last executing test programs: 4m8.92663447s ago: executing program 4 (id=449): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000300)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010100, 0x1, 0x1, [@local]}, 0x14) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r4, @ANYRES64=r5], 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000002c0)=0x4, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}, @CTA_ID={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000894}, 0x8000801) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c00c9242bbd7000fbdbdf250700000040c2f7fe22299a9cf5623cf168e1723f2fde4fd4d4b20f1153d819ee100ba56db4d5e5955bb72ae71345a031f119699386e40b10caa88efc4e5adb9173c37c57bc1ebc07be6ab5d983d76c9017db54abfb0d20f20566cd30c8abe03be0b459ba677ba922982e4984ec", @ANYRES32=r1, @ANYBLOB="80001e0a0a000200aaaaaaaaaa1b0000"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 4m7.415686211s ago: executing program 4 (id=455): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) r1 = inotify_init1(0x0) inotify_add_watch(r1, 0x0, 0x40000000) socket$key(0xf, 0x3, 0x2) r2 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x7358, 0x800, 0xffffffff, 0x8}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r5, 0x3516, 0x0, 0x20, 0x0, 0x0) dup(r5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioprio_set$pid(0x2, 0x0, 0x0) 4m6.997586804s ago: executing program 4 (id=458): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000560, 0x800000000000000], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000001000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138) 4m6.483670953s ago: executing program 4 (id=461): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0x100000201, 0xfffffffffffffffc) syz_emit_ethernet(0x5e, &(0x7f0000000bc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @private0, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @empty}}}}}}, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) futex_waitv(&(0x7f0000001240)=[{0x1, 0x0, 0x86, 0x3f}], 0x1, 0x0, 0x0, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m5.200862619s ago: executing program 4 (id=466): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="6a2000010010000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x201, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x820}, 0x94) 4m4.773038861s ago: executing program 4 (id=470): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000002000010027bd7000400000000a508080000000031600000014000200fc02000000000000000000004000000014000100200100000000"], 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYBLOB="00000000000000083c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) 4m3.637614041s ago: executing program 32 (id=470): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000002000010027bd7000400000000a508080000000031600000014000200fc02000000000000000000004000000014000100200100000000"], 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYBLOB="00000000000000083c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) 7.941077361s ago: executing program 3 (id=1522): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x4, 0x6, 0x0, 'queue0\x00', 0x10000}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000a6b99b350000000000000000000000000014e06e67a6a00acf6bcc3674cfe3f8738747d0cea2c5960baea66812fa7e1f9fd604d309f0cfdb94e45e77f4d471c21c0e4f0a445aab2d3632a2ca926b859dd3d803f10a1b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001400b59527bd7000ffdbdf250a1700ff", @ANYRES32=r4, @ANYBLOB="140002000000003f00000000000000000000000800000100200100000000000000000000000000004a09000001800000060000007117381881776e1b"], 0x54}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0xa0, 0x24, 0x404, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xd, 0xfff3}, {0xa, 0x10}, {0x1a, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xf8, 0xf8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x400}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0x4, 0xffffffe0, 0x1, 0x8, 0xfc000000, 0xa}}, {0x18, 0x2, [0xc, 0x3, 0x8, 0x0, 0x80, 0x800, 0x100, 0x7, 0x78, 0x4]}}, {{0x1c, 0x1, {0xff, 0x8, 0x1ff, 0x2, 0xa729db6235facb7b, 0x2, 0x4cc, 0x1}}, {0x6, 0x2, [0xd]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}]}, 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000040470000006200000018010000646c6c250000000000202020639af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008504000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, 0x0) 7.804584314s ago: executing program 3 (id=1524): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000200)={0x20, 0x22, 0xcc, {0xcc, 0x11d4b3297ecf62f6, "9206734e90ae8e66416eadc96f07cd685aee38e2cce87f81fab5561ea7d6fd72b3b96e86c10a4454045677bd0045029ee84ce3c0fba2bc86ffae58a3334524e9fe7593d4ebfe063a8ffdc008e1b71adf9594f18547301b55f62a037ff31712a1219c63a28d4d2f62014b8f2f97b2badb761236d0b2371ed77c8c68a2d59c8c537d8297e9695b3017b542acb03f6a9a983f6cdf0c8df9cfdb147b1189230d0a9b99e764c0bcde3f87b58fa84db4e507b6532bf926cbf3299dc0be61aa8f47c276d668422cc1cb85cfde81"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000080)={0x20, 0x7, 0x2d, "7520aaf82945f6d664fd34937ede7cd7a91aec0325b7f42fef376176c5dfc9d1b7ce3b29b6ab5b0513e26ed97e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x3, 0x9, 0x8001, 0x7f, 0x8000, 0x0, 0x6, 0x0, 0x3, 0x1, 0x31, 0x8001}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x200}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x100}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="2b72646d61202b63707573657420aa21ccff6e536190ea3e5f77e42ec43c12519321c593c78bbe79c1d34235b38eb4ba7f3485ee0edadf9e2a9e07f149905b6404f813a6332c7342966c836a937fe4282801246a393aac20aa294a44bfad4e925eeb9feff68ab3d78ac6cc24c3ee8e1f695f2f4f"], 0xe) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, 'wg0\x00'}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.736715489s ago: executing program 3 (id=1544): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xeec, 0x20000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="c0e243", 0x3, 0x0}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000001080)=0x2b) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x40, 0x30, 0x2, "ee18"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000740)={0x14, &(0x7f0000000340)={0x20, 0x8, 0x41, {0x41, 0x0, "4656e020c2da3698ccd107cb6b05f77f9964e96ba6bfa7a2b33b1f594e17fa63b14483e48097a9ded03ad226c933887ea95c9925c43a6941e741b9a1c5c49f"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000780)={0x0, 0xd, 0x70, "b8d991dce42f3f951f20a73898242830d25d6e28c49c5072b51b7ca3006edd385457724a52b1c44b9d3d7f11492329b73e643bbccdd888c17416e1c2cbea7dca93d33e41fe4279f2921d869b6fcc005f61af451113a1cde97d942c839df5a22544b6906f44980de2b1b12c7c3be7c9c9"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x421, 0x5, 0x6, 0x4, 0x4, 0x3, 0x4, 0x4, 0x5, 0x0, 0x8000, 0xf}}, &(0x7f00000008c0)={0x20, 0x85, 0x4}, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x100}, &(0x7f0000000980)={0x20, 0x89, 0x2, 0x1}}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x3a4, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x42}}}}, [@NL80211_ATTR_PROBE_RESP={0x383, 0x91, "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"}]}, 0x3a4}}, 0xc020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x40, 0xb, 0x5c, {0x5c, 0x21, "a97f8f1759229cb19f0238435cc6507fbf70364aee3eca41e069231570dc324e5365fc1051522b793212248c193d26dc3baa6d5bb3df10b77ba85ba1102eb68cd9265f75f75ab3b1b93ed3bdfedd41d46931895fd76775678e43"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000600)={0x0, 0x6, 0xc9, "6e786c20cb0d68cfff64a49359387c69f86954a8cdb230804deb5ce95a8acf315ebc3f7969ac81e9c6195e66a23bf2f57a135286aba6518a79d0090bb4e317f6c0dcd4ff909cd418d6d5ab27e3107ad7004e6139569a8bc0b5c02d241c3bbcda14393732fe395487f4b42caa857b9672ae3c3bde67c40c7b26cb4e73bcc13762fd1a63cb8e0e2c35489b3f8ae29eee2f6bb41d7ac5c42aaedcc580b7dfd9eb55d27fca60aebbd722802c6df4491c085e8b4ae2a341b5dc40e572048a99cb406648d585c85fb47a326b"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000280)={0x20, 0x0, 0x5, {0x3, "ecbe3a"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x5}}) syz_usb_disconnect(r3) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000100)={r1}) 2.948624321s ago: executing program 1 (id=1566): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0xe0ff) 2.832544885s ago: executing program 1 (id=1568): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) read$usbfs(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0xfffb}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}], 0x38) 2.756314114s ago: executing program 1 (id=1569): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0x20000000, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd0af4adf700102c00fe800000000000000000000000000000ff0200000000000000000000000000013c40"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000050) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0xf401) 2.570542965s ago: executing program 1 (id=1572): socket$inet_smc(0x2b, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x101000) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x1501) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5882, 0x400, 0x2, 0xfffffdfc}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_create(0xfff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/tracing', 0xc0c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vim2m(&(0x7f0000000100), 0x1ff, 0x2) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=r0], 0x20) 2.326243672s ago: executing program 1 (id=1576): io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x2, 0x3bd}) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="4812ac8b05b322cfcd024c6f745753e9247ce70f0ca98c0b025ea2670e9cf799a5af8184651969b9b6c6c1ce6ee1f2b5aa40f10fb1c353197c5f6e2306f8f9ca2d98a5"], 0x44}}, 0x8000) recvmmsg(r0, 0x0, 0x0, 0x40000100, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x2d2280, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000680)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f0000000700)={0x28, 0x0, 0x0, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000580)}) io_submit(r6, 0x1, &(0x7f0000001700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xb01f, 0x5601}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000100003042dbd7000002000", @ANYRES32=0x0, @ANYBLOB='\x00'], 0x20}}, 0x4000000) syz_open_dev$media(&(0x7f0000000540), 0xfff, 0x100) 2.194434099s ago: executing program 5 (id=1578): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000180)='FREEZING\x00', 0x9) io_uring_enter(r3, 0x525b, 0xdd39, 0x8, &(0x7f0000000100)={[0x2]}, 0x8) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x18, 0x41, 0x107, 0x0, 0x7, {0x2, 0x7c}, [@nested={0x4, 0x31}]}, 0x18}}, 0x4010) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f00000000c0)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x2c, 0xffffffff, 0x2}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xd0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r8, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="e9bcf48199638b48da7eff7bb055e15ae55fdb3a3f686baf445ab487d780670b02519c4955b377d49eece29bca9b61a8", 0x30}) 1.624790866s ago: executing program 3 (id=1580): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r0) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/if_inet6\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x11}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1ff}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x8f1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x311}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0xa0}}, 0x20000141) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xdf, 0xbf, ""/191}, &(0x7f0000000140)=0x1c, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x2, &(0x7f0000000000)=[{0x14, 0x0, 0xfd, 0x4000002}, {0x6}]}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000001c0)={'macvtap0\x00', {0x2, 0x4e22, @empty}}) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000040)) 1.547010956s ago: executing program 5 (id=1581): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) semget(0x2, 0x5, 0xe00) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @name="5d677b55d939e4cd74907d42766bb30347af974eec31e0c04e38db1f1f0edcd5"}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x5}, [], {0x4, 0x4}, [{0x8, 0x4}], {0x20, 0x1}, {0x20, 0x7}}, 0x2c, 0x2) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000040)=@x25, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0) add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000340)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="85", 0x1}], 0x1}, 0x24004860) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f00000002c0), 0x0, 0x0) 1.465173366s ago: executing program 5 (id=1582): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (fail_nth: 79) 1.016619619s ago: executing program 5 (id=1584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f5ffffff000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.000694201s ago: executing program 2 (id=1585): socket$inet_smc(0x2b, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x101000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x180000, 0x4) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/tracing', 0xc0c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vim2m(&(0x7f0000000100), 0x1ff, 0x2) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=r1], 0x20) 879.675117ms ago: executing program 2 (id=1587): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020400020a0000000000000000000000020001000000000000100500000000a0030006000000000002000000ac1414ff0000000020000000010005"], 0x50}, 0x1, 0x7}, 0x0) 871.759239ms ago: executing program 5 (id=1588): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x20000, 0x20}, 0x18) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r2, r3}}, './file0\x00'}) getpeername$unix(r4, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) close(r4) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) unlink(&(0x7f00000002c0)='./file0\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x541000, 0x0) r6 = dup2(r0, r5) r7 = socket$kcm(0x29, 0xa, 0x0) sendmsg$kcm(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="c91da901ed965f074637c05598062130a9a9b326b3b63a73caabeca40bd64e67e4ecc50d879fcd80dc796bc369e934a73a0b01b0da4b0bd02a161d2158afdf34810d37c29daf416fdf8d477b39c598b1c335cd0f5bd0a6fc9070eefdf44fb4837179d45f8795f448768075edd41947ce481d15b4d707a34de3e938b0ffe201c8f4a5e2e57a6fca27abd9b346ab4d62cb6712523ac3da001bf258c8834e8ad5eacd9a79f5a6c7c3ef9fcbd602b246df0698428cb182731499d3db454c6c193cacfffdc79f356fa8223826c1c2ae3292267ec7c457179c2c59048f4c", 0xdb}], 0x1, &(0x7f0000000480)=[{0x90, 0x12c, 0x80000001, "5e76d5bf1e66b200f12c9c1da0576d1ba4d87273bb6d3c4467e616ba786b5e864cd5f73f354d62ef6055ba59e797ad098391b6afbb3287d3a2d50a6891cf3e54492bf796b87c0a5d64e4ebc5d3fcd6b577a4ac98c9233a8f445a89862e464c33e6707c1a44f2406bc809bc6b9b91db63637d0cbc362b255223eb3914c6"}, {0x20, 0x3a, 0x101, "4f9ad9dd0bfed36da7568a0d"}, {0xf8, 0x107, 0x7, "055b605b34dae67db7d34e96d3e0c255f0f13e2e1599823325d808590a666cadce883bd7e49ed18f915659c26eea3756bd9dc123a1fc6bfa8dfec4233a229c3ced3735256939841bea80793ed9d9b2d181d9879f1c7031ae4af6a34e0978f8fdd456e6736b779cd587a0791159b928294525c3554f68887d52c68ec8618d345c4e39e3898f7c2b1f4c5d525256b66a6b1580cf46357e590c1543f0cb2d332fa4c4ce0faa2cdb6d628bb17378210b6e351436d278d2684e78b3369e52013b93aedf3e9a3669fbcab87a2fc76265504cf04d207dd084617cb39503cf2aed154544011619b7"}, {0x50, 0x0, 0x3, "a0f8b25004963551a4d41c7375f0f6834114e90daeadb9b326b523cf0d7c60c340310e90a7a20ba1ca14672ef9f098e64896168f654cc1e42aa5"}], 0x1f8}, 0x4044004) openat$cgroup_subtree(r4, &(0x7f00000006c0), 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "84a88cab"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000c4}, 0x8000) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000840), 0x60000) write$qrtrtun(r9, &(0x7f0000000880)="59a9af52b7b10df2d7380f1f604582dbd0aed23d2317bc06d1c46c14eabd281184c24fc893cdc973b30eb4ba9f6763cb7037079a2f8dcb0a20df7ad85adcbb573dea9e84525a527c4af0b3136705e7f2877d4176181e26e5bd54d2f602ad0482d97179f3e2597d1a56cb5c951d523c826872eed7917915d3280ca653cc004a7e9db5dbbab1eb2e7222700a548e9991c54514ccda82c2dbda3492c90bb02ca0bccb96dcf64a72c9213e42efd23af28bdfa585e1fa2e530248349ad4ca31fc55444f48b9529dec3bd4591dd0cc8de21aec119e783331aa11c530e38d6d5b3969be2ba6fe084acc396dd2e7589c6d5cbb645295", 0xf2) getsockname$packet(r0, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000009c0)=0x14) r10 = syz_open_dev$usbfs(&(0x7f0000000a00), 0x1000, 0x541040) ioctl$USBDEVFS_FORBID_SUSPEND(r10, 0x5521) close(r4) syz_clone(0x2000, &(0x7f0000000a40)="662d18896e3aa64c3e6da75f34589993b177adddf7eaeccadd1e89c34d47026ae2daca6a373e77cb62f3e8a3886270ead6c52c9a19c81e72900d9ada04fc6e95ba8f57f33534b876840ce31de9f09b8297494f425e67aa6388736512e495f27d86b552d9c3d4d5bb6ee6248df041628bbaa4977536d25bfb28b72f9d6e2caf7308faf6cf07bfe69237175e735d667a173a3bd28e0c4c9c534e", 0x99, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="fcc75dae53ce4ab390c0e0da31f826d76845233b3643aaaa30b242bcd2884836cd19f11de5959277c4881e791ee39f7cab40564919c78988435907ab2ece7f3eec7f2df5c21c96d523b17c91c2ec092c0ad880fc572c71b574fff071080a864805a7e760f00f822b47b794479ad98c3aa15b38a3017ede68273ad64aff3e984fa7037284339f37a09a3e818e2c7b9b865621cb285ca63be511b4ee7ab0ee744cce85d494ee3e1fdc17e6055dd60d8d12b0293522f323646c3c53") mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r0, 0x436db000) read$FUSE(r4, &(0x7f0000000c40)={0x2020}, 0x2020) write$rfkill(r0, &(0x7f0000002c80)={0x5, 0x8, 0x2, 0x1, 0x1}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000002cc0)='devtmpfs\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000002fc0)=[{&(0x7f0000002d00)="7671539f5d16d24196f6f3e603279c0fb90d0f10ae2d344d56e326a3881decba7833ba65165817b47d49bdab75dc6ea1a114431b546218cea22c14dcd312f456031be93a8e0c5ca73891b6a6fa5d4ebd", 0x50}, {&(0x7f0000002d80)="ba7dc7ec988375c3cfb699910bc2947fc495ec78a965c158c7", 0x19}, {&(0x7f0000002dc0)="257d8a8a804a80486336bf43577beea3ac16564dac615e0ab87ac14e720c46d85c1ceb8a51fc916c13e34e3fa713285f3f2be0b0f7d382d80c7840bc30956cbc2eeb1ebb03c3e26d1adc5c785c394662cf44", 0x52}, {&(0x7f0000002e40)="6badf0f032ca08ce162136eda417337de4b7d625b0cb6a4c0a0972ae4b06a7d003ede91aee526630a64c8f455c188cc612c56b3cafde2d53f42076fe2e9a4ab3af8422aa91d614e4d8cd92518ab144", 0x4f}, {&(0x7f0000002ec0)="b3268f8df851a7bd24636d6761de5a62bef42e31141eca608631deb36afe0fc189caf7391c45f3acaa8793befad8aecc26a0ed1c4bf87b4fbe35ad4d34b1c41750b6afe4c08426384aceeab1bf365152ea9e151538b0d8e3a46a8cbeebab354b60779ad7ca624e3353f90cdd7a9a0375c700f77d591de3b58fffe5ba58cb8bca85448fc4c08c0a5ceddccea11f2a889d2bab95717abb429a7f810a533d5633b9948dfbf2f0aaa5e13a41", 