last executing test programs: 5.818783486s ago: executing program 2 (id=824): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000640)={0x40, r4, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}]}]}]}, 0x40}}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) (async) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) 5.77776545s ago: executing program 2 (id=825): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x0, 0x0, 0x436}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1}}) 5.566778404s ago: executing program 2 (id=827): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000ff0000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 5.33419269s ago: executing program 2 (id=831): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) fanotify_init(0x200, 0x8000) dup(r0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000075210000000900010073797a300000000060000000030a010100000000000000000100000008000b400000004014000480080002400000000008000140000000000900010073797a300000000008000a40000000021c0008800c00024000000000000000000c000110000100216cc2df8cbb00000000000000000000000a00000000000000"], 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r4], 0x3c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 5.062909588s ago: executing program 3 (id=835): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000095"]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0xdf, 0xce, 0x30, 0x20, 0x2040, 0x4200, 0x6f07, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x49, 0x0, 0x1, 0x1a, 0x52, 0x79, 0x0, [], [{{0x9, 0x5, 0x82, 0x0, 0x400}}]}}]}}]}}, &(0x7f0000000280)={0xfffffffffffffe8e, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@private, @empty, 0x0}, &(0x7f0000000080)=0xc) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getnetconf={0x2c, 0x52, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_IFINDEX={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.629565079s ago: executing program 1 (id=842): r0 = io_uring_setup(0xd1b, &(0x7f0000000300)={0x0, 0xa06c, 0x0, 0x5, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = eventfd(0x5) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x1, 0x80a0000, 0xa, r3, 0x3}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000040)=0xf, 0x4) sendto$inet(r6, &(0x7f0000000000)="f461c5bbd7000083", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x8005}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f00000003c0)=""/135, 0x87}], 0x2}, 0x9}], 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000002060502000000000000000000000000140007800800114000000000050015000600000005000100060000e0050005000200000005000400000000000900020073797a310000200011000300686173683a69702c706f7274"], 0x60}}, 0x0) 3.381081268s ago: executing program 3 (id=843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000100a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c0800034000000004cbbdaeb00a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 3.337355374s ago: executing program 0 (id=844): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x9d, 0x51, 0x46, 0x10, 0x13b1, 0x42, 0x5a8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb0, 0x2, 0x1, 0xf9, 0x51, 0x73, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x28bd, 0x905, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x39, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x2e1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x3, 0x9e}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x3, 0x0, 0x7, 0x0, 0x8}, 0x37, &(0x7f00000000c0)={0x5, 0xf, 0x37, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "000aa93f63aa0d932e62c231bdedc975"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xc3, 0x6, 0x2}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x3, 0x8}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1001}}]}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x9d, 0x51, 0x46, 0x10, 0x13b1, 0x42, 0x5a8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb0, 0x2, 0x1, 0xf9, 0x51, 0x73, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x28bd, 0x905, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x39, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x2e1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x3, 0x9e}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x3, 0x0, 0x7, 0x0, 0x8}, 0x37, &(0x7f00000000c0)={0x5, 0xf, 0x37, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "000aa93f63aa0d932e62c231bdedc975"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xc3, 0x6, 0x2}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x3, 0x8}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1001}}]}) (async) 3.174511681s ago: executing program 3 (id=845): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x140, 0x111, 0x4b4, 0x140, 0xd4feffff, 0x278, 0x20a, 0x278, 0x278, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x24}, @mcast2, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], [0xff000000, 0xffffff00, 0xff], 'bond_slave_0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x33, 0x2, 0x4, 0x2}, 0x0, 0x10c, 0x140, 0x0, {0x3300000000000000}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1}, {0x0, 0x1, 0x4}, {0x2, 0x0, 0x7}, 0x4b5, 0xd}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@inet=@ipcomp={{0x2c}, {[0x4d6, 0x4d2]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x7, 0x7, 0xf2e5, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x39c) 2.972950894s ago: executing program 3 (id=846): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0xfffffffffffffc00, 0x0, 0x1900000000000000}, {}, {}, 0x0, 0x3502, 0xa, 0x0, 0x0, 0x18}, [@offload={0xc, 0x1c, {0x0, 0x6}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 2.839077505s ago: executing program 3 (id=847): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xa}}, [{{0x9, 0x5, 0x82, 0x2, 0x468, 0x1, 0x4, 0x5}}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) unshare(0x24060400) (async) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.663433935s ago: executing program 1 (id=849): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0xa0}}, 0x0) 2.402671774s ago: executing program 1 (id=851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000c00000000000a20000000000a01040000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000c000494080002401ace24d114000000110001"], 0xc0}}, 0x0) 2.131908051s ago: executing program 1 (id=852): r0 = getpid() r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) r2 = syz_usb_connect(0x0, 0x202, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0xee72) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r6) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x84080) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000640)}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0x13, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@exit, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x46cb593b}, @jmp={0x5, 0x1, 0x4, 0x9, 0x5, 0xffffffffffffffe0, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0xffff, 0x63, &(0x7f00000003c0)=""/99, 0x41000, 0x7d, '\x00', r4, @fallback=0x8, r5, 0x8, &(0x7f0000000480)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x5, 0x1000, 0xc28}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000740)=[r6, r7, r8, r9, r10], &(0x7f0000000780)=[{0x4, 0x3, 0x9, 0xb}, {0x0, 0x1, 0xf, 0xc}, {0x2, 0x4, 0x10, 0xc}, {0x0, 0x1, 0xb, 0x9}], 0x10, 0x3ffe64a0, @void, @value}, 0x94) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f0000000180)={0x0, 0x9, 0x5, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) syz_pidfd_open(r0, 0x0) capset(&(0x7f0000000100)={0x20080522, r0}, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x81, 0xfffffffb, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000006ffc)=0x203, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r12, &(0x7f0000000000)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r12, &(0x7f0000000280)="02042c08c9fb4802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) shmctl$SHM_LOCK(0x0, 0xb) 1.80672349s ago: executing program 2 (id=853): r0 = syz_open_dev$vbi(&(0x7f0000000440), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x28, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x0, 0x3, 0xffd, 0x0, 0xa0c, 0xf, 0x7, 0x7f, 0x1a, 0xb763599953cb0915, {0x9, 0x6fd8e84b}, 0x3, 0xed}}) r1 = syz_open_dev$cec(&(0x7f0000000440), 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x0, 0x3}}}, 0x24}}, 0x40) socket$inet(0xa, 0x801, 0x84) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r5, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRESOCT=r5, @ANYRES16=0x0], 0x200002e6) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x80000, 0x7fffffff}, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f5, 0x4, 0x0, 0x302}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x40000, @private0}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)='P', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0xd7d, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffffffff}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f00000004c0)='w', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r12, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x400}, 0x8) 1.566605136s ago: executing program 0 (id=854): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x500, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ff}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev, 0xfffffffe}}, 0xe8) 1.359061994s ago: executing program 4 (id=855): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) getrlimit(0x6, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0) (async, rerun: 64) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (rerun: 64) mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000fd9161ec8d8ed216668ee427d200"/41], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0xffffff1f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xc, 0x9, 0x0, 0x0, 0x6}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.271343492s ago: executing program 0 (id=856): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180003010a0000180000000001000000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000004850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 978.56608ms ago: executing program 4 (id=857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x2000000}, 0x0) 977.153803ms ago: executing program 0 (id=858): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005cc0)=[{0x0}], 0x1, 0x0, 0x0, 0x44011}, 0x0) (async) r2 = gettid() r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) (async) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc728, 0x10108, 0x2}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) (async) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000900)={{0x0, 0x4, 0x2, 0x0, 'syz0\x00', 0xd3}, 0x1, 0x200, 0x2, r2, 0x0, 0x3, 'syz1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') lseek(r14, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r12}, [@MDBA_SET_ENTRY={0x20, 0x1, {r15, 0x1, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}}, 0x20044050) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x8, 0x3, 0x3, 0x2, 0x7fff, 0x5}}, {0x2}}]}, @qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x5e, 0x2, 0x6}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8}]}}]}, 0x68}}, 0x4000010) (async) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@mcast2, 0x0, r9}) socket(0xf, 0x803, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) (async) syz_usb_connect(0x0, 0x5d, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005240000000d240f0100000000000000000007241400000000042413fa042406"], 0x0) (async) syz_usb_connect(0x0, 0x2fc, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xb0, 0xe2, 0xbb, 0x8, 0x50d, 0x109, 0x35f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2ea, 0x1, 0x6, 0x9, 0xa0, 0x5, [{{0x9, 0x4, 0x64, 0x7, 0x8, 0x7e, 0xd6, 0x1f, 0xf, [], [{{0x9, 0x5, 0xda19c2bd35a5bfed, 0x0, 0x20, 0xe, 0x5, 0xba}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x0, 0x79, 0x8, [@generic={0x100, 0xe, "f0fbeadd5af629642d0e2b7f0264d21c23786da26a187977d0c6dd9e61d79cdaad5db26b0ec76cec1f1209d6aca2bad479b04bc1bbbe1976fa4e9b55a6c3628414ae0c30e35ba94bc8d74c9c83c0f4e26a0cbdf7766d8fed279454a3e2378bb525a21bbd6114dadd9f3f0a3db311ed23faeef0f83ea18e51fe4d4667c6ac2913ef574d2c35dddb06d412e009aa86f8ea3c6821562b07edbcd674c4102cf5f898b0f0365fe3c38cdfeb54d232a2d1d13309aff609d8b279863c992f1c0329aa9cff0ac8ed81262721ec1bbb5ec51662cbbb76aaf0d3e73a50ce4c928ada5b9d1cc318e9fd4357f0c8a46562b335bfbd2be16663a52735bbcb552fa64eed45"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x4, 0xe, 0xe, [@generic={0xcd, 0xc, "0c3c9d8a9b496fb0fe6b4187cc534e9ba11f8f722241f0e881e30cbe758b8947a548b75a40255878d0a7234bbaef24875ca190d067260309d93211d94db612a54487a46b54e5699d5842293d351c08f708c1b4f626c296a574457fb48e3cdeea66adfa475460ff59d77df65ba3061d81c3afbcc05fa8184504733b9acd831d76d244c2906495b5ecc75b071b6b58fe61de6e33c5fb6ab3f1a16c32dde9de9ea9de425d0cf504e1f867d959381f3fbd41a931543a435e0a1b219538847f86340eff682379bcf9bd92d6b48d"}, @generic={0x26, 0x21, "d0f59d5924103a07d958beaceb9df0187f0b1b57c1058daa3fe0cd9ba16542c07697c200"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x6, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8}, @generic={0x2, 0xd}]}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0x9, 0x40, 0x4}}, {{0x9, 0x5, 0x5, 0x18, 0x8, 0x1, 0xf7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x29, 0x3, 0x2, [@generic={0x7f, 0x23, "b25a55d8d7ce97e87fd0af0a424b49bf13026d28778cea77860d5b0f553f14c6a88d23c1e7a88a390656df4f30bdcebfccac2536c7ad5ae3f87b37bb4a708cc6e20c3be208b5b6c34f6a9ebba54b74c52e38463eea9688238b69e262b37e5e2d2483917d43e584657a7868bcbe78ff11a5e4e1b4b1a24f72217a3c32bc"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x8f, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf2, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x101}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x10, 0x7f, 0x0, 0xff, 0x65}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0xfffffe6a}}) (async) socket$pppoe(0x18, 0x1, 0x0) 871.520034ms ago: executing program 4 (id=859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01040000000000000002010000000900010073797a310000000054000000030a01020000000000000000010000000900030077797a32000000002800048008000240000000000800014000000005140003d3d9734ad9e04f406f5f687372000000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) 856.262224ms ago: executing program 0 (id=860): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x0, 0x0, 0x436}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, 0x0) 754.698834ms ago: executing program 2 (id=861): socket$unix(0x1, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd2835090000000000010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000410000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 714.85152ms ago: executing program 1 (id=862): r0 = socket$kcm(0x10, 0x7, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x2, 0x4, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1a}}]}, 0x2c}, 0x1, 0xffffff7f, 0x0, 0x840}, 0x4040000) (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='bond_slave_1\x00'}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}, {&(0x7f0000000100)="8d4b7aa0daa6fc76d292db", 0xb}], 0x2}, 0x890) 692.663518ms ago: executing program 0 (id=863): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) fanotify_init(0x200, 0x8000) dup(r0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000075210000000900010073797a300000000060000000030a010100000000000000000100000008000b400000004014000480080002400000000008000140000000000900010073797a300000000008000a40000000021c0008800c00024000000000000000000c000110000100216cc2df8cbb00000000000000000000000a00000000000000"], 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r4], 0x3c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 646.66757ms ago: executing program 4 (id=864): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00, 0x0, 0x8, 0x4, 0x0, 0xb}) 557.817217ms ago: executing program 1 (id=865): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x4000000) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203243, 0x3, [0x2], [0x80ffff], [], [0x400000000000000]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x2c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(0xffffffffffffffff, 0x9) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x200, 0x0, 0x0, 0x109}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3518, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006dc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x1, {0x0, 0x1, 0x20000000, 0x8000000000001, 0xfffffffd, 0xfffffffe, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, r10, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCSREPORT(r3, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x10000}) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f00000001c0)={0x2, 0x100, 0xf7}) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') read$FUSE(r11, &(0x7f0000008200)={0x2020}, 0x2020) 427.788005ms ago: executing program 4 (id=866): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x8000, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000040)={0x4, 0x0, [{0x40000000, 0x6, 0x6, 0xfffffffd, 0xb62, 0x0, 0x3}, {0x2, 0xfff, 0x6, 0x2, 0x3, 0x0, 0x1}, {0x0, 0xf, 0x3, 0x1, 0xf, 0x0, 0x9}, {0x6, 0xbb, 0x2, 0x0, 0xbdd, 0x6, 0x8001}]}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/117) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0xfffffe01) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x49}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) close_range(r0, r1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r4, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "045a412f8b"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "39142a4b4e32103fc612916d"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x24044504) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, r6, 