last executing test programs: 7.641938318s ago: executing program 2 (id=1413): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0, 0xfffffffe}, 0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14, 0xf, 0xa, 0x301, 0x70bd28, 0x25dfdbfc, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000090) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) socket$inet6(0xa, 0x2, 0x3a) 6.232298571s ago: executing program 1 (id=1418): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="54000000171e53733ba025ed3b71ed770100000208000041000000446000dc4e49b1953ed84219ffc93b902761b522f32f909cbb6de9acd4da1ce1956fe03eeae75da9b216730d579f11d6da03fb722adbdc72bbde3ea29f0ff370c1000000"], 0x54}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000000140)=""/34, 0x22}], 0x2}}], 0x1, 0x2140, 0x0) 6.049997399s ago: executing program 1 (id=1420): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb76}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002380)={0x1, 0x0, [{0x4000008e, 0x0, 0x4bdc}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 5.859972345s ago: executing program 2 (id=1422): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000180)={r1}, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="820000000000000020000040"]) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000005c0)=ANY=[@ANYBLOB]) sendto$inet6(r4, &(0x7f0000000700)="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", 0xfffffffffffffe72, 0x240000c0, 0x0, 0xfffffffffffffd3f) syz_emit_ethernet(0xba, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x4, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0x3ff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb}, {0x2, 0x0, 0x1}, {0xd896}, {0xf86, 0x0, 0x1}], @generic="2ef051a70d7057a631fc69d60b80490342f9fa123bddb3e10cf65f61038b3099c63fcd7fbb8a4cd9af6512d75002af66908423ad6957a9fc650fece6daa2e20b234c0f4a827d1949769c765757b539d025a06094a4c05faa425053f599e41f3c6d4d7b002b703258d18382175ad4947638c6f5bf555c52e97c989c3e98dbec81a65caec7f3b85b5012aec4a9"}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x1d, &(0x7f0000000080)={&(0x7f00000001c0)=@getnexthop={0x1c, 0x6a, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NHA_ID]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 5.737906562s ago: executing program 1 (id=1423): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000340)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="8402020300000000000000000001"], 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) r3 = getpgid(0xffffffffffffffff) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x0, 0x1d, 0x8, 0x9, 0x10001, 0x200, 0x3, 0x133388da, 0x7ff}, 0x0) 5.521221928s ago: executing program 2 (id=1426): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x73) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0xc3, 0x9, 0xa}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) userfaultfd(0x1) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40044103, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0xf0ffffffffffff}, 0x4805) ioctl$FIONCLEX(r0, 0x5450) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x77540947ad9a168d}) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000180)={0x0, 0x3f00}) 5.157868983s ago: executing program 2 (id=1429): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x9, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3fe, 0x586, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x3, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x4008, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0xc0044dff, &(0x7f0000004000)) timerfd_create(0x0, 0x800) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000001c0)=0x2001) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000001c0)={&(0x7f00000000c0)=[{0x9, 0x1, 0x0, &(0x7f0000001280)}], 0x1}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QBUF(r5, 0xc04c560f, &(0x7f00000002c0)=@mmap={0x7f, 0xa, 0x4, 0x4000, 0x9, {0x77359400}, {0x5, 0x0, 0x7, 0x2, 0x9, 0x7, "c6ce5046"}, 0x9, 0x1, {}, 0x2}) mmap(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4, 0x50, r5, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.132620068s ago: executing program 0 (id=1431): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty, 0x0, 0x3ff}, {@in6=@remote, 0x4d4, 0x3c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x3}, {}, 0x40, 0x0, 0xa, 0x0, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x138}}, 0x4000004) 4.883609211s ago: executing program 0 (id=1434): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES64=r0], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0x5e, 0x6, 0x0, 0x0, 0xe, 0x1b}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x40) 4.520790382s ago: executing program 3 (id=1438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000b060108feaa0000000000000600000205000100070000002c000780180003801400024000000000000000000000000000000000060004405521000005000300cb001b000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x8190) (async) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000020800000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (rerun: 64) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x6f92}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000001100)=""/4104, 0x1008}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000000c00)=""/193, 0xc1}], 0x4}, 0x80000000}], 0x4, 0x20, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x11, "0070ba5d83000644ec00"}) (async) r4 = syz_open_pts(r3, 0x20800) dup3(r4, r3, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) io_setup(0x7, &(0x7f0000000240)=0x0) syz_usb_connect(0x3, 0x146, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002a4b4b708b40402005ce201020301090234"], 0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r5, 0x0}]) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000040)={0x6, 0xd, 0xfffffffb, 0x73e, 0xf, "9dfc9368c779d6c3c23006bcccc5fef5343a4f"}) (async) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x450003, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) (async, rerun: 64) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (rerun: 64) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000002580)={&(0x7f0000003840)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}], 0x2}) 3.944070334s ago: executing program 3 (id=1441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@deltaction={0x88, 0x31, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x96}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x88}}, 0x40000) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newtfilter={0x30, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) r9 = syz_open_dev$dri(0x0, 0x1, 0x101001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000340)={0x13, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000002c0)={0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571104100000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = signalfd(r3, &(0x7f00000001c0)={[0x0, 0xfffffff9]}, 0x8) setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "0f1913b146e65b21", "2c5c7e293c1bf79d475b171611930bb6c552f4833c884247c18b24431bf55e59", "17fa814a", "643faa8d748d38fa"}, 0x38) 3.115305622s ago: executing program 0 (id=1444): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000005f793efc1c90691e1fb4748c109e740500000000046e60b3d10000001200000000000000200000002309c652c0cb57cbe556648b300da14b7fc2452a105107dd76cbdddc36fe065d7c0e28e373a7e5b76a07b0cd242134ce9795dbd8d8b1a9990f47b55291b84e61ba4839300b45c44bdf0be050b06b3bb5582d17e4de1ac33288e79e292db4563fb7da3ef5fca525c73f530acc1051709c590293ce7029b67c3f3e7ad4d7a62e61ce9bccb53bd554e365f859f4a9e71c0810f2e8"], 0x24, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) 2.665938446s ago: executing program 4 (id=1446): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x4c, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c85, 0x23, @random, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x1]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x60000000) 2.665202425s ago: executing program 1 (id=1447): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x9, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000000c0)={0x3, 0x200, 0x9, 0xffff, 0x3, 0xfffffffd}) shutdown(r0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000280)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x250, 0x27, 0x9, 0x0, 0x0, {0x3}, [@nested={0xbc, 0x131, 0x0, 0x1, [@nested={0xb7, 0x14a, 0x0, 0x1, [@generic, @generic="5737f53a53a6daac47a9b61aeac6c18edca43e87a8a603fba87f6534e61ae38156c867f8168cae7db69ca8212a593635f17f503a0857be1f091b0cb6f76477a4d3c41dc4186180ab4643fc17077e6e5e2577cfcd73b615edbd63f357ed93399b60a94a631c4c85c5c2ed619cf3a0783c4a1bcb4fa013b0caf88f56d6579916a2cc45d27077f3524b599eefaf9cce85efa10d486c0d6f8943561174c6e894be891c8ec81d16077aeabb020a9212d313a2892cd1"]}]}, @typed={0x8, 0x66, 0x0, 0x0, @u32=0xffff2fd6}, @typed={0x8, 0x13b, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}, @generic="6b3a66c9d884476d6f821b2605834ccb81cd7c61606ee94bd40b911e4b7b86efb2907bb8d9a080f5c5b059cd563b66fc28a92f5a85f77c2d3d34641ccbbb89d0046ba5b7edc2db3f1160b13774b3d1d3cb33854caae167f9c962960372b0f6", @nested={0x10e, 0x87, 0x0, 0x1, [@generic="bc40bdbb62bc578a0b731c2b85cc6db96e08fd6023f3be927107b32c3196a19eeba6f75bb3af06878b436fdfb9c69cc25cb1a20c08fa06957f7c24294bf9f6a6926655c84e5fcd7a70ccd15dad1f9ddc8aed50a1011ca68f9e12cf25ffa973fbdadccc792c398fb57610c24524da4fdae0a890673f32f3ba936e39ce5f26b8836c3fd1fc6b4e43f494761ea26abe5a088a788e1748e1e59bb5cdf787a13ef5dfcf53b62ce87f6066c30db7024d5917a78201ae604159891a84672bea", @typed={0x4, 0x91}, @generic="3bf5f77e3cca4ed4497662f1ba93b181072559b85f1de128fe4491bf0c7a38e7e38d8f874820bbaf70da0881699e99aa4c77234be09e9668fc5efc81e1da2c8c7979ce2855ac", @typed={0x4}]}]}, 0x250}}, 0x0) r6 = openat$audio1(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r6, 0x80044df9, &(0x7f00000003c0)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56761, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xa926, 0x3c1, 0x2f, 0x4, 0xa, 0x20}}, @TCA_CHOKE_STAB={0x104, 0x2, "c7ff43d31e6fbdd490b3d977ff52cf5dc1004af4fc63f3ae90d8e2d48141f1ddc19535b9675f5f0d2492a3e7d80eb58a31062a2eb8d6592d06783aa751093f25d9552b5e81a8f6743a7d06300fee9b07cbe88778ea809301f7b2fb9f3896ae07c2e29efecb0f69494b43c36020342d707728ac841f38a5cf84e7f488e928d036febafa2917b1c046138a1b3c7c6db84c4eb5ad3b6b2d4d2392571cfc8968b8bd9afa2f7398e05497f7a01e127fbe6ff3e702920448e162d1ff55528715e315485441cc769ce64fef12d26ec0897a4e2d328c9e586f42b0683a51b957b2ce2044faaa083ce37ee4b4beff955aa1f6f04d9c2ecc78987a2cced4974170fa4b3e4e"}]}}]}, 0x14c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x92e1}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0xc9) ioctl$SOUND_MIXER_READ_RECMASK(r10, 0x80044dfd, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r9, 0xd, 0x67b99895, 0x80000}, &(0x7f00000000c0)=0x10) 2.533176771s ago: executing program 0 (id=1448): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x84000000, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x1a}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) 2.341174323s ago: executing program 4 (id=1449): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}, 0xa00}, 0x1c) 2.253933011s ago: executing program 0 (id=1450): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x2b00, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x3f9, 0x20000000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'osx.', '(\x00'}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @random="9d6f61fa0204", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x40000000}}}}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) read(r1, &(0x7f0000000080)=""/65, 0x41) modify_ldt$read(0x0, &(0x7f0000000040)=""/148, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) 2.136763398s ago: executing program 3 (id=1451): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000000000000000aaac1e000100000000000000000000000000000000fffc00000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a0101000000000000000000000000000a010100000000000000000000000000000000000000000000000000000000003c000000000000000a000200"], 0xa0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, 0x0, 0x0) sendmmsg(r5, 0x0, 0x0, 0x3ec0) connect$unix(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010100}, 0xc) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) sched_setscheduler(r8, 0x6, &(0x7f0000000000)=0x4ac5) 2.123172961s ago: executing program 4 (id=1452): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="16020000246837f7d3f37b89fecd4e220e7a9b754b2acc051830b0908fd353fe4d21dec34c03d83bee35b3a404f70bad9797ffad9e087186cee3d51183d2dce0b7384e8543637b377c712f1da426a367ed1ba5582afeb7b9be0e3b726f855f35b78017154a068ceb9a9d4ada1295606bc2a33de30b48c0d006", 0x79}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0x0) 1.973843876s ago: executing program 0 (id=1453): socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x3, 0x80000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x0, 0x7, {{0x5, 0x4, 0x1, 0x2c, 0x14, 0x67, 0x0, 0x57, 0x4, 0x0, @remote, @loopback}}}}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x52, 0xffffffffffffffff, 0x2000) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x2010) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x21}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x4b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) 1.868481057s ago: executing program 3 (id=1454): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x100082) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) listen(0xffffffffffffffff, 0xfffffffd) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x700000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 1.745810268s ago: executing program 4 (id=1455): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="54000000171e53733ba025ed3b71ed770100000208000041000000446000dc4e49b1953ed84219ffc93b902761b522f32f909cbb6de9acd4da1ce1956fe03eeae75da9b216730d579f11d6da03fb722adbdc72bbde3ea29f0ff370c1000000"], 0x54}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000000140)=""/34, 0x22}], 0x2}}], 0x1, 0x2140, 0x0) 1.634677479s ago: executing program 2 (id=1456): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0xb], 0x1, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@host}) (async) r4 = socket(0x1e, 0x4, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async) recvmsg$can_bcm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/211, 0xd3}], 0x1}, 0x100) (async) r5 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000240)=0x7, 0x4) (async) sendmmsg(r5, &(0x7f0000000a00)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000400)="f9214360367a9225faca41f336c83fe3bf049ce37c58b464754594c1e96120d8b5a51321", 0x24}], 0x1}}], 0x1, 0x20044840) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0xfffffffe, 0x1, 0xb, 0x3}, {0x0, 0x3, 0xd, 0x9}, {0x1, 0x4, 0x10024}], 0x10, 0xd4, @void, @value}, 0xfffffffffffffe95) (async) socket$kcm(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@hyper, 0x1}, {@my=0x1}, 0x400, "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"}, 0x418, 0x6}) (async) r6 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc2c45513, &(0x7f0000000380)={{0x2, 0x3, 0x6, 0x2, 'syz0\x00', 0x1}, 0x0, [0x6, 0x11, 0x8, 0x7, 0xf, 0x1, 0x9, 0x3, 0x1, 0xfff, 0x8001, 0x7, 0x10, 0x2, 0xcc, 0x0, 0x4, 0x40, 0x9, 0x6, 0x4, 0x7ff, 0x3, 0x1, 0x3, 0x6, 0x0, 0x2, 0xad1, 0x9, 0x7, 0x0, 0xa, 0x80000000, 0x8, 0xffff, 0x500, 0x8, 0x3, 0x1, 0x9, 0xfe, 0x10000, 0x9, 0x25, 0x9, 0x1ba7, 0x1c, 0x29d, 0x4, 0x4, 0x3, 0x1, 0xfffffffe, 0x6, 0x7, 0x9e, 0x0, 0xff, 0x6, 0xe34, 0x8, 0x4, 0x1, 0x9a, 0x0, 0x2, 0x2, 0x7, 0x5, 0xfffffffb, 0xa3c6, 0x9, 0x4, 0x0, 0x7fffffff, 0xfffffff9, 0xfa5, 0x7, 0x5, 0xfffffffc, 0xb, 0x80000000, 0x2, 0x2, 0x9, 0x140000, 0x1, 0x8, 0x7, 0x8000, 0x7, 0x6, 0x0, 0x4, 0x32, 0x800, 0xfffffffe, 0x7fffffff, 0x8, 0x2, 0x3, 0x269, 0x84, 0x9, 0x8, 0x5, 0x1, 0xf, 0x9, 0x5, 0x6, 0x1, 0x2abb, 0xfff, 0x9, 0x2, 0x0, 0x5, 0x1ff, 0xfff, 0x5, 0x3, 0x37e, 0x8, 0x466, 0x3, 0x8]}) 1.302035692s ago: executing program 4 (id=1457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0) socket(0x10, 0x803, 0x0) dup(r2) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 909.88507ms ago: executing program 3 (id=1458): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}}, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000180)=0xffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x1080}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000240)={{0xc569, 0x4, 0x5979, 0x5}, 'syz0\x00', 0x29}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff6d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_OPERSTATE={0x5, 0x10, 0xf}]}, 0x50}, 0x1, 0x0, 0x0, 0x6811}, 0x2400c810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}}, 