last executing test programs: 7.114217049s ago: executing program 0 (id=567): r0 = socket(0x10, 0x80003, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x13}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000) 6.990690248s ago: executing program 0 (id=568): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x24, 0x3c, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x136}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x0, 0xfd, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) 6.896584408s ago: executing program 0 (id=569): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x20001) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002580)={0x1, &(0x7f0000002540)=[{0x6, 0x1, 0x87, 0x6}]}) socket(0x11, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 6.890938134s ago: executing program 3 (id=570): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b0001000010"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7e60, 0x80, 0x0, 0xf9}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x1733, 0x0, 0x0, 0x0, 0x0) 6.015072201s ago: executing program 0 (id=575): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) setpriority(0x2, 0x0, 0x6) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x40, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x5, 0x8}, {0x8, 0x3}, {0xb, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000300)=ANY=[], 0x310) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r9, 0x0, 0xcf, &(0x7f0000000000), 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="681d883336535d97d1182cba6a72b43243ae413c27ef43", 0x17}, {&(0x7f0000000480)="7e96e12ce1023cfd65974f5bdad802738cd59f0d82f47f8ef17b01686fa56bb46295760240795126e420a15de64b43661bfad3352bdefa7f5e7690d8217732b7860a2579736f0aec794b88b02ade45fdb174b1a5d1673bd7f2cf48203ef158337a8a18ade1487d39150d8e4ee8c388eaf043e67987d88332bc7fd34331dd3435e11e2c1f01ffaeb7e2d5ba2a0468e27b157e1ec5e97874e66f8dac6ffb787e72c0f34644593b51a583f47378d0377ac6eb198357350937e27fc25116d51a45c7d54d610c29425cf4d823fafc3f038f07c3116bba", 0xd4}], 0x2, 0xa) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r9, &(0x7f0000000400), 0x2, 0x8, 0x7e163235) 5.620425476s ago: executing program 2 (id=577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x60, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xd}]}}]}, 0x3c}, 0x1, 0x88480000, 0x0, 0x4008080}, 0x24048084) 5.46585035s ago: executing program 3 (id=578): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2004001f) 5.385295646s ago: executing program 3 (id=579): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4000000003d) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = dup(r1) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r1, r1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) fsopen(0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0x79, 0xf, 0x80, 0x3, 0x1, 0x9, 0x82, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x7, 0x7, 0xffff8000, [0x0, 0x3]}}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r7, 0xc03064ca, &(0x7f0000000140)={0x0, 0x0}) bind$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[], 0x14}}, 0x811) recvmmsg(r5, &(0x7f0000003a40), 0x0, 0x40010100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r3, 0x2000) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r9) 5.284084603s ago: executing program 2 (id=581): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x800}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000080)=0xa) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) eventfd(0x80000001) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r6, 0x4) 5.127917179s ago: executing program 1 (id=582): socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000001000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 4.904110234s ago: executing program 1 (id=583): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff000200000000000000000000060000000401000000"], 0xfc}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.588562469s ago: executing program 1 (id=584): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0x8, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xb1, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0x7}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.828421102s ago: executing program 0 (id=585): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x40859) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a99b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f8f4ed0b27cedd1c5e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.368500683s ago: executing program 4 (id=586): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x2c, &(0x7f0000000140)=[{&(0x7f00000006c0)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94e07134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40000) 3.118529278s ago: executing program 1 (id=587): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x80000001}) dup3(r5, r6, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r8, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010000080080003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) open(0x0, 0x60840, 0x0) 2.779767778s ago: executing program 2 (id=588): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b0001000010"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7e60, 0x80, 0x0, 0xf9}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x1733, 0x0, 0x0, 0x0, 0x0) 2.58055534s ago: executing program 4 (id=589): r0 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000580)={0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, &(0x7f0000000080)) ioctl$HIDIOCGRDESC(r0, 0x4030582a, &(0x7f0000000200)={0xd, "7954bbc8e80000000000000001"}) 2.21483103s ago: executing program 4 (id=590): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x10000000, 0x2000000, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 1.902780278s ago: executing program 3 (id=591): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="152c010000000000140012800b0001006d616373656300000400028008000500", @ANYRESHEX], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.663115419s ago: executing program 3 (id=592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000060000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000100098000000000007000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r9 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x0, 0x2d}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x3, 0x1, 0x157, 0x26553de0, 0x4, 0x3ff, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x9, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x4, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x6, 0x7, 0x34a00, 0x45, 0x800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x4, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x5, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x45c}}, 0x0) 1.590874065s ago: executing program 0 (id=593): syz_io_uring_setup(0x3f, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x1906) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_emit_ethernet(0x856, &(0x7f0000000800)={@remote, @remote, @void, {@mpls_mc={0x8848, {[], @ipv6=@gre_packet={0x5, 0x6, "0c35f1", 0x820, 0x2f, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x4, {{0x9, 0x1, 0x9, 0x0, 0x1, 0x3, 0x6, 0x8}, 0x1, {0xa}}}, {0x8, 0x22eb, 0x1, {{0xf, 0x2, 0x3, 0x3, 0x1, 0x1, 0x1, 0x6}, 0x2, {0xfffff86c, 0x6, 0x0, 0x3, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x0, "cca834b887d1edb70d98f7e2c03b2df746c7d33a896ddf196a80a61be9"}}}}}}}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYRES32=r4, @ANYRES16=r5], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x20000050) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020003000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0", 0x8e, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x50, r6, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) socket$nl_rdma(0x10, 0x3, 0x14) 1.268648434s ago: executing program 1 (id=594): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff000200000000000000000000060000000401000000"], 0xfc}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 621.769159ms ago: executing program 2 (id=595): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x700, 0x0, 'syz0\x00', 0x7}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200000000000000, 0x0, 0x21d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8f, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x10000000, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) 552.707516ms ago: executing program 4 (id=596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'hsr0\x00', @random="000000000400"}) 373.829536ms ago: executing program 1 (id=597): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc038563c, &(0x7f0000000340)={0x0, 0x1, "119f04499489f733dcaa932034d61433a5ba43d2103eb3221503dc2984dea6e2", 0x0, 0xfffffffffffffffc, 0x0, 0xff, 0x0, 0x0, 0x3, 0x0, [0x0, 0x800000]}) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x9, @broadcast}}) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000a00)={@broadcast, @remote, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, '\x00', "912dee", 0x200}}}}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, 0x0, 0xa002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000280)={0x80000001}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0xf, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x21, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x4000007, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x252, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb5, 0x80, 0xf7, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x7ff, 0x2, 0x1, {0x22, 0xbe4}}, {{{0x9, 0x5, 0x81, 0x3, 0x3bf, 0xd0, 0x8, 0x4}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 276.521869ms ago: executing program 2 (id=598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}]}]}], {0x14, 0x10, 0x1, 0xfeffff7f}}, 0xfc}}, 0x0) 264.397182ms ago: executing program 4 (id=599): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB="dc8e"], 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) syz_open_procfs(r2, &(0x7f0000000080)='fdinfo/3\x00') (async) openat(0xffffffffffffff9c, 0x0, 0x842, 0x0) (async) write$vga_arbiter(r1, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8) pselect6(0x40, &(0x7f0000000580), 0x0, &(0x7f0000000d00)={0xd0}, 0x0, 0x0) (async) close(r1) (async) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ceda240d80408fdb34c010203010902240001000000040904000a020a2c74000905060000001d000009050b6a"], 0x0) 113.988014ms ago: executing program 3 (id=600): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c35, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r5, 0xffff) close(0x3) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000200)={r5, 0x1, 0x1000, 0x8000}) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x8000000) r6 = gettid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r8, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) tkill(r6, 0x8) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000bdc000/0x3000)=nil) 611.761µs ago: executing program 4 (id=601): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)}}], 0x2, 0x48800) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000280)="65e20828be892a1d7e10da3b875af1242c02693ba30c948e97347c36e2898e5c95701b05230bb77fa266377242240b51ff53350da4ac509868ac934f2b772e004d2e224018c95e9af7362d484aa67045e0"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=602): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd27, 0x25dfdc03, {0x2, 0x20, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1d, @local}, @RTA_NH_ID={0x8}]}, 0x2c}}, 0x4040000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="600541008000b121772782d03361a752a5ae8575d703e13e6092ceab36ff7f299a3b6398e47d63906e624d803549f42fb6aa4e46279a86cc265a6300"/71], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 973] usb 3-1: SerialNumber: syz [ 147.785241][ T5973] usb 3-1: config 0 descriptor?? [ 148.093762][ T6678] netlink: 60 bytes leftover after parsing attributes in process `syz.0.194'. [ 148.123240][ T6678] netlink: 'syz.0.194': attribute type 1 has an invalid length. [ 148.168168][ T6678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.300032][ T6680] bond1: (slave geneve2): making interface the new active one [ 148.315650][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 148.352232][ T6680] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 148.475662][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 148.485202][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 148.504094][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.522245][ T3095] usb 3-1: USB disconnect, device number 14 [ 148.524093][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.570862][ T6688] netlink: 'syz.0.199': attribute type 32 has an invalid length. [ 148.585420][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.607235][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.647292][ T9] usb 4-1: Product: syz [ 148.651600][ T9] usb 4-1: Manufacturer: syz [ 148.662151][ T9] usb 4-1: SerialNumber: syz [ 148.811910][ T6697] openvswitch: netlink: Message has 4 unknown bytes. [ 148.819136][ T6697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.843009][ T6697] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 148.854302][ T6697] team0: Port device batadv1 added [ 149.338624][ T9] usb 4-1: 0:2 : does not exist [ 149.376217][ T9] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 149.806343][ T9] usb 4-1: USB disconnect, device number 14 [ 150.005691][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 150.052328][ T6701] netlink: 96 bytes leftover after parsing attributes in process `syz.0.201'. [ 150.235850][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 150.258113][ T10] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 150.318276][ T10] usb 3-1: config 0 has no interface number 0 [ 150.335984][ T5973] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 150.356572][ T10] usb 3-1: config 0 interface 89 has no altsetting 0 [ 150.437400][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 150.471084][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.517770][ T5973] usb 4-1: Using ep0 maxpacket: 8 [ 150.533545][ T5973] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 150.546185][ T10] usb 3-1: Product: syz [ 150.555693][ T10] usb 3-1: Manufacturer: syz [ 150.560311][ T10] usb 3-1: SerialNumber: syz [ 150.573310][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.620733][ T10] usb 3-1: config 0 descriptor?? [ 150.621827][ T5973] usb 4-1: config 0 descriptor?? [ 150.664180][ T10] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 150.723064][ T10] em28xx 3-1:0.89: Video interface 89 found: bulk [ 150.860810][ T5973] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 150.985957][ T3095] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 151.164743][ T3095] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.175261][ T3095] usb 2-1: config 0 has no interfaces? [ 151.181635][ T3095] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.231378][ T3095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.250795][ T3095] usb 2-1: config 0 descriptor?? [ 151.307475][ T6719] openvswitch: netlink: Tunnel attr 11521 out of range max 16 [ 151.414740][ T10] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 151.629155][ T6722] pim6reg: entered allmulticast mode [ 151.980553][ T5973] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 151.997193][ T5973] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 