0xaa}, {&(0x7f0000002f80)="f9229ffa5420393385e94cf78b", 0xd}], 0x6) write$binfmt_misc(r4, &(0x7f0000003040)="bd06db93914ba8de527793d7a2ec31440236ee7c5f707beb61e8d3c4c2a615ba11ba1a311478472eaabc8f8ad0", 0x2d) 776.9837ms ago: executing program 0 (id=1589): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010000304000000000000020020000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 729.937893ms ago: executing program 3 (id=1590): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000940)=[@cswp={0x58, 0x114, 0x7, {{0x2, 0x7}, &(0x7f00000006c0)=0x7, &(0x7f0000000900)=0xb, 0x16, 0xfffffffffffffff7, 0x8, 0x5, 0x2, 0xb}}], 0x58}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x0, 0x5, 0x80000080, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x258a7313}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000fc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYBLOB="040000007000fbdbdf25040000000900030073797a31000000000900030073797a31000000000900010073797a3200000000050004000100000009000100737f7a320000000005000400010000000900010073797a31000000000900010073797a3100000000"], 0x6c}, 0x1, 0x0, 0x0, 0x400c005}, 0x20004000) r5 = userfaultfd(0x80001) syz_io_uring_setup(0x98f, &(0x7f0000000140)={0x0, 0xaee2, 0x200, 0x0, 0x85}, &(0x7f0000000000)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000580), 0x0, 0x4) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket(0x8, 0x3, 0x6) r9 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r10, &(0x7f0000000180)={0x6, 0x20, 0x0, 0x20, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x14, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000640), 0x8, 0x10, &(0x7f0000000000)={0x2, 0xe, 0x200}, 0x58, 0x0, r3}, 0xd0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x20010, r10, 0x4000) syz_clone(0xa20100, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYRES64=r6], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) 707.897969ms ago: executing program 5 (id=1591): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_create(&(0x7f0000001c40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|\xba0\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\xfe\xff\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce\xa72\x85\xe2_\xde\xb9\xa1\xa4\xb1P\xb8\xb6w@\xf9$\x97j\xf2\x88Xx\xf5AY\x04&\x81a\xbb_S\x9d^\xc2\xe4441\xadY\xfdQK1J', 0x0) 636.832683ms ago: executing program 2 (id=1592): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x7c, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xa00]}, @NL80211_ATTR_FRAME={0x57, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0xfd, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 595.682544ms ago: executing program 0 (id=1593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x6}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x40}}, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04", @ANYBLOB="2019"], 0x16) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x0, 0x7, 0x79, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, 0x20, 0x10, 0x4e, 0x20}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000307cc46700000000000000000000000a40000000060a0b04000000000000000002000000200004801c0001800900010068617368000000000c000280080001400000000a0900010073797a3000000000140000001100010000000000000000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x51}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 458.160067ms ago: executing program 2 (id=1594): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x8, 0x80000001, 0x7b, @loopback, @loopback={0xfec0ffffffff0000, 0xffff8881114a4aa8}, 0x3c20, 0x0, 0x0, 0x8}}) 424.544261ms ago: executing program 0 (id=1595): syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="fffffffff55286990914593186dd6087fb00000000000000000000000001fc0200000000000000000000000000000002000000000000070100010100c20476"], 0x0) 401.887243ms ago: executing program 3 (id=1596): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) timer_create(0x6, &(0x7f0000000000)={0x0, 0x11, 0x4, @thr={&(0x7f0000000080)="cfba8a99fa7ce389328abbb080972b0aae7f4f430672146d1b5596f93aa14ed994b2550c2ef43493acb1561867f381f0854638044bf56514c96ba0b88f28aa2697c6fb1e72c9b91764d4750f21cdd560e1067aa9d58193ec214bc9b9f32a9de93f", &(0x7f00000001c0)="9d17c794ee9cd3cc06cc9e8ecffdd06b6776322da4a1a6c73c4a5af598a09cac3a0728603031182bb3a1d6243228708427786980b4f9f563fda5c6d5fdec985f910f104e2d324636e0a8a8e3ac1fa06d863f6dae086b615a619d04bfd2f4f7055044046ba804aff811dc3e4df6111385cd37ed4664310ca04febaab7fd498a5b1cd09ae6360cfba8402ea6"}}, &(0x7f0000000100)) io_uring_enter(r1, 0x0, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r3) 312.883546ms ago: executing program 2 (id=1597): socket$inet_smc(0x2b, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x101000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x180000, 0x4) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/tracing', 0xc0c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vim2m(&(0x7f0000000100), 0x1ff, 0x2) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=r1], 0x20) 296.703564ms ago: executing program 0 (id=1598): socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000700000000000000000000fe8000000000000000000000000000aa87"], 0x0) 217.669774ms ago: executing program 2 (id=1599): socket$inet_smc(0x2b, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x101000) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) syz_io_uring_setup(0x10a, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_create(0xfff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/tracing', 0xc0c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$vim2m(&(0x7f0000000100), 0x1ff, 0x2) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=r0], 0x20) 100.680378ms ago: executing program 0 (id=1600): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000002000010027bd7000400000000a508080000000031600000014000200fc020000000000000000000040000000140001"], 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYBLOB="0000007fff0000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}}, 0x0) 20.117071ms ago: executing program 1 (id=1601): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setopts(0x4202, r0, 0xe96, 0x455b843fbdb64c65) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x1, @loopback}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0xffb1) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000c80)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x200000000b49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2$watch_queue(&(0x7f0000000280), 0x80) 0s ago: executing program 0 (id=1602): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vbi(0x0, 0x1, 0x2) syz_emit_ethernet(0x46, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x640101b8, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}, "a815a23da43974ff"}}}}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x33424752, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}) recvmmsg(r0, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001700)=""/217, 0xdc}, {0x0}], 0x1}, 0x4}], 0x1, 0x600100a2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000c4b000/0x1000)=nil, 0x1000, 0x0, 0x20010, r2, 0x41995000) io_setup(0x8, &(0x7f00000001c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001814010000fb000000000000080001"], 0x20}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x2000000, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) kernel console output (not intermixed with test programs): 339.239591][ T9992] __x64_sys_recvmmsg+0x190/0x240 [ 339.239609][ T9992] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 339.239628][ T9992] ? rcu_is_watching+0x15/0xb0 [ 339.239658][ T9992] ? do_syscall_64+0xbe/0x3b0 [ 339.239691][ T9992] do_syscall_64+0xfa/0x3b0 [ 339.239705][ T9992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.239715][ T9992] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 339.239724][ T9992] ? clear_bhb_loop+0x60/0xb0 [ 339.239735][ T9992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.239744][ T9992] RIP: 0033:0x7f2878d8e929 [ 339.239759][ T9992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.239775][ T9992] RSP: 002b:00007f2879c00038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 339.239793][ T9992] RAX: ffffffffffffffda RBX: 00007f2878fb5fa0 RCX: 00007f2878d8e929 [ 339.239807][ T9992] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000005 [ 339.239818][ T9992] RBP: 00007f2879c00090 R08: 0000000000000000 R09: 0000000000000000 [ 339.239829][ T9992] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002 [ 339.239840][ T9992] R13: 0000000000000000 R14: 00007f2878fb5fa0 R15: 00007f28790dfa28 [ 339.239856][ T9992] [ 339.242958][ T5896] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 339.527749][ T5828] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 339.551760][ T5828] usb 6-1: USB disconnect, device number 27 [ 339.581206][ T6232] udevd[6232]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.605514][ T5896] usb 3-1: device descriptor read/64, error -71 [ 339.726141][ T5896] usb usb3-port1: attempt power cycle [ 339.850442][T10024] bridge2: entered promiscuous mode [ 339.856677][T10024] bridge2: entered allmulticast mode [ 339.865406][T10024] team0: Port device bridge2 added [ 340.063701][ T5896] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 340.086092][ T5896] usb 3-1: device descriptor read/8, error -71 [ 340.223420][ T5828] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 340.333287][ T5896] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 340.353644][ T5896] usb 3-1: device descriptor read/8, error -71 [ 340.464953][ T5896] usb usb3-port1: unable to enumerate USB device [ 340.619974][ T5896] usb 4-1: USB disconnect, device number 61 [ 340.658706][ T5828] usb 1-1: unable to get BOS descriptor or descriptor too short [ 340.679868][ T5828] usb 1-1: not running at top speed; connect to a high speed hub [ 340.693931][ T5828] usb 1-1: config 1 interface 0 has no altsetting 0 [ 340.701197][ T5828] usb 1-1: language id specifier not provided by device, defaulting to English [ 340.712204][ T5931] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 340.736987][ T5828] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 340.762538][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.873678][ T5828] usb 1-1: Product: syz [ 340.991934][T10037] __nla_validate_parse: 9 callbacks suppressed [ 340.991947][T10037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1155'. [ 341.007524][ T5828] usb 1-1: Manufacturer: syz [ 341.027846][ T5828] usb 1-1: SerialNumber: syz [ 341.048320][ T5931] usb 2-1: config 0 has no interfaces? [ 341.075122][ T5931] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 341.102350][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.128602][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 341.158553][ T5931] usb 2-1: Product: syz [ 341.199442][ T5931] usb 2-1: Manufacturer: syz [ 341.300669][ T5828] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 341.323301][ T5931] usb 2-1: SerialNumber: syz [ 341.345944][T10040] loop6: detected capacity change from 0 to 7 [ 341.437539][ T5931] usb 2-1: config 0 descriptor?? [ 341.511774][ T5828] usb 1-1: USB disconnect, device number 56 [ 341.571409][ T5828] usblp0: removed [ 341.667521][T10035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1154'. [ 342.322318][T10063] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 342.384458][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 342.433201][T10067] PKCS7: Unknown OID: [5] (bad) [ 342.438657][T10067] PKCS7: Only support pkcs7_signedData type [ 342.586612][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 342.596055][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 342.612568][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 342.629462][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 342.654865][ T5882] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 342.689140][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 342.709132][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.742915][ T5903] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 342.753583][ T9] usb 3-1: config 0 descriptor?? [ 342.793756][T10069] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1166'. [ 342.817887][T10058] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.873715][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 342.879273][ T9] hub 3-1:0.0: USB hub found [ 342.918902][ T5882] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 342.932694][ T5882] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 342.943975][ T5903] usb 6-1: device descriptor read/64, error -71 [ 342.954109][ T5882] usb 4-1: config 6 has no interface number 0 [ 342.964152][ T5882] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 342.976715][ T5882] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 343.013713][ T5882] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.028860][ T9] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 343.075702][ T5882] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 343.084900][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.092931][ T5882] usb 4-1: Product: syz [ 343.098344][ T5882] usb 4-1: Manufacturer: syz [ 343.103032][ T5882] usb 4-1: SerialNumber: syz [ 343.137315][ T5882] hso 4-1:6.2: Failed to find INT IN ep [ 343.212834][ T5903] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 343.234465][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 343.240525][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 343.295001][ T9] usb 3-1: USB disconnect, device number 65 [ 343.373080][ T5903] usb 6-1: device descriptor read/64, error -71 [ 343.483263][ T5903] usb usb6-port1: attempt power cycle [ 343.502883][ T5882] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 343.676254][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.688260][ T5882] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 343.699136][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.721032][ T5882] usb 1-1: config 0 descriptor?? [ 343.752176][ T5882] pwc: Askey VC010 type 2 USB webcam detected. [ 343.844808][ T5903] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 343.977636][ T5903] usb 6-1: device descriptor read/8, error -71 [ 344.154707][ T5882] pwc: recv_control_msg error -32 req 02 val 2b00 [ 344.162132][ T5882] pwc: recv_control_msg error -32 req 02 val 2700 [ 344.171572][ T5882] pwc: recv_control_msg error -32 req 02 val 2c00 [ 344.179202][ T5882] pwc: recv_control_msg error -32 req 04 val 1000 [ 344.188594][ T5882] pwc: recv_control_msg error -32 req 04 val 1300 [ 344.233358][ T5903] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 344.240955][ T1208] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 344.265770][ T5882] pwc: recv_control_msg error -32 req 04 val 1400 [ 344.276566][T10075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.292455][ T5882] pwc: recv_control_msg error -32 req 02 val 2000 [ 344.313348][T10075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.328939][ T5828] usb 2-1: USB disconnect, device number 52 [ 344.374725][ T5903] usb 6-1: device descriptor read/8, error -71 [ 344.383593][ T1208] usb 3-1: device descriptor read/64, error -71 [ 344.434967][ T5882] pwc: recv_control_msg error -32 req 02 val 2100 [ 344.460101][ T5882] pwc: recv_control_msg error -32 req 04 val 1500 [ 344.526404][ T5882] pwc: recv_control_msg error -32 req 02 val 2500 [ 344.534681][ T5882] pwc: recv_control_msg error -32 req 02 val 2400 [ 344.541783][ T5882] pwc: recv_control_msg error -32 req 02 val 2600 [ 344.552541][ T5882] pwc: recv_control_msg error -32 req 02 val 2900 [ 344.559454][ T5903] usb usb6-port1: unable to enumerate USB device [ 344.576698][ T5882] pwc: recv_control_msg error -32 req 02 val 2800 [ 344.693244][ T1208] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 344.800569][ T5882] pwc: recv_control_msg error -71 req 04 val 1200 [ 344.836438][ T5882] pwc: Registered as video103. [ 344.872953][ T1208] usb 3-1: device descriptor read/64, error -71 [ 344.885396][ T5882] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 344.914980][ T5903] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 344.996823][ T5882] usb 1-1: USB disconnect, device number 57 [ 345.004071][ T1208] usb usb3-port1: attempt power cycle [ 345.137660][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short [ 345.164256][ T5903] usb 2-1: not running at top speed; connect to a high speed hub [ 345.219401][ T5903] usb 2-1: config 1 interface 0 has no altsetting 0 [ 345.237347][ T5828] usb 4-1: USB disconnect, device number 62 [ 345.251438][ T5903] usb 2-1: language id specifier not provided by device, defaulting to English [ 345.274917][ T5903] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 345.285922][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.320183][ T5903] usb 2-1: Product: syz [ 345.342857][ T1208] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 345.371697][ T5903] usb 2-1: Manufacturer: syz [ 345.378792][ T5903] usb 2-1: SerialNumber: syz [ 345.393898][ T1208] usb 3-1: device descriptor read/8, error -71 [ 345.517755][T10093] fuse: Bad value for 'fd' [ 345.619417][ T5903] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 345.643977][ T1208] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 345.696968][ T5903] usb 2-1: USB disconnect, device number 53 [ 345.731174][ T1208] usb 3-1: device descriptor read/8, error -71 [ 345.747817][ T5903] usblp0: removed [ 345.863123][ T1208] usb usb3-port1: unable to enumerate USB device [ 345.903196][ T5828] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 346.066361][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.121092][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.303050][ T5903] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 346.369000][ T5828] usb 6-1: New USB device found, idVendor=1e71, idProduct=200d, bcdDevice= 0.00 [ 346.394399][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.471032][ T5828] usb 6-1: config 0 descriptor?? [ 346.537809][ T5903] usb 4-1: config 0 has no interfaces? [ 346.596410][ T5903] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 346.718913][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 346.718929][ T30] audit: type=1326 audit(1751209794.318:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.5.