0x0) (async) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000180)=0xffffffff) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r1, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ppoll(&(0x7f00000000c0)=[{r2, 0x1080}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) (async) accept4(r1, 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000240)={{0xc569, 0x4, 0x5979, 0x5}, 'syz0\x00', 0x29}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff6d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_OPERSTATE={0x5, 0x10, 0xf}]}, 0x50}, 0x1, 0x0, 0x0, 0x6811}, 0x2400c810) (async) 888.331268ms ago: executing program 2 (id=1459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xaede070fb35083cb}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xc}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xbfe}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402002c68e010000000109021200010000000009040001"], 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f00000012c0)={0xc0, 0x0, 0x800}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000800200000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0300006001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d81, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r8, &(0x7f00000012c0)=[{&(0x7f0000000040)=':', 0x1}], 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(r7, 0x4018aee3, &(0x7f0000000080)=""/1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40500000040000061107d000000000062050000000000009500000000000000b12424501f2c565eaa10e88f2fb55ccf9989e56b4cc6d1214b6a3a8212422f30fde7f0e4d338d97b1c1c7cac7b2fb1e2f4dda34bbf7c429de549283c65e95b9cfbbaae8570a6eacbb33d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8c7, 0x59}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x50}}, 0x20000104) r9 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x0, @private=0xa011101, 0x4e23, 0x0, 'lc\x00', 0x4c, 0x8, 0x1a}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0xcd, 0x12d5f, 0x100043}}, 0x44) 489.926302ms ago: executing program 3 (id=1460): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f00000003c0)=0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x28f41, 0x0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) lseek(r5, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) close(0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0xe, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x6, 0x8, 0x54, 0xff, 0x2}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x804}}]}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) memfd_secret(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)={0x2c, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xc, 0x36, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) timer_create(0xfffffffffffffffc, 0x0, 0x0) gettid() r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f00000001c0)={0x100005, 0x7a, 0x100000, {r7}}, 0x20) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004004}, 0x2000c801) unshare(0x40000000) syz_open_dev$media(0x0, 0x7, 0x2600) 234.956181ms ago: executing program 1 (id=1461): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0xf401]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 40.542678ms ago: executing program 1 (id=1462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0xf0ffffff) 0s ago: executing program 4 (id=1463): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff290000003b0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x100, 0x4) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x4d2, 0x6c}, 0xa, @in6=@private2, 0x3506, 0x1, 0x1, 0x1, 0x9, 0xf, 0x869a}, {{@in=@broadcast, 0x4d2, 0x33}, 0xa, @in6=@remote, 0x0, 0x2, 0x1, 0x2, 0x2, 0x7, 0x5}]}]}, 0x13c}}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) kernel console output (not intermixed with test programs): truncated [ 251.127576][ T8961] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 251.137520][ T5889] usb 3-1: config 0 descriptor?? [ 251.206409][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 251.387639][ T5887] IPVS: starting estimator thread 0... [ 251.446585][ T8967] syzkaller1: entered promiscuous mode [ 251.467675][ T8967] syzkaller1: entered allmulticast mode [ 251.483837][ T8966] IPVS: using max 37 ests per chain, 88800 per kthread [ 251.613408][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 252.653658][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 253.049711][ T5888] xr_serial 1-1:127.171: xr_serial converter detected [ 253.074901][ T5888] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 253.081643][ T5888] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 253.124276][ T5888] usb 1-1: USB disconnect, device number 51 [ 253.132196][ T5888] xr_serial 1-1:127.171: device disconnected [ 253.363442][ T976] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 253.530710][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.542947][ T5888] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 253.554433][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.568822][ T976] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.611013][ T976] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.611362][ T5891] usb 3-1: USB disconnect, device number 36 [ 253.652345][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.677512][ T8988] netlink: 'syz.2.1023': attribute type 29 has an invalid length. [ 253.688433][ T976] usb 5-1: config 0 descriptor?? [ 253.693695][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 253.733481][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 253.749853][ T5888] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.856521][ T5888] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.882096][ T8992] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1025'. [ 253.913194][ T5888] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.928281][ T5888] usb 1-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 253.941999][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.957353][ T5888] usb 1-1: config 0 descriptor?? [ 254.133611][ T5891] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 254.166251][ T8986] IPv6: Can't replace route, no match found [ 254.295649][ T5891] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 254.304827][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.315226][ T5891] usb 3-1: config 0 descriptor?? [ 254.386139][ T5888] hid (null): invalid report_size 29535 [ 254.405085][ T5888] hid-generic 0003:060B:430A.000C: unexpected long global item [ 254.414678][ T5888] hid-generic 0003:060B:430A.000C: probe with driver hid-generic failed with error -22 [ 254.603820][ T5888] usb 1-1: USB disconnect, device number 52 [ 254.733434][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 254.927054][ T5891] usb 3-1: Cannot set autoneg [ 254.938932][ T5891] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 254.965387][ T5891] usb 3-1: USB disconnect, device number 37 [ 255.329676][ T9032] netlink: 'syz.0.1036': attribute type 1 has an invalid length. [ 255.365095][ T9032] bond1: (slave gretap1): making interface the new active one [ 255.379456][ T9032] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 255.463442][ T5891] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 255.570350][ T9039] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1038' sets config #0 [ 255.583625][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1039'. [ 255.602475][ T9039] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1038' sets config #1 [ 255.615451][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.621864][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.624974][ T5891] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 255.646744][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1040'. [ 255.668396][ T5891] usb 2-1: config 2 interface 0 has no altsetting 0 [ 255.690258][ T5891] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 255.713838][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.733242][ T5891] usb 2-1: Product: syz [ 255.747409][ T5891] usb 2-1: Manufacturer: syz [ 255.759177][ T5891] usb 2-1: SerialNumber: syz [ 255.773442][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 255.782720][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 255.793308][ T9048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.794599][ T5891] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 255.841044][ T5891] usb 2-1: selecting invalid altsetting 0 [ 255.869189][ T9048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.871562][ T5891] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 255.906913][ T976] usbhid 5-1:0.0: can't add hid device: -71 [ 255.920084][ T976] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 255.955308][ T976] usb 5-1: USB disconnect, device number 52 [ 256.030507][ T9028] xt_recent: Unsupported userspace flags (000000fe) [ 256.040895][ T9052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.050446][ T9055] FAULT_INJECTION: forcing a failure. [ 256.050446][ T9055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.067186][ T9055] CPU: 0 UID: 0 PID: 9055 Comm: syz.4.1045 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 256.067210][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 256.067219][ T9055] Call Trace: [ 256.067224][ T9055] [ 256.067230][ T9055] dump_stack_lvl+0x241/0x360 [ 256.067257][ T9055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.067277][ T9055] ? __pfx__printk+0x10/0x10 [ 256.067302][ T9055] should_fail_ex+0x424/0x570 [ 256.067323][ T9055] _copy_from_iter+0x211/0x1c70 [ 256.067340][ T9055] ? __build_skb_around+0x247/0x3d0 [ 256.067359][ T9055] ? __alloc_skb+0x298/0x480 [ 256.067375][ T9055] ? __pfx__copy_from_iter+0x10/0x10 [ 256.067390][ T9055] ? __pfx___alloc_skb+0x10/0x10 [ 256.067407][ T9055] ? skb_put+0x114/0x1f0 [ 256.067425][ T9055] netlink_sendmsg+0x73c/0xcd0 [ 256.067445][ T9055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.067461][ T9055] ? __import_iovec+0x585/0x830 [ 256.067476][ T9055] ? aa_sock_msg_perm+0x91/0x160 [ 256.067495][ T9055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.067508][ T9055] __sock_sendmsg+0x221/0x270 [ 256.067526][ T9055] ____sys_sendmsg+0x523/0x860 [ 256.067548][ T9055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.067573][ T9055] __sys_sendmsg+0x271/0x360 [ 256.067593][ T9055] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.067633][ T9055] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 256.067653][ T9055] ? lockdep_hardirqs_on+0x9d/0x150 [ 256.067674][ T9055] __do_fast_syscall_32+0xb4/0x110 [ 256.067694][ T9055] ? exc_page_fault+0x599/0x8b0 [ 256.067713][ T9055] do_fast_syscall_32+0x34/0x80 [ 256.067733][ T9055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.067769][ T9055] RIP: 0023:0xf740d579 [ 256.067781][ T9055] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 256.067795][ T9055] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 256.067812][ T9055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 256.067823][ T9055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.067831][ T9055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.067840][ T9055] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 256.067849][ T9055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.067865][ T9055] [ 256.075266][ T9052] team0: Port device bond0 added [ 256.314213][ T52] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 256.325336][ T976] usb 2-1: USB disconnect, device number 38 [ 256.400990][ T9066] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1048'. [ 256.466112][ T52] usb 1-1: config 1 interface 0 altsetting 14 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 256.477306][ T52] usb 1-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.490767][ T52] usb 1-1: config 1 interface 0 has no altsetting 0 [ 256.501354][ T52] usb 1-1: string descriptor 0 read error: -22 [ 256.508534][ T52] usb 1-1: New USB device found, idVendor=0603, idProduct=0600, bcdDevice= 0.40 [ 256.517854][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.529439][ T9051] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 256.653592][ T5892] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 256.742025][ T9051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.752592][ T9051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.765801][ T52] usbhid 1-1:1.0: can't add hid device: -71 [ 256.771863][ T52] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 256.784827][ T52] usb 1-1: USB disconnect, device number 53 [ 256.813541][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 256.821937][ T5892] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 256.831537][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.841487][ T5892] usb 5-1: config 0 descriptor?? [ 256.843530][ T5887] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 256.979204][ T9076] netlink: 'syz.1.1051': attribute type 10 has an invalid length. [ 256.996928][ T9076] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.005833][ T9076] team0: entered allmulticast mode [ 257.011015][ T9076] team_slave_0: entered allmulticast mode [ 257.016349][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 257.019919][ T9076] team_slave_1: entered allmulticast mode [ 257.030672][ T9076] bond0: (slave team0): Enslaving as an active interface with an up link [ 257.041514][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.055739][ T5887] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 257.064876][ T5887] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 257.074030][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.089782][ T5887] usb 3-1: config 0 descriptor?? [ 257.111746][ T9078] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1052'. [ 257.172756][ T9080] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1053' sets config #0 [ 257.189970][ T9080] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1053' sets config #1 [ 257.266227][ T5892] usb 5-1: Cannot set MAC address [ 257.288357][ T5892] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 257.311487][ T5887] usb 3-1: USB disconnect, device number 38 [ 257.314302][ T5892] usb 5-1: USB disconnect, device number 53 [ 257.381739][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1055'. [ 257.429269][ T9084] bridge1: port 1(ip6gretap1) entered blocking state [ 257.438131][ T9084] bridge1: port 1(ip6gretap1) entered disabled state [ 257.445938][ T9084] ip6gretap1: entered allmulticast mode [ 257.452832][ T9084] ip6gretap1: entered promiscuous mode [ 257.488587][ T9087] veth5: entered promiscuous mode [ 257.495833][ T9087] bridge1: port 2(veth5) entered blocking state [ 257.502242][ T9087] bridge1: port 2(veth5) entered disabled state [ 257.511114][ T9087] veth5: entered allmulticast mode [ 257.791676][ T30] audit: type=1326 audit(1743365624.437:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 257.815636][ T30] audit: type=1326 audit(1743365624.437:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 257.825621][ T5887] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 257.842007][ T30] audit: type=1326 audit(1743365624.477:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 257.867181][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 257.906641][ T30] audit: type=1326 audit(1743365624.477:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 257.933693][ T52] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 257.979810][ T30] audit: type=1326 audit(1743365624.477:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 258.021099][ T9103] FAULT_INJECTION: forcing a failure. [ 258.021099][ T9103] name failslab, interval 1, probability 0, space 0, times 0 [ 258.030214][ T30] audit: type=1326 audit(1743365624.667:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9102 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 258.044361][ T9103] CPU: 1 UID: 0 PID: 9103 Comm: syz.2.1063 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 258.044391][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.044404][ T9103] Call Trace: [ 258.044412][ T9103] [ 258.044420][ T9103] dump_stack_lvl+0x241/0x360 [ 258.044455][ T9103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.044483][ T9103] ? __pfx__printk+0x10/0x10 [ 258.044513][ T9103] ? __pfx___might_resched+0x10/0x10 [ 258.044539][ T9103] should_fail_ex+0x424/0x570 [ 258.044570][ T9103] should_failslab+0xac/0x100 [ 258.044602][ T9103] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 258.044622][ T9103] ? __alloc_skb+0x1c2/0x480 [ 258.044649][ T9103] __alloc_skb+0x1c2/0x480 [ 258.044675][ T9103] ? __pfx___alloc_skb+0x10/0x10 [ 258.044696][ T9103] ? rcu_is_watching+0x15/0xb0 [ 258.044720][ T9103] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 258.044756][ T9103] ? audit_log_start+0x41f/0xa20 [ 258.044786][ T9103] audit_log_start+0x446/0xa20 [ 258.044817][ T9103] ? __pfx_audit_log_start+0x10/0x10 [ 258.044842][ T9103] ? migrate_enable+0x397/0x520 [ 258.044870][ T9103] ? __pfx_migrate_enable+0x10/0x10 [ 258.044895][ T9103] ? __pfx___cant_migrate+0x10/0x10 [ 258.044923][ T9103] audit_seccomp+0x63/0x1f0 [ 258.044950][ T9103] __seccomp_filter+0xaea/0x1f20 [ 258.044975][ T9103] ? vfs_write+0xb29/0xd10 [ 258.045011][ T9103] ? ksys_write+0x24e/0x2d0 [ 258.045038][ T9103] ? __pfx___seccomp_filter+0x10/0x10 [ 258.045058][ T9103] ? __mutex_unlock_slowpath+0x229/0x800 [ 258.045094][ T9103] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 258.045119][ T9103] ? __fget_files+0x2a/0x420 [ 258.045140][ T9103] ? __fget_files+0x2a/0x420 [ 258.045166][ T9103] ? ksys_write+0x275/0x2d0 [ 258.045191][ T9103] ? __secure_computing+0xef/0x2f0 [ 258.045217][ T9103] syscall_trace_enter+0xa6/0x150 [ 258.045240][ T9103] __do_fast_syscall_32+0x9b/0x110 [ 258.045269][ T9103] ? exc_page_fault+0x599/0x8b0 [ 258.045296][ T9103] do_fast_syscall_32+0x34/0x80 [ 258.045324][ T9103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 258.045349][ T9103] RIP: 0023:0xf740d579 [ 258.045365][ T9103] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 258.045382][ T9103] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000084 [ 258.045404][ T9103] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 258.045417][ T9103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.045429][ T9103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.045440][ T9103] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 258.045452][ T9103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.045474][ T9103] [ 258.045614][ T9103] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 258.061043][ T30] audit: type=1326 audit(1743365624.667:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9102 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 258.070349][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 258.080884][ T9106] QAT: failed to copy from user. [ 258.090826][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 258.123952][ T9103] audit: out of memory in audit_log_start [ 258.131925][ T5887] usb 4-1: config 64 has an invalid interface number: 4 but max is 0 [ 258.166509][ T30] audit: type=1326 audit(1743365624.667:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9102 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 258.179894][ T5887] usb 4-1: config 64 has no interface number 0 [ 258.423579][ T5887] usb 4-1: config 64 interface 4 has no altsetting 0 [ 258.433411][ T52] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 258.442480][ T52] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 258.454379][ T5887] usb 4-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=28.46 [ 258.467179][ T52] usb 1-1: Product: syz [ 258.471465][ T52] usb 1-1: Manufacturer: syz [ 258.476176][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.484404][ T52] usb 1-1: SerialNumber: syz [ 258.499375][ T5887] usb 4-1: Product: syz [ 258.504964][ T52] usb 1-1: config 0 descriptor?? [ 258.513413][ T5887] usb 4-1: Manufacturer: syz [ 258.518046][ T5887] usb 4-1: SerialNumber: syz [ 258.529163][ T52] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 258.719944][ T9095] mmap: syz.0.1059 (9095): VmData 45760512 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 258.753118][ T9092] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 258.800111][ C1] sd 0:0:1:0: [sda] tag#5254 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 258.810624][ C1] sd 0:0:1:0: [sda] tag#5254 CDB: Read(6) 08 00 bc b2 00 00 [ 258.818355][ T52] gspca_zc3xx: reg_w_i err -71 [ 258.823237][ T52] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 258.852437][ T52] usb 1-1: USB disconnect, device number 54 [ 258.864075][ T5887] qmi_wwan 4-1:64.4: probe with driver qmi_wwan failed with error -22 [ 258.893416][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 258.913492][ T5887] usb 4-1: USB disconnect, device number 32 [ 259.017661][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 259.470482][ T9125] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1071'. [ 259.733459][ T5892] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 259.793193][ T9135] sctp: [Deprecated]: syz.1.1070 (pid 9135) Use of int in maxseg socket option. [ 259.793193][ T9135] Use struct sctp_assoc_value instead [ 259.933477][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 259.956346][ T5892] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 259.969042][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.994577][ T5892] usb 5-1: config 0 descriptor?? [ 260.210318][ T5892] usb 5-1: Cannot read MAC address [ 260.216790][ T5892] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 260.283788][ T5888] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 260.293871][ T5892] usb 5-1: USB disconnect, device number 54 [ 260.447852][ T9138] mmap: syz.0.1074 (9138) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 260.747462][ T5888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 260.761131][ T5888] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 260.783191][ T5888] usb 1-1: can't read configurations, error -71 [ 260.933535][ T5892] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 260.973406][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 261.016570][ T9151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.029287][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 261.104654][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 261.118916][ T5892] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 261.137278][ T5892] usb 3-1: config 0 has no interface number 0 [ 261.155299][ T5892] usb 3-1: New USB device found, idVendor=05c6, idProduct=6001, bcdDevice=c9.c4 [ 261.170376][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.188301][ T5892] usb 3-1: Product: syz [ 261.192525][ T5892] usb 3-1: Manufacturer: syz [ 261.206464][ T5892] usb 3-1: SerialNumber: syz [ 261.233764][ T5892] usb 3-1: config 0 descriptor?? [ 261.341810][ T9159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1081'. [ 261.355801][ T9159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1081'. [ 261.359531][ T9161] netlink: 'syz.3.1082': attribute type 1 has an invalid length. [ 261.369325][ T9159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1081'. [ 261.382055][ T9159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1081'. [ 261.411352][ T9161] bond5: (slave gretap2): making interface the new active one [ 261.419496][ T9161] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 261.471748][ T52] usb 3-1: USB disconnect, device number 39 [ 261.757940][ T9175] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1087'. [ 262.013499][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 262.173546][ T52] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 262.367263][ T52] usb 5-1: config 0 has no interfaces? [ 262.398903][ T52] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 262.458846][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.517539][ T52] usb 5-1: Product: syz [ 262.521766][ T52] usb 5-1: Manufacturer: syz [ 262.591199][ T52] usb 5-1: SerialNumber: syz [ 262.652622][ T52] usb 5-1: config 0 descriptor?? [ 263.053409][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 263.653487][ T5893] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 263.836465][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.852952][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.872534][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.933734][ T52] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 263.948169][ T5893] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.967607][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.979508][ T9212] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1099'. [ 263.992351][ T5893] usb 3-1: config 0 descriptor?? [ 264.093416][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 264.121379][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.136179][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.148723][ T52] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.214297][ T52] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.251370][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.298960][ T52] usb 1-1: config 0 descriptor?? [ 265.133394][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 265.329078][ T5834] usb 5-1: USB disconnect, device number 55 [ 265.382291][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 265.437984][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 265.485749][ T9230] macvtap1: entered promiscuous mode [ 265.524033][ T9230] bridge0: entered promiscuous mode [ 265.552326][ T9230] macvtap1: entered allmulticast mode [ 265.590381][ T9230] bridge0: entered allmulticast mode [ 265.609047][ T9233] bridge0: left allmulticast mode [ 265.614837][ T9233] bridge0: left promiscuous mode [ 266.013239][ T5891] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 266.067897][ T5893] usbhid 3-1:0.0: can't add hid device: -71 [ 266.084559][ T5893] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 266.148218][ T5893] usb 3-1: USB disconnect, device number 40 [ 266.183457][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 266.200610][ T5891] usb 4-1: no configurations [ 266.237168][ T5891] usb 4-1: can't read configurations, error -22 [ 266.277037][ T9248] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1111'. [ 266.403534][ T5891] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 266.554237][ T5891] usb 4-1: no configurations [ 266.559119][ T5891] usb 4-1: can't read configurations, error -22 [ 266.582418][ T5891] usb usb4-port1: attempt power cycle [ 266.833552][ T52] usbhid 1-1:0.0: can't add hid device: -71 [ 266.840107][ T52] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 266.862968][ T52] usb 1-1: USB disconnect, device number 57 [ 266.933517][ T5891] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 266.964731][ T5891] usb 4-1: no configurations [ 266.981838][ T5891] usb 4-1: can't read configurations, error -22 [ 267.123572][ T5893] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 267.131353][ T5891] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 267.154347][ T5891] usb 4-1: no configurations [ 267.158990][ T5891] usb 4-1: can't read configurations, error -22 [ 267.169784][ T5891] usb usb4-port1: unable to enumerate USB device [ 267.213463][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 267.285935][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 267.301792][ T5893] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.312584][ T5893] usb 5-1: config 0 has no interface number 0 [ 267.323442][ T5888] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 267.326782][ T5893] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 267.352785][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.362562][ T5893] usb 5-1: Product: syz [ 267.369443][ T5893] usb 5-1: Manufacturer: syz [ 267.378731][ T5893] usb 5-1: SerialNumber: syz [ 267.392020][ T5893] usb 5-1: config 0 descriptor?? [ 267.400091][ T5893] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 267.413457][ T52] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 267.421792][ T9266] netlink: 'syz.2.1117': attribute type 39 has an invalid length. [ 267.453830][ T5888] usb 1-1: device descriptor read/64, error -71 [ 267.576415][ T52] usb 2-1: config 0 has no interfaces? [ 267.586342][ T52] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 267.602860][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.643880][ T52] usb 2-1: Product: syz [ 267.651346][ T52] usb 2-1: Manufacturer: syz [ 267.659980][ T52] usb 2-1: SerialNumber: syz [ 267.678423][ T52] usb 2-1: config 0 descriptor?? [ 267.693541][ T5888] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 267.843700][ T5888] usb 1-1: device descriptor read/64, error -71 [ 267.954432][ T5888] usb usb1-port1: attempt power cycle [ 268.191966][ T9268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1118'. [ 268.253429][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 268.304232][ T5888] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 268.322548][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.338175][ T5888] usb 1-1: device descriptor read/8, error -71 [ 268.345890][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.479437][ T5893] gspca_spca1528: reg_w err -71 [ 268.504631][ T5893] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 268.525780][ T5893] usb 5-1: USB disconnect, device number 56 [ 268.623459][ T5888] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 268.644534][ T5888] usb 1-1: device descriptor read/8, error -71 [ 268.754607][ T5888] usb usb1-port1: unable to enumerate USB device [ 268.797519][ T5892] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 268.963387][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 268.978426][ T5892] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 269.000736][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.037057][ T5892] usb 3-1: Product: syz [ 269.043642][ T5892] usb 3-1: Manufacturer: syz [ 269.054484][ T5892] usb 3-1: SerialNumber: syz [ 269.073710][ T5892] usb 3-1: config 0 descriptor?? [ 269.082073][ T5892] gspca_main: se401-2.14.0 probing 047d:5003 [ 269.159285][ T9282] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1123'. [ 269.293402][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 269.403441][ T5888] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 269.567416][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.581806][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.593649][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 269.609591][ T5888] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 269.619367][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.636305][ T5888] usb 4-1: config 0 descriptor?? [ 269.665149][ T5892] usb 3-1: reset high-speed USB device number 41 using dummy_hcd [ 270.107883][ T5834] usb 2-1: USB disconnect, device number 39 [ 270.243680][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 270.292978][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 270.306622][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'. [ 270.322656][ T5892] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 270.324264][ T9294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1128'. [ 270.343598][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 270.355029][ T5892] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 270.375997][ T5892] usb 3-1: USB disconnect, device number 41 [ 270.384640][ T9296] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.1129'. [ 270.403791][ T9296] netlink: zone id is out of range [ 270.410287][ T9296] netlink: zone id is out of range [ 270.420013][ T9296] netlink: zone id is out of range [ 270.431417][ T9296] netlink: zone id is out of range [ 270.444871][ T9296] netlink: zone id is out of range [ 270.523550][ T5889] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 270.703559][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 270.712024][ T5889] usb 1-1: config 0 has an invalid interface number: 238 but max is 0 [ 270.720701][ T5889] usb 1-1: config 0 has no interface number 0 [ 270.735017][ T5889] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=ad.ac [ 270.745782][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.840102][ T5889] usb 1-1: Product: syz [ 270.866981][ T5889] usb 1-1: Manufacturer: syz [ 270.879283][ T9310] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1134'. [ 270.888602][ T5889] usb 1-1: SerialNumber: syz [ 270.908279][ T5889] usb 1-1: config 0 descriptor?? [ 271.083476][ T52] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 271.131179][ T5889] usb 1-1: USB disconnect, device number 62 [ 271.319437][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.343215][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.373710][ C0] net_ratelimit: 423 callbacks suppressed [ 271.373730][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 271.418271][ T52] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.465033][ T5893] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 271.557326][ T52] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.597934][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.623765][ T52] usb 2-1: config 0 descriptor?? [ 271.746689][ T5893] usb 5-1: config 0 has no interfaces? [ 271.757791][ T5893] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 271.767266][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.832754][ T5893] usb 5-1: Product: syz [ 271.844090][ T5888] usbhid 4-1:0.0: can't add hid device: -71 [ 271.846373][ T5893] usb 5-1: Manufacturer: syz [ 271.856069][ T5893] usb 5-1: SerialNumber: syz [ 271.864177][ T5893] usb 5-1: config 0 descriptor?? [ 271.929424][ T5888] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 271.962001][ T9321] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1138'. [ 271.997414][ T5888] usb 4-1: USB disconnect, device number 37 [ 272.423409][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 272.608474][ T9333] program syz.3.1142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.952975][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1145'. [ 273.005471][ T9341] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1145'. [ 273.039993][ T9343] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1146'. [ 273.453400][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 273.893683][ T5891] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 273.997208][ T52] usbhid 2-1:0.0: can't add hid device: -71 [ 274.006527][ T52] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 274.008340][ T5892] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 274.057783][ T52] usb 2-1: USB disconnect, device number 40 [ 274.095589][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.157564][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.174287][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 274.185248][ T5892] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.203375][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.222885][ T5891] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.232430][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.232660][ T5892] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 274.264879][ T5891] usb 3-1: config 0 descriptor?? [ 274.282424][ T5892] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 274.294484][ T5892] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.325559][ T5892] usb 1-1: config 1 interface 1 has no altsetting 0 [ 274.340947][ T5892] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.350594][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.362966][ T5892] usb 1-1: Product: syz [ 274.368381][ T5892] usb 1-1: Manufacturer: syz [ 274.373191][ T5892] usb 1-1: SerialNumber: syz [ 274.493548][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 274.591700][ T5892] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 274.600753][ T5892] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 274.673524][ T5887] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 274.679904][ T5892] usb 1-1: USB disconnect, device number 63 [ 274.826897][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.837493][ T5887] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 274.847859][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.877567][ T5887] usb 2-1: config 0 descriptor?? [ 274.886584][ T5887] pwc: Askey VC010 type 2 USB webcam detected. [ 274.955602][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.103619][ T5893] usb 5-1: USB disconnect, device number 57 [ 275.145811][ T9369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.154764][ T9369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.376451][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1159'. [ 275.397958][ T5887] pwc: recv_control_msg error -32 req 02 val 2b00 [ 275.533409][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 275.619630][ T5887] pwc: recv_control_msg error -71 req 02 val 2c00 [ 275.636955][ T5887] pwc: recv_control_msg error -71 req 04 val 1000 [ 275.649254][ T5887] pwc: recv_control_msg error -71 req 04 val 1300 [ 275.677335][ T5887] pwc: recv_control_msg error -71 req 04 val 1400 [ 275.688906][ T9386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1162'. [ 275.701909][ T5887] pwc: recv_control_msg error -71 req 02 val 2000 [ 275.702876][ T9385] netlink: 'syz.4.1161': attribute type 10 has an invalid length. [ 275.708636][ T9387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1162'. [ 275.708667][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 275.714819][ T5887] pwc: recv_control_msg error -71 req 02 val 2100 [ 275.749755][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 275.774358][ T5887] pwc: recv_control_msg error -71 req 04 val 1500 [ 275.781225][ T5887] pwc: recv_control_msg error -71 req 02 val 2500 [ 275.797722][ T5887] pwc: recv_control_msg error -71 req 02 val 2400 [ 275.814226][ T5887] pwc: recv_control_msg error -71 req 02 val 2600 [ 275.823222][ T5887] pwc: recv_control_msg error -71 req 02 val 2900 [ 275.830612][ T5887] pwc: recv_control_msg error -71 req 02 val 2800 [ 275.838290][ T5887] pwc: recv_control_msg error -71 req 04 val 1100 [ 275.845607][ T5887] pwc: recv_control_msg error -71 req 04 val 1200 [ 275.859752][ T5887] pwc: Registered as video103. [ 275.890330][ T5887] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 275.917805][ T5887] usb 2-1: USB disconnect, device number 41 [ 276.103596][ T9393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1163'. [ 276.128812][ T9393] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 276.137411][ T9393] team0: Port device batadv1 added [ 276.491118][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 276.491137][ T30] audit: type=1326 audit(1743365643.097:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.1169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 276.573446][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 276.705815][ T30] audit: type=1326 audit(1743365643.097:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.1169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 276.763485][ T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 276.813745][ T5891] usbhid 3-1:0.0: can't add hid device: -71 [ 276.822397][ T5891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 276.838186][ T5891] usb 3-1: USB disconnect, device number 42 [ 276.873550][ T30] audit: type=1326 audit(1743365643.107:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.1169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 276.930137][ T24] usb 5-1: config 0 has no interfaces? [ 276.939700][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 276.951717][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.986586][ T24] usb 5-1: Product: syz [ 276.997253][ T24] usb 5-1: Manufacturer: syz [ 277.023072][ T30] audit: type=1326 audit(1743365643.107:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.1169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 277.074055][ T24] usb 5-1: SerialNumber: syz [ 277.085660][ T24] usb 5-1: config 0 descriptor?? [ 277.092237][ T30] audit: type=1326 audit(1743365643.107:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.1169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 277.291969][ T30] audit: type=1326 audit(1743365643.107:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.1169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 277.314660][ T30] audit: type=1326 audit(1743365643.107:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.1169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 277.468595][ T30] audit: type=1326 audit(1743365643.117:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.1169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 277.561290][ T30] audit: type=1326 audit(1743365643.117:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.1169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 277.613451][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 277.645836][ T30] audit: type=1326 audit(1743365643.137:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.1169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 277.713055][ T9429] 0: entered promiscuous mode [ 277.727758][ T9429] vlan2: entered promiscuous mode [ 277.973907][ T5888] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 278.177100][ T5888] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 278.185645][ T5892] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 278.194955][ T5888] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 278.270155][ T5888] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 278.311399][ T5888] usb 3-1: config 220 has no interface number 2 [ 278.319477][ T5888] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 278.333707][ T5888] usb 3-1: config 220 interface 0 has no altsetting 0 [ 278.340736][ T5888] usb 3-1: config 220 interface 76 has no altsetting 0 [ 278.348571][ T5888] usb 3-1: config 220 interface 1 has no altsetting 0 [ 278.363583][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 278.372349][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 278.381689][ T5892] usb 1-1: config 0 has no interfaces? [ 278.402932][ T5892] usb 1-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=39.f0 [ 278.462898][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.478353][ T5892] usb 1-1: Product: syz [ 278.482750][ T5888] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 278.497535][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.515525][ T5892] usb 1-1: Manufacturer: syz [ 278.526980][ T5892] usb 1-1: SerialNumber: syz [ 278.536745][ T5888] usb 3-1: Product: syz [ 278.553876][ T5892] usb 1-1: config 0 descriptor?? [ 278.562382][ T5888] usb 3-1: Manufacturer: syz [ 278.576667][ T5888] usb 3-1: SerialNumber: syz [ 278.663476][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 278.823865][ T976] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 278.983754][ T976] usb 2-1: Using ep0 maxpacket: 32 [ 278.995045][ T5888] usb 3-1: selecting invalid altsetting 0 [ 279.006824][ T976] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 279.020637][ T5888] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 279.030755][ T24] usb 1-1: USB disconnect, device number 64 [ 279.030973][ T5888] usb 3-1: No valid video chain found. [ 279.047699][ T976] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 279.058753][ T976] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 279.071923][ T976] usb 2-1: Product: syz [ 279.081235][ T976] usb 2-1: Manufacturer: syz [ 279.090661][ T5888] usb 3-1: selecting invalid altsetting 0 [ 279.098587][ T976] usb 2-1: SerialNumber: syz [ 279.107939][ T5888] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 279.120199][ T976] usb 2-1: config 0 descriptor?? [ 279.132340][ T9447] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 279.145322][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 279.150821][ T5888] usb 3-1: USB disconnect, device number 43 [ 279.417256][ T9461] xt_TCPMSS: Only works on TCP SYN packets [ 279.428011][ T24] usb 2-1: USB disconnect, device number 42 [ 279.478029][ T9465] usb usb8: usbfs: process 9465 (syz.3.1189) did not claim interface 0 before use [ 279.625259][ T24] usb 5-1: USB disconnect, device number 58 [ 279.693410][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 279.836770][ T9481] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1192'. [ 279.875570][ T9481] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1192'. [ 280.659965][ T9498] gtp0: entered promiscuous mode [ 280.743396][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 281.783414][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 281.836690][ T5888] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 282.017632][ T5888] usb 3-1: config 0 has no interfaces? [ 282.033486][ T5888] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 282.093597][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.131463][ T5888] usb 3-1: Product: syz [ 282.143486][ T5888] usb 3-1: Manufacturer: syz [ 282.148240][ T5888] usb 3-1: SerialNumber: syz [ 282.185878][ T5888] usb 3-1: config 0 descriptor?? [ 282.403476][ T5891] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 282.587413][ T5891] usb 5-1: config 0 has an invalid interface number: 178 but max is 0 [ 282.614171][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.662514][ T9563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.678129][ T5891] usb 5-1: config 0 has no interface number 0 [ 282.706261][ T9563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.720471][ T5891] usb 5-1: New USB device found, idVendor=4c94, idProduct=2388, bcdDevice=c6.b5 [ 282.745089][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.752554][ T9567] FAULT_INJECTION: forcing a failure. [ 282.752554][ T9567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.771944][ T5891] usb 5-1: Product: syz [ 282.783941][ T5891] usb 5-1: Manufacturer: syz [ 282.797569][ T5891] usb 5-1: SerialNumber: syz [ 282.811055][ T9567] CPU: 0 UID: 0 PID: 9567 Comm: syz.0.1220 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 282.811088][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.811102][ T9567] Call Trace: [ 282.811109][ T9567] [ 282.811118][ T9567] dump_stack_lvl+0x241/0x360 [ 282.811155][ T9567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.811184][ T9567] ? __pfx__printk+0x10/0x10 [ 282.811218][ T9567] should_fail_ex+0x424/0x570 [ 282.811249][ T9567] _copy_to_user+0x31/0xb0 [ 282.811275][ T9567] simple_read_from_buffer+0xc4/0x170 [ 282.811309][ T9567] proc_fail_nth_read+0x1ef/0x260 [ 282.811334][ T9567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.811359][ T9567] ? rw_verify_area+0x246/0x630 [ 282.811383][ T9567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.811406][ T9567] vfs_read+0x21f/0xb90 [ 282.811434][ T9567] ? __pfx___mutex_lock+0x10/0x10 [ 282.811464][ T9567] ? __pfx_vfs_read+0x10/0x10 [ 282.811490][ T9567] ? __fget_files+0x2a/0x420 [ 282.811511][ T9567] ? __fget_files+0x39d/0x420 [ 282.811530][ T9567] ? __fget_files+0x2a/0x420 [ 282.811556][ T9567] ksys_read+0x19d/0x2d0 [ 282.811582][ T9567] ? __pfx_ksys_read+0x10/0x10 [ 282.811609][ T9567] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 282.811637][ T9567] ? lockdep_hardirqs_on+0x9d/0x150 [ 282.811666][ T9567] __do_fast_syscall_32+0xb4/0x110 [ 282.811696][ T9567] ? exc_page_fault+0x599/0x8b0 [ 282.811725][ T9567] do_fast_syscall_32+0x34/0x80 [ 282.811754][ T9567] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.811780][ T9567] RIP: 0023:0xf7f45579 [ 282.811796][ T9567] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 282.811814][ T9567] RSP: 002b:00000000f5066590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 282.811843][ T9567] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5066620 [ 282.811858][ T9567] RDX: 000000000000000f RSI: 00000000f73ccff4 RDI: 0000000000000000 [ 282.811870][ T9567] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 282.811882][ T9567] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 282.811894][ T9567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.811917][ T9567] [ 282.828852][ T5891] usb 5-1: config 0 descriptor?? [ 282.835195][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 282.903885][ T5892] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 283.517333][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 283.558868][ T5892] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 283.571794][ T5892] usb 2-1: config 4 has no interface number 0 [ 283.611627][ T5891] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.628859][ T5891] usb 5-1: MIDIStreaming interface descriptor not found [ 283.647766][ T5892] usb 2-1: config 4 interface 9 altsetting 2 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 283.682807][ T5892] usb 2-1: config 4 interface 9 has no altsetting 0 [ 283.702850][ T5892] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 283.712311][ T976] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 283.725640][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.731058][ T5891] usb 5-1: USB disconnect, device number 59 [ 283.752637][ T5892] usb 2-1: Product: syz [ 283.761452][ T5892] usb 2-1: Manufacturer: syz [ 283.790269][ T5892] usb 2-1: SerialNumber: syz [ 283.853409][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 283.874758][ T5892] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 283.889137][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 283.933817][ T976] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 283.953116][ T976] usb 1-1: config 8 has no interface number 0 [ 283.965566][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.178/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.006594][ T976] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 284.031993][ T5891] usb 2-1: USB disconnect, device number 43 [ 284.049799][ T9010] usb 2-1: Failed to submit usb control message: -71 [ 284.078181][ T976] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 284.098946][ T9010] usb 2-1: unable to send the bmi data to the device: -71 [ 284.134926][ T9010] usb 2-1: unable to get target info from device [ 284.148332][ T976] usb 1-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 284.192981][ T9010] usb 2-1: could not get target info (-71) [ 284.207024][ T9010] usb 2-1: could not probe fw (-71) [ 284.218829][ T976] usb 