Dev loop2: unable to read RDB block 7 [ 456.821579][ T5954] loop2: unable to read partition table [ 456.827578][ T5954] loop2: partition table beyond EOD, truncated [ 456.835285][T11649] Dev loop2: unable to read RDB block 7 [ 456.841406][T11649] loop2: unable to read partition table [ 456.847298][T11649] loop2: partition table beyond EOD, truncated [ 456.853924][T11649] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 457.009426][ T5882] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 457.033667][ T5882] usb 2-1: device descriptor read/8, error -71 [ 457.149953][ T5882] usb usb2-port1: unable to enumerate USB device [ 458.581821][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 458.619754][ T119] vhci_hcd: vhci_device speed not set [ 458.679286][ T6488] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 458.870086][ T6488] usb 6-1: Using ep0 maxpacket: 16 [ 458.926977][ T6488] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 458.939479][ T6488] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 458.968740][ T6488] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 459.004905][ T6488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.015320][ T6488] usb 6-1: Product: syz [ 459.019866][ T6488] usb 6-1: Manufacturer: syz [ 459.024637][ T6488] usb 6-1: SerialNumber: syz [ 459.031895][ T6488] usb 6-1: config 0 descriptor?? [ 459.040735][ T6488] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 459.050286][ T6488] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 459.549917][ T119] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 459.660106][ T6488] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 459.752543][ T6488] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 459.789585][ T6488] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 459.796590][ T6488] em28xx 6-1:0.0: No AC97 audio processor [ 459.858457][ T6488] usb 6-1: USB disconnect, device number 48 [ 459.895465][ T6488] em28xx 6-1:0.0: Disconnecting em28xx [ 459.923442][ T6488] em28xx 6-1:0.0: Freeing device [ 460.101187][T11689] loop2: detected capacity change from 0 to 7 [ 460.166079][ T5954] Dev loop2: unable to read RDB block 7 [ 460.185340][ T5954] loop2: unable to read partition table [ 460.203890][ T5954] loop2: partition table beyond EOD, truncated [ 460.227412][T11689] Dev loop2: unable to read RDB block 7 [ 460.249588][T11689] loop2: unable to read partition table [ 460.260035][T11689] loop2: partition table beyond EOD, truncated [ 460.289351][T11689] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 460.710064][ T5882] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 460.849259][ T6488] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 460.879867][ T5882] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 460.900286][ T5882] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 460.920037][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 460.940378][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 460.959273][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 460.972956][ T5882] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 460.982797][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 460.993420][ T5882] usb 2-1: Product: syz [ 460.997814][ T5882] usb 2-1: Manufacturer: syz [ 461.020854][ T5882] cdc_wdm 2-1:1.0: skipping garbage [ 461.026122][ T5882] cdc_wdm 2-1:1.0: skipping garbage [ 461.039740][ T119] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 461.039821][ T5882] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 461.051443][ T6488] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 461.064525][ T5882] cdc_wdm 2-1:1.0: Unknown control protocol [ 461.073555][ T6488] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 461.093493][ T6488] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.123062][ T6488] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 461.134564][ T6488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 461.153064][ T6488] usb 3-1: Product: syz [ 461.157483][ T6488] usb 3-1: Manufacturer: syz [ 461.167619][ T6488] usb 3-1: SerialNumber: syz [ 461.206323][ T30] audit: type=1326 audit(1750666617.891:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.4.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfc572ab19 code=0x7ffc0000 [ 461.231640][ T119] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.242299][ T119] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 461.257134][ T30] audit: type=1326 audit(1750666617.921:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.4.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfc572ab19 code=0x7ffc0000 [ 461.269270][ T119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.293259][ T30] audit: type=1326 audit(1750666617.921:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.4.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfc572ab19 code=0x7ffc0000 [ 461.312664][ T119] usb 6-1: config 0 descriptor?? [ 461.326109][ T119] pwc: Askey VC010 type 2 USB webcam detected. [ 461.369362][ T30] audit: type=1326 audit(1750666617.921:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.4.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfc572ab19 code=0x7ffc0000 [ 461.391667][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.399723][ T30] audit: type=1326 audit(1750666617.921:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.4.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfc572ab19 code=0x7ffc0000 [ 461.422156][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.431573][ T6488] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 105 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 461.452787][ T30] audit: type=1326 audit(1750666617.921:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.4.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfc572ab19 code=0x7ffc0000 [ 461.475053][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.509107][ T30] audit: type=1326 audit(1750666617.921:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.4.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfc572ab19 code=0x7ffc0000 [ 461.549575][ T30] audit: type=1326 audit(1750666617.921:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.4.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfc572ab19 code=0x7ffc0000 [ 461.581575][ T30] audit: type=1326 audit(1750666617.921:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.4.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfc572ab19 code=0x7ffc0000 [ 461.622130][ T6488] usb 2-1: USB disconnect, device number 88 [ 461.648775][T11700] cdc_wdm 2-1:1.0: Error submitting int urb - -19 [ 461.667661][ T30] audit: type=1326 audit(1750666617.921:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.4.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfc572ab19 code=0x7ffc0000 [ 461.689985][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.703442][ T24] usb 3-1: USB disconnect, device number 105 [ 461.728814][ T24] usblp1: removed [ 461.738245][ T119] pwc: recv_control_msg error -32 req 02 val 2b00 [ 461.745957][ T119] pwc: recv_control_msg error -32 req 02 val 2700 [ 461.975715][ T119] pwc: recv_control_msg error -32 req 04 val 1000 [ 461.982375][T11704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.982777][T11704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.092266][ T119] pwc: recv_control_msg error -71 req 04 val 1300 [ 462.111061][ T119] pwc: recv_control_msg error -71 req 04 val 1400 [ 462.139304][ T119] pwc: recv_control_msg error -71 req 02 val 2000 [ 462.160597][ T119] pwc: recv_control_msg error -71 req 02 val 2100 [ 462.185486][ T119] pwc: recv_control_msg error -71 req 04 val 1500 [ 462.199843][ T5882] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 462.218451][ T119] pwc: recv_control_msg error -71 req 02 val 2500 [ 462.255956][ T119] pwc: recv_control_msg error -71 req 02 val 2400 [ 462.276811][ T119] pwc: recv_control_msg error -71 req 02 val 2600 [ 462.291099][ T119] pwc: recv_control_msg error -71 req 02 val 2900 [ 462.309078][ T119] pwc: recv_control_msg error -71 req 02 val 2800 [ 462.345519][ T119] pwc: recv_control_msg error -71 req 04 val 1100 [ 462.357132][ T5882] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 462.364213][ T119] pwc: recv_control_msg error -71 req 04 val 1200 [ 462.400310][ T5882] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 462.413988][ T119] pwc: Registered as video103. [ 462.425777][ T5882] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 462.436015][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.477314][ T119] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input34 [ 462.488963][T11714] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 462.549971][ T5882] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.559022][ T119] usb 6-1: USB disconnect, device number 49 [ 462.814224][T11734] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 462.899943][ T24] usb 2-1: USB disconnect, device number 89 [ 463.226411][T11740] netlink: 'syz.4.1442': attribute type 16 has an invalid length. [ 463.575495][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 464.361926][T11761] tipc: Enabling of bearer rejected, failed to enable media [ 464.393597][T11761] xt_l2tp: v2 doesn't support IP mode [ 464.679290][ T119] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 464.843332][ T119] usb 3-1: unable to get BOS descriptor or descriptor too short [ 464.851836][ T119] usb 3-1: not running at top speed; connect to a high speed hub [ 464.863081][ T119] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 464.931712][ T119] usb 3-1: config 1 interface 0 has no altsetting 0 [ 464.979044][ T119] usb 3-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 464.993815][ T119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.002924][ T119] usb 3-1: Product: syz [ 465.007210][ T119] usb 3-1: Manufacturer: syz [ 465.012512][ T119] usb 3-1: SerialNumber: syz [ 465.025368][T11761] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 465.482772][ T119] usb 3-1: USB disconnect, device number 106 [ 465.791161][ T5882] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 465.950468][ T5882] usb 6-1: Using ep0 maxpacket: 8 [ 465.961116][ T5882] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 465.970884][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.978947][ T5882] usb 6-1: Product: syz [ 465.984088][ T5882] usb 6-1: Manufacturer: syz [ 465.988817][ T5882] usb 6-1: SerialNumber: syz [ 466.003802][ T5882] usb 6-1: config 0 descriptor?? [ 466.019344][ T119] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 466.169952][ T119] usb 2-1: Using ep0 maxpacket: 8 [ 466.178154][ T119] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x1 has invalid maxpacket 1023 [ 466.188888][ T119] usb 2-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 466.202360][ T119] usb 2-1: config 1 interface 0 has no altsetting 0 [ 466.211905][ T119] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 466.221342][ T119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.228296][ T5882] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 466.229703][ T24] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 466.244451][ T119] usb 2-1: Product: 氞糵諎穀鳎픂겡器㩉ꤟ鲨턟쀎㛋ᰋ餧赭聦噃夐琚赅ᐳ뒑궅Ⲭ춗鮐㩜萲䞨桷悓떖蘸ꥎ3↞㎈娮团痛꣇Â稝㘪侶쟌頣鐎殿駬і㞓䦄ꅕ쬦 [ 466.266114][ T119] usb 2-1: Manufacturer: 蜱ꩅ㑘裨漅㩷⭦檮麫뵗圹뵑鐕䞰姀雎◗¯㌶逡컺퍦崶咴캽⃞着 玜ﹱ䞟䱒嫸냃옇䛯斁ဝ峌顙 [ 466.296593][ T119] usb 2-1: SerialNumber: 㪶ꊧ璼餛蟛댄护譒懦짐⊞꧍橗큚燴ᾥ䄵䓼䬨康쌁⾸上字髝᧮ㄍ႙福띤勞瀳貑㡘흮벫ꌦ೿䫆抉ᇦゆ䨪譜숋ퟁ㉍칊䄇䒎﯊⏆春稥塝珤襑౭墼埖 [ 466.351105][T11781] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 466.358575][T11781] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 466.441488][ T24] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 466.449892][ T24] usb 3-1: config 0 has no interface number 0 [ 466.456174][ T24] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 466.474554][ T24] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 466.483716][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.491973][ T24] usb 3-1: Product: syz [ 466.496213][ T24] usb 3-1: Manufacturer: syz [ 466.501473][ T24] usb 3-1: SerialNumber: syz [ 466.509574][ T24] usb 3-1: config 0 descriptor?? [ 466.517351][T11784] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 466.530855][ T24] usb-storage 3-1:0.20: USB Mass Storage device detected [ 466.544212][ T24] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 466.732932][ T24] scsi host1: usb-storage 3-1:0.20 [ 466.754831][ T24] usb 3-1: USB disconnect, device number 107 [ 466.776167][ T30] kauditd_printk_skb: 701 callbacks suppressed [ 466.776185][ T30] audit: type=1326 audit(1750666623.461:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.1.1455" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9a218e929 code=0x0 [ 467.129597][ T5882] gspca_sunplus: reg_w_riv err -110 [ 467.135035][ T5882] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 467.416418][T11795] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 468.402869][ T24] usb 6-1: USB disconnect, device number 50 [ 468.816934][ T119] usb 2-1: USB disconnect, device number 90 [ 468.836097][ T24] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 469.109317][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 469.116296][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 469.124723][ T24] usb 6-1: can't read configurations, error -61 [ 469.269314][ T24] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 469.385641][T11811] netlink: 696 bytes leftover after parsing attributes in process `syz.4.1463'. [ 469.439395][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 469.453340][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 469.475260][ T24] usb 6-1: can't read configurations, error -61 [ 469.497143][ T24] usb usb6-port1: attempt power cycle [ 469.553060][T11813] netlink: 'syz.4.1464': attribute type 322 has an