last executing test programs: 12.249945042s ago: executing program 3 (id=2940): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x4, 0x8, 0x8001, 0x0, 0x9, 0x40000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x80000001, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) dup3(r4, r3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendto$inet(r6, &(0x7f0000001ec0)="a2123fbbeb2facea9b49ad541c0fb431f1a4e22f3622fa6b258448f248fa363e4b72aebd8798fd4abe2260d9399163c8eeb56b28f49a6fa4160b012645eb92ad", 0x40, 0x90, 0x0, 0x0) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000000a40)=""/69, 0x45}], 0x2}, 0x101) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000740)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x54, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x25, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000240)={0x3, 0x80000, 0x4}) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000280)={0x3, r10, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) r11 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2082) ioctl$IOC_PR_REGISTER(r11, 0x401870c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000e7ffffffce"], &(0x7f0000000040)='GPL\x00'}, 0x94) 10.742030141s ago: executing program 2 (id=2942): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$sequencer(0xffffff9c, 0x0, 0x84, 0x0) r1 = syz_io_uring_setup(0x3, 0x0, &(0x7f00000005c0), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, 0x0, 0x0) r2 = open$dir(&(0x7f00000001c0)='./cgroup/../file0\x00', 0x2000, 0xe8) getdents64(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x14044080}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x27) r3 = dup(0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x95, 0x0, 0x21, 0x3, 0xfffffffe, 0x236, 0x800000000009, 0x8, 0xd861, 0x3}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800458600340064000007069078ac1414bbac1414bb4e224e2261f726992c54062f40c3a9d1d20d112615d22368312ee1ea2b9da020cd64913a531129c207dade526a750404851f477b883581d57d278cc5ba30bfe90d3457a0162ef0a443ff8c4716db5657f3e6fe72bfbbf4edb641f2db09266fb1a8fc5245236473ae0694ca87eb7f95e011e0206c88", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80040002907800e7080a0000000600"], 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) 10.278372055s ago: executing program 2 (id=2944): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r2, &(0x7f0000000300)='1\x00', 0x2) 9.928392926s ago: executing program 3 (id=2945): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xe42ef}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x5c, 0x1, 0xfffffff8, 0xfd5}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_EMATCHES={0x4}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4c080) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41dee000000003a49490834eb16000f0200230a0001006f776e657200f0000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 9.245393978s ago: executing program 3 (id=2948): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x24, &(0x7f00000008c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8.705879725s ago: executing program 2 (id=2950): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$kcm(0x11, 0x2, 0x300) recvmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x200000, 0x9, "00000000020000000900", "00004702", "03000800", '\x00', ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff"]}) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000002c0)={"4497acf4", 0xb, 0x6, 0x0, 0x4, 0x1000002, "550000000100", "5922b1fa", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "00000000000000deff00", "fa0700f62b42b0023be516d1", "fb0000eaff01001b00800001"]}) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x13, r8, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r9 = syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x20, r9, 0x85e3, 0x3ff) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000000)={'\x00', 0xfff5, 0x6296, 0x7f, 0x4, 0x0, r9}) 8.704998245s ago: executing program 1 (id=2958): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r2, &(0x7f0000000300)='1\x00', 0x2) 7.207574192s ago: executing program 0 (id=2953): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 6.839718754s ago: executing program 1 (id=2954): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A') preadv(r1, &(0x7f00000033c0)=[{&(0x7f0000000000)=""/55, 0x37}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000740)=""/4096, 0x1000}, {0x0}, {&(0x7f00000017c0)=""/159, 0x9f}, {0x0}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x7, 0x9, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="8d76dabc169637c3d08377112e76b19a448253f417cf1f6ed2478401417aeb84209879cb171e735bf6647b762be14db8f6c8c797a7faed648073a442b2d3f6c3e49c71be23e1829f17c71fe8b30bd8fdf0314c28d0473bb216e8b51c38fbb64969f949c0d9c42d74040c0895567667aef57ae8901cfbffffff4c27af8474950649f113"], 0xff2e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) readahead(r6, 0x8001, 0x80000000) fcntl$lock(r5, 0x26, &(0x7f0000000080)) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) syz_open_pts(r4, 0x8182) 5.982304091s ago: executing program 3 (id=2955): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) listen(r1, 0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40087447, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x64, 0xce, 0x0, 0xfffffff8}]}) listen(r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40010) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000ff8000000000000005000600000000000a000000000000000000000000000000000000313e87218d64fdb700000000000200010000000000000007020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) syz_usb_control_io(r3, &(0x7f0000000500)={0x18, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000900)={0x14, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="00030200000002015f65754028f0ae0a6e182c457eb3aad99bebdeb50b5f49f4dc973fcbb48d7d2eb514f72a8e332998e0881b0f3fd5eea39ba672825807a3b8fcec74037fe186eac5332ad0ce4196a1d9f5f85a03cd353d9bd81d8d67f0d1a020606dea21c956c6ced1f4780577f53463b572fcc2af866bbe8ac4e05bca3468547fac9155e1202f5720027f704e16c283c765fe379b2a59f98bcea26eb2cc2d75cd87c4d9f236fa55ca21f561e21d9af4dd91736a927c76353bc0fc0ee8b5615f800e3cc411bfd1ac65f7e72c81e284a42f791bd84f596c49aaedf24542bb24ec27d8d78270bda668f916e27937eb0e7e966dff84a660"], 0x0, 0x0}, 0x0) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @random="f20dd11345ae", {0x0, 0x1}}, 0x0, @default, 0x1, @void, @val={0x1, 0x5, [{0x1}, {0x1}, {0x9, 0x1}, {0x9, 0x1}, {0x24, 0x1}]}, @void, @val={0x4, 0x6, {0xd, 0x4, 0xfeff, 0x104}}, @val={0x6, 0x2, 0x9ec}, @val={0x5, 0x7d, {0xfd, 0x5c, 0x0, "73b07621bda01a9b4236f2e35491e23385e7634f70c36053b9750b35fd7dc63daf2f27f7dd39920984ac5ce410205514dff59b37c6fdd973d1aee3a664734e12b34d874475f18a3c33d65da2eb984bb50903048ab554b2a6eb670c20846dc8655c94a55cf122dab76361070d81350325946e74cd1532d25323c8"}}, @void, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x8000, 0x3, 0x6, 0x0, {0x2, 0x10, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, 0x107, 0x0, 0x7}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x3, 0x0, 0x1, 0x2, 0x9}}, @val={0x76, 0x6, {0x1, 0x8, 0x2e, 0xf}}}, 0xe6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 4.782644239s ago: executing program 0 (id=2956): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000180)='A') preadv(r0, &(0x7f00000033c0)=[{&(0x7f0000000000)=""/55, 0x37}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000740)=""/4096, 0x1000}, {0x0}, {&(0x7f00000017c0)=""/159, 0x9f}, {0x0}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x7, 0x9, 0x0) 4.714724611s ago: executing program 1 (id=2957): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, r0, 0x7, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x98}}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xb, 0x0, &(0x7f0000000100)="c48a570389e85e8182eab4", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000080)) ioctl$TIOCGPTPEER(r6, 0x5441, 0x6) close_range(r5, 0xffffffffffffffff, 0x0) 4.677875642s ago: executing program 2 (id=2959): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) syz_emit_ethernet(0xa7, &(0x7f0000000900)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0xe, 0x4, 0x3, 0x2f, 0x99, 0x68, 0x0, 0x7, 0x1, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x24, 0x19, 0x3, 0xa, [{@multicast2, 0x4cfed16c}, {@broadcast, 0xc}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x7f}]}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x401, "2b49aadb1cfa2497f20d536b185f8ef057469e665dc459897ef6ea20dc95def3b0503dc8b199d5a75c37d372b6d5a449958feea72f620229ee6cf3e84d41a0d0fc1b227a8b2b7ab6cd30e372a401f04bd9dc9df6d01de3bef8"}}}}}, 0x0) 4.358205292s ago: executing program 2 (id=2960): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffa9, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000440)={0x20, 0x0, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 3.678167924s ago: executing program 0 (id=2961): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b80)={0x24, &(0x7f0000000080)={0x40, 0x16, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0xc, &(0x7f0000000000)={0x20, 0x22, 0xd, {0xd, 0x23, "d502f5bca5dbd3c17aec63"}}, &(0x7f00000000c0)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "06bfb98cfd828ce593cfa375f7e48dd50be5dcbc6e5072ab7eee4ec606343374a013cf4b01775e0a4cf91a07ed2183706ac6bdc04edfdea19a5871e19c64c4b87dd9bb3720a220a8df303637907eb22bc1ae82172cb0a274734c3c0e770b15927ad4f341d3ba7e7cd6566c9492a98b473da2f0515ab88d90ab4234958d8100e05bb2b824db17b0ddddc267434343b398a2a8d2a82c926b4688bc5f81b40964f250f3"}}}, &(0x7f0000000440)={0x24, &(0x7f0000000200)={0x60, 0x8, 0x2, 'h+'}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "139c22"}, &(0x7f0000000300)={0x20, 0x82, 0x1, "b0"}, &(0x7f0000000380)={0x20, 0x83, 0x2, "ecf8"}, &(0x7f00000003c0)={0x20, 0x84, 0x1, "ec"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "8f90ec"}}) syz_usb_control_io(r0, 0x0, 0x0) 3.621014706s ago: executing program 1 (id=2962): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$sequencer(0xffffff9c, 0x0, 0x84, 0x0) r1 = syz_io_uring_setup(0x3, 0x0, &(0x7f00000005c0), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, 0x0, 0x0) r2 = open$dir(&(0x7f00000001c0)='./cgroup/../file0\x00', 0x2000, 0xe8) getdents64(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x14044080}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x27) r3 = dup(0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x95, 0x0, 0x21, 0x3, 0xfffffffe, 0x236, 0x800000000009, 0x8, 0xd861, 0x3}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800458600340064000007069078ac1414bbac1414bb4e224e2261f726992c54062f40c3a9d1d20d112615d22368312ee1ea2b9da020cd64913a531129c207dade526a750404851f477b883581d57d278cc5ba30bfe90d3457a0162ef0a443ff8c4716db5657f3e6fe72bfbbf4edb641f2db09266fb1a8fc5245236473ae0694ca87eb7f95e011e0206c88", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80040002907800e7080a0000000600"], 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) 3.429343002s ago: executing program 1 (id=2963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0x3, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.171293242s ago: executing program 2 (id=2964): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x9b, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1025, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x1, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x15}, [@feature_unit={0xb, 0x24, 0x6, 0x6, 0x1, 0x2, [0x1, 0x9], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xd8, 0x1, 0x9, 0x2, 'y`4'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0xd, 0xcb, "dc"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x4, 0x7, 0x50, "18b2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6, 0x7, {0x7, 0x25, 0x1, 0x4, 0xf7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x77, {0x7, 0x25, 0x1, 0xc, 0x8, 0x5}}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 893.205702ms ago: executing program 0 (id=2965): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x100058d1}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 362.048869ms ago: executing program 0 (id=2966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000180)=0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0xd3) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}, 0x1, 0x0, 0x0, 0x10010}, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)) openat$vimc2(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 345.73481ms ago: executing program 3 (id=2967): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x28, 0x0, 0x9, {{0xf7fffffffffffffd, 0x3, 0xd8bef8474886e58c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000}) 299.190931ms ago: executing program 1 (id=2968): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r2, &(0x7f0000000300)='1\x00', 0x2) 102.151167ms ago: executing program 3 (id=2969): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000500)="9b7385220700000000000000e57c489b51b14b7aea6ef45d0c085cb7df42ccf49eabcf03d0e97bb857dbd8d553a187d0", 0x30}, {&(0x7f0000000540)="53000000d073b0f3347edc854b4bc4db1e2e1302af076bb6c9909a18e554d5ecc9db5942dac6a182a0efc18289ba2d68f7e5121dc8db62a39389242ce69529ab9bb7aad26d928b530b9345c2ccce127c140538", 0x53}], 0x2) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r3 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='name', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd2d, 0x0, {0x1c}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) r6 = socket(0x11, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmmsg(r6, &(0x7f0000001240)=[{{&(0x7f0000000040)=@can={0x1d, r8}, 0x80, 0x0}}], 0x1, 0x8010) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 0 (id=2970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') socket(0x2, 0xa, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newnexthop={0x24, 0x5e, 0x103, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x1, 0x0, 0x36}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x200444c1}, 0x200000c0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r3, &(0x7f00000006c0)={0x11, 0x0, r5, 0x1, 0xb, 0x6, @remote}, 0x14) syz_emit_ethernet(0x55, &(0x7f0000000500)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @redirect={0x5, 0x3, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, {0x9, 0x4, 0x0, 0x4, 0xbcd7, 0x64, 0x6, 0x7, 0x1d, 0xfff, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@rr={0x7, 0xf, 0xc7, [@multicast2, @remote, @private=0xa010101]}, @end]}}, "51a393d7e6b1fa"}}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) kernel console output (not intermixed with test programs): 887.570691][T15052] 416931 pages reserved [ 887.580850][T15052] 0 pages cma reserved [ 887.635302][ T23] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 887.665208][T15062] Bluetooth: hci3: command 0x0406 tx timeout [ 887.901006][ T23] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 888.009475][ T23] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 888.117795][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 888.219454][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 888.322498][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 888.352982][ T23] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 888.371694][ T23] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 888.389691][ T23] usb 2-1: Product: syz [ 888.408355][ T23] usb 2-1: Manufacturer: syz [ 888.434336][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 888.446930][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 888.470563][ T23] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 888.487207][ T23] cdc_wdm 2-1:1.0: Unknown control protocol [ 888.726393][T14030] usb 4-1: USB disconnect, device number 101 [ 888.935211][ T5814] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 888.993754][T15097] loop2: detected capacity change from 0 to 7 [ 889.008772][T15097] Dev loop2: unable to read RDB block 7 [ 889.021298][T15097] loop2: AHDI p2 p3 [ 889.030514][T15097] loop2: partition table partially beyond EOD, truncated [ 889.040499][T15097] loop2: p3 start 335544320 is beyond EOD, truncated [ 889.137214][ T5814] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 