last executing test programs: 7m30.848605379s ago: executing program 0 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000000010000000000", 0x58}], 0x1) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x421}, {{0x0, 0x0, 0x0}, 0x20000009}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/151, 0x97}, {&(0x7f00000009c0)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4073, 0xfe9}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f00000007c0)=""/206, 0xce}, {&(0x7f0000000340)=""/61, 0x3d}], 0x9}, 0x4dd}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x102, 0x0) 7m28.819946393s ago: executing program 0 (id=173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000e00000000a000000000000000000000808000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 7m28.55277761s ago: executing program 0 (id=175): io_uring_setup(0x5be0, &(0x7f0000000000)={0x0, 0x400067c1, 0x2, 0x4000000, 0x311}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000010000000000140012800900010076657468000000006e7ef76b0800200001"], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) 7m27.586839903s ago: executing program 0 (id=182): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161942, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0xff7ffff7) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r3, 0xe, 0x2, r4}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r4, 0x0, 0x2, r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r4, 0x7, 0x2, r3}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000000), 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000001840)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0xc874}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001640)="e71a00325e9d21b9f289d5bbd15a2241e8b5f08e9dd5f22a5f53015688ee83faeea1c0f18fdd2908ac58edd90613a73fd1fcc94c8223ec95ee5c960a35848a4f666101e0fdd78ad9a2a3f113cbdf7ef4e716fcd87e93d95600ce1c7563fc3a11a1b6b59a351f79d57566519bad63942101e35cce377085ce438e81fde0393692f24e0c", 0x82}, {&(0x7f0000000400)="8974020f1034797ea0bff9a40920cd0a13db4636e68d83d3c07695f181b60db81eb6df196cc92c4649743719fc3fdcd520fdc11842560315c73b4fe61752d30a4575419d52db341b788b8320424cf03efe82be9c39ac9c0ed8ba1b869421b3f8edfc78f8eaaf6f9c6167bda8d586dd882de3271fa0c1cbfa923f9e3d49dc77", 0x7f}, {&(0x7f0000000480)="40c830a521d9debe884ff221f41ec02f630bbff423d797b033c2030c284b38b896970781cc3c9ca6a8e13d24e2374dda8b2245419ca54d9a04e46f13000f8f02161f81012e38378fe957", 0x4a}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000500)="065246062378ecde130a6c0e8baa7e0b21c675397971943852e6cdb94c2a06bcf5c78458fab6410209f7e4ecb51aef43f4f759ad56532647b579f9ba900f5d39508bd98c50bac921a8e070028257e9474a4294a00c4c5b7501d14e9230738eb621b6ddac76f88648358ca94a393bc06d4d6cd7e074046c0f73a1eaa498e649", 0x7f}, {&(0x7f0000000580)="5ba66eec66d1b2494edd8d9a5ab4f1d9c8dd5e03aeb121ece482d6c84bcecc164ad3633dd4381cfc3eda285693699a9c85ac284f22c04e0f72161b2aec597944e21b4422a542d32b1ea4a96e6eb7fe92c29fde9eb733c632ac62fcab8547f97cb2be87c45a8316ce7c54", 0xfd0c}, {&(0x7f0000001880)="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", 0xff}], 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="38000000000000003597dbde45ba801c5163656c12c2a240a8d6e4e7ead843be7b599c83c55b8f43ca199559ba8dc9a06141b9337913ce2c366f8222a7aa25f62456"], 0x38, 0x4008004}}], 0x1, 0x8855) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd3d}, 0x62064880) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000024, 0x401, 0xfffffffd, 0xb49, 0x1000000000000009, 0x9, 0x2, 0x3}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x0) r9 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)) syz_open_dev$sg(&(0x7f0000004740), 0x0, 0x200) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x1e, 0x2, 0x4) 7m26.389675705s ago: executing program 0 (id=185): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x898, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x80044100, 0x0) 7m24.510055658s ago: executing program 0 (id=195): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000cef8bd08410e424176bc0102030109021b00010000000009040002016a2ff6000905010800020b0d64"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000340)={0x0, 0x22, 0x10, {[@local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0xa, "aaacaff6"}, @local=@item_012={0x1, 0x2, 0x8, "9e"}, @local=@item_012={0x2, 0x2, 0x1, 'b^'}, @main=@item_4={0x3, 0x0, 0x8, "2e08cd0f"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x15a}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)={0x20, 0xd}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000000580)={0x20, 0x1, 0xea, "0bae53d45bd7953bf95a8d77cae003940ea2d9345d04e7abffe074ec0391c5ba428c8535aac0bd5ed99e4e00e68b6f3dacc2751b1392d7108ffaa74b03d9b409c22b88f75180e4665f413938a48f34c27cb62b7a9f904eeeef606c087bf7e673b6f56501ed210321744989abf6f2c4ebd7c12f3b8222283c88497e7354a65a6aa3778f1eb2479a557c044353ebaf3e50b9024fa2773057cff0c1687058ef1f7a35098b751eadbde5270246b8ff1b3a01e3c2b0aa09564bf7fb79ec06ab6fa3f8cfd72e490d4b3cf10f7684d480919c48"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x5}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysinfo(0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0x14}]}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) 7m7.329305311s ago: executing program 32 (id=195): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000cef8bd08410e424176bc0102030109021b00010000000009040002016a2ff6000905010800020b0d64"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000340)={0x0, 0x22, 0x10, {[@local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0xa, "aaacaff6"}, @local=@item_012={0x1, 0x2, 0x8, "9e"}, @local=@item_012={0x2, 0x2, 0x1, 'b^'}, @main=@item_4={0x3, 0x0, 0x8, "2e08cd0f"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x15a}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)={0x20, 0xd}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000000580)={0x20, 0x1, 0xea, "0bae53d45bd7953bf95a8d77cae003940ea2d9345d04e7abffe074ec0391c5ba428c8535aac0bd5ed99e4e00e68b6f3dacc2751b1392d7108ffaa74b03d9b409c22b88f75180e4665f413938a48f34c27cb62b7a9f904eeeef606c087bf7e673b6f56501ed210321744989abf6f2c4ebd7c12f3b8222283c88497e7354a65a6aa3778f1eb2479a557c044353ebaf3e50b9024fa2773057cff0c1687058ef1f7a35098b751eadbde5270246b8ff1b3a01e3c2b0aa09564bf7fb79ec06ab6fa3f8cfd72e490d4b3cf10f7684d480919c48"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x5}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysinfo(0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0x14}]}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) 8.240570978s ago: executing program 1 (id=1737): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x1, 0xd8640) socket(0x22, 0x2, 0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffefffffdfffffff]}, 0x8, 0x800) syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0x200ec2c, 0x0, 0x1, 0x40000333}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x2, 0x6000, @fd, 0x1, &(0x7f0000000000)="b65e567cd36e1c4af3abeb32bd9a41cea1b7885ae383aa4844a510adb71dd7c427d1c2762727d81608b5344e27007dcb774671c7866a5e6b09666a0eecd9be79501405c070174951bce9766ec8587280e5da465d085bd322025877921148698ecf3742b3d0", 0x65, 0x3}) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x3c80, 0x85, 0x400, 0x3, 0x60}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000062, 0x9, 0x0, 0xd65, 0x400009, 0x8, 0x1}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0xd01840) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r8, &(0x7f00000000c0)=""/57, 0x39, 0x60, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000240)={0x4, 0x6, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 7.861029457s ago: executing program 2 (id=1739): socket$kcm(0xa, 0x2, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1, 0xf2ff0000}, 0x0, 0x3, 0xfffffff9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0x9, 0x4, 0x4, 0x4, 0x2, 0x0, 0x7, 0x16a, 0x6, 0x4, 0x5, 0x7fffffff, 0x6, 0x7b1, 0xb5, 0x3, 0x5, 0x0, 0x1, 0x7, 0x3, 0xe, 0xfff, 0x19, 0x3, 0xf8a3, 0xff, 0x3, 0x8, 0x2c1, 0x9, 0x6, 0xb, 0x8125, 0x7, 0x3ff, 0x200, 0x8, 0xe, 0x3, 0xd65, 0x4, 0x2c, 0xb, 0xc10, 0xfb, 0x2, 0xc, 0xff, 0xffff, 0x4, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0xc, 0x3ff, 0xfff, 0xef, 0x662, 0x401, 0x0, 0x8, 0x1, 0x7ff, 0x77, 0xd0dd, 0x1, 0x10, 0x3, 0x7, 0x2, 0x5, 0x80000000, 0x0, 0xfffffffb, 0x80000000, 0x57d, 0x5, 0x8, 0x1, 0x8, 0x4, 0x6, 0x1, 0x6, 0x3, 0x0, 0xae, 0x7, 0x8001, 0xe, 0xfffffffe, 0x7, 0x3, 0x8, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x3, 0x10000, 0x0, 0x8, 0x846, 0x1ff, 0x9, 0x3ff, 0xfffffffa, 0x5, 0x400, 0xaa9, 0x81, 0x8001, 0x3, 0x2c18, 0x8, 0x9, 0x5, 0x0, 0x600, 0x4, 0x80000001, 0x800, 0x7, 0x7, 0x2, 0x32, 0x6, 0x7, 0x2, 0x7, 0x8, 0x4, 0x2, 0x40000000, 0x7f, 0x7, 0x4, 0x7, 0x2, 0xe, 0x5d41, 0x1, 0x2a940, 0x0, 0xb, 0x8, 0x200, 0x10001, 0x9, 0x401, 0x6, 0x1, 0x3, 0x8, 0xc, 0x8, 0x9, 0x0, 0x9, 0x4, 0xc, 0x800, 0xfff, 0x8, 0x32e, 0x5, 0x5, 0x2, 0x40, 0x52, 0xfff, 0x6, 0x2, 0x0, 0x7, 0x9, 0x2, 0x1, 0x9, 0x0, 0x80000001, 0x8, 0x0, 0x1, 0x9, 0x1, 0x1576, 0x8001, 0x7, 0x5, 0x1, 0xcdd6, 0x0, 0x74, 0x8000, 0x80000001, 0x6, 0x5b, 0x7, 0x5, 0xccb9, 0x9b, 0xffff8bf5, 0x7, 0x0, 0x8001, 0x9, 0x5, 0x0, 0x4, 0x8, 0x29, 0x665, 0x8, 0x9, 0x7, 0x6, 0x5c, 0x0, 0xffffffff, 0x4, 0xa000, 0x3, 0x7e8, 0x86f070e5, 0x401, 0x6, 0x4, 0x10, 0x2, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1000, 0xd0, 0x5, 0x10, 0x1e70, 0x40000004, 0xdbc, 0x1, 0x80000000, 0xd, 0xff, 0x4, 0xcca, 0x827]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x1}, 0x800) 7.188679061s ago: executing program 4 (id=1740): syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) socketpair(0xa, 0x3, 0x0, &(0x7f0000000040)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0x1, 0xcd}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)}], 