1-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 284.256374][ T976] usb 1-1: config 8 interface 206 has no altsetting 0 [ 284.265557][ T976] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 284.278782][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.294708][ T976] usb 1-1: Product: syz [ 284.298907][ T976] usb 1-1: Manufacturer: syz [ 284.313541][ T976] usb 1-1: SerialNumber: syz [ 284.366398][ T5888] usb 3-1: USB disconnect, device number 44 [ 284.529138][ T976] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 284.598119][ T976] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 284.903460][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 285.145605][ T9614] kernel read not supported for file /!sel9inۡv (pid: 9614 comm: syz.4.1232) [ 285.253395][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 285.253416][ T30] audit: type=1800 audit(1743365651.807:91): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1232" name=2173656CEB39696EDBA1B976 dev="mqueue" ino=26453 res=0 errno=0 [ 285.417195][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 285.943402][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 286.435333][ T24] usb 1-1: USB disconnect, device number 65 [ 286.463082][ T24] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 286.507356][ T24] garmin_gps 1-1:8.206: device disconnected [ 286.754058][ T9634] FAULT_INJECTION: forcing a failure. [ 286.754058][ T9634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.843655][ T9634] CPU: 1 UID: 0 PID: 9634 Comm: syz.0.1240 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 286.843685][ T9634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 286.843698][ T9634] Call Trace: [ 286.843705][ T9634] [ 286.843713][ T9634] dump_stack_lvl+0x241/0x360 [ 286.843747][ T9634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.843767][ T9634] ? __pfx__printk+0x10/0x10 [ 286.843791][ T9634] should_fail_ex+0x424/0x570 [ 286.843813][ T9634] _copy_to_user+0x31/0xb0 [ 286.843831][ T9634] simple_read_from_buffer+0xc4/0x170 [ 286.843855][ T9634] proc_fail_nth_read+0x1ef/0x260 [ 286.843872][ T9634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.843889][ T9634] ? rw_verify_area+0x246/0x630 [ 286.843905][ T9634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.843921][ T9634] vfs_read+0x21f/0xb90 [ 286.843939][ T9634] ? __pfx___mutex_lock+0x10/0x10 [ 286.843959][ T9634] ? __pfx_vfs_read+0x10/0x10 [ 286.843982][ T9634] ? __fget_files+0x2a/0x420 [ 286.844016][ T9634] ? __fget_files+0x39d/0x420 [ 286.844033][ T9634] ? __fget_files+0x2a/0x420 [ 286.844057][ T9634] ksys_read+0x19d/0x2d0 [ 286.844090][ T9634] ? __pfx_ksys_read+0x10/0x10 [ 286.844110][ T9634] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 286.844128][ T9634] ? lockdep_hardirqs_on+0x9d/0x150 [ 286.844145][ T9634] __do_fast_syscall_32+0xb4/0x110 [ 286.844163][ T9634] ? exc_page_fault+0x599/0x8b0 [ 286.844179][ T9634] do_fast_syscall_32+0x34/0x80 [ 286.844197][ T9634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.844212][ T9634] RIP: 0023:0xf7f45579 [ 286.844223][ T9634] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 286.844234][ T9634] RSP: 002b:00000000f5066590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 286.844248][ T9634] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5066620 [ 286.844256][ T9634] RDX: 000000000000000f RSI: 00000000f73ccff4 RDI: 0000000000000000 [ 286.844264][ T9634] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 286.844271][ T9634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 286.844278][ T9634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.844292][ T9634] [ 286.903890][ T976] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 286.975240][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.296149][ T9642] random: crng reseeded on system resumption [ 287.699089][ T976] usb 5-1: config 0 has no interfaces? [ 287.713561][ T976] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 287.722886][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.753764][ T976] usb 5-1: Product: syz [ 287.757999][ T976] usb 5-1: Manufacturer: syz [ 287.773197][ T976] usb 5-1: SerialNumber: syz [ 287.816879][ T976] usb 5-1: config 0 descriptor?? [ 288.013406][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 288.121691][ T9657] fuse: Bad value for 'fd' [ 288.764558][ T976] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 288.793642][ T52] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 289.012456][ T976] usb 4-1: config 0 has no interfaces? [ 289.029282][ T976] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 289.038801][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.052363][ T976] usb 4-1: Product: syz [ 289.056619][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.175667][ T976] usb 4-1: Manufacturer: syz [ 289.188610][ T976] usb 4-1: SerialNumber: syz [ 289.203809][ T5892] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 289.222448][ T976] usb 4-1: config 0 descriptor?? [ 289.325247][ T52] usb 2-1: config 0 has no interfaces? [ 289.349521][ T52] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 289.363432][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 289.371526][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 289.400639][ T5892] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 289.412774][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 289.417776][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.439221][ T5892] usb 3-1: Product: syz [ 289.447359][ T52] usb 2-1: Product: syz [ 289.451799][ T5892] usb 3-1: Manufacturer: syz [ 289.457258][ T5892] usb 3-1: SerialNumber: syz [ 289.461808][ T52] usb 2-1: Manufacturer: syz [ 289.575942][ T9646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1245'. [ 289.595848][ T52] usb 2-1: SerialNumber: syz [ 289.596114][ T5892] usb 3-1: config 0 descriptor?? [ 289.654765][ T9662] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 289.680473][ T52] usb 2-1: config 0 descriptor?? [ 289.687212][ T9646] tipc: Invalid UDP bearer configuration [ 289.687253][ T9646] tipc: Enabling of bearer rejected, failed to enable media [ 289.958013][ T5892] usb 3-1: USB disconnect, device number 45 [ 290.103385][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 290.241560][ T5892] usb 5-1: USB disconnect, device number 60 [ 290.780317][ T9677] FAULT_INJECTION: forcing a failure. [ 290.780317][ T9677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.798997][ T9677] CPU: 1 UID: 0 PID: 9677 Comm: syz.0.1254 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 290.799027][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.799040][ T9677] Call Trace: [ 290.799047][ T9677] [ 290.799056][ T9677] dump_stack_lvl+0x241/0x360 [ 290.799091][ T9677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.799120][ T9677] ? __pfx__printk+0x10/0x10 [ 290.799154][ T9677] should_fail_ex+0x424/0x570 [ 290.799192][ T9677] _copy_to_user+0x31/0xb0 [ 290.799217][ T9677] simple_read_from_buffer+0xc4/0x170 [ 290.799250][ T9677] proc_fail_nth_read+0x1ef/0x260 [ 290.799273][ T9677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.799297][ T9677] ? rw_verify_area+0x246/0x630 [ 290.799320][ T9677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.799343][ T9677] vfs_read+0x21f/0xb90 [ 290.799368][ T9677] ? __pfx___mutex_lock+0x10/0x10 [ 290.799397][ T9677] ? __pfx_vfs_read+0x10/0x10 [ 290.799422][ T9677] ? __fget_files+0x2a/0x420 [ 290.799443][ T9677] ? __fget_files+0x39d/0x420 [ 290.799459][ T9677] ? __fget_files+0x2a/0x420 [ 290.799479][ T9677] ksys_read+0x19d/0x2d0 [ 290.799499][ T9677] ? __pfx_ksys_read+0x10/0x10 [ 290.799519][ T9677] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 290.799542][ T9677] ? lockdep_hardirqs_on+0x9d/0x150 [ 290.799564][ T9677] __do_fast_syscall_32+0xb4/0x110 [ 290.799588][ T9677] ? exc_page_fault+0x599/0x8b0 [ 290.799609][ T9677] do_fast_syscall_32+0x34/0x80 [ 290.799632][ T9677] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 290.799651][ T9677] RIP: 0023:0xf7f45579 [ 290.799665][ T9677] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 290.799679][ T9677] RSP: 002b:00000000f5066590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 290.799696][ T9677] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5066620 [ 290.799707][ T9677] RDX: 000000000000000f RSI: 00000000f73ccff4 RDI: 0000000000000000 [ 290.799718][ T9677] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 290.799727][ T9677] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 290.799737][ T9677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 290.799755][ T9677] [ 291.143405][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 291.209894][ T9683] macvlan0: entered promiscuous mode [ 291.235572][ T9683] batadv0: entered promiscuous mode [ 291.320295][ T52] usb 2-1: USB disconnect, device number 44 [ 291.334639][ T9683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.358493][ T9683] Cannot create hsr debugfs directory [ 291.393814][ T5892] usb 4-1: USB disconnect, device number 38 [ 291.432356][ T9683] hsr0: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 292.013481][ T5892] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 292.183485][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 292.253900][ T24] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 292.321350][ T5892] usb 4-1: config 0 has no interfaces? [ 292.463772][ T5892] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 292.473075][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.513448][ T24] usb 1-1: device descriptor read/64, error -71 [ 292.533250][ T5892] usb 4-1: Product: syz [ 292.542791][ T5892] usb 4-1: Manufacturer: syz [ 292.555215][ T5892] usb 4-1: SerialNumber: syz [ 292.583988][ T976] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 292.604666][ T5892] usb 4-1: config 0 descriptor?? [ 292.760569][ T976] usb 2-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 292.774421][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 292.838749][ T976] usb 2-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.862822][ T976] usb 2-1: config 0 interface 0 has no altsetting 0 [ 292.887123][ T976] usb 2-1: New USB device found, idVendor=0402, idProduct=97c1, bcdDevice= 0.00 [ 292.917185][ T24] usb 1-1: device descriptor read/64, error -71 [ 292.967432][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.991304][ T976] usb 2-1: config 0 descriptor?? [ 293.020200][ T976] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 293.033793][ T24] usb usb1-port1: attempt power cycle [ 293.043442][ T52] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 293.183518][ T5891] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 293.206780][ T52] usb 5-1: config 0 has no interfaces? [ 293.213382][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 293.235134][ T9707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.247527][ T9707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.261670][ T52] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 293.271018][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.283537][ T52] usb 5-1: Product: syz [ 293.288430][ T52] usb 5-1: Manufacturer: syz [ 293.293216][ T52] usb 5-1: SerialNumber: syz [ 293.302726][ T52] usb 5-1: config 0 descriptor?? [ 293.344985][ T5891] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 293.358035][ T5891] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.378492][ T5891] usb 3-1: config 1 interface 0 has no altsetting 0 [ 293.385412][ T24] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 293.401012][ T5891] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 293.410500][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.420326][ T24] usb 1-1: device descriptor read/8, error -71 [ 293.428736][ T5891] usb 3-1: Product: syz [ 293.438661][ T5891] usb 3-1: Manufacturer: syz [ 293.449483][ T5891] usb 3-1: SerialNumber: syz [ 293.486754][ T9717] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 293.494437][ T9717] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 293.773779][ T5891] usb 3-1: USB disconnect, device number 46 [ 293.863408][ T24] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 293.891495][ T24] usb 1-1: device descriptor read/8, error -71 [ 294.003705][ T24] usb usb1-port1: unable to enumerate USB device [ 294.169593][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.182294][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.253399][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 294.420997][ T9727] FAULT_INJECTION: forcing a failure. [ 294.420997][ T9727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.435123][ T9727] CPU: 1 UID: 0 PID: 9727 Comm: syz.2.1272 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 294.435151][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.435160][ T9727] Call Trace: [ 294.435166][ T9727] [ 294.435171][ T9727] dump_stack_lvl+0x241/0x360 [ 294.435196][ T9727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.435215][ T9727] ? __pfx__printk+0x10/0x10 [ 294.435238][ T9727] should_fail_ex+0x424/0x570 [ 294.435258][ T9727] _copy_from_user+0x2d/0xb0 [ 294.435274][ T9727] get_compat_msghdr+0xb3/0x730 [ 294.435289][ T9727] ? __fget_files+0x2a/0x420 [ 294.435304][ T9727] ? __pfx_get_compat_msghdr+0x10/0x10 [ 294.435323][ T9727] __sys_sendmsg+0x23b/0x360 [ 294.435342][ T9727] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.435380][ T9727] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 294.435399][ T9727] ? lockdep_hardirqs_on+0x9d/0x150 [ 294.435417][ T9727] __do_fast_syscall_32+0xb4/0x110 [ 294.435436][ T9727] ? exc_page_fault+0x599/0x8b0 [ 294.435454][ T9727] do_fast_syscall_32+0x34/0x80 [ 294.435472][ T9727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.435488][ T9727] RIP: 0023:0xf740d579 [ 294.435499][ T9727] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 294.435535][ T9727] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 294.435551][ T9727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 294.435561][ T9727] RDX: 00000000200040b4 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.435570][ T9727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 294.435578][ T9727] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 294.435586][ T9727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.435602][ T9727] [ 294.731707][ T30] audit: type=1326 audit(1743365661.377:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.2.1274" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740d579 code=0x0 [ 294.892745][ T5892] usb 4-1: USB disconnect, device number 39 [ 295.033727][ T976] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 295.193833][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 295.208583][ T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.236604][ T976] usb 3-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 295.249244][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.258173][ T976] usb 3-1: Product: syz [ 295.262469][ T976] usb 3-1: Manufacturer: syz [ 295.267572][ T976] usb 3-1: SerialNumber: syz [ 295.281235][ T976] usb 3-1: config 0 descriptor?? [ 295.286725][ T5892] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 295.294356][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 295.296603][ T24] usb 2-1: USB disconnect, device number 45 [ 295.316580][ T976] usb 3-1: bad CDC descriptors [ 295.473861][ T5892] usb 4-1: device descriptor read/64, error -71 [ 295.534594][ T9732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.550794][ T9732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.625293][ T9756] netlink: 564 bytes leftover after parsing attributes in process `syz.1.1285'. [ 295.666204][ T5891] usb 5-1: USB disconnect, device number 61 [ 295.743560][ T5892] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 295.803655][ T24] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 295.883517][ T5892] usb 4-1: device descriptor read/64, error -71 [ 295.957022][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 295.992678][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 296.003923][ T5892] usb usb4-port1: attempt power cycle [ 296.048732][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 296.144983][ T24] usb 1-1: language id specifier not provided by device, defaulting to English [ 296.172376][ T24] usb 1-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 296.181733][ T5891] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 296.192881][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.201257][ T24] usb 1-1: Manufacturer: п [ 296.216438][ T24] usb 1-1: SerialNumber: syz [ 296.229329][ T24] usb 1-1: config 0 descriptor?? [ 296.333478][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 296.368129][ T5891] usb 5-1: config 0 has no interfaces? [ 296.382333][ T5891] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 296.383484][ T5892] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 296.440148][ T24] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 296.449727][ T5892] usb 4-1: device descriptor read/8, error -71 [ 296.457100][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.482622][ T5891] usb 5-1: Product: syz [ 296.513805][ T24] usb 1-1: USB disconnect, device number 70 [ 296.523220][ T5891] usb 5-1: Manufacturer: syz [ 296.563135][ T5891] usb 5-1: SerialNumber: syz [ 296.592583][ T5891] usb 5-1: config 0 descriptor?? [ 296.703526][ T5892] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 296.725887][ T5892] usb 4-1: device descriptor read/8, error -71 [ 296.854674][ T5892] usb usb4-port1: unable to enumerate USB device [ 297.373422][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 297.508653][ T9778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1292'. [ 297.530900][ T9778] dummy0: entered promiscuous mode [ 297.561212][ T9779] netlink: 'syz.1.1290': attribute type 2 has an invalid length. [ 297.567313][ T9778] dummy0: left promiscuous mode [ 297.576073][ T9775] can: request_module (can-proto-0) failed. [ 297.603075][ T9779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1290'. [ 297.641816][ T30] audit: type=1326 audit(1743365664.287:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9774 comm="syz.1.1290" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x0 [ 297.778139][ T24] usb 3-1: USB disconnect, device number 47 [ 298.164042][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 298.293433][ T5887] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 298.341071][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.352391][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.389859][ T24] usb 3-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 298.399262][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.413896][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 298.423084][ T24] usb 3-1: config 0 descriptor?? [ 298.497364][ T5887] usb 1-1: config 0 has no interfaces? [ 298.509378][ T5887] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 298.522229][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.536914][ T5887] usb 1-1: Product: syz [ 298.551896][ T5887] usb 1-1: Manufacturer: syz [ 298.556935][ T5887] usb 1-1: SerialNumber: syz [ 298.572626][ T5887] usb 1-1: config 0 descriptor?? [ 298.659103][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1295'. [ 298.671833][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 298.684870][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 298.935649][ T5887] usb 5-1: USB disconnect, device number 62 [ 298.973846][ T24] usb 3-1: USB disconnect, device number 48 [ 299.453942][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 299.733895][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 299.883523][ T24] usb 4-1: device descriptor read/64, error -71 [ 299.934109][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 300.153440][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 300.293503][ T24] usb 4-1: device descriptor read/64, error -71 [ 300.444038][ T5892] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 300.493573][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 300.549220][ T24] usb usb4-port1: attempt power cycle [ 300.632655][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.651222][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.663423][ T5891] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 300.668324][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.718918][ T5892] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.759853][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.781628][ T5892] usb 3-1: config 0 descriptor?? [ 300.897323][ T5891] usb 5-1: config 0 has no interfaces? [ 300.903415][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 300.930125][ T5891] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 300.960324][ T24] usb 4-1: device descriptor read/8, error -71 [ 300.982941][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.007642][ T9839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'. [ 301.021752][ T5891] usb 5-1: Product: syz [ 301.032338][ T5891] usb 5-1: Manufacturer: syz [ 301.040753][ T5891] usb 5-1: SerialNumber: syz [ 301.080497][ T5891] usb 5-1: config 0 descriptor?? [ 301.223758][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 301.264375][ T24] usb 4-1: device descriptor read/8, error -71 [ 301.310300][ T5889] usb 1-1: USB disconnect, device number 71 [ 301.473897][ T24] usb usb4-port1: unable to enumerate USB device [ 301.543407][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 302.353563][ T5891] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 302.573393][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 302.822836][ T5891] usb 2-1: config 0 has no interfaces? [ 302.835301][ T5891] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 302.845719][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.854164][ T5891] usb 2-1: Product: syz [ 302.868707][ T5891] usb 2-1: Manufacturer: syz [ 302.880382][ T5891] usb 2-1: SerialNumber: syz [ 302.909667][ T5891] usb 2-1: config 0 descriptor?? [ 303.013639][ T9866] syzkaller1: entered promiscuous mode [ 303.019336][ T9866] syzkaller1: entered allmulticast mode [ 303.113482][ T5889] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 303.264131][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 303.340969][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 303.359969][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 303.413929][ T5889] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 303.423398][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 303.439984][ T5889] usb 4-1: Product: syz [ 303.452923][ T5889] usb 4-1: Manufacturer: syz [ 303.471182][ T5889] usb 4-1: SerialNumber: syz [ 303.498948][ T5889] usb 4-1: config 0 descriptor?? [ 303.537810][ T5889] hub 4-1:0.0: bad descriptor, ignoring hub [ 303.544586][ T5889] hub 4-1:0.0: probe with driver hub failed with error -5 [ 303.613390][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 303.672544][ T5891] usb 5-1: USB disconnect, device number 63 [ 303.817529][ T9870] FAULT_INJECTION: forcing a failure. [ 303.817529][ T9870] name failslab, interval 1, probability 0, space 0, times 0 [ 303.865764][ T5893] usb 4-1: USB disconnect, device number 48 [ 303.867707][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 303.890933][ T9870] CPU: 1 UID: 0 PID: 9870 Comm: syz.4.1325 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 303.890953][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.890962][ T9870] Call Trace: [ 303.890967][ T9870] [ 303.890972][ T9870] dump_stack_lvl+0x241/0x360 [ 303.890998][ T9870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.891017][ T9870] ? __pfx__printk+0x10/0x10 [ 303.891036][ T9870] ? __pfx___might_resched+0x10/0x10 [ 303.891054][ T9870] should_fail_ex+0x424/0x570 [ 303.891075][ T9870] should_failslab+0xac/0x100 [ 303.891096][ T9870] __kmalloc_noprof+0xdf/0x4d0 [ 303.891108][ T9870] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 303.891125][ T9870] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 303.891144][ T9870] tomoyo_realpath_from_path+0xcf/0x5e0 [ 303.891166][ T9870] tomoyo_path_number_perm+0x245/0x790 [ 303.891179][ T9870] ? __lock_acquire+0xad5/0xd80 [ 303.891192][ T9870] ? tomoyo_path_number_perm+0x215/0x790 [ 303.891206][ T9870] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 303.891235][ T9870] ? __fget_files+0x2a/0x420 [ 303.891248][ T9870] ? __fget_files+0x2a/0x420 [ 303.891262][ T9870] ? __fget_files+0x2a/0x420 [ 303.891276][ T9870] security_file_ioctl_compat+0xc6/0x2a0 [ 303.891291][ T9870] __se_compat_sys_ioctl+0xd8/0xc30 [ 303.891308][ T9870] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 303.891328][ T9870] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 303.891345][ T9870] ? __fget_files+0x2a/0x420 [ 303.891360][ T9870] ? fput+0x9b/0xd0 [ 303.891373][ T9870] ? ksys_write+0x275/0x2d0 [ 303.891392][ T9870] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 303.891411][ T9870] ? lockdep_hardirqs_on+0x9d/0x150 [ 303.891429][ T9870] __do_fast_syscall_32+0xb4/0x110 [ 303.891448][ T9870] ? exc_page_fault+0x599/0x8b0 [ 303.891465][ T9870] do_fast_syscall_32+0x34/0x80 [ 303.891484][ T9870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.891500][ T9870] RIP: 0023:0xf740d579 [ 303.891511][ T9870] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 303.891522][ T9870] RSP: 002b:00000000f507555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 303.891542][ T9870] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008914 [ 303.891550][ T9870] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 303.891559][ T9870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.891567][ T9870] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 303.891574][ T9870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.891589][ T9870] [ 303.891595][ T9870] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.172052][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 304.264107][ T5892] usb 3-1: USB disconnect, device number 49 [ 304.278304][ T9870] syzkaller1: entered promiscuous mode [ 304.284173][ T9870] syzkaller1: entered allmulticast mode [ 304.663380][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 304.681658][ T5892] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 304.833874][ T5889] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 304.873811][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 304.930194][ T9891] loop8: detected capacity change from 0 to 7 [ 304.941938][ T9891] Dev loop8: unable to read RDB block 7 [ 305.053769][ T5888] usb 2-1: USB disconnect, device number 46 [ 305.073854][ T9891] loop8: unable to read partition table [ 305.082047][ T5892] usb 3-1: config 64 has an invalid interface number: 4 but max is 0 [ 305.095809][ T9891] loop8: partition table beyond EOD, truncated [ 305.098370][ T5892] usb 3-1: config 64 has no interface number 0 [ 305.112489][ T5892] usb 3-1: config 64 interface 4 has no altsetting 0 [ 305.115720][ T9891] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 305.130927][ T5892] usb 3-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=28.46 [ 305.148438][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.157112][ T5889] usb 4-1: device descriptor read/64, error -71 [ 305.188850][ T9893] loop2: detected capacity change from 0 to 7 [ 305.190119][ T5892] usb 3-1: Product: syz [ 305.273068][ T9893] Dev loop2: unable to read RDB block 7 [ 305.283442][ T9893] loop2: unable to read partition table [ 305.289390][ T9893] loop2: partition table beyond EOD, truncated [ 305.296496][ T9893] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 305.301127][ T5892] usb 3-1: Manufacturer: syz [ 305.376289][ T5892] usb 3-1: SerialNumber: syz [ 305.433711][ T5889] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 305.563731][ T5889] usb 4-1: device descriptor read/64, error -71 [ 305.683949][ T5889] usb usb4-port1: attempt power cycle [ 305.693427][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 305.717805][ T9877] syzkaller1: entered promiscuous mode [ 305.723943][ T5888] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 305.731764][ T9877] syzkaller1: entered allmulticast mode [ 305.883557][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 305.892152][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.903264][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.922437][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 305.950397][ T5888] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 305.960679][ T5834] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 305.983578][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.014861][ T5888] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 306.024620][ T5889] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 306.032380][ T5888] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 306.040723][ T5888] usb 5-1: Manufacturer: syz [ 306.055432][ T5889] usb 4-1: device descriptor read/8, error -71 [ 306.068170][ T5888] usb 5-1: config 0 descriptor?? [ 306.138923][ T5834] usb 2-1: config 0 has no interfaces? [ 306.149764][ T5834] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 306.159351][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.168876][ T5834] usb 2-1: Product: syz [ 306.173721][ T5834] usb 2-1: Manufacturer: syz [ 306.178446][ T5834] usb 2-1: SerialNumber: syz [ 306.204603][ T5834] usb 2-1: config 0 descriptor?? [ 306.291348][ T9895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.300212][ T5889] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 306.321295][ T9895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.330353][ T5889] usb 4-1: device descriptor read/8, error -71 [ 306.356948][ T9895] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 306.464219][ T5889] usb usb4-port1: unable to enumerate USB device [ 306.506022][ T5888] rc_core: IR keymap rc-hauppauge not found [ 306.519817][ T5888] Registered IR keymap rc-empty [ 306.525170][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 306.593450][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 306.624781][ T5888] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 306.677598][ T5888] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 306.713768][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 306.733404][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 306.746932][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 306.773773][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 306.793513][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 306.834363][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 306.853922][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 306.883731][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 306.913693][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 306.943846][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 306.974498][ T5888] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 307.015988][ T5888] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 307.030790][ T5888] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 307.044356][ T5888] usb 5-1: USB disconnect, device number 64 [ 307.101384][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1336'. [ 307.286904][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 307.307608][ T5892] qmi_wwan 3-1:64.4: probe with driver qmi_wwan failed with error -22 [ 307.338929][ T5892] usb 3-1: USB disconnect, device number 50 [ 307.416038][ T9913] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.1338'. [ 307.469911][ T9913] batadv_slave_1: left promiscuous mode [ 307.532519][ T9913] vlan2: left promiscuous mode [ 307.540397][ T9913] dummy0: left promiscuous mode [ 307.571325][ T9913] bond2: left promiscuous mode [ 307.580116][ T9913] bridge1: left promiscuous mode [ 307.773483][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 307.910070][ T9918] VFS: Mount too revealing [ 308.153823][ T5889] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 308.417670][ T5889] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 308.443257][ T5889] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.465159][ T5889] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 308.500417][ T5889] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 308.519524][ T5888] usb 2-1: USB disconnect, device number 47 [ 308.665818][ T5889] usb 4-1: Product: syz [ 308.703488][ T5892] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 308.740880][ T5889] usb 4-1: Manufacturer: syz [ 308.754879][ T5889] hub 4-1:4.0: USB hub found [ 308.813471][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 308.983489][ T5889] hub 4-1:4.0: 8 ports detected [ 308.996508][ T5892] usb 1-1: config 0 has no interfaces? [ 309.026626][ T5889] hub 4-1:4.0: insufficient power available to use all downstream ports [ 309.165141][ T5892] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 309.182457][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.191154][ T5889] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 309.204604][ T5889] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 309.212286][ T5892] usb 1-1: Product: syz [ 309.238728][ T5892] usb 1-1: Manufacturer: syz [ 309.247312][ T5892] usb 1-1: SerialNumber: syz [ 309.294805][ T5892] usb 1-1: config 0 descriptor?? [ 309.300428][ T5889] usb 4-1: USB disconnect, device number 53 [ 309.348800][ T9943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1347'. [ 309.702037][ T5889] IPVS: starting estimator thread 0... [ 309.826079][ T9954] IPVS: using max 45 ests per chain, 108000 per