152.010572][ T5973] asix 4-1:0.0: probe with driver asix failed with error -71 [ 152.065370][ T10] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 152.091736][ T10] em28xx 3-1:0.89: board has no eeprom [ 152.110749][ T5973] usb 4-1: USB disconnect, device number 15 [ 152.451705][ T6717] pim6reg: left allmulticast mode [ 152.640905][ T6731] netlink: 'syz.3.209': attribute type 16 has an invalid length. [ 152.648785][ T6731] netlink: 'syz.3.209': attribute type 17 has an invalid length. [ 152.655688][ T10] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 152.667396][ T6731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.668945][ T10] em28xx 3-1:0.89: analog set to bulk mode. [ 152.685800][ T5973] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 152.689586][ T5919] em28xx 3-1:0.89: Registering V4L2 extension [ 152.713417][ T10] usb 3-1: USB disconnect, device number 15 [ 152.724207][ T10] em28xx 3-1:0.89: Disconnecting em28xx [ 152.815484][ T5919] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 152.835299][ T5919] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 152.842864][ T5919] em28xx 3-1:0.89: No AC97 audio processor [ 152.857849][ T5919] usb 3-1: Decoder not found [ 152.885098][ T5919] em28xx 3-1:0.89: failed to create media graph [ 152.900917][ T5973] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 152.900921][ T5919] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 152.900953][ T5973] usb 5-1: can't read configurations, error -61 [ 152.912022][ T5919] em28xx 3-1:0.89: Registering snapshot button... [ 152.938183][ T5919] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input8 [ 152.958056][ T5919] em28xx 3-1:0.89: Remote control support is not available for this card. [ 152.968765][ T10] em28xx 3-1:0.89: Closing input extension [ 152.982229][ T10] em28xx 3-1:0.89: Deregistering snapshot button [ 153.032653][ T10] em28xx 3-1:0.89: Freeing device [ 153.108378][ T5973] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 153.143474][ T6736] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 153.154597][ T6736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.235947][ T5941] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 153.280412][ T5973] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 153.297264][ T5973] usb 5-1: can't read configurations, error -61 [ 153.304903][ T5973] usb usb5-port1: attempt power cycle [ 153.375896][ T5941] usb 4-1: device descriptor read/64, error -71 [ 153.539176][ T6744] netlink: 'syz.2.214': attribute type 7 has an invalid length. [ 153.616461][ T5941] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 153.675685][ T5973] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 153.708323][ T5973] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 153.761541][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 153.761638][ T5941] usb 4-1: device descriptor read/64, error -71 [ 153.866045][ T5973] usb 5-1: can't read configurations, error -61 [ 153.879071][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 153.915759][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 153.924541][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.937048][ T10] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 153.950164][ T10] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.964485][ T5919] usb 2-1: USB disconnect, device number 12 [ 153.977645][ T5941] usb usb4-port1: attempt power cycle [ 153.994685][ T10] usb 1-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 154.014528][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.034825][ T5973] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 154.066510][ T10] usb 1-1: Product: syz [ 154.090554][ T5973] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 154.098969][ T10] usb 1-1: Manufacturer: syz [ 154.110482][ T5973] usb 5-1: can't read configurations, error -61 [ 154.112030][ T10] usb 1-1: SerialNumber: syz [ 154.128634][ T5973] usb usb5-port1: unable to enumerate USB device [ 154.373776][ T10] usb 1-1: USB disconnect, device number 15 [ 154.389380][ T5941] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 154.445892][ T5941] usb 4-1: device descriptor read/8, error -71 [ 154.476123][ T5919] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 154.627720][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.641529][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.655446][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.677526][ T5919] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.685879][ T5941] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 154.687398][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.706463][ T5919] usb 2-1: config 0 descriptor?? [ 154.726279][ T5941] usb 4-1: device descriptor read/8, error -71 [ 154.836301][ T5941] usb usb4-port1: unable to enumerate USB device [ 155.400250][ T6757] netlink: 96 bytes leftover after parsing attributes in process `syz.2.217'. [ 155.735770][ T5973] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 155.891196][ T5973] usb 1-1: Using ep0 maxpacket: 16 [ 155.898839][ T5973] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 155.912100][ T5973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.932092][ T5973] usb 1-1: config 0 has no interface number 0 [ 155.956582][ T5973] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 155.966145][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.997139][ T5973] usb 1-1: Product: syz [ 156.006932][ T5973] usb 1-1: Manufacturer: syz [ 156.020677][ T5973] usb 1-1: SerialNumber: syz [ 156.051673][ T5973] usb 1-1: config 0 descriptor?? [ 156.072368][ T5973] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 156.095139][ T5973] usb 1-1: No valid video chain found. [ 156.168249][ T6769] netlink: 'syz.3.221': attribute type 9 has an invalid length. [ 156.202855][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 156.226391][ T6769] macvlan3: entered promiscuous mode [ 156.232089][ T6769] macvlan3: entered allmulticast mode [ 156.472357][ T5973] usb 1-1: USB disconnect, device number 16 [ 157.265369][ T5919] usbhid 2-1:0.0: can't add hid device: -71 [ 157.286965][ T5919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 157.359592][ T5919] usb 2-1: USB disconnect, device number 13 [ 157.592833][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 158.195614][ T6796] pim6reg: entered allmulticast mode [ 158.318393][ T6775] netlink: 96 bytes leftover after parsing attributes in process `syz.4.219'. [ 158.520027][ T6790] pim6reg: left allmulticast mode [ 159.249144][ T30] audit: type=1326 audit(1756530017.429:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124358ebe9 code=0x7ffc0000 [ 159.341502][ T30] audit: type=1326 audit(1756530017.429:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124358ebe9 code=0x7ffc0000 [ 159.421110][ T30] audit: type=1326 audit(1756530017.439:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f124358ebe9 code=0x7ffc0000 [ 159.495204][ T30] audit: type=1326 audit(1756530017.439:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124358ebe9 code=0x7ffc0000 [ 159.525715][ T5973] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 159.592236][ T30] audit: type=1326 audit(1756530017.439:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124358ebe9 code=0x7ffc0000 [ 159.671434][ T6821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.684082][ T6821] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 159.733657][ T30] audit: type=1326 audit(1756530017.439:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f124358ebe9 code=0x7ffc0000 [ 159.795385][ T30] audit: type=1326 audit(1756530017.439:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124358ebe9 code=0x7ffc0000 [ 159.851546][ T30] audit: type=1326 audit(1756530017.439:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124358ebe9 code=0x7ffc0000 [ 160.245847][ T30] audit: type=1326 audit(1756530017.439:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f124358ebe9 code=0x7ffc0000 [ 160.405751][ T30] audit: type=1326 audit(1756530017.439:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124358ebe9 code=0x7ffc0000 [ 160.457850][ T6825] netlink: 68 bytes leftover after parsing attributes in process `syz.0.234'. [ 160.486422][ T6825] netlink: 'syz.0.234': attribute type 1 has an invalid length. [ 160.549159][ T5973] usb 4-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config [ 160.575159][ T5973] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 160.624069][ T6825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.674046][ T5973] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 160.774242][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.826077][ T5919] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 160.857189][ T5973] usb 4-1: Product: syz [ 160.890009][ T5973] usb 4-1: Manufacturer: syz [ 161.124810][ T5919] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 161.124829][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.138231][ T5973] usb 4-1: SerialNumber: syz [ 161.153576][ T5919] usb 5-1: config 0 descriptor?? [ 161.465900][ T5919] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 161.601724][ T6820] netlink: 96 bytes leftover after parsing attributes in process `syz.2.231'. [ 161.880584][ T3095] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 161.916397][ T5919] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 161.932352][ T5919] [drm] Initialized udl on minor 2 [ 162.100505][ T3095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.119662][ T5919] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 162.131866][ T3095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.142749][ T5919] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 162.294171][ T3095] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.389445][ T3095] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.416112][ T3095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.434847][ T3095] usb 2-1: config 0 descriptor?? [ 162.448387][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.469382][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.121792][ T5941] usb 5-1: USB disconnect, device number 15 [ 163.152242][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 163.205481][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 163.223335][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 163.313078][ T6848] chnl_net:caif_netlink_parms(): no params data found [ 163.875789][ T5941] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 163.905221][ T5973] usb 4-1: USB disconnect, device number 20 [ 164.035956][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 164.076496][ T44] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 164.093851][ T5941] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 164.102997][ T5941] usb 3-1: config 0 has no interface number 0 [ 164.111920][ T5941] usb 3-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 164.125401][ T5941] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 164.141389][ T5941] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 164.161793][ T5941] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 164.209545][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 164.250247][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 164.295671][ T5941] usb 3-1: Product: syz [ 164.300127][ T5941] usb 3-1: SerialNumber: syz [ 164.308082][ T44] usb 5-1: not running at top speed; connect to a high speed hub [ 164.322199][ T44] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 164.362541][ T5941] usb 3-1: config 0 descriptor?? [ 164.368655][ T44] usb 5-1: config 1 interface 0 has no altsetting 0 [ 164.375430][ T3095] usbhid 2-1:0.0: can't add hid device: -71 [ 164.381862][ T3095] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 164.402336][ T44] usb 5-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 164.415913][ T3095] usb 2-1: USB disconnect, device number 14 [ 164.425658][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.476250][ T44] usb 5-1: Product: syz [ 164.481734][ T44] usb 5-1: Manufacturer: syz [ 164.487808][ T44] usb 5-1: SerialNumber: syz [ 164.547396][ T6852] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 164.730555][ T5941] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.796029][ T3095] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 164.913203][ T5941] usb 3-1: invalid MIDI out EP 0 [ 165.107392][ T3095] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 165.117060][ T3095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.168668][ T3095] usb 2-1: config 0 descriptor?? [ 165.203694][ T5941] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 165.268554][ T5941] usb 3-1: USB disconnect, device number 16 [ 165.319325][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.432996][ T3095] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 165.508043][ T6876] netlink: 'syz.2.247': attribute type 10 has an invalid length. [ 165.582086][ T6876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.793998][ T6876] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 165.834585][ T3095] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 165.865348][ T3095] [drm] Initialized udl on minor 2 [ 165.914533][ T3095] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 165.926691][ T3095] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 166.175246][ T6880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.184529][ T6880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.330527][ T44] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input9 [ 166.420244][ T5218] bcm5974 5-1:1.0: could not read from device [ 166.484131][ T44] usb 5-1: USB disconnect, device number 16 [ 166.509303][ T5218] bcm5974 5-1:1.0: could not read from device [ 166.566885][ T5218] bcm5974 5-1:1.0: could not read from device [ 166.595004][ T5218] bcm5974 5-1:1.0: could not read from device [ 166.758490][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.248'. [ 166.883936][ T5918] udevd[5918]: Error opening device "/dev/input/event4": No such file or directory [ 166.912117][ T5941] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 166.935811][ T3095] usb 2-1: USB disconnect, device number 15 [ 166.955859][ T5941] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 166.974070][ T5918] udevd[5918]: Unable to EVIOCGABS device "/dev/input/event4" [ 167.025372][ T5941] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 167.037945][ T5918] udevd[5918]: Unable to EVIOCGABS device "/dev/input/event4" [ 167.085371][ T5918] udevd[5918]: Unable to EVIOCGABS device "/dev/input/event4" [ 167.218304][ T5918] udevd[5918]: Unable to EVIOCGABS device "/dev/input/event4" [ 167.226316][ T5918] udevd[5918]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 167.247685][ T5233] udevd[5233]: worker [5918] terminated by signal 6 (Aborted) [ 167.255414][ T5233] udevd[5233]: worker [5918] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input9/event4' [ 167.456072][ T5941] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 167.866891][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.935885][ T5919] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 168.100196][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 168.164805][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.220806][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.265710][ T5919] usb 3-1: device descriptor read/64, error -71 [ 168.292348][ T5941] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.315817][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.459380][ T5941] usb 4-1: config 0 descriptor?? [ 168.505757][ T5919] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 168.807976][ T5919] usb 3-1: device descriptor read/64, error -71 [ 168.916118][ T5919] usb usb3-port1: attempt power cycle [ 168.918572][ T6914] netlink: 'syz.0.256': attribute type 32 has an invalid length. [ 169.255769][ T5919] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 169.277912][ T5919] usb 3-1: device descriptor read/8, error -71 [ 169.447756][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 169.525906][ T5919] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 169.570852][ T6925] netlink: 'syz.0.260': attribute type 10 has an invalid length. [ 169.615932][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 169.662662][ T6925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.672039][ T10] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 169.718581][ T6925] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 169.738874][ T10] usb 5-1: config 0 has no interface number 0 [ 169.751691][ T6926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.804747][ T6926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.805623][ T10] usb 5-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 169.860168][ T6926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.873292][ T5919] usb 3-1: device descriptor read/8, error -71 [ 169.890805][ T6926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.934779][ T10] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 169.986191][ T6926] bond0: (slave batadv0): Releasing backup interface [ 170.016252][ T5919] usb usb3-port1: unable to enumerate USB device [ 170.068843][ T10] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 170.129136][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 170.144681][ T10] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 170.168046][ T10] usb 5-1: Product: syz [ 170.179919][ T10] usb 5-1: SerialNumber: syz [ 170.213390][ T5941] usbhid 4-1:0.0: can't add hid device: -71 [ 170.217637][ T10] usb 5-1: config 0 descriptor?? [ 170.230867][ T5941] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 170.321378][ T5941] usb 4-1: USB disconnect, device number 21 [ 170.378949][ T6935] netlink: 'syz.2.263': attribute type 4 has an invalid length. [ 170.395318][ T6932] netlink: 'syz.2.263': attribute type 4 has an invalid length. [ 170.405807][ T44] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 170.448406][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.464258][ T10] usb 5-1: invalid MIDI out EP 0 [ 170.482898][ T6935] netlink: 44 bytes leftover after parsing attributes in process `syz.2.263'. [ 170.539857][ T10] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 170.554501][ T10] usb 5-1: USB disconnect, device number 17 [ 170.571317][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.583834][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.596104][ T44] usb 2-1: config 0 has no interfaces? [ 170.632295][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.652000][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.683350][ T44] usb 2-1: config 0 descriptor?? [ 170.695772][ T5941] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 170.866953][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.884080][ T5941] usb 4-1: config 0 has no interfaces? [ 170.916525][ T5941] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.931548][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.943782][ T5941] usb 4-1: config 0 descriptor?? [ 171.151868][ T44] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 171.315643][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 171.331149][ T44] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 171.346373][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.362019][ T44] usb 1-1: config 0 has no interface number 0 [ 171.372558][ T44] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 171.382368][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.391205][ T44] usb 1-1: Product: syz [ 171.397798][ T44] usb 1-1: Manufacturer: syz [ 171.402545][ T44] usb 1-1: SerialNumber: syz [ 171.420490][ T44] usb 1-1: config 0 descriptor?? [ 171.432538][ T44] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 171.439585][ T44] usb 1-1: No valid video chain found. [ 171.455622][ T5941] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 171.627775][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 171.645021][ T10] usb 1-1: USB disconnect, device number 17 [ 171.660933][ T5941] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 171.672521][ T5941] usb 5-1: config 0 has no interface number 0 [ 171.701376][ T5941] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 171.717108][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.735391][ T5941] usb 5-1: Product: syz [ 171.746150][ T5941] usb 5-1: Manufacturer: syz [ 171.750780][ T5941] usb 5-1: SerialNumber: syz [ 171.768766][ T5941] usb 5-1: config 0 descriptor?? [ 171.833184][ T5941] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 171.999475][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 172.047671][ T5941] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 172.075013][ T5941] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 172.424148][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 172.580407][ T6953] tap0: tun_chr_ioctl cmd 1074025677 [ 172.586622][ T6953] tap0: linktype set to 778 [ 172.991042][ T6954] cgroup: fork rejected by pids controller in /syz1 [ 173.000477][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 173.002360][ T958] usb 5-1: USB disconnect, device number 18 [ 173.060330][ T958] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 173.216746][ T958] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 173.250434][ T958] quatech2 5-1:0.51: device disconnected [ 173.457889][ T5919] usb 4-1: USB disconnect, device number 22 [ 173.787048][ T5919] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 173.950070][ T5919] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 173.975973][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.005114][ T5919] usb 4-1: config 0 descriptor?? [ 174.048808][ T7004] ======================================================= [ 174.048808][ T7004] WARNING: The mand mount option has been deprecated and [ 174.048808][ T7004] and is ignored by this kernel. Remove the mand [ 174.048808][ T7004] option from the mount to silence this warning. [ 174.048808][ T7004] ======================================================= [ 174.085825][ T44] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 174.132624][ T7004] binder: 7003:7004 ioctl c018620c 200000000280 returned -22 [ 174.231829][ T5973] usb 2-1: USB disconnect, device number 16 [ 174.250774][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.276225][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.291126][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.303852][ T5919] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 174.319899][ T44] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.456596][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.534506][ T7020] pim6reg: entered allmulticast mode [ 174.656573][ T44] usb 3-1: config 0 descriptor?? [ 174.704443][ T5919] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 174.722524][ T5919] [drm] Initialized udl on minor 2 [ 174.736628][ T5919] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 174.759831][ T5919] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 175.097392][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.202868][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.216346][ T5973] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 175.296857][ T7014] pim6reg: left allmulticast mode [ 175.395698][ T5973] usb 2-1: Using ep0 maxpacket: 16 [ 175.457440][ T5973] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 175.497138][ T5973] usb 2-1: config 0 has no interface number 0 [ 175.530729][ T5973] usb 2-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 175.588550][ T5973] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 175.599904][ T5973] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 175.621456][ T5973] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 175.654769][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 175.673754][ T5973] usb 2-1: Product: syz [ 175.692107][ T5973] usb 2-1: SerialNumber: syz [ 175.722153][ T5973] usb 2-1: config 0 descriptor?? [ 175.789011][ T958] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 175.790706][ T5941] usb 4-1: USB disconnect, device number 23 [ 175.935181][ T958] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 176.196804][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 176.855964][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 176.993148][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 177.015732][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 177.052657][ T7055] netlink: 232 bytes leftover after parsing attributes in process `syz.0.285'. [ 177.082327][ T44] usb 3-1: USB disconnect, device number 21 [ 177.152044][ T7058] netlink: 'syz.3.287': attribute type 1 has an invalid length. [ 177.273113][ T7061] netlink: 'syz.3.287': attribute type 1 has an invalid length. [ 177.751609][ T5973] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.810917][ T5973] usb 2-1: invalid MIDI out EP 0 [ 178.173168][ T5973] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 178.224488][ T5973] usb 2-1: USB disconnect, device number 17 [ 178.297719][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.913989][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 178.914002][ T30] audit: type=1326 audit(1756530037.139:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 178.943426][ T5919] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 178.951736][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 178.961144][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 178.997703][ T30] audit: type=1326 audit(1756530037.229:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 179.137704][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 179.144578][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 179.191021][ T5919] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 179.221236][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 179.236261][ T5919] usb 5-1: config 0 has no interface number 0 [ 179.254621][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.281424][ T30] audit: type=1326 audit(1756530037.229:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 179.305378][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 179.320526][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.330740][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.345794][ T30] audit: type=1326 audit(1756530037.229:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 179.368119][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 179.377550][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.385671][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.396654][ T9] usb 1-1: Product: syz [ 179.400887][ T9] usb 1-1: Manufacturer: syz [ 179.405978][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.420607][ T5919] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 179.429788][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.437840][ T30] audit: type=1326 audit(1756530037.229:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 179.460070][ T9] usb 1-1: SerialNumber: syz [ 179.472813][ T10] usb 4-1: config 0 descriptor?? [ 179.477868][ T5919] usb 5-1: Product: syz [ 179.483116][ T9] usb 1-1: config 0 descriptor?? [ 179.489505][ T5919] usb 5-1: Manufacturer: syz [ 179.512143][ T5919] usb 5-1: SerialNumber: syz [ 179.523285][ T30] audit: type=1326 audit(1756530037.229:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 179.547493][ T5919] usb 5-1: config 0 descriptor?? [ 179.605656][ T30] audit: type=1326 audit(1756530037.229:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 179.739443][ T30] audit: type=1326 audit(1756530037.229:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 179.767506][ T30] audit: type=1326 audit(1756530037.269:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 179.768722][ T9] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 179.812689][ T30] audit: type=1326 audit(1756530037.269:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 179.873749][ T7092] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.048810][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 180.054937][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 180.070757][ T9] usb 1-1: USB disconnect, device number 18 [ 180.102296][ T10] usb 4-1: USB disconnect, device number 24 [ 180.585701][ T5973] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 180.744359][ T5973] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 180.754146][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.762655][ T5973] usb 3-1: Product: syz [ 180.823547][ T5973] usb 3-1: Manufacturer: syz [ 180.830181][ T5973] usb 3-1: SerialNumber: syz [ 180.839167][ T5973] usb 3-1: config 0 descriptor?? [ 181.015049][ T7109] netlink: 'syz.0.301': attribute type 16 has an invalid length. [ 181.025669][ T7109] netlink: 'syz.0.301': attribute type 17 has an invalid length. [ 181.064883][ T7109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.081849][ T44] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 181.092114][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 181.135155][ T7097] batadv0: entered promiscuous mode [ 181.193880][ T7097] macvtap1: entered promiscuous mode [ 181.222579][ T7097] bond0: entered promiscuous mode [ 181.234400][ T7097] bond_slave_0: entered promiscuous mode [ 181.243374][ T7097] bond_slave_1: entered promiscuous mode [ 181.260220][ T7097] macvtap1: entered allmulticast mode [ 181.275970][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 181.281520][ T7097] bond0: entered allmulticast mode [ 181.284319][ T44] usb 4-1: config 0 has an invalid interface number: 115 but max is 0 [ 181.290641][ T7097] bond_slave_0: entered allmulticast mode [ 181.304350][ T44] usb 4-1: config 0 has no interface number 0 [ 181.333526][ T44] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 181.335812][ T7097] bond_slave_1: entered allmulticast mode [ 181.342867][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.352260][ T7097] batadv0: entered allmulticast mode [ 181.357175][ T44] usb 4-1: Product: syz [ 181.368375][ T7113] netlink: 'syz.0.302': attribute type 27 has an invalid length. [ 181.376546][ T44] usb 4-1: Manufacturer: syz [ 181.381383][ T44] usb 4-1: SerialNumber: syz [ 181.382416][ T7097] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 181.390156][ T44] usb 4-1: config 0 descriptor?? [ 181.471921][ T5973] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 181.484974][ T5973] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 181.501547][ T5973] usb 3-1: USB disconnect, device number 22 [ 181.646100][ T9] usb 5-1: USB disconnect, device number 19 [ 181.709617][ T7117] loop6: detected capacity change from 0 to 2560 [ 181.773587][ T7117] buffer_io_error: 11 callbacks suppressed [ 181.773605][ T7117] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.800461][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.808992][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.925275][ T7117] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.042840][ T7107] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 