889.170687][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.204073][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.214646][ T5814] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 889.246126][ T5814] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 889.258669][ T5814] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 889.301913][ T5814] usb 3-1: Manufacturer: syz [ 889.356127][ T5814] usb 3-1: config 0 descriptor?? [ 889.597356][T15101] input: syz1 as /devices/virtual/input/input45 [ 889.603984][T15101] input: failed to attach handler leds to device input45, error: -6 [ 889.873628][ T5814] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 889.952440][ T5814] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 890.040993][ T5814] appleir 0003:05AC:8243.0010: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 890.181074][ T23] usb 2-1: USB disconnect, device number 95 [ 890.565158][ T5814] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 890.725074][T15115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.745972][T14030] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 890.768531][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.783939][ T5814] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 890.807832][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.834691][ T5814] usb 1-1: config 0 descriptor?? [ 890.949247][T14030] usb 2-1: config index 0 descriptor too short (expected 54, got 36) [ 890.963274][T14030] usb 2-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 890.978212][T14030] usb 2-1: config 0 has no interfaces? [ 890.987431][T14030] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 891.000057][T14030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.018886][T14030] usb 2-1: config 0 descriptor?? [ 891.061765][ T5814] usbhid 1-1:0.0: can't add hid device: -71 [ 891.072459][ T5814] usbhid: probe of 1-1:0.0 failed with error -71 [ 891.087555][ T5814] usb 1-1: USB disconnect, device number 87 [ 891.239810][T14030] usb 2-1: USB disconnect, device number 96 [ 891.665124][ T5814] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 891.780062][T14030] usb 3-1: USB disconnect, device number 106 [ 891.869410][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.910391][ T5814] usb 1-1: New USB device found, idVendor=0958, idProduct=3333, bcdDevice= 0.40 [ 891.930200][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.164554][ T5814] usb 1-1: config 0 descriptor?? [ 892.315096][ T7016] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 892.580943][ T7016] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 892.666972][ T7016] usb 4-1: config 1 has no interface number 0 [ 892.729409][ T7016] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 892.790160][ T7016] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x7 has invalid maxpacket 1600, setting to 1024 [ 892.821999][ T7016] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 892.844604][ T7016] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.876421][ T7016] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 892.895062][ T7016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.918542][ T7016] usb 4-1: Product: syz [ 892.922783][ T7016] usb 4-1: Manufacturer: syz [ 892.938111][ T7016] usb 4-1: SerialNumber: syz [ 892.986642][T15127] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 893.014620][T15127] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 893.040620][ T7016] usb 4-1: Expected 3 endpoints, found: 2 [ 893.078670][T15106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.117406][T15106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.277036][ T5868] usb 4-1: USB disconnect, device number 102 [ 894.082484][T15139] input: syz1 as /devices/virtual/input/input46 [ 894.089021][T15139] input: failed to attach handler leds to device input46, error: -6 [ 894.258497][ T5814] usbhid 1-1:0.0: can't add hid device: -71 [ 894.264601][ T5814] usbhid: probe of 1-1:0.0 failed with error -71 [ 894.306776][ T5814] usb 1-1: USB disconnect, device number 88 [ 894.386464][T15146] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 894.393066][T15146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 894.416385][T15146] vhci_hcd vhci_hcd.0: Device attached [ 894.498862][T15148] vhci_hcd: connection closed [ 894.515066][ T6160] vhci_hcd: stop threads [ 894.539312][ T6160] vhci_hcd: release socket [ 894.553316][ T6160] vhci_hcd: disconnect device [ 894.615546][T11230] vhci_hcd: vhci_device speed not set [ 894.815138][ T5814] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 894.845069][T14030] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 895.007475][ T5814] usb 4-1: config index 0 descriptor too short (expected 54, got 36) [ 895.023557][ T5814] usb 4-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 895.045259][ T5814] usb 4-1: config 0 has no interfaces? [ 895.052328][T14030] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 895.068802][ T5814] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 895.085022][T14030] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.097382][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.115072][T14030] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.126511][T14030] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 895.141105][ T5814] usb 4-1: config 0 descriptor?? [ 895.172196][T14030] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 895.182947][T14030] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 895.195080][T14030] usb 2-1: Manufacturer: syz [ 895.218282][T14030] usb 2-1: config 0 descriptor?? [ 895.390320][T14065] usb 4-1: USB disconnect, device number 103 [ 895.637088][T14030] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 895.651549][T14030] appleir 0003:05AC:8243.0011: No inputs registered, leaving [ 895.665211][T14030] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 896.003331][T15159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.164201][T15173] loop2: detected capacity change from 0 to 7 [ 897.185126][T15173] Dev loop2: unable to read RDB block 7 [ 897.192292][T15173] loop2: unable to read partition table [ 897.199335][T15173] loop2: partition table beyond EOD, truncated [ 897.207064][T15173] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 897.229583][ T5142] Dev loop2: unable to read RDB block 7 [ 897.236036][ T5142] loop2: unable to read partition table [ 897.241960][ T5142] loop2: partition table beyond EOD, truncated [ 897.275200][T14065] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 897.478230][T14065] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 897.490471][T14065] usb 4-1: config 1 has no interface number 0 [ 897.496861][T14065] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 897.509208][T14065] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x7 has invalid maxpacket 1600, setting to 1024 [ 897.546991][T14065] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 897.577646][T14065] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.595234][T14065] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 897.609008][T14065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.618399][T14065] usb 4-1: Product: syz [ 897.622879][T14065] usb 4-1: Manufacturer: syz [ 897.634765][T14065] usb 4-1: SerialNumber: syz [ 897.644333][T15170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 897.651951][T15170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 897.662015][T14065] usb 4-1: Expected 3 endpoints, found: 2 [ 897.746704][T15182] tipc: Started in network mode [ 897.751902][T15182] tipc: Node identity defe5793b32b, cluster identity 4711 [ 897.759843][T15182] tipc: Enabled bearer , priority 0 [ 897.769791][T15182] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 897.787119][ T5868] usb 2-1: USB disconnect, device number 97 [ 897.878868][T15170] warn_alloc: 1 callbacks suppressed [ 897.878880][T15170] syz.3.2655: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 897.912880][T15170] CPU: 1 PID: 15170 Comm: syz.3.2655 Not tainted syzkaller #0 [ 897.920431][T15170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 897.930543][T15170] Call Trace: [ 897.933876][T15170] [ 897.936854][T15170] dump_stack_lvl+0x18c/0x250 [ 897.941603][T15170] ? show_regs_print_info+0x20/0x20 [ 897.946902][T15170] ? load_image+0x420/0x420 [ 897.951470][T15170] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 897.957945][T15170] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 897.964510][T15170] warn_alloc+0x246/0x340 [ 897.968910][T15170] ? zone_watermark_ok_safe+0x230/0x230 [ 897.974538][T15170] __vmalloc_node_range+0x129/0x1320 [ 897.979862][T15170] ? __mutex_trylock_common+0x160/0x270 [ 897.985444][T15170] ? trace_raw_output_contention_end+0xd0/0xd0 [ 897.991654][T15170] ? rcu_is_watching+0x15/0xb0 [ 897.996492][T15170] ? trace_contention_end+0x39/0xe0 [ 898.001723][T15170] ? __mutex_lock+0x30d/0xc80 [ 898.006438][T15170] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 898.012096][T15170] ? free_vm_area+0x50/0x50 [ 898.016632][T15170] ? dvb_demux_do_ioctl+0x317/0x530 [ 898.021867][T15170] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 898.027351][T15170] ? mutex_lock_nested+0x20/0x20 [ 898.032330][T15170] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 898.038185][T15170] vmalloc+0x79/0x90 [ 898.042122][T15170] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 898.047968][T15170] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 898.053652][T15170] dvb_demux_do_ioctl+0x454/0x530 [ 898.058719][T15170] dvb_usercopy+0x195/0x2b0 [ 898.063262][T15170] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 898.068845][T15170] ? dvb_generic_ioctl+0xb0/0xb0 [ 898.073835][T15170] ? dvb_demux_poll+0x210/0x210 [ 898.078722][T15170] dvb_demux_ioctl+0x29/0x30 [ 898.083348][T15170] __se_sys_ioctl+0xfd/0x170 [ 898.087975][T15170] do_syscall_64+0x55/0xb0 [ 898.092423][T15170] ? clear_bhb_loop+0x40/0x90 [ 898.097128][T15170] ? clear_bhb_loop+0x40/0x90 [ 898.101833][T15170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.107758][T15170] RIP: 0033:0x7f11b039ce59 [ 898.112205][T15170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.131837][T15170] RSP: 002b:00007f11b11ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 898.140298][T15170] RAX: ffffffffffffffda RBX: 00007f11b0615fa0 RCX: 00007f11b039ce59 [ 898.148343][T15170] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 898.156356][T15170] RBP: 00007f11b0432e6f R08: 0000000000000000 R09: 0000000000000000 [ 898.164403][T15170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.172503][T15170] R13: 00007f11b0616038 R14: 00007f11b0615fa0 R15: 00007ffca9e6d678 [ 898.180534][T15170] [ 898.218560][T15170] Mem-Info: [ 898.239776][T15170] active_anon:5539 inactive_anon:0 isolated_anon:0 [ 898.239776][T15170] active_file:1277 inactive_file:40286 isolated_file:0 [ 898.239776][T15170] unevictable:768 dirty:157 writeback:0 [ 898.239776][T15170] slab_reclaimable:10442 slab_unreclaimable:93807 [ 898.239776][T15170] mapped:25119 shmem:1363 pagetables:593 [ 898.239776][T15170] sec_pagetables:0 bounce:0 [ 898.239776][T15170] kernel_misc_reclaimable:0 [ 898.239776][T15170] free:1359352 free_pcp:8173 free_cma:0 [ 898.466492][T15170] Node 0 active_anon:24956kB inactive_anon:0kB active_file:5108kB inactive_file:160940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103176kB dirty:628kB writeback:0kB shmem:6616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10828kB pagetables:2372kB sec_pagetables:0kB all_unreclaimable? no [ 898.499306][ T5868] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 898.615117][T15170] Node 1 active_anon:5700kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:5700kB dirty:0kB writeback:0kB shmem:7236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 898.646244][T15170] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 898.770055][ T5868] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 898.785020][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.807232][T15170] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 898.825743][ T5868] usb 2-1: Product: syz [ 898.846063][ T5868] usb 2-1: Manufacturer: syz [ 898.895330][ T5868] usb 2-1: SerialNumber: syz [ 898.989599][T15170] Node 0 DMA32 free:1527796kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27920kB inactive_anon:0kB active_file:5108kB inactive_file:160116kB unevictable:1536kB writepending:628kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:6944kB local_pcp:756kB free_cma:0kB [ 899.044280][ T5868] usb 2-1: config 0 descriptor?? [ 899.321861][T15170] lowmem_reserve[]: 0 0 0 0 0 [ 899.364563][ T5868] usb 2-1: Firmware version (0.0) predates our first public release. [ 899.413562][ T5868] usb 2-1: Please update to version 0.2 or newer [ 899.456071][T15170] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 899.495981][T15181] tipc: Disabling bearer [ 899.521721][T14030] tipc: Node number set to 1842698131 [ 899.543209][T15170] lowmem_reserve[]: 0 0 0 0 0 [ 899.562174][T15170] Node 1 Normal free:3886596kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:26108kB local_pcp:10648kB free_cma:0kB [ 899.596987][ T5868] usb 2-1: USB disconnect, device number 98 [ 899.615434][T15170] lowmem_reserve[]: 0 0 0 0 0 [ 899.620269][T15170] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 899.666407][T15170] Node 0 DMA32: 1*4kB (U) 586*8kB (UM) 326*16kB (UME) 559*32kB (UME) 150*64kB (UME) 110*128kB (UME) 26*256kB (UM) 20*512kB (UME) 10*1024kB (UME) 3*2048kB (UM) 351*4096kB (UM) = 1522452kB [ 899.732243][T15170] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 899.749017][T15170] Node 1 Normal: 131*4kB (UE) 59*8kB (UME) 8*16kB (UME) 153*32kB (UME) 40*64kB (UE) 11*128kB (UME) 5*256kB (ME) 5*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 944*4096kB (M) = 3886596kB [ 899.833113][T15170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 899.857099][T15170] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 899.874237][T15170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 899.885656][T15170] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 899.895300][T15170] 42930 total pagecache pages [ 899.900034][T15170] 0 pages in swap cache [ 899.904231][T15170] Free swap = 124712kB [ 899.910045][T15170] Total swap = 124996kB [ 899.914272][T15170] 2097051 pages RAM [ 899.922212][T15170] 0 pages HighMem/MovableOnly [ 899.929002][T15170] 416931 pages reserved [ 899.933219][T15170] 0 pages cma reserved [ 899.956371][T14030] usb 4-1: USB disconnect, device number 104 [ 899.977625][ T7016] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 900.112247][T15207] loop2: detected capacity change from 0 to 7 [ 900.136343][T15207] Dev loop2: unable to read RDB block 7 [ 900.142063][T15207] loop2: unable to read partition table [ 900.148621][T15207] loop2: partition table beyond EOD, truncated [ 900.154879][T15207] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 900.178538][ T7016] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 900.199198][ T7016] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 900.217898][ T7016] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 900.227856][ T5142] Dev loop2: unable to read RDB block 7 [ 900.233484][ T5142] loop2: unable to read partition table [ 900.239976][ T5142] loop2: partition table beyond EOD, truncated [ 900.249988][ T7016] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 900.303356][ T7016] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 900.335477][ T7016] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 900.344619][ T7016] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 900.385363][ T7016] usb 3-1: Product: syz [ 900.389623][ T7016] usb 3-1: Manufacturer: syz [ 900.414673][ T7016] cdc_wdm 3-1:1.0: skipping garbage [ 900.435204][ T7016] cdc_wdm 3-1:1.0: skipping garbage [ 900.448507][ T7016] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 900.454575][ T7016] cdc_wdm 3-1:1.0: Unknown control protocol [ 900.695079][T14030] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 900.701584][ T5868] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 900.887261][T14030] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 