0x0}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902810003010070000904000000010100000a240104000d02020208240400000000000000010000010200000904010101010200000b240202900b08000236df0905010900040000000725010000000009040200000102", @ANYRES64, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e65740000000a0500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$netlink(r7, 0x0, 0x0) write$cgroup_subtree(r4, 0x0, 0x0) 6.021875544s ago: executing program 5 (id=1743): time(0x0) unshare(0x2a020400) readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'}) r3 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES16=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 5.095055279s ago: executing program 4 (id=1747): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getrandom(0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x4005e, 0xfffffffffffffffd, 0x7}) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x301000, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f00000001c0)) r4 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x8020}, [@IFLA_MTU={0x8, 0x4, 0xe}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}}, 0x200000c0) 4.980305944s ago: executing program 1 (id=1748): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000001140)=ANY=[@ANYBLOB="03000000000000c090004e23e0000002000000000000000007000000000000000000000000000000000000010000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000006b00"/144], 0x90) 4.860566047s ago: executing program 2 (id=1750): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x640081, 0x0) r1 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c80, 0x0) write$binfmt_aout(r4, &(0x7f0000000980)={{0xcc, 0x6, 0x9, 0x18f, 0x2fa, 0x7f, 0x343, 0xca}}, 0x20) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) r6 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) msgget$private(0x0, 0x40) io_setup(0x9, &(0x7f0000000100)) write(r1, &(0x7f0000000380)="dba41c416f638fd75272b7f0c4185f84094a473f2872d8c7f61d459df49dd0d940038e34f59291b55af96526f4a1895d584f830a0b12ef170ed338f04a8a500c65b288bd0a626d85e5d2c97f9e5d1bbf4aa963c7441d8151753b12d6119f1ac831677107975e6df38ee37f5bb5f7b287dca5779a698808ca6b0318f2542d19b4fa485fad25fbb706ad31bea3c0133c5528e908d8a7a6609869a01ff2ad7be6df150c28bdbde0257a37a96de5779d2e2869fec48fc6186cae3ec4bf4f", 0xbc) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r8, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r7, 0x3b8c, &(0x7f00000001c0)={0x30, r9, 0x1, 0x0, 0x6, 0x8, 0x3, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x3, r9, 0x0, 0x6, 0xab, &(0x7f0000000040)="9638d5fa6f0427935a37dfe668d4aae481e6bcc187926aa2f34308514a4f996e5dfab16232bd43d9db1e10088e39c450805cc82449392f055cb98c04be08b66d64d314f15d48f8c07c0786348964a47767769b7e9d80ac3c087661008fdb4656be87c619658a1f4aee632575a34c463c6bf5c13a1031e2c0d0f4d00bf16f5f2a06855b3370b203a71ad49e2a818487bf3f321e227ef30146be4926df70114496afb3c8a7b1d4a6e8a5df0f"}) 4.815814053s ago: executing program 4 (id=1751): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000200)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0xffffff97, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 4.743859571s ago: executing program 1 (id=1753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}, 0x1, 0x200000000000000}, 0x0) 4.657790672s ago: executing program 1 (id=1754): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @in={0x2, 0x4e20, @broadcast}, 0x501, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x300}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) listen(0xffffffffffffffff, 0x0) r6 = timerfd_create(0x0, 0x0) timerfd_gettime(r6, &(0x7f0000000000)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x8, 0x3, 0x2cf0b597, 0x100, r10, 0x630, '\x00', r9, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x5}, 0x50) 4.49014516s ago: executing program 4 (id=1755): r0 = socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x40, 0x15, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = getpid() sched_getattr(r4, &(0x7f0000000380)={0x38}, 0x38, 0x0) get_robust_list(r4, &(0x7f00000002c0)=&(0x7f0000000280)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, &(0x7f0000000340)=0x18) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000080)={0xc, 0x6, 0xfa00, {0xfffffffffffffffe}}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000000001010400000000141a0000020000004a52fd040001ffac8ace3ae3999c"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x13497, 0x2021}, [@IFLA_LINK={0x8, 0x5, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x7069fe623927518e) socket(0x10, 0x3, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x40, 0x15, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) getpid() (async) sched_getattr(r4, &(0x7f0000000380)={0x38}, 0x38, 0x0) (async) get_robust_list(r4, &(0x7f00000002c0)=&(0x7f0000000280)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, &(0x7f0000000340)=0x18) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000080)={0xc, 0x6, 0xfa00, {0xfffffffffffffffe}}, 0x10) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000000001010400000000141a0000020000004a52fd040001ffac8ace3ae3999c"], 0x18}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x13497, 0x2021}, [@IFLA_LINK={0x8, 0x5, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x7069fe623927518e) (async) 4.164220311s ago: executing program 5 (id=1756): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.048656257s ago: executing program 5 (id=1757): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xc8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xc6}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="021800001400000000000000000000000500050000ff80000a00ffff00000000fe8000000000000000000000000000aa000000000000000008001200000000000300000000000000300000000000000000000000000000000a000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x40040011, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="330300000000000000001c0000002000018008000300000000001400"], 0x34}}, 0x200080c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x4881) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) unshare(0x20000400) r5 = syz_open_dev$mouse(&(0x7f00000001c0), 0x7, 0x0) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f0000000640)={0x15}) madvise(&(0x7f000092f000/0x4000)=nil, 0x4000, 0xb) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 2.490441696s ago: executing program 3 (id=1758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}, 0x1, 0x84, 0x0, 0x8000}, 0x0) 2.212138518s ago: executing program 3 (id=1759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x300, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) (async, rerun: 64) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "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", "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"}) (async, rerun: 64) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000440)={{0x2, 0x0, 0xff2d}}) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in6=@remote, 0x0, 0x8, 0xffff, 0x0, 0xa, 0x50, 0x0, 0x87}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5c23}, {0x0, 0x3, 0x8000000}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x6, 0x2}}, 0xe8) (async) sendmmsg(0xffffffffffffffff, &(0x7f000000b200), 0x0, 0xc000) (async) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x1007}, 0x4) (async) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000240)={0xfffffc01}, 0x8) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) 2.115468832s ago: executing program 5 (id=1760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050025bd7000fedbdf250600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000000c0017"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000000) 1.935749736s ago: executing program 2 (id=1761): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getrandom(0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x4005e, 0xfffffffffffffffd, 0x7}) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x8020}, [@IFLA_MTU={0x8, 0x4, 0xe}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}}, 0x200000c0) 1.852270983s ago: executing program 1 (id=1762): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x60}, 0x1, 0x100000000000000, 0x0, 0x8000}, 0x20000000) 1.716090933s ago: executing program 5 (id=1763): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket(0x1, 0x803, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x5865) 1.693061487s ago: executing program 3 (id=1764): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000001000000808000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 1.554495633s ago: executing program 5 (id=1765): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x4d40) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@local, 0x4d5, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) socket$key(0xf, 0x3, 0x2) r5 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x14240, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="fe"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xe, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) writev(r9, &(0x7f0000000600)=[{&(0x7f0000000000)='*', 0x1}], 0x1) 1.54453718s ago: executing program 1 (id=1766): bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000cef8bd08410e424176bc0102030109021b00010000000009040002016a2ff6000905010800020b0d64"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000340)={0x0, 0x22, 0x10, {[@local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0xa, "aaacaff6"}, @local=@item_012={0x1, 0x2, 0x8, "9e"}, @local=@item_012={0x2, 0x2, 0x1, 'b^'}, @main=@item_4={0x3, 0x0, 0x8, "2e08cd0f"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x15a}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)={0x20, 0xd}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000000580)={0x20, 