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c078e929 code=0x7ffc0000 [ 346.784343][ T5828] usbhid 6-1:0.0: can't add hid device: -71 [ 346.801947][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.901477][ T5903] usb 4-1: Product: syz [ 346.906217][ T5828] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 346.912117][ T30] audit: type=1326 audit(1751209794.318:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.5.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c078e929 code=0x7ffc0000 [ 346.936301][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.946878][ T5903] usb 4-1: Manufacturer: syz [ 346.969923][ T5903] usb 4-1: SerialNumber: syz [ 346.993692][ T5828] usb 6-1: USB disconnect, device number 32 [ 347.072892][ T1208] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 347.096159][ T5903] usb 4-1: config 0 descriptor?? [ 347.256504][ T1208] usb 2-1: Using ep0 maxpacket: 16 [ 347.264486][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.279246][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.297351][ T1208] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 347.382485][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.393914][T10110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1181'. [ 347.410684][ T1208] usb 2-1: config 0 descriptor?? [ 347.421885][T10121] fuse: Bad value for 'fd' [ 347.525116][T10121] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1185'. [ 347.772856][ T5883] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 347.880445][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.907602][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.930032][ T5883] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.940778][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.954135][ T5883] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 347.965686][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 347.974012][ T5883] usb 3-1: SerialNumber: syz [ 348.867931][ T5883] usb 3-1: skipping empty audio interface (v1) [ 348.885016][ T5883] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 348.913357][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 348.931678][ T5883] usb 3-1: USB disconnect, device number 70 [ 348.991119][ T6232] udevd[6232]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.133068][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 349.160199][ T9] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 349.178885][ T9] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 349.195749][ T9] usb 6-1: config 6 has no interface number 0 [ 349.222885][ T9] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 349.242254][ T9] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 349.255976][ T9] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.287928][ T9] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 349.298625][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1190'. [ 349.310303][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.318788][ T9] usb 6-1: Product: syz [ 349.325184][T10140] netlink: 'syz.0.1190': attribute type 2 has an invalid length. [ 349.333193][ T9] usb 6-1: Manufacturer: syz [ 349.337927][T10140] netlink: 'syz.0.1190': attribute type 1 has an invalid length. [ 349.347639][ T9] usb 6-1: SerialNumber: syz [ 349.358306][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'. [ 349.389211][ T9] hso 6-1:6.2: Failed to find INT IN ep [ 349.452354][ T5903] usb 4-1: USB disconnect, device number 63 [ 349.726395][ T1208] usbhid 2-1:0.0: can't add hid device: -71 [ 349.732392][ T1208] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 349.795809][ T1208] usb 2-1: USB disconnect, device number 54 [ 349.819106][T10151] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1194'. [ 349.849483][T10151] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1194'. [ 349.990222][T10155] netlink: 2052 bytes leftover after parsing attributes in process `syz.1.1195'. [ 350.013463][T10151] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1194'. [ 350.036396][T10151] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1194'. [ 350.040014][ T9] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 350.194049][T10155] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 350.215291][T10151] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1194'. [ 350.237487][ T5933] usb 6-1: USB disconnect, device number 33 [ 350.395146][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 350.406155][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 350.415522][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 350.422535][ T9] usb 1-1: language id specifier not provided by device, defaulting to English [ 350.433911][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 350.443304][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.451299][ T9] usb 1-1: Product: syz [ 350.455819][ T9] usb 1-1: Manufacturer: syz [ 350.460418][ T9] usb 1-1: SerialNumber: syz [ 350.612849][ T1208] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 350.623521][ T5828] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 350.688319][ T9] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 350.703421][ T9] usb 1-1: USB disconnect, device number 58 [ 350.715544][ T9] usblp0: removed [ 350.763118][ T1208] usb 4-1: Using ep0 maxpacket: 32 [ 350.770200][ T1208] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 350.778961][ T1208] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 350.787950][ T1208] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 350.789091][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.799464][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 350.818927][ T5828] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 350.841986][ T5828] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 350.842010][ T1208] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 350.874274][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.894414][ T5828] usb 3-1: config 0 descriptor?? [ 350.901505][ T1208] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 350.920453][ T1208] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 350.930799][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.966232][ T1208] usb 4-1: config 0 descriptor?? [ 351.008122][T10170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.196675][T10163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.214093][ T1208] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 351.235517][T10163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.359630][ T5883] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 351.528383][T10165] ip6gretap0: entered promiscuous mode [ 351.534461][T10165] macsec1: entered promiscuous mode [ 351.541662][T10165] macsec1: entered allmulticast mode [ 351.548082][ T5883] usb 6-1: config 0 has no interfaces? [ 351.564406][ T5883] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 351.573839][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.580521][T10165] ip6gretap0: entered allmulticast mode [ 351.588139][ T5883] usb 6-1: Product: syz [ 351.592319][ T5883] usb 6-1: Manufacturer: syz [ 351.600291][ T5931] usb 4-1: USB disconnect, device number 64 [ 351.618049][ T5931] usblp0: removed [ 351.618687][ T5883] usb 6-1: SerialNumber: syz [ 351.690879][T10165] ip6gretap0: left allmulticast mode [ 351.701430][T10165] ip6gretap0: left promiscuous mode [ 351.798598][ T5883] usb 6-1: config 0 descriptor?? [ 352.053939][ T5828] usbhid 3-1:0.0: can't add hid device: -71 [ 352.061366][ T5828] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 352.164090][ T5828] usb 3-1: USB disconnect, device number 71 [ 352.937087][T10195] __nla_validate_parse: 3 callbacks suppressed [ 352.937105][T10195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1208'. [ 352.953886][T10195] unsupported nlmsg_type 40 [ 353.534659][ T1208] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 353.773429][ T1208] usb 1-1: config 0 has no interfaces? [ 353.791975][ T1208] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 353.801700][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.814047][ T1208] usb 1-1: Product: syz [ 353.818362][ T1208] usb 1-1: Manufacturer: syz [ 353.840478][ T1208] usb 1-1: SerialNumber: syz [ 353.879470][ T1208] usb 1-1: config 0 descriptor?? [ 354.322056][ T5883] usb 6-1: USB disconnect, device number 34 [ 354.732951][T10209] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1213'. [ 354.765404][T10209] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1213'. [ 354.812336][T10209] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1213'. [ 354.830673][T10209] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1213'. [ 354.844764][ T5883] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 355.022928][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 355.037417][ T5883] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 355.057643][ T5883] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 355.111638][ T5883] usb 2-1: config 6 has no interface number 0 [ 355.131471][ T5883] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 355.162576][ T5883] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 355.188028][ T5883] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.203612][T10211] tap0: tun_chr_ioctl cmd 1074025677 [ 355.209805][T10211] tap0: linktype set to 823 [ 355.265401][ T5883] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 355.281610][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.291501][T10212] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20000 [ 355.321501][ T5883] usb 2-1: Product: syz [ 355.339444][ T5883] usb 2-1: Manufacturer: syz [ 355.352686][ T5883] usb 2-1: SerialNumber: syz [ 355.455838][ T5883] hso 2-1:6.2: Failed to find INT IN ep [ 355.876960][ T5883] usb 2-1: USB disconnect, device number 55 [ 356.003261][ T5931] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 356.155182][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 356.163983][T10222] PKCS7: Unknown OID: [5] (bad) [ 356.168875][T10222] PKCS7: Only support pkcs7_signedData type [ 356.273343][ T5931] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 356.295601][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.325660][ T5931] usb 3-1: config 0 descriptor?? [ 356.410145][ T5931] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 356.483460][ T5828] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 356.528067][ T1208] usb 1-1: USB disconnect, device number 59 [ 356.633249][ T5828] usb 6-1: device descriptor read/64, error -71 [ 356.872856][ T5828] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 357.000048][T10217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.009887][T10227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.033857][T10217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.050582][T10227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.124739][ T5828] usb 6-1: device descriptor read/64, error -71 [ 357.131133][ T5931] gspca_sonixj: reg_w1 err -71 [ 357.136788][ T5931] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 357.148490][ T5931] usb 3-1: USB disconnect, device number 72 [ 357.243429][ T1638] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 357.251182][ T5933] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 357.259000][ T5828] usb usb6-port1: attempt power cycle [ 357.413327][ T5933] usb 2-1: device descriptor read/64, error -71 [ 357.422515][ T1638] usb 4-1: config 0 has no interfaces? [ 357.441007][ T1638] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 357.526417][ T1638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.566785][ T1638] usb 4-1: Product: syz [ 357.585434][ T1638] usb 4-1: Manufacturer: syz [ 357.620837][ T1638] usb 4-1: SerialNumber: syz [ 357.653328][ T5828] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 357.673373][ T1638] usb 4-1: config 0 descriptor?? [ 357.693798][ T5828] usb 6-1: device descriptor read/8, error -71 [ 357.743253][ T5933] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 357.920592][ T5933] usb 2-1: device descriptor read/64, error -71 [ 358.013593][ T5828] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 358.059835][ T5828] usb 6-1: device descriptor read/8, error -71 [ 358.074899][T10233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1220'. [ 358.104463][ T5933] usb usb2-port1: attempt power cycle [ 358.182835][ T5903] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 358.224227][ T5828] usb usb6-port1: unable to enumerate USB device [ 358.354939][ T5903] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.368174][ T5903] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.377907][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.410767][ T5903] usb 3-1: Product: syz [ 358.419051][ T5903] usb 3-1: Manufacturer: syz [ 358.427063][ T5903] usb 3-1: SerialNumber: syz [ 358.503993][ T5933] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 358.536355][ T5933] usb 2-1: device descriptor read/8, error -71 [ 358.883330][ T5933] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 358.954075][ T5933] usb 2-1: device descriptor read/8, error -71 [ 359.123398][ T5933] usb usb2-port1: unable to enumerate USB device [ 359.598254][ T5903] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 359.605333][ T5903] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 359.615657][ T5903] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 359.832620][T10242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.965222][T10242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.056097][ T5903] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 360.066951][ T1638] usb 4-1: USB disconnect, device number 65 [ 360.147084][ T5903] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 360.302824][ T5883] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 360.314916][ T5903] usb 3-1: USB disconnect, device number 73 [ 360.430284][ T5903] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 360.494317][ T5931] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 360.642845][ T5883] usb 6-1: config 0 has no interfaces? [ 360.653681][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 360.671030][ T5931] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 360.704827][ T5931] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 360.779871][ T5931] usb 1-1: config 6 has no interface number 0 [ 360.814527][ T5931] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 360.834161][ T5883] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 360.892475][ T5931] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 361.038788][ T5931] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.062156][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.104076][ T5883] usb 6-1: Product: syz [ 361.108588][ T5883] usb 6-1: Manufacturer: syz [ 361.183586][ T5883] usb 6-1: SerialNumber: syz [ 361.197725][ T5883] usb 6-1: config 0 descriptor?? [ 361.259032][ T5931] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 361.433752][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.441794][ T5931] usb 1-1: Product: syz [ 361.522105][ T5931] usb 1-1: Manufacturer: syz [ 361.555347][ T5931] usb 1-1: SerialNumber: syz [ 361.639712][ T5931] hso 1-1:6.2: Failed to find INT IN ep [ 362.108592][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1237'. [ 362.131873][T10292] vlan3: entered promiscuous mode [ 362.137163][T10292] syz_tun: entered promiscuous mode [ 362.459222][ T5933] usb 1-1: USB disconnect, device number 60 [ 363.313222][ T5903] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 363.375269][ T5883] usb 6-1: USB disconnect, device number 39 [ 363.494456][T10307] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1243'. [ 363.514552][ T5903] usb 2-1: config 65 has an invalid interface number: 95 but max is 0 [ 363.585799][ T5903] usb 2-1: config 65 has no interface number 0 [ 363.625972][ T5903] usb 2-1: string descriptor 0 read error: -22 [ 363.643586][ T5903] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 363.680817][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.725123][ T5903] usbtest 2-1:65.95: Linux gadget zero [ 363.729275][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1247'. [ 363.752545][ T5903] usbtest 2-1:65.95: low-speed {control in/out} tests (+alt) [ 363.760436][T10314] netlink: 'syz.2.1247': attribute type 2 has an invalid length. [ 363.773680][T10314] netlink: 'syz.2.1247': attribute type 1 has an invalid length. [ 363.782676][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 363.793335][T10316] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1248'. [ 364.516240][ T5903] usb 2-1: USB disconnect, device number 60 [ 364.828728][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1255'. [ 364.976952][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 364.987395][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 365.006317][T10343] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1257'. [ 365.216553][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 365.226467][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 365.621136][T10353] openvswitch: netlink: Multiple metadata blocks provided [ 365.855375][T10360] netlink: 'syz.2.1261': attribute type 2 has an invalid length. [ 365.891933][T10360] netlink: 'syz.2.1261': attribute type 1 has an invalid length. [ 365.899883][ T1208] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 365.915124][T10362] tipc: Enabled bearer , priority 10 [ 366.083087][ T1208] usb 2-1: config 0 has no interfaces? [ 366.095282][ T1208] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 366.104903][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.140179][ T1208] usb 2-1: Product: syz [ 366.154292][ T1208] usb 2-1: Manufacturer: syz [ 366.169267][ T1208] usb 2-1: SerialNumber: syz [ 366.192360][ T1208] usb 2-1: config 0 descriptor?? [ 366.455941][ T1208] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 367.053593][ T5933] tipc: Node number set to 1835347501 [ 368.252891][ T1208] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 368.422813][ T1208] usb 1-1: Using ep0 maxpacket: 32 [ 368.483172][ T5933] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 368.570343][ T5903] usb 2-1: USB disconnect, device number 61 [ 368.613292][ T1208] usb 1-1: config 4 has an invalid interface number: 96 but max is 2 [ 368.621422][ T1208] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 368.671581][ T1208] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 368.684018][ T1208] usb 1-1: config 4 has an invalid interface number: 191 but max is 2 [ 368.700170][ T1208] usb 1-1: config 4 has an invalid interface number: 6 but max is 2 [ 368.710712][ T1208] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 368.722646][ T1208] usb 1-1: config 4 has an