last executing test programs: 11.821166241s ago: executing program 0 (id=195): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, r6, {0x7, 0x1f, 0x10001, 0xffffffff908913b9, 0xab2, 0x7, 0xff, 0x101, 0x0, 0x0, 0x0, 0x800}}, 0x50) open$dir(&(0x7f0000000100)='./file0\x00', 0xa00, 0x40) dup3(r4, r5, 0x6700000000000000) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) io_setup(0x5, &(0x7f0000000240)=0x0) r8 = socket(0x11, 0x2, 0x0) setsockopt(r8, 0x107, 0x17, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x8401, 0x0) io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r9, &(0x7f0000000300)="87992d800d80", 0x6, 0x4}]) getpeername$packet(0xffffffffffffffff, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001c80)=0x14) sendmmsg$inet(r1, &(0x7f0000001e00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000040)="74490275cc274cbbf97a9ee107e8cf8a7dd41ffa5e2aa8789823da186933748c1b4f00d609c26800ea668d90d23db06e46129202d47ac05a1c47789097d4f5f95d888c6fccf1252e4cb7380023ee1fd60fc0a994ca91fd2508d5ebb19f9b3d821c0c393f87664ef282f50d937329097199adff68f258f460f7678566b40c4ccd5971ceef05213530bed74560e7ea93f98b416154166c5727a69e720c4149ab1299c5e92aa0b3bfe1f8aaf27edbfa493be1e8441c7047053a55a229954d0401af74db3243948c3be3b3e9dae0cda1e50db00169f185831163ad347e53f83f079d6b42a51ed9a2dc2bb91d8112", 0xec}, {&(0x7f0000001e40)="6ea62c8ae90246ecbd66537e4c40df1a269769fd843dff5886f5b8fa6db2e41e3202c8a08636ec120c9ba992b91174b9f5d65ae576e35495bcf02cc0622a142aa5232667313e24f2a9c5536381c387f6704956486aa4194e253feae7f39d7d36843e1fa70f9e260f3a08a504330f86771867caa999383be665e4ac93c06d29e793450e2e0b8df03d2ccb83b896d05b165c0c2538a67fbcb38776a2803aec87552d83206acdd8ac5ed22201a3e8878125237b32bd6400"/196, 0xc4}, {&(0x7f0000000200)="555692c94724aa6655f98713c29dfb02d0e78b0b3d11a4535008e527a812471e749c5494e69565431070038acbd73d29aaefcf0c3ab2d73fa6e1fee65460308ab48efcfcf2f9bc5960691e67e2d105f12b612f8176003fc3be56c84f3fa4836f0eeba313d0fdfc23dd1a6dc99f81d4dca9d15e83a5fe0289239eff74e91bee3f32a5c9931e9b2dd7b37a6db02c59dc9091f1cb73f9a67f5895a146e79ff8850af0bd094ac07074930ebf6e5fb716b425b4f06eef661d9ff202ac8adaa0893c081622d73081", 0xc5}, {&(0x7f0000000300)="d6420f4342bc13544f995938ae0f6e00f155ad0e18711a8110697bf1ffa8625debd6cc8055edf84c4b5b6b9cdec378f6221ea84eb78410ac81c141d7b2a93115efb47958c639819965f09314e6535deaeebb477996b7ab8f76f9f0fca5eb110c46a9fd451f1097add281e821ed5763554831a53448a31d9d109582c9987b142b", 0x80}, {&(0x7f0000000380)="268df3d33cccfd3a0e96b7e2e7fa1328ff5f8dc384cd25ab6b635e445c33065c02a5e1cd19bd12ed5288ab3040b86a56517d895bb5a94ab6", 0x38}, {&(0x7f00000003c0)="67f30ea6b063221e99413872ac66ff60404bb05557996a4adbee3a27ab391925310c7a0444302001914c593bbaab0fda5a77d9fb7dd4b33562f404ce16055963a2ddf25b3280939af6eeec3554daf8218f656de94fabedd47625c8098f30939486525586129e3ad9d4454763cdfdb4869fd2a7411f37246e3c1df54e4d3f395bfafd3441c5b8edde934ab527c575e63920497cba5e1290011fe77e128453820f3bf130fcea5207", 0xa7}], 0x6, &(0x7f0000000500)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x9}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xa}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0xc, 0xeb, 0x3, 0x2, [{@rand_addr=0x64010101, 0x1077280e}]}, @end]}}}], 0x4c}}, {{&(0x7f00000005c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000640)="425483d4a471a038fc4f8aa90cfe389247c41c5588110bc56352bc045cedc57bf2d01b9c82da2994b6c9737525f942e0da9a7b04c9650716937d89d612ed1bf39c6eb296c0e3c50250ad8e", 0x4b}, {&(0x7f00000006c0)="aa6d8d57477d15b9f78b8cfea1cfa4556f81d74b3363f0102d47dd0b02c421070542d6ebb22f2e5eec44e5eb3790bd270f7b8f11e0e7876acfaf81b753f71da283b002e8eb14822f91ec20e096d63e0f1e192673acd5912c0df428fbbca248eb058e5c54d6d48d15f83e615e4d15ad9ad3c49e32942c4b43377256f13dc44658c29b2642f06c32373e210d331af7978f754b0a42055643a2b5b5ddcd1cc72ef5092cfcd50c807eb51cf6bf45f964a2bd2eb2254fd736da4cb6a2e89941a5b13dbb557ccf86636c50fb6b2c55f23a36c4129b411dc8d4b671a998377304c6e0b89f2fc1cc97ae", 0xe6}, {&(0x7f00000007c0)="2037cc8eb4280c3c00bdfcbd68c9a1f3a90fe9540dafce98bf23699717ffb64058db40af003818d3e0c26750680c7b26e0db38eb7645c91e791007dec7ea4365b45a7b46dc99664e690fd4a038ce01052e631c10a5cdda1d5ec8cf4a3ce2849f107439a4318a6857", 0x68}, {&(0x7f0000000840)="cf2435ccac4b4b327198f6258d309d7af5bc11825c0ade7a0243972046ff40e320d6d6fa2e6320042329d9ccbe48c6c14108d9dc1ba00ec9fe32c63518d4d591930a0d6adec6f1aaef90b0c022d3128c7647757c8336dbc86a7857c261615de5521432141a3424c45ae564e5724059fa36c5241bfd7297", 0x77}, {&(0x7f00000008c0)="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", 0xfc}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="5e607d70fad06a89cc95a75e54f3c440e153fcb3cb9982270800ebca5938c18e7a8befff761414d45a61b7d0c3dce42e14370bbdd0494bee053b41f28df6fa36cdcef73cfa9c31f205b7b217113c5ccd3174adf3f5d299eb2e4fa66d363e7ffe3781a2691e9b5db7eba9afe51fa444e71aebeb370a100fca91b22636f1962dc3714022709f165572c565fe318d752409135205207979eb43b08186e8c76272835ac5c7a202a29c62aad654210736a7cedf4001adc5541038e0759c7590a02c856fe465b241d994", 0xc7}, {&(0x7f0000001ac0)="7d46661f1c54f4ed6c22d11f1c1eba2d33cf6408a49832e23cffc1a4f8d72010ec55087640f516c8d805ea8fbb1f5dc9dd5369faae9d59550db5ffaabcb5fd0ead7105b6ef044072c3e8acef145d4b36222dcab5091a2e989e276ce417fbf98e002074e0ee9bdb6ebd291be1d044bca1dc27aa83f2c23bc2a69d157145cef4fcd8f37b48d06afdef321856440ab42fc1b03476faaa6c85582766ec8e00683029821c7600091dd6fbda76c0569f46dd1fa429a582ad6955c10f0af830e39d2abfc40ffa8c2c", 0xc5}], 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="10000000000000000100000009000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff100000000000000002000000000400000d000000000000000100000001000000180000000000000008000000", @ANYRES32=r10, @ANYBLOB="0a010101e00000000000000007000000441cfe61ac1414aa00000006e000000200000975ac1414bb00000008861d000000030602020b34b172cc6c3c1b0f21020a7a854f8b4b08251d890badac1414bbe0000001f80d541e109211b76fd18d81dc44104ed00000000400000006000100010186060000000110000000000000000100000002000000100000000000000001000000cbbd00000d00000000000000010000000900000000000000"], 0x104}}], 0x2, 0x24000000) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="0407"], 0x102) 10.702518148s ago: executing program 0 (id=197): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) (async) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x40, 0x31, 0xd2, {0xd2, 0x1, "2d26d541fe0e7d45f3cb9420fb0e47b3c0a84d8e0a7c5559fce32949bd67cadf16212d6b6ad0906f185dd862d09bba90a2ebfa8aa3afc8dc703f48f182ba8c83d71afd0ae91c4a542e8486f3bd53a29ff83e2d46b8ba7d01a3d18048b530eea111e1474c77d4fa4d6573443556bcb8553fcc39a0d4ce2d3a30ce9c1c8a5dd74ae78079fc4f239812983390470f42f968d90aee383650c2694f1c898950bb0b2ffc9061b7ec04136f649452a26d64b2754e361ec4a8fd5ad2acc6e2bfbdb941c3b9735f47c7495c786be9357839e30c6f"}}, &(0x7f0000000100)={0x0, 0x3, 0x46, @string={0x46, 0x3, "5a50302026e070a1c1da7684f7935834f28da208b66ef3fdfa7e2610138be48952e4a960cecb87c99b0521f0412cbdff45ccffabe9976dc9937fead9227bc342172677b8"}}, &(0x7f0000000180)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x1, 0x2, 0xfffb}, @ptm_cap={0x3}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x10, 0xd6, 0x7f, "9a6d241a", "f925e0cb"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x8, 0xe1, 0x8, 0x4, 0x80, 0x1}}}, &(0x7f0000000740)={0x44, &(0x7f0000000280)={0x0, 0x10, 0x9e, "d1b985f54cddea6915690a62cf46d0c8c820ed203db439310b7928c1d6f62993a816881547d5644380f1942aedcf01499864326622b5a8e79f0d4ef3a3d980cee0728eaeda6cf61090808fb6d0d761986dbbecb6b2d15ca3260ba324b5f14e94ec3d11cad9558ba93085212dec5591ebf41f2ac7d1f82fc4b5151628f064e8a9a1b917109beab8da65dc4543951415123083f6b5e38de33a49454b96bd05"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x1f80, 0x1, [0xff]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "c6cf"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x13, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "d7f8"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xf}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x3}}) 9.008433287s ago: executing program 4 (id=206): syz_usb_connect(0x0, 0x43, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000043a5aa40801b96e3b1a70b0000010902120001000000000904"], 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20203, 0x128) pread64(r0, &(0x7f0000000080)=""/238, 0xee, 0xe7cc) 8.562729205s ago: executing program 3 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010325bd70007cffffff110000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c0d3}, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) unshare(0x400) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x3, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0) 8.558445323s ago: executing program 2 (id=209): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000033666a"], 0x48) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 7.617399147s ago: executing program 4 (id=211): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000040)=0xfffdffff, 0x4) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="31da5cba6b4e3db5e405fe9048743e35f214f5a065cc65e132beae1e9e3a5bd1ff96f2f645112a4bd26b2cfdd30a747aee22c0684c7eb60d5d6b2a52118d71076d50924d2ee6ac30fa7db78c4256d01240ed2b9a0164e853ae6bd98aa2e2d789223594f276a1a6f40af7f981474ec03ef64caf12a549fcbe8b2957ef64a76ebfc3bcdfb3e0ed5e48797bab3f84efd2eee9e757b3d92a17e23ac06a008ff7fc31900543832dd8c4a2fd48c4e5da602bfda012c5717f8b54b53f9e73852fcb9c30554fe1d18e37aa7f315e465867d47b50766b39102c6595fde343934778f7c136118b95189229f90da6c036922efb9b7e41faa20850", 0xf5) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000033666a"], 0x48) r6 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, &(0x7f0000000a80)=""/188, 0xba) read$char_usb(r7, 0x0, 0x0) syz_usb_disconnect(r6) sendmmsg$unix(r5, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unshare(0x2c020400) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x5, 0x4) r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffff9c, r8, 0x41, 0x1ff) r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) close(r9) execveat$binfmt(0xffffffffffffff9c, r8, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 7.562703635s ago: executing program 0 (id=212): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 6.846065717s ago: executing program 1 (id=214): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 6.675775021s ago: executing program 3 (id=215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0xf, 0x803, 0x9) r4 = syz_clone(0x60218000, &(0x7f0000000440)="e68714458dbe2f41550fee05673c93d6121ff040155da0a46f30cccfe21473cd6003014f3ad218f3e88d8a01ea45c528415a48aa67cc7b7b0edf3f2ffc5cfa3bd1073ede1073e97e46ea10d6bb38ffa5f10bfa941500c671d4d59f15eee9757a83d883e4b26677b5390486d462c7e9642d54af3322a2818649ef400814f8b98227f65c8687daacea2d6ecc0386088032a430ae4b84e6313f8af3034e5cb5e82f0fe9d832199caaf05d5dcc5c6ed59c4e4984ab2cb1c2ae76de5940599d92c1c8c76936cd81b2a6b3df648cf6dd1ff7ac17478dd2f8a0ef178575b2738868ab6dac136e26cbfabdc02028545dce821f1b47de88b2b2420002180af3cec398c4c2afb51442047e6910fcfd92802780703c4244e6ece1d90f9fa00c7361b7e294ab220c9c90ad37d6a9cce45a44387e30f1b4de11ec1ba2cacc489bf4254d52b3343343c3eda91ecf5c45341d2321ff9057f970a353d21c9209a9fb686af91daa4b5b21503ce747e1936802ffa1d135bef657dd0386092da01f72900a1be8b54476384a116168e02abbede82dbd3be6f6f4eaaac216cf920348bc9aba83b50d93998f1b4f943bd5d82f4bcd23deec65c83752a0184bcef4b81af2b7c09449ac2f05a320d9cc492acc876972965ec25e10d880208054ea4b2b64d484ab66d24a6da8670301671fe82a23f478abac0a48b7639448f6daceee4388d19a190dcb9f1d080ed7ad69a7434986c542667a8ca58e50ee72716385b8edd60e395abe9fabad104f1a8f20143e69284795a4329e384284cda3bc8f12dd92f49408882f0e5a714d4c3395651d9da44d752f84b47e45dbee9c5c1cbc1b9a1ed65702111759408376de0eb53111015ee7189801d0a68df4bd6a4b61669987eb51c434d1e2b644031ffa592d3e58222089acfd91f560addd85d180f5792ee45b389a2d172a1a3522c8fc2889d389b9104a32cc7175bcb4b384a58aaf64940147ad04eae311c862df4c10d585cbb146a9f11e788c225c32105c595253fb6ecbb01576a97aaa577be037cfdca7082f973658d2a188316e537c11d9154e864d5127b517f8c70862f378c64c6c7a107778dea1e69df687e268ee668dba035e2c55b928e0059c030d4e6e56b9243ff3152c6bcd3b9b2f37dd9657c457dcec87c10455ef9efa082d9a49a6ef973bc9888acf9db31de86656b22d76b92bd5e547a71da0bc5768fe484c43088ba4b19f203b84ab1ad4e9833997ca7dc6bbc5fb960a20a1fef48cf9b8b23b3816c907db0f9e6f30b8351e790960e735b7fd0b4549e022ee6824a122df4714e111c9946d9e98fe40a06db7503929aa8c1b38a07b5bef1cc2ba459b366b9266000ea5f6c697ab7695b0af048cb5478759372a145b8ff852651c82289374d8a0a948a66bb4bcdb99869efea467b5914e70cbe291f3769a33dff2f28c243d3f02ec0b2c28a98a5c268072823ad6b46e2b2aca6765b749052f92d059a6323f34126d918666864d88f8dd239a76645f621d27ee763a792a3e40904051e70202814a3fbfc758440c6feb274a6849a7137552ad3a378e169776ce586f4d36f531f6cf368590d93f8c8bf1a366ffbde38beddb93f6fd151424d8285bba532ea822e445dacce04ae60fd47448e89499be98f0f5bf06b98696eeec3064c5c0bd4e8864d23482eb937162e7846f6498a855a12423037e6de5508938b6d498a37fcfaa7aad216b29edd18d5d4e04db52476bddf886246a5a065c5f1e97c859e480e742f94ba653905752b4b118db121a131ef421b5267ac99be5e3a037d220cb16ce81eab3166df46b647c2fab7d12bf6401e0f2f2869296db8c3e8ba4d3855c664c9e164e783ba0ec30698faf21b149e5c98e72446ec7e4da62f418390e54cc1421bcdb4355f6cb1d42a9c1759963e2d9197155fd5b18d416df925e96a03e422f520a07ee18f9a6b29f8e10556f3e0c43bed899e535c33f94386be24419846c9bc1f0da5b314d1b3d08295144f59655836685b93c0a32a8cdd2a7142a63e6e39cc658e196e45742830e21bd89e481ad271400b5da8c6058d0da187f8741c7cd97f1a2e42caea72f0c068b0ee4d1a88227b86674f773dd312483dcaefe4cf9674cff1e19319dee713616facf4f50fd785e8a482a2f03a45fd6a133d6a08100b33cf2660903c7f00f373a7de1e1d83fd81c4ff82c77cf4f0d70c75499f265c3aef6cf9447f2012b885d7238b52154838ae91b94267086a24ffc7b29bbf5cca3dadc59a12f1c8d143299973e8d9fd70cf834cab30a4b0f3788be94dddca1678bef07175873420988407ea03bb8de09237918e4c03532b9805f5efca4bda326c8e53f83f2ea0777bc29c5e2c164c067b4fad1fa240e014aa7879567476ae184477d5885e7d0f8fbd28aedda41923c74cb308ab03caa8fd11ce5581b85ef16f831b8a3580bd0eb5f1c39975d650a23ee4085b023de7d7723acbd4431deb4699e25d72a499cac4fc3542717345850f6e7e09225e5f013d93756740824022b331511bbc6e6ef1a5eb2ee37d03988b846051aa909dd17890d8235d660c07234b67a7cbea7c7c9a64de2f93cdffe24a29dcdb80a19d4c71b6c5c5b32e5bc91d07d7a3903712b15dfccc317faa1b02d429707e6b6f8d17b57569756b0187c37755fbfa322c7b6b56721b803a3ed3bc4885ab427eff1e8094bf9d59f64cdbc2cdf8c64668ac6b7fb0ead6d596c8fc78c53df546fadaecef53758ce5c968cb9fbfa721534c81b8dd56763f815c5ca3e29bc0344672196c9dbe52c10d0e8697f39d8337bb7fb8295b72ac38977cf84e62bdb5f540574767cf2f005af9eb171023faa24a85adc47a1fd39aec53ee9c56e8223a9fff3a83db003d9b6816c22f9be4882b3ddca7d587ec786f83079d9832ae28c0fb5c338d0c79bc9a6bf0abf12e9b810fa0ed2b19aabc24338b4b242dcecce56055ffca3770e3cc11a2a141ec0bbac22ef9734050a38edf8b85ace9249df8ce1207af2978eb95644e27122ed9bd587cec497ba23a95eda7f1e47a68eea965e194e9f97c072bfe22c3670c6746a41d5b6ee1e621ebf852ffb4c255dfcd706714d330fef4fa55bdd6b9450bc56e8b9838120822f4c074ffe12c46d01f52dca479ad17f0d6893ce9721769b80d459a81bcb248f346e38ef3d1deeb4514e89a53717e157f4cfdf43cae9e344e8d6cb29a4cf01273945f86866fa68c1d8639433660011d8a22cd66baffe83564dd3510dd864a7f17d4b2d2580fbd5880c59fd3b5184f77f0e552e952956571516d2f40919f885416d6691db978729c3f8a11c78f3dcfe3a9482d578283967e472f673bba037f42a3627ed14ba8b846e522b52180ba309d0295aeafa4cc6300fced7b64b0bc0f73236b97d7dd4b4f7d1a8f326248dcdd3de40c401c0e8e801531e074e5dca1494ca5e3f873c65300f2fada5728ee47383a7297cf286a19c58a85843b969d6efc76d13607bbb3aaa2eab4a5e0616fb1b880639271d83a655a91b1e1a726540a75a75a2d51e4835b8da7a3e6e101d31767f4b7f2556413a36f28e181f0ab684c47c48e1bb87da5178573db1789e587d842370d5e814ee9fbfc8c458651d8f2dd91546a1beb9acd313f7991b17127bc9dca90f121415080aac0ca57176d9361385ffae7a90eae6bfeddfcfe49bb920e4784d8ab5e3e384cc9d37c8756aa45c2218845916db23d2b2d7ffa5ce3764f6de4a37e8d374d7f0ed710df1914cea9b9bbf80d44e82d9b18144f7a9e8520198d81b75ba6a068019477b730190bbdcdf3487dca590db6fc304209cb395fbf31db4d073916dd54dc3fe7f5a234d6d601eb1d40ab8ad33b4e07f59f6263aa122464af76aba04a11ad1ff1d1b5199e5338de4bfb24329e386f802c59d50a909b0d07f8e47f235159501746c28a1eea8b0e5d41f94e26a3eab863d865c508bf0257c03b8d36b9787166546e6c81393993122d99d0752bcdd371300642dcab9852f652aff5923af348d50ce49af786e75c02d46ed6bdd7d4b035226f9615ef3fa1b104ef5dcf47e5ad4b5cfa331c7a6b0c45defe5a087d0ad4c497e345f102c099d0b5c34f12785ed47d3d1362d4c7920443c5a863bb534009a58ebc2f91a4b8f873c20933e8f2a7c170208d8590d7cdd5b1b915d5ce221fbe218a1703f6ca3ad33d0bc33c27028655398fc6b050ea909b79355a9fbaab85aea084f83eead4fa0866cc2baa43313972d00a7af68c5fef0ed2e064129a073811fef85f7eec444bf09c15bb89ef3082aa46ee00318bb57f8667be51358a531bd52fb31849bd5476137945857c7bd5e5cc54c22952eb4934559fc6ccb25e6cc1342510f749212719ab02c3d62a4417ada60de68aa7f4be42ceb6f0c8474fcf8ce7dc309a9c3ede67e93f1a3c539ea03d38d3d8919887a7dfeb0a0d4cb3dbdb00634262d26e1e240450842e11355766fe49bec0947f8b7754a99cbe5717a92e63f9a1ae7c8d049648c9b0e1804954ec94909a404f8686b9024c69ac12042b9201462d7efe7a83ea935fd3f93dee712c6047faeb6d839b4d7470956e9418cd94b4b380670fb11d4460eff95de8d91ce1f904ad77a5d7480f9393c222c438ff2b6ec49ae459e595117ff89c5497bfc94a6f39a666af9f87f7f219f3e49385d2fce78eea98f7db7aeb74a151b4c58a5c67b7f80507b8ca7e943a780e868621074f1133c44a618bc6856b68ba4f4d6852a88e6e4426e2bc62bf8a52894ecefa6ce2400d262a405fa295495fc6afd5376a9118dcff22f324ab2969664671138a8a329af59cac3e56a146aa37bb459a836d544c76b7b0cf63a757c7167e2dfe8661253a7f79c513611b23da4afc3ca3e942ac7738f696396413ebf24bae1fc84e1129acc9c309e66565b65ab3514909d15c013f4ca327b21af4fee6e92ed243466b8bf124dfee315e865be7553658bda6812c7931f093c9e488bf48b4b5a1c1942c6cfb9e8369a7377c01080755cb56ad2b96fcdee52879facd52f721a1a22a55d1d90880c3cd6aa669b2cb3f25b710ca885942210ea15958c60b76ede6bc447035e206588d0d36939f789c91442a30d96230c1e14e3f40fdeba5943e591e61e77f8aba7d66a395def0beb0266844d8be3aff8c96fb366bdc15222bb10e17e56f9a86764890076cb089113cd2bbcbfd8f50600eefb7b60f29afe59c3a0e77f7e8f02e887187bef9f08ab102c9ea445842ae0ecb3866046d181f6de2814bc483e3b8cf845379912278427bd52155da7366ee5e62709254a27e0d45a164c0adfce5bc5c6481af7595c03f094f7b074007aaad59c5bff5645dbcd5daf574038d7066d4e5162ad07d20ce7ac178f9a645eb2680b10d95eed2e02df07e4d61b377df724f2ced1a4de3a30dd550a2cb2aef90ab724211037c214105f3ee3350adb9cfee5f4d1cd2881e62769d26fb704bcf8561622ee6b3d022d48ea3230c5eb408532004c0f55cd59824e60f5bae3082e0de2b31eec460e416431dc6f2d8b40afbcaabab127e672fe301d6b789c37d65c3a231c7527e7b4048c1eb44b3993b6941fd04ce61a3c33a2941c5bf0b5e56794be05a817e9cdc987a7b6cb015038c18b94ec524ee1bf162a6641fad68bdb93120fbee84d1ac73766cb5dd91bbe21ba26964fd997943ff1cd0bb43b4a77d5cba5b216a4a08c32c327ed93d18061fbda905d668cfd7d94f8508d568e0b025e1b0a776b3035c2e1cc119e134aa6d0d17096e840c502d7ac09fd53855e45b31aeaabd592b838e698041f00e97fccc39d1ad6e35fc277366f0e1ad7fc751db3", 