kthread [ 309.853447][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 310.034550][ T5891] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 310.218805][ T5891] usb 2-1: config 0 has no interfaces? [ 310.335306][ T5891] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 310.344693][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.358115][ T5891] usb 2-1: Product: syz [ 310.366802][ T5891] usb 2-1: Manufacturer: syz [ 310.380632][ T5891] usb 2-1: SerialNumber: syz [ 310.584595][ T5891] usb 2-1: config 0 descriptor?? [ 310.759662][ T9966] openvswitch: netlink: Unknown nsh attribute 0 [ 310.771265][ T9966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.903436][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 311.319507][ T5889] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 311.366514][ T9977] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_1, syncid = 0, id = 0 [ 311.474221][ T5889] usb 3-1: device descriptor read/64, error -71 [ 311.713248][ T5891] usb 1-1: USB disconnect, device number 72 [ 311.723719][ T5889] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 311.883787][ T5889] usb 3-1: device descriptor read/64, error -71 [ 311.932905][ T9990] loop2: detected capacity change from 0 to 7 [ 311.940373][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 311.949681][ T9990] Dev loop2: unable to read RDB block 7 [ 311.956012][ T9990] loop2: AHDI p1 p2 [ 311.960196][ T9990] loop2: partition table partially beyond EOD, truncated [ 311.968702][ T9990] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 312.003812][ T5889] usb usb3-port1: attempt power cycle [ 312.026745][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 312.373419][ T5889] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 312.404529][ T5889] usb 3-1: device descriptor read/8, error -71 [ 312.503743][ T5892] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 312.644300][ T5889] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 312.666410][ T5889] usb 3-1: device descriptor read/8, error -71 [ 312.704659][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.719161][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.774222][ T5889] usb usb3-port1: unable to enumerate USB device [ 312.786635][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.847008][ T5892] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.920356][ T5893] usb 2-1: USB disconnect, device number 48 [ 312.983447][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 312.998579][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.132220][ T5892] usb 4-1: config 0 descriptor?? [ 313.150243][T10020] sctp: [Deprecated]: syz.4.1372 (pid 10020) Use of int in maxseg socket option. [ 313.150243][T10020] Use struct sctp_assoc_value instead [ 313.573447][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 313.723419][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 313.730043][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.778973][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.803795][ T5889] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 313.808951][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 313.933437][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.955298][ T24] usb 2-1: config 0 descriptor?? [ 314.013476][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 314.084847][ T24] hub 2-1:0.0: USB hub found [ 314.200491][ T24] hub 2-1:0.0: 1 port detected [ 314.257044][ T5889] usb 1-1: config 0 has no interfaces? [ 314.269458][ T5889] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 314.303933][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.416237][ T5889] usb 1-1: Product: syz [ 314.510582][ T5889] usb 1-1: Manufacturer: syz [ 314.633107][ T5889] usb 1-1: SerialNumber: syz [ 314.761302][ T5889] usb 1-1: config 0 descriptor?? [ 314.826084][ T5893] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 314.834135][ T5893] usb 2-1: USB disconnect, device number 49 [ 314.840196][ T24] usb 2-1: Failed to suspend device, error -19 [ 315.063440][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 315.600709][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'. [ 315.652200][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 315.663187][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 315.688714][ T5892] usb 4-1: USB disconnect, device number 54 [ 315.908940][T10053] netlink: 'syz.3.1382': attribute type 10 has an invalid length. [ 316.035931][T10053] bond0: (slave wlan1): Opening slave failed [ 316.103452][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 316.115367][T10052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.581528][ T5889] usb 1-1: USB disconnect, device number 73 [ 316.774891][T10066] netlink: 'syz.0.1386': attribute type 1 has an invalid length. [ 316.784276][ T5892] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 316.987967][ T5892] usb 5-1: config 0 has no interfaces? [ 317.031444][ T5892] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 317.043427][ T24] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 317.059515][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.071309][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.084593][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.115814][ T5892] usb 5-1: Product: syz [ 317.120093][ T5892] usb 5-1: Manufacturer: syz [ 317.126904][ T5892] usb 5-1: SerialNumber: syz [ 317.133391][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 317.151470][ T5892] usb 5-1: config 0 descriptor?? [ 317.193815][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 317.200500][ T24] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 317.221789][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.241506][ T24] usb 4-1: config 0 descriptor?? [ 317.282255][T10074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1389'. [ 317.313568][ T5887] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 317.443746][ T5887] usb 1-1: device descriptor read/64, error -71 [ 317.469762][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 317.476981][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 317.489954][ T24] usb 4-1: USB disconnect, device number 55 [ 317.646446][ T30] audit: type=1326 audit(1743365684.287:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 317.697774][ T5887] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 317.719071][ T30] audit: type=1326 audit(1743365684.287:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 317.774421][ T30] audit: type=1326 audit(1743365684.327:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 317.827745][ T30] audit: type=1326 audit(1743365684.327:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 317.916091][ T5887] usb 1-1: device descriptor read/64, error -71 [ 317.969344][T10096] bridge_slave_0: entered promiscuous mode [ 317.980471][ T30] audit: type=1326 audit(1743365684.327:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 318.003870][ T30] audit: type=1326 audit(1743365684.327:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 318.026331][ T30] audit: type=1326 audit(1743365684.327:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 318.085929][ T5887] usb usb1-port1: attempt power cycle [ 318.108917][ T30] audit: type=1326 audit(1743365684.327:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 318.173388][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 318.180609][ T30] audit: type=1326 audit(1743365684.327:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=181 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 318.222294][ T5889] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 318.222486][ T30] audit: type=1326 audit(1743365684.327:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 318.335099][ T5893] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 318.433395][ T5887] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 318.438662][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 318.448575][ T5889] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 318.454803][ T5887] usb 1-1: device descriptor read/8, error -71 [ 318.484628][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.493425][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 318.510159][ T5889] usb 3-1: config 0 has no interface number 0 [ 318.513115][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.534327][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 318.538379][ T5889] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 318.554794][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.564800][ T5889] usb 3-1: Product: syz [ 318.571338][ T5889] usb 3-1: Manufacturer: syz [ 318.571819][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 318.595596][ T5889] usb 3-1: SerialNumber: syz [ 318.599580][ T5893] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 318.611537][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.621655][ T5893] usb 2-1: Product: syz [ 318.642942][ T5893] usb 2-1: Manufacturer: syz [ 318.649255][ T5893] usb 2-1: SerialNumber: syz [ 318.665865][ T5889] usb 3-1: config 0 descriptor?? [ 318.686658][ T5893] usb 2-1: config 0 descriptor?? [ 318.696889][ T5887] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 318.713722][ T5893] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 318.735411][ T5887] usb 1-1: device descriptor read/8, error -71 [ 318.845008][ T5887] usb usb1-port1: unable to enumerate USB device [ 318.894823][ T5889] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 318.901559][ T5889] usb 3-1: No valid video chain found. [ 318.923410][ T5892] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 318.925555][ T5887] usb 2-1: USB disconnect, device number 50 [ 319.089789][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.111510][ T5889] usb 3-1: USB disconnect, device number 55 [ 319.124528][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.150204][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 319.163954][ T5892] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.175740][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.200870][ T5892] usb 4-1: config 0 descriptor?? [ 319.223395][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 319.455777][ T5887] usb 5-1: USB disconnect, device number 65 [ 319.890743][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1399'. [ 320.263469][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 320.305152][T10114] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 320.563053][T10122] [U]  [ 320.566147][T10122] [U] K{ [ 320.577521][T10122] [U] t 1ŠFfˊ`GJgo/mC [ 320.589013][T10122] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 320.618768][T10122] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 320.624201][ T5887] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 320.723509][T10122] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 320.778543][T10122] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 320.811820][T10122] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 320.823571][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.839299][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.849915][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 320.869286][T10122] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 320.881781][ T5887] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 320.891326][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.900206][T10122] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 321.060436][T10122] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 321.073811][T10122] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 321.089413][T10122] [U] 22Ʃx?0;3u [ 321.093483][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 321.094039][T10122] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 321.113706][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.141363][ T5889] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 321.141373][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.163744][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 321.173933][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.184993][ T24] usb 1-1: config 0 descriptor?? [ 321.204325][ T5889] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 321.218178][ T24] hub 1-1:0.0: USB hub found [ 321.223546][T10122] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 321.233370][T10122] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 321.263938][T10122] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 321.272600][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.277148][T10122] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 321.303704][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 321.338266][ T5889] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 321.348038][T10122] [U] ec [ 321.351184][T10122] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 321.407876][T10125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.416421][ T5889] usb 3-1: config 0 has no interface number 0 [ 321.424085][ T24] hub 1-1:0.0: 1 port detected [ 321.430182][T10125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.519889][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 321.611959][ T24] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 321.620694][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1405'. [ 321.636185][T10127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1403'. [ 321.645341][ T24] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 321.669962][ T5889] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 321.682540][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 321.690411][ T5889] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 321.703154][ T5892] usb 4-1: USB disconnect, device number 56 [ 321.710103][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 321.724769][ T5889] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 321.726658][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 321.751923][ T5889] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 321.775259][ T24] usb 1-1: USB disconnect, device number 78 [ 321.802194][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.844284][ T5889] usb 3-1: config 0 descriptor?? [ 321.863228][ T5889] gspca_main: spca561-2.14.0 probing abcd:cdee [ 321.960107][T10142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1409'. [ 321.975652][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1406'. [ 322.164226][T10122] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 322.225043][ T5889] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 322.293818][ T5892] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 322.333460][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 322.343626][ T5889] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.352963][ T5889] usb 3-1: MIDIStreaming interface descriptor not found [ 322.473373][ T24] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 322.635929][ T24] usb 1-1: config 167 has too many interfaces: 242, using maximum allowed: 32 [ 322.645157][ T24] usb 1-1: config 167 has 0 interfaces, different from the descriptor's value: 242 [ 322.732015][ T24] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 322.742271][ T5889] usb 3-1: USB disconnect, device number 56 [ 322.760082][ T24] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 322.854571][ T24] usb 1-1: Product: syz [ 322.893956][ T24] usb 1-1: Manufacturer: syz [ 322.927519][ T24] usb 1-1: SerialNumber: syz [ 322.992131][ T5892] usb 4-1: config 0 has no interfaces? [ 323.008829][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 323.090860][ T5892] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 323.128349][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.174907][ T5887] usbhid 5-1:0.0: can't add hid device: -71 [ 323.222457][ T5892] usb 4-1: Product: syz [ 323.230960][ T5887] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 323.239099][ T5892] usb 4-1: Manufacturer: syz [ 323.269515][ T5892] usb 4-1: SerialNumber: syz [ 323.290178][ T5887] usb 5-1: USB disconnect, device number 66 [ 323.373861][ T5892] usb 4-1: config 0 descriptor?? [ 323.383379][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 323.780769][ T5892] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 324.044944][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 324.073606][ T5892] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.086879][ T5892] usb 5-1: config 1 interface 0 has no altsetting 0 [ 324.107899][ T5892] usb 5-1: string descriptor 0 read error: -22 [ 324.114450][ T5892] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 324.220451][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.413409][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 324.862617][ T5887] usb 1-1: USB disconnect, device