182.075338][ T7117] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.087332][ T7117] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.088051][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 182.095295][ T7117] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.149853][ T7117] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.289207][ T7117] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.297291][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 182.305465][ T7117] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.314084][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.322569][ T9] usb 1-1: config 0 has no interface number 0 [ 182.545744][ T5973] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 182.566207][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 182.575283][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.601848][ T9] usb 1-1: Product: syz [ 182.607947][ T7117] ldm_validate_partition_table(): Disk read failed. [ 182.614809][ T9] usb 1-1: Manufacturer: syz [ 182.637621][ T9] usb 1-1: SerialNumber: syz [ 182.668795][ T7117] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.686736][ T7117] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.708831][ T7117] Dev loop6: unable to read RDB block 0 [ 182.727850][ T9] usb 1-1: config 0 descriptor?? [ 182.732141][ T5973] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 182.755050][ T7117] loop6: unable to read partition table [ 182.762838][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.779644][ T5973] usb 2-1: config 0 descriptor?? [ 182.792100][ T5973] cp210x 2-1:0.0: cp210x converter detected [ 182.841160][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 182.977888][ T7117] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 183.075771][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.109959][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.370045][ T5973] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 183.390208][ T5973] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 183.401366][ T5973] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 183.460022][ T5973] usb 2-1: cp210x converter now attached to ttyUSB0 [ 183.594039][ T7120] openvswitch: netlink: Multiple metadata blocks provided [ 183.659074][ T5973] usb 2-1: USB disconnect, device number 18 [ 183.672155][ T5973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 183.690394][ T5973] cp210x 2-1:0.0: device disconnected [ 183.790937][ T7114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.799728][ T7114] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.835056][ T7114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.862738][ T1132] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.887313][ T1132] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.948804][ T1132] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.968153][ T1132] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.978017][ T5919] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 184.137171][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.148475][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.158399][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.171584][ T5919] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.180830][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.192358][ T5919] usb 5-1: config 0 descriptor?? [ 184.245937][ T9] gspca_spca1528: reg_w err -110 [ 184.251049][ T9] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 184.283088][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 184.551915][ T7155] input: syz0 as /devices/virtual/input/input10 [ 184.607511][ T5919] usbhid 5-1:0.0: can't add hid device: -71 [ 184.615308][ T5919] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 184.640757][ T5919] usb 5-1: USB disconnect, device number 20 [ 185.118206][ T5919] usb 1-1: USB disconnect, device number 19 [ 185.352172][ T5973] usb 4-1: USB disconnect, device number 25 [ 185.615657][ T10] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 185.850870][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.885026][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 185.917178][ T10] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 185.962930][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 185.989241][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 186.003224][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.011379][ T10] usb 2-1: Product: syz [ 186.015837][ T10] usb 2-1: Manufacturer: syz [ 186.020509][ T10] usb 2-1: SerialNumber: syz [ 186.037309][ T7168] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.445852][ T5973] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 186.741481][ T5973] usb 5-1: unable to get BOS descriptor or descriptor too short [ 186.764213][ T5973] usb 5-1: not running at top speed; connect to a high speed hub [ 186.826352][ T5973] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 186.971656][ T5973] usb 5-1: config 1 interface 0 has no altsetting 0 [ 187.007963][ T5973] usb 5-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 187.018839][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.027295][ T5973] usb 5-1: Product: syz [ 187.031473][ T5973] usb 5-1: Manufacturer: syz [ 187.054064][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input11 [ 187.098211][ T5973] usb 5-1: SerialNumber: syz [ 187.119721][ T7182] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 187.256717][ T5218] bcm5974 2-1:1.0: could not read from device [ 187.303550][ T10] usb 2-1: USB disconnect, device number 19 [ 187.701618][ T5973] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input12 [ 188.044538][ T5218] bcm5974 5-1:1.0: could not read from device [ 188.078094][ T5218] bcm5974 5-1:1.0: could not read from device [ 188.110928][ T5218] bcm5974 5-1:1.0: could not read from device [ 188.129543][ T5973] usb 5-1: USB disconnect, device number 21 [ 188.170461][ T5218] bcm5974 5-1:1.0: could not read from device [ 188.431226][ T6098] udevd[6098]: Error opening device "/dev/input/event4": No such file or directory [ 188.441329][ T6098] udevd[6098]: Unable to EVIOCGABS device "/dev/input/event4" [ 188.449415][ T6098] udevd[6098]: Unable to EVIOCGABS device "/dev/input/event4" [ 188.459122][ T6098] udevd[6098]: Unable to EVIOCGABS device "/dev/input/event4" [ 188.469243][ T6098] udevd[6098]: Unable to EVIOCGABS device "/dev/input/event4" [ 188.665737][ T5919] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 188.720654][ T7196] netlink: 232 bytes leftover after parsing attributes in process `syz.4.326'. [ 188.848459][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 188.971664][ T5919] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 189.023213][ T5919] usb 2-1: config 0 has no interface number 0 [ 189.031625][ T5919] usb 2-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 189.044080][ T5919] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 189.055245][ T5919] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 189.087426][ T5919] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 189.101359][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 189.129816][ T5919] usb 2-1: Product: syz [ 189.134909][ T5919] usb 2-1: SerialNumber: syz [ 189.160591][ T5919] usb 2-1: config 0 descriptor?? [ 189.391373][ T5919] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.443876][ T5919] usb 2-1: invalid MIDI out EP 0 [ 189.556997][ T7214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.955347][ T5919] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 189.970128][ T5919] usb 2-1: USB disconnect, device number 20 [ 190.005629][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.596579][ T7225] hsr0: mtu less than device minimum [ 190.865774][ T5941] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 191.029688][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.065770][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.111393][ T5941] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.160212][ T5941] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.175671][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.346253][ T5941] usb 2-1: config 0 descriptor?? [ 191.385431][ T7235] pim6reg: entered allmulticast mode [ 191.465845][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 191.635954][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 191.646065][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 191.714402][ T9] usb 3-1: config 0 has no interface number 0 [ 192.120196][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.135261][ T7230] pim6reg: left allmulticast mode [ 192.200300][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 192.292312][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.339936][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 192.389245][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 192.604234][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 192.629847][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.696183][ T9] usb 3-1: config 0 descriptor?? [ 192.725231][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 192.944274][ T9] usb 3-1: USB disconnect, device number 23 [ 192.960418][ T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 193.155649][ T5919] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 193.254376][ T5941] usbhid 2-1:0.0: can't add hid device: -71 [ 193.282857][ T5941] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 193.324832][ T5919] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00 [ 193.334637][ T5941] usb 2-1: USB disconnect, device number 21 [ 193.342606][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.360925][ T5919] usb 4-1: Product: syz [ 193.365868][ T5919] usb 4-1: Manufacturer: syz [ 193.370547][ T5919] usb 4-1: SerialNumber: syz [ 193.392921][ T5919] usb 4-1: config 0 descriptor?? [ 193.406583][ T5919] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 193.416438][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 193.428997][ T5919] usb 4-1: Detected FT2232HP [ 193.595796][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 193.613993][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 193.618900][ T7248] batadv1: entered promiscuous mode [ 193.629792][ T7248] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 193.642915][ T10] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 193.709236][ T5941] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 193.762696][ T5919] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 193.796144][ T10] usb 1-1: config 8 interface 0 altsetting 7 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.846878][ T5919] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 193.969733][ T10] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 193.972591][ T3095] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 193.985267][ T5919] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 193.991277][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 194.000200][ T10] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x8F has invalid wMaxPacketSize 0 [ 194.020681][ T5919] usb 4-1: USB disconnect, device number 26 [ 194.025011][ T5941] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 194.032248][ T10] usb 1-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.041399][ T5941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.049378][ T5919] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 194.161633][ T10] usb 1-1: config 8 interface 0 has no altsetting 0 [ 194.169708][ T5941] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.203339][ T5941] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.212832][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.220956][ T3095] usb 3-1: Using ep0 maxpacket: 32 [ 194.232170][ T3095] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.234000][ T5919] ftdi_sio 4-1:0.0: device disconnected [ 194.243350][ T3095] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.259698][ T10] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 194.269042][ T5941] usb 2-1: Product: syz [ 194.269063][ T5941] usb 2-1: Manufacturer: syz [ 194.269078][ T5941] usb 2-1: SerialNumber: syz [ 194.277952][ T3095] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 194.302732][ T3095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.320215][ T3095] usb 3-1: Product: syz [ 194.324475][ T3095] usb 3-1: Manufacturer: syz [ 194.342617][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.360033][ T3095] usb 3-1: SerialNumber: syz [ 194.361574][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.370394][ T3095] usb 3-1: config 0 descriptor?? [ 194.446788][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.454829][ T10] usb 1-1: Product: syz [ 194.481862][ T10] usb 1-1: Manufacturer: syz [ 194.487805][ T10] usb 1-1: SerialNumber: syz [ 194.644762][ T44] usb 3-1: USB disconnect, device number 24 [ 194.705026][ T5941] usb 2-1: 0:2 : does not exist [ 194.773113][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.788413][ T10] usb 1-1: selecting invalid altsetting 0 [ 194.815270][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 194.832409][ T7269] chnl_net:caif_netlink_parms(): no params data found [ 195.003131][ T10] snd-usb-audio 1-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 195.032090][ T10] usb 1-1: USB disconnect, device number 20 [ 195.165989][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 196.033976][ T7303] netlink: 56 bytes leftover after parsing attributes in process `syz.0.354'. [ 196.368206][ T5941] usb 2-1: USB disconnect, device number 22 [ 196.420215][ T5862] Bluetooth: hci1: command 0x0406 tx timeout [ 196.427515][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 196.433551][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 196.445637][ T5874] Bluetooth: hci4: command 0x0406 tx timeout [ 196.446216][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 196.486220][ T44] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 196.649343][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.666356][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.690614][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.727300][ T44] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.767281][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.843886][ T44] usb 1-1: config 0 descriptor?? [ 197.265890][ T44] usbhid 1-1:0.0: can't add hid device: -71 [ 197.278443][ T44] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 197.312210][ T44] usb 1-1: USB disconnect, device number 21 [ 197.465392][ T3095] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 197.827804][ T3095] usb 2-1: Using ep0 maxpacket: 16 [ 197.846977][ T3095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 240, changing to 11 [ 197.875318][ T3095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 33513, setting to 1024 [ 197.899384][ T3095] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 197.911000][ T3095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.014442][ T3095] usb 2-1: Product: syz [ 198.023995][ T3095] usb 2-1: Manufacturer: syz [ 198.029280][ T3095] usb 2-1: SerialNumber: syz [ 198.043512][ T3095] usb 2-1: config 0 descriptor?? [ 198.071225][ T3095] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 198.336081][ T44] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 198.525683][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 198.552650][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.581218][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.598245][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.616874][ T44] usb 1-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 198.630550][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.652161][ T44] usb 1-1: config 0 descriptor?? [ 198.809741][ T1093] usb 2-1: Failed to submit usb control message: -71 [ 198.817028][ T1093] usb 2-1: unable to send the bmi data to the device: -71 [ 198.827949][ T10] usb 2-1: USB disconnect, device number 23 [ 198.843769][ T1093] usb 2-1: unable to get target info from device [ 198.870503][ T1093] usb 2-1: could not get target info (-71) [ 198.895827][ T1093] usb 2-1: could not probe fw (-71) [ 199.237378][ T7346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 199.243773][ T7346] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 199.266789][ T44] wacom 0003:056A:0317.0003: unbalanced delimiter at end of report description [ 199.305665][ T44] wacom 0003:056A:0317.0003: parse failed [ 199.311543][ T44] wacom 0003:056A:0317.0003: probe with driver wacom failed with error -22 [ 199.337366][ T44] usb 1-1: USB disconnect, device number 22 [ 199.431882][ T7346] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.438169][ T7346] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 199.541030][ T7346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.548946][ T7346] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 199.580217][ T7346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 199.586800][ T7346] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 199.601426][ T7346] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 199.610162][ T7346] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 200.080100][ T7367] loop6: detected capacity change from 0 to 2560 [ 200.116778][ T7367] buffer_io_error: 11 callbacks suppressed [ 200.116796][ T7367] Buffer I/O error on dev loop6, logical block 0, async page read [ 200.136004][ T7367] Buffer I/O error on dev loop6, logical block 0, async page read [ 200.146904][ T7367] Buffer I/O error on dev loop6, logical block 0, async page read [ 200.185702][ T44] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 200.196895][ T7367] Buffer I/O error on dev loop6, logical block 0, async page read [ 200.215689][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 200.279913][ T7367] Buffer I/O error on dev loop6, logical block 0, async page read [ 200.405936][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 200.416471][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 200.421965][ T7367] Buffer I/O error on dev loop6, logical block 0, async page read [ 200.431108][ T10] usb 4-1: config 0 has an invalid interface number: 115 but max is 0 [ 200.439573][ T10] usb 4-1: config 0 has no interface number 0 [ 200.474153][ T10] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 200.485765][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.495664][ T10] usb 4-1: Product: syz [ 200.497368][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.504195][ T10] usb 4-1: Manufacturer: syz [ 200.516339][ T7367] Buffer I/O error on dev loop6, logical block 0, async page read [ 200.524428][ T7367] Buffer I/O error on dev loop6, logical block 0, async page read [ 200.545753][ T10] usb 4-1: SerialNumber: syz [ 200.550696][ T7367] ldm_validate_partition_table(): Disk read failed. [ 200.560707][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.561440][ T10] usb 4-1: config 0 descriptor?? [ 200.590354][ T7367] Buffer I/O error on dev loop6, logical block 0, async page read [ 200.610576][ T44] usb 2-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 200.636052][ T7367] Buffer I/O error on dev loop6, logical block 0, async page read [ 200.645427][ T7367] Dev loop6: unable to read RDB block 0 [ 200.652112][ T7367] loop6: unable to read partition table [ 200.665097][ T7367] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 200.683529][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.724948][ T5233] ldm_validate_partition_table(): Disk read failed. [ 200.763737][ T44] usb 2-1: config 0 descriptor?? [ 200.770024][ T5233] Dev loop6: unable to read RDB block 0 [ 200.776410][ T5233] loop6: unable to read partition table [ 201.217944][ T5864] Bluetooth: hci0: command 0x0406 tx timeout [ 201.307156][ T44] sony 0003:1430:474C.0004: unknown main item tag 0x0 [ 201.317415][ T44] sony 0003:1430:474C.0004: unknown main item tag 0x0 [ 201.340097][ T44] sony 0003:1430:474C.0004: hidraw0: USB HID v0.00 Device [HID 1430:474c] on usb-dummy_hcd.1-1/input0 [ 201.375678][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 201.394471][ T7365] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 201.455644][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 201.465750][ T44] sony 0003:1430:474C.0004: failed to claim input [ 201.506601][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.517301][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.551722][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 201.566508][ T10] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 201.586033][ T44] usb 2-1: USB disconnect, device number 24 [ 201.593178][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.644123][ T10] usb 1-1: Product: syz [ 201.644159][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 201.654485][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 201.655580][ T10] usb 1-1: Manufacturer: syz [ 201.660555][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 201.671809][ T10] usb 1-1: SerialNumber: syz [ 201.769046][ T10] usb 1-1: config 0 descriptor?? [ 201.800608][ T10] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 202.014790][ T10] gspca_m5602: Failed to find a sensor [ 202.039692][ T10] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 202.080273][ T10] usb 1-1: USB disconnect, device number 23 [ 202.701299][ T7390] pim6reg: entered allmulticast mode [ 202.966995][ T7387] pim6reg: left allmulticast mode [ 203.300158][ T5864] Bluetooth: hci0: command 0x0406 tx timeout [ 203.329242][ T7400] netlink: 'syz.0.380': attribute type 32 has an invalid length. [ 203.370440][ T7398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.538122][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 203.597282][ T7404] netlink: 56 bytes leftover after parsing attributes in process `syz.4.382'. [ 203.645083][ T44] usb 4-1: USB disconnect, device number 27 [ 203.695733][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 203.701779][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 203.707882][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 204.203165][ T7416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.145792][ T3095] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 205.257761][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 205.367336][ T3095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.448424][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 205.451390][ T3095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.475493][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.491587][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.528806][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 205.541452][ T3095] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.560233][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.588454][ T10] usb 4-1: Product: syz [ 205.603081][ T3095] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.632233][ T10] usb 4-1: Manufacturer: syz [ 205.645683][ T3095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.653991][ T10] usb 4-1: SerialNumber: syz [ 205.675509][ T3095] usb 5-1: config 0 descriptor?? [ 205.689242][ T10] usb 4-1: config 0 descriptor?? [ 205.999236][ T10] usb 4-1: USB disconnect, device number 28 [ 206.201646][ T3095] usbhid 5-1:0.0: can't add hid device: -71 [ 206.215899][ T3095] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 206.259614][ T7434] netlink: 56 bytes leftover after parsing attributes in process `syz.1.393'. [ 206.290518][ T3095] usb 5-1: USB disconnect, device number 22 [ 208.341906][ T5919] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 208.457205][ T7480] trusted_key: syz.2.409 sent an empty control message without MSG_MORE. [ 208.576146][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 208.589211][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 208.589224][ T30] audit: type=1326 audit(1756530066.799:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.1.407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb5f98ebe9 code=0x0 [ 208.658756][ T5919] usb 4-1: unable to get BOS descriptor or descriptor too short [ 208.741868][ T3095] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 208.920077][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 208.964408][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.026089][ T5919] usb 4-1: not running at top speed; connect to a high speed hub [ 209.039345][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.060184][ T5919] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 209.076691][ T3095] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.090045][ T3095] usb 3-1: config 0 has no interfaces? [ 209.139879][ T3095] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.159251][ T3095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.172335][ T3095] usb 3-1: config 0 descriptor?? [ 209.198088][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 209.357094][ T5919] usb 4-1: config 1 interface 0 has no altsetting 0 [ 209.386428][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.400675][ T5919] usb 4-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 209.414519][ T10] usb 1-1: Product: syz [ 209.424660][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.443588][ T10] usb 1-1: Manufacturer: syz [ 209.467181][ T5919] usb 4-1: Product: syz [ 209.477949][ T10] usb 1-1: SerialNumber: syz [ 209.486835][ T5919] usb 4-1: Manufacturer: syz [ 209.491532][ T5919] usb 4-1: SerialNumber: syz [ 209.559411][ T10] usb 1-1: config 0 descriptor?? [ 209.675411][ T7466] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 209.835926][ T7489] netlink: 'syz.1.411': attribute type 10 has an invalid length. [ 209.855012][ T7489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.870082][ T7489] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 209.896165][ T10] usb 1-1: USB disconnect, device number 24 [ 209.922115][ T5919] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input13 [ 210.127287][ T5218] bcm5974 4-1:1.0: could not read from device [ 210.134404][ T5218] bcm5974 4-1:1.0: could not read from device [ 210.177599][ T5919] usb 4-1: USB disconnect, device number 29 [ 210.182422][ T5218] bcm5974 4-1:1.0: could not read from device [ 210.204449][ T6098] bcm5974 4-1:1.0: could not read from device [ 210.222353][ T6098] udevd[6098]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 210.236831][ T6098] udevd[6098]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 210.252636][ T6098] udevd[6098]: Error opening device "/dev/input/event4": No such file or directory [ 210.262376][ T6098] udevd[6098]: Unable to EVIOCGABS device "/dev/input/event4" [ 210.270208][ T6098] udevd[6098]: Unable to EVIOCGABS device "/dev/input/event4" [ 210.278019][ T6098] udevd[6098]: Unable to EVIOCGABS device "/dev/input/event4" [ 210.287645][ T6098] udevd[6098]: Unable to EVIOCGABS device "/dev/input/event4" [ 210.295344][ T6098] udevd[6098]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 210.325068][ T5233] udevd[5233]: worker [6098] terminated by signal 6 (Aborted) [ 210.332772][ T5233] udevd[5233]: worker [6098] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input13/event4' [ 210.464749][ T7492] netlink: 'syz.0.412': attribute type 9 has an invalid length. [ 210.534971][ T7492] netlink: 184 bytes leftover after parsing attributes in process `syz.0.412'. [ 211.049011][ T7507] netlink: 'syz.0.417': attribute type 27 has an invalid length. [ 211.165727][ T3095] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 211.240854][ T7510] netlink: 56 bytes leftover after parsing attributes in process `syz.3.418'. [ 211.398523][ T7507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.411909][ T7507] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.462813][ T7507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.488385][ T3095] usb 5-1: Using ep0 maxpacket: 32 [ 211.571868][ T958] usb 3-1: USB disconnect, device number 25 [ 211.595678][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 211.676138][ T5919] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 211.719773][ T3095] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.740006][ T3095] usb 5-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.755696][ T10] usb 2-1: device descriptor read/64, error -71 [ 211.804528][ T3095] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 211.852813][ T3095] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 211.865681][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 211.962612][ T3095] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 211.962820][ T5919] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.977350][ T5919] usb 1-1: config 0 has no interface number 0 [ 212.005955][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 212.033519][ T5919] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 212.060462][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.068634][ T958] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 212.086290][ T5919] usb 1-1: Product: syz [ 212.177606][ T5919] usb 1-1: Manufacturer: syz [ 212.182320][ T5919] usb 1-1: SerialNumber: syz [ 212.193897][ T3095] usb 5-1: config 0 interface 0 has no altsetting 0 [ 212.218063][ T5919] usb 1-1: config 0 descriptor?? [ 212.225756][ T10] usb 2-1: device descriptor read/64, error -71 [ 212.233723][ T3095] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 212.245789][ T958] usb 3-1: Using ep0 maxpacket: 16 [ 212.265410][ T5919] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 212.273658][ T958] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 212.286519][ T958] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.300764][ T3095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.304384][ T958] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.324307][ T958] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.333703][ T958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.352569][ T958] usb 3-1: Product: syz [ 212.367714][ T10] usb usb2-port1: attempt power cycle [ 212.373491][ T958] usb 3-1: Manufacturer: syz [ 212.387327][ T958] usb 3-1: SerialNumber: syz [ 212.417288][ T3095] usb 5-1: config 0 descriptor?? [ 212.736123][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 212.836562][ T958] usb 3-1: 0:2 : does not exist [ 212.879411][ T10] usb 2-1: device descriptor read/8, error -71 [ 212.907706][ T3095] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 212.940938][ T3095] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 212.986415][ T3095] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 213.055461][ T3095] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 213.127077][ T7502] bond0: entered promiscuous mode [ 213.140821][ T7502] bond_slave_0: entered promiscuous mode [ 213.160804][ T3095] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 213.195874][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 213.206554][ T3095] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 213.230316][ T3095] hid-thrustmaster 0003:044F:B65D.0005: setup data couldn't be sent [ 213.246381][ T7502] bond_slave_1: entered