invalid interface association descriptor of length 2, skipping [ 368.723295][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 368.736669][ T1208] usb 1-1: config 4 has an invalid descriptor of length 170, skipping remainder of the config [ 368.750339][ T1208] usb 1-1: config 4 has no interface number 0 [ 368.760511][ T1208] usb 1-1: config 4 has no interface number 1 [ 368.832410][ T1208] usb 1-1: config 4 has no interface number 2 [ 368.953189][ T5933] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 369.008363][ T1208] usb 1-1: config 4 interface 96 altsetting 4 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 369.075647][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 369.085881][ T1208] usb 1-1: config 4 interface 96 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 16 [ 369.112826][ T5933] usb 6-1: Product: syz [ 369.123525][ T5933] usb 6-1: Manufacturer: syz [ 369.141133][ T5933] usb 6-1: SerialNumber: syz [ 369.168317][ T5933] usb 6-1: config 0 descriptor?? [ 369.172911][ T1208] usb 1-1: config 4 interface 96 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 369.236259][ T1208] usb 1-1: config 4 interface 96 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 369.277667][ T1208] usb 1-1: config 4 interface 96 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 369.326459][ T1208] usb 1-1: config 4 interface 191 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 369.371524][ T1208] usb 1-1: too many endpoints for config 4 interface 6 altsetting 9: 209, using maximum allowed: 30 [ 369.428542][ T1208] usb 1-1: config 4 interface 6 altsetting 9 endpoint 0x3 has invalid maxpacket 21868, setting to 1024 [ 369.477400][ T1208] usb 1-1: config 4 interface 6 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 1024 [ 369.608655][ T1208] usb 1-1: config 4 interface 6 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 209 [ 369.610230][T10422] __nla_validate_parse: 9 callbacks suppressed [ 369.610246][T10422] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1281'. [ 369.635466][ T1208] usb 1-1: config 4 interface 96 has no altsetting 0 [ 369.662457][ T1208] usb 1-1: config 4 interface 191 has no altsetting 0 [ 369.680560][ T1208] usb 1-1: config 4 interface 6 has no altsetting 0 [ 369.709956][ T1208] usb 1-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=f0.24 [ 369.736995][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.780524][ T1208] usb 1-1: Product: 莌ࢉ兢밺म説偍␃Ͳ翕௟䨺燼퍓绞٫鞳뫔僦胿⼮䝷ຍ䶋龜쉍Ⴤ솽錵㒊誂蠮₡ࠅᚪ죧퐃曹钰 [ 369.827183][ T1208] usb 1-1: Manufacturer: ဉ [ 369.842111][ T1208] usb 1-1: SerialNumber: ꕰꑄ撐휐ビ謓㥫鄦㋃଀淸⮕ﱙ댗圐珯빉碋뉳䞘噗痘䈁緗螒⮭簅訨钗骏흃ᕐꈮ䙖洂鄌䡣소᥏䖏已墰㆟ʦ᾿냏݈贀ᶵﭘਮꕁ䈰䯫悄瑍⧲↟ꒀꕻ輗짌驎녅科ॊ疚鞥兔⼞憨▽㾬ꁜ專춱鿿ᰍ謵퍱Ꞻℭ뗴ꉰ俳蒹賛凨謑䶊 [ 369.927716][ T5933] usb 6-1: USB disconnect, device number 40 [ 369.949275][T10398] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 370.002845][ T5883] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 370.154419][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.168998][ T5903] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 370.176962][ T5883] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 370.226068][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.255736][ T5883] usb 3-1: config 0 descriptor?? [ 370.333126][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 370.341745][ T5903] usb 4-1: too many configurations: 159, using maximum allowed: 8 [ 370.358801][ T5903] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 370.368279][ T5903] usb 4-1: can't read configurations, error -61 [ 370.513010][ T5903] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 370.782711][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 370.790136][ T5903] usb 4-1: too many configurations: 159, using maximum allowed: 8 [ 370.808454][T10436] loop2: detected capacity change from 0 to 7 [ 370.820256][T10436] loop2: [ 370.824172][T10436] loop2: partition table partially beyond EOD, truncated [ 370.858431][T10437] PKCS7: Unknown OID: [5] (bad) [ 370.864296][ T5903] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 370.871936][ T5903] usb 4-1: can't read configurations, error -61 [ 370.879106][ T5903] usb usb4-port1: attempt power cycle [ 370.879624][T10437] PKCS7: Only support pkcs7_signedData type [ 371.163300][ T5931] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 371.283077][ T5903] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 371.302240][ T1208] microtek usb (rev 0.4.3): expecting 3 got 6 endpoints! Bailing out. [ 371.303396][ T5931] usb 2-1: device descriptor read/64, error -71 [ 371.331638][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 371.347790][ T5903] usb 4-1: too many configurations: 159, using maximum allowed: 8 [ 371.376187][ T1208] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 371.389959][ T5903] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 371.412478][ T5903] usb 4-1: can't read configurations, error -61 [ 371.437116][ T1208] hub 1-1:4.6: Invalid hub with more than one config or interface [ 371.507280][ T1208] hub 1-1:4.6: probe with driver hub failed with error -22 [ 371.546733][ T1208] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 371.563305][ T5931] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 371.612851][ T5903] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 371.628674][ T1208] usb 1-1: USB disconnect, device number 62 [ 371.675831][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 371.682039][ T5903] usb 4-1: too many configurations: 159, using maximum allowed: 8 [ 371.703514][ T5931] usb 2-1: device descriptor read/64, error -71 [ 371.740269][ T5903] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 371.779198][ T5903] usb 4-1: can't read configurations, error -61 [ 371.815971][ T5931] usb usb2-port1: attempt power cycle [ 371.828398][ T5903] usb usb4-port1: unable to enumerate USB device [ 372.163211][ T5931] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 372.188762][ T5931] usb 2-1: device descriptor read/8, error -71 [ 372.433552][ T5931] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 372.494633][T10444] openvswitch: netlink: Multiple metadata blocks provided [ 372.509864][ T5883] usbhid 3-1:0.0: can't add hid device: -71 [ 372.549011][ T5883] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 372.559780][ T5200] loop2: [ 372.565905][ T5883] usb 3-1: USB disconnect, device number 74 [ 372.576050][ T5931] usb 2-1: device descriptor read/8, error -71 [ 372.594978][ T5200] loop2: partition table partially beyond EOD, truncated [ 372.694476][ T5931] usb usb2-port1: unable to enumerate USB device [ 372.783039][ T5903] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 372.834455][T10448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1290'. [ 372.979084][ T5903] usb 1-1: config 0 has no interfaces? [ 372.993109][ T5903] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 373.002421][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.018733][ T5903] usb 1-1: Product: syz [ 373.023602][ T5903] usb 1-1: Manufacturer: syz [ 373.065912][ T5200] loop2: [ 373.088550][ T5903] usb 1-1: SerialNumber: syz [ 373.101610][ T5200] loop2: partition table partially beyond EOD, truncated [ 373.127050][ T5903] usb 1-1: config 0 descriptor?? [ 373.504228][ T5931] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 373.637566][T10461] xt_hashlimit: max too large, truncated to 1048576 [ 373.673363][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 373.690360][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.733453][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.761750][ T5931] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 373.787115][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.825490][ T5931] usb 4-1: config 0 descriptor?? [ 374.037436][T10470] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1297'. [ 374.134364][T10472] Cannot find add_set index 0 as target [ 374.173703][T10474] Cannot find add_set index 0 as target [ 374.227486][T10476] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1301'. [ 374.257151][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1302'. [ 374.270134][T10478] netlink: 'syz.2.1302': attribute type 2 has an invalid length. [ 374.279596][T10478] netlink: 'syz.2.1302': attribute type 1 has an invalid length. [ 374.290058][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 374.299117][ T1208] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 374.323638][T10482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.337595][T10482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.452948][ T1208] usb 6-1: Using ep0 maxpacket: 32 [ 374.464027][ T1208] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 374.472998][ T1208] usb 6-1: config 0 has no interface number 0 [ 374.479296][ T1208] usb 6-1: config 0 interface 184 has no altsetting 0 [ 374.500221][ T1208] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 374.510212][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.520824][ T1208] usb 6-1: Product: syz [ 374.526208][ T1208] usb 6-1: Manufacturer: syz [ 374.530957][ T1208] usb 6-1: SerialNumber: syz [ 374.538608][ T1208] usb 6-1: config 0 descriptor?? [ 374.566252][ T1208] smsc75xx v1.0.0 [ 374.569921][ T1208] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 374.580424][ T1208] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 374.959096][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 375.436906][ T5903] usb 1-1: USB disconnect, device number 63 [ 375.776161][T10504] FAULT_INJECTION: forcing a failure. [ 375.776161][T10504] name failslab, interval 1, probability 0, space 0, times 0 [ 375.822865][T10504] CPU: 0 UID: 0 PID: 10504 Comm: syz.1.1312 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 375.822893][T10504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 375.822910][T10504] Call Trace: [ 375.822918][T10504] [ 375.822926][T10504] dump_stack_lvl+0x189/0x250 [ 375.822956][T10504] ? __pfx____ratelimit+0x10/0x10 [ 375.822981][T10504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.823006][T10504] ? __pfx__printk+0x10/0x10 [ 375.823027][T10504] ? __pfx___might_resched+0x10/0x10 [ 375.823052][T10504] ? fs_reclaim_acquire+0x7d/0x100 [ 375.823077][T10504] should_fail_ex+0x414/0x560 [ 375.823104][T10504] should_failslab+0xa8/0x100 [ 375.823124][T10504] __kmalloc_noprof+0xcb/0x4f0 [ 375.823140][T10504] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 375.823162][T10504] ? sock_kmalloc+0xd6/0x160 [ 375.823189][T10504] sock_kmalloc+0xd6/0x160 [ 375.823213][T10504] hash_recvmsg+0x1d4/0x840 [ 375.823235][T10504] ? do_user_addr_fault+0xbc1/0x1390 [ 375.823258][T10504] ? __pfx_hash_recvmsg+0x10/0x10 [ 375.823278][T10504] sock_recvmsg_nosec+0x186/0x1c0 [ 375.823305][T10504] ____sys_recvmsg+0x3aa/0x460 [ 375.823333][T10504] ? __pfx_____sys_recvmsg+0x10/0x10 [ 375.823368][T10504] ? import_iovec+0x74/0xa0 [ 375.823388][T10504] ___sys_recvmsg+0x1b5/0x510 [ 375.823412][T10504] ? __pfx____sys_recvmsg+0x10/0x10 [ 375.823478][T10504] ? __might_fault+0xb0/0x130 [ 375.823500][T10504] do_recvmmsg+0x307/0x770 [ 375.823528][T10504] ? __pfx_do_recvmmsg+0x10/0x10 [ 375.823560][T10504] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 375.823604][T10504] __x64_sys_recvmmsg+0x190/0x240 [ 375.823629][T10504] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 375.823646][T10504] ? rcu_is_watching+0x15/0xb0 [ 375.823666][T10504] ? do_syscall_64+0xbe/0x3b0 [ 375.823682][T10504] do_syscall_64+0xfa/0x3b0 [ 375.823694][T10504] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.823713][T10504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.823730][T10504] ? clear_bhb_loop+0x60/0xb0 [ 375.823751][T10504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.823786][T10504] RIP: 0033:0x7f7adb98e929 [ 375.823800][T10504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.823808][T10504] RSP: 002b:00007f7adc737038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 375.823820][T10504] RAX: ffffffffffffffda RBX: 00007f7adbbb5fa0 RCX: 00007f7adb98e929 [ 375.823827][T10504] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 375.823834][T10504] RBP: 00007f7adc737090 R08: 0000000000000000 R09: 0000000000000000 [ 375.823839][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.823845][T10504] R13: 0000000000000000 R14: 00007f7adbbb5fa0 R15: 00007f7adbcdfa28 [ 375.823867][T10504] [ 376.115769][ T5903] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 376.307933][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1314'. [ 376.320252][T10508] netlink: 'syz.2.1314': attribute type 2 has an invalid length. [ 376.341109][ T5931] usbhid 4-1:0.0: can't add hid device: -71 [ 376.342794][T10508] netlink: 'syz.2.1314': attribute type 1 has an invalid length. [ 376.356391][ T5931] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 376.365644][ T5903] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 376.374764][ T5903] usb 1-1: config 1 has no interface number 0 [ 376.380954][ T5903] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.391869][ T5903] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 376.400977][ T5903] usb 1-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 376.406920][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'. [ 376.425075][ T5903] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 376.437425][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.446082][ T5903] usb 1-1: Product: syz [ 376.450259][ T5903] usb 1-1: Manufacturer: syz [ 376.455570][ T5903] usb 1-1: SerialNumber: syz [ 376.466820][ T5931] usb 4-1: USB disconnect, device number 70 [ 376.501466][ T1208] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 376.670751][ T1208] usb 2-1: Using ep0 maxpacket: 16 [ 376.681840][ T1208] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 376.692467][ T1208] usb 2-1: config 0 has no interface number 0 [ 376.701725][ T1208] usb 2-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0x44, changing to 0x4 [ 376.716831][ T1208] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 376.729226][ T1208] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 16706, setting to 1024 [ 376.746805][ T1208] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 376.758550][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 376.768835][ T1208] usb 2-1: Product: syz [ 376.779673][ T1208] usb 2-1: SerialNumber: syz [ 376.794344][ T1208] usb 2-1: config 0 descriptor?? [ 376.843395][ T5828] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 376.880344][ T30] audit: type=1326 audit(1751209824.488:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea9d8e929 code=0x7ffc0000 [ 376.909664][ T30] audit: type=1326 audit(1751209824.488:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fbea9d8e929 code=0x7ffc0000 [ 376.933046][ T30] audit: type=1326 audit(1751209824.488:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea9d8e929 code=0x7ffc0000 [ 376.957977][ T30] audit: type=1326 audit(1751209824.488:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea9d8e929 code=0x7ffc0000 [ 377.009536][ T9] usb 6-1: USB disconnect, device number 41 [ 377.022665][ T30] audit: type=1326 audit(1751209824.488:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbea9d8e929 code=0x7ffc0000 [ 377.035666][ T1208] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 377.057703][ T30] audit: type=1326 audit(1751209824.488:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea9d8e929 code=0x7ffc0000 [ 377.085158][ T5828] usb 3-1: config 54 has an invalid interface number: 154 but max is 0 [ 377.087380][T10498] loop2: detected capacity change from 0 to 7 [ 377.102569][ T5828] usb 3-1: config 54 has no interface number 0 [ 377.104545][ T1208] usb 2-1: invalid MIDI in EP 0 [ 377.115954][T10498] loop2: p1 p4 [ 377.119506][T10498] loop2: partition table partially beyond EOD, truncated [ 377.148199][T10498] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 377.155907][ T5828] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 377.165831][ T30] audit: type=1326 audit(1751209824.488:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbea9d8e929 code=0x7ffc0000 [ 377.193310][ T5931] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 377.211282][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.227571][ T5828] usb 3-1: Product: syz [ 377.231767][ T5828] usb 3-1: Manufacturer: syz [ 377.242583][ T30] audit: type=1326 audit(1751209824.488:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea9d8e929 code=0x7ffc0000 [ 377.266424][ T5828] usb 3-1: SerialNumber: syz [ 377.277714][T10525] openvswitch: netlink: Multiple metadata blocks provided [ 377.292320][ T30] audit: type=1326 audit(1751209824.488:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbea9d8e929 code=0x7ffc0000 [ 377.365325][ T1208] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 377.391985][ T5903] cdc_ncm 1-1:1.1: bind() failure [ 377.397116][ T5931] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 377.397140][ T5931] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 377.397158][ T5931] usb 4-1: config 0 has no interface number 0 [ 377.397216][ T5931] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 377.397239][ T5931] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 377.397262][ T5931] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.397286][ T5931] usb 4-1: config 0 interface 52 has no altsetting 0 [ 377.470694][ T1208] usb 2-1: USB disconnect, device number 66 [ 377.477981][ T5931] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 377.492006][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 377.517739][ T5931] usb 4-1: Product: syz [ 377.523382][ T6610] udevd[6610]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.539412][ T30] audit: type=1326 audit(1751209824.488:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea9d8e929 code=0x7ffc0000 [ 377.571514][ T5931] usb 4-1: SerialNumber: syz [ 377.580174][ T5933] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 377.597712][ T5931] usb 4-1: config 0 descriptor?? [ 377.617752][ T5903] usb 1-1: USB disconnect, device number 64 [ 377.652404][ T5828] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 377.666031][ T61] usb 3-1: Failed to submit usb control message: -71 [ 377.679253][ T61] usb 3-1: unable to send the bmi data to the device: -71 [ 377.704800][ T5828] usb 3-1: USB disconnect, device number 75 [ 377.715014][ T61] usb 3-1: unable to get target info from device [ 377.723604][ T61] usb 3-1: could not get target info (-71) [ 377.737281][ T61] usb 3-1: could not probe fw (-71) [ 377.770484][ T5933] usb 6-1: config 0 has no interfaces? [ 377.811301][ T5933] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 