0x1, 0xea, "0bae53d45bd7953bf95a8d77cae003940ea2d9345d04e7abffe074ec0391c5ba428c8535aac0bd5ed99e4e00e68b6f3dacc2751b1392d7108ffaa74b03d9b409c22b88f75180e4665f413938a48f34c27cb62b7a9f904eeeef606c087bf7e673b6f56501ed210321744989abf6f2c4ebd7c12f3b8222283c88497e7354a65a6aa3778f1eb2479a557c044353ebaf3e50b9024fa2773057cff0c1687058ef1f7a35098b751eadbde5270246b8ff1b3a01e3c2b0aa09564bf7fb79ec06ab6fa3f8cfd72e490d4b3cf10f7684d480919c48"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x5}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysinfo(0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0x14}]}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) 1.543737972s ago: executing program 2 (id=1767): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.400208155s ago: executing program 3 (id=1768): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0x9, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000000c0)=""/198) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1f) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x1, 0x25, 0x4, 0x4, 0x0, 0x6, 0x74, 0x3, 0x2, 0x3, 0x2, 0xff, 0x5, 0x5, 0x81}}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x84, 0xfc, 0x3, 0x2, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000240)={[{0x8a0, 0x1ff, 0x0, 0x44, 0x0, 0x2, 0x2, 0x1, 0x6, 0x5, 0x0, 0x6, 0x6}, {0x3, 0x1, 0x1, 0x2a, 0xe1, 0xf6, 0x5, 0x2, 0xb4, 0x2, 0x1, 0x2, 0x2}, {0x0, 0x4, 0x9, 0x6, 0x80, 0x9, 0x1, 0x8, 0x9, 0xff, 0x4, 0x28, 0x3ff}], 0x400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) io_submit(r0, 0x2, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r1, &(0x7f00000002c0)="ab", 0x1, 0x6ed}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x20}]) 1.316207091s ago: executing program 2 (id=1769): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a80)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0x94}}, 0x0) socket$isdn(0x22, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x40) 870.929208ms ago: executing program 4 (id=1770): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x3f, 0x0, 0x42501}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 788.021182ms ago: executing program 2 (id=1771): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x640081, 0x0) r1 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c80, 0x0) write$binfmt_aout(r4, &(0x7f0000000980)={{0xcc, 0x6, 0x9, 0x18f, 0x2fa, 0x7f, 0x343, 0xca}}, 0x20) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) r6 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) msgget$private(0x0, 0x40) io_setup(0x9, &(0x7f0000000100)) write(r1, &(0x7f0000000380)="dba41c416f638fd75272b7f0c4185f84094a473f2872d8c7f61d459df49dd0d940038e34f59291b55af96526f4a1895d584f830a0b12ef170ed338f04a8a500c65b288bd0a626d85e5d2c97f9e5d1bbf4aa963c7441d8151753b12d6119f1ac831677107975e6df38ee37f5bb5f7b287dca5779a698808ca6b0318f2542d19b4fa485fad25fbb706ad31bea3c0133c5528e908d8a7a6609869a01ff2ad7be6df150c28bdbde0257a37a96de5779d2e2869fec48fc6186cae3ec4bf4f", 0xbc) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r7, 0x3b8c, &(0x7f00000001c0)={0x30, r8, 0x1, 0x0, 0x6, 0x8, 0x3, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x3, r8, 0x0, 0x6, 0xab, &(0x7f0000000040)="9638d5fa6f0427935a37dfe668d4aae481e6bcc187926aa2f34308514a4f996e5dfab16232bd43d9db1e10088e39c450805cc82449392f055cb98c04be08b66d64d314f15d48f8c07c0786348964a47767769b7e9d80ac3c087661008fdb4656be87c619658a1f4aee632575a34c463c6bf5c13a1031e2c0d0f4d00bf16f5f2a06855b3370b203a71ad49e2a818487bf3f321e227ef30146be4926df70114496afb3c8a7b1d4a6e8a5df0f"}) 385.125405ms ago: executing program 4 (id=1772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r0, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r4 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000202505a81a325dd6bd286c44021b000101ff2008090400fd010701010509050102200004000bf9cdc0c8effa2a39f5b8f37f5c1b3d0704855212ad75b63a211acddf65"], 0x0) syz_usb_control_io$printer(r4, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00030200a40095e503"]}, 0x0) syz_usb_control_io(r4, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_read(r4, 0x1, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, &(0x7f0000001680)="f3", 0x1) close_range(r3, 0xffffffffffffffff, 0x0) mq_notify(r2, &(0x7f0000000000)={0x0, 0x39}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 271.120922ms ago: executing program 3 (id=1773): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) fdatasync(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xfe}, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) preadv(r0, 0x0, 0x0, 0x9, 0x2) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@remote}, &(0x7f0000000100)=0x14) 0s ago: executing program 3 (id=1774): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)="800d6f65cd6e1da74be04a2b2ec86749c76bbae3f01bdf25457ff884cfeed810f7b3b8abb90c660bcbd7df1d0cff85e4e9592726a16c67644edc2073ab047c2eff44d62b5de27de69a39fcbf6b2a7321803eb5714f95782544c2bd016e1642994904fe68575391bd085729a7cc63e22e2df3ca1dd396608c68c283e582aab0d58aab30c0fc61ffb14f69ea60d4fc01b81f7e98d00f2ec0541c4152", 0x9b}, {&(0x7f0000000180)="f9cc8ed5bb23b07eccfb66a891acf8914ab28e88a8299ef9ace789e39b8199533c75065968e20bca337275fb5c8ea4b455ef29e23c420e13bc4481b92e752dcaddc52c31f316b63056d53e625e8fba3ea234b6d19ce72fa40e511fea6a6652496d90449af25887ada823a699878872", 0x6f}, {&(0x7f0000000200)="e45e321261a851471fd62e34013fbf66e86a9df05cda41786e8184aac5c8cef3e8a3de0da745aab015af66bcb5ce1849c10f959d6a2a7261bd787936c373bc48be6febb47b14fc0fce8f5ad3e891dd35a87b0f5033590bffce6738e643afba124ed52cec1fda0c46034e14debcd16684bb65813c008dc4da210fe58666e93d1f01e1c63af10b1174abad8a2ecaec9049ffbd27fe984cad95c6ac006fdbbe637e73e5df731ac94ba7fd9ebe3c8138e374e507d7ab2688baf129e4e7c27f17fd3906209ae1f7a1e6b975c43063130808ef36973d455bebc4a76d65e9b74495cc89db4836c20de1f2f0fc3e34774a238d35d6f4c9eb6df05c5f95c526dd5bdfece5d5de416d923337c408284c805ba60d4260de2d37649078a7f718d2570a5e9b7055ab831b5a758d62a61bb7abaeac9e71af86a926a4250543d2f29b7b9674b75ee630190e903ac16baa44e670b8650e3d552ed4b92398bc48ef19bb899c4fdba5a1625e006c127e507ec7ec08d41bbfb2c50681e6f986e6d71ee36b21de42b64fdee28c23a967f113b74183918be3183c64d80c241d6ff2acada76cf5583e0e1087b52f77941072f25883ad6f851d57ad82714e36c6ab8654ff26458aa064661168b025aa42861422b3adca6a6d2fec88e437e09743f65335235f24056015c1286dce674c731b3fe0e9c0e7da273e615b5f966be640d9dc58988dea2c0895d51bbe7f1d67e51ad7e5423046bf319755f23f3dc14c38c5a6acbf65b7f135b19536259c203c4b21d4f961258eff22e824c8a149c13a4cb04accc505aa71ea50e054434c6ed8cab277242e3c59eec50304fcf9d989a0bc385d670431cd588af638f39b8840356175e0db1f1d4dbcc95cb6c3103f53badaad8bedd20372b1d0a30ea855a413282ca336fb87849f20eff68b775f737ff64d1bc9ae8c31784705482bd7ab508d87391a7ec03b087b54873674b68c970562d0a010415a916af11e4030a583af5e6d11d2f289a21404015c06e82176e9ec25370661363299343153aa4fee69aa71d1a3546bfee2ad8eeff1f05ec0e595cd009921b1058ce92fc3988bbcd5403e0a86b08c81d9f757ca6c64ec0abb23952a43ef9f0b01ca29f3c6d62fd05b12d91fb9ed1e7e1b71f0c8caf93da0ccce62e17c270fc8425e4bddd395ef72ff10d70bce1b3ea1460af97cf5947786b7480c38dcc927120cea541ab4cdb1e8d9db3b471bd4f3fd658f51b129fe973999d1c9bfa4c6d91dd7f3f175581b65cc0b6e935aad2f6810320889ae215e6f15be2fffcbb84e32e709ee23003595a75471a879810f300f8773f372a131ac148581057f09b020f5626dd9f69117a362dc1519ea9772754ff18f0846993e0cddf2f5ac049658f4f7aa106c0e35e2431255c703020d958d28191878b62abf146ce6b3c675ce8f41950118a64ea3e72dff01e575150c62110b1309883a59b5e1f0383f478e75d03236e081003ce26ad0cafd726b483f6cca04c2beae959360f6c3b7b493f27162b04054a27a96f529e0ba650d9a35af559867efb20346250511f64ad2967bbe4ca8f89739d4f525848a6a93443666741df6a10d543d31144c4b22a328179d877fe07aa0bcca4743e7da94ce5f36f2060bc69bd37ffd82f19840402d6d5530cea65e7935d637b2fa98713fc3590b9dd8966ac55616464712c53999a44e4a31193e488d768ca4c1cb2c28e507200945b56a2600d0818b27b35b735925ec546ca47220003cc3927bf86ae21b86489ac02cc2fc2af332940b2e25d9ce89b53a83f95bb156d7a54af0fd2f074043920453fd08a9bf563c2021a32a1da1b68d7c7b78dd02214d6e9af22b77f51196bbefa5fc86a324bf8295053e3f70b9eb745c586d76732b3af557e3c6e70a46b1215f05c414b71b3f364f0885e71a3e7b4ba367354976496c7b9c320abd90cecb8b10a0026ed82ad28e919f628a709425b6d961aa63bd01a2d87e30f7ea7b1b7eb5013756759e5f9611ad93113c247a609dc2176e2d1a8fde32cadb558687b3403d4560ffeae5ffc03fcfb3a78f10f8f60c654379a1bd7cd1406b60fbe07622737f89914cee3145f306dd56eac9c4617ed9eac9ea7b4444d8c473017fcfc13f659480ae1ad4db3033454d409c56d9f7dab54765787af4e433e1569441c3cc2e40322ebc93296a38c9cb17eb22a9448cc148120d041dfd0c2d2f33b238478cfab7d07814eded2cf4b055b434313855e80742bf85fef07e4e342c90cbe88251c680ef7769eefa9f8c44b2ab82a2da53f1f978962e9405aab834e585f2f0b3e71b24f161afca47558a53f5b6f5e7ebaec80e121a867134a4b9acd2ca740a33556e0690fe19ce746780c0516d1291edae32d012a8739a07b6f20110a8a3bcf1f78a88fbd2716d06950a41e179efe0677dd285d6b903ada8e27c399535f53832f9a43d2d72d9616f42cbd10e717fac47031a4a8a1c11112c68d202be4d203dc55e92c1b4ccf0d4b01718c3d6466599bf0feeadbbc44e55784e10076af748d90e959d50e5521ffce3404bfa7a29685a7a5d707c8a6348fadbb7e1c46e8ce2184a8f4badcb8ec8782b1ecd8eb857e70eaca0b2e60b3c1c870dee69b843d1ad9e1354db30a103ec48fa1b7281c938bff0c151db7cbb7270c49f5176328ea3a8b2aa1b9684fdcb94363ec500f55506281c0e559ea9a06cd98dcc68a2f8eee7e16cddfc4484fdb8170d1558643b42d809b37bec40e263e86c9041a0a275183433f99b33605330176c885223f52850192d8bd63073d62b6308bae3500186dd1383ad7036495e9577bb7285d3b40aca349780a8c71f5b178e1c3d1e71e4a34f3f696a286282d04cc17287af8cfee4af515f5d623fbf3083cc3a1eef3ff54a8db19cec20724f2cf21bc4383a780e50d61d9fd7ea078caab629cbc1b960118c65da2448d19dd0f0061caf362b21abe8a2c477acdcac0e2598947844bc6ff79102b9d6b6cfeb064666ba57f1633e21ae05846e03780b2e9078077c673dde4f54d75e7983bcef910daa77059a2fd71b42497ac552f637dcdf960bd0b1334af23029073e6fa9080c6e22b55ac6bac019f7ad221919c2c504864383b7078c638d91cc0dc08