0x2, 0x3, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x60}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x27d}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x100}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x22, 0x13, [{0x1b, 0x1}, {0xb, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x16, 0x1}, {0x6, 0x1}, {0x36}, {0xb, 0x1}, {0xc}, {0x15, 0x1}, {0x12}, {0x36, 0x1}, {0x3}, {0x6, 0x1}, {0x9, 0x1}, {0x30, 0x1}, {0x1, 0x1}, {0x36}, {0x6, 0x1}, {0x6, 0x1}, {0x30}, {0x4}, {0x5}, {0x36}, {0xe}, {0x3, 0x1}, {0xb, 0x1}, {0x30, 0x1}, {0x12, 0x1}, {0x1b, 0x1}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8a}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x631}]}, 0x84}, 0x1, 0x0, 0x0, 0x20001000}, 0xc048480) recvmsg(r1, &(0x7f0000001a40)={&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000780)=""/126, 0x7e}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/9, 0x9}, {&(0x7f0000001840)=""/73, 0x49}, {&(0x7f00000018c0)=""/27, 0x1b}], 0x5, &(0x7f0000001940)=""/197, 0xc5}, 0x10043) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), r1) sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x70, r9, 0x626, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4015) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000001c00)={{0x2, @addr=0x4}, 0x8, 0x0, 0x1000}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001c40)={0x0, @broadcast, @initdev}, &(0x7f0000001c80)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001d40)={'syztnl0\x00', &(0x7f0000001cc0)={'syztnl2\x00', r10, 0x29, 0x1, 0x92, 0x7, 0x40, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, @mcast1, 0x20, 0x8000, 0x4, 0xfffffffa}}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000001d80)=""/223) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001f80)={@fallback=r0, 0x3, 0x1, 0x94d7, &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001f00)=[0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000022c0)={r1, 0xe0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002080)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f00000020c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002100), &(0x7f0000002140), 0x8, 0x12, 0x8, 0x8, &(0x7f0000002180)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001fc0)={@fallback=r8, r1, 0x38, 0x28, 0x0, @void, @void, @void, @value=r13, r12}, 0x20) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x28, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8890}, 0x40000cc) write$binfmt_register(r11, &(0x7f0000002400)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x6, 0x3a, '\x00', 0x3a, '^\xe1**', 0x3a, './file0'}, 0x2c) syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), r11) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000002480)={{0x1, 0x0, 0x80, {0x33339000, 0x10000, 0x1}}, "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", "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"}) 46.665054ms ago: executing program 4 (id=867): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000200), 0x51, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 0s ago: executing program 3 (id=868): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2s-128-x86,adiantum(xts-camellia-aesni,camellia-'}, 0x58) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd, 0x7a, 0xb2, 0x10, 0x5c6, 0x9000, 0x458e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x4, 0x0, 0x2, 0xff, 0x66, 0x2f, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x40, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x10, 0x40}}]}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x50, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_test', 0x341a82, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x1, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_SYMLINKAT={0x26, 0x1, 0x0, r4, &(0x7f00000001c0)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000200)='.\x00', 0x0, 0x0, 0x1, {0x0, r5}}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000085cfb8478c663cf9f8280adbf0af076e41813219903e1826e5c783c3a2be89753aef032949fb324da72c289859c3d8d7d3ff25846f2f0a454c55d2cf24ab9048492ac8466249e96a7e8c39c2d93f38edb12eb39f2be44e015457cc19279cd9e7c0fe032568bf40de439e377b51d3163409d9daac566384c2f34a69400f8f57a9306d69d16475cf26eca4faa0abcc0070a66d1c8556a5a55c678306b3c9e6edf2f7da10c45724a6f5a482a99bed1e26b5c249ba63f3ca5289c571b22e52d2b577693b560f0e7f8d8917b4d9bcea8c923c1f393fe834e736277a3bbdb2776c9f6a5262872b599c258aa4bb47", @ANYRES16=r6, @ANYBLOB="000127bd7000fcdbdf2501000000080005000600000024000380060007004e230000080003000300000006000400310300000800010002000000080004006df90000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24000100) sendto$inet6(r4, &(0x7f0000000280)="d75086cbe2534118f5ab2b33bbfeead6833c555533f7856f046d076d34a32f629b458d7739461cd4cde4a8a1933095093976e9a501f6a13a624d816314f55fd45317fd22c46b82b3d9ac2f0030138693f3f207dcc5a9f5b5697964346f87b794715ff39f98342d6fb6cc71ad0ae34cb781346699c9740785cef166ff547a389691edce7ef5b5ca71d4db2102a27937cbeadbfbb5a1a668d5e0", 0x99, 0x48812, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @mcast1, 0x27}, 0x1c) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x35}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x21}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0xc090) kernel console output (not intermixed with test programs): 156.940162][ T5900] usb 2-1: USB disconnect, device number 18 [ 157.052667][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 157.309475][ T5921] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 157.368910][ T6936] 8021q: VLANs not supported on ip6_vti0 [ 157.560211][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 158.539233][ T5900] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 158.693873][ T5900] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.737809][ T5900] usb 5-1: config 1 interface 0 has no altsetting 0 [ 158.765030][ T5900] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.40 [ 158.794348][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.824926][ T5900] usb 5-1: Product: syz [ 158.838776][ T5900] usb 5-1: Manufacturer: ч [ 158.864339][ T5900] usb 5-1: SerialNumber: syz [ 159.049698][ T43] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 159.184063][ T5900] usbhid 5-1:1.0: can't add hid device: -71 [ 159.203249][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 159.214509][ T5900] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 159.220250][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 159.320578][ T5900] usb 5-1: USB disconnect, device number 17 [ 159.328212][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 159.364953][ T6961] loop6: detected capacity change from 0 to 7 [ 159.385044][ T6089] Dev loop6: unable to read RDB block 7 [ 159.403960][ T43] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 159.423467][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.461935][ T6089] loop6: AHDI p4 [ 159.478618][ T6089] loop6: partition table partially beyond EOD, truncated [ 159.528939][ T43] usb 1-1: Product: syz [ 159.548238][ T43] usb 1-1: Manufacturer: syz [ 159.549620][ T6961] Dev loop6: unable to read RDB block 7 [ 159.575292][ T6961] loop6: AHDI p4 [ 159.576450][ T43] usb 1-1: SerialNumber: syz [ 159.590639][ T6961] loop6: partition table partially beyond EOD, truncated [ 159.611820][ T43] usb 1-1: config 0 descriptor?? [ 159.620989][ T6955] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 159.652594][ T6955] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 159.691980][ T43] usb 1-1: ucan: probing device on interface #0 [ 159.932789][ T43] usb 1-1: ucan: device reported invalid device info [ 159.932837][ T43] usb 1-1: ucan: probe failed; try to update the device firmware [ 160.037246][ T6975] __nla_validate_parse: 3 callbacks suppressed [ 160.037263][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'. [ 160.198329][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 160.238431][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 160.274458][ T5921] usb 4-1: can't read configurations, error -71 [ 160.454356][ T6986] input: syz0 as /devices/virtual/input/input13 [ 160.579495][ T5900] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 160.730511][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 160.737552][ T5900] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.745732][ T5900] usb 2-1: config 0 has no interface number 0 [ 160.754332][ T5900] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 160.759590][ T5921] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 160.765256][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.780243][ T5900] usb 2-1: Product: syz [ 160.784595][ T5900] usb 2-1: Manufacturer: syz [ 160.789328][ T5900] usb 2-1: SerialNumber: syz [ 160.796179][ T5900] usb 2-1: config 0 descriptor?? [ 160.799223][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 160.809873][ T5900] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 160.818696][ T5900] usb 2-1: selecting invalid altsetting 1 [ 160.824563][ T5900] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 160.834962][ T5900] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 160.846896][ T5900] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 160.857320][ T5900] usb 2-1: media controller created [ 160.879767][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.919669][ T5921] usb 4-1: device descriptor read/64, error -71 [ 160.967202][ T43] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.985296][ T43] usb 3-1: config 1 interface 0 has no altsetting 0 [ 160.994753][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.40 [ 161.005010][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.013196][ T43] usb 3-1: Product: syz [ 161.017627][ T43] usb 3-1: Manufacturer: ч [ 161.022236][ T43] usb 3-1: SerialNumber: syz [ 161.031467][ T5921] usb usb4-port1: attempt power cycle [ 161.239789][ T5900] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 161.322288][ T43] usbhid 3-1:1.0: can't add hid device: -71 [ 161.360348][ T43] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 161.389653][ T5921] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 161.402216][ T5900] usb 2-1: USB disconnect, device number 19 [ 161.423325][ T43] usb 3-1: USB disconnect, device number 12 [ 161.451443][ T5921] usb 4-1: device descriptor read/8, error -71 [ 161.491133][ T7002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.367'. [ 161.618862][ T6997] veth0_to_team: entered promiscuous mode [ 161.625086][ T6997] veth0_to_team: entered allmulticast mode [ 161.729823][ T5921] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 161.761682][ T5921] usb 4-1: device descriptor read/8, error -71 [ 161.819749][ T5951] usb 1-1: USB disconnect, device number 20 [ 161.872022][ T5921] usb usb4-port1: unable to enumerate USB device [ 161.880766][ T7008] xt_bpf: check failed: parse error [ 161.921344][ T7008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.369'. [ 162.026370][ T30] audit: type=1800 audit(1750624655.165:22): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.370" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 162.051140][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 162.244402][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 162.269030][ T43] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 162.298802][ T7015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.372'. [ 162.308262][ T43] usb 3-1: config 0 has no interface number 0 [ 162.314543][ T43] usb 3-1: config 0 interface 89 has no altsetting 0 [ 162.314916][ T7015] tipc: Invalid UDP bearer configuration [ 162.326124][ T7015] tipc: Enabling of bearer rejected, failed to enable media [ 162.370936][ T43] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 162.394382][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.424696][ T43] usb 3-1: Product: syz [ 162.522342][ T43] usb 3-1: Manufacturer: syz [ 162.536806][ T43] usb 3-1: SerialNumber: syz [ 162.553942][ T43] usb 3-1: config 0 descriptor?? [ 162.816340][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.829511][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.851498][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.863075][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.881267][ T5921] usb 3-1: USB disconnect, device number 13 [ 162.929598][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 163.097476][ T43] usb 1-1: config 0 has no interfaces? [ 163.105774][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 163.117696][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.126305][ T43] usb 1-1: Product: syz [ 163.130740][ T43] usb 1-1: Manufacturer: syz [ 163.135405][ T43] usb 1-1: SerialNumber: syz [ 163.143032][ T43] usb 1-1: config 0 descriptor?? [ 163.784815][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.378'. [ 164.935576][ T7053] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.078373][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 165.549193][ T5844] usb 1-1: USB disconnect, device number 21 [ 165.644207][ T7070] warning: `syz.0.391' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 165.694417][ T5921] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 165.700722][ T7061] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 165.759516][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 165.893519][ T5921] usb 4-1: config 0 has no interfaces? [ 165.913671][ T5921] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 165.926412][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.934964][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 165.942952][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 165.957130][ T43] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 165.968998][ T5921] usb 4-1: config 0 descriptor?? [ 165.974721][ T43] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 165.995370][ T43] usb 3-1: Product: syz [ 166.000040][ T43] usb 3-1: Manufacturer: syz [ 166.004874][ T43] usb 3-1: SerialNumber: syz [ 166.048125][ T43] usb 3-1: config 0 descriptor?? [ 166.055609][ T7068] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 166.064869][ T43] hub 3-1:0.0: bad descriptor, ignoring hub [ 166.073501][ T43] hub 3-1:0.0: probe with driver hub failed with error -5 [ 166.253783][ T7064] team_slave_0: entered promiscuous mode [ 166.259730][ T7064] team_slave_1: entered promiscuous mode [ 166.265411][ T7064] batadv1: entered promiscuous mode [ 166.273285][ T7064] vlan5: entered promiscuous mode [ 166.278420][ T7064] team0: entered promiscuous mode [ 166.412310][ T5844] usb 3-1: USB disconnect, device number 14 [ 166.435764][ T5900] usb 4-1: USB disconnect, device number 20 [ 166.517320][ T7089] tipc: Started in network mode [ 166.524095][ T7089] tipc: Node identity _, cluster identity 4711 [ 166.530891][ T7089] tipc: Enabling of bearer rejected, failed to enable media [ 166.581458][ T7091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 166.597334][ T7091] netlink: 204 bytes leftover after parsing attributes in process `syz.1.398'. [ 166.618552][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 166.653187][ T7093] Cannot find del_set index 0 as target [ 166.837700][ T7096] block device autoloading is deprecated and will be removed. [ 167.080937][ T5921] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 167.162790][ T7112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.407'. [ 167.241460][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 167.251098][ T5921] usb 2-1: config 0 has no interfaces? [ 167.259619][ T5844] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 167.261219][ T5921] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 167.288641][ T7118] loop6: detected capacity change from 0 to 524287999 [ 167.307966][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.326661][ T5921] usb 2-1: Product: syz [ 167.332420][ T5921] usb 2-1: Manufacturer: syz [ 167.337207][ T5921] usb 2-1: SerialNumber: syz [ 167.346402][ T5921] usb 2-1: config 0 descriptor?? [ 167.439306][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 167.451490][ T5844] usb 5-1: config 4 has an invalid interface number: 194 but max is 0 [ 167.489733][ T5844] usb 5-1: config 4 has no interface number 0 [ 167.513316][ T5844] usb 5-1: config 4 interface 194 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 167.556197][ T5844] usb 5-1: config 4 interface 194 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 167.586520][ T5844] usb 5-1: config 4 interface 194 has no altsetting 0 [ 167.616596][ T5844] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=a1.41 [ 167.630007][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.642974][ T5844] usb 5-1: Product: syz [ 167.660899][ T5844] usb 5-1: Manufacturer: syz [ 167.676494][ T5844] usb 5-1: SerialNumber: syz [ 167.736079][ T5921] usb 2-1: USB disconnect, device number 20 [ 169.089049][ T7135] xt_SECMARK: invalid mode: 0 [ 169.470639][ T7139] xt_CT: No such helper "syz0" [ 170.157947][ T7151] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 170.830552][ T5844] usb 5-1: probing VID:PID(0424:012C) [ 170.837791][ T5844] usb 5-1: vub300 testing UNKNOWN EndPoint(0) 03 [ 170.846609][ T5844] usb 5-1: vub300 ignoring EndPoint(0) 03 [ 170.861928][ T5844] usb 5-1: vub300 testing UNKNOWN EndPoint(1) 04 [ 170.895606][ T5844] usb 5-1: vub300 ignoring EndPoint(1) 04 [ 170.902815][ T5900] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 170.929259][ T5844] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 170.990006][ T5844] vub300 5-1:4.194: probe with driver vub300 failed with error -22 [ 171.015909][ T5844] usb 