900.905023][T14030] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.913254][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 900.925886][T14030] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.938042][ T5868] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 900.957046][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.957346][T14030] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 900.988960][ T5868] usb 1-1: config 0 descriptor?? [ 901.001393][T14030] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 901.030579][T14030] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 901.045236][T14030] usb 2-1: Manufacturer: syz [ 901.066353][T14030] usb 2-1: config 0 descriptor?? [ 901.205509][ T5868] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 901.232768][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 901.248457][ T5868] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 901.256681][ T5868] usb 1-1: media controller created [ 901.300835][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 901.429350][ T5868] az6027: usb out operation failed. (-71) [ 901.442826][ T5868] az6027: usb out operation failed. (-71) [ 901.458444][ T5868] stb0899_attach: Driver disabled by Kconfig [ 901.464613][ T5868] az6027: no front-end attached [ 901.464613][ T5868] [ 901.480838][ T5868] az6027: usb out operation failed. (-71) [ 901.487258][ T5868] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 901.496888][T14030] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 901.509813][T14030] appleir 0003:05AC:8243.0012: No inputs registered, leaving [ 901.515422][ T5868] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input47 [ 901.541778][ T5868] dvb-usb: schedule remote query interval to 400 msecs. [ 901.557875][ T5868] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 901.569435][T14030] appleir 0003:05AC:8243.0012: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 901.583384][ T5868] usb 1-1: USB disconnect, device number 89 [ 901.702776][ T5868] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 902.499580][T15227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.531377][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 902.532843][T14030] usb 3-1: USB disconnect, device number 107 [ 902.538051][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 902.538077][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 903.015019][T15062] Bluetooth: hci1: command 0x0406 tx timeout [ 903.441731][T15226] input: syz1 as /devices/virtual/input/input48 [ 903.448138][T15226] input: failed to attach handler leds to device input48, error: -6 [ 903.684540][T15237] tipc: Enabled bearer , priority 0 [ 903.693242][T15237] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 903.970959][ T5814] usb 2-1: USB disconnect, device number 99 [ 903.995087][ T23] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 904.175079][T14030] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 904.203372][ T23] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 904.235207][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.259009][ T23] usb 1-1: Product: syz [ 904.263266][ T23] usb 1-1: Manufacturer: syz [ 904.278590][ T23] usb 1-1: SerialNumber: syz [ 904.298581][ T23] usb 1-1: config 0 descriptor?? [ 904.380527][T14030] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 904.400542][T14030] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 904.420949][T14030] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 904.430693][T14030] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 904.469052][T14030] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 904.483968][T14030] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 904.506994][T14030] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 904.518806][ T23] usb 1-1: Firmware version (0.0) predates our first public release. [ 904.530739][T14030] usb 4-1: Product: syz [ 904.543721][T14030] usb 4-1: Manufacturer: syz [ 904.553028][ T23] usb 1-1: Please update to version 0.2 or newer [ 904.568966][T14030] cdc_wdm 4-1:1.0: skipping garbage [ 904.577289][T15235] tipc: Disabling bearer [ 904.584206][T14030] cdc_wdm 4-1:1.0: skipping garbage [ 904.606492][T14030] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 904.624605][T14030] cdc_wdm 4-1:1.0: Unknown control protocol [ 904.651959][ T23] usb 1-1: USB disconnect, device number 90 [ 904.766715][ T7016] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 904.966010][ T7016] usb 2-1: Using ep0 maxpacket: 16 [ 904.982089][ T7016] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.005004][ T7016] usb 2-1: config 0 interface 0 has no altsetting 0 [ 905.021913][ T7016] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 905.035010][ T7016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.056774][ T7016] usb 2-1: config 0 descriptor?? [ 905.496903][ T7016] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 905.565538][T11230] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 905.785620][T15266] input: syz1 as /devices/virtual/input/input49 [ 905.794111][T15266] input: failed to attach handler leds to device input49, error: -6 [ 905.875642][T11230] usb 1-1: Using ep0 maxpacket: 16 [ 906.016495][T11230] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.194686][T11230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 906.268861][T11230] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 906.303645][T11230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.355395][T15258] input: syz1 as /devices/virtual/input/input50 [ 906.397838][T11230] usb 1-1: config 0 descriptor?? [ 906.832460][T11230] nzxt-smart2 0003:1E71:2009.0014: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 906.859250][ T5814] usb 4-1: USB disconnect, device number 105 [ 907.115322][ T7016] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 907.333262][ T7016] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 907.346163][ T7016] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 907.365005][ T7016] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 907.379706][ T7016] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 907.392736][ T7016] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 907.413114][ T7016] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 907.431681][ T7016] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 907.440381][ T7016] usb 3-1: Product: syz [ 907.444706][ T7016] usb 3-1: Manufacturer: syz [ 907.475826][ T7016] cdc_wdm 3-1:1.0: skipping garbage [ 907.481390][ T7016] cdc_wdm 3-1:1.0: skipping garbage [ 907.501948][ T7016] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 907.514209][ T7016] cdc_wdm 3-1:1.0: Unknown control protocol [ 907.584470][ T5814] usb 2-1: USB disconnect, device number 100 [ 907.665467][T11230] usb 1-1: USB disconnect, device number 91 [ 907.865106][ T7016] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 908.057281][ T7016] usb 4-1: Using ep0 maxpacket: 32 [ 908.067544][ T7016] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 908.078425][ T7016] usb 4-1: config 0 has no interface number 0 [ 908.084622][ T7016] usb 4-1: config 0 interface 12 has no altsetting 0 [ 908.096665][ T7016] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 908.105997][ T7016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.114119][ T7016] usb 4-1: Product: syz [ 908.118616][ T7016] usb 4-1: Manufacturer: syz [ 908.123298][ T7016] usb 4-1: SerialNumber: syz [ 908.129879][ T5814] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 908.135620][ T7016] usb 4-1: config 0 descriptor?? [ 908.332674][ T5814] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 908.343731][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.357781][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.367729][ T5814] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 908.386688][ T5814] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 908.396084][ T5814] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 908.404255][ T5814] usb 2-1: Manufacturer: syz [ 908.412389][ T5814] usb 2-1: config 0 descriptor?? [ 908.828587][ T5814] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 908.836976][ T5814] appleir 0003:05AC:8243.0015: No inputs registered, leaving [ 908.851108][ T5814] appleir 0003:05AC:8243.0015: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 909.394779][T15293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.624798][ T7016] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 909.635082][ T7016] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 909.642464][ T7016] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 909.656596][ T7016] f81534: probe of 4-1:0.12 failed with error -71 [ 909.672769][ T7016] usb 4-1: USB disconnect, device number 106 [ 909.753463][ T23] usb 3-1: USB disconnect, device number 108 [ 910.360454][T15299] input: syz1 as /devices/virtual/input/input51 [ 910.367184][T15299] input: failed to attach handler leds to device input51, error: -6 [ 910.762677][ T7016] usb 2-1: USB disconnect, device number 101 [ 910.901360][T15308] sch_tbf: burst 1040 is lower than device syzkaller0 mtu (1514) ! [ 910.911127][T15308] syzkaller0: entered promiscuous mode [ 910.929661][T15308] syzkaller0: entered allmulticast mode [ 910.955085][T11230] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 910.998985][T15310] bridge_slave_0: invalid flags given to default FDB implementation [ 911.157684][T11230] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 911.166861][T11230] usb 3-1: config 1 has no interface number 0 [ 911.173041][T11230] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 911.189069][T11230] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x7 has invalid maxpacket 1600, setting to 1024 [ 911.200674][T11230] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 911.214340][T11230] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.232926][T11230] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 911.243705][T11230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.257836][T11230] usb 3-1: Product: syz [ 911.262233][T11230] usb 3-1: Manufacturer: syz [ 911.270618][T11230] usb 3-1: SerialNumber: syz [ 911.282778][T15304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 911.293434][T15304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 911.318298][T11230] usb 3-1: Expected 3 endpoints, found: 2 [ 911.395261][ T7016] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 911.526012][T15304] syz.2.2698: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 911.543381][T15304] CPU: 0 PID: 15304 Comm: syz.2.2698 Not tainted syzkaller #0 [ 911.550925][T15304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 911.561032][T15304] Call Trace: [ 911.564360][T15304] [ 911.567333][T15304] dump_stack_lvl+0x18c/0x250 [ 911.572075][T15304] ? show_regs_print_info+0x20/0x20 [ 911.577332][T15304] ? load_image+0x420/0x420 [ 911.581891][T15304] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 911.588366][T15304] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 911.594929][T15304] warn_alloc+0x246/0x340 [ 911.599334][T15304] ? zone_watermark_ok_safe+0x230/0x230 [ 911.604968][T15304] __vmalloc_node_range+0x129/0x1320 [ 911.610322][T15304] ? __mutex_trylock_common+0x160/0x270 [ 911.615933][T15304] ? trace_raw_output_contention_end+0xd0/0xd0 [ 911.622151][T15304] ? rcu_is_watching+0x15/0xb0 [ 911.626976][T15304] ? trace_contention_end+0x39/0xe0 [ 911.632227][T15304] ? __mutex_lock+0x30d/0xc80 [ 911.636974][T15304] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 911.642660][T15304] ? free_vm_area+0x50/0x50 [ 911.645687][ T7016] usb 2-1: Using ep0 maxpacket: 16 [ 911.647199][T15304] ? dvb_demux_do_ioctl+0x317/0x530 [ 911.657573][T15304] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 911.663174][T15304] ? mutex_lock_nested+0x20/0x20 [ 911.668175][T15304] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 911.674048][T15304] vmalloc+0x79/0x90 [ 911.678025][T15304] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 911.678126][ T7016] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.683900][T15304] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 911.700445][T15304] dvb_demux_do_ioctl+0x454/0x530 [ 911.705534][T15304] dvb_usercopy+0x195/0x2b0 [ 911.710104][T15304] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 911.715251][ T7016] usb 2-1: config 0 interface 0 has no altsetting 0 [ 911.715688][T15304] ? dvb_generic_ioctl+0xb0/0xb0 [ 911.722395][ T7016] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 911.727267][T15304] ? dvb_demux_poll+0x210/0x210 [ 911.727302][T15304] dvb_demux_ioctl+0x29/0x30 [ 911.745902][T15304] __se_sys_ioctl+0xfd/0x170 [ 911.750573][T15304] do_syscall_64+0x55/0xb0 [ 911.755041][T15304] ? clear_bhb_loop+0x40/0x90 [ 911.757615][ T7016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.759753][T15304] ? clear_bhb_loop+0x40/0x90 [ 911.759784][T15304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.759824][T15304] RIP: 0033:0x7fe154f9ce59 [ 911.759846][T15304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.759866][T15304] RSP: 002b:00007fe155f0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 911.759891][T15304] RAX: ffffffffffffffda RBX: 00007fe155215fa0 RCX: 00007fe154f9ce59 [ 911.759910][T15304] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 911.759925][T15304] RBP: 00007fe155032e6f R08: 0000000000000000 R09: 0000000000000000 [ 911.759940][T15304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.759955][T15304] R13: 00007fe155216038 R14: 00007fe155215fa0 R15: 00007fffbcc41a28 [ 911.760001][T15304] [ 911.860713][T15304] Mem-Info: [ 911.864638][T15304] active_anon:8422 inactive_anon:0 isolated_anon:0 [ 911.864638][T15304] active_file:1277 inactive_file:40292 isolated_file:0 [ 911.864638][T15304] unevictable:768 dirty:178 writeback:0 [ 911.864638][T15304] slab_reclaimable:10491 slab_unreclaimable:94180 [ 911.864638][T15304] mapped:27954 shmem:4195 pagetables:617 [ 911.864638][T15304] sec_pagetables:0 bounce:0 [ 911.864638][T15304] kernel_misc_reclaimable:0 [ 911.864638][T15304] free:1351364 free_pcp:12698 free_cma:0 [ 911.920474][T15304] Node 0 active_anon:33688kB inactive_anon:0kB active_file:5108kB inactive_file:160964kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116016kB dirty:712kB writeback:0kB shmem:15244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10744kB pagetables:2468kB sec_pagetables:0kB all_unreclaimable? no [ 911.955636][T15304] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 911.987963][ T7016] usb 2-1: config 0 descriptor?? [ 912.002345][T15304] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 912.039305][T15304] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 912.045670][T15304] Node 0 DMA32 free:1502860kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:33140kB inactive_anon:0kB active_file:5108kB inactive_file:160140kB unevictable:1536kB writepending:712kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:25416kB local_pcp:16772kB free_cma:0kB [ 912.086011][T15304] lowmem_reserve[]: 0 0 0 0 0 [ 912.091045][T15304] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 912.118463][T15304] lowmem_reserve[]: 0 0 0 0 0 [ 912.128139][T15304] Node 1 Normal free:3887352kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25384kB local_pcp:15492kB free_cma:0kB [ 912.170114][T15304] lowmem_reserve[]: 0 0 0 0 0 [ 912.176501][T15304] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 912.193414][T15304] Node 0 DMA32: 1*4kB (U) 5*8kB (UME) 254*16kB (UME) 478*32kB (UM) 149*64kB (UME) 111*128kB (UME) 26*256kB (UM) 20*512kB (UME) 11*1024kB (UME) 1*2048kB (U) 349*4096kB (UM) = 1502860kB [ 912.215174][ T23] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 912.224325][T15304] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 912.243601][T15304] Node 1 Normal: 208*4kB (UME) 67*8kB (UME) 16*16kB (UME) 159*32kB (UME) 41*64kB (UME) 11*128kB (UME) 5*256kB (ME) 5*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 944*4096kB (M) = 3887352kB [ 912.268067][T15304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.280999][T15304] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 