b04426d3059ccd6672fcee554209ad70e4d8d2dd8ea5eab71320b57daae430ae072f2546437db2d4f0f6da3f63cd2fb6f5b39455c791ce8f0173e7f87d53e3ecad517cdaf59305d91a59e31361061d057185a339478bf5c7a3da18d0f8c530e5155ecc8ba02f53a41b3fa81d7c47d910469f3f826e5f6c96c1ab6b1a386cc56d2d18f44b91c908a3b03843120fde5876b4cebe75b0c172ddc9ffe246936c3023c0b6f6dc3f18869295bd432cdd8675396c6be99c10bb40fd03f73458ca64d5d7c99165c14e398035fa788d9c97d40b8f4e12d6c1c71f271e151109c89cf2c9210e142e4a76d5e83fbd001d8ab871016eb105bee17ab3f3d68b523785cc95ac12d6e9df6a68a30cbb222fee556c98cfd82dce0be29a2c99176b8a60073f8c84c8129e3112ba47e95ea373300ace1d75f1835119cf5d11068fab8b16691de1e3fd86c9fbd42159029fd497b7ac160def2b9b716f93098c6c09e324713496a445b6c8b78ae63abe447ae9d33cade29b9dee581c8c2f41e0baf1d92b5805eea482a023ab3518d9da1684e40cfc07cd81d4cff99f0ea5b4839cda8ace828815f664fafcecebb331d7f9fdd699de2d4bb9521647cca9ff1902ca75968511fc07e7553740916ea8cddcfed49484ec41caa4625488326c0133dae5abdbfb8143ea3a2898992b11d723921289d03fdf83f4e46d96ebdf0677c3ce6a23f6bc793da655ec7e5d717a255d10230a0a6d7d27ee0375e39389c2e6fad069709907152bcb54310ba716eed68a0a864c04ed4e84aeebe1b43b805c3a8377430c934296329b41f4609204280beaa2cd722bbd1a913b4f737019d702601c6cc98b561d60c47ce2069f6fb254653fd6f2df06d179c34e34152a8f9b95098c257567ab9f40d7921339a51d8d62dfacf4b5bbf8b35acbd31e6b7863b800fcaaa86917f8dbf5795bb17e8221666a0448ba5cb7347dd1e39e330be670a026234f379f9dc7ff6ad6e27c9e776514585a2e6ca6e5b53ea28e33d1079bd67013cd082a63c08fffaf24ae90018f6d7c8e0dda3c7ea5d42f1d912242b0dd575790d2a8a66fdc89b28662e025083e4dd2bb35805a60ffe149d946b42b8f48da370d9ad0ae1d36f13ec6379cc3eb4f85095b11108b1653e916a3bd0fc6d38f1e8dd8a5f5b128ab6d0ea5db77780cefd859cad3107ba7000ca0dd5eb3aca0b57650f592bfde7948d46342e736e7525a69f9416b031917ebab4462dd6d4cca346d7ba4ee81d8ee5e6966e8a94fd30c27b8c0be4f51757418dadb9a0ee50814bd06274cbfe0a38451471f2c78adb70be2325f8c2245bd483dafb0881b773add1a0380f97380a4c44fdba5b27887d3f9c49e0b8650e183b27960f4ad4d72706af693f1439a3ae96e80010d448132b6812b470b98fda72ebf57cd7c077ca6836ffb1e7c2232817717096456a73397973dbdca331ad2ba9294466657dfc22c423b500af7d1c4385ac00784f335e13e0962dfda48efcb67cf72a1bbdd8080ebff187381f10a8eec0626f25f7a6a9df7286f7caa30550c38084b08db3c929acfe50ef8bedec19ea17aaf9dbc75de83b4901afe26e07642b2e2e873a6418b20fabccaf5d42ce03c4b6c89a0f2c0703e219e48614b4c423ee90814f34ba7fb9795218737b814fb31c69472076b711e3550e978a6c12e233762ae25a00e61b057c8213725c934bf989f1f38ae5b108504fd8dda4ccc57e6295a8383cb114578f0bcacfe79502315128656fb6e18b1dc3f60ac257873f6c0e09ef09567336bc917af9e3ee4e3480843960046b833c2f5632e1505815188706aecee2e4b87464a4566937dbe5de0665a1a4a206c35d13ec24ebab9a0645351f020df307536277179b235a5394ffe15f7f5db9ff2a16b022f20ed7e85f00ffed4bb6aabfb117d0b9cd0a805b6c43b12fda2a7e4c4bb51af72cfd8235cdb6a0451f9027a80e795cc92bf33d8f535247b46e0c019e9b27c8917e4e5fc5fff3f4e00b751c062c7968d7005051d66ef23e247e011a37201e183730f92115f9172f81bbd6da47eb848dfd1d1f1aeeef7b6c0e315dbf6fa134148e73f1a7b912f0a9fc2b1b6fae3e2cdfde251c7b237b87136680248e1ed21f9feb8c3c8c4b74a1e726687fa7fc649a2c0c14775692bafb0a6b1941341ec765fe476cebb7061347f7a5df0ee4de678cbde6cae0b2f09025b0c011fb12e09f139bec21950681bb9e44147edccc39160e32ea142a9b14da1a7fd9cd99f5f31828ab8a4304360fc44e8ebbd16b5335d7eb8d7a8a280e88cf21232704bd2740051c8a0a3240e65cff9df1dcd9036ee4b2c9b23cbb50b383e54ad2e3cacb909ff842d86faac1213b34e24ffe3166371d5c732fd65170d598e4109be3a06de542fed323474986471b79744202a403b1a8eae948c43581e9ac02e631199865d0b60f486cc8461fcffc5df6df983c5fe5fad4bae7243940a105fce0f46eb3f3b67fdb452fc2f709a390d840aa02f70173c2d852d8183ea4b007cdc4540390b0a01db4757e811bab01c2a59d2f8196fb9c3504e36b7ac97f5e14995f408096d298ca906fdc0dbfa7847fb50f8845684937c4f5f6a2a6b7f17d9c83ecf06c79ed92aec533d128f5d6822254462988c8d7ef692ad4ba258326f2844345d2c81cd5d7d6710641c05cdb8023a15728d2f6e7", 0x1000}, {&(0x7f0000001200)="69c0e1746a1bcb3a050392817c093242c6b5d72867ebb9c81a69d5f0bdd3e4026f5a74930415b53a1541cf5cea6562330c9622e528583598e3fde7994b2d9759ce8cf051c9e2b45f2aa41d2d2250fd5e04e175c2b8b6b663a22b50aabf0ede306c1198bc84af224ea5ab4ea53efe81219c4b65729905a1f8f0c0ffe4cffae2f9431c2f1249e0128317642904123993e1f18909125fbaa91ffd4510d96af78ba141729ca03599f13d11ac60df556b3d691972df6c71", 0xb5}, {&(0x7f00000012c0)="435c6b9b", 0x4}], 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) kernel console output (not intermixed with test programs): ompute Engine, BIOS Google 07/12/2025 [ 457.946057][T10792] Call Trace: [ 457.946062][T10792] [ 457.946067][T10792] dump_stack_lvl+0x189/0x250 [ 457.946086][T10792] ? __pfx____ratelimit+0x10/0x10 [ 457.946099][T10792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.946112][T10792] ? __pfx__printk+0x10/0x10 [ 457.946142][T10792] should_fail_ex+0x414/0x560 [ 457.946174][T10792] _copy_to_user+0x31/0xb0 [ 457.946198][T10792] simple_read_from_buffer+0xe1/0x170 [ 457.946229][T10792] proc_fail_nth_read+0x1b3/0x220 [ 457.946251][T10792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.946275][T10792] ? rw_verify_area+0x2a6/0x4d0 [ 457.946296][T10792] ? __lock_acquire+0xab9/0xd20 [ 457.946311][T10792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.946324][T10792] vfs_read+0x200/0xa30 [ 457.946337][T10792] ? fdget_pos+0x247/0x320 [ 457.946349][T10792] ? __pfx___mutex_lock+0x10/0x10 [ 457.946362][T10792] ? __pfx_vfs_read+0x10/0x10 [ 457.946377][T10792] ? __fget_files+0x2a/0x420 [ 457.946389][T10792] ? __fget_files+0x3a0/0x420 [ 457.946398][T10792] ? __fget_files+0x2a/0x420 [ 457.946413][T10792] ksys_read+0x145/0x250 [ 457.946429][T10792] ? __pfx_ksys_read+0x10/0x10 [ 457.946443][T10792] ? rcu_is_watching+0x15/0xb0 [ 457.946458][T10792] ? do_syscall_64+0xbe/0x3b0 [ 457.946472][T10792] do_syscall_64+0xfa/0x3b0 [ 457.946482][T10792] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.946492][T10792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.946503][T10792] ? clear_bhb_loop+0x60/0xb0 [ 457.946517][T10792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.946527][T10792] RIP: 0033:0x7ff8b1b8d5fc [ 457.946538][T10792] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 457.946548][T10792] RSP: 002b:00007ff8b29c3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 457.946562][T10792] RAX: ffffffffffffffda RBX: 00007ff8b1dc5fa0 RCX: 00007ff8b1b8d5fc [ 457.946570][T10792] RDX: 000000000000000f RSI: 00007ff8b29c30a0 RDI: 0000000000000004 [ 457.946577][T10792] RBP: 00007ff8b29c3090 R08: 0000000000000000 R09: 0000000000000000 [ 457.946583][T10792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.946590][T10792] R13: 00007ff8b1dc6038 R14: 00007ff8b1dc5fa0 R15: 00007ff8b1eefa28 [ 457.946608][T10792] [ 458.196342][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.856126][T10133] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 458.966421][T10151] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 459.066653][T10133] usb 4-1: Using ep0 maxpacket: 16 [ 459.090046][T10133] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 459.142739][T10133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 459.143919][T10151] usb 6-1: Using ep0 maxpacket: 16 [ 459.177578][T10133] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 459.206095][T10133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.260052][T10151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.272371][T10151] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 459.311456][T10151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.341137][T10151] usb 6-1: config 0 descriptor?? [ 459.343293][T10133] usb 4-1: Product: syz [ 459.366062][ T43] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 459.441072][T10133] usb 4-1: Manufacturer: syz [ 459.566020][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 459.641835][T10133] usb 4-1: SerialNumber: syz [ 459.683501][ T43] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 459.703042][T10133] usb 4-1: config 0 descriptor?? [ 459.721242][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.743183][T10133] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 459.761001][ T43] usb 5-1: Product: syz [ 459.785896][T10802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.827891][ T43] usb 5-1: Manufacturer: syz [ 459.832571][ T43] usb 5-1: SerialNumber: syz [ 459.838653][T10802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.853393][T10133] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 459.873404][ T43] usb 5-1: config 0 descriptor?? [ 459.924638][T10151] mcp2221 0003:04D8:00DD.002D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 460.276185][ T43] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 460.358884][T10151] usb 6-1: USB disconnect, device number 53 [ 460.806796][T10133] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 460.979540][T10133] em28xx 4-1:0.0: Config register raw data: 0x41 [ 461.690626][T10824] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1204'. [ 461.910654][ T43] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 462.294073][T10837] No buffer was provided with the request [ 462.303806][T10837] trusted_key: encrypted_key: insufficient parameters specified [ 462.500371][T10838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.346925][T10151] usb 5-1: USB disconnect, device number 58 [ 464.713236][T10151] usb 4-1: USB disconnect, device number 66 [ 464.799664][T10151] em28xx 4-1:0.0: Disconnecting em28xx [ 464.802937][T10151] em28xx 4-1:0.0: Freeing device [ 465.276464][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 465.417979][T10848] veth0: entered promiscuous mode [ 465.456112][ T10] usb 4-1: device descriptor read/64, error -71 [ 465.544888][T10849] veth0: left promiscuous mode [ 465.603405][T10860] No buffer was provided with the request [ 465.610478][T10860] trusted_key: encrypted_key: insufficient parameters specified [ 