invalid length. [ 469.677616][T11819] netlink: 'syz.0.1467': attribute type 13 has an invalid length. [ 469.879378][ T24] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 469.940245][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 469.967694][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 469.994323][ T24] usb 6-1: can't read configurations, error -61 [ 470.015522][T11824] netlink: 'syz.0.1468': attribute type 10 has an invalid length. [ 470.053544][T11824] team0: Device veth1_macvtap failed to register rx_handler [ 470.169362][ T24] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 470.193846][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 470.208452][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 470.217264][ T24] usb 6-1: can't read configurations, error -61 [ 470.228450][ T24] usb usb6-port1: unable to enumerate USB device [ 471.201882][T11840] netlink: 'syz.2.1473': attribute type 5 has an invalid length. [ 471.369897][T11856] netlink: 'syz.0.1476': attribute type 1 has an invalid length. [ 471.446074][T11856] 8021q: adding VLAN 0 to HW filter on device bond4 [ 471.567806][T11857] bond4: (slave veth7): Enslaving as an active interface with a down link [ 471.753641][T11856] bond4: (slave veth0_to_bond): making interface the new active one [ 471.801861][T11856] veth0_to_bond: entered promiscuous mode [ 471.816217][T11856] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 471.883011][ T60] bond4: (slave veth0_to_bond): link status definitely down, disabling slave [ 471.985187][ T60] veth0_to_bond: left promiscuous mode [ 472.078360][ T60] bond4: now running without any active interface! [ 472.558588][ T30] audit: type=1326 audit(1750666629.211:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f702c32ab19 code=0x7ffc0000 [ 472.635875][ T30] audit: type=1326 audit(1750666629.211:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f702c32ab19 code=0x7ffc0000 [ 472.676614][ T30] audit: type=1326 audit(1750666629.221:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f702c32ab19 code=0x7ffc0000 [ 472.703303][ T30] audit: type=1326 audit(1750666629.221:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c38e929 code=0x7ffc0000 [ 472.737324][ T30] audit: type=1326 audit(1750666629.221:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c38e929 code=0x7ffc0000 [ 472.765237][ T30] audit: type=1326 audit(1750666629.221:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f702c32ab19 code=0x7ffc0000 [ 472.798520][ T30] audit: type=1326 audit(1750666629.221:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c38e929 code=0x7ffc0000 [ 472.850761][T11894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.885739][ T24] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 472.893712][ T30] audit: type=1326 audit(1750666629.221:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f702c38e929 code=0x7ffc0000 [ 472.917687][ T30] audit: type=1326 audit(1750666629.221:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c38e929 code=0x7ffc0000 [ 472.949930][ T30] audit: type=1326 audit(1750666629.221:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.2.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c38e929 code=0x7ffc0000 [ 473.099364][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 473.132828][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 473.179304][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 473.209655][ T24] usb 6-1: can't read configurations, error -71 [ 473.234214][T11905] xt_hashlimit: size too large, truncated to 1048576 [ 473.545116][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 473.609689][T11910] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 473.616275][T11910] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 473.707401][T11910] vhci_hcd vhci_hcd.0: Device attached [ 473.894355][T11916] vhci_hcd: connection closed [ 473.894708][ T12] vhci_hcd: stop threads [ 473.905472][ T12] vhci_hcd: release socket [ 473.910907][ T12] vhci_hcd: disconnect device [ 473.959765][ T119] usb 33-1: new low-speed USB device number 6 using vhci_hcd [ 473.967612][ T119] usb 33-1: enqueue for inactive port 0 [ 474.040444][ T119] vhci_hcd: vhci_device speed not set [ 474.379320][ T6488] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 474.687923][ T6488] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 474.760489][ T6488] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 474.789834][ T6488] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 474.849492][ T6488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.862001][T11948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1498'. [ 474.965596][T11932] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 474.984643][ T6488] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 475.953591][ T44] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 476.205323][T11959] tmpfs: Unknown parameter 'r%Ҵ\wӠR(4;a; [ 476.205323][T11959] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;O훌u [ 476.205323][T11959] ~^>Ƥr&Dq.;쀯<2AU' [ 476.214419][ T44] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 476.317965][ T44] usb 5-1: USB disconnect, device number 117 [ 476.799321][ T44] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 476.979355][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 477.012890][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.047848][ T44] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 477.058139][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.171885][ T44] usb 5-1: Product: syz [ 477.176192][ T44] usb 5-1: Manufacturer: syz [ 477.181214][ T44] usb 5-1: SerialNumber: syz [ 477.197687][ T44] usb 5-1: config 0 descriptor?? [ 477.270348][ T44] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 477.535969][T11961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.558932][T11961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.725743][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1502'. [ 477.998316][ T5882] usb 2-1: USB disconnect, device number 91 [ 478.241097][ T13] usb 5-1: Failed to submit usb control message: -71 [ 478.294341][ T13] usb 5-1: unable to send the bmi data to the device: -71 [ 478.309377][ T5902] usb 5-1: USB disconnect, device number 118 [ 478.340732][ T13] usb 5-1: unable to get target info from device [ 478.399431][ T13] usb 5-1: could not get target info (-71) [ 478.424538][ T13] usb 5-1: could not probe fw (-71) [ 478.940474][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1508'. [ 479.751605][ T5882] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 479.922586][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 479.931641][ T5882] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 479.949129][ T5882] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 479.968760][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.014879][ T5882] usb 5-1: Product: syz [ 480.020036][ T5882] usb 5-1: Manufacturer: syz [ 480.034969][ T5882] usb 5-1: SerialNumber: syz [ 480.044941][ T5882] usb 5-1: config 0 descriptor?? [ 480.078589][ T5882] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 481.234088][ T5882] gspca_zc3xx: reg_w_i err -71 [ 481.829354][ T5882] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 481.835856][ T5882] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 481.874759][ T5882] usb 5-1: USB disconnect, device number 119 [ 482.179507][ T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 482.236588][T12032] loop2: detected capacity change from 0 to 7 [ 482.246192][T12032] Dev loop2: unable to read RDB block 7 [ 482.252222][T12032] loop2: unable to read partition table [ 482.258774][T12032] loop2: partition table beyond EOD, truncated [ 482.266383][T12032] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 482.291758][ T5902] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 482.353880][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 482.368707][ T9] usb 3-1: config 182 has an invalid interface number: 74 but max is 0 [ 482.380411][ T9] usb 3-1: config 182 has no interface number 0 [ 482.386803][ T9] usb 3-1: config 182 interface 74 has no altsetting 0 [ 482.397060][T12034] program syz.5.1520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.400293][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=bca1, bcdDevice=6d.e2 [ 482.416213][T12034] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1520'. [ 482.434088][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.442948][ T9] usb 3-1: Product: syz [ 482.447408][ T9] usb 3-1: Manufacturer: syz [ 482.452211][ T9] usb 3-1: SerialNumber: syz [ 482.462063][ T5902] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 482.472546][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.491977][ T5902] usb 2-1: config 0 descriptor?? [ 482.578976][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 482.578995][ T30] audit: type=1326 audit(1750666639.261:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12036 comm="syz.4.1521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfc578e929 code=0x0 [ 482.669363][ T5916] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 482.688588][ T9] ftdi_sio 3-1:182.74: FTDI USB Serial Device converter detected [ 482.699029][ T9] ftdi_sio ttyUSB0: unknown device type: 0x6de2 [ 482.710704][ T9] usb 3-1: USB disconnect, device number 108 [ 482.718701][ T9] ftdi_sio 3-1:182.74: device disconnected [ 482.821648][ T5916] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.836455][ T5916] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 482.845644][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.857131][ T5916] usb 6-1: config 0 descriptor?? [ 482.866368][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 483.066459][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 483.074060][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 483.081761][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 483.088763][ T5916] pwc: recv_control_msg error -32 req 04 val 1000 [ 483.115185][ T5916] pwc: recv_control_msg error -71 req 04 val 1300 [ 483.122851][ T5916] pwc: recv_control_msg error -71 req 04 val 1400 [ 483.132172][ T5916] pwc: recv_control_msg error -71 req 02 val 2000 [ 483.152301][ T5916] pwc: recv_control_msg error -71 req 02 val 2100 [ 483.169609][ T5916] pwc: recv_control_msg error -71 req 04 val 1500 [ 483.176501][ T5916] pwc: recv_control_msg error -71 req 02 val 2500 [ 483.186923][ T5916] pwc: recv_control_msg error -71 req 02 val 2400 [ 483.197334][ T5916] pwc: recv_control_msg error -71 req 02 val 2600 [ 483.204367][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 483.216753][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 483.228855][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 483.249979][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 483.263242][ T5916] pwc: Registered as video103. [ 483.272101][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35 [ 483.335976][ T5916] usb 6-1: USB disconnect, device number 57 [ 483.526556][ T5902] pegasus 2-1:0.0: can't reset MAC [ 483.533009][ T5902] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 483.568845][ T5902] usb 2-1: USB disconnect, device number 92 [ 483.857539][T12055] netlink: 'syz.0.1525': attribute type 5 has an invalid length. [ 483.869427][ T5916] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 483.900636][T12055] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1525'. [ 484.259403][ T5916] usb 6-1: Using ep0 maxpacket: 32 [ 484.273251][ T5916] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 484.319502][ T5916] usb 6-1: config 0 has no interface number 0 [ 484.334891][ T5916] usb 6-1: config 0 interface 168 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 484.498482][T12054] syz.0.1525 (12054): drop_caches: 1 [ 484.504567][T12057] macsec0: entered promiscuous mode [ 484.525162][T12057] macsec0: left promiscuous mode [ 484.646286][ T5916] usb 6-1: config 0 interface 168 has no altsetting 0 [ 484.726660][ T5916] usb 6-1: New USB device found, idVendor=2b55, idProduct=0091, bcdDevice=d1.bd [ 484.740570][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.748626][ T5916] usb 6-1: Product: syz [ 484.757533][ T5916] usb 6-1: Manufacturer: syz [ 484.767578][ T5916] usb 6-1: SerialNumber: syz [ 484.780492][ T5916] usb 6-1: config 0 descriptor?? [ 485.159347][ T5902] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 485.321367][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 485.366936][ T5902] usb 2-1: config 0 has an invalid interface number: 251 but max is 2 [ 485.409188][ T5902] usb 2-1: config 0 has an invalid interface number: 247 but max is 2 [ 485.478607][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.522209][ T5902] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 485.555417][ T5902] usb 2-1: config 0 has no interface number 0 [ 485.577295][ T5902] usb 2-1: config 0 has no interface number 1 [ 485.591544][ T5902] usb 2-1: config 0 interface 251 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 485.613185][T12073] loop2: detected capacity change from 0 to 7 [ 485.632870][ T5902] usb 2-1: config 0 interface 251 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 485.650394][ T5902] usb 2-1: config 0 interface 251 altsetting 2 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 485.665751][ T5902] usb 2-1: config 0 interface 251 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 485.678513][ T5902] usb 2-1: config 0 interface 251 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 485.692673][ T5902] usb 2-1: config 0 interface 247 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 485.724112][ T5902] usb 2-1: config 0 interface 251 has no altsetting 0 [ 485.731450][ T5902] usb 2-1: config 0 interface 247 has no altsetting 0 [ 485.740946][ T5902] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=5f.ee [ 485.754891][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.763544][ T5902] usb 2-1: Product: syz [ 485.767808][ T5902] usb 2-1: Manufacturer: syz [ 485.774072][ T5902] usb 2-1: SerialNumber: syz [ 485.807735][ T5902] usb 2-1: config 0 descriptor?? [ 485.830870][T12073] Dev loop2: unable to read RDB block 7 [ 485.930063][T12073] loop2: unable to read partition table [ 485.950531][T12073] loop2: partition table beyond EOD, truncated [ 485.956847][T12073] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 486.137511][ T5902] usb 2-1: Found UVC 0.00 device syz (8086:0b07) [ 486.254799][ T5916] usb 6-1: USB disconnect, device number 58 [ 486.261052][ T5902] usb 2-1: No valid video chain found. [ 486.270045][ T9] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 486.484156][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 486.519987][ T5902] usb 2-1: USB disconnect, device number 93 [ 486.557055][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 486.654312][ T9] usb 5-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 486.751143][ T9] usb 5-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 486.780709][T12089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1533'. [ 486.795171][T12093] FAULT_INJECTION: forcing a failure. [ 486.795171][T12093] name failslab, interval 1, probability 0, space 0, times 0 [ 486.808225][T12093] CPU: 1 UID: 0 PID: 12093 Comm: syz.0.1535 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 486.808251][T12093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.808263][T12093] Call Trace: [ 486.808270][T12093] [ 486.808279][T12093] dump_stack_lvl+0x189/0x250 [ 486.808312][T12093] ? __pfx____ratelimit+0x10/0x10 [ 486.808338][T12093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.808365][T12093] ? __pfx__printk+0x10/0x10 [ 486.808390][T12093] ? __pfx___might_resched+0x10/0x10 [ 486.808416][T12093] ? fs_reclaim_acquire+0x7d/0x100 [ 486.808441][T12093] should_fail_ex+0x414/0x560 [ 486.808468][T12093] should_failslab+0xa8/0x100 [ 486.808489][T12093] __kmalloc_noprof+0xcb/0x4f0 [ 486.808504][T12093] ? kfree+0x4d/0x440 [ 486.808527][T12093] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 486.808557][T12093] tomoyo_realpath_from_path+0xe3/0x5d0 [ 486.808583][T12093] ? tomoyo_domain+0xd9/0x130 [ 486.808613][T12093] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 486.808640][T12093] tomoyo_path_number_perm+0x1e8/0x5a0 [ 486.808663][T12093] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 486.808699][T12093] ? __lock_acquire+0xab9/0xd20 [ 486.808761][T12093] ? __fget_files+0x2a/0x420 [ 486.808784][T12093] ? __fget_files+0x2a/0x420 [ 486.808804][T12093] ? __fget_files+0x3a0/0x420 [ 486.808823][T12093] ? __fget_files+0x2a/0x420 [ 486.808848][T12093] security_file_ioctl+0xcb/0x2d0 [ 486.808871][T12093] __se_sys_ioctl+0x47/0x170 [ 486.808901][T12093] do_syscall_64+0xfa/0x3b0 [ 486.808918][T12093] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.808944][T12093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.808963][T12093] ? clear_bhb_loop+0x60/0xb0 [ 486.808986][T12093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.809005][T12093] RIP: 0033:0x7fa65378e929 [ 486.809021][T12093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.809038][T12093] RSP: 002b:00007fa65461b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.809058][T12093] RAX: ffffffffffffffda RBX: 00007fa6539b5fa0 RCX: 00007fa65378e929 [ 486.809071][T12093] RDX: 0000200000000c80 RSI: 00000000c4c85513 RDI: 0000000000000004 [ 486.809084][T12093] RBP: 00007fa65461b090 R08: 0000000000000000 R09: 0000000000000000 [ 486.809096][T12093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.809107][T12093] R13: 0000000000000000 R14: 00007fa6539b5fa0 R15: 00007fa653adfa28 [ 486.809137][T12093] [ 486.809144][T12093] ERROR: Out of memory at tomoyo_realpath_from_path. [ 487.062608][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 487.073153][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 487.082410][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.090507][ T9] usb 5-1: Product: syz [ 487.094694][ T9] usb 5-1: Manufacturer: syz [ 487.103369][ T9] usb 5-1: SerialNumber: syz [ 487.314256][T12099] tmpfs: Unknown parameter 'r%Ҵ\wӠR(4;a; [ 487.314256][T12099] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;O훌u [ 487.314256][T12099] ~^>Ƥr&Dq.;쀯<2AU' [ 487.426452][T12102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1537'. [ 487.666374][T12109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 487.743873][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input36 [ 487.771140][T12112] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 487.777706][T12112] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 487.800200][ T5185] bcm5974 5-1:1.0: could not read from device [ 487.806844][ T9] usb 5-1: USB disconnect, device number 120 [ 487.838010][T12112] vhci_hcd vhci_hcd.0: Device attached [ 488.029542][ T5902] vhci_hcd: vhci_device speed not set [ 488.089405][ T5902] usb 33-1: new full-speed USB device number 7 using vhci_hcd [ 488.100805][T12125] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1541'. [ 488.104432][T12125] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1541'. [ 488.679408][T12113] vhci_hcd: connection reset by peer [ 488.695101][ T13] vhci_hcd: stop threads [ 488.726442][ T13] vhci_hcd: release socket [ 488.787148][ T13] vhci_hcd: disconnect device [ 489.161347][T12131] loop2: detected capacity change from 0 to 7 [ 489.169896][T12131] Dev loop2: unable to read RDB block 7 [ 489.179951][T12131] loop2: unable to read partition table [ 489.269543][T12131] loop2: partition table beyond EOD, truncated [ 489.371013][T12131] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 489.439422][ T6488] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 489.637939][ T6488] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 489.647577][ T6488] usb 3-1: config 0 has no interface number 0 [ 489.656367][ T6488] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.668220][ T6488] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.701493][ T6488] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 489.722506][ T6488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.780222][ T6488] usb 3-1: config 0 descriptor?? [ 490.176240][T12140] binder: 12139:12140 ioctl c018620b 200000000000 returned -14 [ 490.222797][ T6488] uclogic 0003:256C:006D.0013: No inputs registered, leaving [ 490.233330][ T6488] uclogic 0003:256C:006D.0013: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input1 [ 490.412649][T12133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.439730][T12133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.461848][ T9] usb 3-1: USB disconnect, device number 109 [ 490.570121][T12151] fido_id[12151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 490.755928][T12165] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1554'. [ 490.889283][ T6488] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 490.934842][T12169] loop2: detected capacity change from 0 to 7 [ 490.945078][T12169] Dev loop2: unable to read RDB block 7 [ 490.950850][T12169] loop2: unable to read partition table [ 490.956680][T12169] loop2: partition table beyond EOD, truncated [ 490.963229][T12169] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 490.999319][ T44] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 491.061944][ T6488] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 491.080133][ T6488] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 491.094566][ T6488] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 491.104087][ T6488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.113009][ T6488] usb 6-1: Product: syz [ 491.117361][ T6488] usb 6-1: Manufacturer: syz [ 491.127437][ T6488] usb 6-1: SerialNumber: syz [ 491.191822][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 491.367062][T12163] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1553'. [ 491.493653][T12180] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 491.520043][ T44] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 491.528445][ T44] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 491.549240][ T9] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 491.569523][T12163] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 491.709485][ T9] usb 3-1: device descriptor read/64, error -71 [ 491.859786][ T6488] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 491.959555][ T9] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 492.034430][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.048285][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 492.069286][ T6488] usb 6-1: USB disconnect, device number 59 [ 492.078953][ T44] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.093677][ T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 492.105778][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.109813][ T9] usb 3-1: device descriptor read/64, error -71 [ 492.154441][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.196822][ T30] audit: type=1326 audit(1750666648.881:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc578e929 code=0x7ffc0000 [ 492.219359][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.234621][ T30] audit: type=1326 audit(1750666648.881:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc578e929 code=0x7ffc0000 [ 492.266355][ T30] audit: type=1326 audit(1750666648.911:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbfc578e929 code=0x7ffc0000 [ 492.296324][ T30] audit: type=1326 audit(1750666648.911:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc578e929 code=0x7ffc0000 [ 492.301630][ T9] usb usb3-port1: attempt power cycle [ 492.325666][ T30] audit: type=1326 audit(1750666648.911:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc578e929 code=0x7ffc0000 [ 492.338029][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1561'. [ 492.349754][ T44] usb 2-1: GET_CAPABILITIES returned 0 [ 492.357882][T12186] netlink: 'syz.5.1561': attribute type 5 has an invalid length. [ 492.370432][ T30] audit: type=1326 audit(1750666648.911:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbfc578e929 code=0x7ffc0000 [ 492.370481][ T30] audit: type=1326 audit(1750666648.911:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc578e929 code=0x7ffc0000 [ 492.370524][ T30] audit: type=1326 audit(1750666648.911:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc578e929 code=0x7ffc0000 [ 492.370574][ T30] audit: type=1326 audit(1750666648.951:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fbfc578e929 code=0x7ffc0000 [ 492.461585][ T44] usbtmc 2-1:16.0: can't read capabilities [ 492.471270][ T30] audit: type=1326 audit(1750666648.951:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc578e929 code=0x7ffc0000 [ 492.564132][ T44] usb 2-1: USB disconnect, device number 94 [ 492.742397][ T9] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 492.771128][ T9] usb 3-1: device descriptor read/8, error -71 [ 492.849389][ T5882] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 493.003694][ T5882] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.016218][ T9] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 493.024816][ T5882] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.040821][ T5882] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 493.054192][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 493.062550][ T9] usb 3-1: device descriptor read/8, error -71 [ 493.079238][ T5882] usb 6-1: SerialNumber: syz [ 493.100258][ T5882] usb 6-1: 0:2 : does not exist [ 493.172520][ T9] usb usb3-port1: unable to enumerate USB device [ 493.219485][ T5902] vhci_hcd: vhci_device speed not set [ 493.304377][T12188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.326749][T12188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.472038][T12202] loop2: detected capacity change from 0 to 7 [ 493.484549][T12202] Dev loop2: unable to read RDB block 7 [ 493.490495][ T9] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 493.498294][T12202] loop2: unable to read partition table [ 493.505056][T12202] loop2: partition table beyond EOD, truncated [ 493.511771][T12202] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 493.558939][ T5882] usb 6-1: USB disconnect, device number 60 [ 493.660905][ T9] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 493.671065][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.681704][ T9] usb 5-1: config 0 descriptor?? [ 493.690779][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 493.859345][ T44] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 494.009364][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 494.016316][ T44] usb 2-1: config 0 has an invalid interface number: 184 but max is 3 [ 494.024907][ T44] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 494.033939][ T44] usb 2-1: config 0 has an invalid interface number: 49 but max is 3 [ 494.042276][ T44] usb 2-1: config 0 has an invalid interface number: 212 but max is 3 [ 494.050797][ T44] usb 2-1: config 0 has an invalid interface number: 74 but max is 3 [ 494.059064][ T44] usb 2-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 494.068338][ T44] usb 2-1: config 0 has no interface number 1 [ 494.074746][ T44] usb 2-1: config 0 has no interface number 2 [ 494.081028][ T44] usb 2-1: config 0 has no interface number 3 [ 494.087361][ T44] usb 2-1: config 0 has no interface number 4 [ 494.094066][ T44] usb 2-1: config 0 interface 184 altsetting 16 bulk endpoint 0x5 has invalid maxpacket 1023 [ 494.104602][ T44] usb 2-1: config 0 interface 184 altsetting 16 has a duplicate endpoint with address 0x5, skipping [ 494.122366][ T44] usb 2-1: config 0 interface 184 altsetting 16 