promiscuous mode [ 213.261336][ T7502] bond0: left promiscuous mode [ 213.271160][ T7502] bond_slave_0: left promiscuous mode [ 213.291859][ T7502] bond_slave_1: left promiscuous mode [ 213.326386][ T10] usb 2-1: device descriptor read/8, error -71 [ 213.481193][ T10] usb usb2-port1: unable to enumerate USB device [ 213.575208][ C1] hid-thrustmaster 0003:044F:B65D.0005: URB to get model id failed with error -71 [ 213.576027][ T10] usb 5-1: USB disconnect, device number 23 [ 213.640093][ T7524] fido_id[7524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:044F:B65D.0005/report_descriptor': No such device [ 213.776299][ T5919] gspca_spca1528: reg_w err -110 [ 213.785165][ T5919] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 214.019023][ T7529] netlink: 'syz.1.424': attribute type 10 has an invalid length. [ 214.784439][ T5919] usb 3-1: USB disconnect, device number 26 [ 215.122468][ T10] usb 1-1: USB disconnect, device number 25 [ 215.540247][ T7553] netlink: 'syz.0.431': attribute type 7 has an invalid length. [ 215.585785][ T3095] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 215.757076][ T3095] usb 3-1: Using ep0 maxpacket: 16 [ 215.784672][ T3095] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 215.801768][ T3095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 215.859163][ T3095] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 215.895191][ T3095] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 215.907070][ T3095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.981041][ T3095] usb 3-1: Product: syz [ 215.985425][ T3095] usb 3-1: Manufacturer: syz [ 215.991771][ T3095] usb 3-1: SerialNumber: syz [ 216.014991][ T3095] usb 3-1: config 0 descriptor?? [ 216.025675][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 216.044462][ T7545] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 216.055332][ T3095] mceusb 3-1:0.0: mceusb_dev_probe: device setup failed! [ 216.076124][ T3095] mceusb 3-1:0.0: probe with driver mceusb failed with error -12 [ 216.115677][ T44] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 216.211667][ T10] usb 4-1: config 0 has no interfaces? [ 216.254260][ T7545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.276003][ T7545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.287053][ T44] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.381509][ T44] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 216.392142][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 216.407006][ T7545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.415660][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.436225][ T7548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.447601][ T10] usb 4-1: Product: syz [ 216.451895][ T10] usb 4-1: Manufacturer: syz [ 216.463175][ T7545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.473200][ T10] usb 4-1: SerialNumber: syz [ 216.485265][ T7548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.504088][ T7568] netlink: 'syz.4.436': attribute type 10 has an invalid length. [ 216.504500][ T44] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.515059][ T10] usb 4-1: config 0 descriptor?? [ 216.545747][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.654009][ T7568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.662248][ T5973] usb 3-1: USB disconnect, device number 27 [ 216.687367][ T7568] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 216.710763][ T7560] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 216.799524][ T44] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 217.001619][ T7556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.010663][ T7556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.129224][ T7560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.141764][ T7560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.390807][ T30] audit: type=1326 audit(1756530075.619:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7557 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0b58ebe9 code=0x7ffc0000 [ 217.477996][ T30] audit: type=1326 audit(1756530075.619:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7557 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0b58ebe9 code=0x7ffc0000 [ 217.876314][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 218.035922][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 218.050762][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 218.066550][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.078985][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.094060][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.104908][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.113347][ T10] usb 5-1: Product: syz [ 218.125790][ T10] usb 5-1: Manufacturer: syz [ 218.130578][ T10] usb 5-1: SerialNumber: syz [ 218.557399][ T10] usb 5-1: 0:2 : does not exist [ 219.101193][ T10] usb 1-1: USB disconnect, device number 26 [ 219.415235][ T44] usb 4-1: USB disconnect, device number 30 [ 219.955461][ T7600] pim6reg: entered allmulticast mode [ 220.371665][ T7597] pim6reg: left allmulticast mode [ 220.416172][ T44] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 220.641927][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 220.651564][ T10] usb 5-1: USB disconnect, device number 24 [ 220.657013][ T44] usb 2-1: not running at top speed; connect to a high speed hub [ 220.686227][ T44] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 220.698877][ T44] usb 2-1: config 1 interface 0 has no altsetting 0 [ 220.727746][ T44] usb 2-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 220.812807][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.855987][ T7625] netlink: 'syz.2.448': attribute type 10 has an invalid length. [ 220.865989][ T7623] netlink: 'syz.4.447': attribute type 9 has an invalid length. [ 220.873652][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 220.896275][ T44] usb 2-1: Product: syz [ 220.908107][ T44] usb 2-1: Manufacturer: syz [ 220.913198][ T44] usb 2-1: SerialNumber: syz [ 220.932786][ T7609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.987591][ T7623] macvlan2: entered promiscuous mode [ 220.995698][ T7623] hsr0: entered promiscuous mode [ 221.008838][ T7623] macvlan2: entered allmulticast mode [ 221.014354][ T7623] hsr0: entered allmulticast mode [ 221.019817][ T7623] hsr_slave_0: entered allmulticast mode [ 221.026447][ T7623] hsr_slave_1: entered allmulticast mode [ 221.233089][ T44] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input14 [ 221.546195][ T5218] bcm5974 2-1:1.0: could not read from device [ 221.556641][ T44] usb 2-1: USB disconnect, device number 29 [ 221.945660][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 222.364530][ T5919] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 222.492701][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 222.509367][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 222.543357][ T10] usb 1-1: config 0 has no interface number 0 [ 222.557487][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.567964][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 222.592080][ T5919] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 222.608481][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.619700][ T5919] usb 3-1: config 0 has no interface number 0 [ 222.631510][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 222.645762][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.658431][ T5919] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 222.672898][ T10] usb 1-1: Product: syz [ 222.677558][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.686033][ T10] usb 1-1: Manufacturer: syz [ 222.691227][ T10] usb 1-1: SerialNumber: syz [ 222.696435][ T5919] usb 3-1: Product: syz [ 222.700609][ T5919] usb 3-1: Manufacturer: syz [ 222.706786][ T5919] usb 3-1: SerialNumber: syz [ 222.711986][ T10] usb 1-1: config 0 descriptor?? [ 222.719581][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 222.729226][ T7656] chnl_net:caif_netlink_parms(): no params data found [ 222.771481][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 222.785090][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 222.827113][ T5919] usb 3-1: config 0 descriptor?? [ 222.856025][ T5919] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 222.888295][ T5919] usb 3-1: No valid video chain found. [ 223.040876][ T5973] usb 3-1: USB disconnect, device number 28 [ 223.166301][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 223.621574][ T10] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 223.665720][ T10] em28xx 1-1:0.132: board has no eeprom [ 223.765724][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 223.765753][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 223.766728][ T5919] em28xx 1-1:0.132: Registering V4L2 extension [ 223.805149][ T10] usb 1-1: USB disconnect, device number 27 [ 223.812807][ T30] audit: type=1326 audit(1756530082.039:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.2.462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f376098ebe9 code=0x0 [ 223.814618][ T10] em28xx 1-1:0.132: Disconnecting em28xx [ 223.934489][ T7678] input: syz0 as /devices/virtual/input/input15 [ 224.115300][ T5919] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 224.142042][ T5919] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 224.175086][ T5919] em28xx 1-1:0.132: No AC97 audio processor [ 224.264682][ T5919] usb 1-1: Decoder not found [ 224.296306][ T5919] em28xx 1-1:0.132: failed to create media graph [ 224.314506][ T5919] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 224.443446][ T5919] em28xx 1-1:0.132: Remote control support is not available for this card. [ 224.505161][ T10] em28xx 1-1:0.132: Closing input extension [ 224.580370][ T7692] netlink: 'syz.2.467': attribute type 32 has an invalid length. [ 224.626744][ T10] em28xx 1-1:0.132: Freeing device [ 225.085623][ T5919] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 225.296007][ T5973] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 225.305276][ T5919] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.314414][ T5919] usb 4-1: not running at top speed; connect to a high speed hub [ 225.323378][ T5919] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 225.357297][ T5919] usb 4-1: config 1 interface 0 has no altsetting 0 [ 225.399793][ T5919] usb 4-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 225.411352][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.477654][ T5919] usb 4-1: Product: syz [ 225.479094][ T5973] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.494616][ T5973] usb 2-1: config 0 has no interfaces? [ 225.501725][ T5973] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.514189][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.515785][ T5919] usb 4-1: Manufacturer: syz [ 225.554362][ T5919] usb 4-1: SerialNumber: syz [ 225.579453][ T7688] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.580955][ T5973] usb 2-1: config 0 descriptor?? [ 225.761788][ T7710] pim6reg: entered allmulticast mode [ 226.113474][ T5919] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input16 [ 226.158656][ T5919] usb 4-1: USB disconnect, device number 31 [ 226.434330][ T7707] pim6reg: left allmulticast mode [ 227.571839][ T7728] erspan1: entered allmulticast mode [ 228.236340][ T7725] netlink: 'syz.0.475': attribute type 10 has an invalid length. [ 228.245268][ T44] usb 2-1: USB disconnect, device number 30 [ 228.295049][ T7725] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.303876][ T7725] bond0: (slave team0): Enslaving as an active interface with an up link [ 229.116302][ T958] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 229.333072][ T958] usb 1-1: Using ep0 maxpacket: 16 [ 229.366863][ T958] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 229.381939][ T958] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.395932][ T44] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 229.442941][ T958] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.515337][ T958] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.533457][ T958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.564106][ T44] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 229.573380][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.577852][ T5919] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 229.594919][ T44] usb 2-1: config 0 descriptor?? [ 229.606629][ T958] usb 1-1: Product: syz [ 229.622911][ T958] usb 1-1: Manufacturer: syz [ 229.636087][ T958] usb 1-1: SerialNumber: syz [ 229.805627][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 229.813143][ T5919] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 229.822844][ T5919] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.841059][ T44] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 230.079778][ T5919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.095506][ T5919] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.109234][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.113440][ T44] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 230.124652][ T44] [drm] Initialized udl on minor 2 [ 230.132539][ T5919] usb 4-1: Product: syz [ 230.147600][ T5919] usb 4-1: Manufacturer: syz [ 230.160319][ T5919] usb 4-1: SerialNumber: syz [ 230.290782][ T958] usb 1-1: 0:2 : does not exist [ 230.291171][ T44] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 230.305316][ T44] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 230.557559][ T7762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.572945][ T7762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.604342][ T5919] usb 4-1: 0:2 : does not exist [ 231.230994][ T5973] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 231.241376][ T5919] usb 2-1: USB disconnect, device number 31 [ 231.248561][ T5973] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 231.815634][ T5919] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 231.856225][ T10] usb 1-1: USB disconnect, device number 28 [ 231.990200][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 232.021796][ T5919] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 232.039156][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.048650][ T5919] usb 2-1: Product: syz [ 232.053255][ T5919] usb 2-1: Manufacturer: syz [ 232.059281][ T5919] usb 2-1: SerialNumber: syz [ 232.079649][ T5919] usb 2-1: config 0 descriptor?? [ 232.290635][ T5919] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 232.346940][ T10] usb 4-1: USB disconnect, device number 32 [ 232.535776][ T3095] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 232.685889][ T3095] usb 1-1: Using ep0 maxpacket: 32 [ 232.697689][ T5973] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 232.718409][ T3095] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 232.728411][ T3095] usb 1-1: config 0 has no interface number 0 [ 232.740127][ T3095] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 232.753528][ T3095] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 232.755888][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 232.765472][ T3095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.802850][ T3095] usb 1-1: Product: syz [ 232.821517][ T3095] usb 1-1: Manufacturer: syz [ 232.830099][ T3095] usb 1-1: SerialNumber: syz [ 232.849792][ T3095] usb 1-1: config 0 descriptor?? [ 232.869059][ T3095] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 232.879807][ T5973] usb 3-1: Using ep0 maxpacket: 32 [ 232.895915][ T5973] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 