5-1: USB disconnect, device number 18 [ 171.082907][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 171.090575][ T5900] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 171.090643][ T5900] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 171.090670][ T5900] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.090702][ T5900] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.090727][ T5900] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 171.090748][ T5900] usb 3-1: config 1 interface 2 has no altsetting 0 [ 171.093989][ T5900] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.094007][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.094020][ T5900] usb 3-1: Product: syz [ 171.094030][ T5900] usb 3-1: Manufacturer: syz [ 171.094040][ T5900] usb 3-1: SerialNumber: syz [ 171.109306][ T5921] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 171.323964][ T7166] xt_bpf: check failed: parse error [ 171.344191][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 171.344225][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 171.344266][ T5921] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 171.344290][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.346915][ T5921] usb 4-1: config 0 descriptor?? [ 171.349471][ T7162] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 171.438994][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.421'. [ 171.494449][ T7172] loop8: detected capacity change from 0 to 7 [ 171.737396][ T5846] Dev loop8: unable to read RDB block 7 [ 171.755436][ T5846] loop8: unable to read partition table [ 171.777255][ T5846] loop8: partition table beyond EOD, truncated [ 171.803632][ T7172] Dev loop8: unable to read RDB block 7 [ 171.809425][ T7172] loop8: unable to read partition table [ 171.829703][ T7172] loop8: partition table beyond EOD, truncated [ 171.834015][ T7177] tipc: Started in network mode [ 171.859438][ T7172] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 171.864735][ T7177] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 171.934080][ T7177] tipc: Enabled bearer , priority 10 [ 171.942178][ T5921] smartjoyplus 0003:0925:8866.0005: hidraw0: USB HID vff.fa Device [HID 0925:8866] on usb-dummy_hcd.3-1/input0 [ 171.995661][ T5921] smartjoyplus 0003:0925:8866.0005: Force feedback for SmartJoy PLUS PS2/USB adapter [ 172.219451][ T43] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 172.311308][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 172.382261][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 172.385195][ T43] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 172.398222][ T43] usb 5-1: config 7 has no interface number 0 [ 172.412948][ T43] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 172.427187][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.445441][ T43] usb 5-1: Product: syz [ 172.455635][ T43] usb 5-1: Manufacturer: syz [ 172.461884][ T43] usb 5-1: SerialNumber: syz [ 172.579553][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 172.608833][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 172.622554][ T9] usb 1-1: config 0 has no interface number 0 [ 172.628976][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 172.642781][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 172.652296][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.660976][ T9] usb 1-1: Product: syz [ 172.665480][ T9] usb 1-1: Manufacturer: syz [ 172.670539][ T9] usb 1-1: SerialNumber: syz [ 172.691827][ T9] usb 1-1: config 0 descriptor?? [ 172.731106][ T9] smsc75xx v1.0.0 [ 172.767618][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 173.050689][ T24] tipc: Node number set to 4269801488 [ 173.586509][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 173.676727][ T5900] usb 3-1: selecting invalid altsetting 0 [ 173.692213][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 173.784952][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 173.907185][ T5844] usb 4-1: USB disconnect, device number 21 [ 173.927115][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 173.940708][ T5900] usb 3-1: USB disconnect, device number 15 [ 174.101490][ T6089] udevd[6089]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.389280][ T5900] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 174.559145][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 174.568593][ T5900] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 174.629420][ T5900] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.666319][ T5900] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.687218][ T5900] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.706958][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.717057][ T5900] usb 3-1: Product: syz [ 174.725552][ T5900] usb 3-1: Manufacturer: syz [ 174.732883][ T5900] usb 3-1: SerialNumber: syz [ 175.047068][ T43] as10x_usb: device has been detected [ 175.067648][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 175.169612][ T5921] usb 1-1: USB disconnect, device number 22 [ 175.296150][ T43] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 175.310849][ T5900] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 175.361073][ T43] as10x_usb: error during firmware upload part1 [ 175.476619][ T43] Registered device Elgato EyeTV DTT Deluxe [ 175.483416][ T43] usb 5-1: USB disconnect, device number 19 [ 175.516030][ T7211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.565582][ T7211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.587031][ T43] Unregistered device Elgato EyeTV DTT Deluxe [ 175.707508][ T43] as10x_usb: device has been disconnected [ 176.025255][ T5900] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 176.129572][ T5900] usb 3-1: USB disconnect, device number 16 [ 176.299295][ T43] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 176.341925][ T7235] loop6: detected capacity change from 0 to 524287999 [ 176.368899][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.507721][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.553462][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.687931][ T43] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 176.723948][ T7239] netlink: 'syz.1.445': attribute type 2 has an invalid length. [ 176.757912][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.831324][ T43] usb 5-1: config 0 descriptor?? [ 177.315510][ T43] glorious 0003:258A:0036.0006: unknown main item tag 0x1 [ 177.403550][ T43] glorious 0003:258A:0036.0006: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.4-1/input0 [ 177.422305][ T30] audit: type=1326 audit(1750624670.575:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 177.537329][ T30] audit: type=1326 audit(1750624670.585:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 177.537384][ T30] audit: type=1326 audit(1750624670.585:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 177.537433][ T30] audit: type=1326 audit(1750624670.585:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 177.537479][ T30] audit: type=1326 audit(1750624670.585:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 177.537526][ T30] audit: type=1326 audit(1750624670.585:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 177.537576][ T30] audit: type=1326 audit(1750624670.625:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 177.537623][ T30] audit: type=1326 audit(1750624670.625:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 177.537669][ T30] audit: type=1326 audit(1750624670.625:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 177.537716][ T30] audit: type=1326 audit(1750624670.625:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 178.569278][ T5844] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 178.581148][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 178.720936][ T5844] usb 1-1: config index 0 descriptor too short (expected 65069, got 45) [ 178.720958][ T5844] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 178.720973][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.720986][ T5844] usb 1-1: config 0 has no interfaces? [ 178.721006][ T5844] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 178.721022][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.723172][ T5844] usb 1-1: config 0 descriptor?? [ 178.729271][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 178.733116][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 178.735154][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 178.735179][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 178.735200][ T9] usb 2-1: Product: syz [ 178.735214][ T9] usb 2-1: Manufacturer: syz [ 178.735229][ T9] usb 2-1: SerialNumber: syz [ 178.741638][ T9] usb 2-1: config 0 descriptor?? [ 178.743469][ T7253] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 178.744632][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 178.744673][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 178.799726][ T5900] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 178.867994][ T7266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.453'. [ 178.868010][ T7266] tipc: Invalid UDP bearer configuration [ 178.868036][ T7266] tipc: Enabling of bearer rejected, failed to enable media [ 178.933138][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.933456][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.959791][ T5900] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 178.959836][ T5900] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 178.959856][ T5900] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.959886][ T5900] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 178.959903][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.971263][ T5900] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.971895][ T5900] usb 4-1: invalid MIDI out EP 0 [ 179.077230][ T9] usb 2-1: USB disconnect, device number 21 [ 179.098696][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.100450][ T5844] usb 1-1: USB disconnect, device number 23 [ 179.114504][ T5900] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 179.256533][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.258292][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.264678][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.266686][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.403194][ T5844] usb 4-1: USB disconnect, device number 22 [ 179.963202][ T5900] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 180.142748][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 180.150753][ T5900] usb 3-1: unable to get BOS descriptor or descriptor too short [ 180.154988][ T5900] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 180.155034][ T5900] usb 3-1: can't read configurations, error -71 [ 180.222793][ T7281] loop6: detected capacity change from 0 to 524287999 [ 180.326413][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 180.494919][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 180.503377][ T24] usb 1-1: config 0 has an invalid interface number: 60 but max is 0 [ 180.503405][ T24] usb 1-1: config 0 has no interface number 0 [ 180.507911][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 180.507940][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.507964][ T24] usb 1-1: Product: syz [ 180.508011][ T24] usb 1-1: Manufacturer: syz [ 180.508029][ T24] usb 1-1: SerialNumber: syz [ 180.516592][ T24] usb 1-1: config 0 descriptor?? [ 180.520691][ T24] gspca_main: spca500-2.14.0 probing 046d:0900 [ 180.734471][ T24] gspca_spca500: reg write: error -71 [ 180.736460][ T24] gspca_spca500: reg write: error -71 [ 180.737376][ T24] gspca_spca500: reg write: error -71 [ 180.737734][ T24] gspca_spca500: reg write: error -71 [ 180.739218][ T24] gspca_spca500: reg write: error -71 [ 180.911735][ T24] gspca_spca500: reg write: error -71 [ 180.927526][ T24] gspca_spca500: reg write: error -71 [ 180.935758][ T24] gspca_spca500: reg write: error -71 [ 180.947262][ T24] gspca_spca500: reg write: error -71 [ 180.958757][ T24] gspca_spca500: reg write: error -71 [ 180.971440][ T24] gspca_spca500: reg write: error -71 [ 180.996923][ T24] gspca_spca500: reg write: error -71 [ 181.021111][ T24] gspca_spca500: reg write: error -71 [ 181.053570][ T24] gspca_spca500: reg write: error -71 [ 181.064930][ T24] usb 1-1: USB disconnect, device number 24 [ 181.248511][ T7287] i2c i2c-0: Invalid block write size 43 [ 181.330601][ T5900] usb 5-1: USB disconnect, device number 20 [ 181.433267][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 182.229252][ T5900] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 182.279421][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 182.409400][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 182.434405][ T5900] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 182.443762][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 182.462671][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.474306][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 182.489584][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 182.533179][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 182.545601][ T5900] usb 5-1: config 0 descriptor?? [ 182.566724][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 182.588257][ T9] usb 4-1: Product: syz [ 182.592561][ T9] usb 4-1: Manufacturer: syz [ 182.597243][ T9] usb 4-1: SerialNumber: syz [ 182.618966][ T9] usb 4-1: config 0 descriptor?? [ 182.637111][ T7306] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 182.648516][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 182.665936][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 182.767003][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.807117][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.831633][ T9] usb 5-1: USB disconnect, device number 21 [ 182.834285][ T7324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.476'. [ 182.848746][ T7325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.475'. [ 182.988027][ T24] usb 4-1: USB disconnect, device number 23 [ 184.059228][ T5951] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 184.115577][ T7347] xt_CT: No such helper "syz0" [ 184.210898][ T7353] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 184.235221][ T5951] usb 5-1: config 0 has no interfaces? [ 184.241241][ T5951] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 184.279170][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.330039][ T5951] usb 5-1: config 0 descriptor?? [ 184.531726][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 184.573269][ T7343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 184.630403][ T7343] vlan3: entered promiscuous mode [ 184.645656][ T7343] bridge0: entered promiscuous mode [ 185.119353][ T5900] usb 5-1: USB disconnect, device number 22 [ 185.699586][ T7379] netlink: 'syz.0.494': attribute type 12 has an invalid length. [ 185.710586][ T7379] netlink: 'syz.0.494': attribute type 29 has an invalid length. [ 185.754183][ T7379] netlink: 148 bytes leftover after parsing attributes in process `syz.0.494'. [ 185.780531][ T7379] netlink: 'syz.0.494': attribute type 1 has an invalid length. [ 185.839569][ T7379] netlink: 'syz.0.494': attribute type 2 has an invalid length. [ 185.852101][ T7379] netlink: 39 bytes leftover after parsing attributes in process `syz.0.494'. [ 186.079856][ T5951] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 186.083495][ T7386] xt_bpf: check failed: parse error [ 186.293489][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 186.447633][ T5951] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 186.477517][ T5951] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 186.494985][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 186.528607][ T5951] usb 4-1: Product: syz [ 186.544384][ T5951] usb 4-1: Manufacturer: syz [ 186.550316][ T7392] netlink: 'syz.0.498': attribute type 4 has an invalid length. [ 186.560487][ T5951] usb 4-1: SerialNumber: syz [ 186.587962][ T5951] usb 4-1: config 0 descriptor?? [ 186.596398][ T7381] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 186.605141][ T5951] hub 4-1:0.0: bad descriptor, ignoring hub [ 186.611170][ T5951] hub 4-1:0.0: probe with driver hub failed with error -5 [ 186.969554][ T9] usb 4-1: USB disconnect, device number 24 [ 187.093530][ T7399] syz_tun: entered allmulticast mode [ 187.104852][ T7398] syz_tun: left allmulticast mode [ 187.667998][ T7407] loop8: detected capacity change from 0 to 7 [ 187.708908][ T7407] Dev loop8: unable to read RDB block 7 [ 187.720996][ T7407] loop8: unable to read partition table [ 187.735273][ T7407] loop8: partition table beyond EOD, truncated [ 187.751888][ T7407] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 187.780296][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.507'. [ 188.128397][ T7424] netlink: 'syz.3.510': attribute type 1 has an invalid length. [ 188.272203][ T7429] xt_TCPMSS: Only works on TCP SYN packets [ 188.380978][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 188.468052][ T7421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.515650][ T7421] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 188.568391][ T7421] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 188.593960][ T7421] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.620003][ T7421] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 188.669612][ T7421] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 188.718436][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 188.758675][ T7421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.782143][ T7421] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 188.826842][ T7421] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 188.898345][ T7421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.916445][ T7421] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 189.056231][ T7421] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 189.058091][ T7449] syz_tun: entered allmulticast mode [ 189.147956][ T7448] syz_tun: left allmulticast mode [ 189.178444][ T7421] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 189.194845][ T7421] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 189.312740][ T7421] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 189.375750][ T7457] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 189.444684][ T7460] netlink: 'syz.3.519': attribute type 4 has an invalid length. [ 189.639469][ T5921] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 189.839130][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 189.849018][ T5921] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 189.869264][ T5921] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 189.879257][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 189.971826][ T5921] usb 2-1: Product: syz [ 190.109198][ T5921] usb 2-1: Manufacturer: syz [ 190.125572][ T5921] usb 2-1: SerialNumber: syz [ 190.170163][ T5921] usb 2-1: config 0 descriptor?? [ 190.199753][ T7454] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.213170][ T5921] hub 2-1:0.0: bad descriptor, ignoring hub [ 190.228960][ T5921] hub 2-1:0.0: probe with driver hub failed with error -5 [ 190.248353][ T7478] loop6: detected capacity change from 0 to 7 [ 190.262075][ T7478] Dev loop6: unable to read RDB block 7 [ 190.300752][ T7478] loop6: AHDI p4 [ 190.335675][ T7478] loop6: partition table partially beyond EOD, truncated [ 190.487941][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.519835][ T5900] usb 2-1: USB disconnect, device number 22 [ 190.642366][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.839499][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.862375][ T7482] loop6: detected capacity change from 0 to 524287999 [ 190.929349][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.280390][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 191.635475][ T30] kauditd_printk_skb: 232 callbacks suppressed [ 191.635493][ T30] audit: type=1326 audit(1750624684.795:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 191.641194][ T7490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.643731][ T30] audit: type=1326 audit(1750624684.805:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 191.754331][ T7490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.870359][ T9] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 191.920574][ T30] audit: type=1326 audit(1750624684.895:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f41558 code=0x7ffc0000 [ 192.069345][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 192.104798][ T30] audit: type=1326 audit(1750624684.895:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 192.310560][ T30] audit: type=1326 audit(1750624684.895:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f41558 code=0x7ffc0000 [ 192.334941][ T30] audit: type=1326 audit(1750624684.895:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f41558 code=0x7ffc0000 [ 192.356955][ T30] audit: type=1326 audit(1750624684.895:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f41558 code=0x7ffc0000 [ 192.379688][ T30] audit: type=1326 audit(1750624684.925:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f41558 code=0x7ffc0000 [ 192.414652][ T9] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 192.432647][ T30] audit: type=1326 audit(1750624684.925:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f41558 code=0x7ffc0000 [ 192.530012][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.559855][ T30] audit: type=1326 audit(1750624684.925:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f41558 code=0x7ffc0000 [ 192.619256][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 192.639553][ T9] usb usb2-port1: attempt power cycle [ 192.692701][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.851215][ T5951] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 192.853560][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.981309][ T5951] usb 3-1: device descriptor read/64, error -71 [ 193.016339][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.041434][ T9] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 193.091660][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 193.230266][ T9] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 193.231458][ T5951] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 193.364074][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 193.392367][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 193.419272][ T5951] usb 3-1: device descriptor read/64, error -71 [ 193.423143][ T9] usb usb2-port1: unable to enumerate USB device [ 193.529425][ T5951] usb usb3-port1: attempt power cycle [ 194.215698][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.222857][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.289306][ T5951] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 194.353043][ T5951] usb 3-1: device descriptor read/8, error -71 [ 194.383528][ T7514] capability: warning: `syz.3.533' uses 32-bit capabilities (legacy support in use) [ 194.599270][ T5951] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 194.610107][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.678057][ T5951] usb 3-1: device descriptor read/8, error -71 [ 194.773191][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.791844][ T5951] usb usb3-port1: unable to enumerate USB device [ 194.929553][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.089171][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.359614][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 195.409467][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 195.439231][ T5844] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 195.519784][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 195.527607][ T24] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 195.542807][ T7530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.552674][ T24] usb 2-1: config 0 has no interface number 0 [ 195.552723][ T24] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 195.555766][ T24] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 195.592253][ T7530] netlink: 'syz.3.540': attribute type 10 has an invalid length. [ 195.594955][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.608222][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 195.615149][ T5844] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 195.620786][ T24] usb 2-1: Product: syz [ 195.632893][ T5844] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 195.634579][ T24] usb 2-1: Manufacturer: syz [ 195.648168][ T24] usb 2-1: SerialNumber: syz [ 195.650289][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 195.653104][ T5951] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 195.684552][ T24] usb 2-1: config 0 descriptor?? [ 195.694186][ T5844] usb 1-1: Product: syz [ 195.705578][ T5844] usb 1-1: Manufacturer: syz [ 195.711383][ T5844] usb 1-1: SerialNumber: syz [ 195.726109][ T5844] usb 1-1: config 0 descriptor?? [ 195.735165][ T7524] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 195.751733][ T5844] hub 1-1:0.0: bad descriptor, ignoring hub [ 195.757778][ T5844] hub 1-1:0.0: probe with driver hub failed with error -5 [ 195.889443][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 195.901969][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.918108][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.932309][ T5951] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.945940][ T5951] usb 5-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 195.961980][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.990204][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 196.005390][ T24] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 196.013242][ T5951] usb 5-1: config 0 descriptor?? [ 196.022864][ T24] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 196.067622][ T5921] usb 1-1: USB disconnect, device number 25 [ 196.127956][ T24] usb 2-1: USB disconnect, device number 27 [ 196.690277][ T5951] hid-multitouch 0003:045E:9994.0007: unknown main item tag 0x2 [ 196.732154][ T5951] hid-multitouch 0003:045E:9994.0007: unknown main item tag 0x0 [ 196.780822][ T5951] hid-multitouch 0003:045E:9994.0007: unknown main item tag 0x0 [ 196.889427][ T5951] hid-multitouch 0003:045E:9994.0007: unknown main item tag 0x0 [ 196.925921][ T5951] hid-multitouch 0003:045E:9994.0007: unknown main item tag 0x0 [ 196.929559][ T5900] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 196.943358][ T7546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.539'. [ 196.959346][ T5951] hid-multitouch 0003:045E:9994.0007: unknown main item tag 0x0 [ 197.022334][ T5951] hid-multitouch 0003:045E:9994.0007: unknown main item tag 0x0 [ 197.079139][ T5951] hid-multitouch 0003:045E:9994.0007: unknown main item tag 0x0 [ 197.137948][ T5951] hid-multitouch 0003:045E:9994.0007: unknown main item tag 0x0 [ 197.154231][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.196962][ T5951] hid-multitouch 0003:045E:9994.0007: unknown main item tag 0x0 [ 197.204286][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.255169][ T5951] hid-multitouch 0003:045E:9994.0007: unknown main item tag 0x0 [ 197.258584][ T5900] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 197.297322][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.297838][ T5951] hid-multitouch 0003:045E:9994.0007: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.4-1/input0 [ 197.324681][ T5900] usb 4-1: config 0 descriptor?? [ 197.429306][ T5844] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 197.511134][ T7557] veth0_to_team: entered promiscuous mode [ 197.517065][ T7557] veth0_to_team: entered allmulticast mode [ 197.589202][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 197.596235][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.614560][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.780470][ T5900] glorious 0003:258A:0036.0008: unknown main item tag 0x1 [ 197.898636][ T7563] i2c i2c-0: Invalid block write size 43 [ 197.986923][ T5844] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 198.062021][ T5900] glorious 0003:258A:0036.0008: hidraw1: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.3-1/input0 [ 198.083370][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.125080][ T5844] usb 3-1: config 0 descriptor?? [ 198.439816][ T5900] usb 5-1: USB disconnect, device number 23 [ 198.547330][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 198.571996][ T7567] netlink: 44 bytes leftover after parsing attributes in process `syz.4.550'. [ 198.856073][ T5844] usbhid 3-1:0.0: can't add hid device: -71 [ 198.862675][ T5844] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 198.893525][ T5844] usb 3-1: USB disconnect, device number 23 [ 199.162104][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 199.423517][ T5844] usb 4-1: USB disconnect, device number 25 [ 199.589633][ T5900] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 199.748919][ T7575] xt_CT: No such helper "syz0" [ 199.785049][ T5900] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 199.819186][ T5900] usb 1-1: config 0 has no interface number 0 [ 199.843730][ T5900] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 199.855468][ T5900] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 199.876457][ T5900] usb 1-1: config 0 interface 255 has no altsetting 0 [ 199.892003][ T5900] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 199.907565][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.933418][ T5900] usb 1-1: config 0 descriptor?? [ 199.944553][ T5900] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 200.471147][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 200.799521][ T5900] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 200.991380][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 201.057043][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.089135][ T5900] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.128940][ T5900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.172934][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.199121][ T5900] usb 4-1: Product: syz [ 201.203345][ T5900] usb 4-1: Manufacturer: syz [ 201.208991][ T5900] usb 4-1: SerialNumber: syz [ 201.329910][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'. [ 201.389576][ T7610] netlink: 44 bytes leftover after parsing attributes in process `syz.1.564'. [ 201.640956][ T5844] usb 1-1: USB disconnect, device number 26 [ 201.658657][ T7614] netlink: 'syz.4.566': attribute type 4 has an invalid length. [ 201.899664][ T7619] loop6: detected capacity change from 0 to 524287999 [ 202.302042][ T5900] cdc_ncm 4-1:1.0: bind() failure [ 202.327570][ T5900] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 202.350305][ T5900] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 202.378786][ T5900] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 202.413667][ T5900] usb 4-1: USB disconnect, device number 26 [ 202.453478][ T5951] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 202.629223][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 202.655637][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.697449][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.744093][ T7628] netlink: 'syz.0.571': attribute type 4 has an invalid length. [ 202.751943][ T7628] netlink: 17 bytes leftover after parsing attributes in process `syz.0.571'. [ 202.849956][ T5951] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 202.874542][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.903704][ T5951] usb 2-1: config 0 descriptor?? [ 203.069212][ T2150] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 203.361472][ T2150] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 203.372260][ T2150] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 203.386198][ T2150] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.389382][ T5900] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 203.409036][ T2150] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 203.419250][ T2150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.442468][ T2150] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.468627][ T2150] usb 1-1: invalid MIDI out EP 0 [ 203.549553][ T7624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.563891][ T7624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.596825][ T5900] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.627651][ T5900] usb 4-1: config 0 has no interface number 0 [ 203.671736][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.702799][ T5900] usb 4-1: too many endpoints for config 0 interface 1 altsetting 130: 169, using maximum allowed: 30 [ 203.752791][ T5900] usb 4-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 169 [ 203.799921][ T2150] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 203.812126][ T5900] usb 4-1: config 0 interface 1 has no altsetting 0 [ 203.845155][ T5900] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 203.900605][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.951301][ T5900] usb 4-1: config 0 descriptor?? [ 204.190519][ T7630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.200678][ T7630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.360170][ T5900] usb 4-1: string descriptor 0 read error: -71 [ 204.373954][ T5900] usb 4-1: selecting invalid altsetting 1 [ 204.394047][ T5900] dvb_ttusb_budget: ttusb_init_controller: error [ 204.417852][ T5900] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 204.431058][ T5951] usbhid 2-1:0.0: can't add hid device: -71 [ 204.440299][ T5951] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 204.461611][ T5951] usb 2-1: USB disconnect, device number 28 [ 204.696357][ T7658] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 204.703483][ T5900] DVB: Unable to find symbol cx22700_attach() [ 204.722918][ T7658] team0: Port device batadv2 added [ 204.867855][ T5900] DVB: Unable to find symbol tda10046_attach() [ 204.904026][ T5900] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 204.961173][ T5900] usb 4-1: USB disconnect, device number 27 [ 205.027833][ T7666] FAULT_INJECTION: forcing a failure. [ 205.027833][ T7666] name failslab, interval 1, probability 0, space 0, times 1 [ 205.099664][ T7666] CPU: 1 UID: 0 PID: 7666 Comm: syz.4.583 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 205.099695][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.099709][ T7666] Call Trace: [ 205.099717][ T7666] [ 205.099726][ T7666] dump_stack_lvl+0x189/0x250 [ 205.099776][ T7666] ? __pfx____ratelimit+0x10/0x10 [ 205.099808][ T7666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.099841][ T7666] ? __pfx__printk+0x10/0x10 [ 205.099879][ T7666] should_fail_ex+0x414/0x560 [ 205.099911][ T7666] should_failslab+0xa8/0x100 [ 205.099936][ T7666] kmem_cache_alloc_noprof+0x73/0x3c0 [ 205.099969][ T7666] ? skb_clone+0x212/0x3a0 [ 205.100002][ T7666] skb_clone+0x212/0x3a0 [ 205.100033][ T7666] __netlink_deliver_tap+0x404/0x850 [ 205.100071][ T7666] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.100097][ T7666] netlink_deliver_tap+0x19c/0x1b0 [ 205.100123][ T7666] netlink_sendskb+0x68/0x140 [ 205.100146][ T7666] netlink_rcv_skb+0x28c/0x470 [ 205.100170][ T7666] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.100194][ T7666] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.100232][ T7666] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.100255][ T7666] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.100285][ T7666] netlink_unicast+0x75b/0x8d0 [ 205.100317][ T7666] netlink_sendmsg+0x805/0xb30 [ 205.100352][ T7666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.100380][ T7666] ? __import_iovec+0x5d4/0x7f0 [ 205.100417][ T7666] ? aa_sock_msg_perm+0x94/0x160 [ 205.100446][ T7666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.100474][ T7666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.100513][ T7666] __sock_sendmsg+0x21c/0x270 [ 205.100548][ T7666] ____sys_sendmsg+0x505/0x830 [ 205.100580][ T7666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.100643][ T7666] ___sys_sendmsg+0x21f/0x2a0 [ 205.100698][ T7666] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.100763][ T7666] ? __fget_files+0x2a/0x420 [ 205.100785][ T7666] ? __fget_files+0x3a0/0x420 [ 205.100820][ T7666] __sys_sendmsg+0x164/0x220 [ 205.100848][ T7666] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.100890][ T7666] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 205.100943][ T7666] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.100977][ T7666] __do_fast_syscall_32+0xb6/0x2b0 [ 205.100998][ T7666] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.101045][ T7666] do_fast_syscall_32+0x34/0x80 [ 205.101065][ T7666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.101090][ T7666] RIP: 0023:0xf7ff8539 [ 205.101111][ T7666] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 205.101130][ T7666] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 205.101150][ T7666] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 205.101165][ T7666] RDX: 0000000004004850 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.101178][ T7666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.101190][ T7666] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 205.101203][ T7666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.101233][ T7666] [ 205.414486][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.039324][ T5844] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 206.088715][ T5939] usb 1-1: USB disconnect, device number 27 [ 206.226687][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 206.231382][ T7628] delete_channel: no stack [ 206.355435][ T5844] usb 2-1: New USB device found, idVendor=1547, idProduct=0201, bcdDevice=11.64 [ 206.365280][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.384616][ T5844] usb 2-1: Product: syz [ 206.390106][ T5951] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 206.393846][ T5844] usb 2-1: Manufacturer: syz [ 206.442152][ T5844] usb 2-1: SerialNumber: syz [ 206.459791][ T7695] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 206.517629][ T5844] usb 2-1: config 0 descriptor?? [ 206.568884][ T5951] usb 4-1: config 0 has no interfaces? [ 206.574875][ T5951] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 206.593373][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.627756][ T5951] usb 4-1: config 0 descriptor?? [ 206.809640][ T7701] input: syz0 as /devices/virtual/input/input15 [ 206.865453][ T7686] vlan5: entered promiscuous mode [ 207.114959][ T5951] usb 4-1: USB disconnect, device number 28 [ 207.929486][ T2150] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 208.260152][ T2150] usb 3-1: config 0 has no interfaces? [ 208.275848][ T7711] loop6: detected capacity change from 0 to 524287999 [ 208.327172][ T2150] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 208.348213][ T2150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.382188][ T2150] usb 3-1: Product: syz [ 208.399317][ T2150] usb 3-1: Manufacturer: syz [ 208.412785][ T2150] usb 3-1: SerialNumber: syz [ 208.437429][ T2150] usb 3-1: config 0 descriptor?? [ 208.479716][ T5951] usb 2-1: USB disconnect, device number 29 [ 209.779728][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.854476][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.069297][ T2150] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 210.141287][ T7706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.171476][ T7706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.225109][ T2150] usb 2-1: device descriptor read/64, error -71 [ 210.529460][ T2150] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 210.669180][ T2150] usb 2-1: device descriptor read/64, error -71 [ 210.800846][ T2150] usb usb2-port1: attempt power cycle [ 210.871310][ T5921] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 211.059448][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 211.067694][ T5921] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 211.081661][ T5921] usb 5-1: config 0 has no interface number 0 [ 211.092671][ T5921] usb 5-1: config 0 interface 89 has no altsetting 0 [ 211.107632][ T5921] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 211.121995][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.130586][ T5921] usb 5-1: Product: syz [ 211.134968][ T5921] usb 5-1: Manufacturer: syz [ 211.231056][ T2150] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 211.269797][ T5939] usb 3-1: USB disconnect, device number 24 [ 211.324834][ T2150] usb 2-1: device descriptor read/8, error -71 [ 211.342544][ T5921] usb 5-1: SerialNumber: syz [ 211.370407][ T5921] usb 5-1: config 0 descriptor?? [ 211.419197][ T7745] vlan3: entered promiscuous mode [ 211.424290][ T7745] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 211.476604][ T7745] team0: Port device vlan3 added [ 211.578000][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 211.589317][ T2150] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 211.599164][ T7737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.639653][ T7737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.650313][ T2150] usb 2-1: device descriptor read/8, error -71 [ 211.691178][ T7737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.729661][ T7737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.783256][ T2150] usb usb2-port1: unable to enumerate USB device [ 211.783998][ T5939] usb 5-1: USB disconnect, device number 24 [ 212.088115][ T7755] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 212.618709][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 212.739188][ T2150] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 212.891386][ T2150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.908951][ T2150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.933024][ T2150] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 212.948290][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.974204][ T2150] usb 2-1: config 0 descriptor?? [ 213.049490][ T5921] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 213.202400][ T2150] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 213.220794][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 213.229330][ T2150] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 213.241530][ T5921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 213.280757][ T2150] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 213.294244][ T5921] usb 5-1: config 9 has an invalid interface number: 243 but max is 2 [ 213.394952][ T5921] usb 5-1: config 9 has an invalid interface number: 243 but max is 2 [ 213.415872][ T5921] usb 5-1: config 9 has an invalid interface number: 35 but max is 2 [ 213.428036][ T5921] usb 5-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 213.512493][ T5921] usb 5-1: config 9 has no interface number 0 [ 213.523010][ T5921] usb 5-1: config 9 has no interface number 1 [ 213.531179][ T5921] usb 5-1: config 9 interface 35 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 64 [ 213.541464][ T5921] usb 5-1: config 9 interface 243 has no altsetting 0 [ 213.555107][ T5921] usb 5-1: config 9 interface 243 has no altsetting 1 [ 213.567634][ T5921] usb 5-1: config 9 interface 35 has no altsetting 0 [ 213.588976][ T5921] usb 5-1: New USB device found, idVendor=12d1, idProduct=6456, bcdDevice=89.a6 [ 213.600925][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.612374][ T5921] usb 5-1: Product: syz [ 213.630294][ T5921] usb 5-1: Manufacturer: syz [ 213.658635][ T5921] usb 5-1: SerialNumber: syz [ 213.669509][ T2150] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 213.710585][ T2150] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 213.856555][ T2150] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -71 [ 213.929468][ T2150] usb 2-1: USB disconnect, device number 34 [ 213.999318][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 214.036689][ T7795] syz_tun: entered allmulticast mode [ 214.046501][ T7794] syz_tun: left allmulticast mode [ 214.189390][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 214.200673][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.214937][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.225499][ T24] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 214.257501][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.335856][ T24] usb 3-1: config 0 descriptor?? [ 214.399330][ T2150] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 214.496965][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'. [ 214.565721][ T2150] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.577023][ T5921] option 5-1:9.243: GSM modem (1-port) converter detected [ 214.596589][ T2150] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 214.625338][ T5921] usb 5-1: USB disconnect, device number 25 [ 214.631456][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.674250][ T5921] option 5-1:9.243: device disconnected [ 214.782078][ T2150] usb 2-1: config 0 descriptor?? [ 214.820079][ T2150] pwc: Askey VC010 type 2 USB webcam detected. [ 215.196137][ T2150] pwc: recv_control_msg error -32 req 02 val 2b00 [ 215.228114][ T2150] pwc: recv_control_msg error -32 req 02 val 2700 [ 215.256432][ T2150] pwc: recv_control_msg error -32 req 02 val 2c00 [ 215.269471][ T2150] pwc: recv_control_msg error -32 req 04 val 1000 [ 215.276816][ T2150] pwc: recv_control_msg error -32 req 04 val 1300 [ 215.288659][ T2150] pwc: recv_control_msg error -32 req 04 val 1400 [ 215.296010][ T2150] pwc: recv_control_msg error -32 req 02 val 2000 [ 215.402384][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 215.504389][ T2150] pwc: recv_control_msg error -32 req 04 val 1500 [ 215.512554][ T2150] pwc: recv_control_msg error -32 req 02 val 2500 [ 215.522189][ T2150] pwc: recv_control_msg error -32 req 02 val 2400 [ 215.587439][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 215.757184][ T2150] pwc: recv_control_msg error -32 req 02 val 2900 [ 215.764966][ T2150] pwc: recv_control_msg error -32 req 02 val 2800 [ 215.947730][ T5939] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 215.984411][ T2150] pwc: recv_control_msg error -71 req 04 val 1200 [ 216.014453][ T2150] pwc: Registered as video103. [ 216.030485][ T2150] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 216.040422][ T5921] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 216.095544][ T2150] usb 2-1: USB disconnect, device number 35 [ 216.111877][ T7830] loop6: detected capacity change from 0 to 524287999 [ 216.203248][ T5921] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 216.214017][ T5921] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 216.242217][ T5921] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.255737][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.666073][ T7834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.708608][ T7834] netlink: 'syz.1.640': attribute type 10 has an invalid length. [ 216.769434][ T5939] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 216.932433][ T7840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.950325][ T7840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.159281][ T5939] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 217.180793][ T2150] usb 3-1: USB disconnect, device number 25 [ 217.306189][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 217.310794][ T7849] syz_tun: entered allmulticast mode [ 217.345493][ T5939] usb 1-1: device descriptor read/64, error -71 [ 217.599176][ T5939] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 217.720215][ T5844] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 217.740225][ T5939] usb 1-1: device descriptor read/64, error -71 [ 217.850161][ T5939] usb usb1-port1: attempt power cycle [ 217.883505][ T5844] usb 2-1: config 0 has no interfaces? [ 217.900921][ T5844] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 217.943901][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.083970][ T7843] syz_tun: left allmulticast mode [ 218.105312][ T5844] usb 2-1: config 0 descriptor?? [ 218.199432][ T5939] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 218.250016][ T5939] usb 1-1: device descriptor read/8, error -71 [ 218.334924][ T7852] bridge0: entered promiscuous mode [ 218.340660][ T7852] vlan2: entered promiscuous mode [ 218.485641][ T5900] usb 2-1: USB disconnect, device number 36 [ 218.491933][ T5939] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 218.530634][ T5939] usb 1-1: device descriptor read/8, error -71 [ 218.659769][ T5939] usb usb1-port1: unable to enumerate USB device [ 218.689252][ T5939] usb 5-1: USB disconnect, device number 26 [ 218.807539][ T7873] FAULT_INJECTION: forcing a failure. [ 218.807539][ T7873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.829722][ T7873] CPU: 1 UID: 0 PID: 7873 Comm: syz.3.649 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 218.829747][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.829758][ T7873] Call Trace: [ 218.829766][ T7873] [ 218.829774][ T7873] dump_stack_lvl+0x189/0x250 [ 218.829808][ T7873] ? __pfx____ratelimit+0x10/0x10 [ 218.829836][ T7873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.829864][ T7873] ? __pfx__printk+0x10/0x10 [ 218.829913][ T7873] should_fail_ex+0x414/0x560 [ 218.829943][ T7873] _copy_to_user+0x31/0xb0 [ 218.829965][ T7873] simple_read_from_buffer+0xe1/0x170 [ 218.829990][ T7873] proc_fail_nth_read+0x1df/0x250 [ 218.830018][ T7873] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.830044][ T7873] ? rw_verify_area+0x258/0x650 [ 218.830074][ T7873] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.830099][ T7873] vfs_read+0x200/0x980 [ 218.830134][ T7873] ? __pfx___mutex_lock+0x10/0x10 [ 218.830153][ T7873] ? __pfx_vfs_read+0x10/0x10 [ 218.830185][ T7873] ? __fget_files+0x2a/0x420 [ 218.830211][ T7873] ? __fget_files+0x3a0/0x420 [ 218.830231][ T7873] ? __fget_files+0x2a/0x420 [ 218.830261][ T7873] ksys_read+0x145/0x250 [ 218.830292][ T7873] ? __pfx_ksys_read+0x10/0x10 [ 218.830321][ T7873] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 218.830350][ T7873] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.830379][ T7873] __do_fast_syscall_32+0xb6/0x2b0 [ 218.830397][ T7873] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.830428][ T7873] do_fast_syscall_32+0x34/0x80 [ 218.830445][ T7873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.830468][ T7873] RIP: 0023:0xf70ae539 [ 218.830507][ T7873] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 218.830525][ T7873] RSP: 002b:00000000f509e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 218.830545][ T7873] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f509e620 [ 218.830559][ T7873] RDX: 000000000000000f RSI: 00000000f7412ff4 RDI: 0000000000000000 [ 218.830571][ T7873] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 218.830582][ T7873] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 218.830594][ T7873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.830631][ T7873] [ 219.209382][ T7877] loop6: detected capacity change from 0 to 524287999 [ 219.490956][ T7885] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.656'. [ 219.695483][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 220.095589][ T7897] --map-set only usable from mangle table [ 220.649223][ T5939] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 220.815091][ T5939] usb 2-1: config 0 has no interfaces? [ 220.836676][ T5939] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 220.852255][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.862394][ T7909] netlink: 'syz.4.664': attribute type 7 has an invalid length. [ 220.892446][ T5939] usb 2-1: Product: syz [ 220.896664][ T5939] usb 2-1: Manufacturer: syz [ 220.928169][ T5939] usb 2-1: SerialNumber: syz [ 220.939849][ T5939] usb 2-1: config 0 descriptor?? [ 221.501013][ T5951] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 221.651028][ T5900] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 221.769311][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 221.778875][ T5951] usb 5-1: unable to get BOS descriptor or descriptor too short [ 221.788241][ T5951] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 221.797300][ T5951] usb 5-1: can't read configurations, error -71 [ 221.820624][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.832301][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.863510][ T5900] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 221.966721][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.981115][ T5900] usb 1-1: config 0 descriptor?? [ 222.218583][ T5900] usbhid 1-1:0.0: can't add hid device: -71 [ 222.225860][ T5900] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 222.244485][ T5900] usb 1-1: USB disconnect, device number 32 [ 222.563316][ T7935] netlink: 'syz.2.673': attribute type 27 has an invalid length. [ 222.738489][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.676'. [ 222.768823][ T7935] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.777280][ T7935] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.941708][ T5900] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 223.054986][ T2150] usb 2-1: USB disconnect, device number 37 [ 223.155592][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 223.186335][ T5900] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 223.195423][ T5900] usb 