465.684667][T10860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.773104][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 465.940180][ T10] usb 4-1: device descriptor read/64, error -71 [ 466.140897][ T958] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 466.148923][ T10] usb usb4-port1: attempt power cycle [ 466.456491][ T958] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 466.475718][ T958] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 466.510898][T10871] sctp: [Deprecated]: syz.1.1217 (pid 10871) Use of int in maxseg socket option. [ 466.510898][T10871] Use struct sctp_assoc_value instead [ 466.576855][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 466.594388][ T958] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 466.623053][T10873] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 466.630817][T10873] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 466.656128][ T958] usb 6-1: config 0 interface 0 has no altsetting 0 [ 466.666616][ T10] usb 4-1: device descriptor read/8, error -71 [ 466.702612][ T958] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 466.724183][ T958] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 466.752527][ T958] usb 6-1: config 0 interface 0 has no altsetting 0 [ 466.833380][ T958] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 466.862986][ T958] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 466.986101][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 466.996120][ T958] usb 6-1: config 0 interface 0 has no altsetting 0 [ 467.006414][ T958] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 467.015660][ T958] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 467.027830][ T10] usb 4-1: device descriptor read/8, error -71 [ 467.106974][ T958] usb 6-1: config 0 interface 0 has no altsetting 0 [ 467.115392][ T958] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 467.130333][ T958] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 467.156380][ T10] usb usb4-port1: unable to enumerate USB device [ 467.199106][ T958] usb 6-1: config 0 interface 0 has no altsetting 0 [ 467.248625][ T958] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 467.281454][ T958] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 467.331111][ T958] usb 6-1: config 0 interface 0 has no altsetting 0 [ 467.349454][ T958] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 467.369804][ T958] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 467.402138][ T958] usb 6-1: config 0 interface 0 has no altsetting 0 [ 467.423765][ T958] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 467.442775][ T958] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 467.494809][ T958] usb 6-1: config 0 interface 0 has no altsetting 0 [ 467.517848][ T958] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 467.546186][ T958] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 467.572881][ T958] usb 6-1: Product: syz [ 467.578332][ T958] usb 6-1: Manufacturer: syz [ 467.582964][ T958] usb 6-1: SerialNumber: syz [ 467.591556][ T958] usb 6-1: config 0 descriptor?? [ 467.608569][ T958] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 467.924285][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 467.960264][ T958] usb 6-1: USB disconnect, device number 54 [ 467.976685][ T958] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 468.163967][T10889] netlink: 'syz.4.1220': attribute type 10 has an invalid length. [ 468.178801][T10889] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 468.249019][T10889] wg1: entered promiscuous mode [ 468.253958][T10889] wg1: entered allmulticast mode [ 468.312936][T10892] libceph: resolve '0.' (ret=-3): failed [ 468.702020][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 468.966307][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 469.003856][ T10] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 469.070183][ T10] usb 5-1: config 0 has no interface number 0 [ 469.071638][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'. [ 469.281345][ T10] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 469.323786][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.396480][ T10] usb 5-1: Product: syz [ 469.417616][ T10] usb 5-1: Manufacturer: syz [ 469.422386][ T10] usb 5-1: SerialNumber: syz [ 469.523885][T10906] binder: 10905:10906 unknown command 0 [ 469.553819][T10906] binder: 10905:10906 ioctl c0306201 200000000080 returned -22 [ 469.593525][ T10] usb 5-1: config 0 descriptor?? [ 469.625079][ T10] ftdi_sio 5-1:0.217: FTDI USB Serial Device converter detected [ 469.641787][T10909] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1228'. [ 469.756777][ T10] usb 5-1: Detected SIO [ 469.786657][T10909] loop7: detected capacity change from 0 to 7 [ 469.869140][ T10] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 470.389745][T10909] Dev loop7: unable to read RDB block 7 [ 470.446363][T10909] loop7: unable to read partition table [ 470.504429][T10909] loop7: partition table beyond EOD, truncated [ 470.513513][T10909] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 471.050456][T10920] No buffer was provided with the request [ 471.070198][T10920] trusted_key: encrypted_key: insufficient parameters specified [ 471.160046][T10920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.846858][T10928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.408567][ T43] usb 5-1: USB disconnect, device number 59 [ 472.447335][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 472.498795][ T43] ftdi_sio 5-1:0.217: device disconnected [ 472.526243][ T10] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 472.625470][T10939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1239'. [ 472.720322][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 472.744069][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.814499][ T10] usb 6-1: config 0 descriptor?? [ 472.947338][T10133] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 473.166412][T10133] usb 4-1: device descriptor read/64, error -71 [ 473.253135][ T10] ath6kl: Failed to read usb control message: -71 [ 473.271323][ T10] ath6kl: Unable to read the bmi data from the device: -71 [ 473.288270][ T10] ath6kl: Unable to recv target info: -71 [ 473.313401][ T10] ath6kl: Failed to init ath6kl core: -71 [ 473.346169][ T10] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 473.386174][ T958] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 473.420759][ T10] usb 6-1: USB disconnect, device number 55 [ 473.476427][T10133] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 473.578036][ T958] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.588536][ T958] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.606267][T10133] usb 4-1: device descriptor read/64, error -71 [ 473.618587][ T958] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 473.631133][ T958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.647767][ T958] usb 5-1: config 0 descriptor?? [ 473.665723][ T958] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 473.731321][T10133] usb usb4-port1: attempt power cycle [ 474.176002][T10133] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 474.257775][ T43] hid_parser_main: 5 callbacks suppressed [ 474.257794][ T43] hid-generic 0000:0840:2000.002E: unknown main item tag 0x0 [ 474.281649][T10133] usb 4-1: device descriptor read/8, error -71 [ 474.397151][ T43] hid-generic 0000:0840:2000.002E: hidraw0: HID v8.80 Device [syz1] on syz0 [ 474.546265][T10133] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 474.589515][T10133] usb 4-1: device descriptor read/8, error -71 [ 474.727286][T10133] usb usb4-port1: unable to enumerate USB device [ 474.821368][T10965] netlink: 1048 bytes leftover after parsing attributes in process `syz.1.1247'. [ 475.526142][ T958] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 475.676199][ T958] usb 2-1: Using ep0 maxpacket: 8 [ 475.690717][ T958] usb 2-1: config 0 has no interfaces? [ 475.712546][ T958] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 475.735548][ T958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.774892][ T958] usb 2-1: Product: syz [ 475.795115][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 475.795135][ T30] audit: type=1326 audit(1757330184.041:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 475.827869][ T958] usb 2-1: Manufacturer: syz [ 475.840829][ T958] usb 2-1: SerialNumber: syz [ 475.865075][ T958] usb 2-1: config 0 descriptor?? [ 475.871891][ T30] audit: type=1326 audit(1757330184.041:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 475.897540][ T30] audit: type=1326 audit(1757330184.091:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 475.922656][ T30] audit: type=1326 audit(1757330184.091:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 475.971544][ T30] audit: type=1326 audit(1757330184.091:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 475.994562][ T30] audit: type=1326 audit(1757330184.091:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 476.086969][ T30] audit: type=1326 audit(1757330184.101:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 476.124716][ T958] usb 5-1: USB disconnect, device number 60 [ 476.145234][ T10] usb 2-1: USB disconnect, device number 47 [ 476.218299][ T30] audit: type=1326 audit(1757330184.101:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 476.303645][ T30] audit: type=1326 audit(1757330184.101:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 476.380700][ T30] audit: type=1326 audit(1757330184.101:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 476.656091][T10133] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 476.766824][T11018] netlink: 14212 bytes leftover after parsing attributes in process `syz.5.1267'. [ 476.816128][T10133] usb 4-1: Using ep0 maxpacket: 8 [ 