912.296617][T15304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.309960][T15304] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 912.320884][T15304] 44300 total pagecache pages [ 912.329399][T15304] 0 pages in swap cache [ 912.333671][T15304] Free swap = 124436kB [ 912.339815][T15304] Total swap = 124996kB [ 912.344101][T15304] 2097051 pages RAM [ 912.352698][T15304] 0 pages HighMem/MovableOnly [ 912.358901][T15304] 416931 pages reserved [ 912.363107][T15304] 0 pages cma reserved [ 912.417551][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 912.441951][ T7016] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 912.469504][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.488810][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.502650][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 912.524409][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 912.543084][ T5867] usb 3-1: USB disconnect, device number 109 [ 912.584173][ T23] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 912.605857][ T23] usb 1-1: Manufacturer: syz [ 912.619870][ T23] usb 1-1: config 0 descriptor?? [ 912.941014][T15328] input: syz1 as /devices/virtual/input/input52 [ 912.948123][T15328] input: failed to attach handler leds to device input52, error: -6 [ 912.985384][ T5868] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 913.162952][ T23] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 913.186188][ T23] appleir 0003:05AC:8243.0017: No inputs registered, leaving [ 913.235318][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 913.268784][ T5868] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 913.287984][ T5868] usb 4-1: config 0 has no interface number 0 [ 913.308609][ T23] appleir 0003:05AC:8243.0017: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 913.320327][ T5868] usb 4-1: config 0 interface 12 has no altsetting 0 [ 913.381074][ T5868] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 913.428975][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.437548][ T5868] usb 4-1: Product: syz [ 913.442088][ T5868] usb 4-1: Manufacturer: syz [ 913.458296][ T5868] usb 4-1: SerialNumber: syz [ 913.507635][ T5868] usb 4-1: config 0 descriptor?? [ 913.567196][T15312] input: syz1 as /devices/virtual/input/input53 [ 913.945815][T15331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 914.245059][T11230] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 914.437153][T11230] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 914.450290][T11230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.477047][T11230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.496842][T11230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 914.525399][T11230] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 914.535500][T11230] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 914.555566][T11230] usb 3-1: Manufacturer: syz [ 914.564605][T11230] usb 3-1: config 0 descriptor?? [ 914.635096][T14030] usb 1-1: reset high-speed USB device number 92 using dummy_hcd [ 914.776932][ T9] usb 2-1: USB disconnect, device number 102 [ 914.864259][T15338] bridge_slave_0: invalid flags given to default FDB implementation [ 914.955576][T15340] sch_tbf: burst 1040 is lower than device syzkaller0 mtu (1514) ! [ 914.969708][T15340] syzkaller0: entered promiscuous mode [ 914.975358][T15340] syzkaller0: entered allmulticast mode [ 914.998936][T11230] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 915.008928][T11230] appleir 0003:05AC:8243.0018: No inputs registered, leaving [ 915.022293][T11230] appleir 0003:05AC:8243.0018: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 915.161901][ T5868] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 915.171226][ T5868] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 915.179046][ T5868] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 915.187620][ T5868] f81534: probe of 4-1:0.12 failed with error -71 [ 915.199628][ T5868] usb 4-1: USB disconnect, device number 107 [ 915.476472][ T5814] usb 1-1: USB disconnect, device number 92 [ 915.658836][T15355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 916.155343][ T5814] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 916.347014][ T5814] usb 4-1: config index 0 descriptor too short (expected 54, got 36) [ 916.359647][ T5814] usb 4-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 916.376680][ T5814] usb 4-1: config 0 has no interfaces? [ 916.382357][ T5814] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 916.396487][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.408875][ T5814] usb 4-1: config 0 descriptor?? [ 916.624754][ T5868] usb 4-1: USB disconnect, device number 108 [ 916.641338][ T5867] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 916.765203][T15367] bridge_slave_0: invalid flags given to default FDB implementation [ 916.836225][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 916.844576][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.859230][ T5867] usb 2-1: config 0 has no interfaces? [ 916.868292][ T5867] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 916.882632][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.890859][ T5867] usb 2-1: Product: syz [ 916.899763][ T5867] usb 2-1: Manufacturer: syz [ 916.904534][ T5867] usb 2-1: SerialNumber: syz [ 916.912647][ T5867] usb 2-1: config 0 descriptor?? [ 916.959366][ T5814] usb 3-1: USB disconnect, device number 110 [ 917.429212][ T5867] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 918.339362][ T5867] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 918.350532][ T5867] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 918.363290][ T5867] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 918.375996][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 918.390613][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 918.395788][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 918.425082][ T5867] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 918.451877][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 918.467040][ T5867] usb 1-1: Product: syz [ 918.471266][ T5867] usb 1-1: Manufacturer: syz [ 918.492562][ T5867] cdc_wdm 1-1:1.0: skipping garbage [ 918.498326][ T5867] cdc_wdm 1-1:1.0: skipping garbage [ 918.519588][ T5867] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 918.529166][ T5867] cdc_wdm 1-1:1.0: Unknown control protocol [ 918.605041][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 918.611744][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 918.626289][ T9] usb 4-1: config 0 has no interface number 0 [ 918.632468][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 918.641477][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 918.650610][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.659908][ T9] usb 4-1: Product: syz [ 918.664116][ T9] usb 4-1: Manufacturer: syz [ 918.669094][ T9] usb 4-1: SerialNumber: syz [ 918.676520][ T9] usb 4-1: config 0 descriptor?? [ 919.104840][T15398] bridge_slave_0: invalid flags given to default FDB implementation [ 919.411857][ T5867] usb 2-1: USB disconnect, device number 103 [ 919.545269][ T5814] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 919.737861][ T5814] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 919.749409][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.760533][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.770401][ T5814] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 919.784864][ T5814] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 919.794107][ T5814] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 919.802495][ T5814] usb 3-1: Manufacturer: syz [ 919.811165][ T5814] usb 3-1: config 0 descriptor?? [ 919.941717][T14030] usb 1-1: USB disconnect, device number 93 [ 920.176376][T14030] libceph: connect (1)[c::]:6789 error -101 [ 920.184872][T14030] libceph: mon0 (1)[c::]:6789 connect error [ 920.219981][T15412] ceph: No mds server is up or the cluster is laggy [ 920.231508][ T5814] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 920.240032][ T5814] appleir 0003:05AC:8243.0019: No inputs registered, leaving [ 920.259677][ T5814] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 920.323947][ T9] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 920.335521][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 920.342877][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 920.351403][ T9] f81534: probe of 4-1:0.12 failed with error -71 [ 920.375392][ T9] usb 4-1: USB disconnect, device number 109 [ 920.447415][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 920.463314][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 921.031571][T15419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.009026][T15433] bridge_slave_0: invalid flags given to default FDB implementation [ 922.427238][ T23] usb 3-1: USB disconnect, device number 111 [ 922.655354][ T5867] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 922.885527][ T5867] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 922.894197][ T5867] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 922.935407][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 922.944458][ T5867] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 922.955941][ T5867] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 922.976975][ T5867] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 922.986484][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 922.994536][ T5867] usb 2-1: Product: syz [ 923.007585][ T5867] usb 2-1: Manufacturer: syz [ 923.024662][ T5867] cdc_wdm 2-1:1.0: skipping garbage [ 923.044851][ T5867] cdc_wdm 2-1:1.0: skipping garbage [ 923.058631][ T5867] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 923.069183][ T5867] cdc_wdm 2-1:1.0: Unknown control protocol [ 923.410668][T15473] tipc: Enabling of bearer rejected, failed to enable media [ 924.219366][T15485] bridge_slave_0: invalid flags given to default FDB implementation [ 924.446090][T15493] loop2: detected capacity change from 0 to 7 [ 924.465933][T15493] Dev loop2: unable to read RDB block 7 [ 924.476413][T15493] loop2: AHDI p1 p2 p3 [ 924.480735][T15493] loop2: partition table partially beyond EOD, truncated [ 924.488956][T15493] loop2: p3 start 335544320 is beyond EOD, truncated [ 924.525104][T14030] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 924.729959][T14030] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 924.755005][T14030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.763110][T14030] usb 1-1: Product: syz [ 924.774995][T14030] usb 1-1: Manufacturer: syz [ 924.779651][T14030] usb 1-1: SerialNumber: syz [ 924.796021][T14030] usb 1-1: config 0 descriptor?? [ 924.925195][ T5867] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 925.125238][ T5867] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 925.145181][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.166223][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.186800][T14030] usb 1-1: Firmware version (0.0) predates our first public release. [ 925.197901][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 925.204567][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 925.205146][T14030] usb 1-1: Please update to version 0.2 or newer [ 925.215549][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 925.223689][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 925.235084][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 925.241747][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 925.248600][ T23] usb 2-1: USB disconnect, device number 104 [ 925.255225][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 925.261876][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 925.268010][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 925.297453][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 925.333621][ T5867] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 925.346034][ T5867] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 925.366076][ T5867] usb 3-1: Manufacturer: syz [ 925.381359][ T5867] usb 3-1: config 0 descriptor?? [ 925.429044][T14030] usb 1-1: USB disconnect, device number 94 [ 925.807667][ T5867] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 925.847976][ T5867] appleir 0003:05AC:8243.001A: No inputs registered, leaving [ 925.886585][ T5867] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 926.356114][T15525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 926.480185][T15532] syz_tun: entered allmulticast mode [ 927.961083][ T5868] usb 3-1: USB disconnect, device number 112 [ 928.519795][T15554] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2760'. [ 928.583593][T15554] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2760'. [ 928.618972][T11785] Bluetooth: hci0: command 0x0406 tx timeout [ 929.419391][T15560] tipc: Started in network mode [ 929.424342][T15560] tipc: Node identity 765cb1676df2, cluster identity 4711 [ 929.462717][T15560] tipc: Enabled bearer , priority 0 [ 929.530397][T15561] syzkaller0: entered promiscuous mode [ 929.547928][T15561] syzkaller0: entered allmulticast mode [ 929.575698][ T5868] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 929.825410][ T5868] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 929.845042][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.889617][ T5868] usb 3-1: Product: syz [ 929.904965][ T5868] usb 3-1: Manufacturer: syz [ 929.935418][ T5868] usb 3-1: SerialNumber: syz [ 929.978394][T15577] syzkaller0: entered promiscuous mode [ 929.995967][ T5868] usb 3-1: config 0 descriptor?? [ 930.006003][T15577] syzkaller0: entered allmulticast mode [ 930.373224][ T5814] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 930.561657][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 930.578681][ T5814] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.598988][ T5814] usb 2-1: config 0 interface 0 has no altsetting 0 [ 930.606776][ T5814] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 930.626039][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.655265][ T5814] usb 2-1: config 0 descriptor?? [ 931.105871][ T5868] usb 3-1: Firmware version (0.0) predates our first public release. [ 931.126632][ T5814] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 931.145019][ T5868] usb 3-1: Please update to version 0.2 or newer [ 931.662193][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.668759][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.503599][T15556] tipc: Resetting bearer [ 932.510062][ T5867] tipc: Node number set to 464433511 [ 932.610529][ T5868] usb 3-1: USB disconnect, device number 113 [ 932.634753][T15556] tipc: Resetting bearer [ 932.698544][T15556] tipc: Disabling bearer [ 933.358196][ T5868] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 933.389518][T15609] ceph: No mds server is up or the cluster is laggy [ 933.459904][ T23] libceph: connect (1)[c::]:6789 error -101 [ 933.526743][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 933.564253][ T23] usb 2-1: USB disconnect, device number 105 [ 933.655685][ T5868] usb 3-1: device descriptor read/64, error -71 [ 933.965086][ T5868] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 934.158457][ T5868] usb 3-1: device descriptor read/64, error -71 [ 934.325400][ T5868] usb usb3-port1: attempt power cycle [ 934.455084][ T5814] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 934.647195][ T5814] usb 1-1: Using ep0 maxpacket: 16 [ 934.664453][ T5814] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.685478][ T5814] usb 1-1: config 0 interface 0 has no altsetting 0 [ 934.692219][ T5814] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 934.702373][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.750490][ T5814] usb 1-1: config 0 descriptor?? [ 934.782678][ T5868] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 934.848808][ T5868] usb 3-1: device descriptor read/8, error -71 [ 935.125065][ T5868] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 935.176278][ T5868] usb 3-1: device descriptor read/8, error -71 [ 935.231467][ T5814] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 935.295471][ T5868] usb usb3-port1: unable to enumerate USB device [ 935.661629][T15632] sch_tbf: burst 1040 is lower than device syzkaller0 mtu (1514) ! [ 935.682925][T15625] input: syz1 as /devices/virtual/input/input54 [ 935.691363][T15632] syzkaller0: entered promiscuous mode [ 935.709837][T15632] syzkaller0: entered allmulticast mode [ 935.863945][T15635] tipc: Enabled bearer , priority 0 [ 935.872925][T15635] syzkaller0: entered promiscuous mode [ 935.882744][T15635] syzkaller0: entered allmulticast mode [ 935.894159][T15635] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 935.940753][T11230] usb 1-1: USB disconnect, device number 95 [ 936.366910][ T5867] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 937.188534][ T27] tipc: Node number set to 2069219047 [ 937.291300][ T27] libceph: connect (1)[c::]:6789 error -101 [ 937.299506][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 937.309228][ T5867] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 937.320420][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.329105][ T5867] usb 4-1: Product: syz [ 937.333339][ T5867] usb 4-1: Manufacturer: syz [ 937.338554][ T5867] usb 4-1: SerialNumber: syz [ 937.346410][ T5867] usb 4-1: config 0 descriptor?? [ 937.356076][T15654] ceph: No mds server is up or the cluster is laggy [ 937.396254][ T5814] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 937.409294][ T23] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 937.560425][T15635] tipc: Resetting bearer [ 937.571972][ T5867] usb 4-1: Firmware version (0.0) predates our first public release. [ 937.585495][ T5867] usb 4-1: Please update to version 0.2 or newer [ 937.598946][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.612526][ T5814] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 937.612792][T15634] tipc: Resetting bearer [ 937.627668][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 937.636915][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.653478][ T5814] usb 2-1: config 0 descriptor?? [ 937.656158][ T23] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.670471][ T5867] usb 4-1: USB disconnect, device number 110 [ 937.686415][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 937.712491][ T23] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 937.722766][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.731976][T15634] tipc: Disabling bearer [ 937.742640][ T23] usb 3-1: config 0 descriptor?? [ 937.915191][ T5814] usbhid 2-1:0.0: can't add hid device: -71 [ 937.921412][ T5814] usbhid: probe of 2-1:0.0 failed with error -71 [ 937.930835][ T5814] usb 2-1: USB disconnect, device number 106 [ 938.170821][ T23] nzxt-smart2 0003:1E71:2009.001D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 938.395079][T14030] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 938.500664][ T5814] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 938.597353][T14030] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 938.615439][T14030] usb 1-1: config 1 has no interface number 0 [ 938.621617][T14030] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 938.648220][T14030] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x7 has invalid maxpacket 1600, setting to 1024 [ 938.664892][T14030] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 938.677352][T14030] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.693451][T14030] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 938.709763][T14030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.726958][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.740987][T14030] usb 1-1: Product: syz [ 938.759652][ T5814] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 938.769204][T14030] usb 1-1: Manufacturer: syz [ 938.773942][T14030] usb 1-1: SerialNumber: syz [ 938.784742][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.806602][T15661] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 938.830948][ T5814] usb 2-1: config 0 descriptor?? [ 938.837577][T15661] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 938.873499][T14030] usb 1-1: Expected 3 endpoints, found: 2 [ 939.090261][T15661] syz.0.2783: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 939.109617][T15661] CPU: 1 PID: 15661 Comm: syz.0.2783 Not tainted syzkaller #0 [ 939.117152][T15661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 939.127301][T15661] Call Trace: [ 939.130629][T15661] [ 939.133607][T15661] dump_stack_lvl+0x18c/0x250 [ 939.138348][T15661] ? show_regs_print_info+0x20/0x20 [ 939.143591][T15661] ? load_image+0x420/0x420 [ 939.148131][T15661] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 939.154588][T15661] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 939.161151][T15661] warn_alloc+0x246/0x340 [ 939.165541][T15661] ? zone_watermark_ok_safe+0x230/0x230 [ 939.171153][T15661] __vmalloc_node_range+0x129/0x1320 [ 939.176483][T15661] ? __mutex_trylock_common+0x160/0x270 [ 939.182065][T15661] ? trace_raw_output_contention_end+0xd0/0xd0 [ 939.188262][T15661] ? rcu_is_watching+0x15/0xb0 [ 939.193076][T15661] ? trace_contention_end+0x39/0xe0 [ 939.198307][T15661] ? __mutex_lock+0x30d/0xc80 [ 939.203025][T15661] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 939.208697][T15661] ? free_vm_area+0x50/0x50 [ 939.213245][T15661] ? dvb_demux_do_ioctl+0x317/0x530 [ 939.218669][T15661] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 939.224172][T15661] ? mutex_lock_nested+0x20/0x20 [ 939.229170][T15661] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 939.235021][T15661] vmalloc+0x79/0x90 [ 939.238961][T15661] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 939.244817][T15661] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 939.250500][T15661] dvb_demux_do_ioctl+0x454/0x530 [ 939.255567][T15661] dvb_usercopy+0x195/0x2b0 [ 939.260110][T15661] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 939.265705][T15661] ? dvb_generic_ioctl+0xb0/0xb0 [ 939.270727][T15661] ? dvb_demux_poll+0x210/0x210 [ 939.275637][T15661] dvb_demux_ioctl+0x29/0x30 [ 939.280283][T15661] __se_sys_ioctl+0xfd/0x170 [ 939.284926][T15661] do_syscall_64+0x55/0xb0 [ 939.289387][T15661] ? clear_bhb_loop+0x40/0x90 [ 939.294088][T15661] ? clear_bhb_loop+0x40/0x90 [ 939.298794][T15661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.304766][T15661] RIP: 0033:0x7f01d619ce59 [ 939.309222][T15661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.328889][T15661] RSP: 002b:00007f01d6fb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 939.337351][T15661] RAX: ffffffffffffffda RBX: 00007f01d6415fa0 RCX: 00007f01d619ce59 [ 939.345363][T15661] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 939.353378][T15661] RBP: 00007f01d6232e6f R08: 0000000000000000 R09: 0000000000000000 [ 939.361383][T15661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.369386][T15661] R13: 00007f01d6416038 R14: 00007f01d6415fa0 R15: 00007ffca0386788 [ 939.377410][T15661] [ 939.426402][T15661] Mem-Info: [ 939.429646][T15661] active_anon:5538 inactive_anon:0 isolated_anon:0 [ 939.429646][T15661] active_file:1277 inactive_file:40302 isolated_file:0 [ 939.429646][T15661] unevictable:768 dirty:43 writeback:0 [ 939.429646][T15661] slab_reclaimable:10397 slab_unreclaimable:93249 [ 939.429646][T15661] mapped:25115 shmem:1368 pagetables:591 [ 939.429646][T15661] sec_pagetables:0 bounce:0 [ 939.429646][T15661] kernel_misc_reclaimable:0 [ 939.429646][T15661] free:1355311 free_pcp:13953 free_cma:0 [ 939.490103][ T23] usb 3-1: USB disconnect, device number 118 [ 939.564014][T15661] Node 0 active_anon:22152kB inactive_anon:0kB active_file:5108kB inactive_file:161004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100460kB dirty:172kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10620kB pagetables:2364kB sec_pagetables:0kB all_unreclaimable? no [ 939.598563][T15661] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 939.641283][T15661] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 939.669433][T15661] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 939.677829][T15661] Node 0 DMA32 free:1519024kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22116kB inactive_anon:0kB active_file:5108kB inactive_file:160180kB unevictable:1536kB writepending:172kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:30532kB local_pcp:13968kB free_cma:0kB [ 939.712992][T15661] lowmem_reserve[]: 0 0 0 0 0 [ 939.721876][T15661] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 939.754029][T15661] lowmem_reserve[]: 0 0 0 0 0 [ 939.759233][T15661] Node 1 Normal free:3886860kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25892kB local_pcp:15244kB free_cma:0kB [ 939.789410][T15661] lowmem_reserve[]: 0 0 0 0 0 [ 939.794211][T15661] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 939.807351][T15661] Node 0 DMA32: 440*4kB (UME) 556*8kB (UME) [ 939.808987][T15651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.824338][T14030] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 939.832256][ T5814] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 939.845314][ T5814] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input55 [ 939.854857][T15651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.875857][T15661] 243*16kB (UME) 490*32kB (UME) 181*64kB (UME) 124*128kB (UME) 33*256kB (UME) 22*512kB (UME) 14*1024kB (UME) 3*2048kB (U) 348*4096kB (UM) = 1518832kB [ 939.909436][T15661] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 939.980528][T15661] Node 1 Normal: 212*4kB (UME) 71*8kB (UME) 8*16kB (UME) 150*32kB (UME) 43*64kB (UME) 9*128kB (UE) 2*256kB (ME) 5*512kB (UM) 5*1024kB (UME) 1*2048kB (E) 944*4096kB (M) = 3887112kB [ 940.007263][T15661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 940.024666][T15661] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 940.045105][T14030] usb 4-1: Using ep0 maxpacket: 32 [ 940.066147][T14030] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 940.082407][T15661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 940.097884][T14030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.119485][T14030] usb 4-1: config 0 descriptor?? [ 940.129022][T15661] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 940.145787][T15661] 42953 total pagecache pages [ 940.150760][T15661] 0 pages in swap cache [ 940.155408][T15661] Free swap = 124680kB [ 940.159710][T15661] Total swap = 124996kB [ 940.164120][T15661] 2097051 pages RAM [ 940.168136][T15661] 0 pages HighMem/MovableOnly [ 940.172978][T15661] 416931 pages reserved [ 940.181610][T15661] 0 pages cma reserved [ 940.210549][ T23] usb 1-1: USB disconnect, device number 96 [ 940.273129][ T27] usb 2-1: USB disconnect, device number 107 [ 940.273147][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 940.387992][T14030] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 940.406793][T14030] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 940.423168][T14030] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 940.433515][T14030] usb 4-1: media controller created [ 940.485696][T14030] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 940.601266][T14030] az6027: usb out operation failed. (-71) [ 940.621957][T14030] az6027: usb out operation failed. (-71) [ 940.651176][T14030] stb0899_attach: Driver disabled by Kconfig [ 940.659693][T14030] az6027: no front-end attached [ 940.659693][T14030] [ 940.675222][T14030] az6027: usb out operation failed. (-71) [ 940.681069][T14030] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 940.703270][T14030] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input56 [ 940.732071][T14030] dvb-usb: schedule remote query interval to 400 msecs. [ 940.758141][T14030] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 940.797617][T14030] usb 4-1: USB disconnect, device number 111 [ 940.972725][T14030] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 942.395326][T14030] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 942.586766][T14030] usb 4-1: Using ep0 maxpacket: 32 [ 942.595089][T14030] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 942.628762][T14030] usb 4-1: config 0 has no interface number 0 [ 942.636434][T14030] usb 4-1: config 0 interface 12 has no altsetting 0 [ 942.677599][T14030] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 942.688177][T14030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.709566][T14030] usb 4-1: Product: syz [ 942.714295][T14030] usb 4-1: Manufacturer: syz [ 942.721342][T14030] usb 4-1: SerialNumber: syz [ 942.737771][T14030] usb 4-1: config 0 descriptor?? [ 943.105118][T11230] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 943.316715][T11230] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 943.335974][T11230] usb 1-1: config 1 has no interface number 0 [ 943.342213][T11230] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 943.370002][T11230] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x7 has invalid maxpacket 1600, setting to 1024 [ 943.383029][T11230] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 943.393635][T11230] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.409004][T11230] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 943.428810][T11230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.445355][T11230] usb 1-1: Product: syz [ 943.455389][T11230] usb 1-1: Manufacturer: syz [ 943.470255][T11230] usb 1-1: SerialNumber: syz [ 943.489968][T15728] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 943.505254][T15728] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 943.525571][T11230] usb 1-1: Expected 3 endpoints, found: 2 [ 943.772353][ T27] usb 1-1: USB disconnect, device number 97 [ 943.988636][T11785] Bluetooth: hci2: command 0x0406 tx timeout [ 945.084711][T14030] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 945.092535][T14030] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 945.105298][T14030] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 945.113007][T14030] f81534: probe of 4-1:0.12 failed with error -71 [ 945.169852][T14030] usb 4-1: USB disconnect, device number 112 [ 946.278928][T15766] tipc: Enabled bearer , priority 0 [ 946.298575][T15766] syzkaller0: entered promiscuous mode [ 946.307303][T15766] syzkaller0: entered allmulticast mode [ 946.341312][T15766] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 946.485020][ T27] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 946.676346][T11230] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 946.698182][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 946.725524][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.740405][ T27] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 946.754285][ T27] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 946.769840][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.778328][ T27] usb 1-1: Product: syz [ 946.783086][ T27] usb 1-1: Manufacturer: syz [ 946.787990][ T27] usb 1-1: SerialNumber: syz [ 946.795537][ T27] usb 1-1: config 0 descriptor?? [ 946.892351][T11230] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 946.901916][T11230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.911136][T11230] usb 4-1: Product: syz [ 946.915868][T11230] usb 4-1: Manufacturer: syz [ 946.920553][T11230] usb 4-1: SerialNumber: syz [ 946.930255][T11230] usb 4-1: config 0 descriptor?? [ 946.975237][T14030] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 947.152967][T15766] tipc: Resetting bearer [ 947.168380][T14030] usb 2-1: Using ep0 maxpacket: 32 [ 947.182596][T14030] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 947.195699][T11230] usb 4-1: Firmware version (0.0) predates our first public release. [ 947.205195][T14030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.213331][T11230] usb 4-1: Please update to version 0.2 or newer [ 947.220099][T14030] usb 2-1: Product: syz [ 947.226648][T15765] tipc: Resetting bearer [ 947.231538][T14030] usb 2-1: Manufacturer: syz [ 947.239107][T14030] usb 2-1: SerialNumber: syz [ 947.255205][T14030] usb 2-1: config 0 descriptor?? [ 947.268976][T14030] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 947.276967][T14030] dvb-usb: bulk message failed: -22 (4/0) [ 947.282738][T14030] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 947.294510][T14030] dvb-usb: bulk message failed: -22 (5/0) [ 947.303186][T14030] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 947.305198][ T5867] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 