377.824162][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.836894][ T5931] input: syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input22 [ 377.847926][ T5933] usb 6-1: Product: syz [ 377.854121][ T5933] usb 6-1: Manufacturer: syz [ 377.859313][ T5933] usb 6-1: SerialNumber: syz [ 377.883615][ T5933] usb 6-1: config 0 descriptor?? [ 377.905114][T10530] fuse: Unknown parameter 'uvJ"ser_id' [ 378.036698][ T5828] usb 4-1: USB disconnect, device number 71 [ 378.487871][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.494939][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.527876][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1326'. [ 378.543703][T10551] netlink: 'syz.2.1326': attribute type 2 has an invalid length. [ 378.551908][T10551] netlink: 'syz.2.1326': attribute type 1 has an invalid length. [ 378.561026][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1326'. [ 378.762845][ T5903] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 378.943034][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 378.952641][ T5903] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 378.961117][ T5903] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 378.973311][ T5903] usb 2-1: config 6 has no interface number 0 [ 378.980111][ T5903] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 379.011529][ T5903] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 379.047812][ T5903] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 379.084988][ T5903] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 379.101809][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.117200][ T5903] usb 2-1: Product: syz [ 379.121398][ T5903] usb 2-1: Manufacturer: syz [ 379.255205][ T5903] usb 2-1: SerialNumber: syz [ 379.286291][ T5903] hso 2-1:6.2: Failed to find INT IN ep [ 379.407239][T10565] bridge0: port 1(gretap0) entered blocking state [ 379.446900][T10565] bridge0: port 1(gretap0) entered disabled state [ 379.454857][T10565] gretap0: entered allmulticast mode [ 379.483035][ T5903] usb 2-1: USB disconnect, device number 67 [ 379.491238][T10565] gretap0: entered promiscuous mode [ 379.973224][ T5933] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 380.033385][ T5828] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 380.126801][ T5933] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 380.141443][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.165179][ T5933] usb 1-1: config 0 descriptor?? [ 380.186175][ T5828] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 380.214894][ T5828] usb 4-1: config 0 interface 0 has no altsetting 0 [ 380.245474][ T5933] usb 1-1: selecting invalid altsetting 3 [ 380.257159][ T5828] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 380.267532][ T5933] comedi comedi0: could not set alternate setting 3 in high speed [ 380.280512][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 380.290774][ T5933] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 380.302287][ T5828] usb 4-1: Product: syz [ 380.307685][ T5828] usb 4-1: Manufacturer: syz [ 380.316219][ T5828] usb 4-1: SerialNumber: syz [ 380.319054][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1339'. [ 380.328047][ T5933] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 380.340877][ T5828] usb 4-1: config 0 descriptor?? [ 380.358747][ T5828] usb 4-1: selecting invalid altsetting 0 [ 380.371148][T10581] netlink: 'syz.2.1339': attribute type 2 has an invalid length. [ 380.400355][T10581] netlink: 'syz.2.1339': attribute type 1 has an invalid length. [ 380.408278][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1339'. [ 380.489604][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.503863][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.586335][T10591] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1341'. [ 380.610883][ T1208] usb 1-1: USB disconnect, device number 65 [ 380.624628][T10591] tipc: Started in network mode [ 380.642321][T10591] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 380.662240][T10592] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 380.697996][T10591] tipc: Enabled bearer , priority 10 [ 380.741527][T10594] gretap0: left allmulticast mode [ 380.772435][T10594] gretap0: left promiscuous mode [ 380.785828][ T5933] usb 4-1: USB disconnect, device number 72 [ 380.805525][T10597] netlink: 'syz.0.1342': attribute type 10 has an invalid length. [ 380.825240][ T5903] usb 6-1: USB disconnect, device number 42 [ 380.843849][T10594] bridge0: port 1(gretap0) entered disabled state [ 380.947465][T10594] team0: Port device bond0 removed [ 380.959005][T10594] bond0: (slave bridge_slave_1): Releasing backup interface [ 380.964104][T10600] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1344'. [ 380.979829][T10594] bridge_slave_1: left promiscuous mode [ 380.986472][T10600] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1344'. [ 381.000714][T10594] bond3: (slave veth0_to_bond): Releasing active interface [ 381.018312][T10594] team0: Port device bridge2 removed [ 381.029926][T10597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.038546][T10597] team0: Port device bond0 added [ 381.049246][T10606] netlink: 2052 bytes leftover after parsing attributes in process `syz.5.1345'. [ 381.056322][T10600] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1344'. [ 381.070256][T10606] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 381.071170][T10600] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1344'. [ 381.190350][T10600] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1344'. [ 381.201044][T10600] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1344'. [ 381.742844][ T1208] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 381.813418][ T5828] tipc: Node number set to 4269801514 [ 381.942822][ T1208] usb 4-1: Using ep0 maxpacket: 8 [ 381.957834][ T1208] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 382.019345][T10638] openvswitch: netlink: Multiple metadata blocks provided [ 382.097154][ T1208] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 382.294602][ T1208] usb 4-1: config 6 has no interface number 0 [ 382.317405][ T1208] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 382.371454][ T1208] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 382.401863][ T1208] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.455188][ T1208] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 382.467231][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.477093][ T1208] usb 4-1: Product: syz [ 382.485717][ T1208] usb 4-1: Manufacturer: syz [ 382.499948][ T1208] usb 4-1: SerialNumber: syz [ 382.542780][ T1208] hso 4-1:6.2: Failed to find INT IN ep [ 382.572998][ T5883] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 382.724651][ T5883] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.745378][ T5883] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 382.790201][ T5883] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 382.810654][ T5828] usb 4-1: USB disconnect, device number 73 [ 382.821033][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.839354][T10649] Cannot find add_set index 0 as target [ 382.853945][T10644] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 382.867810][ T5883] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.101000][T10622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.116179][T10622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.263542][ T5883] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 383.438400][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.454146][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.469124][ T5828] usb 2-1: USB disconnect, device number 68 [ 383.481516][ T5883] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 383.511202][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.565521][ T5883] usb 3-1: config 0 descriptor?? [ 383.994597][ T5883] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 384.012537][ T5883] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000D/input/input23 [ 384.062863][ T5903] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 384.219216][ T5883] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 384.239066][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 384.259768][ T5903] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 384.276455][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.322896][ T5903] pvrusb2: Hardware description: Terratec Grabster AV400 [ 384.350416][ T5883] usb 3-1: USB disconnect, device number 76 [ 384.367067][ T5903] pvrusb2: ********** [ 384.388320][ T5903] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 384.428195][T10673] netlink: 'syz.1.1369': attribute type 29 has an invalid length. [ 384.431656][ T5903] pvrusb2: Important functionality might not be entirely working. [ 384.437209][T10673] netlink: 'syz.1.1369': attribute type 29 has an invalid length. [ 384.466903][ T5903] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 384.503581][ T5903] pvrusb2: ********** [ 384.515032][T10670] fido_id[10670]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 384.596641][ T2342] pvrusb2: Invalid write control endpoint [ 384.750523][ T2342] pvrusb2: Invalid write control endpoint [ 384.757425][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 384.772403][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 384.784477][T10683] tipc: Enabling of bearer rejected, already enabled [ 384.792919][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 384.796178][T10685] syz_tun: entered allmulticast mode [ 384.809594][ T2342] pvrusb2: Device being rendered inoperable [ 384.822527][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 384.828007][T10684] syz_tun: left allmulticast mode [ 384.837748][T10661] pvrusb2: Attempted to execute control transfer when device not ok [ 384.847773][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 384.866098][ T5903] usb 4-1: USB disconnect, device number 74 [ 384.882621][ T2342] pvrusb2: Attached sub-driver cx25840 [ 384.897308][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 384.908115][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 385.283035][ T5883] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 385.705354][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 385.736169][ T5883] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 385.792850][ T5903] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 385.812906][ T5883] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 386.015458][ T5883] usb 6-1: config 6 has no interface number 0 [ 386.021560][ T5883] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 386.052878][ T5883] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 386.063003][ T5883] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.131040][ T5883] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 386.140466][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.148727][ T5883] usb 6-1: Product: syz [ 386.153306][ T5883] usb 6-1: Manufacturer: syz [ 386.159444][ T5883] usb 6-1: SerialNumber: syz [ 386.176266][T10717] tipc: New replicast peer: 255.255.255.255 [ 386.183968][T10717] tipc: Enabled bearer , priority 10 [ 386.196304][ T5883] hso 6-1:6.2: Failed to find INT IN ep [ 386.205412][ T5903] usb 3-1: config 0 has no interfaces? [ 386.235961][ T5903] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 386.261443][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.284123][ T5933] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 386.286562][ T5903] usb 3-1: Product: syz [ 386.353825][ T5903] usb 3-1: Manufacturer: syz [ 386.358613][ T5903] usb 3-1: SerialNumber: syz [ 386.374091][ T5903] usb 3-1: config 0 descriptor?? [ 386.408584][ T5903] usb 6-1: USB disconnect, device number 43 [ 386.450004][ T5933] usb 4-1: config 0 has no interfaces? [ 386.501600][ T5933] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 386.511581][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.540387][ T5933] usb 4-1: Product: syz [ 386.549234][ T5933] usb 4-1: Manufacturer: syz [ 386.570865][ T5933] usb 4-1: SerialNumber: syz [ 386.581408][ T5933] usb 4-1: config 0 descriptor?? [ 386.636286][T10724] __nla_validate_parse: 2 callbacks suppressed [ 386.636304][T10724] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1384'. [ 387.293095][ T5828] tipc: Node number set to 1835347501 [ 387.373091][ T5933] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 387.443334][ T5931] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 387.527319][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.540254][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 387.552390][ T5933] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 387.562103][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.575888][ T5933] usb 2-1: config 0 descriptor?? [ 387.582652][T10736] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 387.595873][ T5933] hub 2-1:0.0: USB hub found [ 387.606608][ T5931] usb 6-1: config 65 has an invalid interface number: 95 but max is 0 [ 387.616073][ T5931] usb 6-1: config 65 has no interface number 0 [ 387.629003][ T5931] usb 6-1: string descriptor 0 read error: -22 [ 387.636299][ T5931] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 387.646188][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.665170][ T5931] usbtest 6-1:65.95: Linux gadget zero [ 387.670730][ T5931] usbtest 6-1:65.95: low-speed {control in/out} tests (+alt) [ 387.798086][ T5933] hub 2-1:0.0: 2 ports detected [ 388.210402][ T5933] hub 2-1:0.0: set hub depth failed [ 388.240576][ T5933] usb 2-1: USB disconnect, device number 69 [ 388.273864][ T5931] usb 3-1: USB disconnect, device number 77 [ 388.390122][ T1638] usb 6-1: USB disconnect, device number 44 [ 388.804205][T10751] openvswitch: netlink: Multiple metadata blocks provided [ 388.978251][ T1208] usb 4-1: USB disconnect, device number 75 [ 389.088292][T10757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1393'. [ 389.351333][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1395'. [ 389.542890][ T1208] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 389.712781][ T1208] usb 4-1: Using ep0 maxpacket: 8 [ 389.720913][ T1208] usb 4-1: unable to get BOS descriptor or descriptor too short [ 389.734680][ T1208] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 389.751207][ T1208] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x2 has invalid wMaxPacketSize 0 [ 389.764508][ T1208] usb 4-1: config 1 interface 0 has no altsetting 0 [ 389.778934][ T1208] usb 4-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 389.789480][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.798496][ T1208] usb 4-1: Product: ခ [ 389.803144][ T1208] usb 4-1: Manufacturer: 蘗㷽Ꝣ篨嗱芹㭞꜑зꣃ뒎纐쿳邨㌘챇▖烺좘Ć㕿咻ꩨ쩭廒頁㌶സⰌ䕏 [ 389.823627][ T1638] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 389.832647][ T1208] usb 4-1: SerialNumber: ဇ [ 389.846025][ T1208] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 389.859061][ T1208] usb 4-1: no configuration chosen from 1 choice [ 389.923345][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1399'. [ 390.013331][ T1638] usb 2-1: Using ep0 maxpacket: 8 [ 390.021233][ T1638] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 390.037634][ T1638] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 390.059095][ T1638] usb 2-1: config 6 has no interface number 0 [ 390.079096][ T1638] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 390.091551][ T1638] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 390.106743][ T1638] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.125599][ T1638] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 390.135502][ T1638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.146203][ T1638] usb 2-1: Product: syz [ 390.150383][ T1638] usb 2-1: Manufacturer: syz [ 390.169550][ T1638] usb 2-1: SerialNumber: syz [ 390.204891][ T1638] hso 2-1:6.2: Failed to find INT IN ep [ 390.421453][ T5931] usb 2-1: USB disconnect, device number 70 [ 390.427841][ T5933] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 390.584897][ T5933] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 390.595940][ T5933] usb 1-1: config 0 interface 0 has no altsetting 0 [ 390.607936][ T5933] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 390.629554][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 390.640305][ T5933] usb 1-1: Product: syz [ 390.646109][ T5933] usb 1-1: Manufacturer: syz [ 390.651323][ T5933] usb 1-1: SerialNumber: syz [ 390.664704][ T5933] usb 1-1: config 0 descriptor?? [ 390.678464][ T5933] usb 1-1: selecting invalid altsetting 0 [ 390.887974][T10780] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 390.947734][ T5933] usb 1-1: USB disconnect, device number 66 [ 391.242989][T10791] binder: 10790:10791 ioctl c00c6211 0 returned -14 [ 391.380591][T10799] netlink: 'syz.1.1407': attribute type 10 has an invalid length. [ 391.401019][T10799] bridge_slave_1: entered promiscuous mode [ 391.410171][T10799] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 391.902974][ T1208] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 391.933472][ T5933] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 392.087294][ T1208] usb 2-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.099945][ T1208] usb 2-1: config 0 interface 0 has no altsetting 0 [ 392.108262][ T1208] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 392.133473][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 392.151317][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.178049][ T5933] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 392.185482][ T1208] usb 2-1: config 0 descriptor?? [ 392.239687][ T5933] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 392.275082][ T5883] usb 4-1: USB disconnect, device number 76 [ 392.314779][ T5933] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 392.380653][ T5933] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 392.434123][ T5933] usb 3-1: config 0 interface 0 has no altsetting 0 [ 392.452208][ T5933] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 392.475478][ T5933] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 392.494406][ T5933] usb 3-1: Product: syz [ 392.498774][ T5933] usb 3-1: Manufacturer: syz [ 392.507480][ T5933] usb 3-1: SerialNumber: syz [ 392.512826][ T5903] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 392.530492][ T5933] usb 3-1: config 0 descriptor?? [ 392.548619][ T5933] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 392.570778][ T5933] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 392.617355][ T1208] a4tech 0003:09DA:001A.000E: unbalanced collection at end of report description [ 