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 494.138198][ T44] usb 2-1: too many endpoints for config 0 interface 49 altsetting 227: 83, using maximum allowed: 30 [ 494.153505][ T44] usb 2-1: config 0 interface 49 altsetting 227 has 1 endpoint descriptor, different from the interface descriptor's value: 83 [ 494.166917][ T44] usb 2-1: config 0 interface 184 has no altsetting 0 [ 494.177631][ T44] usb 2-1: config 0 interface 49 has no altsetting 0 [ 494.184582][ T44] usb 2-1: config 0 interface 212 has no altsetting 0 [ 494.198824][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 494.205832][ T44] usb 2-1: config 0 interface 74 has no altsetting 0 [ 494.215686][ T44] usb 2-1: New USB device found, idVendor=0e41, idProduct=5050, bcdDevice=98.a0 [ 494.225097][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.234448][ T44] usb 2-1: Product: syz [ 494.238681][ T44] usb 2-1: Manufacturer: syz [ 494.243443][ T44] usb 2-1: SerialNumber: syz [ 494.260548][ T44] usb 2-1: config 0 descriptor?? [ 494.266833][T12204] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 494.492250][ T44] snd_usb_pod 2-1:0.184: Line 6 PODxt Pro found [ 494.512563][ T44] usb 2-1: selecting invalid altsetting 5 [ 494.544699][ T44] snd_usb_pod 2-1:0.184: set_interface failed [ 494.552310][ T44] snd_usb_pod 2-1:0.184: Line 6 PODxt Pro now disconnected [ 494.568273][ T44] snd_usb_pod 2-1:0.184: probe with driver snd_usb_pod failed with error -22 [ 494.590465][ T44] snd_usb_pod 2-1:0.49: Line 6 PODxt Pro found [ 494.596885][ T44] usb 2-1: selecting invalid altsetting 5 [ 494.606216][ T44] snd_usb_pod 2-1:0.49: set_interface failed [ 494.613113][ T44] snd_usb_pod 2-1:0.49: Line 6 PODxt Pro now disconnected [ 494.624050][ T44] snd_usb_pod 2-1:0.49: probe with driver snd_usb_pod failed with error -22 [ 494.637801][ T44] snd_usb_pod 2-1:0.212: Line 6 PODxt Pro found [ 494.647836][ T44] usb 2-1: selecting invalid altsetting 5 [ 494.653920][ T44] snd_usb_pod 2-1:0.212: set_interface failed [ 494.663943][ T44] snd_usb_pod 2-1:0.212: Line 6 PODxt Pro now disconnected [ 494.673392][ T44] snd_usb_pod 2-1:0.212: probe with driver snd_usb_pod failed with error -22 [ 494.693207][ T44] snd_usb_pod 2-1:0.0: Line 6 PODxt Pro found [ 494.699746][ T44] usb 2-1: selecting invalid altsetting 5 [ 494.705616][ T44] snd_usb_pod 2-1:0.0: set_interface failed [ 494.712189][ T44] snd_usb_pod 2-1:0.0: Line 6 PODxt Pro now disconnected [ 494.719786][ T44] snd_usb_pod 2-1:0.0: probe with driver snd_usb_pod failed with error -22 [ 494.736187][ T44] snd_usb_pod 2-1:0.74: Line 6 PODxt Pro found [ 494.742722][ T44] usb 2-1: selecting invalid altsetting 5 [ 494.748546][ T44] snd_usb_pod 2-1:0.74: set_interface failed [ 494.758716][ T44] snd_usb_pod 2-1:0.74: Line 6 PODxt Pro now disconnected [ 494.768027][ T44] snd_usb_pod 2-1:0.74: probe with driver snd_usb_pod failed with error -22 [ 494.768193][ T9] gspca_cpia1: usb_control_msg 05, error -110 [ 494.786134][ T9] gspca_cpia1: usb_control_msg 01, error -32 [ 494.793518][ T9] gspca_cpia1: usb_control_msg 01, error -32 [ 494.795194][ T44] usb 2-1: USB disconnect, device number 95 [ 494.802453][ T5902] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 494.816334][ T9] gspca_cpia1: usb_control_msg 01, error -32 [ 494.828509][ T9] gspca_cpia1: usb_control_msg 01, error -32 [ 494.838655][ T9] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 494.979447][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 494.992627][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 495.021419][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 495.031755][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 495.059792][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 495.072490][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 495.097952][ T5902] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 495.119118][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.162419][T12216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.186530][ T5902] usb 3-1: config 0 descriptor?? [ 495.195395][T12214] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.209665][T12216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.626604][T12214] batadv_slave_1: entered promiscuous mode [ 495.634576][T12214] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1570'. [ 495.644169][ T44] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 495.655049][T12213] batadv_slave_1: left promiscuous mode [ 495.656097][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 495.670507][ T24] usb 3-1: USB disconnect, device number 114 [ 495.679321][ T6488] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 495.829345][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 495.836495][ T6488] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 495.845707][ T6488] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.856111][ T44] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 495.864353][ T6488] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.875412][ T44] usb 2-1: config 0 has no interface number 0 [ 495.883398][ T6488] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 495.893640][ T6488] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 495.903812][ T6488] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.916928][ T6488] usb 6-1: config 1 interface 1 has no altsetting 0 [ 495.925084][ T44] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 495.934350][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.942686][ T44] usb 2-1: Product: syz [ 495.946967][ T44] usb 2-1: Manufacturer: syz [ 495.952590][ T44] usb 2-1: SerialNumber: syz [ 495.957700][ T6488] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 495.967987][ T6488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.977083][ T44] usb 2-1: config 0 descriptor?? [ 495.982490][ T6488] usb 6-1: Product: syz [ 495.986774][ T6488] usb 6-1: Manufacturer: syz [ 495.993911][ T44] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 496.000872][ T6488] usb 6-1: SerialNumber: syz [ 496.015825][ T6488] cdc_ncm 6-1:1.0: skipping garbage [ 496.021224][ T6488] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 496.028688][ T6488] cdc_ncm 6-1:1.0: bind() failure [ 496.136520][ T24] usb 5-1: USB disconnect, device number 121 [ 496.290708][T12233] loop2: detected capacity change from 0 to 7 [ 496.331483][ T5881] Dev loop2: unable to read RDB block 7 [ 496.337845][ T5881] loop2: unable to read partition table [ 496.354601][ T5881] loop2: partition table beyond EOD, truncated [ 496.372983][T12233] Dev loop2: unable to read RDB block 7 [ 496.378711][T12233] loop2: unable to read partition table [ 496.386506][T12233] loop2: partition table beyond EOD, truncated [ 496.401591][T12233] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 496.412490][T12226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.427696][T12226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.429574][ T24] usb 6-1: USB disconnect, device number 61 [ 496.580600][ T5902] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 496.597651][ T44] gspca_topro: reg_w err -71 [ 496.643161][ T44] gspca_topro: Sensor soi763a [ 496.690324][ T44] usb 2-1: USB disconnect, device number 96 [ 496.781183][ T5902] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.876346][ T5902] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 496.885727][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.899332][ T5902] usb 3-1: Product: syz [ 496.904905][ T5902] usb 3-1: Manufacturer: syz [ 496.915868][ T5902] usb 3-1: SerialNumber: syz [ 496.939575][ T5882] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 496.965995][ T5882] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 497.849070][T12260] vlan2: entered promiscuous mode [ 497.855895][T12260] syz_tun: entered promiscuous mode [ 498.140985][T12249] hid-generic 0000:0000:0000.0014: pid 12249 passed too short report [ 498.379277][ T5882] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 498.409770][T12268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1584'. [ 498.575636][ T5882] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 498.593766][ T5902] cdc_ncm 3-1:1.0: bind() failure [ 498.610338][ T5882] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 498.623819][ T5902] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 498.649429][ T5902] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 498.658001][ T5882] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 498.668746][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.677041][ T5902] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 498.689077][ T5902] usb 3-1: USB disconnect, device number 115 [ 498.714082][ T5882] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 498.749807][ T9] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 498.798002][ T5882] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 498.923163][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 498.946769][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 498.989716][ T9] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 499.008509][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.047312][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 499.056915][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.069972][ T9] usb 5-1: Product: syz [ 499.074194][ T9] usb 5-1: Manufacturer: syz [ 499.082797][ T9] usb 5-1: SerialNumber: syz [ 499.259327][ T5902] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 499.309493][T12270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.319898][T12270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.334713][T12280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.344228][T12270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.355388][T12280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.363928][T12270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.382819][ T9] usb 5-1: 0:2 : does not exist [ 499.402388][ T9] usb 5-1: USB disconnect, device number 122 [ 499.422127][ T5902] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.443703][ T5902] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.454822][ T5882] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 499.482933][ T5902] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 499.501828][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.542698][ T5902] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 499.559043][ T5902] usb 2-1: config 1 interface 1 has no altsetting 0 [ 499.635582][ T5882] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 499.646784][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.656862][ T5902] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.670844][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.686718][ T5882] usb 3-1: config 0 descriptor?? [ 499.709548][ T5902] usb 2-1: Product: syz [ 499.713979][ T5902] usb 2-1: Manufacturer: syz [ 499.718697][ T5902] usb 2-1: SerialNumber: syz [ 499.978016][ T5902] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 500.188226][ T44] usb 2-1: USB disconnect, device number 97 [ 500.198386][ T5882] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 500.215178][ T5882] [drm:udl_init] *ERROR* Selecting channel failed [ 500.414081][T12294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1591'. [ 500.431067][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'. [ 500.504428][T12295] vivid-003: disconnect [ 500.530594][T12295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1591'. [ 500.535246][ T5882] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 500.569261][ T5882] [drm] Initialized udl on minor 2 [ 500.577758][ T5882] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 500.609962][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'. [ 500.654076][ T5882] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 500.669120][ T9] usb 6-1: USB disconnect, device number 62 [ 500.686192][ T5902] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 500.720869][ T5882] usb 3-1: USB disconnect, device number 116 [ 500.734528][ T5902] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 500.994101][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 500.994120][ T30] audit: type=1326 audit(1750666657.671:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12298 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c38e929 code=0x7fc00000 [ 501.040087][T12302] tap0: tun_chr_ioctl cmd 1074025677 [ 501.045647][T12302] tap0: linktype set to 270 [ 501.088945][T12295] vivid-003: reconnect [ 501.122387][T12259] delete_channel: no stack [ 501.568775][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.575247][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.842371][T12318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.855720][T12318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.873931][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1597'. [ 501.942553][T12322] team_slave_0: entered promiscuous mode [ 501.948737][T12322] team_slave_1: entered promiscuous mode [ 501.958587][T12322] macvtap1: entered promiscuous mode [ 501.964277][T12322] team0: entered promiscuous mode [ 501.974741][T12322] macvtap1: entered allmulticast mode [ 501.980909][T12322] team0: entered allmulticast mode [ 501.986391][T12322] team_slave_0: entered allmulticast mode [ 501.996480][T12322] team_slave_1: entered allmulticast mode [ 502.009531][ T5882] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 502.017607][T12322] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 502.489830][T12323] team0: left allmulticast mode [ 503.037543][T12323] team_slave_0: left allmulticast mode [ 503.168360][T12323] team_slave_1: left allmulticast mode [ 503.419452][T12323] team0: left promiscuous mode [ 503.444097][T12323] team_slave_0: left promiscuous mode [ 