947.329649][T14030] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 947.366136][T15765] tipc: Disabling bearer [ 947.373563][T14030] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 947.383872][T14030] usb 2-1: media controller created [ 947.422305][T14030] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 947.476580][T15768] ttusb2: i2c wr len=58 too high [ 947.502666][T14030] usb 2-1: selecting invalid altsetting 3 [ 947.511763][T11230] usb 4-1: USB disconnect, device number 113 [ 947.524498][T14030] ttusb2: set interface to alts=3 failed [ 947.564972][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 947.576923][ T5867] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 947.612205][ T5867] usb 3-1: config 0 has no interface number 0 [ 947.625008][ T5867] usb 3-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 947.643590][T14030] DVB: Unable to find symbol tda10086_attach() [ 947.654246][ T5867] usb 3-1: config 0 interface 12 has no altsetting 0 [ 947.663583][T14030] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 947.671645][ T5867] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 947.671676][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.671699][ T5867] usb 3-1: Product: syz [ 947.671715][ T5867] usb 3-1: Manufacturer: syz [ 947.671732][ T5867] usb 3-1: SerialNumber: syz [ 947.707385][ T5867] usb 3-1: config 0 descriptor?? [ 947.729109][T14030] dvb-usb: bulk message failed: -22 (4/0) [ 947.737842][ T5867] f81534 3-1:0.12: required endpoints missing [ 947.738367][T14030] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 947.755161][T14030] dvb-usb: bulk message failed: -22 (5/0) [ 947.760948][T14030] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 947.771994][T14030] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 947.825610][T14030] usb 2-1: USB disconnect, device number 108 [ 947.885750][T14030] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 948.606460][T14030] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 949.355742][ T7016] usb 1-1: USB disconnect, device number 98 [ 949.568226][T14030] usb 2-1: Using ep0 maxpacket: 32 [ 949.582278][T14030] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 949.593665][T14030] usb 2-1: config 0 has no interface number 0 [ 949.601621][T14030] usb 2-1: config 0 interface 12 has no altsetting 0 [ 949.615637][T14030] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 949.633480][T14030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.642410][T14030] usb 2-1: Product: syz [ 949.654991][T14030] usb 2-1: Manufacturer: syz [ 949.659659][T14030] usb 2-1: SerialNumber: syz [ 949.685742][T14030] usb 2-1: config 0 descriptor?? [ 950.415554][T11230] usb 3-1: USB disconnect, device number 119 [ 950.896651][T15826] fuse: Unknown parameter 'grou00000000000000000000' [ 950.935119][T11230] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 951.062914][T15828] tipc: Enabled bearer , priority 0 [ 951.077589][T15828] syzkaller0: entered promiscuous mode [ 951.085466][T15828] syzkaller0: entered allmulticast mode [ 951.095498][T15828] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 951.147495][T11230] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 951.161093][T11230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.172925][T11230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.186113][T11230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 951.202519][T11230] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 951.212423][T11230] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 951.222768][T11230] usb 3-1: Manufacturer: syz [ 951.234775][T11230] usb 3-1: config 0 descriptor?? [ 951.395099][T14690] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 951.607777][T14690] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 951.630504][T14690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.649030][T14690] usb 4-1: Product: syz [ 951.662748][T11230] appleir 0003:05AC:8243.001E: unknown main item tag 0x0 [ 951.670219][T14690] usb 4-1: Manufacturer: syz [ 951.674848][T14690] usb 4-1: SerialNumber: syz [ 951.692705][T14030] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 951.705911][T11230] appleir 0003:05AC:8243.001E: No inputs registered, leaving [ 951.723793][T14030] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 951.732653][T14690] usb 4-1: config 0 descriptor?? [ 951.741085][T14030] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 951.755202][T14030] f81534: probe of 2-1:0.12 failed with error -71 [ 951.763152][T11230] appleir 0003:05AC:8243.001E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 951.785510][T14030] usb 2-1: USB disconnect, device number 109 [ 951.953777][T15828] tipc: Resetting bearer [ 951.997956][T14690] usb 4-1: Firmware version (0.0) predates our first public release. [ 952.026305][T15827] tipc: Resetting bearer [ 952.035366][T14690] usb 4-1: Please update to version 0.2 or newer [ 952.055601][T15830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 952.118304][T15827] tipc: Disabling bearer [ 952.231973][T14690] usb 4-1: USB disconnect, device number 114 [ 952.886060][ T23] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 953.808666][T11230] usb 3-1: USB disconnect, device number 120 [ 953.986614][ T23] usb 2-1: config index 0 descriptor too short (expected 54, got 36) [ 953.994788][ T23] usb 2-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 954.011023][ T23] usb 2-1: config 0 has no interfaces? [ 954.017067][ T23] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 954.030558][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.046338][ T23] usb 2-1: config 0 descriptor?? [ 954.280406][ T23] usb 2-1: USB disconnect, device number 110 [ 954.289162][T11230] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 954.334605][T15873] fuse: Unknown parameter 'group_i00000000000000000000' [ 954.475225][T11230] usb 3-1: Using ep0 maxpacket: 32 [ 954.491257][T11230] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 954.500509][T11230] usb 3-1: config 0 has no interface number 0 [ 954.507312][T11230] usb 3-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 954.521234][T11230] usb 3-1: config 0 interface 12 has no altsetting 0 [ 954.540579][T11230] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 954.646607][T11230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.824610][T11230] usb 3-1: Product: syz [ 954.913263][T11230] usb 3-1: Manufacturer: syz [ 954.932695][T11230] usb 3-1: SerialNumber: syz [ 955.031887][T11230] usb 3-1: config 0 descriptor?? [ 955.093994][T11230] f81534 3-1:0.12: required endpoints missing [ 955.247226][T15884] tipc: Enabled bearer , priority 0 [ 955.255034][T15884] syzkaller0: entered promiscuous mode [ 955.260720][T15884] syzkaller0: entered allmulticast mode [ 955.269711][T15884] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 955.605132][T11230] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 955.606254][ T23] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 955.820416][T11230] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 955.831413][T11230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.836119][ T23] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 955.842720][T11230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.861298][T11230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 955.875953][T11230] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 955.883525][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.895633][T11230] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 955.903888][T11230] usb 2-1: Manufacturer: syz [ 955.908918][ T23] usb 1-1: Product: syz [ 955.914447][ T23] usb 1-1: Manufacturer: syz [ 955.929404][ T23] usb 1-1: SerialNumber: syz [ 955.940243][T11230] usb 2-1: config 0 descriptor?? [ 955.953772][ T23] usb 1-1: config 0 descriptor?? [ 956.182691][T15884] tipc: Resetting bearer [ 956.202737][ T23] usb 1-1: Firmware version (0.0) predates our first public release. [ 956.222744][T15879] tipc: Resetting bearer [ 956.232445][ T23] usb 1-1: Please update to version 0.2 or newer [ 956.299303][T15879] tipc: Disabling bearer [ 956.368325][T11230] appleir 0003:05AC:8243.001F: unknown main item tag 0x0 [ 956.386020][T11230] appleir 0003:05AC:8243.001F: No inputs registered, leaving [ 956.399786][T11230] appleir 0003:05AC:8243.001F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 956.412433][ T23] usb 1-1: USB disconnect, device number 99 [ 956.714212][T15898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.583030][T14030] usb 3-1: USB disconnect, device number 121 [ 957.740085][T15906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2836'. [ 957.781964][T15906] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2836'. [ 959.145410][ T27] usb 2-1: USB disconnect, device number 111 [ 959.408505][T15928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2842'. [ 959.735210][ T27] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 959.949776][ T27] usb 1-1: config index 0 descriptor too short (expected 54, got 36) [ 959.984951][ T27] usb 1-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 960.002196][ T27] usb 1-1: config 0 has no interfaces? [ 960.007877][ T27] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 960.021741][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.042486][ T27] usb 1-1: config 0 descriptor?? [ 960.085026][T14030] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 960.277852][ T27] usb 1-1: USB disconnect, device number 100 [ 960.345222][T14690] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 960.525440][T14690] usb 3-1: Using ep0 maxpacket: 32 [ 960.533668][T14690] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 960.542672][T14690] usb 3-1: config 0 has no interface number 0 [ 960.549599][T14690] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 960.560180][T14690] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 960.570659][T14690] usb 3-1: config 0 interface 12 has no altsetting 0 [ 960.581509][T14690] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 960.598902][T14690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.608376][T14690] usb 3-1: Product: syz [ 960.612661][T14690] usb 3-1: Manufacturer: syz [ 960.625000][T14690] usb 3-1: SerialNumber: syz [ 960.633218][T14690] usb 3-1: config 0 descriptor?? [ 960.659875][T14690] f81534 3-1:0.12: unsupported endpoint max packet size [ 961.545125][T14690] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 961.845058][T14690] usb 1-1: Using ep0 maxpacket: 8 [ 961.852548][T14690] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.863636][T14690] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 962.659972][T14690] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 962.670177][T14690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 962.678438][T14690] usb 1-1: Product: syz [ 962.682644][T14690] usb 1-1: Manufacturer: syz [ 962.687433][T14690] usb 1-1: SerialNumber: syz [ 962.694704][T14690] usb 1-1: config 0 descriptor?? [ 962.785060][T14030] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 962.967190][T14030] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 962.978404][T14030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.989701][T14030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.999900][T14030] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 963.015321][T14030] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 963.024597][T14030] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 963.033061][T14030] usb 4-1: Manufacturer: syz [ 963.041443][T14030] usb 4-1: config 0 descriptor?? [ 963.102763][T15962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2853'. [ 963.123580][T15962] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2853'. [ 963.134750][ T27] usb 3-1: USB disconnect, device number 122 [ 963.476401][T14030] appleir 0003:05AC:8243.0020: unknown main item tag 0x0 [ 963.500097][T14030] appleir 0003:05AC:8243.0020: No inputs registered, leaving [ 963.530571][T14030] appleir 0003:05AC:8243.0020: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 963.625281][ T27] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 963.830186][T15968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 963.835173][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 963.850316][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.861768][ T27] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 963.872574][ T27] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 963.900537][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.946671][ T27] usb 3-1: config 0 descriptor?? [ 964.204099][T14030] usb 1-1: USB disconnect, device number 101 [ 964.425121][ T27] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 964.629202][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 964.636526][ T27] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.652166][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 964.658985][ T27] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 964.669541][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.675642][T14030] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 964.688780][ T27] usb 2-1: config 0 descriptor?? [ 965.121018][ T27] nzxt-smart2 0003:1E71:2009.0021: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 965.676869][T14690] usb 4-1: USB disconnect, device number 116 [ 966.481326][T15971] input: syz1 as /devices/virtual/input/input57 [ 966.587941][T14030] usb 3-1: USB disconnect, device number 123 [ 966.764533][ T23] usb 2-1: USB disconnect, device number 112 [ 966.874396][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 966.887518][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 966.898148][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 966.914363][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 966.954152][T15995] ceph: No mds server is up or the cluster is laggy [ 967.235595][ T27] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 967.251435][T15999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2862'. [ 967.447721][ T27] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 967.460968][ T27] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 967.505063][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 967.514158][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 967.548750][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 967.601346][ T27] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 967.613905][ T27] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 967.632344][ T27] usb 4-1: Product: syz [ 967.641695][ T27] usb 4-1: Manufacturer: syz [ 967.657774][ T27] cdc_wdm 4-1:1.0: skipping garbage [ 967.663757][ T27] cdc_wdm 4-1:1.0: skipping garbage [ 967.696035][ T27] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 967.702129][ T27] cdc_wdm 4-1:1.0: Unknown control protocol [ 968.632841][T14030] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 971.647015][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 971.653710][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 971.660037][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 971.666680][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 971.673483][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 971.680129][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 971.686490][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 971.693138][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 971.699475][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 971.706122][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 971.712467][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 971.719200][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 971.725756][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 971.732421][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 971.738753][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 971.745406][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 971.751859][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 971.758511][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 971.764834][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 