476.824005][T10133] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 476.844893][T10133] usb 4-1: config 0 has no interface number 0 [ 476.861644][T10133] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 476.879819][T10133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.890698][T10133] usb 4-1: Product: syz [ 476.895407][T10133] usb 4-1: Manufacturer: syz [ 476.913266][T10133] usb 4-1: SerialNumber: syz [ 476.934855][T10133] usb 4-1: config 0 descriptor?? [ 476.946232][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 476.961757][T10133] as10x_usb: device has been detected [ 476.970411][T10133] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 476.999266][T10133] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 477.019108][T10133] as10x_usb: error during firmware upload part1 [ 477.032203][T10133] Registered device PCTV Systems picoStick (74e) [ 477.131702][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1269'. [ 477.184125][T10133] usb 4-1: USB disconnect, device number 75 [ 477.191975][ T10] usb 5-1: config 0 has no interfaces? [ 477.205248][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 477.215633][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.219230][T10133] Unregistered device PCTV Systems picoStick (74e) [ 477.230563][ T10] usb 5-1: Product: syz [ 477.234189][T10133] as10x_usb: device has been disconnected [ 477.237343][ T958] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 477.239428][ T10] usb 5-1: Manufacturer: syz [ 477.263183][ T10] usb 5-1: SerialNumber: syz [ 477.278012][ T10] usb 5-1: config 0 descriptor?? [ 477.387926][ T958] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.398552][ T958] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 477.413499][ T958] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 477.447813][ T958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.480906][ T958] usb 2-1: config 0 descriptor?? [ 477.516781][ T10] usb 5-1: USB disconnect, device number 61 [ 477.711401][T11023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.788796][T11023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.816108][ T958] Bluetooth: Can't get state to change to load ram patch err [ 477.845054][ T958] Bluetooth: Loading patch file failed [ 477.874579][ T958] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 477.905384][ T958] usb 2-1: USB disconnect, device number 48 [ 479.477970][T11079] A link change request failed with some changes committed already. Interface ip6tnl1 may have been left with an inconsistent configuration, please check. [ 479.746161][T10133] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 479.896007][T10133] usb 6-1: Using ep0 maxpacket: 16 [ 480.018860][T10133] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 480.056030][T10133] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.321379][T10133] usb 6-1: config 0 has no interface number 0 [ 480.353344][T10133] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.376243][T10133] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 480.390137][T10133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.995113][T10133] usb 6-1: config 0 descriptor?? [ 481.066323][T10133] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 481.700484][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1291'. [ 481.857815][T11109] No buffer was provided with the request [ 481.877452][T11109] trusted_key: encrypted_key: insufficient parameters specified [ 481.982286][T11109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.091298][T11113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1294'. [ 482.776263][ T958] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 483.020533][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 483.103775][T10151] usb 6-1: USB disconnect, device number 56 [ 483.113071][ T958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.146413][ T958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.158124][ T958] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 483.168337][ T958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.204581][ T958] usb 4-1: config 0 descriptor?? [ 483.210937][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 483.235639][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 483.257125][ T10] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 483.301300][ T10] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 483.323398][ T10] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 483.355272][ T10] usb 5-1: config 128 has no interface number 0 [ 483.412623][ T10] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 483.453066][ T958] usbhid 4-1:0.0: can't add hid device: -71 [ 483.467473][ T958] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 483.476341][ T10] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 483.499423][ T10] usb 5-1: config 128 interface 127 has no altsetting 0 [ 483.537610][ T958] usb 4-1: USB disconnect, device number 76 [ 483.562698][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 483.572167][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.585344][ T10] usb 5-1: Product: syz [ 483.594857][ T10] usb 5-1: Manufacturer: syz [ 483.606051][ T10] usb 5-1: SerialNumber: syz [ 483.701600][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 483.701621][ T30] audit: type=1326 audit(1757330191.961:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11130 comm="syz.1.1301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccd278ebe9 code=0x0 [ 483.789407][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1300'. [ 483.926479][ T958] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 483.972398][T11136] binder: BINDER_SET_CONTEXT_MGR already set [ 483.985187][ T10] usb 5-1: USB disconnect, device number 62 [ 483.993285][T11136] binder: 11135:11136 ioctl 4018620d 200000000040 returned -16 [ 484.039308][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.087893][ T958] usb 4-1: Using ep0 maxpacket: 32 [ 484.113394][ T958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.143041][ T958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.170631][ T958] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 484.183259][ T958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.199881][ T958] usb 4-1: config 0 descriptor?? [ 484.214553][ T958] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 484.251185][ T958] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 484.417775][T11119] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 484.478248][T10133] usb 4-1: USB disconnect, device number 77 [ 484.589333][T10133] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 484.620282][T11151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.647262][T11151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.806132][ T958] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 484.816005][ T10] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 484.956062][ T958] usb 3-1: Using ep0 maxpacket: 8 [ 484.970692][ T958] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 484.979336][ T958] usb 3-1: config 0 has no interface number 0 [ 485.008199][ T958] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 485.036509][T10151] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 485.056990][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 485.070939][ T10] usb 5-1: New USB device found, idVendor=1a34, idProduct=f719, bcdDevice= 0.00 [ 485.082954][ T958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.095433][ T958] usb 3-1: Product: syz [ 485.100134][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.115622][ T958] usb 3-1: Manufacturer: syz [ 485.124690][ T958] usb 3-1: SerialNumber: syz [ 485.134880][ T10] usb 5-1: config 0 descriptor?? [ 485.236117][T10151] usb 6-1: Using ep0 maxpacket: 16 [ 485.255532][T10151] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 485.273428][T10151] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.294417][ T958] usb 3-1: config 0 descriptor?? [ 485.311074][ T958] as10x_usb: device has been detected [ 485.334629][ T958] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 485.354350][T10151] usb 6-1: config 0 has no interface number 0 [ 485.366258][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 485.379770][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 485.401879][T10151] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.440931][ T10] usb 5-1: USB disconnect, device number 63 [ 485.456914][T10151] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 485.490077][ T958] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 485.504948][T10151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.539500][ T958] as10x_usb: error during firmware upload part1 [ 485.548459][ T958] Registered device PCTV Systems picoStick (74e) [ 485.568697][T10151] usb 6-1: config 0 descriptor?? [ 485.589875][ T958] usb 3-1: USB disconnect, device number 49 [ 485.624955][T10151] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 485.641694][ T958] Unregistered device PCTV Systems picoStick (74e) [ 485.733859][ T958] as10x_usb: device has been disconnected [ 487.428733][T11184] netlink: 'syz.3.1316': attribute type 25 has an invalid length. [ 487.450181][T11184] netlink: 'syz.3.1316': attribute type 7 has an invalid length. [ 487.454603][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 487.508440][T11187] bridge0: port 3(macvlan2) entered blocking state [ 487.532254][T11187] bridge0: port 3(macvlan2) entered disabled state [ 487.555690][T11187] macvlan2: entered allmulticast mode [ 487.601613][T11187] bridge0: entered allmulticast mode [ 487.651446][T11187] macvlan2: left allmulticast mode [ 487.665347][T11187] bridge0: left allmulticast mode [ 487.802830][T10133] usb 6-1: USB disconnect, device number 57 [ 487.956091][ T43] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 488.074880][T11201] netlink: 1048 bytes leftover after parsing attributes in process `syz.3.1323'. [ 488.129015][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.167289][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.202535][ T43] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 488.255681][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.282323][ T43] usb 3-1: config 0 descriptor?? [ 488.291810][T11210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1326'. [ 488.385732][T11212] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 488.507660][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 488.513828][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 488.564999][ T43] usb 3-1: USB disconnect, device number 50 [ 488.946682][T10133] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 489.050598][ T43] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 489.229239][T10133] usb 2-1: Using ep0 maxpacket: 16 [ 489.260694][T10133] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 489.276085][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 489.307455][T10133] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.337157][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.373007][T10133] usb 2-1: config 0 has no interface number 0 [ 489.379632][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.422878][T10133] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.456328][ T43] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 489.465438][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.576017][T10133] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 489.585305][T10133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.622917][ T43] usb 3-1: config 0 descriptor?? [ 489.642113][T10133] usb 2-1: config 0 descriptor?? [ 489.652744][ T43] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 489.685817][T10133] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 489.714171][ T43] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 489.871561][ T958] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 489.948848][T11191] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 489.961334][T10133] usb 3-1: USB disconnect, device number 51 [ 489.973722][T10133] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 490.222282][ T958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.250618][ T958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.273042][ T958] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 490.289814][ T958] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 490.299047][ T958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.327066][ T958] usb 4-1: config 0 descriptor?? [ 490.875642][ T958] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 491.059418][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 491.110242][T11241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1338'. [ 491.148993][ T958] usb 4-1: USB disconnect, device number 78 [ 491.264637][T11256] fido_id[11256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 491.895007][T10133] usb 2-1: USB disconnect, device number 49 [ 493.543641][T11291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.163215][T11305] netlink: 'syz.3.1354': attribute type 12 has an invalid length. [ 495.206878][T11305] netlink: 'syz.3.1354': attribute type 29 has an invalid length. [ 495.276140][T11305] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1354'. [ 495.359229][T11305] netlink: 'syz.3.1354': attribute type 2 has an invalid length. [ 495.413536][T11305] netlink: 'syz.3.1354': attribute type 3 has an invalid length. [ 495.896051][T10133] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 496.066751][T10133] usb 4-1: Using ep0 maxpacket: 16 [ 496.151311][T10133] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 496.186024][T10133] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.212547][T10133] usb 4-1: config 0 has no interface number 0 [ 496.252127][T10133] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 496.289543][T10133] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 496.303049][T10133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.353368][T10133] usb 4-1: config 0 descriptor?? [ 496.378427][T10133] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 496.455362][T11328] netlink: 372 bytes leftover after parsing attributes in process `syz.5.1361'. [ 496.607931][T11323] : renamed from bridge_slave_0 [ 496.941804][T11337] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 497.314647][T11348] pim6reg: entered allmulticast mode [ 497.550240][T11352] libceph: resolve '0.' (ret=-3): failed [ 498.079616][ T30] audit: type=1326 audit(1757330206.311:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 498.201061][ T30] audit: type=1326 audit(1757330206.311:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 498.223541][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.270551][ T30] audit: type=1326 audit(1757330206.361:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 498.342345][ T30] audit: type=1326 audit(1757330206.361:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 498.369683][ T30] audit: type=1326 audit(1757330206.361:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 498.394934][ T30] audit: type=1326 audit(1757330206.381:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 498.420908][ T30] audit: type=1326 audit(1757330206.381:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 498.458471][ T30] audit: type=1326 audit(1757330206.381:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 498.487646][ T30] audit: type=1326 audit(1757330206.381:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 498.551665][ T30] audit: type=1326 audit(1757330206.381:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 498.574128][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.576047][T10133] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 498.736448][ T958] usb 4-1: USB disconnect, device number 79 [ 498.901448][T10133] usb 6-1: Using ep0 maxpacket: 8 [ 499.021815][T10133] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 499.021849][T10133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.021870][T10133] usb 6-1: Product: syz [ 499.021885][T10133] usb 6-1: Manufacturer: syz [ 499.021901][T10133] usb 6-1: SerialNumber: syz [ 499.327162][T10133] usb 6-1: config 0 descriptor?? [ 499.421678][T10133] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 499.421716][T10133] dvb-usb: bulk message failed: -22 (2/0) [ 499.427065][T10133] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 499.431018][T10133] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 499.431073][T10133] usb 6-1: media controller created [ 499.461232][T10133] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 500.175328][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1375'. [ 500.569927][T10151] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 500.843869][T10151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 500.855173][T10151] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 500.894092][T10151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.245467][T10151] usb 5-1: config 0 descriptor?? [ 501.271574][T11369] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 501.486148][ T43] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 501.501562][T10133] cxusb: set interface failed [ 501.517407][T10133] dvb-usb: bulk message failed: -22 (1/0) [ 501.701669][T10151] elan 0003:04F3:0755.0030: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 501.727241][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 501.781308][ T43] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 501.803302][T10133] DVB: Unable to find symbol mt352_attach() [ 501.811836][ T43] usb 3-1: config 0 has no interface number 0 [ 501.842541][T10133] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 501.852777][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.859586][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.881520][ T43] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 501.892670][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.904938][T10004] usb 5-1: USB disconnect, device number 64 [ 501.916151][ T43] usb 3-1: Product: syz [ 501.952978][ T43] usb 3-1: Manufacturer: syz [ 501.966747][T11392] libceph: resolve '0.' (ret=-3): failed [ 501.975014][ T43] usb 3-1: SerialNumber: syz [ 502.012512][ T43] usb 3-1: config 0 descriptor?? [ 502.032441][ T43] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 502.044160][ T43] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 502.402754][T10133] rc_core: IR keymap rc-dvico-portable not found [ 502.417560][T10133] Registered IR keymap rc-empty [ 502.423400][T10133] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 502.437397][T11382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.447074][T11382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.474813][ T43] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 502.485742][ T43] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 502.514650][T10133] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input33 [ 502.538560][T11389] fido_id[11389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 502.555495][ T43] usb 3-1: USB disconnect, device number 52 [ 502.587227][T10133] dvb-usb: schedule remote query interval to 100 msecs. [ 502.598196][T10133] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 502.685401][T10133] usb 6-1: USB disconnect, device number 58 [ 502.883933][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 503.406548][T11404] netlink: 'syz.1.1383': attribute type 12 has an invalid length. [ 503.414565][T11404] netlink: 'syz.1.1383': attribute