392.635570][ T1208] a4tech 0003:09DA:001A.000E: parse failed [ 392.641616][ T1208] a4tech 0003:09DA:001A.000E: probe with driver a4tech failed with error -22 [ 392.682838][ T5903] usb 6-1: Using ep0 maxpacket: 8 [ 392.700246][ T5903] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 392.712313][ T5903] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 392.723249][ T5883] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 392.736158][ T5903] usb 6-1: config 6 has no interface number 0 [ 392.745007][ T5903] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 393.196406][ T5882] usb 2-1: USB disconnect, device number 71 [ 393.218571][T10811] Cannot find set identified by id 0 to match [ 393.225661][ T5903] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 393.239195][ T9] usb 3-1: USB disconnect, device number 78 [ 393.245173][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 393.263127][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 393.274675][ T5883] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 393.284254][ T5903] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.301055][ T9] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 393.312638][ T5883] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 393.322100][ T5883] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 393.341340][ T5883] usb 4-1: Product: syz [ 393.347069][ T5883] usb 4-1: Manufacturer: syz [ 393.351691][ T5883] usb 4-1: SerialNumber: syz [ 393.377324][ T5903] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 393.386447][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.394680][ T5903] usb 6-1: Product: syz [ 393.400536][ T5903] usb 6-1: Manufacturer: syz [ 393.406253][ T5903] usb 6-1: SerialNumber: syz [ 393.428044][ T5903] hso 6-1:6.2: Failed to find INT IN ep [ 393.569867][T10823] netlink: 83 bytes leftover after parsing attributes in process `syz.3.1415'. [ 393.657943][ T9] usb 6-1: USB disconnect, device number 45 [ 393.680893][ T5883] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 393.707078][ T5883] visor 4-1:1.0: probe with driver visor failed with error -110 [ 393.842479][T10831] sctp: [Deprecated]: syz.3.1415 (pid 10831) Use of int in max_burst socket option deprecated. [ 393.842479][T10831] Use struct sctp_assoc_value instead [ 393.969818][T10835] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1416'. [ 394.727958][T10848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1420'. [ 394.827146][T10848] hub 9-0:1.0: USB hub found [ 394.834269][T10848] hub 9-0:1.0: 1 port detected [ 395.436345][T10859] syz_tun: entered allmulticast mode [ 395.461926][T10857] syz_tun: left allmulticast mode [ 395.601963][ T5883] usb 4-1: USB disconnect, device number 77 [ 395.850811][T10866] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1427'. [ 396.363698][ T5933] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 396.443007][ T5883] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 396.533321][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 396.544414][ T5933] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 396.552651][ T5933] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 396.567422][ T5933] usb 6-1: config 6 has no interface number 0 [ 396.576339][ T5933] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 396.592852][ T1638] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 396.734542][T10883] netlink: 'syz.2.1432': attribute type 4 has an invalid length. [ 396.757163][T10883] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1432'. [ 396.786081][ T5883] usb 2-1: config 1 has an invalid descriptor of length 208, skipping remainder of the config [ 396.786785][ T5933] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 396.797819][ T5883] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 396.824495][T10883] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 397.003511][ T5933] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.058866][ T5933] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 397.059957][ T5883] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 178, using maximum allowed: 30 [ 397.080980][ T1638] usb 4-1: device descriptor read/64, error -71 [ 397.081323][ T5883] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 178 [ 397.100764][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.109428][ T5933] usb 6-1: Product: syz [ 397.132870][ T5933] usb 6-1: Manufacturer: syz [ 397.137681][ T5933] usb 6-1: SerialNumber: syz [ 397.155000][ T5883] usb 2-1: config 1 interface 1 has no altsetting 0 [ 397.165319][ T5883] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.169888][ T5933] hso 6-1:6.2: Failed to find INT IN ep [ 397.176836][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.208527][ T5883] usb 2-1: Product: 纎♾ᡚ鸺ꤐ귭w昮誵映㤸콭彯ꬅ䞟ᆽ䆍菙䙾뫻첁柛搜顪㛊豹鑁≌ჭ⒬졲亀줉⍭短௖孅䤩䴄䟝쭷蟇 [ 397.239641][ T5883] usb 2-1: Manufacturer: ј [ 397.333333][ T1638] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 397.397278][ T5933] usb 6-1: USB disconnect, device number 46 [ 397.474130][ T1638] usb 4-1: device descriptor read/64, error -71 [ 397.509325][ T5883] usb 2-1: 0:2 : does not exist [ 397.514649][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 397.538909][T10889] loop6: detected capacity change from 0 to 7 [ 397.557718][T10889] Dev loop6: unable to read RDB block 7 [ 397.569670][T10889] loop6: unable to read partition table [ 397.573175][ T5883] usb 2-1: USB disconnect, device number 72 [ 397.591452][T10889] loop6: partition table beyond EOD, truncated [ 397.600217][T10889] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 397.616325][ T1638] usb usb4-port1: attempt power cycle [ 397.645545][ T6232] udevd[6232]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.706164][ T9] usb 1-1: device descriptor read/64, error -71 [ 397.954457][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 397.963477][ T1638] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 397.982852][ T5883] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 397.994106][ T1638] usb 4-1: device descriptor read/8, error -71 [ 398.092897][ T9] usb 1-1: device descriptor read/64, error -71 [ 398.143210][ T5883] usb 2-1: Invalid ep0 maxpacket: 16 [ 398.214333][ T9] usb usb1-port1: attempt power cycle [ 398.233003][ T1638] usb 4-1: new low-speed USB device number 81 using dummy_hcd [ 398.263825][ T1638] usb 4-1: device descriptor read/8, error -71 [ 398.283511][ T5883] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 398.342941][ T5903] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 398.374413][ T1638] usb usb4-port1: unable to enumerate USB device [ 398.452837][ T5883] usb 2-1: Invalid ep0 maxpacket: 16 [ 398.458772][ T5883] usb usb2-port1: attempt power cycle [ 398.515137][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.526169][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.536284][ T5903] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 398.546200][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.554319][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 398.564792][ T5903] usb 6-1: config 0 descriptor?? [ 398.593555][ T9] usb 1-1: device descriptor read/8, error -71 [ 398.813065][ T5883] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 398.833006][ T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 398.841228][ T5883] usb 2-1: Invalid ep0 maxpacket: 16 [ 398.863368][ T9] usb 1-1: device descriptor read/8, error -71 [ 398.973723][ T5883] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 398.981653][ T9] usb usb1-port1: unable to enumerate USB device [ 398.991450][ T5903] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 398.999163][ T5903] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 399.008068][ T5883] usb 2-1: Invalid ep0 maxpacket: 16 [ 399.016026][ T5903] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.000F/input/input24 [ 399.028711][ T5883] usb usb2-port1: unable to enumerate USB device [ 399.055843][ T5903] cm6533_jd 0003:0D8C:0022.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 399.192544][T10897] sctp: [Deprecated]: syz.5.1437 (pid 10897) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.192544][T10897] Use struct sctp_sack_info instead [ 399.211687][ T1638] usb 6-1: USB disconnect, device number 47 [ 399.770506][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 399.792567][T10904] macsec1: entered promiscuous mode [ 399.799014][T10904] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 399.806320][T10904] macsec1: entered allmulticast mode [ 399.811669][T10904] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 400.202965][ T5883] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 400.244760][T10915] netlink: 'syz.5.1443': attribute type 46 has an invalid length. [ 400.260977][T10915] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1443'. [ 400.271228][T10915] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1443'. [ 400.294579][T10917] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1444'. [ 400.352817][ T5883] usb 4-1: device descriptor read/64, error -71 [ 400.742902][ T5883] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 400.956845][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 401.006466][ T5883] usb 4-1: device descriptor read/64, error -71 [ 401.123342][ T5883] usb usb4-port1: attempt power cycle [ 401.293976][T10942] sctp: failed to load transform for md5: -4 [ 401.365789][T10951] xt_hashlimit: max too large, truncated to 1048576 [ 401.543007][ T5883] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 401.576222][ T5883] usb 4-1: device descriptor read/8, error -71 [ 401.812797][ T5883] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 401.865679][ T5883] usb 4-1: device descriptor read/8, error -71 [ 401.899461][T10967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.909448][T10967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.977361][ T5883] usb usb4-port1: unable to enumerate USB device [ 401.993274][ T1638] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 402.079019][T10964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.088568][T10964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.153832][ T5933] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 402.164930][ T1638] usb 2-1: Using ep0 maxpacket: 32 [ 402.175960][ T1638] usb 2-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 402.187295][ T1638] usb 2-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d [ 402.196909][ T1638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.215706][ T1638] quatech2 2-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected [ 402.253506][ T5883] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 402.323416][ T5933] usb 6-1: Using ep0 maxpacket: 32 [ 402.330646][ T5933] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 402.341600][ T5933] usb 6-1: config 0 has no interface number 0 [ 402.348126][ T5933] usb 6-1: config 0 interface 12 has no altsetting 0 [ 402.357585][ T5933] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 402.366908][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.375352][ T5933] usb 6-1: Product: syz [ 402.379514][ T5933] usb 6-1: Manufacturer: syz [ 402.384821][ T5933] usb 6-1: SerialNumber: syz [ 402.391605][ T5933] usb 6-1: config 0 descriptor?? [ 402.412903][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 402.420418][ T5883] usb 1-1: unable to get BOS descriptor or descriptor too short [ 402.424634][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1454'. [ 402.433215][ T5883] usb 1-1: config 8 has an invalid interface number: 143 but max is 3 [ 402.437721][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1454'. [ 402.448483][ T5883] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 402.455639][T10955] netlink: 'syz.1.1454': attribute type 11 has an invalid length. [ 402.469716][ T5883] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 402.472226][T10955] netlink: 'syz.1.1454': attribute type 14 has an invalid length. [ 402.481570][ T5883] usb 1-1: config 8 has no interface number 0 [ 402.496457][ T5883] usb 1-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 402.510375][ T5883] usb 1-1: config 8 interface 143 altsetting 193 endpoint 0x9 has invalid wMaxPacketSize 0 [ 402.520621][ T5883] usb 1-1: config 8 interface 143 altsetting 193 bulk endpoint 0x9 has invalid maxpacket 0 [ 402.530890][ T5883] usb 1-1: config 8 interface 143 altsetting 193 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 402.544339][ T5883] usb 1-1: config 8 interface 143 has no altsetting 0 [ 402.557286][ T5883] usb 1-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4 [ 402.566679][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.576997][ T1638] usb 2-1: qt2_attach - failed to power on unit: -71 [ 402.584616][ T5883] usb 1-1: Product: syz [ 402.587412][ T1638] quatech2 2-1:24.0: probe with driver quatech2 failed with error -71 [ 402.588902][ T5883] usb 1-1: Manufacturer: syz [ 402.602564][ T1638] usb 2-1: USB disconnect, device number 77 [ 402.608516][ T5883] usb 1-1: SerialNumber: syz [ 402.633009][ T5903] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 402.782981][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 402.790284][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.803266][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.813097][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 402.826248][ T5903] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 402.836496][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.846358][ T5883] io_ti 1-1:8.143: required endpoints missing [ 402.855144][ T5903] usb 3-1: config 0 descriptor?? [ 402.871688][ T5883] usb 1-1: USB disconnect, device number 71 [ 403.012114][ T5933] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 403.034801][ T5933] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 403.043917][ T5933] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 403.051590][ T5933] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 403.070812][ T5933] usb 6-1: USB disconnect, device number 48 [ 403.126069][T10988] FAULT_INJECTION: forcing a failure. [ 403.126069][T10988] name failslab, interval 1, probability 0, space 0, times 0 [ 403.139541][T10988] CPU: 0 UID: 0 PID: 10988 Comm: syz.1.1466 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 403.139573][T10988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.139583][T10988] Call Trace: [ 403.139590][T10988] [ 403.139598][T10988] dump_stack_lvl+0x189/0x250 [ 403.139628][T10988] ? __pfx____ratelimit+0x10/0x10 [ 403.139651][T10988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.139675][T10988] ? __pfx__printk+0x10/0x10 [ 403.139697][T10988] ? __pfx___might_resched+0x10/0x10 [ 403.139722][T10988] ? fs_reclaim_acquire+0x7d/0x100 [ 403.139747][T10988] should_fail_ex+0x414/0x560 [ 403.139772][T10988] should_failslab+0xa8/0x100 [ 403.139792][T10988] __kmalloc_noprof+0xcb/0x4f0 [ 403.139808][T10988] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 403.139831][T10988] ? sock_kmalloc+0xd6/0x160 [ 403.139856][T10988] sock_kmalloc+0xd6/0x160 [ 403.139878][T10988] hash_recvmsg+0x1d4/0x840 [ 403.139905][T10988] ? __pfx_hash_recvmsg+0x10/0x10 [ 403.139925][T10988] sock_recvmsg_nosec+0x186/0x1c0 [ 403.139954][T10988] ____sys_recvmsg+0x3aa/0x460 [ 403.139985][T10988] ? __pfx_____sys_recvmsg+0x10/0x10 [ 403.140023][T10988] ? import_iovec+0x74/0xa0 [ 403.140044][T10988] ___sys_recvmsg+0x1b5/0x510 [ 403.140070][T10988] ? __pfx____sys_recvmsg+0x10/0x10 [ 403.140124][T10988] ? __might_fault+0xb0/0x130 [ 403.140146][T10988] do_recvmmsg+0x307/0x770 [ 403.140175][T10988] ? __pfx_do_recvmmsg+0x10/0x10 [ 403.140206][T10988] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 403.140249][T10988] __x64_sys_recvmmsg+0x190/0x240 [ 403.140274][T10988] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 403.140294][T10988] ? rcu_is_watching+0x15/0xb0 [ 403.140324][T10988] ? do_syscall_64+0xbe/0x3b0 [ 403.140350][T10988] do_syscall_64+0xfa/0x3b0 [ 403.140373][T10988] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.140396][T10988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.140414][T10988] ? clear_bhb_loop+0x60/0xb0 [ 403.140434][T10988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.140452][T10988] RIP: 0033:0x7f7adb98e929 [ 403.140470][T10988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.140486][T10988] RSP: 002b:00007f7adc737038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 403.140506][T10988] RAX: ffffffffffffffda RBX: 00007f7adbbb5fa0 RCX: 00007f7adb98e929 [ 403.140519][T10988] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 403.140532][T10988] RBP: 00007f7adc737090 R08: 0000000000000000 R09: 0000000000000000 [ 403.140544][T10988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.140561][T10988] R13: 0000000000000000 R14: 00007f7adbbb5fa0 R15: 00007f7adbcdfa28 [ 403.140590][T10988] [ 403.409340][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.453716][ T1638] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 403.614558][ T1638] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.632215][T10983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.653361][ T1638] usb 4-1: config 0 has no interfaces? [ 403.664448][ T1638] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 403.676134][T10983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.699396][ T1638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 403.705882][ T5903] usbhid 3-1:0.0: can't add hid device: -71 [ 403.713521][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 403.724496][ T5903] usb 3-1: USB disconnect, device number 79 [ 403.749116][ T1638] usb 4-1: SerialNumber: syz [ 403.806517][ T1638] usb 4-1: config 0 descriptor?? [ 403.876520][T11000] ipvlan2: entered allmulticast mode [ 403.896269][T11000] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 404.049406][ T5828] usb 4-1: USB disconnect, device number 86 [ 404.236410][T11018] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1475'. [ 404.463239][ T5903] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 404.500426][T11030] program syz.0.1482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.576599][ T5828] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 404.632816][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 404.644287][ T5903] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 404.659631][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.691792][ T5903] usb 3-1: Product: syz [ 404.696120][ T5903] usb 3-1: Manufacturer: syz [ 404.700753][ T5903] usb 3-1: SerialNumber: syz [ 404.729762][ T5903] usb 3-1: config 0 descriptor?? [ 404.745043][ T5828] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 404.747546][ T5903] gspca_main: se401-2.14.0 probing 047d:5003 [ 404.755221][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.774794][ T5828] usb 6-1: config 0 descriptor?? [ 404.788504][ T5828] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 404.813069][ T5883] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 404.985347][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 405.022065][ T5828] gp8psk: usb in 128 operation failed. [ 405.034602][ T5883] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 405.051538][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.107188][ T5883] usb 1-1: Product: syz [ 405.116334][ T5883] usb 1-1: Manufacturer: syz [ 405.121026][ T5883] usb 1-1: SerialNumber: syz [ 405.154768][ T5903] gspca_se401: ExtraFeatures: 48 [ 405.194575][ T5903] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 405.217696][ T5883] usb 1-1: config 0 descriptor?? [ 405.236821][ T5883] ttusb_dec_send_command: command bulk message failed: error -22 [ 405.251644][ T5883] ttusb-dec 1-1:0.0: probe with driver ttusb-dec failed with error -22 [ 405.262820][ T5828] gp8psk: usb in 146 operation failed. [ 405.268786][ T5828] gp8psk: failed to get FW version [ 405.283689][ T5828] gp8psk: FPGA Version = 173 [ 405.356526][ T1638] usb 3-1: USB disconnect, device number 80 [ 405.537237][T11051] netlink: 2052 bytes leftover after parsing attributes in process `syz.5.1477'. [ 405.547337][T11051] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 405.597663][T11047] netlink: 152988 bytes leftover after parsing attributes in process `syz.0.1483'. [ 405.811290][ T5903] usb 1-1: USB disconnect, device number 72 [ 405.885887][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1485'. [ 406.148986][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 406.701024][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 406.789436][ T1638] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 406.973617][T11071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.998989][T11071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.027381][ T1638] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 407.042529][ T1638] usb 3-1: can't read configurations, error -71 [ 407.095433][T11081] program syz.0.1494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.363586][ T5828] gp8psk: usb in 138 operation failed. [ 407.369105][ T5828] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 407.402979][ T5903] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 407.433322][ T5828] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 407.484583][ T5828] usb 6-1: USB disconnect, device number 49 [ 407.599782][ T5903] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 407.623263][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.631454][ T5903] usb 1-1: Product: syz [ 407.640504][ T5903] usb 1-1: Manufacturer: syz [ 407.645555][ T5903] usb 1-1: SerialNumber: syz [ 407.655757][ T5903] usb 1-1: config 0 descriptor?? [ 407.869824][ T5903] hso 1-1:0.0: Failed to find INT IN ep [ 407.885648][T11094] netlink: 'syz.5.1500': attribute type 10 has an invalid length. [ 407.889956][ T5903] usb-storage 1-1:0.0: USB Mass Storage device detected [ 408.094871][T11104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.126926][T11104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.198643][T11104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.253183][T11104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.269069][T11104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.309003][T11104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.318237][T11104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.326883][ T5903] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 408.346127][T11104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.366497][T11104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.377283][T11104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.426441][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.435676][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.483827][ T5903] usb 4-1: device descriptor read/all, error -71 [ 408.579064][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 408.633312][T11119] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1508'. [ 408.722284][ T5883] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 408.800752][ T9] usb 6-1: config 160 has an invalid interface number: 200 but max is 0 [ 408.810477][ T9] usb 6-1: config 160 has no interface number 0 [ 408.819303][ T9] usb 6-1: config 160 interface 200 has no altsetting 0 [ 408.832064][T11125] Cannot find add_set index 0 as target [ 408.870156][ T9] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 408.889745][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.899001][ T9] usb 6-1: Product: syz [ 408.904014][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.914452][ T5883] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 408.930788][ T9] usb 6-1: Manufacturer: syz [ 408.935788][ T9] usb 6-1: SerialNumber: syz [ 408.940505][ T5883] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 408.955576][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.969406][ T5883] usb 2-1: config 0 descriptor?? [ 409.105150][T11131] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 409.284249][T11113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.341896][T11113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.371168][ T5883] Bluetooth: Can't get state to change to load ram patch err [ 409.397385][T11131] 8021q: adding VLAN 0 to HW filter on device bond3 [ 409.404812][ T5883] Bluetooth: Loading patch file failed [ 409.404845][ T5883] ath3k 2-1:0.0: probe with driver ath3k failed with error -32 [ 409.456509][ T5883] usb 2-1: USB disconnect, device number 78 [ 409.472591][T11136] veth0_to_bond: left allmulticast mode [ 409.498213][T11136] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 409.573366][ T1638] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 409.627847][T11139] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1514'. [ 409.638734][T11139] tipc: Enabling of bearer rejected, failed to enable media [ 409.726484][ T1638] usb 3-1: config 0 has no interfaces? [ 409.736501][ T1638] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 409.747321][ T1638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.759516][ T1638] usb 3-1: Product: syz [ 409.769790][ T1638] usb 3-1: Manufacturer: syz [ 409.777393][ T1638] usb 3-1: SerialNumber: syz [ 409.860862][ T1638] usb 3-1: config 0 descriptor?? [ 410.166053][ T5883] usb 1-1: USB disconnect, device number 73 [ 410.662847][ T5883] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 410.977572][ T5883] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 411.086022][ T5883] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 411.203574][ T5883] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 411.332270][ T5883] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 411.476714][ T5883] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 411.621325][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 411.708884][ T5883] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 411.808964][ T5883] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 411.862850][ T5883] usb 1-1: Product: syz [ 411.873147][ T5883] usb 1-1: Manufacturer: syz [ 411.885480][ T5883] usb 1-1: SerialNumber: syz [ 411.905229][ T5883] usb 1-1: config 0 descriptor?? [ 411.924079][T11149] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 411.955710][ T5883] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 411.976089][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 412.055802][ T9] usb 6-1: MIDIStreaming interface descriptor not found [ 412.073149][ T5883] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 412.231788][ T5828] usb 3-1: USB disconnect, device number 83 [ 412.324369][ T9] usb 6-1: USB disconnect, device number 50 [ 412.374844][T11159] netlink: 2052 bytes leftover after parsing attributes in process `syz.5.1519'. [ 412.457896][T11159] FAULT_INJECTION: forcing a failure. [ 412.457896][T11159] name failslab, interval 1, probability 0, space 0, times 0 [ 412.461426][ T6114] udevd[6114]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.501547][T11159] CPU: 1 UID: 0 PID: 11159 Comm: syz.5.1519 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 412.501587][T11159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.501598][T11159] Call Trace: [ 412.501607][T11159] [ 412.501615][T11159] dump_stack_lvl+0x189/0x250 [ 412.501646][T11159] ? __pfx____ratelimit+0x10/0x10 [ 412.501673][T11159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.501698][T11159] ? __pfx__printk+0x10/0x10 [ 412.501722][T11159] ? __mutex_trylock_common+0x153/0x260 [ 412.501749][T11159] should_fail_ex+0x414/0x560 [ 412.501777][T11159] should_failslab+0xa8/0x100 [ 412.501799][T11159] __kmalloc_cache_noprof+0x70/0x3d0 [ 412.501816][T11159] ? __hw_addr_add_ex+0x1f4/0x770 [ 412.501843][T11159] __hw_addr_add_ex+0x1f4/0x770 [ 412.501871][T11159] dev_addr_init+0x14f/0x230 [ 412.501897][T11159] ? __pfx_dev_addr_init+0x10/0x10 [ 412.501915][T11159] ? alloc_netdev_mqs+0xa6/0x11e0 [ 412.501953][T11159] alloc_netdev_mqs+0x2f3/0x11e0 [ 412.501975][T11159] ? __pfx_bond_setup+0x10/0x10 [ 412.502004][T11159] rtnl_create_link+0x31f/0xd10 [ 412.502034][T11159] rtnl_newlink_create+0x25c/0xb00 [ 412.502061][T11159] ? __pfx_aa_get_newest_label+0x10/0x10 [ 412.502087][T11159] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 412.502106][T11159] ? rtnl_newlink+0x8db/0x1c70 [ 412.502126][T11159] ? __pfx___mutex_lock+0x10/0x10 [ 412.502161][T11159] ? ns_capable+0x8a/0xf0 [ 412.502191][T11159] rtnl_newlink+0x16d6/0x1c70 [ 412.502211][T11159] ? netlink_sendmsg+0x805/0xb30 [ 412.502244][T11159] ? __pfx_rtnl_newlink+0x10/0x10 [ 412.502286][T11159] ? kasan_quarantine_put+0xdd/0x220 [ 412.502311][T11159] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.502341][T11159] ? nlmon_xmit+0xb0/0x100 [ 412.502362][T11159] ? kmem_cache_free+0x18f/0x400 [ 412.502388][T11159] ? __local_bh_enable_ip+0x12d/0x1c0 [ 412.502413][T11159] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.502438][T11159] ? __local_bh_enable_ip+0x12d/0x1c0 [ 412.502462][T11159] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 412.502490][T11159] ? __dev_queue_xmit+0x27e/0x3a70 [ 412.502526][T11159] ? __lock_acquire+0xab9/0xd20 [ 412.502583][T11159] ? __pfx_rtnl_newlink+0x10/0x10 [ 412.502600][T11159] rtnetlink_rcv_msg+0x7cf/0xb70 [ 412.502623][T11159] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 412.502640][T11159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 412.502656][T11159] ? ref_tracker_free+0x63a/0x7d0 [ 412.502677][T11159] ? __copy_skb_header+0xa7/0x550 [ 412.502703][T11159] ? __pfx_ref_tracker_free+0x10/0x10 [ 412.502723][T11159] ? __skb_clone+0x63/0x7a0 [ 412.502750][T11159] netlink_rcv_skb+0x208/0x470 [ 412.502771][T11159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 412.502791][T11159] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.502824][T11159] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.502843][T11159] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.502869][T11159] netlink_unicast+0x75b/0x8d0 [ 412.502899][T11159] netlink_sendmsg+0x805/0xb30 [ 412.502929][T11159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.502953][T11159] ? aa_sock_msg_perm+0x94/0x160 [ 412.502975][T11159] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.502997][T11159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.503018][T11159] __sock_sendmsg+0x219/0x270 [ 412.503047][T11159] sock_sendmsg+0x158/0x230 [ 412.503074][T11159] ? __pfx_sock_sendmsg+0x10/0x10 [ 412.503112][T11159] ? __asan_memset+0x22/0x50 [ 412.503136][T11159] ? iov_iter_bvec+0xb8/0x180 [ 412.503163][T11159] splice_to_socket+0x8ff/0xf10 [ 412.503206][T11159] ? __pfx_splice_to_socket+0x10/0x10 [ 412.503222][T11159] ? aa_file_perm+0x3e7/0xed0 [ 412.503270][T11159] ? get_pid_task+0x20/0x1f0 [ 412.503306][T11159] ? bpf_lsm_file_permission+0x9/0x20 [ 412.503329][T11159] ? security_file_permission+0x75/0x290 [ 412.503349][T11159] ? rw_verify_area+0x258/0x650 [ 412.503376][T11159] ? __pfx_splice_to_socket+0x10/0x10 [ 412.503394][T11159] do_splice+0xc76/0x1660 [ 412.503439][T11159] ? __pfx_do_splice+0x10/0x10 [ 412.503468][T11159] __se_sys_splice+0x2e1/0x460 [ 412.503495][T11159] ? __pfx___se_sys_splice+0x10/0x10 [ 412.503520][T11159] ? __x64_sys_splice+0x21/0xf0 [ 412.503542][T11159] do_syscall_64+0xfa/0x3b0 [ 412.503571][T11159] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.503595][T11159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.503613][T11159] ? clear_bhb_loop+0x60/0xb0 [ 412.503635][T11159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.503652][T11159] RIP: 0033:0x7ff3c078e929 [ 412.503669][T11159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.503685][T11159] RSP: 002b:00007ff3c1664038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 412.503704][T11159] RAX: ffffffffffffffda RBX: 00007ff3c09b6080 RCX: 00007ff3c078e929 [ 412.503718][T11159] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 412.503729][T11159] RBP: 00007ff3c1664090 R08: 000000000004ffe2 R09: 0000000000000000 [ 412.503741][T11159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.503752][T11159] R13: 0000000000000001 R14: 00007ff3c09b6080 R15: 00007ff3c0adfa28 [ 412.503781][T11159] [ 413.107201][T11164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1522'. [ 413.143303][ T5828] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 413.307871][ T5828] usb 3-1: config 0 has no interfaces? [ 413.320145][ T5828] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 413.329785][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.338235][ T5828] usb 3-1: Product: syz [ 413.342429][ T5828] usb 3-1: Manufacturer: syz [ 413.349588][ T5828] usb 3-1: SerialNumber: syz [ 413.357225][ T5828] usb 3-1: config 0 descriptor?? [ 413.367674][ T5828] usb 1-1: USB disconnect, device number 74 [ 413.376645][ T5828] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 413.503225][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 413.555300][T11184] syz_tun: entered allmulticast mode [ 413.565534][T11183] syz_tun: left allmulticast mode [ 413.641342][T11187] program syz.0.1533 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.654887][ T9] usb 4-1: device descriptor read/64, error -71 [ 413.830558][T11196] unknown channel width for channel at 909000KHz? [ 413.912999][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 414.072953][ T9] usb 4-1: device descriptor read/64, error -71 [ 414.103513][ T5828] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 414.193164][ T9] usb usb4-port1: attempt power cycle [ 414.243887][ T5828] usb 2-1: device descriptor read/64, error -71 [ 414.493211][ T5828] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 414.542819][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 414.573527][ T9] usb 4-1: device descriptor read/8, error -71 [ 414.642941][ T5828] usb 2-1: device descriptor read/64, error -71 [ 414.766372][ T5828] usb usb2-port1: attempt power cycle [ 414.949997][ T9] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 414.989540][ T9] usb 4-1: device descriptor read/8, error -71 [ 415.147938][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 415.157382][ T9] usb usb4-port1: unable to enumerate USB device [ 415.164040][ T5828] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 415.183816][ T5828] usb 2-1: device descriptor read/8, error -71 [ 415.388468][ T9] usb 3-1: USB disconnect, device number 84 [ 415.475251][ T5828] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 415.533530][ T5828] usb 2-1: device descriptor read/8, error -71 [ 415.796640][ T5828] usb usb2-port1: unable to enumerate USB device [ 416.652811][ T5903] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 416.768741][T11232] 8021q: adding VLAN 0 to HW filter on device bond4 [ 416.783017][ T5903] usb 4-1: device descriptor read/64, error -71 [ 416.798027][T11232] bond4: entered promiscuous mode [ 416.812102][T11232] bond0: (slave bond4): Enslaving as an active interface with an up link [ 416.841880][T11242] binder: BINDER_SET_CONTEXT_MGR already set [ 416.849763][T11242] binder: 11239:11242 ioctl 4018620d 200000000040 returned -16 [ 416.881096][T11242] binder: BINDER_SET_CONTEXT_MGR already set [ 416.899403][T11242] binder: 11239:11242 ioctl 4018620d 200000000040 returned -16 [ 416.977244][ T5828] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 416.994091][ T5828] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 416.995508][ T5883] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 417.007055][ T5828] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 417.027219][ T5903] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 417.050771][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1554'. [ 417.074471][ T5828] hid-generic 0003:0004:0000.0010: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 417.083907][T11249] macvtap1: entered promiscuous mode [ 417.083928][T11249] team0: entered promiscuous mode [ 417.085916][T11249] macvtap1: entered allmulticast mode [ 417.101721][T11249] team0: entered allmulticast mode [ 417.121652][T11249] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 417.173443][ T5903] usb 4-1: device descriptor read/64, error -71 [ 417.204201][ T5883] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 417.212423][ T5883] usb 1-1: config 0 has no interface number 0 [ 417.238072][ T5883] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 417.264751][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.276751][T11250] fido_id[11250]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 417.294987][ T5883] usb 1-1: config 0 descriptor?? [ 417.300928][ T5903] usb usb4-port1: attempt power cycle [ 417.325113][ T5883] usb 1-1: selecting invalid altsetting 1 [ 417.334190][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1556'. [ 417.345416][ T5883] dvb_ttusb_budget: ttusb_init_controller: error [ 417.351765][ T5883] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 417.499948][ T5883] DVB: Unable to find symbol cx22700_attach() [ 417.564511][ T5883] DVB: Unable to find symbol tda10046_attach() [ 417.570895][ T5883] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 417.582194][T11268] Cannot find add_set index 0 as target [ 417.620498][ T5883] usb 1-1: USB disconnect, device number 75 [ 417.662812][ T5903] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 417.686893][ T5903] usb 