971.771486][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 971.787831][ T27] usb 4-1: USB disconnect, device number 117 [ 971.787893][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 973.615216][T14030] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 973.848038][T14030] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 973.863686][T14030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.875787][T14030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.886723][T14030] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 973.906475][T14030] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 973.918256][T14030] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 973.927160][T14030] usb 3-1: Manufacturer: syz [ 973.938263][T14030] usb 3-1: config 0 descriptor?? [ 974.025188][ T23] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 974.085090][T11230] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 974.205037][ T23] usb 1-1: device descriptor read/64, error -71 [ 974.287690][T11230] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 974.297511][T11230] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 974.307926][T11230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 974.317653][T11230] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 974.332359][T11230] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 974.347891][T11230] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 974.358700][T11230] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 974.369807][T14030] appleir 0003:05AC:8243.0022: unknown main item tag 0x0 [ 974.377006][T11230] usb 4-1: Product: syz [ 974.381228][T11230] usb 4-1: Manufacturer: syz [ 974.386935][T14030] appleir 0003:05AC:8243.0022: No inputs registered, leaving [ 974.405787][T14030] appleir 0003:05AC:8243.0022: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 974.418331][T11230] cdc_wdm 4-1:1.0: skipping garbage [ 974.423604][T11230] cdc_wdm 4-1:1.0: skipping garbage [ 974.434348][T11230] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 974.443735][T11230] cdc_wdm 4-1:1.0: Unknown control protocol [ 974.480448][ T23] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 974.545060][ T27] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 974.635081][ T23] usb 1-1: device descriptor read/64, error -71 [ 974.685390][T16068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 974.759086][ T23] usb usb1-port1: attempt power cycle [ 975.165109][ T23] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 975.195602][ T23] usb 1-1: device descriptor read/8, error -71 [ 975.475046][ T23] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 975.505773][ T23] usb 1-1: device descriptor read/8, error -71 [ 975.626991][ T23] usb usb1-port1: unable to enumerate USB device [ 976.748916][T14030] usb 4-1: USB disconnect, device number 118 [ 976.775078][ T23] usb 3-1: reset high-speed USB device number 124 using dummy_hcd [ 976.802178][ T23] usb 3-1: device reset changed ep0 maxpacket size! [ 976.810412][ T7016] usb 3-1: USB disconnect, device number 124 [ 976.951204][T16083] tipc: Enabled bearer , priority 0 [ 976.966103][T16083] syzkaller0: entered promiscuous mode [ 976.981938][T16083] syzkaller0: entered allmulticast mode [ 977.005218][ T7016] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 977.024514][T16083] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 977.205114][ T7016] usb 3-1: Using ep0 maxpacket: 16 [ 977.220685][ T7016] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.248395][ T7016] usb 3-1: config 0 interface 0 has no altsetting 0 [ 977.270219][ T7016] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 977.303410][ T7016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.335039][T14065] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 977.362160][ T7016] usb 3-1: config 0 descriptor?? [ 977.540089][T14065] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 977.557210][T14065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.572468][T14065] usb 4-1: Product: syz [ 977.584327][T14065] usb 4-1: Manufacturer: syz [ 977.593673][T14065] usb 4-1: SerialNumber: syz [ 977.609291][T14065] usb 4-1: config 0 descriptor?? [ 977.801061][ T7016] nzxt-smart2 0003:1E71:2009.0023: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 977.844522][T16083] tipc: Resetting bearer [ 977.867999][T14065] usb 4-1: Firmware version (0.0) predates our first public release. [ 977.907637][T14065] usb 4-1: Please update to version 0.2 or newer [ 977.942015][T16082] tipc: Resetting bearer [ 978.072786][T16082] tipc: Disabling bearer [ 978.204746][T14065] usb 4-1: USB disconnect, device number 119 [ 978.243422][T16076] input: syz1 as /devices/virtual/input/input58 [ 978.423959][ T7016] usb 3-1: USB disconnect, device number 125 [ 978.875037][ T23] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 979.035113][ T7016] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 979.115080][ T5867] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 979.195091][ T27] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 979.225015][ T7016] usb 3-1: Using ep0 maxpacket: 16 [ 979.232177][ T7016] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.243164][ T7016] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 979.252344][ T7016] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 979.261571][ T7016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.272484][ T7016] usb 3-1: config 0 descriptor?? [ 979.295028][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 979.301941][ T5867] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.312956][ T5867] usb 4-1: config 0 interface 0 has no altsetting 0 [ 979.319752][ T5867] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 979.329332][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.339860][ T5867] usb 4-1: config 0 descriptor?? [ 979.355098][ T27] usb 2-1: device descriptor read/64, error -71 [ 979.625025][ T27] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 979.775228][ T27] usb 2-1: device descriptor read/64, error -71 [ 979.896400][ T27] usb usb2-port1: attempt power cycle [ 979.958635][ T5867] usbhid 4-1:0.0: can't add hid device: -71 [ 979.970312][ T5867] usbhid: probe of 4-1:0.0 failed with error -71 [ 979.983326][ T5867] usb 4-1: USB disconnect, device number 120 [ 980.306283][ T27] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 980.346388][ T27] usb 2-1: device descriptor read/8, error -71 [ 980.615191][ T27] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 980.676464][ T27] usb 2-1: device descriptor read/8, error -71 [ 980.808169][ T27] usb usb2-port1: unable to enumerate USB device [ 980.915342][ T23] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 981.131291][ T27] libceph: connect (1)[c::]:6789 error -101 [ 981.139676][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 981.178669][T16119] ceph: No mds server is up or the cluster is laggy [ 981.660240][T14065] usb 3-1: USB disconnect, device number 126 [ 981.765011][ T23] usb 4-1: device descriptor read/64, error -71 [ 982.046047][T16135] loop2: detected capacity change from 0 to 7 [ 982.054721][T16135] Dev loop2: unable to read RDB block 7 [ 982.055238][ T23] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 982.075073][T16135] loop2: unable to read partition table [ 982.081795][T16135] loop2: partition table beyond EOD, truncated [ 982.093350][T16135] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 982.255117][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 982.266091][ T23] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.277240][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 982.291140][ T23] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 982.307621][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.344673][ T23] usb 4-1: config 0 descriptor?? [ 982.379208][T16137] tipc: Enabled bearer , priority 0 [ 982.388951][T16137] syzkaller0: entered promiscuous mode [ 982.394502][T16137] syzkaller0: entered allmulticast mode [ 982.460488][T16137] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 982.791373][ T23] nzxt-smart2 0003:1E71:2009.0024: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 982.874992][ T27] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 982.895078][T11230] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 983.085484][ T27] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 983.101323][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.110953][ T27] usb 1-1: Product: syz [ 983.114755][T11230] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 983.117240][ T27] usb 1-1: Manufacturer: syz [ 983.123844][T11230] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 983.123869][T11230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 983.123926][T11230] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 983.133355][ T27] usb 1-1: SerialNumber: syz [ 983.171628][ T27] usb 1-1: config 0 descriptor?? [ 983.191121][T11230] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 983.218367][T16127] input: syz1 as /devices/virtual/input/input59 [ 983.227693][T11230] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 983.227737][T11230] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 983.227760][T11230] usb 2-1: Product: syz [ 983.227777][T11230] usb 2-1: Manufacturer: syz [ 983.280448][T11230] cdc_wdm 2-1:1.0: skipping garbage [ 983.296370][T11230] cdc_wdm 2-1:1.0: skipping garbage [ 983.310864][T11230] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 983.334179][T11230] cdc_wdm 2-1:1.0: Unknown control protocol [ 983.409534][T16137] tipc: Resetting bearer [ 983.427937][ T27] usb 1-1: Firmware version (0.0) predates our first public release. [ 983.443943][T16136] tipc: Resetting bearer [ 983.453563][ T27] usb 1-1: Please update to version 0.2 or newer [ 983.509791][T16136] tipc: Disabling bearer [ 983.522165][ T23] usb 4-1: USB disconnect, device number 122 [ 983.595260][ T7016] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 983.613172][ T27] usb 1-1: USB disconnect, device number 109 [ 983.795035][ T7016] usb 3-1: Using ep0 maxpacket: 16 [ 983.806616][ T7016] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.819232][ T7016] usb 3-1: config 0 interface 0 has no altsetting 0 [ 983.826274][ T7016] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 983.835658][ T7016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.846926][ T7016] usb 3-1: config 0 descriptor?? [ 984.469607][ T7016] usbhid 3-1:0.0: can't add hid device: -71 [ 984.476048][ T7016] usbhid: probe of 3-1:0.0 failed with error -71 [ 984.488183][ T7016] usb 3-1: USB disconnect, device number 127 [ 985.255723][T14065] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 985.445108][T14030] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 985.610102][T14030] usb 1-1: device descriptor read/64, error -71 [ 985.908901][T14030] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 986.078624][T14030] usb 1-1: device descriptor read/64, error -71 [ 986.206160][T14030] usb usb1-port1: attempt power cycle [ 986.616981][T14030] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 986.662410][T14030] usb 1-1: device descriptor read/8, error -71 [ 986.951501][T14030] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 987.011789][T14030] usb 1-1: device descriptor read/8, error -71 [ 987.139501][T14030] usb usb1-port1: unable to enumerate USB device [ 987.935497][ C1] wdm_int_callback: 50 callbacks suppressed [ 987.935523][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 987.948121][ C1] wdm_int_callback: 50 callbacks suppressed [ 987.948142][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 987.961207][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 987.967868][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 987.974377][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 987.981024][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 987.987500][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 987.994152][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 988.000502][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 988.007151][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 988.013476][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 988.020125][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 988.026462][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 988.033097][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 988.039431][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 988.046083][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 988.053030][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 988.059703][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 988.066116][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 988.072752][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 988.079154][ T23] usb 2-1: USB disconnect, device number 118 [ 988.085261][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 989.517029][T14030] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 989.597106][T16193] loop2: detected capacity change from 0 to 7 [ 989.627275][T16193] Dev loop2: unable to read RDB block 7 [ 989.632914][T16193] loop2: AHDI p2 p3 [ 989.677512][T16193] loop2: partition table partially beyond EOD, truncated [ 989.707554][T16193] loop2: p3 start 335544320 is beyond EOD, truncated [ 989.775208][T14030] usb 2-1: Using ep0 maxpacket: 16 [ 989.783412][T14030] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.824969][T14030] usb 2-1: config 0 interface 0 has no altsetting 0 [ 989.831764][T14030] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 989.898664][T14030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.930549][T14030] usb 2-1: config 0 descriptor?? [ 990.425246][ T27] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 990.564664][T14030] usbhid 2-1:0.0: can't add hid device: -71 [ 990.576001][T14030] usbhid: probe of 2-1:0.0 failed with error -71 [ 990.590470][T14030] usb 2-1: USB disconnect, device number 119 [ 990.626899][ T27] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 990.636154][ T27] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 990.652660][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 990.662913][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 990.680019][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 990.694176][ T27] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 990.710555][ T27] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 990.720044][ T27] usb 4-1: Product: syz [ 990.724272][ T27] usb 4-1: Manufacturer: syz [ 990.735643][T14065] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 990.744470][ T27] cdc_wdm 4-1:1.0: skipping garbage [ 990.754128][ T27] cdc_wdm 4-1:1.0: skipping garbage [ 990.766866][ T27] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 990.772823][ T27] cdc_wdm 4-1:1.0: Unknown control protocol [ 991.445054][ T27] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 991.635096][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 991.644458][ T27] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 991.681056][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.719678][ T27] usb 2-1: config 0 descriptor?? [ 991.980826][ T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 992.002743][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 992.033081][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 992.057213][ T27] usb 2-1: media controller created [ 992.166225][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 992.251017][ T27] az6027: usb out operation failed. (-71) [ 992.265705][ T27] az6027: usb out operation failed. (-71) [ 992.274992][ T27] stb0899_attach: Driver disabled by Kconfig [ 992.283607][ T27] az6027: no front-end attached [ 992.283607][ T27] [ 992.300522][ T27] az6027: usb out operation failed. (-71) [ 992.344709][ T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 992.366466][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input60 [ 992.406840][ T27] dvb-usb: schedule remote query interval to 400 msecs. [ 992.445240][ T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 992.482449][ T27] usb 2-1: USB disconnect, device