503.450084][T12323] team_slave_1: left promiscuous mode [ 504.239783][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 504.523826][T12330] geneve3: entered allmulticast mode [ 504.779567][ T44] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 504.939393][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 504.977028][ T44] usb 3-1: config 2 has an invalid interface number: 161 but max is 3 [ 505.018054][ T44] usb 3-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 505.058233][ T44] usb 3-1: config 2 has an invalid interface number: 143 but max is 3 [ 505.077932][T12344] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 505.113254][ T44] usb 3-1: config 2 has an invalid interface number: 154 but max is 3 [ 505.142374][ T44] usb 3-1: config 2 has an invalid interface number: 94 but max is 3 [ 505.187241][ T44] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 505.217715][ T44] usb 3-1: config 2 has no interface number 0 [ 505.238685][ T44] usb 3-1: config 2 has no interface number 1 [ 505.261487][ T44] usb 3-1: config 2 has no interface number 2 [ 505.303220][ T44] usb 3-1: config 2 has no interface number 3 [ 505.325766][ T44] usb 3-1: config 2 interface 161 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 505.370327][ T44] usb 3-1: config 2 interface 161 altsetting 4 has an endpoint descriptor with address 0x18, changing to 0x8 [ 505.384087][ T44] usb 3-1: config 2 interface 161 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 505.403617][ T44] usb 3-1: config 2 interface 161 altsetting 4 endpoint 0x2 has invalid maxpacket 31358, setting to 1024 [ 505.420978][ T44] usb 3-1: config 2 interface 161 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 505.437107][ T44] usb 3-1: config 2 interface 161 altsetting 4 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 505.453441][ T44] usb 3-1: config 2 interface 161 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 505.465818][ T44] usb 3-1: config 2 interface 161 altsetting 4 has 10 endpoint descriptors, different from the interface descriptor's value: 14 [ 505.504953][ T44] usb 3-1: too many endpoints for config 2 interface 143 altsetting 197: 248, using maximum allowed: 30 [ 505.521059][ T44] usb 3-1: config 2 interface 143 altsetting 197 has a duplicate endpoint with address 0x2, skipping [ 505.735377][ T44] usb 3-1: config 2 interface 143 altsetting 197 has a duplicate endpoint with address 0x1, skipping [ 505.766971][ T44] usb 3-1: config 2 interface 143 altsetting 197 has a duplicate endpoint with address 0x9, skipping [ 505.825506][ T44] usb 3-1: config 2 interface 143 altsetting 197 has 4 endpoint descriptors, different from the interface descriptor's value: 248 [ 505.882390][ T44] usb 3-1: config 2 interface 154 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 505.903436][T12355] ttynull ttynull: ldisc open failed (-12), clearing slot 0 [ 505.911423][ T44] usb 3-1: config 2 interface 154 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 505.955841][ T44] usb 3-1: config 2 interface 154 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 505.983195][ T44] usb 3-1: config 2 interface 154 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 506.043081][ T44] usb 3-1: config 2 interface 154 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 11 [ 506.121201][ T44] usb 3-1: config 2 interface 94 altsetting 172 has a duplicate endpoint with address 0x1, skipping [ 506.183708][ T44] usb 3-1: config 2 interface 94 altsetting 172 has an endpoint descriptor with address 0x24, changing to 0x4 [ 506.309543][ T44] usb 3-1: config 2 interface 94 altsetting 172 has a duplicate endpoint with address 0x4, skipping [ 506.331883][ T44] usb 3-1: config 2 interface 94 altsetting 172 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 506.347215][ T44] usb 3-1: config 2 interface 94 altsetting 172 has a duplicate endpoint with address 0x8, skipping [ 506.408050][ T44] usb 3-1: config 2 interface 94 altsetting 172 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 506.431458][ T44] usb 3-1: config 2 interface 161 has no altsetting 0 [ 506.472727][ T44] usb 3-1: config 2 interface 143 has no altsetting 0 [ 506.529389][ T44] usb 3-1: config 2 interface 154 has no altsetting 0 [ 506.560682][ T44] usb 3-1: config 2 interface 94 has no altsetting 0 [ 506.575477][ T44] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff7d, bcdDevice=27.fb [ 506.620049][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.665117][T12376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'. [ 506.713685][ T44] usb 3-1: Product: ည [ 506.831097][ T44] usb 3-1: Manufacturer: ꠢ书恋ᯝ鳘㵸┴먆䇗뒉 [ 506.840670][ T44] usb 3-1: SerialNumber: つ [ 506.853022][T12331] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 507.091819][ T44] option 3-1:2.161: GSM modem (1-port) converter detected [ 507.463571][ T44] usb 3-1: USB disconnect, device number 117 [ 507.531814][ T44] option 3-1:2.161: device disconnected [ 508.257479][T12397] program syz.5.1617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 508.995876][T12411] tap0: tun_chr_ioctl cmd 35111 [ 509.663947][T12420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 509.739037][T12420] xt_CT: No such helper "netbios-ns" [ 509.879275][ T9] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 509.909535][ T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 510.049613][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 510.058635][ T9] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.074420][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 510.081599][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 510.093669][ T24] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 510.095070][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.109829][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.118955][ T24] usb 2-1: Product: syz [ 510.125513][ T9] usb 5-1: config 0 descriptor?? [ 510.156508][ T24] usb 2-1: Manufacturer: syz [ 510.161301][ T24] usb 2-1: SerialNumber: syz [ 510.179966][ T24] usb 2-1: config 0 descriptor?? [ 510.202435][ T24] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 510.279272][T11632] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 510.451920][T11632] usb 3-1: device descriptor read/64, error -71 [ 510.588417][ T9] kye 0003:0458:501B.0015: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 510.617039][ T9] kye 0003:0458:501B.0015: hidraw0: USB HID v3.ff Device [HID 0458:501b] on usb-dummy_hcd.4-1/input0 [ 510.637224][ T9] kye 0003:0458:501B.0015: tablet-enabling feature report not found [ 510.649232][ T9] kye 0003:0458:501B.0015: tablet enabling failed [ 510.689415][T11632] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 510.805826][T12424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.817532][T12424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.827178][ T24] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 510.830112][ T9] usb 5-1: USB disconnect, device number 123 [ 510.839262][T11632] usb 3-1: device descriptor read/64, error -71 [ 510.857386][ T24] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 510.901312][ T24] usb 2-1: USB disconnect, device number 98 [ 510.979719][T11632] usb usb3-port1: attempt power cycle [ 511.319387][T11632] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 511.369434][T11632] usb 3-1: device descriptor read/8, error -71 [ 511.543797][T12450] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 511.586852][T12450] team0: Device ipvlan1 is already an upper device of the team interface [ 511.630581][T11632] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 511.672138][T11632] usb 3-1: device descriptor read/8, error -71 [ 511.789926][T11632] usb usb3-port1: unable to enumerate USB device [ 511.908359][T12451] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 511.916613][T12451] team0: Device ipvlan1 is already an upper device of the team interface [ 512.126647][T11632] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 512.156621][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1638'. [ 512.293807][T11632] usb 5-1: Using ep0 maxpacket: 32 [ 512.303756][T11632] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 512.315682][T11632] usb 5-1: config 0 has no interface number 0 [ 512.326634][T11632] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 512.337677][T11632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.347289][T11632] usb 5-1: Product: syz [ 512.353970][T11632] usb 5-1: Manufacturer: syz [ 512.358767][T11632] usb 5-1: SerialNumber: syz [ 512.368790][T11632] usb 5-1: config 0 descriptor?? [ 512.386770][T11632] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 512.429436][ T24] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 512.559568][ T24] usb 2-1: device descriptor read/64, error -71 [ 512.594867][T11632] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 512.617606][T11632] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 512.852241][ T24] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 512.998398][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 513.008331][ T44] usb 5-1: USB disconnect, device number 124 [ 513.016485][ T24] usb 2-1: device descriptor read/64, error -71 [ 513.023610][ T44] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 513.062545][ T44] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 513.100004][T12491] netlink: 'syz.2.1643': attribute type 12 has an invalid length. [ 513.114048][T12491] netlink: 'syz.2.1643': attribute type 29 has an invalid length. [ 513.122732][T12491] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1643'. [ 513.124655][ T44] quatech2 5-1:0.51: device disconnected [ 513.135937][T12491] netlink: 'syz.2.1643': attribute type 1 has an invalid length. [ 513.149277][T12491] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1643'. [ 513.168211][ T24] usb usb2-port1: attempt power cycle [ 513.510958][ T24] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 513.561637][ T24] usb 2-1: device descriptor read/8, error -71 [ 513.760304][ T9] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 513.889532][ T24] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 513.968318][ T24] usb 2-1: device descriptor read/8, error -71 [ 513.985287][ T9] usb 3-1: config 0 has no interfaces? [ 514.131712][ T24] usb usb2-port1: unable to enumerate USB device [ 514.166360][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 514.181330][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.201619][ T9] usb 3-1: Product: syz [ 514.215050][ T9] usb 3-1: Manufacturer: syz [ 514.226028][ T9] usb 3-1: SerialNumber: syz [ 514.237687][ T9] usb 3-1: config 0 descriptor?? [ 514.419440][ T24] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 514.919266][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 514.927177][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.941352][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.953824][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.964610][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.973003][ T24] usb 5-1: Product: syz [ 514.977349][ T24] usb 5-1: Manufacturer: 哬㽅賐㦻ꈅ㽳ᦐ냚悝틉排Ꝇ少般ᶩ㐰ꝥ믣廣匠ꆽͶ皻봩왽꾞㏹ป銋뀔妺瑒퐁嵉ꀈ摆踩䴻 [ 514.993052][ T24] usb 5-1: SerialNumber: syz [ 515.214312][ T24] usb 5-1: 0:2 : does not exist [ 515.308955][ T24] usb 5-1: USB disconnect, device number 125 [ 515.353761][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.457799][T12519] fuse: Unknown parameter '' [ 516.157311][ T30] audit: type=1326 audit(1750666672.831:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.1.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a218e929 code=0x7fc00000 [ 516.403348][ T24] usb 3-1: USB disconnect, device number 122 [ 516.889405][ T24] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 517.187024][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 517.205934][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 517.224773][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 517.240991][T12544] cgroup: fork rejected by pids controller in /syz0 [ 517.252578][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 517.262839][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 517.298236][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 517.362386][ T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 517.428013][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 517.466816][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.561752][ T9] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 517.616730][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.699206][ T9] usb 2-1: config 0 has no interface number 0 [ 517.713004][ T9] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 517.853837][ T9] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 517.887331][ T30] audit: type=1804 audit(1750666674.571:1415): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1660" name="/newroot/325/file1" dev="fuse" ino=1 res=1 errno=0 [ 517.944710][ T5882] usb 3-1: USB disconnect, device number 123 [ 517.953259][ T9] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 518.016124][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.095517][ T9] usb 2-1: Product: syz [ 518.391865][ T9] usb 2-1: Manufacturer: syz [ 518.427779][ T9] usb 2-1: SerialNumber: syz [ 518.446047][ T9] usb 2-1: config 0 descriptor?? [ 519.099342][ T5882] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 519.159865][T12540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.209876][T12540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.317775][ T9] usb 2-1: USB disconnect, device number 103 [ 519.326007][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 519.394722][ T5882] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 519.407487][ T5882] usb 5-1: config 8 has no interface number 0 [ 519.428567][ T5882] usb 