4-1: device descriptor read/8, error -71 [ 417.884298][T11282] netlink: 'syz.2.1564': attribute type 1 has an invalid length. [ 417.933138][ T5903] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 417.944320][T11282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.964720][ T5903] usb 4-1: device descriptor read/8, error -71 [ 417.967933][T11285] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 418.041216][T11287] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1565'. [ 418.073828][ T5903] usb usb4-port1: unable to enumerate USB device [ 418.109852][T11288] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 418.167608][T11287] tipc: Enabling of bearer rejected, already enabled [ 418.386210][T11300] binder_alloc: binder_alloc_mmap_handler: 11298 200000ffd000-200001000000 already mapped failed -16 [ 418.428028][T11299] binder: BINDER_SET_CONTEXT_MGR already set [ 418.446028][T11299] binder: 11298:11299 ioctl 4018620d 200000000040 returned -16 [ 418.447124][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1571'. [ 418.464128][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1571'. [ 418.654011][T11308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1574'. [ 418.776290][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1575'. [ 419.043084][ T5903] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 419.075731][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058e5bc00: rx timeout, send abort [ 419.206326][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.256112][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 419.283446][ T5903] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 419.297672][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.317509][ T5903] usb 2-1: config 0 descriptor?? [ 419.419423][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 419.419437][ T30] audit: type=1326 audit(1751209867.028:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.3.1580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbea9d8e929 code=0x0 [ 419.575871][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058e58000: rx timeout, send abort [ 419.584932][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058e5bc00: abort rx timeout. Force session deactivation [ 419.639189][T11330] FAULT_INJECTION: forcing a failure. [ 419.639189][T11330] name failslab, interval 1, probability 0, space 0, times 0 [ 419.657490][T11330] CPU: 1 UID: 0 PID: 11330 Comm: syz.5.1582 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 419.657518][T11330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.657530][T11330] Call Trace: [ 419.657539][T11330] [ 419.657547][T11330] dump_stack_lvl+0x189/0x250 [ 419.657579][T11330] ? __pfx____ratelimit+0x10/0x10 [ 419.657603][T11330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.657629][T11330] ? __pfx__printk+0x10/0x10 [ 419.657651][T11330] ? __pfx___might_resched+0x10/0x10 [ 419.657677][T11330] ? fs_reclaim_acquire+0x7d/0x100 [ 419.657702][T11330] should_fail_ex+0x414/0x560 [ 419.657728][T11330] should_failslab+0xa8/0x100 [ 419.657749][T11330] __kmalloc_noprof+0xcb/0x4f0 [ 419.657765][T11330] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 419.657789][T11330] ? sock_kmalloc+0xd6/0x160 [ 419.657814][T11330] sock_kmalloc+0xd6/0x160 [ 419.657838][T11330] hash_recvmsg+0x1d4/0x840 [ 419.657866][T11330] ? __pfx_hash_recvmsg+0x10/0x10 [ 419.657888][T11330] sock_recvmsg_nosec+0x186/0x1c0 [ 419.657916][T11330] ____sys_recvmsg+0x3aa/0x460 [ 419.657947][T11330] ? __pfx_____sys_recvmsg+0x10/0x10 [ 419.657984][T11330] ? import_iovec+0x74/0xa0 [ 419.658006][T11330] ___sys_recvmsg+0x1b5/0x510 [ 419.658033][T11330] ? __pfx____sys_recvmsg+0x10/0x10 [ 419.658087][T11330] ? __might_fault+0xb0/0x130 [ 419.658109][T11330] do_recvmmsg+0x307/0x770 [ 419.658140][T11330] ? __pfx_do_recvmmsg+0x10/0x10 [ 419.658180][T11330] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 419.658224][T11330] __x64_sys_recvmmsg+0x190/0x240 [ 419.658249][T11330] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 419.658269][T11330] ? rcu_is_watching+0x15/0xb0 [ 419.658299][T11330] ? do_syscall_64+0xbe/0x3b0 [ 419.658328][T11330] do_syscall_64+0xfa/0x3b0 [ 419.658350][T11330] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.658373][T11330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.658391][T11330] ? clear_bhb_loop+0x60/0xb0 [ 419.658413][T11330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.658431][T11330] RIP: 0033:0x7ff3c078e929 [ 419.658447][T11330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.658462][T11330] RSP: 002b:00007ff3c1685038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 419.658481][T11330] RAX: ffffffffffffffda RBX: 00007ff3c09b5fa0 RCX: 00007ff3c078e929 [ 419.658495][T11330] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 419.658507][T11330] RBP: 00007ff3c1685090 R08: 0000000000000000 R09: 0000000000000000 [ 419.658519][T11330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.658530][T11330] R13: 0000000000000000 R14: 00007ff3c09b5fa0 R15: 00007ff3c0adfa28 [ 419.658560][T11330] [ 420.077916][T11340] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1584'. [ 420.084255][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058e58000: abort rx timeout. Force session deactivation [ 420.172803][T11312] macsec2: entered promiscuous mode [ 420.181813][T11312] ip6gretap0: entered promiscuous mode [ 420.191752][T11312] macsec2: entered allmulticast mode [ 420.197665][T11312] ip6gretap0: entered allmulticast mode [ 420.215040][T11312] ip6gretap0: left allmulticast mode [ 420.238873][T11312] ip6gretap0: left promiscuous mode [ 420.365732][T11347] bridge3: entered promiscuous mode [ 420.371092][T11347] bridge3: entered allmulticast mode [ 420.383835][T11347] team0: Port device bridge3 added [ 420.455030][ T5903] usbhid 2-1:0.0: can't add hid device: -71 [ 420.461073][ T5903] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 420.499925][ T5903] usb 2-1: USB disconnect, device number 83 [ 421.055695][T11356] BUG: Bad page state in process syz.3.1590 pfn:41401 [ 421.090508][T11356] page does not match folio [ 421.107762][T11356] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x41401 [ 421.160530][T11384] syz_tun: entered allmulticast mode [ 421.166655][T11356] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 421.180503][T11383] syz_tun: left allmulticast mode [ 421.188024][T11356] raw: 00fff00000000000 ffffea0001050000 00000000ffffffff ffffffffffffffff [ 421.222812][T11356] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 421.510587][ T30] audit: type=1326 audit(1751209868.988:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11377 comm="syz.1.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adb98e929 code=0x7ffc0000 [ 421.574723][T11356] page dumped because: nonzero pincount [ 421.580557][ T30] audit: type=1326 audit(1751209869.118:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11377 comm="syz.1.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7adb98e929 code=0x7ffc0000 [ 421.608044][T11356] page_owner tracks the page as allocated [ 421.618075][T11356] page last allocated via order 9, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11352, tgid 11352 (syz.3.1590), ts 420393134852, free_ts 417237388513 [ 421.667334][ T30] audit: type=1326 audit(1751209869.118:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11377 comm="syz.1.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adb98e929 code=0x7ffc0000 [ 421.711822][T11356] post_alloc_hook+0x240/0x2a0 [ 421.720223][T11356] get_page_from_freelist+0x21e4/0x22c0 [ 421.727130][ T30] audit: type=1326 audit(1751209869.118:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11377 comm="syz.1.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adb98e929 code=0x7ffc0000 [ 421.769960][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'. [ 421.799370][T11356] __alloc_frozen_pages_noprof+0x181/0x370 [ 421.810991][T11356] alloc_pages_mpol+0x232/0x4a0 [ 421.816787][T11356] alloc_pages_noprof+0xa9/0x190 [ 421.822263][T11356] folio_alloc_noprof+0x1e/0x30 [ 421.829413][T11356] filemap_alloc_folio_noprof+0xdf/0x470 [ 421.836338][ T30] audit: type=1326 audit(1751209869.148:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11377 comm="syz.1.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7adb98e929 code=0x7ffc0000 [ 421.916522][T11356] page_cache_ra_order+0x5e5/0xc70 [ 421.921750][T11356] do_sync_mmap_readahead+0x31a/0x5f0 [ 421.930723][T11356] filemap_fault+0x62a/0x1200 [ 421.952471][T11356] __do_fault+0x135/0x390 [ 421.957492][ T30] audit: type=1326 audit(1751209869.158:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11377 comm="syz.1.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adb98e929 code=0x7ffc0000 [ 421.980856][T11356] __handle_mm_fault+0x198b/0x5620 [ 421.986861][T11356] handle_mm_fault+0x40a/0x8e0 [ 421.991761][T11356] do_user_addr_fault+0xa81/0x1390 [ 421.998275][T11356] exc_page_fault+0x76/0xf0 [ 422.003717][T11356] asm_exc_page_fault+0x26/0x30 [ 422.008612][ T30] audit: type=1326 audit(1751209869.158:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11377 comm="syz.1.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adb98e929 code=0x7ffc0000 [ 422.031483][T11356] page last free pid 9 tgid 9 stack trace: [ 422.038201][T11356] __free_frozen_pages+0xc71/0xe70 [ 422.044974][T11356] __folio_put+0x21b/0x2c0 [ 422.050464][T11356] unpin_user_pages_dirty_lock+0x395/0x510 [ 422.058515][T11356] xdp_umem_release+0xdc/0x220 [ 422.064134][T11356] process_scheduled_works+0xae1/0x17b0 [ 422.069815][T11356] worker_thread+0x8a0/0xda0 [ 422.075075][T11356] kthread+0x70e/0x8a0 [ 422.079148][T11356] ret_from_fork+0x3fc/0x770 [ 422.084324][T11356] ret_from_fork_asm+0x1a/0x30 [ 422.089142][T11356] Modules linked in: [ 422.093620][T11356] CPU: 1 UID: 0 PID: 11356 Comm: syz.3.1590 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 422.093634][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.093641][T11356] Call Trace: [ 422.093645][T11356] [ 422.093650][T11356] dump_stack_lvl+0x189/0x250 [ 422.093669][T11356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.093684][T11356] ? __pfx_print_modules+0x10/0x10 [ 422.093698][T11356] ? percpu_ref_put+0x19/0x180 [ 422.093720][T11356] ? percpu_ref_put+0xf9/0x180 [ 422.093732][T11356] bad_page+0x180/0x1c0 [ 422.093746][T11356] free_tail_page_prepare+0x2c3/0x4f0 [ 422.093758][T11356] __free_frozen_pages+0x8aa/0xe70 [ 422.093774][T11356] __folio_put+0x21b/0x2c0 [ 422.093787][T11356] ? __pfx___folio_put+0x10/0x10 [ 422.093803][T11356] delete_from_page_cache_batch+0x84c/0x9b0 [ 422.093813][T11356] ? shmem_mapping+0xd/0x50 [ 422.093829][T11356] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 422.093843][T11356] ? __filemap_fdatawait_range+0x1d2/0x230 [ 422.093854][T11356] ? __pfx_workingset_update_node+0x10/0x10 [ 422.093867][T11356] ? folio_mapping+0x16f/0x240 [ 422.093881][T11356] ? truncate_cleanup_folio+0x34a/0x430 [ 422.093896][T11356] truncate_inode_pages_range+0x28a/0xda0 [ 422.093917][T11356] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 422.093944][T11356] ? smp_call_function_many_cond+0xbc5/0x12d0 [ 422.093962][T11356] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.093993][T11356] ? __pfx_has_bh_in_lru+0x10/0x10 [ 422.094008][T11356] blkdev_flush_mapping+0x108/0x270 [ 422.094023][T11356] ? bdev_release+0x40f/0x650 [ 422.094037][T11356] bdev_release+0x417/0x650 [ 422.094054][T11356] ? __pfx_blkdev_release+0x10/0x10 [ 422.094064][T11356] blkdev_release+0x15/0x20 [ 422.094072][T11356] __fput+0x44c/0xa70 [ 422.094091][T11356] task_work_run+0x1d1/0x260 [ 422.094105][T11356] ? __pfx_task_work_run+0x10/0x10 [ 422.094118][T11356] ? kmem_cache_free+0x18f/0x400 [ 422.094130][T11356] do_exit+0x6b5/0x22e0 [ 422.094147][T11356] ? __pfx_get_timespec64+0x10/0x10 [ 422.094165][T11356] ? __pfx_do_exit+0x10/0x10 [ 422.094178][T11356] ? rcu_is_watching+0x15/0xb0 [ 422.094196][T11356] __x64_sys_exit+0x40/0x40 [ 422.094207][T11356] x64_sys_call+0x21a3/0x21c0 [ 422.094217][T11356] do_syscall_64+0xfa/0x3b0 [ 422.094230][T11356] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.094246][T11356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.094263][T11356] ? clear_bhb_loop+0x60/0xb0 [ 422.094283][T11356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.094300][T11356] RIP: 0033:0x7fbea9d8e929 [ 422.094315][T11356] Code: Unable to access opcode bytes at 0x7fbea9d8e8ff. [ 422.094325][T11356] RSP: 002b:00007fbeaab8bfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 422.094343][T11356] RAX: ffffffffffffffda RBX: 00007fbea9fb5fa0 RCX: 00007fbea9d8e929 [ 422.094351][T11356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.094357][T11356] RBP: 00007fbea9e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 422.094363][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.094370][T11356] R13: 0000000000000000 R14: 00007fbea9fb5fa0 R15: 00007fbeaa0dfa28 [ 422.094386][T11356] [ 422.094470][T11356] Disabling lock debugging due to kernel taint [ 422.423285][T11356] BUG: Bad page state in process syz.3.1590 pfn:41400 [ 422.430170][T11356] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x41400 [ 422.439681][T11356] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 422.448752][T11356] flags: 0xfff1000000004d(locked|referenced|uptodate|head|node=0|zone=1|lastcpupid=0x7ff) [ 422.459333][T11356] raw: 00fff1000000004d dead000000000100 dead000000000122 0000000000000000 [ 422.495663][T11356] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 422.514197][T11356] head: 00fff1000000004d dead000000000100 dead000000000122 0000000000000000 [ 422.548286][T11356] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 422.579248][T11356] head: 00fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 422.590247][T11356] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 422.601208][T11356] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 422.611047][T11356] page_owner tracks the page as allocated [ 422.619834][T11356] page last allocated via order 9, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11352, tgid 11352 (syz.3.1590), ts 420393134852, free_ts 417237388513 [ 422.645163][T11356] post_alloc_hook+0x240/0x2a0 [ 422.656289][T11356] get_page_from_freelist+0x21e4/0x22c0 [ 422.664377][T11356] __alloc_frozen_pages_noprof+0x181/0x370 [ 422.670502][T11356] alloc_pages_mpol+0x232/0x4a0 [ 422.677184][T11356] alloc_pages_noprof+0xa9/0x190 [ 422.684899][T11356] folio_alloc_noprof+0x1e/0x30 [ 422.690909][T11356] filemap_alloc_folio_noprof+0xdf/0x470 [ 422.698060][T11356] page_cache_ra_order+0x5e5/0xc70 [ 422.705729][T11356] do_sync_mmap_readahead+0x31a/0x5f0 [ 422.712271][T11356] filemap_fault+0x62a/0x1200 [ 422.718697][T11356] __do_fault+0x135/0x390 [ 422.725553][T11356] __handle_mm_fault+0x198b/0x5620 [ 422.731817][T11356] handle_mm_fault+0x40a/0x8e0 [ 422.737583][T11356] do_user_addr_fault+0xa81/0x1390 [ 422.745242][T11356] exc_page_fault+0x76/0xf0 [ 422.751786][T11356] asm_exc_page_fault+0x26/0x30 [ 422.760548][T11356] page last free pid 9 tgid 9 stack trace: [ 422.770409][T11356] __free_frozen_pages+0xc71/0xe70 [ 422.778038][T11356] __folio_put+0x21b/0x2c0 [ 422.784570][T11356] unpin_user_pages_dirty_lock+0x395/0x510 [ 422.795205][T11356] xdp_umem_release+0xdc/0x220 [ 422.799981][T11356] process_scheduled_works+0xae1/0x17b0 [ 422.806066][T11356] worker_thread+0x8a0/0xda0 [ 422.810681][T11356] kthread+0x70e/0x8a0 [ 422.815190][T11356] ret_from_fork+0x3fc/0x770 [ 422.820216][T11356] ret_from_fork_asm+0x1a/0x30 [ 422.825483][T11356] Modules linked in: [ 422.829471][T11356] CPU: 1 UID: 0 PID: 11356 Comm: syz.3.1590 Tainted: G B 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 422.829488][T11356] Tainted: [B]=BAD_PAGE [ 422.829492][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.829498][T11356] Call Trace: [ 422.829503][T11356] [ 422.829507][T11356] dump_stack_lvl+0x189/0x250 [ 422.829524][T11356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.829538][T11356] ? __pfx_print_modules+0x10/0x10 [ 422.829551][T11356] bad_page+0x180/0x1c0 [ 422.829565][T11356] __free_frozen_pages+0xe17/0xe70 [ 422.829577][T11356] __folio_put+0x21b/0x2c0 [ 422.829588][T11356] ? __pfx___folio_put+0x10/0x10 [ 422.829599][T11356] delete_from_page_cache_batch+0x84c/0x9b0 [ 422.829609][T11356] ? shmem_mapping+0xd/0x50 [ 422.829622][T11356] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 422.829636][T11356] ? __filemap_fdatawait_range+0x1d2/0x230 [ 422.829645][T11356] ? __pfx_workingset_update_node+0x10/0x10 [ 422.829657][T11356] ? folio_mapping+0x16f/0x240 [ 422.829670][T11356] ? truncate_cleanup_folio+0x34a/0x430 [ 422.829683][T11356] truncate_inode_pages_range+0x28a/0xda0 [ 422.829698][T11356] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 422.829722][T11356] ? smp_call_function_many_cond+0xbc5/0x12d0 [ 422.829737][T11356] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.829756][T11356] ? __pfx_has_bh_in_lru+0x10/0x10 [ 422.829768][T11356] blkdev_flush_mapping+0x108/0x270 [ 422.829783][T11356] ? bdev_release+0x40f/0x650 [ 422.829796][T11356] bdev_release+0x417/0x650 [ 422.829810][T11356] ? __pfx_blkdev_release+0x10/0x10 [ 422.829818][T11356] blkdev_release+0x15/0x20 [ 422.829827][T11356] __fput+0x44c/0xa70 [ 422.829841][T11356] task_work_run+0x1d1/0x260 [ 422.829853][T11356] ? __pfx_task_work_run+0x10/0x10 [ 422.829864][T11356] ? kmem_cache_free+0x18f/0x400 [ 422.829874][T11356] do_exit+0x6b5/0x22e0 [ 422.829885][T11356] ? __pfx_get_timespec64+0x10/0x10 [ 422.829899][T11356] ? __pfx_do_exit+0x10/0x10 [ 422.829910][T11356] ? rcu_is_watching+0x15/0xb0 [ 422.829925][T11356] __x64_sys_exit+0x40/0x40 [ 422.829936][T11356] x64_sys_call+0x21a3/0x21c0 [ 422.829945][T11356] do_syscall_64+0xfa/0x3b0 [ 422.829961][T11356] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.829973][T11356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.829983][T11356] ? clear_bhb_loop+0x60/0xb0 [ 422.829993][T11356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.830002][T11356] RIP: 0033:0x7fbea9d8e929 [ 422.830010][T11356] Code: Unable to access opcode bytes at 0x7fbea9d8e8ff. [ 422.830017][T11356] RSP: 002b:00007fbeaab8bfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 422.830034][T11356] RAX: ffffffffffffffda RBX: 00007fbea9fb5fa0 RCX: 00007fbea9d8e929 [ 422.830047][T11356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.830058][T11356] RBP: 00007fbea9e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 422.830068][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.830079][T11356] R13: 0000000000000000 R14: 00007fbea9fb5fa0 R15: 00007fbeaa0dfa28 [ 422.830095][T11356]