number 79 [ 325.151524][ T5889] usb 4-1: USB disconnect, device number 57 [ 325.189687][T10179] xt_hashlimit: overflow, try lower: 9/0 [ 325.294753][T10182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1419'. [ 325.319914][T10183] kvm: kvm [10181]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008e) = 0x4bdc [ 325.342676][T10183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1420'. [ 325.453466][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 325.493147][T10184] veth7: entered promiscuous mode [ 325.503069][T10184] bridge3: port 1(veth7) entered blocking state [ 325.514331][T10184] bridge3: port 1(veth7) entered disabled state [ 325.520888][T10184] veth7: entered allmulticast mode [ 325.679762][T10193] FAULT_INJECTION: forcing a failure. [ 325.679762][T10193] name failslab, interval 1, probability 0, space 0, times 0 [ 325.698912][T10194] openvswitch: netlink: EtherType 50a is less than min 600 [ 325.713135][T10193] CPU: 0 UID: 0 PID: 10193 Comm: syz.3.1425 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 325.713165][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 325.713195][T10193] Call Trace: [ 325.713203][T10193] [ 325.713211][T10193] dump_stack_lvl+0x241/0x360 [ 325.713248][T10193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.713277][T10193] ? __pfx__printk+0x10/0x10 [ 325.713307][T10193] ? __pfx___might_resched+0x10/0x10 [ 325.713334][T10193] should_fail_ex+0x424/0x570 [ 325.713365][T10193] should_failslab+0xac/0x100 [ 325.713398][T10193] __kmalloc_noprof+0xdf/0x4d0 [ 325.713415][T10193] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 325.713441][T10193] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 325.713470][T10193] tomoyo_realpath_from_path+0xcf/0x5e0 [ 325.713505][T10193] tomoyo_path_number_perm+0x245/0x790 [ 325.713526][T10193] ? __lock_acquire+0xad5/0xd80 [ 325.713547][T10193] ? tomoyo_path_number_perm+0x215/0x790 [ 325.713570][T10193] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 325.713617][T10193] ? __fget_files+0x2a/0x420 [ 325.713637][T10193] ? __fget_files+0x2a/0x420 [ 325.713659][T10193] ? __fget_files+0x2a/0x420 [ 325.713682][T10193] security_file_ioctl_compat+0xc6/0x2a0 [ 325.713704][T10193] __se_compat_sys_ioctl+0xd8/0xc30 [ 325.713730][T10193] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 325.713761][T10193] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 325.713788][T10193] ? __fget_files+0x2a/0x420 [ 325.713812][T10193] ? fput+0x9b/0xd0 [ 325.713831][T10193] ? ksys_write+0x275/0x2d0 [ 325.713862][T10193] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 325.713890][T10193] ? lockdep_hardirqs_on+0x9d/0x150 [ 325.713918][T10193] __do_fast_syscall_32+0xb4/0x110 [ 325.713946][T10193] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 325.713967][T10193] ? lockdep_hardirqs_on+0x9d/0x150 [ 325.713995][T10193] do_fast_syscall_32+0x34/0x80 [ 325.714035][T10193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.714065][T10193] RIP: 0023:0xf7f65579 [ 325.714081][T10193] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 325.714097][T10193] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 325.714118][T10193] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080085504 [ 325.714132][T10193] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.714144][T10193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.714156][T10193] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 325.714168][T10193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.714198][T10193] [ 325.771672][T10196] usb usb8: usbfs: process 10196 (syz.2.1426) did not claim interface 0 before use [ 325.873734][ T5834] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 325.952454][T10198] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1427'. [ 326.007135][T10196] usb usb8: selecting invalid altsetting 16128 [ 326.008686][T10193] ERROR: Out of memory at tomoyo_realpath_from_path. [ 326.029122][T10193] usb usb8: usbfs: process 10193 (syz.3.1425) did not claim interface 0 before use [ 326.183576][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 326.199435][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.211265][ T5834] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.248622][ T5834] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.281050][ T5834] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 326.337763][ T5834] usb 2-1: config 0 interface 0 has no altsetting 0 [ 326.348229][ T5892] usbhid 5-1:1.0: can't add hid device: -71 [ 326.392001][ T5892] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 326.493407][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 326.517583][ T5892] usb 5-1: USB disconnect, device number 67 [ 326.523623][ T5834] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 326.532773][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.553512][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 326.593276][ T5834] usb 2-1: config 0 descriptor?? [ 326.713549][ T5891] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 326.868022][ T5891] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.970816][ T24] usb 3-1: config 0 has no interfaces? [ 327.023488][ T5891] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.036893][ T5834] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 327.045575][ T5834] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 327.056151][ T5834] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 327.064174][ T5834] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 327.072295][ T5834] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 327.088238][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 327.133379][ T5834] hid-thrustmaster 0003:044F:B65D.000D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 327.147824][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.174112][ T5891] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 327.175500][ T5834] hid-thrustmaster 0003:044F:B65D.000D: Wrong number of endpoints? [ 327.233400][ T24] usb 3-1: Product: syz [ 327.237627][ T24] usb 3-1: Manufacturer: syz [ 327.242252][ T24] usb 3-1: SerialNumber: syz [ 327.261716][ C0] hid-thrustmaster 0003:044F:B65D.000D: Unknown packet type 0x0, unable to proceed further with wheel init [ 327.273660][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 327.281690][ T5891] usb 1-1: SerialNumber: syz [ 327.308378][ T24] usb 3-1: config 0 descriptor?? [ 327.533392][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 327.542428][ T5891] usb 1-1: 0:2 : does not exist [ 327.659254][ T5891] usb 1-1: USB disconnect, device number 80 [ 328.017680][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.573686][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 328.608010][ T5893] usb 2-1: USB disconnect, device number 51 [ 329.093645][ T5892] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 329.244654][T10267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1451'. [ 329.261999][T10267] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 329.293635][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 329.308738][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.330704][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.362055][ T5892] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 329.390192][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.401086][ T5892] usb 2-1: config 0 descriptor?? [ 329.613407][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 329.646367][ T5893] usb 3-1: USB disconnect, device number 57 [ 329.813574][ T976] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 329.845999][ T5892] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 330.015748][ T976] usb 1-1: config 0 has no interfaces? [ 330.026020][ T976] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 330.046141][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.060420][ T976] usb 1-1: Product: syz [ 330.072145][ T976] usb 1-1: Manufacturer: syz [ 330.211615][ T976] usb 1-1: SerialNumber: syz [ 330.247756][T10258] netlink: 368 bytes leftover after parsing attributes in process `syz.1.1447'. [ 330.314810][ T976] usb 1-1: config 0 descriptor?? [ 330.413419][T10258] ksmbd: Unknown IPC event: 3, ignore. [ 330.510678][ T976] usb 2-1: USB disconnect, device number 52 [ 330.518795][T10294] syzkaller1: entered promiscuous mode [ 330.536925][T10294] syzkaller1: entered allmulticast mode [ 330.571527][T10295] wireguard0: entered promiscuous mode [ 330.579082][T10295] wireguard0: entered allmulticast mode [ 330.654250][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 330.731916][ T5891] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 330.883383][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 330.890577][ T5891] usb 3-1: config 0 interface 0 has no altsetting 0 [ 330.897374][ T5891] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 330.949857][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.991994][ T5891] usb 3-1: config 0 descriptor?? [ 331.019367][ T5891] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 331.039690][ T5891] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 331.091751][ T5891] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 331.123583][ T5891] usb 3-1: media controller created [ 331.163448][ T5893] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 331.225974][T10292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.240916][T10292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.306223][T10292] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN PTI [ 331.318163][T10292] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 331.326605][T10292] CPU: 0 UID: 0 PID: 10292 Comm: syz.2.1459 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 331.338320][T10292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 331.343497][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 331.348397][T10292] RIP: 0010:__mutex_lock+0x15d/0x10c0 [ 331.348435][T10292] Code: c0 80 de 71 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 07 0e 00 00 83 3d b0 aa 43 0e 00 75 21 49 8d 7e 60 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 67 71 fd f5 4d 39 76 60 0f 85 81 0d 00 00 [ 331.378502][T10292] RSP: 0018:ffffc90003b56e80 EFLAGS: 00010202 [ 331.384567][T10292] RAX: 0000000000000019 RBX: ffffc90003b56f40 RCX: ffffffff9a71de03 [ 331.392538][T10292] RDX: ffff8880265cda00 RSI: ffffffff8e4efdf2 RDI: 00000000000000c8 [ 331.400507][T10292] RBP: ffffc90003b57018 R08: ffffc90003b56f87 R09: 0000000000000000 [ 331.408489][T10292] R10: ffffc90003b56f60 R11: fffff5200076adf1 R12: 0000000000000000 [ 331.416459][T10292] R13: ffffc90003b56f48 R14: 0000000000000068 R15: dffffc0000000000 [ 331.424426][T10292] FS: 0000000000000000(0000) GS:ffff888124fb7000(0063) knlGS:00000000f5096b40 [ 331.433376][T10292] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 331.439991][T10292] CR2: 000000000c2efe74 CR3: 000000007e4a0000 CR4: 00000000003526f0 [ 331.447964][T10292] DR0: 0000000000000001 DR1: 0000000000000001 DR2: 0000000000000006 [ 331.455930][T10292] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 331.463903][T10292] Call Trace: [ 331.467190][T10292] [ 331.470130][T10292] ? __die_body+0x5f/0xb0 [ 331.474455][T10292] ? die_addr+0xab/0xd0 [ 331.478608][T10292] ? exc_general_protection+0x3e6/0x5d0 [ 331.484154][T10292] ? asm_exc_general_protection+0x26/0x30 [ 331.489873][T10292] ? __mutex_lock+0x15d/0x10c0 [ 331.494639][T10292] ? __mutex_lock+0x380/0x10c0 [ 331.499401][T10292] ? __lock_acquire+0xad5/0xd80 [ 331.504247][T10292] ? dvb_usbv2_generic_write+0x26/0x50 [ 331.509705][T10292] ? __pfx___mutex_lock+0x10/0x10 [ 331.514730][T10292] ? __pfx___mutex_lock+0x10/0x10 [ 331.519755][T10292] ? trace_contention_end+0x3c/0x120 [ 331.525040][T10292] ? __mutex_lock+0x380/0x10c0 [ 331.529802][T10292] dvb_usbv2_generic_write+0x26/0x50 [ 331.535087][T10292] mxl111sf_ctrl_msg+0x172/0x2e0 [ 331.540020][T10292] mxl111sf_write_reg+0xda/0x1f0 [ 331.544966][T10292] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 331.550504][T10292] ? perf_trace_contention_begin+0x33a/0x3b0 [ 331.556499][T10292] mxl111sf_i2c_xfer+0x923/0x8aa0 [ 331.561525][T10292] ? do_raw_spin_lock+0x151/0x370 [ 331.566560][T10292] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 331.572903][T10292] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 331.578375][T10292] ? __lock_acquire+0xad5/0xd80 [ 331.583226][T10292] ? __bfs+0x14a/0x270 [ 331.587292][T10292] ? __pfx_hlock_conflict+0x10/0x10 [ 331.592486][T10292] ? check_path+0x21/0x40 [ 331.596811][T10292] ? check_noncircular+0xee/0x160 [ 331.601834][T10292] ? lockdep_unlock+0x8d/0x120 [ 331.606606][T10292] ? validate_chain+0x8a7/0x24e0 [ 331.611566][T10292] ? __lock_acquire+0xad5/0xd80 [ 331.616409][T10292] ? do_raw_spin_lock+0x151/0x370 [ 331.621430][T10292] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 331.626895][T10292] __i2c_transfer+0x859/0x2250 [ 331.631679][T10292] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 331.637568][T10292] ? lockdep_hardirqs_on+0x9d/0x150 [ 331.642766][T10292] ? __pfx___i2c_transfer+0x10/0x10 [ 331.647964][T10292] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 331.653361][T10292] ? i2c_transfer+0x12d/0x430 [ 331.658045][T10292] i2c_transfer+0x2c2/0x430 [ 331.662547][T10292] ? __pfx_i2c_transfer+0x10/0x10 [ 331.667572][T10292] i2c_transfer_buffer_flags+0x182/0x260 [ 331.673205][T10292] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 331.679360][T10292] ? _copy_from_user+0x95/0xb0 [ 331.684123][T10292] i2cdev_write+0x110/0x1b0 [ 331.688624][T10292] vfs_writev+0x5ba/0xbc0 [ 331.692968][T10292] ? __pfx_i2cdev_write+0x10/0x10 [ 331.697992][T10292] ? __pfx_vfs_writev+0x10/0x10 [ 331.702882][T10292] ? __fget_files+0x2a/0x420 [ 331.707467][T10292] ? __fget_files+0x39d/0x420 [ 331.712132][T10292] ? __fget_files+0x2a/0x420 [ 331.716713][T10292] do_writev+0x1b8/0x360 [ 331.720945][T10292] ? __pfx_do_writev+0x10/0x10 [ 331.725718][T10292] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 331.732315][T10292] ? lockdep_hardirqs_on+0x9d/0x150 [ 331.737510][T10292] __do_fast_syscall_32+0xb4/0x110 [ 331.742621][T10292] ? exc_page_fault+0x599/0x8b0 [ 331.747468][T10292] do_fast_syscall_32+0x34/0x80 [ 331.752318][T10292] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.758646][T10292] RIP: 0023:0xf740d579 [ 331.762704][T10292] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 331.782299][T10292] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 331.790706][T10292] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800012c0 [ 331.798668][T10292] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.806629][T10292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.814591][T10292] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 331.822551][T10292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.830521][T10292] [ 331.833536][T10292] Modules linked in: [ 331.838362][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.845359][T10292] ---[ end trace 0000000000000000 ]--- [ 331.866959][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.928263][T10292] RIP: 0010:__mutex_lock+0x15d/0x10c0 [ 331.933803][T10292] Code: c0 80 de 71 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 07 0e 00 00 83 3d b0 aa 43 0e 00 75 21 49 8d 7e 60 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 67 71 fd f5 4d 39 76 60 0f 85 81 0d 00 00 [ 331.954096][T10292] RSP: 0018:ffffc90003b56e80 EFLAGS: 00010202 [ 331.960470][T10292] RAX: 0000000000000019 RBX: ffffc90003b56f40 RCX: ffffffff9a71de03 [ 331.978790][ T5893] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.004566][T10308] IPVS: set_ctl: invalid protocol: 0 10.1.17.1:20003 [ 332.012413][T10292] RDX: ffff8880265cda00 RSI: ffffffff8e4efdf2 RDI: 00000000000000c8 [ 332.024446][T10292] RBP: ffffc90003b57018 R08: ffffc90003b56f87 R09: 0000000000000000 [ 332.026113][ T5893] usb 4-1: config 1 interface 0 has no altsetting 0 [ 332.033145][T10292] R10: ffffc90003b56f60 R11: fffff5200076adf1 R12: 0000000000000000 [ 332.050863][T10292] R13: ffffc90003b56f48 R14: 0000000000000068 R15: dffffc0000000000 [ 332.061009][T10292] FS: 0000000000000000(0000) GS:ffff888124fb7000(0063) knlGS:00000000f5096b40 [ 332.099007][T10292] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 332.107255][T10292] CR2: 000000008000d000 CR3: 000000007e4a0000 CR4: 00000000003526f0 [ 332.118338][ T5893] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 332.129283][T10292] DR0: 0000000000000001 DR1: 0000000000000001 DR2: 0000000000000006 [ 332.130544][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.137480][T10292] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 332.159048][T10292] Kernel panic - not syncing: Fatal exception [ 332.165449][T10292] Kernel Offset: disabled [ 332.169790][T10292] Rebooting in 86400 seconds..