5-1: config 8 interface 206 has no altsetting 0 [ 519.438991][ T5882] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 519.458697][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.470204][ T5882] usb 5-1: Product: syz [ 519.474379][ T5882] usb 5-1: Manufacturer: syz [ 519.499445][ T5882] usb 5-1: SerialNumber: syz [ 519.529366][ T5902] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 519.735630][T12593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.754273][ T5902] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 519.776185][ T5902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.792894][T12593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.809246][ T5902] usb 6-1: config 0 has no interface number 0 [ 519.839442][ T5902] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 519.889222][ T5902] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.417897][ T5902] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 520.427142][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.435283][ T5902] usb 6-1: Product: syz [ 520.440775][ T5902] usb 6-1: Manufacturer: syz [ 520.445459][ T5902] usb 6-1: SerialNumber: syz [ 520.462986][ T5902] usb 6-1: config 0 descriptor?? [ 520.530626][ T5882] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 520.549879][ T5882] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 520.557338][ T5882] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 520.579111][ T5882] usb 5-1: USB disconnect, device number 126 [ 520.607001][ T5882] garmin_gps 5-1:8.206: device disconnected [ 520.880147][ T5902] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 521.031614][ T5902] usb 6-1: USB disconnect, device number 64 [ 522.244039][T12620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1669'. [ 522.259427][T12620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1669'. [ 523.017354][T12642] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 524.490954][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'. [ 525.166694][T12690] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 525.542893][T12693] input: syz0 as /devices/virtual/input/input39 [ 526.375490][T12707] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.004709][T12707] bridge_slave_1 (unregistering): left allmulticast mode [ 527.120930][T12707] bridge_slave_1 (unregistering): left promiscuous mode [ 527.153655][T12707] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.589298][ T24] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 527.667899][T12720] netlink: 'syz.5.1693': attribute type 10 has an invalid length. [ 527.714934][ T30] audit: type=1326 audit(1750666684.401:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511078e929 code=0x7ffc0000 [ 527.767676][ T30] audit: type=1326 audit(1750666684.401:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f511078e929 code=0x7ffc0000 [ 527.797298][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1693'. [ 527.808196][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1693'. [ 527.818292][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 527.830703][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1693'. [ 527.840211][ T30] audit: type=1326 audit(1750666684.401:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511078e929 code=0x7ffc0000 [ 527.865337][ T24] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 527.878599][ T24] usb 3-1: config 0 has no interface number 0 [ 527.885332][ T30] audit: type=1326 audit(1750666684.431:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f511078e929 code=0x7ffc0000 [ 527.921273][ T24] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 527.930731][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.952511][ T24] usb 3-1: Product: syz [ 527.957733][ T30] audit: type=1326 audit(1750666684.431:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511078e929 code=0x7ffc0000 [ 527.982227][ T24] usb 3-1: Manufacturer: syz [ 527.988467][ T24] usb 3-1: SerialNumber: syz [ 527.997797][ T24] usb 3-1: config 0 descriptor?? [ 528.006732][ T24] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 528.014485][ T30] audit: type=1326 audit(1750666684.431:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f51107907bc code=0x7ffc0000 [ 528.040448][ T30] audit: type=1326 audit(1750666684.431:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f51107906f4 code=0x7ffc0000 [ 528.065453][ T30] audit: type=1326 audit(1750666684.431:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f51107906f4 code=0x7ffc0000 [ 528.110783][T12724] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1694'. [ 528.128881][ T30] audit: type=1326 audit(1750666684.431:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511078e929 code=0x7ffc0000 [ 528.154630][ T30] audit: type=1326 audit(1750666684.431:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f511078e929 code=0x7ffc0000 [ 528.422065][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.489915][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.756047][T12744] netlink: 'syz.5.1696': attribute type 1 has an invalid length. [ 528.939630][ T44] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 529.039627][T12753] kvm: user requested TSC rate below hardware speed [ 529.049511][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.085985][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.099447][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 529.276812][ T24] gspca_topro: reg_w err -71 [ 529.290291][ T44] usb 5-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 529.304251][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.312503][ T24] gspca_topro: Sensor soi763a [ 529.338360][ T44] usb 5-1: config 0 descriptor?? [ 529.345289][ T24] usb 3-1: USB disconnect, device number 124 [ 529.368877][ T44] usblcd 5-1:0.0: USBLCD model not supported. [ 529.564176][T12740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.609654][T12740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.680672][ T24] usb 5-1: USB disconnect, device number 127 [ 530.509707][T12767] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 530.592810][T12765] netlink: 'syz.1.1704': attribute type 7 has an invalid length. [ 530.784635][T12765] : entered promiscuous mode [ 530.999259][ T9] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 531.154434][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.178432][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 531.186622][T12778] delete_channel: no stack [ 531.207789][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.225013][ T9] usb 6-1: config 0 descriptor?? [ 531.234373][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 531.379334][ T24] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 531.429281][ T44] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 531.440823][T12770] binder: BC_ATTEMPT_ACQUIRE not supported [ 531.446786][T12770] binder: 12769:12770 ioctl c0306201 200000000540 returned -22 [ 531.530263][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 531.542012][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 531.558709][ T24] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 531.578513][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=6f.97 [ 531.587962][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.597027][ T24] usb 2-1: Product: syz [ 531.602950][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.614655][ T24] usb 2-1: Manufacturer: syz [ 531.629623][ T24] usb 2-1: SerialNumber: syz [ 531.636515][ T44] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 531.647467][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.657761][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 531.659659][T12770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.682654][ T44] usb 3-1: config 0 descriptor?? [ 531.703770][T12770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.117301][T12770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.132243][T12770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.150451][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 532.163656][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 532.215219][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 532.281892][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 532.319723][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 532.329792][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 532.336866][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 532.346500][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 532.361010][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 532.371923][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 532.379768][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 532.386905][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 532.394046][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 532.401237][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 532.414879][ T9] pwc: Registered as video103. [ 532.435800][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input40 [ 532.457580][ T9] usb 6-1: USB disconnect, device number 65 [ 533.206082][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 533.206101][ T30] audit: type=1326 audit(1750666689.891:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.5.1714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f511078e929 code=0x0 [ 534.248591][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 534.264889][ T24] pn533_usb 2-1:2.0: NFC: Could not find bulk-in or bulk-out endpoint [ 534.283645][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 534.315240][ T24] usb 2-1: USB disconnect, device number 104 [ 534.334442][ T44] usb 3-1: USB disconnect, device number 125 [ 535.999346][ T5882] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 536.174244][ T5882] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 536.252673][ T5882] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 536.359828][ T5882] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 536.399342][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.439262][ T24] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 536.475822][ T5882] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 536.540541][ T5882] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 536.576887][T12787] delete_channel: no stack [ 536.591304][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.709213][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 536.721549][T12818] delete_channel: no stack [ 536.732028][T12818] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 536.749372][ T5882] usb 2-1: USB disconnect, device number 105 [ 536.778769][ T24] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 536.812173][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.839474][ T24] usb 6-1: Product: syz [ 536.852023][ T24] usb 6-1: Manufacturer: syz [ 536.867834][ T24] usb 6-1: SerialNumber: syz [ 536.894450][ T24] usb 6-1: config 0 descriptor?? [ 537.040626][T12834] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1725'. [ 537.085729][T12834] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1725'. [ 537.137643][T12838] fuse: Bad value for 'fd' [ 537.144881][T12838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1727'. [ 537.378553][T12845] netlink: 'syz.4.1728': attribute type 4 has an invalid length. [ 537.387239][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 537.411550][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 537.433340][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 537.502094][ T24] usb 6-1: media controller created [ 537.532618][ T44] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 537.565375][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 537.689237][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 537.697337][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 537.706844][ T44] usb 3-1: config 127 has an invalid interface number: 181 but max is 0 [ 537.955895][ T44] usb 3-1: config 127 has no interface number 0 [ 537.963185][ T44] usb 3-1: config 127 interface 181 altsetting 249 bulk endpoint 0xC has invalid maxpacket 64 [ 537.973725][ T44] usb 3-1: config 127 interface 181 altsetting 249 bulk endpoint 0x6 has invalid maxpacket 64 [ 537.984299][ T44] usb 3-1: config 127 interface 181 has no altsetting 0 [ 537.997015][ T44] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=12.8b [ 538.006651][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.169615][ T44] usb 3-1: Product: syz [ 538.173995][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 538.333580][ T44] usb 3-1: Manufacturer: syz [ 538.338393][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 538.359280][ T44] usb 3-1: SerialNumber: syz [ 538.372116][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 538.723249][T12843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 538.739453][T12843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 539.096635][T12843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.179872][T12843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.297705][ T24] usb 6-1: USB disconnect, device number 66 [ 539.400540][ T30] audit: type=1326 audit(1750666696.081:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12833 comm="syz.2.