3-1: config 0 has no interface number 0 [ 223.213765][ T5900] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 223.263493][ T7955] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 223.308785][ T5900] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 223.349281][ T5951] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 223.387272][ T5900] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 223.411377][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.429924][ T7935] batadv_slave_0: left promiscuous mode [ 223.453912][ T7935] batadv_slave_0: left allmulticast mode [ 223.474512][ T5900] usb 3-1: Product: syz [ 223.485376][ T5900] usb 3-1: Manufacturer: syz [ 223.496255][ T5900] usb 3-1: SerialNumber: syz [ 223.508880][ T7935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.542141][ T5900] usb 3-1: config 0 descriptor?? [ 223.547910][ T7939] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 223.564050][ T5951] usb 4-1: config 0 has no interfaces? [ 223.590275][ T5951] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 223.612820][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.622701][ T5900] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 223.632781][ T5951] usb 4-1: Product: syz [ 223.648219][ T5951] usb 4-1: Manufacturer: syz [ 223.690290][ T5951] usb 4-1: SerialNumber: syz [ 223.776186][ T5951] usb 4-1: config 0 descriptor?? [ 223.799810][ T7935] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.843884][ T7939] ipt_REJECT: TCP_RESET invalid for non-tcp [ 223.852775][ T7935] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.865170][ T7935] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.879296][ T7935] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.035282][ T7950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.046703][ T7950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.062535][ T7950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.072576][ T7950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.092588][ T7950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.101593][ T7950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.208809][ T7935] vlan2: left promiscuous mode [ 224.240206][ T7935] bridge0: left promiscuous mode [ 224.296786][ T7935] vlan3: left promiscuous mode [ 224.304305][ T7935] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 224.342426][ T7961] binder: BINDER_SET_CONTEXT_MGR already set [ 224.348635][ T7961] binder: 7959:7961 ioctl 4018620d 800000c0 returned -16 [ 224.360004][ T7960] binder: BINDER_SET_CONTEXT_MGR already set [ 224.366179][ T7961] binder: BINDER_SET_CONTEXT_MGR already set [ 224.372747][ T7960] binder: 7959:7960 ioctl 4018620d 80000040 returned -16 [ 224.381496][ T7961] binder: 7959:7961 ioctl 4018620d 80000040 returned -16 [ 224.388958][ T7960] binder: 7959:7960 ioctl c0306201 800003c0 returned -22 [ 224.604900][ T5939] usb 3-1: USB disconnect, device number 26 [ 224.854875][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 225.193599][ T5939] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 225.917388][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.938530][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.159174][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 226.267030][ T7979] xt_CT: No such helper "syz0" [ 226.332002][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 226.365084][ T5951] usb 4-1: USB disconnect, device number 29 [ 226.441167][ T9] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 226.471814][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.497693][ T9] usb 1-1: Product: syz [ 226.512987][ T9] usb 1-1: Manufacturer: syz [ 226.517622][ T9] usb 1-1: SerialNumber: syz [ 226.545063][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 226.555744][ T9] usb 1-1: config 0 descriptor?? [ 226.625350][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'. [ 226.657184][ T7960] syz.1.681 (7960): drop_caches: 2 [ 226.781306][ T9] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 226.799285][ T9] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 226.816435][ T9] usb 1-1: USB disconnect, device number 33 [ 226.824721][ T7989] syz_tun: entered allmulticast mode [ 226.841969][ T7988] syz_tun: left allmulticast mode [ 226.889722][ T5951] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 227.042890][ T7996] netlink: 'syz.2.695': attribute type 4 has an invalid length. [ 227.079264][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 227.086157][ T5951] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 227.105276][ T5951] usb 4-1: config 179 has no interface number 0 [ 227.119123][ T5951] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 227.153732][ T5951] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 227.206896][ T5951] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 227.239195][ T5951] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 227.272718][ T5951] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 227.336741][ T5951] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 227.367795][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.445271][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 227.454522][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 227.489368][ T7984] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 227.499277][ T5921] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 227.638306][ T8011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.679560][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 227.688370][ T5921] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 227.703648][ T5921] usb 5-1: config 0 has no interface number 0 [ 227.711496][ T8011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.723262][ T5921] usb 5-1: config 0 interface 89 has no altsetting 0 [ 227.848053][ T5921] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 227.872601][ T5951] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 227.899472][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.928454][ T5921] usb 5-1: Product: syz [ 227.934456][ T5921] usb 5-1: Manufacturer: syz [ 227.939303][ T5921] usb 5-1: SerialNumber: syz [ 227.994156][ T5921] usb 5-1: config 0 descriptor?? [ 228.294187][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.498375][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 228.498557][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.530602][ T5921] usb 4-1: USB disconnect, device number 30 [ 228.536747][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 228.536793][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 228.608312][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.640079][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.791773][ T9] usb 5-1: USB disconnect, device number 29 [ 228.901659][ T8030] syz.2.706: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 228.947416][ T8039] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 228.948404][ T8030] CPU: 0 UID: 0 PID: 8030 Comm: syz.2.706 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 228.948440][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.948470][ T8030] Call Trace: [ 228.948482][ T8030] [ 228.948491][ T8030] dump_stack_lvl+0x189/0x250 [ 228.948539][ T8030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.948576][ T8030] ? __pfx__printk+0x10/0x10 [ 228.948603][ T8030] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 228.948629][ T8030] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 228.948657][ T8030] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 228.948688][ T8030] warn_alloc+0x214/0x310 [ 228.948723][ T8030] ? __pfx_warn_alloc+0x10/0x10 [ 228.948761][ T8030] ? __get_vm_area_node+0x28f/0x300 [ 228.948787][ T8030] ? kvm_set_memslot+0x4e2/0x1310 [ 228.948824][ T8030] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 228.948879][ T8030] ? kvm_set_memslot+0x3e/0x1310 [ 228.948915][ T8030] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 228.948957][ T8030] ? kvm_set_memslot+0x4e2/0x1310 [ 228.948989][ T8030] __vmalloc_noprof+0xb1/0xf0 [ 228.949014][ T8030] ? kvm_set_memslot+0x4e2/0x1310 [ 228.949055][ T8030] kvm_set_memslot+0x4e2/0x1310 [ 228.949093][ T8030] ? kvm_set_memory_region+0x775/0xc00 [ 228.949135][ T8030] kvm_set_memory_region+0x9bb/0xc00 [ 228.949187][ T8030] kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 228.949225][ T8030] kvm_vm_ioctl+0x957/0xc60 [ 228.949262][ T8030] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 228.949295][ T8030] ? kasan_save_track+0x4f/0x80 [ 228.949329][ T8030] ? kasan_save_track+0x3e/0x80 [ 228.949359][ T8030] ? kasan_save_free_info+0x46/0x50 [ 228.949389][ T8030] ? __kasan_slab_free+0x62/0x70 [ 228.949408][ T8030] ? kfree+0x18e/0x440 [ 228.949450][ T8030] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 228.949476][ T8030] ? security_file_ioctl_compat+0xcb/0x2d0 [ 228.949501][ T8030] ? __ia32_compat_sys_ioctl+0x128/0x840 [ 228.949533][ T8030] ? __do_fast_syscall_32+0xb6/0x2b0 [ 228.949555][ T8030] ? do_fast_syscall_32+0x34/0x80 [ 228.949574][ T8030] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.949633][ T8030] ? do_vfs_ioctl+0x12ba/0x1990 [ 228.949671][ T8030] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 228.949714][ T8030] ? kasan_quarantine_put+0xdd/0x220 [ 228.949761][ T8030] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 228.949801][ T8030] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 228.949826][ T8030] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 228.949851][ T8030] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 228.949877][ T8030] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 228.949922][ T8030] ? __lock_acquire+0xab9/0xd20 [ 228.949967][ T8030] kvm_vm_compat_ioctl+0x265/0x330 [ 228.950007][ T8030] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 228.950061][ T8030] ? __fget_files+0x3a0/0x420 [ 228.950087][ T8030] ? __fget_files+0x2a/0x420 [ 228.950129][ T8030] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 228.950165][ T8030] __ia32_compat_sys_ioctl+0x543/0x840 [ 228.950201][ T8030] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 228.950242][ T8030] ? __se_sys_futex_time32+0x360/0x3e0 [ 228.950279][ T8030] ? rcu_is_watching+0x15/0xb0 [ 228.950318][ T8030] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 228.950354][ T8030] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.950391][ T8030] __do_fast_syscall_32+0xb6/0x2b0 [ 228.950422][ T8030] do_fast_syscall_32+0x34/0x80 [ 228.950449][ T8030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.950475][ T8030] RIP: 0023:0xf7f85539 [ 228.950495][ T8030] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 228.950514][ T8030] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 228.950536][ T8030] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000004020ae46 [ 228.950552][ T8030] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.950565][ T8030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.950578][ T8030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 228.950590][ T8030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.950623][ T8030] [ 228.950721][ T8030] Mem-Info: [ 229.043657][ T5921] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 229.052532][ T8030] active_anon:5743 inactive_anon:0 isolated_anon:0 [ 229.052532][ T8030] active_file:1550 inactive_file:39894 isolated_file:0 [ 229.052532][ T8030] unevictable:768 dirty:127 writeback:0 [ 229.052532][ T8030] slab_reclaimable:9963 slab_unreclaimable:93832 [ 229.052532][ T8030] mapped:30285 shmem:1363 pagetables:1237 [ 229.052532][ T8030] sec_pagetables:0 bounce:0 [ 229.052532][ T8030] kernel_misc_reclaimable:0 [ 229.052532][ T8030] free:1322214 free_pcp:16078 free_cma:0 [ 229.149860][ T5951] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 229.156939][ T8030] Node 0 active_anon:23072kB inactive_anon:0kB active_file:6200kB inactive_file:159376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121140kB dirty:508kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12540kB pagetables:4804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 229.248629][ T5921] usb 4-1: config 0 has no interfaces? [ 229.252902][ T8030] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 229.260682][ T5921] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 229.290013][ T8030] Node 0 [ 229.348891][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.419122][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.460783][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.498658][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.538032][ T5951] usb 1-1: Using ep0 maxpacket: 16 [ 229.543277][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 229.548201][ T8030] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.554126][ T5951] usb 1-1: config 0 has no interfaces? [ 229.579835][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.596254][ T5921] usb 4-1: config 0 descriptor?? [ 229.605768][ T8030] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 229.612970][ T8030] Node 0 DMA32 free:1373764kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22924kB inactive_anon:0kB active_file:6200kB inactive_file:157548kB unevictable:1536kB writepending:508kB present:3129332kB managed:2561024kB mlocked:0kB bounce:0kB free_pcp:43024kB local_pcp:22684kB free_cma:0kB [ 229.613327][ T5951] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 229.645613][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.662477][ T8030] lowmem_reserve[]: 0 0 1 1 1 [ 229.667247][ T8030] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 229.696342][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.703733][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.715260][ T5951] usb 1-1: Product: syz [ 229.719828][ T8030] lowmem_reserve[]: 0 0 0 0 0 [ 229.724780][ T8030] Node 1 Normal free:3899716kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21096kB local_pcp:8096kB free_cma:0kB [ 229.755907][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.766592][ T5951] usb 1-1: Manufacturer: syz [ 229.772645][ T5951] usb 1-1: SerialNumber: syz [ 229.780861][ T5951] usb 1-1: config 0 descriptor?? [ 229.785970][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 229.798506][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 229.819288][ T8030] lowmem_reserve[]: 0 0 0 0 0 [ 229.824073][ T8030] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 229.847730][ T24] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 229.859029][ T24] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 229.859431][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.704'. [ 229.876656][ T24] usb 2-1: Product: syz [ 229.882044][ T8030] Node 0 DMA32: 655*4kB (UME) 437*8kB (UME) 312*16kB (UME) 643*32kB (UME) 141*64kB (UME) 74*128kB (UME) 21*256kB (UME) 14*512kB (UM) 3*1024kB (UM) 9*2048kB (UME) 315*4096kB (UM) = 1374468kB [ 229.901873][ T24] usb 2-1: Manufacturer: syz [ 229.906533][ T24] usb 2-1: SerialNumber: syz [ 229.907933][ T8050] loop6: detected capacity change from 0 to 524287999 [ 229.914679][ T24] usb 2-1: config 0 descriptor?? [ 229.925713][ T8030] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 229.944516][ T8028] vlan5: entered promiscuous mode [ 229.954038][ T8030] Node 1 Normal: 192*4kB (UME) 28*8kB [ 229.954515][ T8044] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 229.967695][ T8030] (UME) 44*16kB (UME) 93*32kB (UE) 26*64kB (UME) 9*128kB (UME) 5*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3899968kB [ 229.990494][ T8028] bridge0: entered promiscuous mode [ 230.000265][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 230.006243][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 230.032329][ T8030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.055427][ T8030] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 230.065049][ T8030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.080466][ T8030] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.106092][ T8030] 46075 total pagecache pages [ 230.115089][ T8030] 0 pages in swap cache [ 230.119345][ T9] usb 4-1: USB disconnect, device number 31 [ 230.119722][ T8030] Free swap = 124996kB [ 230.129825][ T8030] Total swap = 124996kB [ 230.134878][ T8030] 2097051 pages RAM [ 230.145893][ T8030] 0 pages HighMem/MovableOnly [ 230.150947][ T8030] 424689 pages reserved [ 230.156579][ T8030] 0 pages cma reserved [ 230.198893][ T24] usb 1-1: USB disconnect, device number 34 [ 230.813347][ T8060] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 230.940357][ T8044] usb 2-1: reset high-speed USB device number 38 using dummy_hcd [ 230.968343][ T8063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.978024][ T8065] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 231.002753][ T8065] team0: Port device batadv1 added [ 231.003139][ T8063] netlink: 'syz.3.717': attribute type 10 has an invalid length. [ 231.101273][ T8044] usb 2-1: device firmware changed [ 231.129389][ T5939] usb 2-1: USB disconnect, device number 38 [ 231.139548][ T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 231.180994][ T8067] xt_bpf: check failed: parse error [ 231.198246][ T8067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.719'. [ 231.309144][ T5939] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 231.317567][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 231.346630][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.357891][ T43] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.373007][ T43] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 231.399137][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.417140][ T43] usb 5-1: config 0 descriptor?? [ 231.452588][ T8070] tipc: Invalid UDP bearer configuration [ 231.452638][ T8070] tipc: Enabling of bearer rejected, failed