232.914374][ T3095] em28xx 1-1:0.132: Video interface 132 found: [ 232.941076][ T5973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.968593][ T5973] usb 3-1: config 0 has no interface number 0 [ 232.982205][ T5973] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 232.990412][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 233.000846][ T5973] usb 3-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 233.022932][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 233.051609][ T5973] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 233.052163][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.067571][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.083949][ T5973] usb 3-1: Product: syz [ 233.090197][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.093474][ T5973] usb 3-1: Manufacturer: syz [ 233.122368][ T10] usb 4-1: Product: 䀊 [ 233.123484][ T5973] usb 3-1: SerialNumber: syz [ 233.143131][ T10] usb 4-1: Manufacturer: à ¬ [ 233.143212][ T5973] usb 3-1: config 0 descriptor?? [ 233.161958][ T5919] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 233.172691][ T7783] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 233.175998][ T10] usb 4-1: SerialNumber: syz [ 233.236109][ T5919] usb 2-1: USB disconnect, device number 32 [ 233.282061][ T3095] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 233.295272][ T7788] loop3: detected capacity change from 0 to 1 [ 233.312324][ T7641] Dev loop3: unable to read RDB block 1 [ 233.319494][ T7641] loop3: unable to read partition table [ 233.325493][ T7641] loop3: partition table beyond EOD, truncated [ 233.361225][ T7788] Dev loop3: unable to read RDB block 1 [ 233.371888][ T7788] loop3: unable to read partition table [ 233.431175][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.435801][ T5973] usb 3-1: probing VID:PID(0424:012C) [ 233.448146][ T5973] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0B [ 233.453976][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.454627][ T5973] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 233.463342][ T7788] loop3: partition table beyond EOD, [ 233.470606][ T5973] vub300 3-1:0.133: probe with driver vub300 failed with error -22 [ 233.478979][ T5973] usb 3-1: USB disconnect, device number 29 [ 233.499262][ T7788] truncated [ 233.502518][ T7788] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 233.566745][ T10] cdc_ncm 4-1:1.0: bind() failure [ 233.597321][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 233.605118][ T10] cdc_ncm 4-1:1.1: bind() failure [ 233.641288][ T10] usb 4-1: USB disconnect, device number 33 [ 233.698000][ T3095] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 233.743990][ T3095] em28xx 1-1:0.132: board has no eeprom [ 233.815877][ T3095] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 233.832855][ T3095] em28xx 1-1:0.132: analog set to bulk mode. [ 234.057476][ T5973] em28xx 1-1:0.132: Registering V4L2 extension [ 234.110476][ T3095] usb 1-1: USB disconnect, device number 29 [ 234.233361][ T3095] em28xx 1-1:0.132: Disconnecting em28xx [ 234.865930][ T5919] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 235.023052][ T5919] usb 3-1: device descriptor read/64, error -71 [ 235.034959][ T5973] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 235.043446][ T5973] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 235.064261][ T5973] em28xx 1-1:0.132: No AC97 audio processor [ 235.124235][ T5973] usb 1-1: Decoder not found [ 235.149139][ T5973] em28xx 1-1:0.132: failed to create media graph [ 235.162517][ T5973] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 235.182770][ T5973] em28xx 1-1:0.132: Remote control support is not available for this card. [ 235.227868][ T3095] em28xx 1-1:0.132: Closing input extension [ 235.238288][ T3095] em28xx 1-1:0.132: Freeing device [ 235.377240][ T5973] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 235.385634][ T5919] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 235.565813][ T5919] usb 3-1: device descriptor read/64, error -71 [ 235.682655][ T5973] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.692979][ T5973] usb 4-1: config 0 interface 0 has no altsetting 0 [ 235.713033][ T5973] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 235.736965][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.751917][ T5919] usb usb3-port1: attempt power cycle [ 235.822011][ T5973] usb 4-1: config 0 descriptor?? [ 236.045611][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 236.135685][ T5919] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 236.189567][ T5919] usb 3-1: device descriptor read/8, error -71 [ 236.220423][ T10] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 236.229875][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.251224][ T10] usb 2-1: Product: syz [ 236.265880][ T10] usb 2-1: Manufacturer: syz [ 236.270790][ T10] usb 2-1: SerialNumber: syz [ 236.286054][ T5973] magicmouse 0003:05AC:0269.0006: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 236.316279][ T10] usb 2-1: config 0 descriptor?? [ 236.445194][ T5973] usb 4-1: USB disconnect, device number 34 [ 236.471174][ T7835] fido_id[7835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 236.498159][ T5919] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 236.571273][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 236.587165][ T7834] bond_slave_0: entered promiscuous mode [ 236.593181][ T7834] bond_slave_1: entered promiscuous mode [ 236.600894][ T5919] usb 3-1: device descriptor read/8, error -71 [ 236.619918][ T7834] macvtap1: entered promiscuous mode [ 236.711190][ T7834] bond0: entered promiscuous mode [ 236.767068][ T5919] usb usb3-port1: unable to enumerate USB device [ 236.786677][ T7834] batadv0: entered promiscuous mode [ 236.792378][ T7834] macvtap1: entered allmulticast mode [ 236.815893][ T7834] bond0: entered allmulticast mode [ 236.821154][ T7834] bond_slave_0: entered allmulticast mode [ 236.833522][ T7834] bond_slave_1: entered allmulticast mode [ 236.844989][ T7834] batadv0: entered allmulticast mode [ 236.852992][ T7834] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 236.875505][ T10] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 236.893798][ T10] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 236.910019][ T10] usb 2-1: USB disconnect, device number 33 [ 236.920310][ T7840] netlink: 'syz.0.509': attribute type 1 has an invalid length. [ 236.928047][ T7840] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.509'. [ 236.971232][ T7840] netlink: 104 bytes leftover after parsing attributes in process `syz.0.509'. [ 237.533307][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 237.575777][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 237.736547][ T7854] syzkaller1: entered promiscuous mode [ 237.775711][ T7854] syzkaller1: entered allmulticast mode [ 238.063521][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 238.671533][ T7873] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 240.135713][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 240.295650][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 240.317746][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 240.359921][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.410368][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.435638][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.448298][ T10] usb 5-1: Product: syz [ 240.452516][ T10] usb 5-1: Manufacturer: syz [ 240.525618][ T10] usb 5-1: SerialNumber: syz [ 240.583197][ T10] usb 5-1: config 0 descriptor?? [ 240.622688][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 240.704387][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 240.884936][ T7910] netlink: 'syz.1.524': attribute type 9 has an invalid length. [ 240.915776][ T7910] netlink: 184 bytes leftover after parsing attributes in process `syz.1.524'. [ 241.231121][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 241.246215][ T10] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 241.502892][ T7923] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 241.559964][ T5941] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 241.617355][ T10] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 241.628702][ T10] em28xx 5-1:0.0: No AC97 audio processor [ 241.647496][ T10] usb 5-1: USB disconnect, device number 25 [ 241.666388][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 241.686853][ T10] em28xx 5-1:0.0: Freeing device [ 241.915616][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 241.935075][ T5941] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 241.944129][ T5941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.968425][ T5941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.988876][ T5941] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.998655][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.010341][ T5941] usb 4-1: Product: syz [ 242.014806][ T5941] usb 4-1: Manufacturer: syz [ 242.020243][ T5941] usb 4-1: SerialNumber: syz [ 242.518549][ T5941] usb 4-1: 0:2 : does not exist [ 242.916767][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 242.962519][ T7939] FAULT_INJECTION: forcing a failure. [ 242.962519][ T7939] name failslab, interval 1, probability 0, space 0, times 1 [ 242.995844][ T7939] CPU: 1 UID: 0 PID: 7939 Comm: syz.4.531 Not tainted syzkaller #0 PREEMPT(full) [ 242.995869][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.995887][ T7939] Call Trace: [ 242.995894][ T7939] [ 242.995903][ T7939] dump_stack_lvl+0x189/0x250 [ 242.995934][ T7939] ? __pfx____ratelimit+0x10/0x10 [ 242.995958][ T7939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.995978][ T7939] ? __pfx__printk+0x10/0x10 [ 242.995997][ T7939] ? genl_rcv+0x28/0x40 [ 242.996016][ T7939] ? __sys_sendto+0x3bd/0x520 [ 242.996031][ T7939] ? do_syscall_64+0xfa/0x3b0 [ 242.996058][ T7939] should_fail_ex+0x414/0x560 [ 242.996086][ T7939] should_failslab+0xa8/0x100 [ 242.996109][ T7939] kmem_cache_alloc_noprof+0x73/0x3c0 [ 242.996131][ T7939] ? skb_clone+0x212/0x3a0 [ 242.996154][ T7939] skb_clone+0x212/0x3a0 [ 242.996183][ T7939] __netlink_deliver_tap+0x404/0x850 [ 242.996218][ T7939] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.996243][ T7939] netlink_deliver_tap+0x19c/0x1b0 [ 242.996265][ T7939] netlink_sendskb+0x68/0x140 [ 242.996289][ T7939] netlink_unicast+0x397/0x9e0 [ 242.996306][ T7939] ? __asan_memcpy+0x40/0x70 [ 242.996331][ T7939] ? __pfx_netlink_unicast+0x10/0x10 [ 242.996360][ T7939] netlink_rcv_skb+0x28c/0x470 [ 242.996380][ T7939] ? __lock_acquire+0xab9/0xd20 [ 242.996402][ T7939] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.996423][ T7939] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.996466][ T7939] ? down_read+0x1ad/0x2e0 [ 242.996486][ T7939] genl_rcv+0x28/0x40 [ 242.996504][ T7939] netlink_unicast+0x82c/0x9e0 [ 242.996534][ T7939] ? __pfx_netlink_unicast+0x10/0x10 [ 242.996558][ T7939] ? netlink_sendmsg+0x642/0xb30 [ 242.996571][ T7939] ? skb_put+0x11b/0x210 [ 242.996592][ T7939] netlink_sendmsg+0x805/0xb30 [ 242.996618][ T7939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.996639][ T7939] ? aa_sock_msg_perm+0xf1/0x1d0 [ 242.996657][ T7939] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 242.996675][ T7939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.996692][ T7939] __sock_sendmsg+0x219/0x270 [ 242.996717][ T7939] __sys_sendto+0x3bd/0x520 [ 242.996737][ T7939] ? __pfx___sys_sendto+0x10/0x10 [ 242.996765][ T7939] ? count_memcg_event_mm+0x21/0x260 [ 242.996799][ T7939] ? exc_page_fault+0x76/0xf0 [ 242.996825][ T7939] ? do_user_addr_fault+0xc8a/0x1390 [ 242.996854][ T7939] __x64_sys_sendto+0xde/0x100 [ 242.996875][ T7939] do_syscall_64+0xfa/0x3b0 [ 242.996890][ T7939] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.996911][ T7939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.996927][ T7939] ? clear_bhb_loop+0x60/0xb0 [ 242.996948][ T7939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.996964][ T7939] RIP: 0033:0x7f57dcf90a7c [ 242.996988][ T7939] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 242.997003][ T7939] RSP: 002b:00007f57ddd77ee0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 242.997022][ T7939] RAX: ffffffffffffffda RBX: 00007f57ddd77fa0 RCX: 00007f57dcf90a7c [ 242.997035][ T7939] RDX: 0000000000000014 RSI: 00007f57ddd77ff0 RDI: 0000000000000004 [ 242.997045][ T7939] RBP: 0000000000000000 R08: 00007f57ddd77f34 R09: 000000000000000c [ 242.997056][ T7939] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 242.997066][ T7939] R13: 0000000000000000 R14: 00007f57ddd77ff0 R15: 0000000000000000 [ 242.997094][ T7939] [ 243.905635][ T5973] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 244.070300][ T5973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.097985][ T5973] usb 3-1: config 0 has no interfaces? [ 244.113653][ T5973] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.133110][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.169561][ T5973] usb 3-1: config 0 descriptor?? [ 244.291274][ T5973] usb 4-1: USB disconnect, device number 35 [ 244.400599][ T7970] netlink: 156 bytes leftover after parsing attributes in process `syz.3.541'. [ 245.144830][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 245.224991][ T5973] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 245.485692][ T5973] usb 5-1: device descriptor read/64, error -71 [ 245.666557][ T7989] capability: warning: `syz.3.547' uses deprecated v2 capabilities in a way that may be insecure [ 245.828950][ T7989] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.925626][ T5973] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 246.267621][ T5973] usb 5-1: device descriptor read/64, error -71 [ 246.436364][ T5973] usb usb5-port1: attempt power cycle [ 246.563154][ T7989] syz.3.547 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 246.811844][ T5973] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 246.856214][ T5973] usb 5-1: device descriptor read/8, error -71 [ 246.992266][ T10] usb 3-1: USB disconnect, device number 34 [ 247.062757][ T8002] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 247.109904][ T5973] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 247.535839][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 247.613326][ T5973] usb 5-1: device descriptor read/8, error -71 [ 247.698594][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.749721][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.755930][ T5973] usb usb5-port1: unable to enumerate USB device [ 247.796221][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 247.842188][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 247.890953][ T10] usb 3-1: SerialNumber: syz [ 247.945643][ T958] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 248.143153][ T958] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.156084][ T10] usb 3-1: 0:2 : does not exist [ 248.180082][ T958] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 248.206938][ T10] usb 3-1: USB disconnect, device number 35 [ 248.230701][ T958] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.258930][ T958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.305398][ T8010] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 248.319892][ T958] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 248.323880][ T7641] udevd[7641]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.476039][ T5973] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 248.544657][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.606012][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.636330][ T5973] usb 2-1: Using ep0 maxpacket: 32 [ 248.651321][ T5973] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.667126][ T5973] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 248.684183][ T5973] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 248.696247][ T5973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.704404][ T5973] usb 2-1: Product: syz [ 248.709264][ T5973] usb 2-1: Manufacturer: syz [ 248.714817][ T5973] usb 2-1: SerialNumber: syz [ 248.759651][ T5973] usb 2-1: config 0 descriptor?? [ 248.980570][ T30] audit: type=1326 audit(1756530107.209:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124358ebe9 code=0x7ffc0000 [ 249.028881][ T5973] usb 2-1: USB disconnect, device number 34 [ 249.086728][ T30] audit: type=1326 audit(1756530107.209:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124358ebe9 code=0x7ffc0000 [ 249.174026][ T8026] netlink: 'syz.2.557': attribute type 9 has an invalid length. [ 249.182188][ T8026] netlink: 184 bytes leftover after parsing attributes in process `syz.2.557'. [ 249.668740][ T8035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.558'. [ 250.455429][ T8048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.562'. [ 250.676267][ T10] usb 4-1: USB disconnect, device number 36 [ 250.706058][ T5973] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 250.845919][ T5973] usb 5-1: device descriptor read/64, error -71 [ 251.105664][ T5973] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 251.775641][ T5973] usb 5-1: device descriptor read/64, error -71 [ 251.879843][ T8057] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 251.896397][ T5973] usb usb5-port1: attempt power cycle [ 252.256777][ T5973] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 252.276550][ T5973] usb 5-1: device descriptor read/8, error -71 [ 252.375673][ T3095] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 252.449786][ T30] audit: type=1326 audit(1756530110.679:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8066 comm="syz.0.569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f0b58ebe9 code=0x0 [ 252.545680][ T5973] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 252.566299][ T5973] usb 5-1: device descriptor read/8, error -71 [ 252.573702][ T3095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.584976][ T3095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.594970][ T3095] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 252.604876][ T3095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.616518][ T3095] usb 2-1: config 0 descriptor?? [ 252.676395][ T5973] usb usb5-port1: unable to enumerate USB device [ 252.725915][ T5941] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 252.886662][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 252.896844][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.907392][ T5941] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 252.920565][ T5941] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 252.930286][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.939027][ T5941] usb 4-1: Product: syz [ 252.944398][ T5941] usb 4-1: Manufacturer: syz [ 252.949534][ T5941] usb 4-1: SerialNumber: syz [ 252.967361][ T5941] usb 4-1: config 0 descriptor?? [ 253.087186][ T3095] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 253.094510][ T3095] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 253.117574][ T3095] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0007/input/input17 [ 253.183629][ T3095] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 253.191487][ T10] usb 4-1: USB disconnect, device number 37 [ 253.266937][ T3095] usb 2-1: USB disconnect, device number 35 [ 253.412588][ T8082] fido_id[8082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 253.897621][ T5941] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 254.058878][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.091677][ T5941] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 254.137723][ T5941] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 254.180178][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.411329][ T5941] usb 5-1: config 0 descriptor?? [ 254.442082][ T8109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.583'. [ 254.499463][ T5941] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 254.508962][ T5941] dvb-usb: bulk message failed: -22 (3/0) [ 254.644664][ T8103] pim6reg: entered allmulticast mode [ 254.810402][ T5941] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 254.896869][ T5941] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 254.945960][ T5941] usb 5-1: media controller created [ 254.970782][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.044033][ T8095] pim6reg: left allmulticast mode [ 255.058912][ T5941] dvb-usb: bulk message failed: -22 (6/0) [ 255.080613][ T5941] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 255.133945][ T5941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 255.189588][ T5941] dvb-usb: schedule remote query interval to 150 msecs. [ 255.224984][ T5941] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 255.261440][ T5941] usb 5-1: USB disconnect, device number 34 [ 255.361563][ T5941] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 255.814550][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.847431][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.291800][ T8123] netlink: 'syz.4.586': attribute type 7 has an invalid length. [ 256.725059][ T30] audit: type=1326 audit(1756530114.929:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 257.035730][ T30] audit: type=1326 audit(1756530114.929:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 257.071526][ T30] audit: type=1326 audit(1756530114.929:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 257.093923][ T3095] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 257.115365][ T30] audit: type=1326 audit(1756530114.929:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 257.178742][ T30] audit: type=1326 audit(1756530114.929:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 257.213643][ T30] audit: type=1326 audit(1756530114.929:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 257.250075][ T30] audit: type=1326 audit(1756530114.929:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 257.272454][ T3095] usb 3-1: Using ep0 maxpacket: 32 [ 257.294246][ T3095] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.307234][ T3095] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 257.319464][ T30] audit: type=1326 audit(1756530114.929:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 257.329752][ T8135] loop6: detected capacity change from 0 to 2560 [ 257.344684][ T30] audit: type=1326 audit(1756530114.939:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 257.373506][ T3095] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 257.393087][ T3095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.412000][ T3095] usb 3-1: Product: syz [ 257.418811][ T3095] usb 3-1: Manufacturer: syz [ 257.446890][ T3095] usb 3-1: SerialNumber: syz [ 257.471471][ T3095] usb 3-1: config 0 descriptor?? [ 257.494256][ T8135] buffer_io_error: 27 callbacks suppressed [ 257.494272][ T8135] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.501501][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 257.529507][ T8135] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.530606][ T30] audit: type=1326 audit(1756530114.939:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5f98ebe9 code=0x7ffc0000 [ 257.608921][ T8135] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.675808][ T8135] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.694151][ T3095] usb 3-1: USB disconnect, device number 36 [ 257.743200][ T8135] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.762810][ T8135] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.776894][ T8135] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.787621][ T8135] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.795732][ T8135] ldm_validate_partition_table(): Disk read failed. [ 257.813014][ T8135] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.025838][ T8135] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.048487][ T8135] Dev loop6: unable to read RDB block 0 [ 258.071489][ T8135] loop6: unable to read partition table [ 258.091489][ T8135] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 258.788615][ T8150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.594'. [ 258.898220][ T8154] macvlan2: mtu less than device minimum [ 259.178435][ T8161] fuse: Bad value for 'user_id' [ 259.203369][ T8161] fuse: Bad value for 'user_id' [ 259.472185][ T8174] binder: BINDER_SET_CONTEXT_MGR already set [ 259.478468][ T8174] binder: 8173:8174 ioctl 4018620d 200000004a80 returned -16 [ 259.574977][ T8177] ------------[ cut here ]------------ [ 259.580917][ T8177] WARNING: CPU: 0 PID: 8177 at fs/exec.c:119 path_noexec+0x1af/0x200 [ 259.589154][ T8177] Modules linked in: [ 259.593236][ T8177] CPU: 0 UID: 0 PID: 8177 Comm: syz.3.600 Not tainted syzkaller #0 PREEMPT(full) [ 259.602687][ T8177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.613111][ T8177] RIP: 0010:path_noexec+0x1af/0x200 [ 259.618581][ T8177] Code: 02 31 ff 48 89 de e8 20 f6 89 ff d1 eb eb 07 e8 37 f1 89 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 22 f1 89 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 259.638393][ T8177] RSP: 0018:ffffc9001d39fbd8 EFLAGS: 00010287 [ 259.644449][ T8177] RAX: ffffffff8235ba6e RBX: ffff888075985740 RCX: 0000000000080000 [ 259.652666][ T8177] RDX: ffffc9000df90000 RSI: 0000000000000064 RDI: 0000000000000065 [ 259.660664][ T8177] RBP: 0000000000080000 R08: ffff8880333bbc00 R09: 0000000000000003 [ 259.668647][ T8177] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002 [ 259.676643][ T8177] R13: 1ffff92003a73f90 R14: 0000000000000000 R15: dffffc0000000000 [ 259.684608][ T8177] FS: 00007f12443686c0(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 259.693562][ T8177] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.700570][ T8177] CR2: 00007f1244367f98 CR3: 000000007516e000 CR4: 00000000003526f0 [ 259.708809][ T8177] Call Trace: [ 259.712103][ T8177] [ 259.715019][ T8177] do_mmap+0xa43/0x10d0 [ 259.719240][ T8177] ? __pfx_do_mmap+0x10/0x10 [ 259.723852][ T8177] ? down_write_killable+0x178/0x230 [ 259.729311][ T8177] ? __pfx_down_write_killable+0x10/0x10 [ 259.734968][ T8177] ? common_file_perm+0x1b5/0x230 [ 259.740468][ T8177] vm_mmap_pgoff+0x2a6/0x4d0 [ 259.745106][ T8177] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 259.750397][ T8177] ? __fget_files+0x2a/0x420 [ 259.755024][ T8177] ? __fget_files+0x3a0/0x420 [ 259.759799][ T8177] ? __fget_files+0x2a/0x420 [ 259.764432][ T8177] ksys_mmap_pgoff+0x51f/0x760 [ 259.769261][ T8177] do_syscall_64+0xfa/0x3b0 [ 259.773789][ T8177] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.779273][ T8177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.785363][ T8177] ? clear_bhb_loop+0x60/0xb0 [ 259.785692][ T3095] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 259.790131][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.803935][ T8177] RIP: 0033:0x7f124358ebe9 [ 259.808800][ T8177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.828545][ T8177] RSP: 002b:00007f1244368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 259.837032][ T8177] RAX: ffffffffffffffda RBX: 00007f12437c6090 RCX: 00007f124358ebe9 [ 259.845027][ T8177] RDX: 0000000002000003 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 259.853086][ T8177] RBP: 00007f1243611e19 R08: 0000000000000003 R09: 0000000008000000 [ 259.861187][ T8177] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 259.869506][ T8177] R13: 00007f12437c6128 R14: 00007f12437c6090 R15: 00007f12438efa28 [ 259.877788][ T8177] [ 259.880837][ T8177] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 259.888127][ T8177] CPU: 0 UID: 0 PID: 8177 Comm: syz.3.600 Not tainted syzkaller #0 PREEMPT(full) [ 259.897367][ T8177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.907437][ T8177] Call Trace: [ 259.910886][ T8177] [ 259.913833][ T8177] dump_stack_lvl+0x99/0x250 [ 259.918424][ T8177] ? __asan_memcpy+0x40/0x70 [ 259.923049][ T8177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.928439][ T8177] ? __pfx__printk+0x10/0x10 [ 259.933052][ T8177] vpanic+0x281/0x750 [ 259.937051][ T8177] ? __pfx__printk+0x10/0x10 [ 259.941649][ T8177] ? __pfx_vpanic+0x10/0x10 [ 259.946174][ T8177] ? is_bpf_text_address+0x292/0x2b0 [ 259.951538][ T8177] panic+0xb9/0xc0 [ 259.955363][ T8177] ? __pfx_panic+0x10/0x10 [ 259.959909][ T8177] __warn+0x31b/0x4b0 [ 259.963904][ T8177] ? path_noexec+0x1af/0x200 [ 259.968517][ T8177] ? path_noexec+0x1af/0x200 [ 259.973104][ T8177] report_bug+0x2be/0x4f0 [ 259.977438][ T8177] ? path_noexec+0x1af/0x200 [ 259.982028][ T8177] ? path_noexec+0x1af/0x200 [ 259.986628][ T8177] ? path_noexec+0x1b1/0x200 [ 259.991209][ T8177] handle_bug+0x84/0x160 [ 259.995477][ T8177] exc_invalid_op+0x1a/0x50 [ 260.000045][ T8177] asm_exc_invalid_op+0x1a/0x20 [ 260.004889][ T8177] RIP: 0010:path_noexec+0x1af/0x200 [ 260.010124][ T8177] Code: 02 31 ff 48 89 de e8 20 f6 89 ff d1 eb eb 07 e8 37 f1 89 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 22 f1 89 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 260.029835][ T8177] RSP: 0018:ffffc9001d39fbd8 EFLAGS: 00010287 [ 260.035915][ T8177] RAX: ffffffff8235ba6e RBX: ffff888075985740 RCX: 0000000000080000 [ 260.043900][ T8177] RDX: ffffc9000df90000 RSI: 0000000000000064 RDI: 0000000000000065 [ 260.051975][ T8177] RBP: 0000000000080000 R08: ffff8880333bbc00 R09: 0000000000000003 [ 260.059948][ T8177] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002 [ 260.068106][ T8177] R13: 1ffff92003a73f90 R14: 0000000000000000 R15: dffffc0000000000 [ 260.076093][ T8177] ? path_noexec+0x1ae/0x200 [ 260.080709][ T8177] ? path_noexec+0x1ae/0x200 [ 260.085338][ T8177] do_mmap+0xa43/0x10d0 [ 260.089531][ T8177] ? __pfx_do_mmap+0x10/0x10 [ 260.094131][ T8177] ? down_write_killable+0x178/0x230 [ 260.099436][ T8177] ? __pfx_down_write_killable+0x10/0x10 [ 260.105161][ T8177] ? common_file_perm+0x1b5/0x230 [ 260.110209][ T8177] vm_mmap_pgoff+0x2a6/0x4d0 [ 260.114830][ T8177] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 260.119953][ T8177] ? __fget_files+0x2a/0x420 [ 260.124575][ T8177] ? __fget_files+0x3a0/0x420 [ 260.129258][ T8177] ? __fget_files+0x2a/0x420 [ 260.133860][ T8177] ksys_mmap_pgoff+0x51f/0x760 [ 260.138665][ T8177] do_syscall_64+0xfa/0x3b0 [ 260.143181][ T8177] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.148437][ T8177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.154528][ T8177] ? clear_bhb_loop+0x60/0xb0 [ 260.159225][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.165197][ T8177] RIP: 0033:0x7f124358ebe9 [ 260.169718][ T8177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.189336][ T8177] RSP: 002b:00007f1244368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 260.197760][ T8177] RAX: ffffffffffffffda RBX: 00007f12437c6090 RCX: 00007f124358ebe9 [ 260.205862][ T8177] RDX: 0000000002000003 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 260.213868][ T8177] RBP: 00007f1243611e19 R08: 0000000000000003 R09: 0000000008000000 [ 260.221857][ T8177] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 260.229849][ T8177] R13: 00007f12437c6128 R14: 00007f12437c6090 R15: 00007f12438efa28 [ 260.237849][ T8177] [ 260.241033][ T8177] Kernel Offset: disabled [ 260.245350][ T8177] Rebooting in 86400 seconds..