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702c38e929 code=0x7fc00000 [ 539.481674][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 539.582675][ T44] kvaser_usb 3-1:127.181: error -ENODEV: Cannot get usb endpoint(s) [ 539.608948][ T44] usb 3-1: USB disconnect, device number 126 [ 540.727443][T12870] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1735'. [ 540.959715][T12879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1738'. [ 541.059261][T12879] macvlan2: left promiscuous mode [ 541.064595][T12879] bond0: left promiscuous mode [ 541.071226][T12879] bridge0: port 3(macvlan2) entered disabled state [ 541.160423][T12879] bridge_slave_0: left promiscuous mode [ 541.203069][T12879] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.289921][ T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 541.509799][T12886] program syz.1.1740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.633342][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.659534][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.692778][ T44] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 541.724218][ T44] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 541.737765][ T44] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 541.774944][ T44] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 541.784417][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.793520][ T44] usb 5-1: Product: syz [ 541.806417][ T44] usb 5-1: Manufacturer: syz [ 541.820484][ T44] usb 5-1: SerialNumber: syz [ 542.643869][T12896] macvlan1: entered promiscuous mode [ 542.665341][T12898] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1743'. [ 542.677598][T12896] macvlan1: left promiscuous mode [ 543.659054][T12903] syz.1.1744 (12903): drop_caches: 1 [ 543.906406][ T44] cdc_ncm 5-1:1.0: bind() failure [ 543.912990][ T44] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 543.945179][ T44] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 544.015877][ T44] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 544.045807][ T44] cdc_ncm 5-1:1.1: bind() failure [ 544.055030][T12913] fuse: Invalid gid '0000000000000000000000000000000000000000003' [ 544.066429][ T44] usbtest 5-1:1.1: couldn't get endpoints, -22 [ 544.089562][ T44] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 544.126881][ T44] usb 5-1: USB disconnect, device number 2 [ 544.529472][ T5882] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 544.609431][ T5902] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 544.779451][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 544.806703][ T5902] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 544.870391][ T5902] usb 3-1: config 0 has no interface number 0 [ 544.880158][ T5902] usb 3-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 544.924562][ T5902] usb 3-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 544.956742][T12936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 544.970136][ T5902] usb 3-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee [ 544.981974][T12936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1756'. [ 544.991227][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.000209][T12936] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1756'. [ 545.009469][ T5902] usb 3-1: Product: syz [ 545.013691][ T5902] usb 3-1: Manufacturer: syz [ 545.018536][ T5902] usb 3-1: SerialNumber: syz [ 545.030160][ T5902] usb 3-1: config 0 descriptor?? [ 545.059535][T12924] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 545.068818][T12924] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 545.288016][T12923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.319861][T12923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.378227][ T5902] asix 3-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 545.407958][ T5902] asix 3-1:0.255: probe with driver asix failed with error -71 [ 545.436016][ T5902] usb 3-1: USB disconnect, device number 127 [ 546.253061][ T44] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 546.423327][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 546.505723][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 546.518782][ T44] usb 2-1: config 2 has an invalid interface number: 9 but max is 0 [ 546.528728][ T44] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 546.542732][ T44] usb 2-1: config 2 has no interface number 0 [ 546.548970][ T44] usb 2-1: config 2 interface 9 altsetting 10 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 546.632687][ T44] usb 2-1: config 2 interface 9 altsetting 10 bulk endpoint 0x8E has invalid maxpacket 32 [ 546.651419][ T44] usb 2-1: config 2 interface 9 altsetting 10 endpoint 0xA has invalid wMaxPacketSize 0 [ 546.794312][ T44] usb 2-1: config 2 interface 9 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 546.808812][ T44] usb 2-1: config 2 interface 9 has no altsetting 0 [ 546.909830][ T44] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=6f.97 [ 546.923691][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.932554][ T44] usb 2-1: Product: syz [ 546.936839][ T44] usb 2-1: Manufacturer: syz [ 546.942029][ T44] usb 2-1: SerialNumber: syz [ 546.972953][T12947] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 547.185934][ T44] pn533_usb 2-1:2.9: NFC: Could not find bulk-in or bulk-out endpoint [ 547.261581][ T44] usb 2-1: USB disconnect, device number 107 [ 547.589233][ T5902] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 547.759210][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 547.771400][ T5902] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 547.779992][ T5902] usb 5-1: config 0 has no interface number 0 [ 547.799290][ T5902] usb 5-1: config 0 interface 12 has no altsetting 0 [ 547.818243][ T5902] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 547.833378][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.856615][ T5902] usb 5-1: Product: syz [ 547.867859][ T5902] usb 5-1: Manufacturer: syz [ 547.876804][ T5902] usb 5-1: SerialNumber: syz [ 547.908250][ T5902] usb 5-1: config 0 descriptor?? [ 548.157106][T12972] netlink: 'syz.1.1765': attribute type 9 has an invalid length. [ 548.165287][T12972] netlink: 212160 bytes leftover after parsing attributes in process `syz.1.1765'. [ 548.579548][T12975] netlink: 'syz.2.1767': attribute type 1 has an invalid length. [ 548.624329][T12975] 8021q: adding VLAN 0 to HW filter on device bond4 [ 548.712602][T12975] bond4: (slave veth5): Enslaving as an active interface with a down link [ 548.756645][T12975] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 549.358174][ T5902] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 549.365982][ T5902] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 549.381346][ T5902] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 549.405170][ T5902] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 549.437435][ T5902] usb 5-1: USB disconnect, device number 3 [ 549.679332][ T44] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 549.839380][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 549.851992][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 549.957421][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 549.970843][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 549.982909][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033688400: rx timeout, send abort [ 550.269334][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 550.296490][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 550.312739][ T44] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 550.322198][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.330433][ T44] usb 2-1: Product: syz [ 550.334668][ T44] usb 2-1: Manufacturer: syz [ 550.339403][ T44] usb 2-1: SerialNumber: syz [ 550.357357][ T44] usb 2-1: config 0 descriptor?? [ 550.379490][ T44] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input41 [ 550.477525][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803295cc00: rx timeout, send abort [ 550.486243][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033688400: abort rx timeout. Force session deactivation [ 550.554243][T12999] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 550.560841][T12999] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 550.590149][T12999] vhci_hcd vhci_hcd.0: Device attached [ 550.674869][ T44] usb 2-1: USB disconnect, device number 108 [ 550.749699][ T5882] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 550.782303][T13000] vhci_hcd: connection closed [ 550.782498][ T12] vhci_hcd: stop threads [ 550.794408][ T12] vhci_hcd: release socket [ 550.798915][ T12] vhci_hcd: disconnect device [ 550.832527][ T5902] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 550.840326][ T5902] usb 41-1: enqueue for inactive port 0 [ 550.909582][ T5902] vhci_hcd: vhci_device speed not set [ 550.916611][ T5882] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 550.926375][ T5882] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 550.936242][ T5882] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 550.951942][ T5882] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 550.961094][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 550.969468][ T5882] usb 6-1: Product: syz [ 550.973665][ T5882] usb 6-1: Manufacturer: syz [ 550.978263][ T5882] usb 6-1: SerialNumber: syz [ 550.986015][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803295cc00: abort rx timeout. Force session deactivation [ 551.000584][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 551.159246][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 551.177218][ T24] usb 3-1: config 0 has an invalid interface number: 195 but max is 0 [ 551.198372][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.199476][ T5882] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 551.218910][ T24] usb 3-1: config 0 has no interface number 0 [ 551.265633][ T24] usb 3-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 551.295528][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.333295][ T24] usb 3-1: Product: syz [ 551.338315][ T24] usb 3-1: Manufacturer: syz [ 551.356712][ T24] usb 3-1: SerialNumber: syz [ 551.386743][ T24] usb 3-1: config 0 descriptor?? [ 551.397589][ T24] usb 3-1: bad CDC descriptors [ 551.436491][T13019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.458069][T13019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.469582][ T44] usb 6-1: USB disconnect, device number 67 [ 551.487436][ T44] usblp0: removed [ 551.605500][ T5882] usb 3-1: USB disconnect, device number 2 [ 551.661036][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 551.821974][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 551.857741][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 551.868251][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 551.878428][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 551.894608][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 551.904895][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.949317][ T44] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 552.002118][ T24] usb 5-1: config 0 descriptor?? [ 552.113173][ T44] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 552.199222][ T44] usb 6-1: config 0 interface 0 has no altsetting 0 [ 552.215937][ T24] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 552.224210][ T24] hdpvr 5-1:0.0: device init failed [ 552.232829][ T44] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 552.242626][ T24] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 552.250689][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.307625][ T44] usb 6-1: Product: syz [ 552.531865][ T44] usb 6-1: Manufacturer: syz [ 552.536825][ T24] usb 5-1: USB disconnect, device number 4 [ 552.542918][ T44] usb 6-1: SerialNumber: syz [ 552.558385][ T44] usb 6-1: config 0 descriptor?? [ 552.574339][ T44] usb 6-1: selecting invalid altsetting 0 [ 552.772109][T13025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.791525][T13042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.820364][T13025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.832782][T13042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.934951][T13049] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1784'. [ 552.947667][T13049] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1784'. [ 553.072100][T13052] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1786'. [ 553.219762][ T5902] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 553.370689][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 553.378263][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 553.388427][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 553.398254][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 553.413693][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 553.425563][ T5902] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 553.437964][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.447123][ T5902] usb 2-1: Product: syz [ 553.452519][ T5902] usb 2-1: Manufacturer: syz [ 553.466585][ T5902] usb 2-1: SerialNumber: syz [ 553.651168][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 553.672956][ T5902] usb 2-1: config 0 descriptor?? [ 553.706070][ T5902] usb 2-1: no audio or video endpoints found [ 553.886835][ T9] usb 5-1: device descriptor read/64, error -71 [ 554.129224][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 554.261906][T13069] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 554.322751][ T9] usb 5-1: device descriptor read/64, error -71 [ 554.439858][ T9] usb usb5-port1: attempt power cycle [ 554.512247][ T5882] usb 2-1: USB disconnect, device number 109 [ 554.714079][ T24] usb 6-1: USB disconnect, device number 68 [ 554.860327][T13077] netlink: 'syz.5.1794': attribute type 21 has an invalid length. [ 554.869343][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 554.878947][T13077] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1794'. [ 554.920061][ T9] usb 5-1: device descriptor read/8, error -71 [ 554.987345][T13082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.999105][T13082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.239252][ T24] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 555.289302][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 555.332164][T13095] loop2: detected