to enable media [ 231.467051][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 231.509757][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 231.531583][ T5939] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 231.623032][ T5939] usb 2-1: string descriptor 0 read error: -22 [ 231.669211][ T5939] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 231.695955][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 231.727809][ T5939] usb 2-1: config 0 descriptor?? [ 231.744282][ T8051] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 231.816164][ T5939] hub 2-1:0.0: bad descriptor, ignoring hub [ 231.832829][ T5939] hub 2-1:0.0: probe with driver hub failed with error -5 [ 232.073972][ T30] kauditd_printk_skb: 632 callbacks suppressed [ 232.073989][ T30] audit: type=1326 audit(1750624725.235:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 232.180215][ T24] usb 2-1: USB disconnect, device number 39 [ 232.239242][ T30] audit: type=1326 audit(1750624725.235:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 232.343229][ T30] audit: type=1326 audit(1750624725.235:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 232.464341][ T30] audit: type=1326 audit(1750624725.235:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 232.531276][ T30] audit: type=1326 audit(1750624725.235:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 232.640635][ T30] audit: type=1326 audit(1750624725.235:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 232.740169][ T30] audit: type=1326 audit(1750624725.235:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 232.796645][ T30] audit: type=1326 audit(1750624725.235:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 232.940483][ T8092] loop6: detected capacity change from 0 to 524287999 [ 234.326358][ T8106] capability: warning: `syz.3.729' uses deprecated v2 capabilities in a way that may be insecure [ 234.432802][ T5939] usb 5-1: USB disconnect, device number 30 [ 237.179407][ T8106] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 237.185946][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 237.195824][ T8106] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 237.202278][ T8106] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 237.208599][ T8106] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 237.215143][ T8106] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 237.479277][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 237.641401][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.641443][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 237.641494][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.641518][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.645818][ T8125] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 237.675785][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.148108][ T8136] netlink: 156 bytes leftover after parsing attributes in process `syz.1.737'. [ 239.279100][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 239.289193][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 239.289204][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 239.289241][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 239.710501][ T8149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.875030][ T24] usb 3-1: USB disconnect, device number 28 [ 240.068729][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.743'. [ 240.219192][ T5946] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 240.377328][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 240.421020][ T5946] usb 1-1: unable to get BOS descriptor or descriptor too short [ 240.440613][ T5946] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 240.461701][ T5946] usb 1-1: can't read configurations, error -71 [ 240.938730][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 241.039344][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 241.092798][ T5939] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 241.222177][ T24] usb 4-1: config 0 has no interfaces? [ 241.238402][ T5939] usb 2-1: device descriptor read/64, error -71 [ 241.240049][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 241.259112][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.335172][ T24] usb 4-1: Product: syz [ 241.344933][ T24] usb 4-1: Manufacturer: syz [ 241.350291][ T24] usb 4-1: SerialNumber: syz [ 241.361215][ T24] usb 4-1: config 0 descriptor?? [ 241.503057][ T9] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 241.684658][ T8167] netlink: 92 bytes leftover after parsing attributes in process `syz.3.745'. [ 241.704318][ T5939] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 241.834966][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.853509][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 241.865985][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 241.879945][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 241.889964][ T5939] usb 2-1: device descriptor read/64, error -71 [ 241.900205][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 241.924569][ T9] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 241.934239][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 241.950177][ T9] usb 3-1: Product: syz [ 242.000673][ T5939] usb usb2-port1: attempt power cycle [ 242.406697][ T9] usb 3-1: Manufacturer: syz [ 242.417252][ T9] usb 3-1: SerialNumber: syz [ 242.433740][ T9] usb 3-1: config 0 descriptor?? [ 242.689308][ T5939] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 242.700695][ T9] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 242.707637][ T9] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 242.724280][ T5939] usb 2-1: device descriptor read/8, error -71 [ 242.910412][ T8176] netlink: 152 bytes leftover after parsing attributes in process `syz.2.751'. [ 242.921733][ T9] radio-si470x 3-1:0.0: software version 239, hardware version 199 [ 242.930055][ T9] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 243.001093][ T5939] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 243.045359][ T5939] usb 2-1: device descriptor read/8, error -71 [ 243.135927][ T9] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 243.159397][ T5939] usb usb2-port1: unable to enumerate USB device [ 243.344330][ T9] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 243.369722][ T9] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 243.425631][ T9] usb 3-1: USB disconnect, device number 29 [ 243.965486][ T43] usb 4-1: USB disconnect, device number 32 [ 244.042281][ T8194] xt_SECMARK: invalid mode: 0 [ 244.384484][ T8198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.758'. [ 244.431678][ T8198] netlink: 204 bytes leftover after parsing attributes in process `syz.3.758'. [ 244.483943][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 245.609303][ T5939] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 245.624276][ T8232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.763354][ T5939] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.779097][ T5939] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.840878][ T5939] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.897137][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.163500][ T5939] usb 5-1: usb_control_msg returned -32 [ 246.179480][ T5939] usbtmc 5-1:16.0: can't read capabilities [ 246.378536][ T8244] netlink: 'syz.3.775': attribute type 27 has an invalid length. [ 246.407730][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.2.777'. [ 246.425337][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.434006][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.449277][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 246.673545][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.685021][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.689794][ T5939] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 246.695349][ T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 246.883129][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.893995][ T24] usb 1-1: config 0 descriptor?? [ 246.972053][ T5939] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 246.978124][ T43] usb 5-1: USB disconnect, device number 31 [ 247.228740][ T8244] veth0_to_team: left promiscuous mode [ 247.327024][ T5939] usb 4-1: config 0 has no interface number 0 [ 247.330947][ T8244] veth0_to_team: left allmulticast mode [ 247.333564][ T5939] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 247.350064][ T5939] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 247.363847][ T5939] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 247.373269][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.403591][ T5939] usb 4-1: Product: syz [ 247.425636][ T5939] usb 4-1: Manufacturer: syz [ 247.453968][ T5939] usb 4-1: SerialNumber: syz [ 247.501574][ T5939] usb 4-1: config 0 descriptor?? [ 247.585857][ T8249] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 247.643731][ T5939] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 247.647531][ T24] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 247.695265][ T24] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 247.769937][ T24] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 247.881849][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.983347][ T8249] ipt_REJECT: TCP_RESET invalid for non-tcp [ 248.051492][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.075600][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.078105][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.337795][ T8244] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.353848][ T8244] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.364905][ T8244] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.376819][ T8244] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.478743][ T8244] vlan2: left promiscuous mode [ 248.486549][ T8244] vlan2: left allmulticast mode [ 248.492409][ T8244] hsr_slave_1: left allmulticast mode [ 248.618986][ T5939] usb 4-1: USB disconnect, device number 33 [ 248.667047][ T5939] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 248.862195][ T2150] usb 1-1: reset high-speed USB device number 37 using dummy_hcd [ 249.037009][ T8272] syz_tun: entered allmulticast mode [ 249.044527][ T8271] syz_tun: left allmulticast mode [ 249.198472][ T8276] tipc: New replicast peer: 255.255.255.255 [ 249.207215][ T8276] tipc: Enabled bearer , priority 10 [ 249.216682][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.783'. [ 249.226028][ T8277] tipc: Disabling bearer [ 249.309137][ T8279] netlink: 'syz.4.784': attribute type 4 has an invalid length. [ 249.317108][ T8244] syz.3.775 (8244) used greatest stack depth: 19368 bytes left [ 249.721654][ T24] usb 1-1: USB disconnect, device number 37 [ 249.970337][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 250.580048][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 250.779577][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 250.790845][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 250.827060][ T24] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 250.864674][ T24] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 250.901484][ T8319] netlink: 'syz.4.796': attribute type 27 has an invalid length. [ 250.910473][ T24] usb 3-1: No eUSB2 isoc ep 7 companion for config 7 interface 0 altsetting 0 [ 250.940857][ T24] usb 3-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.996631][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 251.000380][ T24] usb 3-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 251.051220][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.072077][ T24] usb 3-1: Product: syz [ 251.076414][ T24] usb 3-1: Manufacturer: syz [ 251.110433][ T24] usb 3-1: SerialNumber: syz [ 251.153114][ T8319] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.160963][ T8319] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.219296][ T5907] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 251.403612][ T5907] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 251.416259][ T24] usb 3-1: USB disconnect, device number 30 [ 251.442799][ T5907] usb 5-1: config 0 has no interface number 0 [ 251.448950][ T5907] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 251.483066][ T8342] loop8: detected capacity change from 0 to 7 [ 251.493413][ T8342] Dev loop8: unable to read RDB block 7 [ 251.516788][ T8342] loop8: unable to read partition table [ 251.518916][ T5907] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 251.559677][ T8342] loop8: partition table beyond EOD, truncated [ 251.584389][ T8342] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 251.588096][ T5907] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 251.609936][ T8319] veth0_to_team: left promiscuous mode [ 251.615811][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.627725][ T8319] veth0_to_team: left allmulticast mode [ 251.639870][ T5907] usb 5-1: Product: syz [ 251.652346][ T5907] usb 5-1: Manufacturer: syz [ 251.662745][ T5907] usb 5-1: SerialNumber: syz [ 251.683716][ T5907] usb 5-1: config 0 descriptor?? [ 251.689669][ T8316] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 251.725269][ T5907] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 251.773375][ T8319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.855031][ T8319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.926416][ T8356] loop6: detected capacity change from 0 to 524287999 [ 252.101300][ T8316] ipt_REJECT: TCP_RESET invalid for non-tcp [ 252.311815][ T8319] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.355139][ T8319] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.384945][ T8319] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.442289][ T8319] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.636959][ T8354] veth0_to_team: entered promiscuous mode [ 252.662783][ T8354] veth0_to_team: entered allmulticast mode [ 252.719471][ T8361] syz_tun: entered allmulticast mode [ 252.728915][ T8358] syz_tun: left allmulticast mode [ 252.927146][ T5939] usb 5-1: USB disconnect, device number 32 [ 252.974728][ T5939] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 254.591263][ T5921] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 254.764785][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 254.859904][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.962793][ T5921] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 254.999134][ T8336] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 255.006791][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.132734][ T5921] usb 5-1: config 0 descriptor?? [ 255.337965][ T8336] usb 1-1: config 0 has no interfaces? [ 255.577908][ T5921] glorious 0003:258A:0036.000B: unknown main item tag 0x1 [ 255.585899][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.592300][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.653234][ T5921] glorious 0003:258A:0036.000B: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.4-1/input0 [ 255.769408][ T8336] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 255.786443][ T8336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.795642][ T8336] usb 1-1: Product: syz [ 255.801782][ T8336] usb 1-1: Manufacturer: syz [ 255.819134][ T5939] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 255.826783][ T8336] usb 1-1: SerialNumber: syz [ 255.859494][ T1209] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 255.864616][ T8336] usb 1-1: config 0 descriptor?? [ 255.962992][ T8413] loop6: detected capacity change from 0 to 524287999 [ 256.004941][ T5939] usb 2-1: config 0 has no interfaces? [ 256.010895][ T5939] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 256.050132][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.096770][ T5939] usb 2-1: config 0 descriptor?? [ 256.099644][ T5921] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 256.131773][ T8401] [U]  [ 256.559186][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 256.566088][ T5921] usb 4-1: config 0 has no interfaces? [ 256.573474][ T5921] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 256.582886][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.594723][ T5921] usb 4-1: Product: syz [ 256.618925][ T5921] usb 4-1: Manufacturer: syz [ 256.641432][ T5921] usb 4-1: SerialNumber: syz [ 256.661614][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.819'. [ 256.663533][ T5921] usb 4-1: config 0 descriptor?? [ 256.721397][ T8404] vlan2: entered promiscuous mode [ 256.861559][ T5939] usb 2-1: USB disconnect, device number 44 [ 257.019876][ T1209] usb 4-1: USB disconnect, device number 34 [ 257.240855][ T5921] usb 5-1: USB disconnect, device number 33 [ 257.345467][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'. [ 257.505942][ T8425] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 257.537156][ T8425] team0: Port device batadv1 added [ 257.538440][ T8428] xt_bpf: check failed: parse error [ 257.561909][ T8428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.829'. [ 257.789647][ T8336] usb 1-1: USB disconnect, device number 38 [ 257.914578][ T8440] loop6: detected capacity change from 0 to 524287999 [ 258.075863][ T8444] program syz.3.835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.122431][ T8443] veth0_to_team: entered promiscuous mode [ 258.142296][ T8443] veth0_to_team: entered allmulticast mode [ 258.170576][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 258.379814][ T1209] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 258.560139][ T1209] usb 4-1: Using ep0 maxpacket: 32 [ 258.567771][ T1209] usb 4-1: unable to get BOS descriptor or descriptor too short [ 258.582763][ T1209] usb 4-1: config 0 has an invalid interface number: 73 but max is 0 [ 258.604153][ T1209] usb 4-1: config 0 has no