0x1000, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)="95b50510ad87f1d6641f2fb25d5eba1220d63a1ce5dbd7a2d876a408fab3a622a1ab57ec6f19fea855f92e238f68d4fe2ad46aff43a6f982e5ebcacd08221fe6b2bb64304fd338d18793bc7e23e67ba39aa43e813ddbafb8876dc5153e154ed659a1b5f358052e2027b172d7b5349a764db335fe54bfbf3702e497c1b704b7bd0e16789b4b1750727de727931c919bbd116809664fb1a3c8ad32d4") sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0x0, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r5, 0x5402) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r7 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r7, 0x10000) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x3, 0x0, 0x100000000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000440)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000001c0)=0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r9 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @auto=[0x33, 0x36, 0x32, 0x35, 0x64, 0x66, 0x62, 0x0, 0x62, 0x61, 0x33, 0x65, 0x64, 0x38, 0x63, 0x64]}, &(0x7f0000000340)={0x0, "ccb9490a299cd16d4bb6b1878b185d761fe6ef51f2fd0b4230da9e08134e22912f729cdb1b6f015a62c8ed3d596854d654201d7909d8f3933c1e69c07d17b758", 0x1a}, 0x48, 0xfffffffffffffffa) keyctl$instantiate(0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6c6f61642064656661756c7420747275737465643a2f6465762f73657175656e6365723200203030303030124e8ef11d326a7630010000800000000030303030303620663365376e0e626600"], 0x44, r9) socket$kcm(0x10, 0x2, 0x0) 6.674973292s ago: executing program 1 (id=216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xe, @mcast1, 0x4000000}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315, 0x0, r3}, &(0x7f0000000500)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x609}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r7, 0x6200}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x1, "42341f9b1000007e4f00"}) r8 = syz_open_pts(r7, 0x103100) dup3(r8, r7, 0x0) r9 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r9, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}, {&(0x7f0000000240)="a90500", 0x3}], 0x2}}], 0x1, 0x2404c0e4) 5.101490254s ago: executing program 0 (id=217): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x0, 0x18, 0x5, &(0x7f0000000240)={0x1c, "a52422ffd60775c221c4031d467d6648a97569b7d49cc4492d050600000000ff00"}}) 5.083032628s ago: executing program 2 (id=218): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000100)=""/74, 0x4a) 4.961303422s ago: executing program 1 (id=219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r1, 0x301, 0x70bd2a, 0x25dfdbfa, {0x5}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9d}, 0x0) syz_usb_connect$uac1(0x0, 0xb7, &(0x7f0000001fc0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902a50003010000010904000000010100000a24010000000201020d2406000003000000001a000008240800000000500c2402000000000000000000132406000606000000000900000000000000000924030000000005000924060505010000000904010000010200000904010101010200000905010900000000000725010000000009040200000101"], 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0x4, 0x2) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000340)={0x7a, 0x45, 0x6, 0xffeffff7, 0x13, "899b2264ee1567b542762f4e7e9dc1470a2a21"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 4.934504036s ago: executing program 3 (id=220): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x20001, &(0x7f0000000080)=ANY=[@ANYBLOB='f']) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000100)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f0080000d20b65060cec64bd4ff4eff53578e50e3545351554d3be4eea5a68bf472ced0598d7b05b0562129b88b48e2081be0621aa05a98ee7b9f059710d30b60c7b80315699f16bd7b9e26bca4d6db587cf4cf"], 0x37) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201080000000008430b030000fdacee3f3be13313000100000000090400060103000100092100000001220b00090581230000000000"], 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000500)={&(0x7f00001bb000/0x4000)=nil, 0x4000}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRESHEX=r0], 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x20, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}}, 0x2008040) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x10, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="05"], 0x1c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r9, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 4.927466032s ago: executing program 2 (id=221): r0 = socket$vsock_stream(0x28, 0x1, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x99ec, 0x0, 0xa, 0xd1}) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x66}, 0x400, 0x0, 0x1, 0xb, 0x9, 0x4}, 0x24) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) recvfrom$l2tp(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) accept4(r1, 0x0, 0x0, 0x80800) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) waitid(0x2, 0x0, 0x0, 0x8, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newlink={0x48, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7fffffff, 0x1}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r8, @ANYBLOB="060013e783e000000a00060008021100000100000600100080057f93060012"], 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 4.002218952s ago: executing program 2 (id=222): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffff7fd, 0x9, 0x3e, 0x2, 0x9, 0x0, 0x2}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0xffffdfffffffff22, 0x2, 0x8, 0x6}, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x2c936212e7547acf}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) openat$full(0xffffff9c, &(0x7f0000000000), 0x40c00, 0x0) 3.765336703s ago: executing program 4 (id=223): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc495, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) 3.597351711s ago: executing program 1 (id=224): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000077c000/0x4000)=nil], 0x0, 0x0, 0x0) 3.301265157s ago: executing program 0 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010325bd70007cffffff110000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c0d3}, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) unshare(0x400) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x3, 0x84) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, 0x0, 0x0) 2.823546482s ago: executing program 4 (id=226): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) sendto$packet(r0, 0x0, 0x0, 0x20008045, &(0x7f0000000180)={0x11, 0x1a, r2, 0x1, 0xa2}, 0x14) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "bb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "1cff13"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "b48a"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "0614af"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0xff, 0x6, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, "861b36"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0xfffe}}}}}}, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000000200)={0xa3, 0x0, 0x0}) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x10, 0x18, 0x45, &(0x7f00000004c0)}) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="19", 0x1}], 0x1}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) 2.705193351s ago: executing program 2 (id=227): add_key$user(0x0, 0x0, &(0x7f0000000100)="370c099069effa43de3e14", 0xb, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) r1 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000001c0)=0x2) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000001c0)=0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000280)='\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000f0000000800030077f651fcf81dc9dc2c70b21ab59119048588b22c10c2e7136958c766ba5abb83db37ca49626a710d98050c9c63c496f606d5eb7e2cf79101d7011128e7f82c4509b62ac43ccc4077b59afc14b696b375b26f0f5d9f586ca6fa75361ea62eaf33e4d9f84d8c9c519a49fd2783f12f71be121e70ce47d81f814898674cf6a48dac5f7f00cd38de01c91b7113d4a146f285b51a298fa3b5623155ea5ae9741959e308e3a6b995dfbea2fb132aacaf08d8a76e602de893fd8b88e67f80cbb802cc5cd2428b6ce027d563736fb7601e0f", @ANYRES32=0x0, @ANYBLOB="30000e00800000000802110000000802110000005050505050500000000000000000000002000100760600012b000600"], 0x4c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043e751d"], 0x24) 2.474976978s ago: executing program 1 (id=228): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000140)={0x0, 0x2, 0x8f19, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca249435, &(0x7f0000000540)={0x1, 0x4, @start={r2, 0x1, "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", "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"}, [0x4, 0x7, 0x4, 0x3fef, 0xb16, 0x8, 0x8, 0xdd9, 0x900000000, 0xe, 0x1, 0xe, 0x30b, 0x7, 0x4b16, 0x9, 0xe, 0x6, 0x2, 0xff, 0x7, 0x3, 0x0, 0x9, 0x200009, 0x2, 0x1, 0x42b9, 0x101, 0x0, 0x3, 0x1, 0xffffffffffff091b, 0x9, 0x408, 0x8000000001, 0x800000000005, 0x9, 0xfffffffffffffff9, 0x9000, 0x6, 0x5, 0xff, 0x2, 0x100, 0xbca, 0x1000000000000009, 0x83, 0x7ffffffffffffffe, 0x1, 0x401, 0xffffffffffff7fff, 0xafa3, 0x1, 0x3, 0x9, 0x0, 0xd1f5, 0x9, 0x5, 0x6, 0x8, 0x800]}) ioprio_set$uid(0x3, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r3, 0x0, 0x7ffffffd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000180)=""/20, &(0x7f0000000240)=0x14) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0xc, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_DEFAULT_PHY={{0x8}, 0x4}}}, 0x7) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1000, 0x98, 0x10}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r6, 0x6}, 0x8) 1.812591377s ago: executing program 3 (id=229): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581", @ANYRES32], 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r0 = syz_io_uring_setup(0xd86, &(0x7f0000000140)={0x0, 0x2c32, 0x400, 0x1, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x238582}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.613376774s ago: executing program 3 (id=230): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) futex(&(0x7f0000000040)=0x1, 0xd, 0x2, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1.508348813s ago: executing program 0 (id=231): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000080), 0x1c1c42, 0x0) read$char_usb(r2, &(0x7f00000001c0)=""/191, 0xbf) read$char_usb(r1, &(0x7f0000000100)=""/74, 0x4a) syz_usb_disconnect(0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x5c, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000140)={'veth0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 1.353934782s ago: executing program 3 (id=232): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0x4, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x0, 0x10, 0x5, &(0x7f0000000240)={0x1c, "a52422ffd60775c221c4031d467d6648a97569b7d49cc4492d050600000000ff00"}}) 1.201294557s ago: executing program 4 (id=233): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) ioctl$LOOP_CONFIGURE(r0, 0x1265, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5040000030003704040000000000000000000000547f8cabb8a26ba32f52b4268797d8", @ANYBLOB="7b9a6bfaceab511cd8b467bc1ca51c2609e2469b70652c4d6a0a3bcd725bb9410aab06882d2c760002422bd41449738f70770a0fc50523b575d37c04cc6a3929a158831958761832873ef32b49623c0670e8a843", @ANYBLOB="8b040400000000003000129f0b00010065800070616e00002000028004001200b30017000000000006001800060000000500160002000000", @ANYRES8=r1], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x40004) 1.166014983s ago: executing program 4 (id=234): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0607120c060700"], 0x9) syz_open_dev$sg(0x0, 0x0, 0x8002) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) sendfile(r1, r1, &(0x7f00000000c0)=0x9, 0xff) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000140)={{0xf9, 0x5}, 0x1, 0xf, 0xe8d1, {0x5, 0x5}, 0x8, 0x4}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 576.851766ms ago: executing program 2 (id=235): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, r6, {0x7, 0x1f, 0x10001, 0xffffffff908913b9, 0xab2, 0x7, 0xff, 0x101, 0x0, 0x0, 0x0, 0x800}}, 0x50) open$dir(&(0x7f0000000100)='./file0\x00', 0xa00, 0x40) dup3(r4, r5, 0x6700000000000000) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) io_setup(0x5, &(0x7f0000000240)=0x0) r8 = socket(0x11, 0x2, 0x0) setsockopt(r8, 0x107, 0x17, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x8401, 0x0) io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r9, &(0x7f0000000300)="87992d800d80", 0x6, 0x4}]) getpeername$packet(0xffffffffffffffff, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001c80)=0x14) sendmmsg$inet(r1, &(0x7f0000001e00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000040)="74490275cc274cbbf97a9ee107e8cf8a7dd41ffa5e2aa8789823da186933748c1b4f00d609c26800ea668d90d23db06e46129202d47ac05a1c47789097d4f5f95d888c6fccf1252e4cb7380023ee1fd60fc0a994ca91fd2508d5ebb19f9b3d821c0c393f87664ef282f50d937329097199adff68f258f460f7678566b40c4ccd5971ceef05213530bed74560e7ea93f98b416154166c5727a69e720c4149ab1299c5e92aa0b3bfe1f8aaf27edbfa493be1e8441c7047053a55a229954d0401af74db3243948c3be3b3e9dae0cda1e50db00169f185831163ad347e53f83f079d6b42a51ed9a2dc2bb91d8112", 0xec}, {&(0x7f0000001e40)="6ea62c8ae90246ecbd66537e4c40df1a269769fd843dff5886f5b8fa6db2e41e3202c8a08636ec120c9ba992b91174b9f5d65ae576e35495bcf02cc0622a142aa5232667313e24f2a9c5536381c387f6704956486aa4194e253feae7f39d7d36843e1fa70f9e260f3a08a504330f86771867caa999383be665e4ac93c06d29e793450e2e0b8df03d2ccb83b896d05b165c0c2538a67fbcb38776a2803aec87552d83206acdd8ac5ed22201a3e8878125237b32bd6400"/196, 0xc4}, {&(0x7f0000000200)="555692c94724aa6655f98713c29dfb02d0e78b0b3d11a4535008e527a812471e749c5494e69565431070038acbd73d29aaefcf0c3ab2d73fa6e1fee65460308ab48efcfcf2f9bc5960691e67e2d105f12b612f8176003fc3be56c84f3fa4836f0eeba313d0fdfc23dd1a6dc99f81d4dca9d15e83a5fe0289239eff74e91bee3f32a5c9931e9b2dd7b37a6db02c59dc9091f1cb73f9a67f5895a146e79ff8850af0bd094ac07074930ebf6e5fb716b425b4f06eef661d9ff202ac8adaa0893c081622d73081", 0xc5}, {&(0x7f0000000300)="d6420f4342bc13544f995938ae0f6e00f155ad0e18711a8110697bf1ffa8625debd6cc8055edf84c4b5b6b9cdec378f6221ea84eb78410ac81c141d7b2a93115efb47958c639819965f09314e6535deaeebb477996b7ab8f76f9f0fca5eb110c46a9fd451f1097add281e821ed5763554831a53448a31d9d109582c9987b142b", 0x80}, {&(0x7f0000000380)="268df3d33cccfd3a0e96b7e2e7fa1328ff5f8dc384cd25ab6b635e445c33065c02a5e1cd19bd12ed5288ab3040b86a56517d895bb5a94ab6", 0x38}, {&(0x7f00000003c0)="67f30ea6b063221e99413872ac66ff60404bb05557996a4adbee3a27ab391925310c7a0444302001914c593bbaab0fda5a77d9fb7dd4b33562f404ce16055963a2ddf25b3280939af6eeec3554daf8218f656de94fabedd47625c8098f30939486525586129e3ad9d4454763cdfdb4869fd2a7411f37246e3c1df54e4d3f395bfafd3441c5b8edde934ab527c575e63920497cba5e1290011fe77e128453820f3bf130fcea5207", 0xa7}], 0x6, &(0x7f0000000500)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x9}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xa}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0xc, 0xeb, 0x3, 0x2, [{@rand_addr=0x64010101, 0x1077280e}]}, @end]}}}], 0x4c}}, {{&(0x7f00000005c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000640)="425483d4a471a038fc4f8aa90cfe389247c41c5588110bc56352bc045cedc57bf2d01b9c82da2994b6c9737525f942e0da9a7b04c9650716937d89d612ed1bf39c6eb296c0e3c50250ad8e6e291aae9215a1d74dd993f1", 0x57}, {&(0x7f00000006c0)="aa6d8d57477d15b9f78b8cfea1cfa4556f81d74b3363f0102d47dd0b02c421070542d6ebb22f2e5eec44e5eb3790bd270f7b8f11e0e7876acfaf81b753f71da283b002e8eb14822f91ec20e096d63e0f1e192673acd5912c0df428fbbca248eb058e5c54d6d48d15f83e615e4d15ad9ad3c49e32942c4b43377256f13dc44658c29b2642f06c32373e210d331af7978f754b0a42055643a2b5b5ddcd1cc72ef5092cfcd50c807eb51cf6bf45f964a2bd2eb2254fd736da4cb6a2e89941a5b13dbb557ccf86636c50fb6b2c55f23a36c4129b411dc8d4b671a998377304c6e0b89f2fc1cc97ae", 0xe6}, {&(0x7f00000007c0)="2037cc8eb4280c3c00bdfcbd68c9a1f3a90fe9540dafce98bf23699717ffb64058db40af003818d3e0c26750680c7b26e0db38eb7645c91e791007dec7ea4365b45a7b46dc99664e690fd4a038ce01052e631c10a5cdda1d5ec8cf4a3ce2849f107439a4318a6857", 0x68}, {&(0x7f0000000840)="cf2435ccac4b4b327198f6258d309d7af5bc11825c0ade7a0243972046ff40e320d6d6fa2e6320042329d9ccbe48c6c14108d9dc1ba00ec9fe32c63518d4d591930a0d6adec6f1aaef90b0c022d3128c7647757c8336dbc86a7857c261615de5521432141a3424c45ae564e5724059fa36c5241bfd7297", 0x77}, {&(0x7f00000008c0)="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", 0xfc}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="5e607d70fad06a89cc95a75e54f3c440e153fcb3cb9982270800ebca5938c18e7a8befff761414d45a61b7d0c3dce42e14370bbdd0494bee053b41f28df6fa36cdcef73cfa9c31f205b7b217113c5ccd3174adf3f5d299eb2e4fa66d363e7ffe3781a2691e9b5db7eba9afe51fa444e71aebeb370a100fca91b22636f1962dc3714022709f165572c565fe318d752409135205207979eb43b08186e8c76272835ac5c7a202a29c62aad654210736a7cedf4001adc5541038e0759c7590a02c856fe465b241d994", 0xc7}, {&(0x7f0000001ac0)="7d46661f1c54f4ed6c22d11f1c1eba2d33cf6408a49832e23cffc1a4f8d72010ec55087640f516c8d805ea8fbb1f5dc9dd5369faae9d59550db5ffaabcb5fd0ead7105b6ef044072c3e8acef145d4b36222dcab5091a2e989e276ce417fbf98e002074e0ee9bdb6ebd291be1d044bca1dc27aa83f2c23bc2a69d157145cef4fcd8f37b48d06afdef321856440ab42fc1b03476faaa6c85582766ec8e00683029821c7600091dd6fbda76c0569f46dd1fa429a582ad6955c10f0af830e39d2abfc40ffa8c2c", 0xc5}], 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="10000000000000000100000009000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff100000000000000002000000000400000d000000000000000100000001000000180000000000000008000000", @ANYRES32=r10, @ANYBLOB="0a010101e00000000000000007000000441cfe61ac1414aa00000006e000000200000975ac1414bb00000008861d000000030602020b34b172cc6c3c1b0f21020a7a854f8b4b08251d890badac1414bbe0000001f80d541e109211b76fd18d81dc44104ed00000000400000006000100010186060000000110000000000000000100000002000000100000000000000001000000cbbd00000d00000000000000010000000900000000000000"], 0x104}}], 0x2, 0x24000000) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="0407"], 0x102) 0s ago: executing program 1 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000100)={@host, 0x6}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000bc0)=0x80000000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x60080, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000001001000001000000dc00"], 0x10}, 0x40) recvmsg(r4, 0x0, 0x2000) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x405c5504, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x501800, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20041, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x400c401) openat$audio1(0xffffff9c, 0x0, 0x8080, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): duct: syz [ 87.373202][ T5908] usb 5-1: Manufacturer: syz [ 87.385521][ T5908] usb 5-1: SerialNumber: syz [ 87.405990][ T5931] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 87.414483][ T5908] usb 5-1: config 0 descriptor?? [ 87.423932][ T5931] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 87.443249][ T6011] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 87.465806][ T5931] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.478557][ T5931] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 87.491629][ T5931] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 87.504509][ T5931] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 87.511930][ T5931] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 87.522146][ T980] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.530198][ T5931] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.543833][ T5931] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 87.673713][ T5931] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 87.689368][ T5931] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 87.697162][ T5931] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 87.708702][ T5931] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.721578][ T5931] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 87.733904][ T5931] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 87.784068][ T5931] usb 2-1: string descriptor 0 read error: -22 [ 87.797402][ T5931] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 87.815940][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.832426][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.875619][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.885770][ T980] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 87.895013][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.071378][ T5931] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 88.132584][ T980] usb 3-1: config 0 descriptor?? [ 88.335809][ T5894] usb 2-1: USB disconnect, device number 5 [ 88.567920][ T5932] usb 5-1: USB disconnect, device number 5 [ 88.579327][ T980] usbhid 3-1:0.0: can't add hid device: -71 [ 88.590947][ T980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 88.621526][ T980] usb 3-1: USB disconnect, device number 4 [ 88.803529][ T5931] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 88.954825][ T6035] tipc: Can't bind to reserved service type 2 [ 89.165411][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 89.175296][ T5931] usb 4-1: config 1 has an invalid interface number: 181 but max is 0 [ 89.210274][ T5931] usb 4-1: config 1 has no interface number 0 [ 89.228033][ T5931] usb 4-1: config 1 interface 181 altsetting 1 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 89.254859][ T5931] usb 4-1: config 1 interface 181 has no altsetting 0 [ 89.349998][ T5931] usb 4-1: string descriptor 0 read error: -22 [ 89.356586][ T5931] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1d.74 [ 89.365733][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.454019][ T5931] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 90.280514][ T6052] netlink: 1272 bytes leftover after parsing attributes in process `syz.4.32'. [ 90.431496][ T6052] netlink: 48 bytes leftover after parsing attributes in process `syz.4.32'. [ 90.561171][ T1151] usb 4-1: Failed to submit usb control message: -110 [ 90.569882][ T1151] usb 4-1: unable to send the bmi data to the device: -110 [ 90.608533][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 90.608549][ T30] audit: type=1326 audit(1760349437.322:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 90.638314][ T1151] usb 4-1: unable to get target info from device [ 90.650140][ T1151] usb 4-1: could not get target info (-110) [ 90.678060][ T1151] usb 4-1: could not probe fw (-110) [ 90.691424][ T30] audit: type=1326 audit(1760349437.362:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 90.806809][ T30] audit: type=1326 audit(1760349437.382:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 90.903673][ T30] audit: type=1326 audit(1760349437.402:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 90.929561][ T30] audit: type=1326 audit(1760349437.402:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 91.443565][ T30] audit: type=1326 audit(1760349437.402:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 91.466249][ T30] audit: type=1326 audit(1760349437.402:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 91.514427][ T30] audit: type=1326 audit(1760349437.402:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 91.537163][ T30] audit: type=1326 audit(1760349437.402:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 91.559617][ T30] audit: type=1326 audit(1760349437.402:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 91.631814][ T5894] usb 4-1: USB disconnect, device number 5 [ 93.163650][ T980] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 93.283670][ T5879] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.463593][ T980] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.474680][ T980] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.495753][ T980] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.584823][ T5879] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 93.688574][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.740217][ T5879] usb 3-1: config 1 interface 0 altsetting 159 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.879984][ T5879] usb 3-1: config 1 interface 0 has no altsetting 0 [ 93.906596][ T5879] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.40 [ 93.915867][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.916213][ T6080] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 93.973642][ T5879] usb 3-1: Product: syz [ 93.978002][ T5879] usb 3-1: Manufacturer: syz [ 93.982798][ T5879] usb 3-1: SerialNumber: syz [ 94.066325][ T980] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.305666][ T5879] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 94.393859][ T5879] usb 3-1: USB disconnect, device number 5 [ 94.983513][ T9] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 95.136790][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 95.144501][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.165845][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.352488][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.366571][ T5879] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 95.437574][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.677571][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 95.685463][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.721677][ T5879] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.730927][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.756431][ T5879] usb 3-1: Product: syz [ 95.760715][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.776579][ T5879] usb 3-1: Manufacturer: syz [ 95.781284][ T5879] usb 3-1: SerialNumber: syz [ 95.787932][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.800624][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.816216][ T5879] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 95.843281][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 95.851759][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.871399][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.892010][ T980] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 96.197310][ T5879] usb 5-1: USB disconnect, device number 6 [ 96.208367][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 96.265095][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.280060][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.361679][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 96.391159][ T9] usb 2-1: string descriptor 0 read error: -22 [ 96.397605][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 96.407070][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.433275][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 96.529801][ T9] usb 3-1: USB disconnect, device number 6 [ 96.747249][ T6097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.761120][ T6097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.784593][ T5887] usb 2-1: USB disconnect, device number 6 [ 96.834602][ T5932] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.125567][ T5932] usb 5-1: config 0 interface 0 altsetting 225 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.137384][ T5932] usb 5-1: config 0 interface 0 has no altsetting 0 [ 97.144865][ T5932] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 97.160534][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.174721][ T5932] usb 5-1: config 0 descriptor?? [ 97.233672][ T980] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 97.240946][ T980] ath9k_htc: Failed to initialize the device [ 97.256383][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 97.844893][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 98.114400][ T6129] netlink: 'syz.4.46': attribute type 1 has an invalid length. [ 98.165226][ T5932] nti 0003:0757:0A00.0003: invalid report_size -1903817399 [ 98.172475][ T5932] nti 0003:0757:0A00.0003: item 0 4 1 7 parsing failed [ 98.210385][ T5932] nti 0003:0757:0A00.0003: probe with driver nti failed with error -22 [ 98.223623][ T5879] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 98.405364][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.416750][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.426864][ T5879] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 98.443776][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.824827][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 98.824845][ T30] audit: type=1326 audit(1760349445.472:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 98.877805][ T30] audit: type=1326 audit(1760349445.472:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 98.920730][ T5879] usb 2-1: config 0 descriptor?? [ 98.978710][ T30] audit: type=1326 audit(1760349445.472:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 99.004454][ T30] audit: type=1326 audit(1760349445.472:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 99.232130][ T30] audit: type=1326 audit(1760349445.472:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 99.359979][ T30] audit: type=1326 audit(1760349445.482:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 99.382066][ T30] audit: type=1326 audit(1760349445.482:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 99.405628][ T30] audit: type=1326 audit(1760349445.482:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 99.427268][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.436113][ T30] audit: type=1326 audit(1760349445.482:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 99.749021][ T6141] syzkaller0: entered promiscuous mode [ 99.766666][ T6141] syzkaller0: entered allmulticast mode [ 100.144421][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.159780][ T5879] elan 0003:04F3:0755.0004: failed to start in urb: -90 [ 100.181942][ T30] audit: type=1326 audit(1760349446.892:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 100.205174][ T5879] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 100.359725][ T5932] usb 5-1: USB disconnect, device number 7 [ 100.573567][ T5879] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.822238][ T9] usb 2-1: USB disconnect, device number 7 [ 100.989194][ T5879] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.027410][ T5879] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 101.115524][ T5879] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.126369][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.145872][ T6149] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 101.165056][ T5879] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.042471][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.56'. [ 103.463039][ T5931] usb 1-1: USB disconnect, device number 3 [ 103.616709][ T5908] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.793967][ T5908] usb 4-1: device descriptor read/64, error -71 [ 103.887027][ T6185] syzkaller0: entered promiscuous mode [ 103.902884][ T6185] syzkaller0: entered allmulticast mode [ 104.237530][ T5908] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.363913][ T5879] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.393508][ T5908] usb 4-1: device descriptor read/64, error -71 [ 104.504200][ T5908] usb usb4-port1: attempt power cycle [ 104.547192][ T5879] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.572186][ T5879] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.582110][ T5910] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.602608][ T5879] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.620588][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.673575][ T6189] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.711986][ T5879] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.770904][ T5910] usb 1-1: config 0 interface 0 altsetting 225 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.784458][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.816120][ T5910] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 104.887048][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.909036][ T5910] usb 1-1: config 0 descriptor?? [ 104.986220][ T5887] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 105.243893][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.263601][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.275961][ T5887] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 105.285616][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.309514][ T5887] usb 5-1: config 0 descriptor?? [ 105.373538][ T5932] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 105.621391][ T6207] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 105.631909][ T6207] Zero length message leads to an empty skb [ 105.700475][ T5910] nti 0003:0757:0A00.0005: invalid report_size -1903817399 [ 105.726204][ T5910] nti 0003:0757:0A00.0005: item 0 4 1 7 parsing failed [ 105.741855][ T5910] nti 0003:0757:0A00.0005: probe with driver nti failed with error -22 [ 105.786464][ T5932] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.798237][ T5932] usb 2-1: config 1 has an invalid interface number: 181 but max is 0 [ 105.831865][ T5932] usb 2-1: config 1 has no interface number 0 [ 105.845848][ T5932] usb 2-1: config 1 interface 181 altsetting 1 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 105.880325][ T5932] usb 2-1: config 1 interface 181 has no altsetting 0 [ 105.928288][ T5932] usb 2-1: string descriptor 0 read error: -22 [ 105.972361][ T5887] elan 0003:04F3:0755.0006: failed to start in urb: -90 [ 105.986780][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.996969][ T5887] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 106.233909][ T5932] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1d.74 [ 106.271969][ T5887] usb 5-1: USB disconnect, device number 8 [ 106.300282][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.368290][ T6208] fido_id[6208]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 106.435744][ T5932] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 106.809215][ T5910] usb 3-1: USB disconnect, device number 8 [ 107.128143][ T6218] syzkaller0: entered promiscuous mode [ 107.143541][ T6218] syzkaller0: entered allmulticast mode [ 107.487741][ T12] usb 2-1: Failed to submit usb control message: -110 [ 107.494770][ T12] usb 2-1: unable to send the bmi data to the device: -110 [ 107.502135][ T12] usb 2-1: unable to get target info from device [ 107.510078][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 107.510092][ T30] audit: type=1326 audit(1760349454.142:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 107.538098][ T12] usb 2-1: could not get target info (-110) [ 107.544135][ T12] usb 2-1: could not probe fw (-110) [ 107.549557][ T30] audit: type=1326 audit(1760349454.142:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 107.571915][ T30] audit: type=1326 audit(1760349454.142:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 107.593583][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.601094][ T30] audit: type=1326 audit(1760349454.142:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 107.627577][ T30] audit: type=1326 audit(1760349454.152:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 107.824699][ T30] audit: type=1326 audit(1760349454.152:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 107.855875][ T980] usb 2-1: USB disconnect, device number 8 [ 107.923574][ T5910] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 108.011666][ T30] audit: type=1326 audit(1760349454.152:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 108.243676][ T30] audit: type=1326 audit(1760349454.152:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.4.