number 120 [ 992.580390][ T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 992.867530][ T7016] usb 4-1: USB disconnect, device number 124 [ 992.867609][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 993.100567][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.107123][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.366757][T14030] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 993.637513][T14030] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 993.654447][T14030] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 993.677730][T14030] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 993.692358][T14030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.825018][ T7016] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 993.945713][T14030] usb 1-1: GET_CAPABILITIES returned 0 [ 993.951291][T14030] usbtmc 1-1:16.0: can't read capabilities [ 994.025124][ T7016] usb 4-1: Using ep0 maxpacket: 16 [ 994.054302][ T7016] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 994.080475][ T7016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.098524][ T7016] usb 4-1: config 0 descriptor?? [ 994.132213][ T7016] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 994.615195][T14030] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 994.805675][T14030] usb 3-1: Using ep0 maxpacket: 16 [ 994.817704][T14030] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.853765][T14030] usb 3-1: config 0 interface 0 has no altsetting 0 [ 994.861647][T14030] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 994.876253][T14030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.891071][T14030] usb 3-1: config 0 descriptor?? [ 995.515157][T14030] usbhid 3-1:0.0: can't add hid device: -71 [ 995.521456][T14030] usbhid: probe of 3-1:0.0 failed with error -71 [ 995.531763][T14030] usb 3-1: USB disconnect, device number 3 [ 996.101422][T14030] usb 1-1: USB disconnect, device number 114 [ 996.585960][T11230] usb 4-1: USB disconnect, device number 125 [ 996.647096][T14030] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 996.836991][T14030] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 996.851701][T14030] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 996.864259][T14030] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 996.886699][T14030] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 996.908000][T14030] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 996.937755][T14030] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 996.952610][T14030] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 996.981371][T14030] usb 1-1: Product: syz [ 996.994542][T14030] usb 1-1: Manufacturer: syz [ 997.019292][T14030] cdc_wdm 1-1:1.0: skipping garbage [ 997.029193][T14030] cdc_wdm 1-1:1.0: skipping garbage [ 997.047838][T14030] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 997.054170][T14030] cdc_wdm 1-1:1.0: Unknown control protocol [ 999.252221][ T7016] usb 1-1: USB disconnect, device number 115 [ 999.751786][ T7016] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 999.970024][ T7016] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 999.994994][ T7016] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1000.027918][ T7016] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1000.046223][ T7016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.085218][ T23] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1000.285085][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 1000.292463][ T7016] usb 1-1: GET_CAPABILITIES returned 31 [ 1000.310872][ T23] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1000.325070][ T7016] usbtmc 1-1:16.0: can't read capabilities [ 1000.335580][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.357047][ T23] usb 4-1: config 0 descriptor?? [ 1000.370658][ T23] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1000.512713][ T7016] usb 1-1: USB disconnect, device number 116 [ 1002.475192][T14030] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1002.655161][T14030] usb 2-1: Using ep0 maxpacket: 16 [ 1002.677440][T14030] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.690315][T14030] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1002.697596][T14030] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1002.709396][T14030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.727978][T14030] usb 2-1: config 0 descriptor?? [ 1002.945034][ T23] usb 4-1: USB disconnect, device number 126 [ 1003.170960][T14030] nzxt-smart2 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1003.495035][ T23] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1003.635170][T16332] input: syz1 as /devices/virtual/input/input61 [ 1003.691836][ T23] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1003.742472][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.783982][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.808211][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1003.859010][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1003.885608][ T23] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1003.924519][ T23] usb 4-1: Manufacturer: syz [ 1003.964548][ T23] usb 4-1: config 0 descriptor?? [ 1004.144807][T14690] usb 2-1: USB disconnect, device number 121 [ 1004.420970][ T23] appleir 0003:05AC:8243.0026: unknown main item tag 0x0 [ 1004.435961][ T23] appleir 0003:05AC:8243.0026: No inputs registered, leaving [ 1004.453565][ T23] appleir 0003:05AC:8243.0026: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1005.467346][ T23] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1005.549250][ T7016] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1005.662611][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1005.672718][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1005.686313][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1005.695794][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.730705][T16362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1005.755359][ T7016] usb 1-1: Using ep0 maxpacket: 32 [ 1005.763984][ T7016] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1005.773304][ T7016] usb 1-1: config 0 has no interface number 0 [ 1005.780156][ T7016] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1005.791817][ T7016] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1005.801697][ T7016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.810197][ T7016] usb 1-1: Product: syz [ 1005.815571][ T7016] usb 1-1: Manufacturer: syz [ 1005.820310][ T7016] usb 1-1: SerialNumber: syz [ 1005.840724][ T7016] usb 1-1: config 0 descriptor?? [ 1005.990731][ T23] usb 3-1: GET_CAPABILITIES returned 31 [ 1006.008009][ T23] usbtmc 3-1:16.0: can't read capabilities [ 1006.215694][T14690] usb 3-1: USB disconnect, device number 4 [ 1006.865262][T14690] usb 4-1: USB disconnect, device number 127 [ 1007.155775][ T5867] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1007.360282][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.373095][ T5867] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1007.391015][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.410143][ T5867] usb 3-1: config 0 descriptor?? [ 1007.504242][ T7016] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1007.518951][ T7016] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1007.526633][ T7016] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1007.534362][ T7016] f81534: probe of 1-1:0.12 failed with error -71 [ 1007.554442][ T7016] usb 1-1: USB disconnect, device number 117 [ 1007.642551][ T5867] usbhid 3-1:0.0: can't add hid device: -71 [ 1007.652126][ T5867] usbhid: probe of 3-1:0.0 failed with error -71 [ 1007.670472][ T5867] usb 3-1: USB disconnect, device number 5 [ 1008.247997][ T5867] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1008.478517][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.494977][ T5867] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1008.504169][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.532450][T16367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2965'. [ 1008.550839][ T5867] usb 3-1: config 0 descriptor?? [ 1008.742447][T16371] fuse: Invalid rootmode [ 1008.749309][T16370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2966'. [ 1008.766583][T16370] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2966'. [ 1009.405695][ T5867] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1009.413545][T16365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.430065][ T5867] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input62 [ 1009.450284][T16365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.515689][ T27] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1009.553302][ C1] ================================================================================ [ 1009.562688][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 1009.571348][ C1] index 261 is out of range for type 'const int[34]' [ 1009.578055][ C1] CPU: 1 PID: 6181 Comm: kworker/u4:25 Not tainted syzkaller #0 [ 1009.585702][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1009.595772][ C1] Workqueue: bat_events batadv_nc_worker [ 1009.601523][ C1] Call Trace: [ 1009.604811][ C1] [ 1009.607697][ C1] dump_stack_lvl+0x18c/0x250 [ 1009.612394][ C1] ? show_regs_print_info+0x20/0x20 [ 1009.617622][ C1] ? load_image+0x420/0x420 [ 1009.622167][ C1] ubsan_epilogue+0xa/0x30 [ 1009.626619][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 1009.632414][ C1] aiptek_irq+0x1eb8/0x2920 [ 1009.636952][ C1] ? kcov_remote_start+0x8a/0x7e0 [ 1009.642016][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 1009.647784][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 1009.653196][ C1] dummy_timer+0xa40/0x3420 [ 1009.657819][ C1] ? dummy_free_streams+0x520/0x520 [ 1009.663038][ C1] ? dummy_free_streams+0x520/0x520 [ 1009.668258][ C1] __hrtimer_run_queues+0x525/0xc10 [ 1009.673514][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1009.678639][ C1] ? read_tsc+0x9/0x20 [ 1009.682758][ C1] hrtimer_run_softirq+0x177/0x290 [ 1009.687899][ C1] handle_softirqs+0x27d/0x820 [ 1009.692687][ C1] ? read_tsc+0x9/0x20 [ 1009.696783][ C1] ? ktime_get+0x24b/0x280 [ 1009.701251][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1009.706034][ C1] ? do_softirq+0x1a0/0x1a0 [ 1009.710554][ C1] __irq_exit_rcu+0xd3/0x190 [ 1009.715165][ C1] ? irq_exit_rcu+0x20/0x20 [ 1009.719701][ C1] irq_exit_rcu+0x9/0x20 [ 1009.723953][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1009.729617][ C1] [ 1009.732554][ C1] [ 1009.735517][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1009.741543][ C1] RIP: 0010:__local_bh_enable_ip+0x142/0x1c0 [ 1009.747543][ C1] Code: 8a e8 32 a2 31 09 65 66 8b 05 2a 6c b1 7e 66 85 c0 75 54 bf 01 00 00 00 e8 2b 1d 0a 00 e8 c6 07 3b 00 fb 65 8b 05 f6 6b b1 7e <85> c0 75 05 e8 c5 50 ae ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 1009.767193][ C1] RSP: 0018:ffffc9000c1dfa40 EFLAGS: 00000286 [ 1009.773285][ C1] RAX: 0000000080000000 RBX: 0000000000000201 RCX: d59246a6aa1a2b00 [ 1009.781272][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1c7be0 [ 1009.789281][ C1] RBP: ffffc9000c1dfac0 R08: ffffffff911bc5df R09: 1ffffffff22378bb [ 1009.797300][ C1] R10: dffffc0000000000 R11: fffffbfff22378bc R12: ffffffff8a4bb200 [ 1009.805283][ C1] R13: ffff888018eb4fd0 R14: dffffc0000000000 R15: 1ffff9200183bf48 [ 1009.813269][ C1] ? batadv_nc_purge_paths+0x300/0x3a0 [ 1009.818767][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1009.823638][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1009.828859][ C1] ? batadv_nc_purge_paths+0x300/0x3a0 [ 1009.834333][ C1] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 1009.840858][ C1] batadv_nc_purge_paths+0x300/0x3a0 [ 1009.846180][ C1] batadv_nc_worker+0x363/0x600 [ 1009.851056][ C1] ? process_scheduled_works+0x975/0x1600 [ 1009.856802][ C1] process_scheduled_works+0xa60/0x1600 [ 1009.862385][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1009.867867][ C1] ? assign_work+0x3cc/0x5d0 [ 1009.872494][ C1] worker_thread+0xa5e/0xfe0 [ 1009.877119][ C1] kthread+0x2fa/0x390 [ 1009.881196][ C1] ? pr_cont_work+0x550/0x550 [ 1009.885888][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1009.890485][ C1] ret_from_fork+0x48/0x80 [ 1009.894930][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1009.899555][ C1] ret_from_fork_asm+0x11/0x20 [ 1009.904373][ C1] [ 1009.907404][ C1] ================================================================================ [ 1009.916696][ C1] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1009.923895][ C1] CPU: 1 PID: 6181 Comm: kworker/u4:25 Not tainted syzkaller #0 [ 1009.931539][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1009.941618][ C1] Workqueue: bat_events batadv_nc_worker [ 1009.947314][ C1] Call Trace: [ 1009.950615][ C1] [ 1009.953471][ C1] dump_stack_lvl+0x18c/0x250 [ 1009.958193][ C1] ? show_regs_print_info+0x20/0x20 [ 1009.963421][ C1] ? load_image+0x420/0x420 [ 1009.967948][ C1] panic+0x2ca/0x720 [ 1009.971896][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1009.976440][ C1] check_panic_on_warn+0x84/0xa0 [ 1009.981407][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 1009.987153][ C1] aiptek_irq+0x1eb8/0x2920 [ 1009.991673][ C1] ? kcov_remote_start+0x8a/0x7e0 [ 1009.996707][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 1010.002443][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 1010.007832][ C1] dummy_timer+0xa40/0x3420 [ 1010.012385][ C1] ? dummy_free_streams+0x520/0x520 [ 1010.017603][ C1] ? dummy_free_streams+0x520/0x520 [ 1010.022813][ C1] __hrtimer_run_queues+0x525/0xc10 [ 1010.028035][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1010.033151][ C1] ? read_tsc+0x9/0x20 [ 1010.037237][ C1] hrtimer_run_softirq+0x177/0x290 [ 1010.042361][ C1] handle_softirqs+0x27d/0x820 [ 1010.047129][ C1] ? read_tsc+0x9/0x20 [ 1010.051215][ C1] ? ktime_get+0x24b/0x280 [ 1010.055662][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1010.060452][ C1] ? do_softirq+0x1a0/0x1a0 [ 1010.064999][ C1] __irq_exit_rcu+0xd3/0x190 [ 1010.069617][ C1] ? irq_exit_rcu+0x20/0x20 [ 1010.074139][ C1] irq_exit_rcu+0x9/0x20 [ 1010.078394][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1010.084043][ C1] [ 1010.086999][ C1] [ 1010.089936][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1010.095931][ C1] RIP: 0010:__local_bh_enable_ip+0x142/0x1c0 [ 1010.101920][ C1] Code: 8a e8 32 a2 31 09 65 66 8b 05 2a 6c b1 7e 66 85 c0 75 54 bf 01 00 00 00 e8 2b 1d 0a 00 e8 c6 07 3b 00 fb 65 8b 05 f6 6b b1 7e <85> c0 75 05 e8 c5 50 ae ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 1010.121538][ C1] RSP: 0018:ffffc9000c1dfa40 EFLAGS: 00000286 [ 1010.127616][ C1] RAX: 0000000080000000 RBX: 0000000000000201 RCX: d59246a6aa1a2b00 [ 1010.135606][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1c7be0 [ 1010.143582][ C1] RBP: ffffc9000c1dfac0 R08: ffffffff911bc5df R09: 1ffffffff22378bb [ 1010.151561][ C1] R10: dffffc0000000000 R11: fffffbfff22378bc R12: ffffffff8a4bb200 [ 1010.159566][ C1] R13: ffff888018eb4fd0 R14: dffffc0000000000 R15: 1ffff9200183bf48 [ 1010.167557][ C1] ? batadv_nc_purge_paths+0x300/0x3a0 [ 1010.173046][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1010.177910][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1010.183129][ C1] ? batadv_nc_purge_paths+0x300/0x3a0 [ 1010.188611][ C1] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 1010.195143][ C1] batadv_nc_purge_paths+0x300/0x3a0 [ 1010.200460][ C1] batadv_nc_worker+0x363/0x600 [ 1010.205329][ C1] ? process_scheduled_works+0x975/0x1600 [ 1010.211062][ C1] process_scheduled_works+0xa60/0x1600 [ 1010.216642][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1010.222123][ C1] ? assign_work+0x3cc/0x5d0 [ 1010.226746][ C1] worker_thread+0xa5e/0xfe0 [ 1010.231383][ C1] kthread+0x2fa/0x390 [ 1010.235463][ C1] ? pr_cont_work+0x550/0x550 [ 1010.240160][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1010.244764][ C1] ret_from_fork+0x48/0x80 [ 1010.249196][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1010.253791][ C1] ret_from_fork_asm+0x11/0x20 [ 1010.258577][ C1] [ 1010.262193][ C1] Kernel Offset: disabled [ 1010.266531][ C1] Rebooting in 86400 seconds..