interface number 0 [ 258.619217][ T1209] usb 4-1: config 0 interface 73 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 258.696344][ T1209] usb 4-1: New USB device found, idVendor=2040, idProduct=4200, bcdDevice=6f.07 [ 258.711368][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.751974][ T1209] usb 4-1: Product: syz [ 258.777859][ T1209] usb 4-1: Manufacturer: syz [ 258.795453][ T1209] usb 4-1: SerialNumber: syz [ 258.818975][ T1209] usb 4-1: config 0 descriptor?? [ 258.854867][ T1209] em28xx 4-1:0.73: New device syz syz @ 480 Mbps (2040:4200, interface 73, class 73) [ 258.878703][ T1209] em28xx 4-1:0.73: Video interface 73 found: [ 259.037622][ T8444] batadv_slave_1: entered promiscuous mode [ 259.045193][ T8442] batadv_slave_1: left promiscuous mode [ 259.136443][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 259.142698][ T1209] em28xx 4-1:0.73: unknown em28xx chip ID (0) [ 259.270727][ T1209] em28xx 4-1:0.73: reading from i2c device at 0xa0 failed (error=-5) [ 259.297600][ T1209] em28xx 4-1:0.73: board has no eeprom [ 259.410478][ T1209] em28xx 4-1:0.73: Identified as Hauppauge WinTV USB 2 (card=4) [ 259.427324][ T1209] em28xx 4-1:0.73: analog set to bulk mode. [ 259.445672][ T8337] em28xx 4-1:0.73: Registering V4L2 extension [ 259.487861][ T1209] usb 4-1: USB disconnect, device number 35 [ 259.499918][ T8471] input: syz0 as /devices/virtual/input/input18 [ 259.522502][ T1209] em28xx 4-1:0.73: Disconnecting em28xx [ 259.891792][ T8481] Cannot find del_set index 0 as target [ 259.988749][ T8337] em28xx 4-1:0.73: Config register raw data: 0xffffffed [ 260.001212][ T8337] em28xx 4-1:0.73: AC97 chip type couldn't be determined [ 260.035611][ T8337] em28xx 4-1:0.73: No AC97 audio processor [ 260.041727][ T5939] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 260.057480][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 260.071920][ T30] audit: type=1800 audit(1750624753.235:915): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.840" name="/" dev="fuse" ino=0 res=0 errno=0 [ 260.090978][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.104849][ T8337] em28xx 4-1:0.73: em28xx_v4l2_init: em28xx_write_reg - msp34xx(1) failed! error [-19] [ 260.139397][ T8337] em28xx 4-1:0.73: Registering input extension [ 260.199518][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 260.216432][ T5939] usb 1-1: config 4 has an invalid interface number: 176 but max is 0 [ 260.234072][ T5939] usb 1-1: config 4 has no interface number 0 [ 260.257073][ T5939] usb 1-1: config 4 interface 176 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 260.312142][ T5939] usb 1-1: config 4 interface 176 has no altsetting 0 [ 260.343737][ T5939] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.8b [ 260.363450][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.385671][ T8337] rc_core: IR keymap rc-hauppauge not found [ 260.404344][ T8337] Registered IR keymap rc-empty [ 260.419574][ T5939] usb 1-1: Product: syz [ 260.434629][ T5939] usb 1-1: Manufacturer: syz [ 260.441053][ T8337] rc rc0: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.73/rc/rc0 [ 260.456882][ T5939] usb 1-1: SerialNumber: syz [ 260.491236][ T8478] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 260.502585][ T8337] input: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.73/rc/rc0/input19 [ 260.532001][ T5939] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 260.546804][ T8496] loop6: detected capacity change from 0 to 524287999 [ 260.557493][ T8337] em28xx 4-1:0.73: Input extension successfully initialized [ 260.572078][ T1209] em28xx 4-1:0.73: Closing input extension [ 260.704081][ T1209] em28xx 4-1:0.73: Freeing device [ 260.721032][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.799920][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.811513][ T36] usb 1-1: Failed to submit usb control message: -71 [ 260.812331][ T5921] usb 1-1: USB disconnect, device number 39 [ 260.818495][ T36] usb 1-1: unable to send the bmi data to the device: -71 [ 260.919539][ T36] usb 1-1: unable to get target info from device [ 260.926080][ T36] usb 1-1: could not get target info (-71) [ 260.967897][ T36] usb 1-1: could not probe fw (-71) [ 261.129164][ T1209] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 261.199185][ T8336] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 261.282134][ T1209] usb 4-1: config 1 interface 0 altsetting 252 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.299370][ T1209] usb 4-1: config 1 interface 0 altsetting 252 bulk endpoint 0x1 has invalid maxpacket 0 [ 261.317302][ T1209] usb 4-1: config 1 interface 0 altsetting 252 endpoint 0x82 has invalid maxpacket 1128, setting to 1024 [ 261.339265][ T1209] usb 4-1: config 1 interface 0 altsetting 252 bulk endpoint 0x82 has invalid maxpacket 1024 [ 261.349157][ T8336] usb 2-1: Using ep0 maxpacket: 32 [ 261.358005][ T1209] usb 4-1: config 1 interface 0 has no altsetting 0 [ 261.371074][ T8336] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 261.389086][ T8336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.412344][ T30] audit: type=1326 audit(1750624754.555:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.2.853" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f85539 code=0x0 [ 261.436132][ T1209] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 261.449689][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.457253][ T8336] usb 2-1: config 0 descriptor?? [ 261.480865][ T1209] usb 4-1: Product: syz [ 261.485092][ T1209] usb 4-1: Manufacturer: syz [ 261.525214][ T1209] usb 4-1: SerialNumber: syz [ 261.547631][ T8488] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 261.717260][ T8336] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 261.744159][ T8336] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 261.754136][ T8336] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 261.794434][ T1209] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 252 proto 3 vid 0x0525 pid 0xA4A8 [ 262.559928][ T5921] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 262.887622][ T8330] usb 4-1: USB disconnect, device number 36 [ 262.904070][ T8330] usblp0: removed [ 263.042415][ T5921] usb 3-1: config 0 has no interfaces? [ 263.047961][ T5921] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 263.082743][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.120239][ T5921] usb 3-1: config 0 descriptor?? [ 263.329156][ T5939] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 263.365874][ T8530] vlan4: entered promiscuous mode [ 263.370973][ T8530] team0: entered promiscuous mode [ 263.376005][ T8530] team_slave_0: entered promiscuous mode [ 263.382158][ T8530] team_slave_1: entered promiscuous mode [ 263.387949][ T8530] vlan3: entered promiscuous mode [ 263.406196][ T8530] [ 263.408653][ T8530] ====================================================== [ 263.415666][ T8530] WARNING: possible circular locking dependency detected [ 263.422703][ T8530] 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 Not tainted [ 263.429823][ T8530] ------------------------------------------------------ [ 263.436854][ T8530] syz.2.861/8530 is trying to acquire lock: [ 263.442764][ T8530] ffff88807f618d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 263.453401][ T8530] [ 263.453401][ T8530] but task is already holding lock: [ 263.460779][ T8530] ffff88805fad4e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 263.470930][ T8530] [ 263.470930][ T8530] which lock already depends on the new lock. [ 263.470930][ T8530] [ 263.481353][ T8530] [ 263.481353][ T8530] the existing dependency chain (in reverse order) is: [ 263.490465][ T8530] [ 263.490465][ T8530] -> #1 (team->team_lock_key#3){+.+.}-{4:4}: [ 263.498675][ T8530] lock_acquire+0x120/0x360 [ 263.503739][ T8530] __mutex_lock+0x182/0xe80 [ 263.508783][ T8530] team_device_event+0x182/0xa20 [ 263.514262][ T8530] notifier_call_chain+0x1b3/0x3e0 [ 263.519928][ T8530] dev_close_many+0x29c/0x410 [ 263.525137][ T8530] vlan_device_event+0x1748/0x1d00 [ 263.530877][ T8530] notifier_call_chain+0x1b3/0x3e0 [ 263.536644][ T8530] __dev_notify_flags+0x18d/0x2e0 [ 263.542215][ T8530] netif_change_flags+0xe8/0x1a0 [ 263.547693][ T8530] do_setlink+0xc55/0x41c0 [ 263.552650][ T8530] rtnl_newlink+0x149f/0x1c70 [ 263.557867][ T8530] rtnetlink_rcv_msg+0x7cc/0xb70 [ 263.563358][ T8530] netlink_rcv_skb+0x208/0x470 [ 263.568680][ T8530] netlink_unicast+0x75b/0x8d0 [ 263.573981][ T8530] netlink_sendmsg+0x805/0xb30 [ 263.579282][ T8530] __sock_sendmsg+0x21c/0x270 [ 263.584515][ T8530] ____sys_sendmsg+0x505/0x830 [ 263.589841][ T8530] ___sys_sendmsg+0x21f/0x2a0 [ 263.595077][ T8530] __sys_sendmsg+0x164/0x220 [ 263.600205][ T8530] __do_fast_syscall_32+0xb6/0x2b0 [ 263.605854][ T8530] do_fast_syscall_32+0x34/0x80 [ 263.611237][ T8530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.618092][ T8530] [ 263.618092][ T8530] -> #0 (&dev_instance_lock_key#20){+.+.}-{4:4}: [ 263.626629][ T8530] validate_chain+0xb9b/0x2140 [ 263.631915][ T8530] __lock_acquire+0xab9/0xd20 [ 263.637116][ T8530] lock_acquire+0x120/0x360 [ 263.642147][ T8530] __mutex_lock+0x182/0xe80 [ 263.647168][ T8530] dev_set_promiscuity+0x10e/0x260 [ 263.652806][ T8530] __dev_set_promiscuity+0x534/0x740 [ 263.658638][ T8530] netif_set_promiscuity+0x50/0xe0 [ 263.664298][ T8530] dev_set_promiscuity+0x126/0x260 [ 263.669926][ T8530] team_change_rx_flags+0x123/0x220 [ 263.675649][ T8530] __dev_set_promiscuity+0x534/0x740 [ 263.681456][ T8530] netif_set_promiscuity+0x50/0xe0 [ 263.687092][ T8530] dev_set_promiscuity+0x126/0x260 [ 263.692724][ T8530] __dev_set_promiscuity+0x534/0x740 [ 263.698540][ T8530] __dev_change_flags+0x41b/0x6d0 [ 263.704111][ T8530] rtnl_newlink_create+0x555/0xb00 [ 263.709751][ T8530] rtnl_newlink+0x16d6/0x1c70 [ 263.714949][ T8530] rtnetlink_rcv_msg+0x7cc/0xb70 [ 263.720403][ T8530] netlink_rcv_skb+0x208/0x470 [ 263.725684][ T8530] netlink_unicast+0x75b/0x8d0 [ 263.730963][ T8530] netlink_sendmsg+0x805/0xb30 [ 263.736272][ T8530] __sock_sendmsg+0x21c/0x270 [ 263.741502][ T8530] ____sys_sendmsg+0x505/0x830 [ 263.746812][ T8530] ___sys_sendmsg+0x21f/0x2a0 [ 263.752018][ T8530] __sys_sendmsg+0x164/0x220 [ 263.757145][ T8530] __do_fast_syscall_32+0xb6/0x2b0 [ 263.762781][ T8530] do_fast_syscall_32+0x34/0x80 [ 263.768149][ T8530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.775004][ T8530] [ 263.775004][ T8530] other info that might help us debug this: [ 263.775004][ T8530] [ 263.785242][ T8530] Possible unsafe locking scenario: [ 263.785242][ T8530] [ 263.792685][ T8530] CPU0 CPU1 [ 263.798046][ T8530] ---- ---- [ 263.803407][ T8530] lock(team->team_lock_key#3); [ 263.808358][ T8530] lock(&dev_instance_lock_key#20); [ 263.816170][ T8530] lock(team->team_lock_key#3); [ 263.823629][ T8530] lock(&dev_instance_lock_key#20); [ 263.828918][ T8530] [ 263.828918][ T8530] *** DEADLOCK *** [ 263.828918][ T8530] [ 263.837065][ T8530] 3 locks held by syz.2.861/8530: [ 263.842096][ T8530] #0: ffffffff8fa30870 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 263.851597][ T8530] #1: ffffffff8f50fc48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 263.860642][ T8530] #2: ffff88805fad4e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 263.871185][ T8530] [ 263.871185][ T8530] stack backtrace: [ 263.877071][ T8530] CPU: 1 UID: 0 PID: 8530 Comm: syz.2.861 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 263.877091][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.877101][ T8530] Call Trace: [ 263.877107][ T8530] [ 263.877113][ T8530] dump_stack_lvl+0x189/0x250 [ 263.877141][ T8530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.877166][ T8530] ? __pfx__printk+0x10/0x10 [ 263.877183][ T8530] ? print_lock_name+0xde/0x100 [ 263.877200][ T8530] print_circular_bug+0x2ee/0x310 [ 263.877217][ T8530] check_noncircular+0x134/0x160 [ 263.877234][ T8530] validate_chain+0xb9b/0x2140 [ 263.877250][ T8530] ? __pfx___irq_work_queue_local+0x10/0x10 [ 263.877273][ T8530] ? console_unlock+0x21b/0x270 [ 263.877288][ T8530] ? __pfx_console_unlock+0x10/0x10 [ 263.877306][ T8530] __lock_acquire+0xab9/0xd20 [ 263.877330][ T8530] ? dev_set_promiscuity+0x10e/0x260 [ 263.877348][ T8530] lock_acquire+0x120/0x360 [ 263.877369][ T8530] ? dev_set_promiscuity+0x10e/0x260 [ 263.877392][ T8530] __mutex_lock+0x182/0xe80 [ 263.877405][ T8530] ? dev_set_promiscuity+0x10e/0x260 [ 263.877423][ T8530] ? __pfx__printk+0x10/0x10 [ 263.877440][ T8530] ? dev_set_promiscuity+0x10e/0x260 [ 263.877457][ T8530] ? __netdev_printk+0x365/0x4d0 [ 263.877481][ T8530] ? __pfx___mutex_lock+0x10/0x10 [ 263.877494][ T8530] ? netdev_info+0x10a/0x160 [ 263.877515][ T8530] ? __pfx_netdev_info+0x10/0x10 [ 263.877537][ T8530] dev_set_promiscuity+0x10e/0x260 [ 263.877567][ T8530] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 263.877594][ T8530] __dev_set_promiscuity+0x534/0x740 [ 263.877612][ T8530] ? do_raw_spin_unlock+0x122/0x240 [ 263.877631][ T8530] netif_set_promiscuity+0x50/0xe0 [ 263.877650][ T8530] dev_set_promiscuity+0x126/0x260 [ 263.877669][ T8530] team_change_rx_flags+0x123/0x220 [ 263.877696][ T8530] ? __pfx_team_change_rx_flags+0x10/0x10 [ 263.877719][ T8530] __dev_set_promiscuity+0x534/0x740 [ 263.877740][ T8530] netif_set_promiscuity+0x50/0xe0 [ 263.877758][ T8530] dev_set_promiscuity+0x126/0x260 [ 263.877777][ T8530] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 263.877797][ T8530] __dev_set_promiscuity+0x534/0x740 [ 263.877817][ T8530] __dev_change_flags+0x41b/0x6d0 [ 263.877838][ T8530] ? __pfx___dev_change_flags+0x10/0x10 [ 263.877860][ T8530] rtnl_newlink_create+0x555/0xb00 [ 263.877883][ T8530] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 263.877900][ T8530] ? rtnl_newlink+0x8db/0x1c70 [ 263.877916][ T8530] ? __pfx___mutex_lock+0x10/0x10 [ 263.877933][ T8530] ? ns_capable+0x8a/0xf0 [ 263.877957][ T8530] rtnl_newlink+0x16d6/0x1c70 [ 263.877978][ T8530] ? __pfx_rtnl_newlink+0x10/0x10 [ 263.877994][ T8530] ? rcu_read_lock_sched_held+0x89/0x100 [ 263.878020][ T8530] ? __lock_acquire+0xab9/0xd20 [ 263.878046][ T8530] ? __lock_acquire+0xab9/0xd20 [ 263.878074][ T8530] ? is_bpf_text_address+0x26/0x2b0 [ 263.878099][ T8530] ? is_bpf_text_address+0x292/0x2b0 [ 263.878123][ T8530] ? is_bpf_text_address+0x26/0x2b0 [ 263.878147][ T8530] ? kernel_text_address+0xa5/0xe0 [ 263.878172][ T8530] ? __lock_acquire+0xab9/0xd20 [ 263.878202][ T8530] ? __pfx_rtnl_newlink+0x10/0x10 [ 263.878217][ T8530] rtnetlink_rcv_msg+0x7cc/0xb70 [ 263.878233][ T8530] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 263.878248][ T8530] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 263.878269][ T8530] netlink_rcv_skb+0x208/0x470 [ 263.878287][ T8530] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 263.878303][ T8530] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 263.878325][ T8530] ? netlink_deliver_tap+0x2e/0x1b0 [ 263.878342][ T8530] ? netlink_deliver_tap+0x2e/0x1b0 [ 263.878361][ T8530] netlink_unicast+0x75b/0x8d0 [ 263.878379][ T8530] netlink_sendmsg+0x805/0xb30 [ 263.878401][ T8530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.878420][ T8530] ? __import_iovec+0x5d4/0x7f0 [ 263.878434][ T8530] ? aa_sock_msg_perm+0x94/0x160 [ 263.878454][ T8530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.878475][ T8530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.878493][ T8530] __sock_sendmsg+0x21c/0x270 [ 263.878518][ T8530] ____sys_sendmsg+0x505/0x830 [ 263.878539][ T8530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.878563][ T8530] ___sys_sendmsg+0x21f/0x2a0 [ 263.878587][ T8530] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.878619][ T8530] ? __fget_files+0x2a/0x420 [ 263.878636][ T8530] ? __fget_files+0x3a0/0x420 [ 263.878656][ T8530] __sys_sendmsg+0x164/0x220 [ 263.878675][ T8530] ? __pfx___sys_sendmsg+0x10/0x10 [ 263.878697][ T8530] ? rcu_is_watching+0x15/0xb0 [ 263.878723][ T8530] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 263.878758][ T8530] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.878777][ T8530] __do_fast_syscall_32+0xb6/0x2b0 [ 263.878790][ T8530] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.878810][ T8530] do_fast_syscall_32+0x34/0x80 [ 263.878822][ T8530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.878839][ T8530] RIP: 0023:0xf7f85539 [ 263.878867][ T8530] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 263.878880][ T8530] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 263.878894][ T8530] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000080000280 [ 263.878905][ T8530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.878913][ T8530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.878921][ T8530] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 263.878929][ T8530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.878954][ T8530] [ 264.526107][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 264.531382][ T8530] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 264.532763][ T5939] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 264.539249][ T8530] batadv1: entered promiscuous mode [ 264.546925][ T5939] usb 4-1: config 0 has no interface number 0 [ 264.578325][ T5939] usb 4-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 264.611960][ T5939] usb 4-1: New USB device found, idVendor=05c6, idProduct=9000, bcdDevice=45.8e [ 264.625242][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.634304][ T5939] usb 4-1: Product: syz [ 264.638562][ T5939] usb 4-1: Manufacturer: syz [ 264.646407][ T5939] usb 4-1: SerialNumber: syz [ 264.649679][ T8330] usb 3-1: USB disconnect, device number 32 [ 264.657898][ T5939] usb 4-1: config 0 descriptor?? [ 264.666930][ T8547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 264.888729][ T8330] usb 4-1: USB disconnect, device number 37