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 108.455924][ T5910] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.467042][ T5910] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 108.473522][ T980] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 108.487672][ T5910] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.500468][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.500795][ T5887] usb 1-1: USB disconnect, device number 4 [ 108.520663][ T6225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.603066][ T5910] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.715656][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 108.722915][ T980] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 108.731757][ T980] usb 2-1: config 0 has no interface number 0 [ 108.758873][ T980] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 108.826557][ T980] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 108.853601][ T5879] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 108.958805][ T6240] syzkaller0: entered promiscuous mode [ 108.964521][ T6240] syzkaller0: entered allmulticast mode [ 109.043747][ T980] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 109.059346][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.068260][ T5879] usb 4-1: config 0 interface 0 altsetting 225 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.086606][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.095448][ T980] usb 2-1: Product: syz [ 109.099748][ T5879] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 109.109097][ T980] usb 2-1: Manufacturer: syz [ 109.116945][ T980] usb 2-1: SerialNumber: syz [ 109.127014][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.144319][ T980] usb 2-1: config 0 descriptor?? [ 109.160628][ T6231] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.185068][ T5879] usb 4-1: config 0 descriptor?? [ 109.204309][ T6231] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.653878][ T6231] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.755300][ T6231] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.899348][ T6248] netlink: 'syz.3.73': attribute type 1 has an invalid length. [ 109.925525][ T5879] nti 0003:0757:0A00.0007: invalid report_size -1903817399 [ 109.932733][ T5879] nti 0003:0757:0A00.0007: item 0 4 1 7 parsing failed [ 109.961428][ T5879] nti 0003:0757:0A00.0007: probe with driver nti failed with error -22 [ 110.093575][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 110.279279][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.290571][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 110.301227][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.355962][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.445990][ T5908] usb 3-1: USB disconnect, device number 9 [ 110.764000][ T6246] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 110.855150][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.983584][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.106756][ T6253] netlink: 72 bytes leftover after parsing attributes in process `syz.2.77'. [ 111.159353][ T6253] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 111.207885][ T5879] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.219810][ T5879] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.236321][ T5879] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.269825][ T5879] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 111.281029][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.311379][ T5879] usb 1-1: Product: syz [ 111.396996][ T5879] usb 1-1: Manufacturer: syz [ 111.417654][ T5879] usb 1-1: SerialNumber: syz [ 111.482328][ T5879] hub 1-1:1.0: bad descriptor, ignoring hub [ 111.499273][ T5879] hub 1-1:1.0: probe with driver hub failed with error -5 [ 111.591077][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.609471][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.682143][ T5879] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 111.766391][ T5910] usb 4-1: USB disconnect, device number 9 [ 112.050400][ T6231] netlink: 120 bytes leftover after parsing attributes in process `syz.1.72'. [ 112.156719][ T6266] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.79'. [ 112.201140][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 112.323022][ T6264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.357284][ T6264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.422582][ T6251] input: syz1 as /devices/virtual/input/input7 [ 112.458741][ T980] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 112.594086][ T5908] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 112.639613][ T5931] usb 5-1: USB disconnect, device number 9 [ 112.897750][ T5908] usb 3-1: unable to get BOS descriptor or descriptor too short [ 112.908324][ T5908] usb 3-1: config 1 has an invalid interface number: 181 but max is 0 [ 112.945247][ T5908] usb 3-1: config 1 has no interface number 0 [ 112.966344][ T5908] usb 3-1: config 1 interface 181 altsetting 1 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 112.995136][ T980] asix 2-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 113.066675][ T5908] usb 3-1: config 1 interface 181 has no altsetting 0 [ 113.070983][ T980] asix 2-1:0.251: probe with driver asix failed with error -5 [ 113.118676][ T5908] usb 3-1: string descriptor 0 read error: -22 [ 113.139802][ T980] usb 2-1: USB disconnect, device number 9 [ 113.157768][ T5908] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1d.74 [ 113.187046][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.296720][ T5908] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 113.843534][ T980] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 114.085651][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.207798][ T980] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 114.229119][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.486047][ T980] usb 4-1: config 0 descriptor?? [ 114.494973][ T66] usb 3-1: Failed to submit usb control message: -110 [ 114.507660][ T66] usb 3-1: unable to send the bmi data to the device: -110 [ 114.544205][ T66] usb 3-1: unable to get target info from device [ 114.562892][ T66] usb 3-1: could not get target info (-110) [ 114.573333][ T66] usb 3-1: could not probe fw (-110) [ 114.604813][ T5879] usb 1-1: USB disconnect, device number 5 [ 114.627922][ T5879] usblp0: removed [ 114.855456][ T5879] usb 3-1: USB disconnect, device number 10 [ 114.887327][ T980] usbhid 4-1:0.0: can't add hid device: -71 [ 114.893354][ T980] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 114.991224][ T980] usb 4-1: USB disconnect, device number 10 [ 115.433517][ T980] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 115.499287][ T6289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.83'. [ 115.603603][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 115.610505][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.621703][ T980] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 115.631048][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.642662][ T980] usb 4-1: config 0 descriptor?? [ 115.783584][ T5879] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 115.791213][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.983689][ T9] usb 1-1: device descriptor read/64, error -71 [ 116.005973][ T5879] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 116.014987][ T5879] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.101617][ T5879] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.135023][ T6283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.146070][ T6308] syzkaller0: entered promiscuous mode [ 116.146581][ T5879] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 116.151553][ T6308] syzkaller0: entered allmulticast mode [ 116.154170][ T6283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.176103][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.218699][ T6283] netlink: 'syz.3.82': attribute type 21 has an invalid length. [ 116.226565][ T5879] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 116.226765][ T6283] netlink: 128 bytes leftover after parsing attributes in process `syz.3.82'. [ 116.248498][ T6283] netlink: 3 bytes leftover after parsing attributes in process `syz.3.82'. [ 116.253558][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 116.304097][ T980] kye 0003:0458:5016.0008: control desc unexpectedly large [ 116.316180][ T5879] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 116.328276][ T5879] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.376984][ T980] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0008/input/input8 [ 116.406377][ T5879] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.493569][ T9] usb 1-1: device descriptor read/64, error -71 [ 116.504362][ T5879] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 116.560434][ T5879] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 116.614423][ T5887] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 116.625917][ T980] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0008/input/input9 [ 116.637832][ T9] usb usb1-port1: attempt power cycle [ 116.649453][ T5879] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 116.664422][ T5879] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.697089][ T5879] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.718513][ T980] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 116.744510][ T5879] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 116.915038][ T5887] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.926512][ T5887] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 116.940553][ T5879] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 116.954091][ T5887] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.013975][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 117.022321][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.039899][ T5879] usb 5-1: string descriptor 0 read error: -22 [ 117.046670][ T5879] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 117.056155][ T9] usb 1-1: device descriptor read/8, error -71 [ 117.122323][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.159792][ T5879] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 117.172495][ T6310] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 117.225217][ T5887] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.333683][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 117.439551][ T9] usb 1-1: device descriptor read/8, error -71 [ 117.534825][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.550078][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.576789][ T9] usb usb1-port1: unable to enumerate USB device [ 117.636950][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.682857][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.451817][ T5908] usb 4-1: USB disconnect, device number 11 [ 118.949587][ T6329] syzkaller0: entered promiscuous mode [ 118.957935][ T6329] syzkaller0: entered allmulticast mode [ 119.065261][ T5908] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 119.466386][ T5931] usb 2-1: USB disconnect, device number 10 [ 119.536513][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 119.560233][ T5908] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 119.569772][ T9] usb 5-1: USB disconnect, device number 10 [ 119.589951][ T5908] usb 4-1: config 0 has no interface number 0 [ 119.651472][ T5908] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 119.681454][ T5908] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 119.735991][ T5908] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 119.758413][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.769633][ T5908] usb 4-1: Product: syz [ 119.777124][ T5908] usb 4-1: Manufacturer: syz [ 119.781799][ T5908] usb 4-1: SerialNumber: syz [ 119.788916][ T5908] usb 4-1: config 0 descriptor?? [ 119.794951][ T6326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.804550][ T6326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.903532][ T5946] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 119.911442][ T5932] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 120.019211][ T6326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.026882][ T6326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.083669][ T5931] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 120.091384][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 120.099830][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.113279][ T5932] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.113664][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 120.124453][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.141780][ T5932] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 120.151707][ T5946] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 120.160845][ T5932] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.170051][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.179526][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.190751][ T5946] usb 1-1: config 0 descriptor?? [ 120.199810][ T6330] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 120.220981][ T5932] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.228177][ T5946] hub 1-1:0.0: USB hub found [ 120.255665][ T5931] usb 2-1: config 0 interface 0 altsetting 225 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.267175][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.274808][ T5931] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 120.301595][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.301857][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.323036][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 120.334109][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.335021][ T5931] usb 2-1: config 0 descriptor?? [ 120.351153][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.363540][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.372722][ T9] usb 5-1: Product: syz [ 120.377092][ T9] usb 5-1: Manufacturer: syz [ 120.381994][ T9] usb 5-1: SerialNumber: syz [ 120.402412][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 120.420246][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 120.423146][ T6333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.447323][ T6333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.498181][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.511688][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.537159][ T5946] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 120.587983][ T5946] usbhid 1-1:0.0: can't add hid device: -71 [ 120.594568][ T5946] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 120.610871][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 120.635513][ T5946] usb 1-1: USB disconnect, device number 10 [ 120.947266][ T6343] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 120.966730][ T5931] nti 0003:0757:0A00.0009: invalid report_size -1903817399 [ 120.976559][ T5931] nti 0003:0757:0A00.0009: item 0 4 1 7 parsing failed [ 120.998828][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.015455][ T5931] nti 0003:0757:0A00.0009: probe with driver nti failed with error -22 [ 121.028031][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.052287][ T6337] input: syz1 as /devices/virtual/input/input10 [ 121.671790][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.699566][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.930570][ T9] usb 3-1: USB disconnect, device number 11 [ 122.133566][ T6326] netlink: 120 bytes leftover after parsing attributes in process `syz.3.91'. [ 122.399467][ T5908] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 122.422447][ T5908] asix 4-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 122.432739][ T5908] asix 4-1:0.251: probe with driver asix failed with error -5 [ 122.456978][ T5908] usb 4-1: USB disconnect, device number 12 [ 122.774699][ T6355] syzkaller0: entered promiscuous mode [ 122.782692][ T6355] syzkaller0: entered allmulticast mode [ 122.856924][ T9] usb 5-1: USB disconnect, device number 11 [ 122.897211][ T9] usblp0: removed [ 123.256643][ T30] audit: type=1326 audit(1760349469.962:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 123.373512][ T5887] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 123.384444][ T30] audit: type=1326 audit(1760349469.962:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 123.406099][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.451937][ T5879] usb 2-1: USB disconnect, device number 11 [ 123.458052][ T30] audit: type=1326 audit(1760349469.962:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 123.482137][ T30] audit: type=1326 audit(1760349469.962:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 123.504990][ T30] audit: type=1326 audit(1760349469.962:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 123.692946][ T30] audit: type=1326 audit(1760349469.972:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 123.763497][ T30] audit: type=1326 audit(1760349469.972:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 123.802680][ T5887] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 123.814027][ T5887] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 123.833618][ T30] audit: type=1326 audit(1760349469.972:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 123.855912][ T30] audit: type=1326 audit(1760349469.972:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 123.878877][ T30] audit: type=1326 audit(1760349469.972:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 123.933600][ T5887] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 123.942699][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.072245][ T6365] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 124.189580][ T5887] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 124.706424][ T5879] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 125.203771][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.227088][ T5879] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.603478][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.668078][ T5879] usb 3-1: config 0 descriptor?? [ 125.677594][ T6387] netlink: 72 bytes leftover after parsing attributes in process `syz.3.104'. [ 125.841569][ T6387] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 125.925956][ T5887] usb 1-1: USB disconnect, device number 11 [ 126.082366][ T5879] usbhid 3-1:0.0: can't add hid device: -71 [ 126.154675][ T5879] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 126.171356][ T5879] usb 3-1: USB disconnect, device number 12 [ 126.393714][ T5931] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 126.597241][ T5908] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 126.653533][ T5887] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 126.725326][ T5931] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.793497][ T5946] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 126.813486][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 126.813485][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 126.815106][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.822235][ T5887] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 126.853965][ T5931] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 126.893468][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.901748][ T5887] usb 1-1: Product: syz [ 126.901934][ T5908] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 126.919663][ T5931] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.932093][ T5887] usb 1-1: Manufacturer: syz [ 126.942204][ T5887] usb 1-1: SerialNumber: syz [ 126.954504][ T5887] usb 1-1: config 0 descriptor?? [ 126.982703][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.992216][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.063855][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 127.087516][ T5908] usb 3-1: config 0 descriptor?? [ 127.094955][ T6392] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 127.102264][ T5946] usb 4-1: config 0 has no interfaces? [ 127.109278][ T5946] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 127.154636][ T5931] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.165992][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.173600][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 127.220232][ T5946] usb 4-1: config 0 descriptor?? [ 127.473795][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 127.483679][ T6404] fuse: Unknown parameter '0x000000000000000c' [ 127.499560][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.508454][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.526357][ T6404] fuse: Unknown parameter '0x000000000000000b‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 127.561780][ T9] usb 5-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 127.587949][ T6378] netlink: 'syz.2.102': attribute type 21 has an invalid length. [ 127.620243][ T6405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.635663][ T9] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.658678][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.664627][ T5908] kye 0003:0458:5016.000A: control desc unexpectedly large [ 127.672591][ T6378] netlink: 128 bytes leftover after parsing attributes in process `syz.2.102'. [ 127.674101][ T6405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.706400][ T6378] netlink: 3 bytes leftover after parsing attributes in process `syz.2.102'. [ 127.716675][ T5908] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000A/input/input11 [ 127.809179][ T6400] netlink: 68 bytes leftover after parsing attributes in process `syz.3.107'. [ 127.836205][ T5908] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000A/input/input12 [ 127.851246][ T6400] gtp0: entered promiscuous mode [ 127.868505][ T6400] gtp0: entered allmulticast mode [ 127.890800][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 127.945144][ T5908] kye 0003:0458:5016.000A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 127.964148][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.124350][ T9] usb 5-1: config 0 descriptor?? [ 128.680579][ T6409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.697885][ T6409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.990509][ T5894] usb 2-1: USB disconnect, device number 12 [ 128.997018][ T5887] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate [ 129.005966][ T5887] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 129.123574][ T10] usb 3-1: USB disconnect, device number 13 [ 129.359385][ T5879] usb 1-1: USB disconnect, device number 12 [ 129.570810][ T9] usb 5-1: string descriptor 0 read error: -71 [ 129.628499][ T9] usb 5-1: USB disconnect, device number 12 [ 129.691444][ T5946] usb 4-1: USB disconnect, device number 13 [ 129.713800][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 129.893533][ T5908] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 129.899096][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.931991][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.973551][ T24] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 129.975661][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.024557][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 130.076598][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 130.077152][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.094806][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.105874][ T10] usb 3-1: Product: syz [ 130.110049][ T10] usb 3-1: Manufacturer: syz [ 130.115263][ T10] usb 3-1: SerialNumber: syz [ 130.119942][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.155583][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 130.156514][ T5908] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 130.191997][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.201719][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 130.202813][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 130.221298][ T24] usb 2-1: config 1 has an invalid interface number: 181 but max is 0 [ 130.236614][ T24] usb 2-1: config 1 has no interface number 0 [ 130.245572][ T24] usb 2-1: config 1 interface 181 altsetting 1 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 130.257445][ T5908] usb 1-1: config 0 descriptor?? [ 130.262626][ T24] usb 2-1: config 1 interface 181 has no altsetting 0 [ 130.281679][ T24] usb 2-1: string descriptor 0 read error: -22 [ 130.301211][ T24] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1d.74 [ 130.311307][ T5908] hub 1-1:0.0: USB hub found [ 130.350065][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.352191][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 130.429294][ T24] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 130.572951][ T5908] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 130.884354][ T5908] usbhid 1-1:0.0: can't add hid device: -71 [ 130.898307][ T5908] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 130.900604][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.930546][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.947707][ T5908] usb 1-1: USB disconnect, device number 13 [ 131.007511][ T6411] input: syz1 as /devices/virtual/input/input13 [ 131.376862][ T6437] : entered promiscuous mode [ 131.473773][ T44] usb 2-1: Failed to submit usb control message: -110 [ 131.480748][ T44] usb 2-1: unable to send the bmi data to the device: -110 [ 131.492021][ T44] usb 2-1: unable to get target info from device [ 131.519565][ T44] usb 2-1: could not get target info (-110) [ 131.534273][ T44] usb 2-1: could not probe fw (-110) [ 131.854111][ T9] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 132.005649][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.018035][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.028463][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 132.042148][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.050422][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 132.061863][ T9] usb 1-1: config 0 descriptor?? [ 132.206638][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.217931][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.227862][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 132.237034][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.247293][ T10] usb 5-1: config 0 descriptor?? [ 132.283528][ T5946] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 132.394835][ T5887] usb 3-1: USB disconnect, device number 14 [ 132.421623][ T5887] usblp0: removed [ 132.459570][ T5946] usb 4-1: config 0 interface 0 altsetting 225 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.503824][ T24] usb 2-1: USB disconnect, device number 13 [ 132.519827][ T5946] usb 4-1: config 0 interface 0 has no altsetting 0 [ 132.544435][ T5946] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 132.556298][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.569270][ T5946] usb 4-1: config 0 descriptor?? [ 132.575918][ T9] elan 0003:04F3:0755.000B: failed to start in urb: -90 [ 132.670597][ T9] elan 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 132.697014][ T10] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 132.803345][ T10] cp2112 0003:10C4:EA90.000C: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 132.837050][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.848386][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.865094][ T5879] usb 1-1: USB disconnect, device number 14 [ 132.915051][ T5887] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 132.945887][ T10] cp2112 0003:10C4:EA90.000C: Part Number: 0x82 Device Version: 0xFE [ 133.552584][ T5887] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.655543][ T5887] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 133.675547][ T5887] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.729447][ T6441] cp2112 0003:10C4:EA90.000C: Unsupported transaction 0 [ 133.747322][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.780512][ T6447] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.793732][ T6441] cp2112 0003:10C4:EA90.000C: Error starting transaction: -38 [ 133.884527][ T10] cp2112 0003:10C4:EA90.000C: error reading lock byte: -71 [ 133.894007][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 133.904861][ T5887] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.044349][ T10] usb 5-1: USB disconnect, device number 13 [ 134.282931][ T6456] netlink: 'syz.3.116': attribute type 1 has an invalid length. [ 134.488285][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.517956][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 134.587545][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.615312][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.699083][ T6454] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 134.713544][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 134.761806][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.863503][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 134.870382][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.891369][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.958526][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.984406][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.713892][ T9] usb 3-1: USB disconnect, device number 15 [ 135.779936][ T5946] usbhid 4-1:0.0: can't add hid device: -71 [ 135.789763][ T5946] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 135.801276][ T5946] usb 4-1: USB disconnect, device number 14 [ 135.891112][ T24] usb 1-1: config 0 descriptor?? [ 136.040300][ T24] hub 1-1:0.0: USB hub found [ 136.094265][ T5887] usb 2-1: USB disconnect, device number 14 [ 136.396736][ T5946] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 136.396888][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 136.544466][ T24] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 136.604036][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 136.604077][ T30] audit: type=1326 audit(1760349483.312:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 136.637071][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.649173][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.669339][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 136.683535][ T30] audit: type=1326 audit(1760349483.312:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 136.709846][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.723538][ T5887] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 136.723557][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 136.723656][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 136.759190][ T9] usb 3-1: config 0 descriptor?? [ 136.760989][ T5946] usb 4-1: config 0 interface 0 altsetting 225 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.778385][ T24] usb 1-1: USB disconnect, device number 15 [ 136.788488][ T5946] usb 4-1: config 0 interface 0 has no altsetting 0 [ 136.797271][ T5946] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 136.813665][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.823853][ T30] audit: type=1326 audit(1760349483.312:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 136.842018][ T5946] usb 4-1: config 0 descriptor?? [ 136.936768][ T5887] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 136.981198][ T5887] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 137.008501][ T30] audit: type=1326 audit(1760349483.312:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 137.094092][ T30] audit: type=1326 audit(1760349483.312:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 137.105313][ T5887] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 137.152300][ T30] audit: type=1326 audit(1760349483.312:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 137.187288][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.260529][ T30] audit: type=1326 audit(1760349483.312:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 137.330620][ T9] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 137.344244][ T9] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 137.356662][ T30] audit: type=1326 audit(1760349483.312:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 137.391653][ T6480] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 137.431644][ T30] audit: type=1326 audit(1760349483.312:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 137.435547][ T5887] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.454048][ T30] audit: type=1326 audit(1760349483.322:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 137.535904][ T9] cp2112 0003:10C4:EA90.000D: Part Number: 0x82 Device Version: 0xFE [ 137.724687][ T6484] netlink: 'syz.3.123': attribute type 1 has an invalid length. [ 138.149857][ T6469] cp2112 0003:10C4:EA90.000D: Unsupported transaction 0 [ 138.161112][ T6469] cp2112 0003:10C4:EA90.000D: Error starting transaction: -38 [ 138.220778][ T9] cp2112 0003:10C4:EA90.000D: error reading lock byte: -71 [ 138.291987][ T9] usb 3-1: USB disconnect, device number 16 [ 139.046984][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 139.058788][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.128'. [ 139.213502][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 139.416158][ T6502] netlink: 2 bytes leftover after parsing attributes in process `syz.2.130'. [ 139.519572][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.551155][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.571576][ T5946] usbhid 4-1:0.0: can't add hid device: -71 [ 139.582641][ T5946] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 139.632600][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.649895][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.659050][ T5946] usb 4-1: USB disconnect, device number 15 [ 139.672882][ T6498] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 139.683207][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.706921][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 139.958507][ T9] usb 5-1: config 0 has no interfaces? [ 139.973065][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 139.985331][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 139.998121][ T9] usb 5-1: Product: syz [ 140.002942][ T9] usb 5-1: Manufacturer: syz [ 140.008732][ T9] usb 5-1: SerialNumber: syz [ 140.030370][ T9] usb 5-1: config 0 descriptor?? [ 140.253253][ T6504] tipc: Started in network mode [ 140.298308][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.312346][ T980] usb 2-1: USB disconnect, device number 15 [ 140.318427][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 140.351408][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.361039][ T6504] tipc: Node identity 5288914ebfd, cluster identity 4711 [ 140.372405][ T6504] tipc: Enabled bearer , priority 0 [ 140.432494][ T10] usb 5-1: USB disconnect, device number 14 [ 140.499499][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.519467][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 140.533559][ T5887] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 140.556476][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.604459][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.724291][ T6503] tipc: Disabling bearer [ 140.842221][ T6514] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 140.939274][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.946313][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 140.957867][ T5887] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 140.966991][ T5887] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.978470][ T5887] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.042690][ T5887] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.100159][ T5887] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.115118][ T5887] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 141.124659][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.415101][ T5887] usb 3-1: usb_control_msg returned -71 [ 141.420868][ T5887] usbtmc 3-1:16.0: can't read capabilities [ 141.509204][ T5887] usb 3-1: USB disconnect, device number 17 [ 141.990027][ T5887] usb 1-1: USB disconnect, device number 16 [ 142.293484][ T980] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 142.403746][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 142.505340][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.575589][ T980] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 142.585428][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.595630][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.683501][ T24] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 142.688520][ T980] usb 5-1: config 0 descriptor?? [ 142.696159][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 142.705488][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.729512][ T9] usb 2-1: config 0 descriptor?? [ 142.892158][ T24] usb 1-1: device descriptor read/64, error -71 [ 142.924559][ T980] usbhid 5-1:0.0: can't add hid device: -71 [ 142.930542][ T980] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 142.972468][ T980] usb 5-1: USB disconnect, device number 15 [ 143.075242][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 143.081326][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 143.143496][ T24] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 143.162562][ T9] usb 2-1: USB disconnect, device number 16 [ 143.188975][ T5908] usb 4-1: USB disconnect, device number 16 [ 143.293713][ T24] usb 1-1: device descriptor read/64, error -71 [ 143.417842][ T24] usb usb1-port1: attempt power cycle [ 143.443520][ T980] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 143.604721][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 143.612114][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.630715][ T980] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 143.640276][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.651433][ T980] usb 5-1: config 0 descriptor?? [ 143.744374][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 143.773510][ T24] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 143.795947][ T24] usb 1-1: device descriptor read/8, error -71 [ 143.803619][ T5887] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 143.893590][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 143.900369][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.912081][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 143.922524][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.935115][ T9] usb 2-1: config 0 descriptor?? [ 143.967234][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.978493][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.988359][ T5887] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 143.999244][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.015649][ T5887] usb 3-1: config 0 descriptor?? [ 144.038308][ T24] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 144.064210][ T24] usb 1-1: device descriptor read/8, error -71 [ 144.070910][ T6528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.071474][ T6528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.093353][ T6528] netlink: 'syz.4.136': attribute type 21 has an invalid length. [ 144.101569][ T6528] netlink: 128 bytes leftover after parsing attributes in process `syz.4.136'. [ 144.110692][ T6528] netlink: 3 bytes leftover after parsing attributes in process `syz.4.136'. [ 144.129661][ T980] kye 