capacity change from 0 to 7 [ 555.335558][ T9] usb 5-1: device descriptor read/8, error -71 [ 555.341740][T13095] Dev loop2: unable to read RDB block 7 [ 555.358063][T13095] loop2: unable to read partition table [ 555.373697][T13093] team0: Port device bridge1 removed [ 555.374631][T13095] loop2: partition table beyond EOD, truncated [ 555.419586][T13095] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 555.479965][ T9] usb usb5-port1: unable to enumerate USB device [ 555.487454][ T44] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 555.646369][T13102] QAT: Invalid ioctl -2080336865 [ 555.669540][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 555.678436][ T44] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 555.713829][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 555.736405][ T44] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 555.786571][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.814421][ T44] usb 3-1: config 0 descriptor?? [ 556.047802][T13107] netlink: 'syz.2.1796': attribute type 10 has an invalid length. [ 556.172418][T13110] macvlan0: entered allmulticast mode [ 556.185654][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 556.197708][T13110] veth1_vlan: entered allmulticast mode [ 556.204009][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 556.244634][ T44] usb 3-1: USB disconnect, device number 4 [ 556.587733][T13120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1807'. [ 556.610701][ T24] usb 6-1: device descriptor read/64, error -71 [ 556.860259][ T24] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 556.898854][T13126] Cannot find del_set index 2 as target [ 557.019713][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 557.032164][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 557.055234][T13130] macsec0: entered promiscuous mode [ 557.060755][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 557.072023][T13130] macsec0: entered allmulticast mode [ 557.078650][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 252, changing to 11 [ 557.090314][T13130] veth1_macvtap: entered allmulticast mode [ 557.105647][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 50974, setting to 1024 [ 557.133186][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 557.148561][ T24] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 557.165540][ T24] usb 6-1: Manufacturer: syz [ 557.184950][ T24] usb 6-1: config 0 descriptor?? [ 557.200242][T13110] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 557.216847][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 557.221569][ T24] smsusb:smsusb_probe: board id=9, interface number 0 [ 557.236528][ T9] usb 5-1: config 84 has an invalid interface number: 116 but max is 0 [ 557.247518][ T24] smsusb:siano_media_device_register: media controller created [ 557.255584][ T9] usb 5-1: config 84 has no interface number 0 [ 557.276370][ T9] usb 5-1: config 84 interface 116 has no altsetting 0 [ 557.299646][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=811c, bcdDevice=ac.0d [ 557.344992][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.365939][ T9] usb 5-1: Product: syz [ 557.375317][ T9] usb 5-1: Manufacturer: syz [ 557.404987][ T9] usb 5-1: SerialNumber: syz [ 557.405543][ T24] ------------[ cut here ]------------ [ 557.416100][ T24] usb 6-1: BOGUS urb xfer, pipe 3 != type 1 [ 557.491917][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc82/0x1890 [ 557.501702][ T24] Modules linked in: [ 557.506073][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 557.518380][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 557.528628][ T24] Workqueue: usb_hub_wq hub_event [ 557.533848][ T24] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 557.539926][ T24] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 80 2c 34 8c 4c 89 f6 4c 89 fa e8 ff 2a 63 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 b0 28 de 8e e8 85 [ 557.560355][ T24] RSP: 0018:ffffc900001e6ad0 EFLAGS: 00010246 [ 557.566891][ T24] RAX: dc4ea1f421f1b800 RBX: ffff88806e5d2500 RCX: 0000000000100000 [ 557.575064][ T24] RDX: ffffc9001aab6000 RSI: 0000000000042da2 RDI: 0000000000042da3 [ 557.583260][ T24] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 557.591441][ T24] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffffffff8c342a6c [ 557.599626][ T24] R13: dffffc0000000000 R14: ffffffff8c349560 R15: ffff8880782cf300 [ 557.607735][ T24] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 557.617210][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 557.624221][ T24] CR2: 000000110c412c06 CR3: 0000000034536000 CR4: 00000000003526f0 [ 557.632474][ T24] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 557.640759][ T24] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 557.648869][ T24] Call Trace: [ 557.652308][ T24] [ 557.655325][ T24] smsusb_start_streaming+0x22/0x340 [ 557.660790][ T24] smsusb_probe+0x18f6/0x2060 [ 557.665606][ T24] ? __pfx_smsusb_probe+0x10/0x10 [ 557.670840][ T24] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 557.671172][ T9] pegasus 5-1:84.116: probe with driver pegasus failed with error -71 [ 557.676483][ T24] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 557.690979][ T24] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 557.697461][ T24] ? __pm_runtime_set_status+0x785/0xa50 [ 557.698267][ T9] usb 5-1: USB disconnect, device number 9 [ 557.703250][ T24] usb_probe_interface+0x641/0xbc0 [ 557.703297][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 557.703320][ T24] really_probe+0x26a/0x9a0 [ 557.703358][ T24] __driver_probe_device+0x18c/0x2f0 [ 557.703389][ T24] driver_probe_device+0x4f/0x430 [ 557.735456][ T24] __device_attach_driver+0x2ce/0x530 [ 557.741036][ T24] bus_for_each_drv+0x251/0x2e0 [ 557.746021][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 557.753467][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 557.758983][ T24] __device_attach+0x2b8/0x400 [ 557.763933][ T24] ? __pfx___device_attach+0x10/0x10 [ 557.769401][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 557.774723][ T24] bus_probe_device+0x185/0x260 [ 557.779723][ T24] device_add+0x7b6/0xb50 [ 557.784183][ T24] usb_set_configuration+0x1a87/0x20e0 [ 557.789967][ T24] usb_generic_driver_probe+0x8d/0x150 [ 557.795574][ T24] usb_probe_device+0x1c1/0x390 [ 557.800637][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 557.806137][ T24] really_probe+0x26a/0x9a0 [ 557.810876][ T24] __driver_probe_device+0x18c/0x2f0 [ 557.816289][ T24] driver_probe_device+0x4f/0x430 [ 557.821514][ T24] __device_attach_driver+0x2ce/0x530 [ 557.827030][ T24] bus_for_each_drv+0x251/0x2e0 [ 557.832053][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 557.838042][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 557.843552][ T24] __device_attach+0x2b8/0x400 [ 557.848395][ T24] ? __pfx___device_attach+0x10/0x10 [ 557.853897][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 557.859253][ T24] bus_probe_device+0x185/0x260 [ 557.864246][ T24] device_add+0x7b6/0xb50 [ 557.868690][ T24] usb_new_device+0xa39/0x16c0 [ 557.874134][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 557.879857][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 557.885184][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.890589][ T24] hub_event+0x2941/0x4a00 [ 557.895198][ T24] ? __pfx_hub_event+0x10/0x10 [ 557.900161][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 557.906009][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 557.911398][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 557.917262][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 557.923207][ T24] process_scheduled_works+0xae1/0x17b0 [ 557.929010][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 557.935275][ T24] worker_thread+0x8a0/0xda0 [ 557.940051][ T24] kthread+0x70e/0x8a0 [ 557.944243][ T24] ? __pfx_worker_thread+0x10/0x10 [ 557.949597][ T24] ? __pfx_kthread+0x10/0x10 [ 557.954318][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 557.959706][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.965077][ T24] ? __pfx_kthread+0x10/0x10 [ 557.969898][ T24] ret_from_fork+0x3fc/0x770 [ 557.974614][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 557.979874][ T24] ? __switch_to_asm+0x39/0x70 [ 557.984738][ T24] ? __switch_to_asm+0x33/0x70 [ 557.989652][ T24] ? __pfx_kthread+0x10/0x10 [ 557.994361][ T24] ret_from_fork_asm+0x1a/0x30 [ 557.999338][ T24] [ 558.002463][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 558.009775][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 558.021705][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 558.031804][ T24] Workqueue: usb_hub_wq hub_event [ 558.036901][ T24] Call Trace: [ 558.040208][ T24] [ 558.043155][ T24] dump_stack_lvl+0x99/0x250 [ 558.047777][ T24] ? __asan_memcpy+0x40/0x70 [ 558.052385][ T24] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.057599][ T24] ? __pfx__printk+0x10/0x10 [ 558.062233][ T24] panic+0x2db/0x790 [ 558.066179][ T24] ? __pfx_panic+0x10/0x10 [ 558.070639][ T24] ? ret_from_fork_asm+0x1a/0x30 [ 558.075598][ T24] __warn+0x31b/0x4b0 [ 558.079603][ T24] ? usb_submit_urb+0xc82/0x1890 [ 558.084561][ T24] ? usb_submit_urb+0xc82/0x1890 [ 558.089520][ T24] report_bug+0x2be/0x4f0 [ 558.093871][ T24] ? usb_submit_urb+0xc82/0x1890 [ 558.098854][ T24] ? usb_submit_urb+0xc82/0x1890 [ 558.103812][ T24] ? usb_submit_urb+0xc84/0x1890 [ 558.108773][ T24] handle_bug+0x84/0x160 [ 558.113029][ T24] exc_invalid_op+0x1a/0x50 [ 558.117552][ T24] asm_exc_invalid_op+0x1a/0x20 [ 558.122417][ T24] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 558.127980][ T24] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 80 2c 34 8c 4c 89 f6 4c 89 fa e8 ff 2a 63 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 b0 28 de 8e e8 85 [ 558.147607][ T24] RSP: 0018:ffffc900001e6ad0 EFLAGS: 00010246 [ 558.153779][ T24] RAX: dc4ea1f421f1b800 RBX: ffff88806e5d2500 RCX: 0000000000100000 [ 558.161803][ T24] RDX: ffffc9001aab6000 RSI: 0000000000042da2 RDI: 0000000000042da3 [ 558.169792][ T24] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 558.177798][ T24] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffffffff8c342a6c [ 558.185808][ T24] R13: dffffc0000000000 R14: ffffffff8c349560 R15: ffff8880782cf300 [ 558.193848][ T24] smsusb_start_streaming+0x22/0x340 [ 558.199169][ T24] smsusb_probe+0x18f6/0x2060 [ 558.203878][ T24] ? __pfx_smsusb_probe+0x10/0x10 [ 558.208917][ T24] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 558.214480][ T24] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 558.220395][ T24] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 558.226748][ T24] ? __pm_runtime_set_status+0x785/0xa50 [ 558.232404][ T24] usb_probe_interface+0x641/0xbc0 [ 558.237544][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 558.243185][ T24] really_probe+0x26a/0x9a0 [ 558.247710][ T24] __driver_probe_device+0x18c/0x2f0 [ 558.253015][ T24] driver_probe_device+0x4f/0x430 [ 558.258060][ T24] __device_attach_driver+0x2ce/0x530 [ 558.263550][ T24] bus_for_each_drv+0x251/0x2e0 [ 558.268424][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 558.274335][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 558.279751][ T24] __device_attach+0x2b8/0x400 [ 558.284542][ T24] ? __pfx___device_attach+0x10/0x10 [ 558.289847][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 558.295061][ T24] bus_probe_device+0x185/0x260 [ 558.299963][ T24] device_add+0x7b6/0xb50 [ 558.304309][ T24] usb_set_configuration+0x1a87/0x20e0 [ 558.309831][ T24] usb_generic_driver_probe+0x8d/0x150 [ 558.315314][ T24] usb_probe_device+0x1c1/0x390 [ 558.320182][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 558.325564][ T24] really_probe+0x26a/0x9a0 [ 558.330089][ T24] __driver_probe_device+0x18c/0x2f0 [ 558.335399][ T24] driver_probe_device+0x4f/0x430 [ 558.340446][ T24] __device_attach_driver+0x2ce/0x530 [ 558.345840][ T24] bus_for_each_drv+0x251/0x2e0 [ 558.350713][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 558.356619][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 558.362030][ T24] __device_attach+0x2b8/0x400 [ 558.366819][ T24] ? __pfx___device_attach+0x10/0x10 [ 558.372131][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 558.377351][ T24] bus_probe_device+0x185/0x260 [ 558.382227][ T24] device_add+0x7b6/0xb50 [ 558.386573][ T24] usb_new_device+0xa39/0x16c0 [ 558.391369][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 558.396589][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.401812][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.407026][ T24] hub_event+0x2941/0x4a00 [ 558.411505][ T24] ? __pfx_hub_event+0x10/0x10 [ 558.416295][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 558.422061][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.427276][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 558.433013][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 558.438754][ T24] process_scheduled_works+0xae1/0x17b0 [ 558.444340][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 558.450354][ T24] worker_thread+0x8a0/0xda0 [ 558.454990][ T24] kthread+0x70e/0x8a0 [ 558.459098][ T24] ? __pfx_worker_thread+0x10/0x10 [ 558.464255][ T24] ? __pfx_kthread+0x10/0x10 [ 558.468870][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.474118][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.479348][ T24] ? __pfx_kthread+0x10/0x10 [ 558.483967][ T24] ret_from_fork+0x3fc/0x770 [ 558.488584][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 558.493728][ T24] ? __switch_to_asm+0x39/0x70 [ 558.498505][ T24] ? __switch_to_asm+0x33/0x70 [ 558.503278][ T24] ? __pfx_kthread+0x10/0x10 [ 558.507880][ T24] ret_from_fork_asm+0x1a/0x30 [ 558.512677][ T24] [ 558.516081][ T24] Kernel Offset: disabled [ 558.520426][ T24] Rebooting in 86400 seconds..