0003:0458:5016.000E: control desc unexpectedly large [ 144.140788][ T980] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.000E/input/input14 [ 144.184296][ T24] usb usb1-port1: unable to enumerate USB device [ 144.218484][ T980] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.000E/input/input15 [ 144.273960][ T5908] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 144.307644][ T980] kye 0003:0458:5016.000E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 144.359389][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.376673][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.388908][ T6531] netlink: 'syz.1.137': attribute type 21 has an invalid length. [ 144.397172][ T6531] netlink: 128 bytes leftover after parsing attributes in process `syz.1.137'. [ 144.407043][ T6531] netlink: 3 bytes leftover after parsing attributes in process `syz.1.137'. [ 144.423527][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 144.427468][ T9] kye 0003:0458:5016.000F: control desc unexpectedly large [ 144.435704][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.446184][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.000F/input/input16 [ 144.462181][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.465158][ T5887] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 144.486815][ T5908] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.497734][ T5887] cp2112 0003:10C4:EA90.0010: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 144.499298][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.516269][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.000F/input/input17 [ 144.570494][ T9] kye 0003:0458:5016.000F: input,hiddev1,hidraw2: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 144.605777][ T5908] usb 4-1: config 0 descriptor?? [ 144.662604][ T5887] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE [ 144.684703][ T5908] hub 4-1:0.0: USB hub found [ 144.830381][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.839457][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.870938][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.881038][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.909161][ T5908] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 145.000174][ T5908] usbhid 4-1:0.0: can't add hid device: -71 [ 145.007256][ T5908] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 145.035586][ T5908] usb 4-1: USB disconnect, device number 17 [ 145.273486][ T6544] cp2112 0003:10C4:EA90.0010: Unsupported transaction 0 [ 145.284264][ T6544] cp2112 0003:10C4:EA90.0010: Error starting transaction: -38 [ 145.299407][ T5887] cp2112 0003:10C4:EA90.0010: error reading lock byte: -71 [ 145.318452][ T5887] usb 3-1: USB disconnect, device number 18 [ 145.606854][ T6556] FAULT_INJECTION: forcing a failure. [ 145.606854][ T6556] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.620129][ T6556] CPU: 1 UID: 0 PID: 6556 Comm: syz.3.143 Not tainted syzkaller #0 PREEMPT(full) [ 145.620147][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.620158][ T6556] Call Trace: [ 145.620165][ T6556] [ 145.620171][ T6556] dump_stack_lvl+0x189/0x250 [ 145.620187][ T6556] ? __pfx____ratelimit+0x10/0x10 [ 145.620206][ T6556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.620223][ T6556] ? __pfx__printk+0x10/0x10 [ 145.620241][ T6556] ? __might_fault+0xb0/0x130 [ 145.620269][ T6556] should_fail_ex+0x414/0x560 [ 145.620299][ T6556] _copy_from_iter+0x1de/0x1790 [ 145.620326][ T6556] ? rcu_is_watching+0x15/0xb0 [ 145.620347][ T6556] ? kmalloc_reserve+0xbd/0x290 [ 145.620361][ T6556] ? __pfx__copy_from_iter+0x10/0x10 [ 145.620372][ T6556] ? __build_skb_around+0x262/0x3f0 [ 145.620386][ T6556] ? netlink_sendmsg+0x642/0xb30 [ 145.620399][ T6556] ? skb_put+0x11b/0x210 [ 145.620413][ T6556] netlink_sendmsg+0x6b2/0xb30 [ 145.620431][ T6556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.620445][ T6556] ? __import_iovec+0x5d4/0x7f0 [ 145.620455][ T6556] ? aa_sock_msg_perm+0xf1/0x1d0 [ 145.620467][ T6556] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.620480][ T6556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.620493][ T6556] __sock_sendmsg+0x21c/0x270 [ 145.620506][ T6556] ____sys_sendmsg+0x505/0x830 [ 145.620523][ T6556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.620545][ T6556] ___sys_sendmsg+0x21f/0x2a0 [ 145.620555][ T6556] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.620586][ T6556] ? __fget_files+0x2a/0x420 [ 145.620597][ T6556] ? __fget_files+0x3a0/0x420 [ 145.620613][ T6556] __sys_sendmsg+0x164/0x220 [ 145.620627][ T6556] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.620645][ T6556] ? __pfx_ksys_write+0x10/0x10 [ 145.620658][ T6556] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 145.620669][ T6556] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.620680][ T6556] __do_fast_syscall_32+0xb6/0x2b0 [ 145.620691][ T6556] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.620709][ T6556] do_fast_syscall_32+0x34/0x80 [ 145.620719][ T6556] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.620731][ T6556] RIP: 0023:0xf700d539 [ 145.620745][ T6556] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 145.620755][ T6556] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 145.620767][ T6556] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 145.620774][ T6556] RDX: 0000000020040820 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.620779][ T6556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.620784][ T6556] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 145.620790][ T6556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.620804][ T6556] [ 145.925349][ T5932] usb 5-1: USB disconnect, device number 16 [ 146.074784][ T5908] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 146.253866][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 146.267442][ T5908] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 146.284555][ T5908] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 146.419765][ T5908] usb 1-1: config 0 has no interface number 0 [ 146.512814][ T5908] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 146.562145][ T5932] usb 2-1: USB disconnect, device number 17 [ 146.620295][ T5908] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 146.713504][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 146.964160][ T5908] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.977570][ T5908] usb 1-1: config 0 interface 52 has no altsetting 0 [ 146.996866][ T5908] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 147.003231][ T6572] netlink: 'syz.1.149': attribute type 2 has an invalid length. [ 147.009099][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 147.023500][ T5908] usb 1-1: Product: syz [ 147.032615][ T5908] usb 1-1: SerialNumber: syz [ 147.074402][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.118548][ T5908] usb 1-1: config 0 descriptor?? [ 147.123044][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 147.154872][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 147.183624][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.211062][ T6568] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.222287][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.358717][ T5908] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input18 [ 147.873720][ T5908] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 148.063651][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 148.128277][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.211373][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.267620][ T5908] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.316231][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.440696][ T5946] usb 1-1: USB disconnect, device number 21 [ 148.440799][ C1] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 148.549789][ T5908] usb 2-1: config 0 descriptor?? [ 148.558098][ T5908] hub 2-1:0.0: USB hub found [ 148.710728][ T6582] vcan0: entered promiscuous mode [ 148.717448][ T6582] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 148.760767][ T5908] hub 2-1:0.0: 1 port detected [ 149.169516][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.184065][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.219367][ T6589] fuse: Unknown parameter 'Name: syz.3.156 [ 149.219367][ T6589] Umask: 0077 [ 149.219367][ T6589] State: R (running) [ 149.219367][ T6589] Tgid: 118 [ 149.219367][ T6589] Ngid: 0 [ 149.219367][ T6589] Pid: 119 [ 149.219367][ T6589] PPid: 1 [ 149.219367][ T6589] TracerPid: 0 [ 149.219367][ T6589] Uid: 0 0 0 0 [ 149.219367][ T6589] Gid: 0 0 0 0 [ 149.219367][ T6589] FDSize: 256 [ 149.219367][ T6589] Groups: 0 65534 [ 149.219367][ T6589] NStgid: 118 [ 149.219367][ T6589] NSpid: 119 [ 149.219367][ T6589] NSpgid: 118 [ 149.219367][ T6589] NSsid: 0 [ 149.219367][ T6589] Kthread: 0 [ 149.219367][ T6589] VmPeak: 101828 kB [ 149.219367][ T6589] VmSize: 101828 kB [ 149.219367][ T6589] VmLck: 0 kB [ 149.219367][ T6589] VmPin: 0 kB [ 149.219367][ T6589] VmHWM: 24300 kB [ 149.219367][ T6589] VmRSS: 24300 kB [ 149.219367][ T6589] RssAnon: 1216 kB [ 149.219367][ T6589] RssFile: 23084 kB [ 149.219367][ T6589] RssShmem: 0 kB [ 149.219367][ T6589] VmData: 36496 kB [ 149.219367][ T6589] VmStk: 132 kB [ 149.219367][ T6589] VmExe: 1704 kB [ 149.219367][ T6589] VmLib: 12 kB [ 149.219367][ T6589] VmPTE: 112 kB [ 149.219367][ T6589] VmSwap: 0 kB [ 149.219367][ T6589] HugetlbPages: 0 kB [ 149.219367][ T6589] CoreDumping: 0 [ 149.219367][ T6589] THP_enabled: 1 [ 149.219367][ T6589] untag_mask: 0xffffffffffffffff [ 149.219367][ T6589] Threads: 2 [ 149.219367][ T6589] SigQ: 0/13009 [ 149.219367][ T6589] SigPnd: 0000000000000000 [ 149.219367][ T6589] ShdPnd: 0000000000000000 [ 149.219367][ T6589] SigBlk: 0000000000000000 [ 149.219367][ T6589] SigIgn: fffffffefffaba35 [ 149.219367][ T6589] SigCgt: 0000000100010440 [ 149.219367][ T6589] CapInh: 0000000000000000 [ 149.219367][ T6589] CapPrm: 000001ffff77ffff [ 149.219367][ T6589] CapEff: 000001ffff77ffff [ 149.219367][ T6589] CapBnd: 000001ffffffffff [ 149.219367][ T6589] CapAmb: 0000000000000000 [ 149.219367][ T6589] NoNewPrivs: 0 [ 149.233710][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 149.432278][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 149.477938][ T5908] usb 2-1: USB disconnect, device number 18 [ 149.548456][ T6592] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.555420][ T6592] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 149.570054][ T6592] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.576618][ T6592] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 149.594460][ T6592] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.602125][ T6592] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 149.613547][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 149.630609][ T6592] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.636962][ T6592] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 149.638112][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.660549][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.671334][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.692966][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.711443][ T6592] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 149.727426][ T6592] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 149.742871][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.753298][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.860017][ T6598] capability: warning: `syz.0.159' uses deprecated v2 capabilities in a way that may be insecure [ 149.892350][ T6598] fuse: Unknown parameter '0000000000000000000000300000000000000000000005' [ 149.923325][ T5887] usb 5-1: USB disconnect, device number 17 [ 149.970195][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 149.976010][ T9] usbtmc 3-1:16.0: can't read capabilities [ 150.172541][ T6587] FAULT_INJECTION: forcing a failure. [ 150.172541][ T6587] name failslab, interval 1, probability 0, space 0, times 1 [ 150.193652][ T6587] CPU: 1 UID: 0 PID: 6587 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT(full) [ 150.193678][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.193688][ T6587] Call Trace: [ 150.193695][ T6587] [ 150.193703][ T6587] dump_stack_lvl+0x189/0x250 [ 150.193727][ T6587] ? __pfx____ratelimit+0x10/0x10 [ 150.193753][ T6587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.193771][ T6587] ? __pfx__printk+0x10/0x10 [ 150.193795][ T6587] ? __pfx___might_resched+0x10/0x10 [ 150.193817][ T6587] ? fs_reclaim_acquire+0x7d/0x100 [ 150.193842][ T6587] should_fail_ex+0x414/0x560 [ 150.193873][ T6587] should_failslab+0xa8/0x100 [ 150.193896][ T6587] __kmalloc_noprof+0xcb/0x7f0 [ 150.193914][ T6587] ? usb_alloc_urb+0x46/0x150 [ 150.193941][ T6587] usb_alloc_urb+0x46/0x150 [ 150.193965][ T6587] usbtmc_generic_read+0x420/0x1700 [ 150.194007][ T6587] ? __pfx_usbtmc_generic_read+0x10/0x10 [ 150.194047][ T6587] usbtmc_ioctl_generic_read+0xe7/0x170 [ 150.194075][ T6587] ? __pfx_usbtmc_ioctl_generic_read+0x10/0x10 [ 150.194101][ T6587] ? __fget_files+0x2a/0x420 [ 150.194127][ T6587] ? __fget_files+0x3a0/0x420 [ 150.194149][ T6587] usbtmc_ioctl+0x463/0x720 [ 150.194178][ T6587] __ia32_compat_sys_ioctl+0x543/0x840 [ 150.194198][ T6587] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 150.194216][ T6587] ? __fget_files+0x3a0/0x420 [ 150.194243][ T6587] ? fput+0xa0/0xd0 [ 150.194270][ T6587] ? ksys_write+0x22a/0x250 [ 150.194290][ T6587] ? __pfx_ksys_write+0x10/0x10 [ 150.194312][ T6587] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 150.194333][ T6587] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.194355][ T6587] __do_fast_syscall_32+0xb6/0x2b0 [ 150.194374][ T6587] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.194396][ T6587] do_fast_syscall_32+0x34/0x80 [ 150.194415][ T6587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.194441][ T6587] RIP: 0023:0xf7f33539 [ 150.194456][ T6587] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 150.194471][ T6587] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 150.194497][ T6587] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0145b0e [ 150.194509][ T6587] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.194520][ T6587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.194530][ T6587] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 150.194541][ T6587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.194570][ T6587] [ 150.198593][ T24] usb 3-1: USB disconnect, device number 19 [ 150.572630][ T6605] FAULT_INJECTION: forcing a failure. [ 150.572630][ T6605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.625448][ T6605] CPU: 0 UID: 0 PID: 6605 Comm: syz.1.161 Not tainted syzkaller #0 PREEMPT(full) [ 150.625473][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.625484][ T6605] Call Trace: [ 150.625491][ T6605] [ 150.625499][ T6605] dump_stack_lvl+0x189/0x250 [ 150.625524][ T6605] ? __pfx____ratelimit+0x10/0x10 [ 150.625551][ T6605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.625569][ T6605] ? __pfx__printk+0x10/0x10 [ 150.625588][ T6605] ? __might_fault+0xb0/0x130 [ 150.625617][ T6605] should_fail_ex+0x414/0x560 [ 150.625649][ T6605] _copy_from_iter+0x1de/0x1790 [ 150.625675][ T6605] ? rcu_is_watching+0x15/0xb0 [ 150.625710][ T6605] ? kmalloc_reserve+0xbd/0x290 [ 150.625735][ T6605] ? __pfx__copy_from_iter+0x10/0x10 [ 150.625761][ T6605] ? __build_skb_around+0x262/0x3f0 [ 150.625787][ T6605] ? netlink_sendmsg+0x642/0xb30 [ 150.625809][ T6605] ? skb_put+0x11b/0x210 [ 150.625836][ T6605] netlink_sendmsg+0x6b2/0xb30 [ 150.625869][ T6605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.625895][ T6605] ? __import_iovec+0x5d4/0x7f0 [ 150.625915][ T6605] ? aa_sock_msg_perm+0xf1/0x1d0 [ 150.625936][ T6605] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.625958][ T6605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.625983][ T6605] __sock_sendmsg+0x21c/0x270 [ 150.626008][ T6605] ____sys_sendmsg+0x505/0x830 [ 150.626038][ T6605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.626078][ T6605] ___sys_sendmsg+0x21f/0x2a0 [ 150.626096][ T6605] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.626154][ T6605] ? __fget_files+0x2a/0x420 [ 150.626174][ T6605] ? __fget_files+0x3a0/0x420 [ 150.626205][ T6605] __sys_sendmsg+0x164/0x220 [ 150.626233][ T6605] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.626267][ T6605] ? __pfx_ksys_write+0x10/0x10 [ 150.626290][ T6605] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 150.626310][ T6605] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.626331][ T6605] __do_fast_syscall_32+0xb6/0x2b0 [ 150.626350][ T6605] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.626371][ T6605] do_fast_syscall_32+0x34/0x80 [ 150.626391][ T6605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.626411][ T6605] RIP: 0023:0xf7fa5539 [ 150.626427][ T6605] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 150.626441][ T6605] RSP: 002b:00000000f547555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 150.626460][ T6605] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000480 [ 150.626472][ T6605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.626483][ T6605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.626493][ T6605] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 150.626503][ T6605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.626531][ T6605] [ 151.027557][ T6611] FAULT_INJECTION: forcing a failure. [ 151.027557][ T6611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.093680][ T6611] CPU: 1 UID: 0 PID: 6611 Comm: syz.0.164 Not tainted syzkaller #0 PREEMPT(full) [ 151.093706][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.093717][ T6611] Call Trace: [ 151.093724][ T6611] [ 151.093732][ T6611] dump_stack_lvl+0x189/0x250 [ 151.093757][ T6611] ? __pfx____ratelimit+0x10/0x10 [ 151.093783][ T6611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.093803][ T6611] ? __pfx__printk+0x10/0x10 [ 151.093821][ T6611] ? __might_fault+0xb0/0x130 [ 151.093855][ T6611] should_fail_ex+0x414/0x560 [ 151.093886][ T6611] _copy_from_iter+0x1de/0x1790 [ 151.093914][ T6611] ? rcu_is_watching+0x15/0xb0 [ 151.093941][ T6611] ? kmalloc_reserve+0xbd/0x290 [ 151.093965][ T6611] ? __pfx__copy_from_iter+0x10/0x10 [ 151.093987][ T6611] ? __build_skb_around+0x262/0x3f0 [ 151.094013][ T6611] ? netlink_sendmsg+0x642/0xb30 [ 151.094036][ T6611] ? skb_put+0x11b/0x210 [ 151.094063][ T6611] netlink_sendmsg+0x6b2/0xb30 [ 151.094096][ T6611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.094122][ T6611] ? __import_iovec+0x5d4/0x7f0 [ 151.094142][ T6611] ? aa_sock_msg_perm+0xf1/0x1d0 [ 151.094164][ T6611] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.094185][ T6611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.094209][ T6611] __sock_sendmsg+0x21c/0x270 [ 151.094234][ T6611] ____sys_sendmsg+0x505/0x830 [ 151.094265][ T6611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.094306][ T6611] ___sys_sendmsg+0x21f/0x2a0 [ 151.094326][ T6611] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.094387][ T6611] ? __fget_files+0x2a/0x420 [ 151.094407][ T6611] ? __fget_files+0x3a0/0x420 [ 151.094438][ T6611] __sys_sendmsg+0x164/0x220 [ 151.094466][ T6611] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.094500][ T6611] ? __pfx_ksys_write+0x10/0x10 [ 151.094522][ T6611] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 151.094543][ T6611] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.094563][ T6611] __do_fast_syscall_32+0xb6/0x2b0 [ 151.094583][ T6611] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.094604][ T6611] do_fast_syscall_32+0x34/0x80 [ 151.094623][ T6611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.094645][ T6611] RIP: 0023:0xf704d539 [ 151.094668][ T6611] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 151.094682][ T6611] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 151.094702][ T6611] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 151.094715][ T6611] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.094726][ T6611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.094737][ T6611] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 151.094747][ T6611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.094775][ T6611] [ 151.216018][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 151.216745][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.222072][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 151.413023][ T5887] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 151.603471][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 151.619989][ T5887] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 151.629231][ T5887] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 151.667078][ T5887] usb 3-1: config 0 has no interface number 0 [ 151.687001][ T5887] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 151.725372][ T5887] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 151.751030][ T5887] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.770242][ T5887] usb 3-1: config 0 interface 52 has no altsetting 0 [ 151.781237][ T30] audit: type=1326 audit(1760349498.492:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.4.169" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f34539 code=0x0 [ 151.781886][ T5887] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 151.817340][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 151.825893][ T5887] usb 3-1: Product: syz [ 151.830072][ T5887] usb 3-1: SerialNumber: syz [ 151.863000][ T5887] usb 3-1: config 0 descriptor?? [ 152.073761][ T5887] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input19 [ 152.143545][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 152.303569][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 152.311458][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.322977][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.333283][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 152.342552][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.371613][ T9] usb 4-1: config 0 descriptor?? [ 152.388904][ T9] hub 4-1:0.0: USB hub found [ 152.588976][ T6629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.598677][ T6629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.660054][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 152.705541][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 152.727515][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 152.781611][ T9] usb 4-1: USB disconnect, device number 18 [ 152.894403][ T6639] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 152.926105][ T24] usb 3-1: USB disconnect, device number 20 [ 152.926772][ C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 153.515895][ T6655] FAULT_INJECTION: forcing a failure. [ 153.515895][ T6655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.565187][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.4.179 Not tainted syzkaller #0 PREEMPT(full) [ 153.565213][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.565224][ T6655] Call Trace: [ 153.565231][ T6655] [ 153.565240][ T6655] dump_stack_lvl+0x189/0x250 [ 153.565264][ T6655] ? __pfx____ratelimit+0x10/0x10 [ 153.565298][ T6655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.565317][ T6655] ? __pfx__printk+0x10/0x10 [ 153.565336][ T6655] ? __might_fault+0xb0/0x130 [ 153.565365][ T6655] should_fail_ex+0x414/0x560 [ 153.565396][ T6655] _copy_from_iter+0x1de/0x1790 [ 153.565422][ T6655] ? rcu_is_watching+0x15/0xb0 [ 153.565450][ T6655] ? kmalloc_reserve+0xbd/0x290 [ 153.565475][ T6655] ? __pfx__copy_from_iter+0x10/0x10 [ 153.565497][ T6655] ? __build_skb_around+0x262/0x3f0 [ 153.565523][ T6655] ? netlink_sendmsg+0x642/0xb30 [ 153.565546][ T6655] ? skb_put+0x11b/0x210 [ 153.565570][ T6655] netlink_sendmsg+0x6b2/0xb30 [ 153.565601][ T6655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.565625][ T6655] ? __import_iovec+0x5d4/0x7f0 [ 153.565643][ T6655] ? aa_sock_msg_perm+0xf1/0x1d0 [ 153.565662][ T6655] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 153.565682][ T6655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.565704][ T6655] __sock_sendmsg+0x21c/0x270 [ 153.565726][ T6655] ____sys_sendmsg+0x505/0x830 [ 153.565755][ T6655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.565793][ T6655] ___sys_sendmsg+0x21f/0x2a0 [ 153.565811][ T6655] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.565871][ T6655] ? __fget_files+0x2a/0x420 [ 153.565891][ T6655] ? __fget_files+0x3a0/0x420 [ 153.565918][ T6655] __sys_sendmsg+0x164/0x220 [ 153.565945][ T6655] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.565979][ T6655] ? __pfx_ksys_write+0x10/0x10 [ 153.566002][ T6655] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 153.566022][ T6655] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.566042][ T6655] __do_fast_syscall_32+0xb6/0x2b0 [ 153.566062][ T6655] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.566083][ T6655] do_fast_syscall_32+0x34/0x80 [ 153.566102][ T6655] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.566123][ T6655] RIP: 0023:0xf7f34539 [ 153.566139][ T6655] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 153.566154][ T6655] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 153.566172][ T6655] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 153.566185][ T6655] RDX: 0000000000040080 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.566195][ T6655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.566206][ T6655] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 153.566216][ T6655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.566243][ T6655] [ 154.047907][ T6663] netlink: 'syz.0.183': attribute type 33 has an invalid length. [ 154.055961][ T6663] netlink: 51 bytes leftover after parsing attributes in process `syz.0.183'. [ 154.484115][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 154.513798][ T5887] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 154.655938][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 154.732190][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 154.997437][ T9] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 155.012934][ T9] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 155.031909][ T9] usb 5-1: config 0 has no interface number 0 [ 155.038716][ T9] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 155.050344][ T9] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 155.061947][ T9] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.076866][ T9] usb 5-1: config 0 interface 52 has no altsetting 0 [ 155.101895][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 155.113026][ T5887] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.124077][ T5887] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.135321][ T5887] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.145509][ T9] usb 5-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 155.149772][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.153843][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.155318][ T9] usb 5-1: Product: syz [ 155.196617][ T9] usb 5-1: SerialNumber: syz [ 155.203081][ T6671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.213598][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 155.237213][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.248901][ T5887] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.262429][ T24] usb 3-1: config 0 descriptor?? [ 155.391658][ T9] usb 5-1: config 0 descriptor?? [ 155.522587][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 155.531924][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 155.627617][ T24] usb 3-1: USB disconnect, device number 21 [ 155.635916][ T9] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input22 [ 156.023520][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 156.198833][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 156.216950][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.282565][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 156.293708][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.339711][ T24] usb 3-1: config 0 descriptor?? [ 156.493518][ T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 156.619537][ T5887] usb 5-1: USB disconnect, device number 18 [ 156.625564][ C0] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 156.662907][ T9] usb 4-1: config 8 has an invalid interface number: 207 but max is 0 [ 156.688215][ T9] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 156.716593][ T9] usb 4-1: config 8 has no interface number 0 [ 156.739689][ T9] usb 4-1: config 8 interface 207 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 156.770006][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.776031][ T9] usb 4-1: New USB device found, idVendor=b0da, idProduct=7458, bcdDevice=2d.4d [ 156.787987][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.803064][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.815461][ T9] usb 4-1: Product: syz [ 156.822144][ T6681] netlink: 'syz.2.187': attribute type 21 has an invalid length. [ 156.830647][ T9] usb 4-1: Manufacturer: syz [ 156.836071][ T9] usb 4-1: SerialNumber: syz [ 156.840997][ T6681] netlink: 128 bytes leftover after parsing attributes in process `syz.2.187'. [ 156.853465][ T6681] netlink: 3 bytes leftover after parsing attributes in process `syz.2.187'. [ 156.890739][ T24] kye 0003:0458:5016.0011: control desc unexpectedly large [ 156.910699][ T24] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0011/input/input23 [ 156.984040][ T5946] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 157.083765][ T24] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0011/input/input24 [ 157.123541][ T5946] usb 1-1: device descriptor read/64, error -71 [ 157.170604][ T24] kye 0003:0458:5016.0011: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 157.259497][ T9] usb 4-1: USB disconnect, device number 19 [ 157.433538][ T5946] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 157.529972][ T9] usb 2-1: USB disconnect, device number 19 [ 157.584117][ T5946] usb 1-1: device descriptor read/64, error -71 [ 157.727914][ T5946] usb usb1-port1: attempt power cycle [ 158.083564][ T5946] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 158.105643][ T5946] usb 1-1: device descriptor read/8, error -71 [ 158.373541][ T5946] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 158.424306][ T5946] usb 1-1: device descriptor read/8, error -71 [ 158.534244][ T5946] usb usb1-port1: unable to enumerate USB device [ 158.613515][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 158.725955][ T5894] usb 3-1: USB disconnect, device number 22 [ 158.786157][ T9] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 158.807384][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 158.824181][ T9] usb 5-1: Manufacturer: syz [ 158.844140][ T9] usb 5-1: config 0 descriptor?? [ 159.006360][ T6742] process 'syz.2.209' launched './file1' with NULL argv: empty string added [ 159.068494][ T9] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 159.133526][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 159.180399][ T9] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 159.213906][ T9] usb 5-1: USB disconnect, device number 19 [ 159.321683][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 159.369103][ T24] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 159.381699][ T24] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 159.393960][ T24] usb 4-1: config 0 has no interface number 0 [ 159.403093][ T24] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 159.441116][ T24] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 159.505455][ T24] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.518791][ T24] usb 4-1: config 0 interface 52 has no altsetting 0 [ 159.530089][ T24] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 159.539321][ T24] usb 4-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 159.548011][ T24] usb 4-1: Product: syz [ 159.552382][ T24] usb 4-1: SerialNumber: syz [ 159.564553][ T24] usb 4-1: config 0 descriptor?? [ 159.812300][ T24] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input25 [ 160.388512][ T6753] netlink: 72 bytes leftover after parsing attributes in process `syz.1.213'. [ 160.560212][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 160.591369][ T5894] usb 4-1: USB disconnect, device number 20 [ 160.591382][ C1] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 160.733633][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 160.747396][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 160.755209][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 160.767936][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.782340][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.795716][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.808129][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.822133][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 160.856616][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 160.865581][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 160.873489][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 160.885002][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.897748][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.909841][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.922444][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 161.032228][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 161.045942][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 161.234016][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 161.298759][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 161.600083][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 161.611805][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.627299][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 161.639310][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 161.651871][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 161.665441][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 161.689611][ T9] usb 5-1: string descriptor 0 read error: -22 [ 161.703779][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 161.712969][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.781793][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 162.091903][ T6750] netlink: 'syz.0.212': attribute type 12 has an invalid length. [ 162.103611][ T6750] netlink: 'syz.0.212': attribute type 29 has an invalid length. [ 162.118163][ T6750] netlink: 148 bytes leftover after parsing attributes in process `syz.0.212'. [ 162.118344][ T9] usb 5-1: USB disconnect, device number 20 [ 162.127671][ T6750] netlink: 43 bytes leftover after parsing attributes in process `syz.0.212'. [ 162.146876][ T6759] tipc: Started in network mode [ 162.151737][ T6759] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 162.173723][ T6759] tipc: Enabling of bearer rejected, failed to enable media [ 162.566831][ T6784] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 162.583827][ T1210] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 162.633645][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 162.723482][ T5887] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 162.733480][ T1210] usb 1-1: Using ep0 maxpacket: 16 [ 162.740365][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.751419][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.761272][ T1210] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 162.770370][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.780378][ T1210] usb 1-1: config 0 descriptor?? [ 162.793954][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 162.801456][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.812965][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 162.827959][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.840270][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.849677][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.857859][ T5887] usb 4-1: device descriptor read/64, error -71 [ 162.864332][ T9] usb 2-1: Product: syz [ 162.868590][ T9] usb 2-1: Manufacturer: syz [ 162.873292][ T9] usb 2-1: SerialNumber: syz [ 163.089079][ T6778] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 163.098211][ T6778] tipc: Enabled bearer , priority 10 [ 163.113910][ T5887] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 163.127308][ T9] usb 2-1: cannot find UAC_HEADER [ 163.141001][ T9] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 163.153148][ T9] usb 2-1: USB disconnect, device number 20 [ 163.184651][ T6336] udevd[6336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.219448][ T1210] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 163.227203][ T1210] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 163.235698][ T1210] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 163.242911][ T1210] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 163.250956][ T1210] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 163.258628][ T1210] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 163.273500][ T5887] usb 4-1: device descriptor read/64, error -71 [ 163.385314][ T5887] usb usb4-port1: attempt power cycle [ 163.444854][ T5946] usb 1-1: USB disconnect, device number 26 [ 163.721428][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 163.742470][ T5887] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 163.764211][ T5887] usb 4-1: device descriptor read/8, error -71 [ 164.003496][ T5887] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 164.038080][ T5887] usb 4-1: device descriptor read/8, error -71 [ 164.194067][ T5887] usb usb4-port1: unable to enumerate USB device [ 164.214638][ T1210] tipc: Node number set to 4278255617 [ 164.413489][ T5946] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 164.584106][ T5946] usb 1-1: Using ep0 maxpacket: 8 [ 164.598301][ T5946] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 164.614819][ T5946] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 164.625794][ T5946] usb 1-1: config 0 has no interface number 0 [ 164.631948][ T5946] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 164.643565][ T5946] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 164.656157][ T5946] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.669124][ T5946] usb 1-1: config 0 interface 52 has no altsetting 0 [ 164.677380][ T5946] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 164.687153][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 164.695645][ T5946] usb 1-1: Product: syz [ 164.699803][ T5946] usb 1-1: SerialNumber: syz [ 164.706473][ T5946] usb 1-1: config 0 descriptor?? [ 164.824449][ T1210] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 164.875060][ T5887] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 164.916903][ T5946] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input26 [ 165.013700][ T1210] usb 5-1: Using ep0 maxpacket: 8 [ 165.021575][ T1210] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.033511][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 165.035619][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 165.051278][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 165.051476][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.068170][ T1210] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 165.076170][ T5887] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 165.083054][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.091568][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.099687][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 165.110417][ T5887] usb 3-1: config 0 descriptor?? [ 165.116036][ T1210] usb 5-1: Product: syz [ 165.127133][ T1210] usb 5-1: Manufacturer: syz [ 165.131846][ T1210] usb 5-1: SerialNumber: syz [ 165.147944][ T1210] usb 5-1: config 0 descriptor?? [ 165.158324][ T1210] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 165.273527][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 165.280899][ T24] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 165.289267][ T24] usb 2-1: config 0 has no interface number 0 [ 165.295488][ T24] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 165.308807][ T24] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 165.318115][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.326231][ T24] usb 2-1: Product: syz [ 165.330484][ T24] usb 2-1: Manufacturer: syz [ 165.335342][ T24] usb 2-1: SerialNumber: syz [ 165.345459][ T24] usb 2-1: config 0 descriptor?? [ 165.368840][ T24] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 165.379588][ T24] em28xx 2-1:0.132: Video interface 132 found: [ 165.389170][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.398552][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.423510][ T6802] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 165.517804][ T5946] usb 5-1: USB disconnect, device number 21 [ 165.571862][ T5887] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 165.758669][ T5946] usb 1-1: USB disconnect, device number 27 [ 165.764746][ C1] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 165.775696][ T24] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 165.797171][ T6814] netlink: 'syz.3.230': attribute type 12 has an invalid length. [ 165.842404][ T6814] netlink: 'syz.3.230': attribute type 29 has an invalid length. [ 165.862016][ T6814] netlink: 148 bytes leftover after parsing attributes in process `syz.3.230'. [ 165.893459][ T6814] netlink: 43 bytes leftover after parsing attributes in process `syz.3.230'. [ 166.174942][ T6804] netlink: 48 bytes leftover after parsing attributes in process `syz.2.227'. [ 166.188288][ T5932] usb 3-1: USB disconnect, device number 23 [ 166.197105][ T24] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 166.212580][ T24] em28xx 2-1:0.132: board has no eeprom [ 166.219453][ T5946] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 166.263505][ T1210] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 166.303472][ T24] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 166.312008][ T24] em28xx 2-1:0.132: analog set to bulk mode. [ 166.321031][ T5931] em28xx 2-1:0.132: Registering V4L2 extension [ 166.413514][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 166.420765][ T1210] usb 4-1: Using ep0 maxpacket: 16 [ 166.432110][ T5946] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 166.442630][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.455969][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.467646][ T1210] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 166.477333][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.487109][ T5946] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 166.497513][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 166.508311][ T1210] usb 4-1: config 0 descriptor?? [ 166.513877][ T5946] usb 1-1: Product: syz [ 166.523589][ T5946] usb 1-1: Manufacturer: syz [ 166.540735][ T5946] usb 1-1: SerialNumber: syz [ 166.549960][ T5946] usb 1-1: config 0 descriptor?? [ 166.562207][ T6816] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 166.938127][ T1210] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 166.949961][ T1210] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 166.961791][ T1210] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 166.980540][ T5931] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 166.980912][ T5887] usb 2-1: USB disconnect, device number 21 [ 166.996971][ T5931] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 167.008226][ T1210] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 167.072571][ T5931] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 167.072839][ T5887] em28xx 2-1:0.132: Disconnecting em28xx [ 167.081854][ T1210] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 167.082703][ T1210] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 167.171069][ T9] usb 1-1: USB disconnect, device number 28 [ 167.291096][ T1210] usb 4-1: USB disconnect, device number 25 [ 167.442842][ T5931] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 167.450596][ T5931] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 167.462888][ T5931] em28xx 2-1:0.132: No AC97 audio processor [ 167.481533][ T5931] usb 2-1: Decoder not found [ 167.526205][ T5931] em28xx 2-1:0.132: failed to create media graph [ 167.603557][ T5931] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 167.615787][ T5931] em28xx 2-1:0.132: Remote control support is not available for this card. [ 167.619854][ T6839] ================================================================== [ 167.632452][ T6839] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 167.639809][ T6839] Read of size 8 at addr ffff88802eed8740 by task v4l_id/6839 [ 167.647250][ T6839] [ 167.649578][ T6839] CPU: 0 UID: 0 PID: 6839 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 167.649599][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.649609][ T6839] Call Trace: [ 167.649618][ T6839] [ 167.649626][ T6839] dump_stack_lvl+0x189/0x250 [ 167.649648][ T6839] ? __virt_addr_valid+0x1c8/0x5c0 [ 167.649666][ T6839] ? rcu_is_watching+0x15/0xb0 [ 167.649688][ T6839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.649705][ T6839] ? rcu_is_watching+0x15/0xb0 [ 167.649727][ T6839] ? lock_release+0x4b/0x3e0 [ 167.649747][ T6839] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 167.649778][ T6839] ? __virt_addr_valid+0x1c8/0x5c0 [ 167.649795][ T6839] ? __virt_addr_valid+0x4a5/0x5c0 [ 167.649812][ T6839] print_report+0xca/0x240 [ 167.649832][ T6839] ? v4l2_fh_open+0xac/0x420 [ 167.649847][ T6839] kasan_report+0x118/0x150 [ 167.649869][ T6839] ? v4l2_fh_open+0xac/0x420 [ 167.649887][ T6839] v4l2_fh_open+0xac/0x420 [ 167.649903][ T6839] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.649923][ T6839] em28xx_v4l2_open+0x157/0x9a0 [ 167.649950][ T6839] v4l2_open+0x1bf/0x3a0 [ 167.649969][ T6839] chrdev_open+0x4cc/0x5e0 [ 167.649989][ T6839] ? __pfx_chrdev_open+0x10/0x10 [ 167.650010][ T6839] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 167.650035][ T6839] ? __pfx_chrdev_open+0x10/0x10 [ 167.650053][ T6839] do_dentry_open+0x953/0x13f0 [ 167.650081][ T6839] vfs_open+0x3b/0x340 [ 167.650101][ T6839] ? path_openat+0x2ecd/0x3830 [ 167.650118][ T6839] path_openat+0x2ee5/0x3830 [ 167.650148][ T6839] ? __pfx_path_openat+0x10/0x10 [ 167.650171][ T6839] do_filp_open+0x1fa/0x410 [ 167.650186][ T6839] ? __lock_acquire+0xab9/0xd20 [ 167.650210][ T6839] ? __pfx_do_filp_open+0x10/0x10 [ 167.650235][ T6839] ? _raw_spin_unlock+0x28/0x50 [ 167.650256][ T6839] ? alloc_fd+0x64c/0x6c0 [ 167.650279][ T6839] do_sys_openat2+0x121/0x1c0 [ 167.650303][ T6839] ? __pfx_do_sys_openat2+0x10/0x10 [ 167.650325][ T6839] ? exc_page_fault+0x82/0x100 [ 167.650343][ T6839] ? do_user_addr_fault+0xc85/0x1380 [ 167.650365][ T6839] __x64_sys_openat+0x138/0x170 [ 167.650390][ T6839] do_syscall_64+0xfa/0xfa0 [ 167.650406][ T6839] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.650422][ T6839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.650439][ T6839] ? clear_bhb_loop+0x60/0xb0 [ 167.650457][ T6839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.650475][ T6839] RIP: 0033:0x7f587fea7407 [ 167.650490][ T6839] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 167.650504][ T6839] RSP: 002b:00007ffc20c3c9e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 167.650524][ T6839] RAX: ffffffffffffffda RBX: 00007f5880560880 RCX: 00007f587fea7407 [ 167.650537][ T6839] RDX: 0000000000000000 RSI: 00007ffc20c3cf1b RDI: ffffffffffffff9c [ 167.650550][ T6839] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 167.650560][ T6839] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 167.650571][ T6839] R13: 00007ffc20c3cc30 R14: 00007f58806c7000 R15: 00005569431904d8 [ 167.650591][ T6839] [ 167.650598][ T6839] [ 167.952578][ T6839] Allocated by task 5931: [ 167.956885][ T6839] kasan_save_track+0x3e/0x80 [ 167.961547][ T6839] __kasan_kmalloc+0x93/0xb0 [ 167.966122][ T6839] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 167.971482][ T6839] em28xx_v4l2_init+0x10b/0x2e70 [ 167.976405][ T6839] em28xx_init_extension+0x120/0x1c0 [ 167.981678][ T6839] process_scheduled_works+0xae1/0x17b0 [ 167.987299][ T6839] worker_thread+0x8a0/0xda0 [ 167.991873][ T6839] kthread+0x711/0x8a0 [ 167.995924][ T6839] ret_from_fork+0x4bc/0x870 [ 168.000500][ T6839] ret_from_fork_asm+0x1a/0x30 [ 168.005245][ T6839] [ 168.007550][ T6839] Freed by task 5931: [ 168.011508][ T6839] kasan_save_track+0x3e/0x80 [ 168.016174][ T6839] __kasan_save_free_info+0x46/0x50 [ 168.021359][ T6839] __kasan_slab_free+0x5c/0x80 [ 168.026109][ T6839] kfree+0x19a/0x6d0 [ 168.029995][ T6839] em28xx_v4l2_init+0x1683/0x2e70 [ 168.035008][ T6839] em28xx_init_extension+0x120/0x1c0 [ 168.040278][ T6839] process_scheduled_works+0xae1/0x17b0 [ 168.045818][ T6839] worker_thread+0x8a0/0xda0 [ 168.050395][ T6839] kthread+0x711/0x8a0 [ 168.054452][ T6839] ret_from_fork+0x4bc/0x870 [ 168.059029][ T6839] ret_from_fork_asm+0x1a/0x30 [ 168.063779][ T6839] [ 168.066090][ T6839] The buggy address belongs to the object at ffff88802eed8000 [ 168.066090][ T6839] which belongs to the cache kmalloc-8k of size 8192 [ 168.080123][ T6839] The buggy address is located 1856 bytes inside of [ 168.080123][ T6839] freed 8192-byte region [ffff88802eed8000, ffff88802eeda000) [ 168.094420][ T6839] [ 168.096743][ T6839] The buggy address belongs to the physical page: [ 168.103282][ T6839] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2eed8 [ 168.112040][ T6839] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 168.120787][ T6839] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 168.128764][ T6839] page_type: f5(slab) [ 168.132735][ T6839] raw: 00fff00000000040 ffff88813ffa7280 ffffea000083c400 dead000000000003 [ 168.141308][ T6839] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 168.149878][ T6839] head: 00fff00000000040 ffff88813ffa7280 ffffea000083c400 dead000000000003 [ 168.158532][ T6839] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 168.167193][ T6839] head: 00fff00000000003 ffffea0000bbb601 00000000ffffffff 00000000ffffffff [ 168.175855][ T6839] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 168.184604][ T6839] page dumped because: kasan: bad access detected [ 168.191099][ T6839] page_owner tracks the page as allocated [ 168.196794][ T6839] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6079, tgid 6067 (syz.3.36), ts 92681353560, free_ts 92248369586 [ 168.217798][ T6839] post_alloc_hook+0x240/0x2a0 [ 168.222559][ T6839] get_page_from_freelist+0x2365/0x2440 [ 168.228104][ T6839] __alloc_frozen_pages_noprof+0x181/0x370 [ 168.233902][ T6839] alloc_pages_mpol+0x232/0x4a0 [ 168.238750][ T6839] allocate_slab+0x96/0x3a0 [ 168.243244][ T6839] ___slab_alloc+0xe94/0x18a0 [ 168.247907][ T6839] __slab_alloc+0x65/0x100 [ 168.252307][ T6839] __kmalloc_cache_noprof+0x411/0x6f0 [ 168.257663][ T6839] audit_log_d_path+0xb8/0x1a0 [ 168.262412][ T6839] audit_log_d_path_exe+0x42/0x70 [ 168.267418][ T6839] audit_log_task+0x2b3/0x3c0 [ 168.272077][ T6839] audit_seccomp+0x86/0x190 [ 168.276558][ T6839] __seccomp_filter+0xce4/0x1e10 [ 168.281495][ T6839] syscall_trace_enter+0xaa/0x160 [ 168.286513][ T6839] __do_fast_syscall_32+0x99/0x2b0 [ 168.291640][ T6839] do_fast_syscall_32+0x34/0x80 [ 168.296485][ T6839] page last free pid 5198 tgid 5198 stack trace: [ 168.302788][ T6839] __free_frozen_pages+0xbc4/0xd30 [ 168.307882][ T6839] __slab_free+0x2e7/0x390 [ 168.312286][ T6839] qlist_free_all+0x97/0x140 [ 168.316860][ T6839] kasan_quarantine_reduce+0x148/0x160 [ 168.322309][ T6839] __kasan_slab_alloc+0x22/0x80 [ 168.327144][ T6839] kmem_cache_alloc_noprof+0x367/0x6e0 [ 168.332589][ T6839] getname_flags+0xb8/0x540 [ 168.337091][ T6839] vfs_fstatat+0x43/0x170 [ 168.341447][ T6839] __x64_sys_newfstatat+0x116/0x190 [ 168.346633][ T6839] do_syscall_64+0xfa/0xfa0 [ 168.351130][ T6839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.357005][ T6839] [ 168.359339][ T6839] Memory state around the buggy address: [ 168.364997][ T6839] ffff88802eed8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.373040][ T6839] ffff88802eed8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.381081][ T6839] >ffff88802eed8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.389124][ T6839] ^ [ 168.395255][ T6839] ffff88802eed8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.403296][ T6839] ffff88802eed8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.411335][ T6839] ================================================================== [ 168.420862][ T5887] em28xx 2-1:0.132: Closing input extension [ 168.515404][ T6839] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 168.522648][ T6839] CPU: 0 UID: 0 PID: 6839 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 168.531604][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.541650][ T6839] Call Trace: [ 168.544925][ T6839] [ 168.547842][ T6839] dump_stack_lvl+0x99/0x250 [ 168.552416][ T6839] ? __asan_memcpy+0x40/0x70 [ 168.556988][ T6839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.562166][ T6839] ? __pfx__printk+0x10/0x10 [ 168.566736][ T6839] vpanic+0x237/0x6d0 [ 168.570700][ T6839] ? __pfx_vpanic+0x10/0x10 [ 168.575191][ T6839] ? preempt_schedule+0xae/0xc0 [ 168.580048][ T6839] ? __pfx_preempt_schedule+0x10/0x10 [ 168.585414][ T6839] panic+0xb9/0xc0 [ 168.589142][ T6839] ? __pfx_panic+0x10/0x10 [ 168.593547][ T6839] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 168.599434][ T6839] ? is_module_address+0x17/0xf0 [ 168.604357][ T6839] ? v4l2_fh_open+0xac/0x420 [ 168.608940][ T6839] check_panic_on_warn+0x89/0xb0 [ 168.613863][ T6839] ? v4l2_fh_open+0xac/0x420 [ 168.618434][ T6839] end_report+0x78/0x160 [ 168.622665][ T6839] kasan_report+0x129/0x150 [ 168.627161][ T6839] ? v4l2_fh_open+0xac/0x420 [ 168.631740][ T6839] v4l2_fh_open+0xac/0x420 [ 168.636141][ T6839] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.642107][ T6839] em28xx_v4l2_open+0x157/0x9a0 [ 168.646953][ T6839] v4l2_open+0x1bf/0x3a0 [ 168.651182][ T6839] chrdev_open+0x4cc/0x5e0 [ 168.655602][ T6839] ? __pfx_chrdev_open+0x10/0x10 [ 168.660525][ T6839] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 168.666841][ T6839] ? __pfx_chrdev_open+0x10/0x10 [ 168.671766][ T6839] do_dentry_open+0x953/0x13f0 [ 168.676520][ T6839] vfs_open+0x3b/0x340 [ 168.680594][ T6839] ? path_openat+0x2ecd/0x3830 [ 168.685429][ T6839] path_openat+0x2ee5/0x3830 [ 168.690012][ T6839] ? __pfx_path_openat+0x10/0x10 [ 168.694946][ T6839] do_filp_open+0x1fa/0x410 [ 168.699434][ T6839] ? __lock_acquire+0xab9/0xd20 [ 168.704271][ T6839] ? __pfx_do_filp_open+0x10/0x10 [ 168.709282][ T6839] ? _raw_spin_unlock+0x28/0x50 [ 168.714127][ T6839] ? alloc_fd+0x64c/0x6c0 [ 168.718452][ T6839] do_sys_openat2+0x121/0x1c0 [ 168.723118][ T6839] ? __pfx_do_sys_openat2+0x10/0x10 [ 168.728306][ T6839] ? exc_page_fault+0x82/0x100 [ 168.733065][ T6839] ? do_user_addr_fault+0xc85/0x1380 [ 168.738339][ T6839] __x64_sys_openat+0x138/0x170 [ 168.743189][ T6839] do_syscall_64+0xfa/0xfa0 [ 168.747679][ T6839] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.752863][ T6839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.758918][ T6839] ? clear_bhb_loop+0x60/0xb0 [ 168.763585][ T6839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.769461][ T6839] RIP: 0033:0x7f587fea7407 [ 168.773861][ T6839] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 168.793449][ T6839] RSP: 002b:00007ffc20c3c9e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 168.801847][ T6839] RAX: ffffffffffffffda RBX: 00007f5880560880 RCX: 00007f587fea7407 [ 168.809890][ T6839] RDX: 0000000000000000 RSI: 00007ffc20c3cf1b RDI: ffffffffffffff9c [ 168.817846][ T6839] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 168.825798][ T6839] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 168.833752][ T6839] R13: 00007ffc20c3cc30 R14: 00007f58806c7000 R15: 00005569431904d8 [ 168.841716][ T6839] [ 168.844973][ T6839] Kernel Offset: disabled [ 168.849282][ T6839] Rebooting in 86400 seconds..