type 29 has an invalid length. [ 503.432937][T11404] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1383'. [ 503.486126][T11404] netlink: 'syz.1.1383': attribute type 2 has an invalid length. [ 503.514358][T10133] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 503.561707][T11404] netlink: 'syz.1.1383': attribute type 3 has an invalid length. [ 503.575559][T11406] loop4: detected capacity change from 0 to 7 [ 503.627569][T11406] Dev loop4: unable to read RDB block 7 [ 503.643805][T11406] loop4: AHDI p1 p2 [ 503.653957][T11406] loop4: partition table partially beyond EOD, truncated [ 503.673351][T11406] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 503.696219][ T43] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 503.773735][ T5236] Dev loop4: unable to read RDB block 7 [ 503.780292][ T5236] loop4: AHDI p1 p2 [ 503.784261][ T5236] loop4: partition table partially beyond EOD, truncated [ 503.800857][ T5236] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 503.857176][T10133] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 503.864854][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 503.884459][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 503.906401][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.936056][ T43] usb 3-1: config 0 has no interface number 0 [ 503.942237][ T43] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 503.996689][ T43] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 504.005819][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.054551][ T43] usb 3-1: config 0 descriptor?? [ 504.059900][T10133] usb 6-1: Using ep0 maxpacket: 8 [ 504.070337][ T43] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 504.081365][T10133] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 504.091962][T10133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.110757][T10133] usb 6-1: Product: syz [ 504.115101][T10133] usb 6-1: Manufacturer: syz [ 504.132538][T10133] usb 6-1: SerialNumber: syz [ 504.191671][T11423] binder: BINDER_SET_CONTEXT_MGR already set [ 504.194452][T10133] usb 6-1: config 0 descriptor?? [ 504.214668][T11423] binder: 11422:11423 ioctl 4018620d 200000000040 returned -16 [ 504.392608][T10133] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 504.410730][T10133] dvb-usb: bulk message failed: -22 (2/0) [ 504.436777][T10133] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 504.447124][T10133] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 504.456071][T10133] usb 6-1: media controller created [ 504.509548][ T5884] udevd[5884]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 504.660171][T10133] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.102899][ T5884] udevd[5884]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 505.729072][T11434] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1393'. [ 505.757925][T11434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.744376][T10151] usb 3-1: USB disconnect, device number 53 [ 507.286195][T10133] cxusb: set interface failed [ 507.290912][T10133] dvb-usb: bulk message failed: -22 (1/0) [ 507.473416][T10133] DVB: Unable to find symbol mt352_attach() [ 507.518407][T10133] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 507.702939][T11461] lo: entered allmulticast mode [ 507.870632][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1402'. [ 507.954964][T11460] lo: left allmulticast mode [ 507.967274][T10133] rc_core: IR keymap rc-dvico-portable not found [ 508.034216][T10133] Registered IR keymap rc-empty [ 508.069405][T10133] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 508.128318][T10133] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input34 [ 508.201319][T10133] dvb-usb: schedule remote query interval to 100 msecs. [ 508.293021][T10133] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 508.397426][T10004] dvb-usb: bulk message failed: -22 (1/0) [ 508.419407][T10133] usb 6-1: USB disconnect, device number 59 [ 508.516040][ T43] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 508.628096][T10133] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 508.667007][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 508.725593][ T43] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 508.800186][ T43] usb 2-1: config 1 interface 0 altsetting 121 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 508.889568][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 508.902521][ T43] usb 2-1: Dual-Role OTG device on HNP port [ 508.912085][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.949931][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.980065][ T43] usb 2-1: Product: syz [ 508.984291][ T43] usb 2-1: Manufacturer: syz [ 508.991354][ T43] usb 2-1: SerialNumber: syz [ 509.078622][T11486] binder: 11485:11486 unknown command 0 [ 509.107265][T11486] binder: 11485:11486 ioctl c0306201 200000000080 returned -22 [ 509.276493][T11490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.285506][T11490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.028505][T11504] tipc: Enabled bearer , priority 0 [ 510.047643][T11504] syzkaller0: entered promiscuous mode [ 510.060470][T11504] syzkaller0: entered allmulticast mode [ 510.099539][T11508] netlink: 372 bytes leftover after parsing attributes in process `syz.3.1417'. [ 510.130614][T11503] tipc: Resetting bearer [ 510.241018][T11503] tipc: Disabling bearer [ 510.440991][T11518] No buffer was provided with the request [ 510.448120][T11518] trusted_key: encrypted_key: insufficient parameters specified [ 510.457974][T10133] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 510.562984][T11519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.628859][T10133] usb 4-1: Using ep0 maxpacket: 8 [ 510.653341][T10133] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 510.664216][T10133] usb 4-1: config 16 has an invalid descriptor of length 82, skipping remainder of the config [ 510.693109][T10133] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.716182][T10133] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 510.725333][T10133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.934650][T10133] usbtmc 4-1:16.0: bulk endpoints not found [ 511.393717][ T43] cdc_ether 2-1:1.0: skipping garbage [ 511.408341][ T43] cdc_ether 2-1:1.0: skipping garbage [ 511.446161][ T43] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 511.491802][ T43] usb 2-1: USB disconnect, device number 50 [ 512.393953][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 512.393972][ T30] audit: type=1326 audit(1757330220.651:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 512.423890][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.525565][ T30] audit: type=1326 audit(1757330220.661:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 512.592317][ T30] audit: type=1326 audit(1757330220.711:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 512.683329][ T30] audit: type=1326 audit(1757330220.711:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 512.792990][ T30] audit: type=1326 audit(1757330220.711:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 512.900695][ T30] audit: type=1326 audit(1757330220.711:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 512.983060][ T30] audit: type=1326 audit(1757330220.721:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 513.006625][ T30] audit: type=1326 audit(1757330220.721:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 513.036075][ T30] audit: type=1326 audit(1757330220.721:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 513.058704][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.065263][ T30] audit: type=1326 audit(1757330220.721:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8b1b8ebe9 code=0x7ffc0000 [ 513.116668][T11564] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1433'. [ 513.134098][T11564] loop7: detected capacity change from 0 to 7 [ 513.270561][ T43] usb 4-1: USB disconnect, device number 80 [ 513.433886][T11572] netlink: 'syz.5.1436': attribute type 1 has an invalid length. [ 514.083222][T11564] Dev loop7: unable to read RDB block 7 [ 514.209161][T11564] loop7: unable to read partition table [ 514.227078][T11564] loop7: partition table beyond EOD, truncated [ 514.233415][T11564] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 515.136091][T10151] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 515.307727][T10151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.326082][T10151] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 515.336421][T10151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.366568][T10151] usb 6-1: config 0 descriptor?? [ 515.581101][T10151] usbhid 6-1:0.0: can't add hid device: -71 [ 515.621405][T10151] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 515.711614][T10151] usb 6-1: USB disconnect, device number 60 [ 515.760418][T11590] FAULT_INJECTION: forcing a failure. [ 515.760418][T11590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.774916][T11590] CPU: 0 UID: 0 PID: 11590 Comm: syz.1.1441 Not tainted syzkaller #0 PREEMPT(full) [ 515.774942][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 515.774953][T11590] Call Trace: [ 515.774960][T11590] [ 515.774968][T11590] dump_stack_lvl+0x189/0x250 [ 515.774996][T11590] ? __pfx____ratelimit+0x10/0x10 [ 515.775016][T11590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.775038][T11590] ? __pfx__printk+0x10/0x10 [ 515.775063][T11590] ? __might_fault+0xb0/0x130 [ 515.775100][T11590] should_fail_ex+0x414/0x560 [ 515.775132][T11590] _copy_from_user+0x2d/0xb0 [ 515.775157][T11590] ___sys_sendmsg+0x158/0x2a0 [ 515.775183][T11590] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.775245][T11590] ? __fget_files+0x2a/0x420 [ 515.775260][T11590] ? __fget_files+0x3a0/0x420 [ 515.775288][T11590] __x64_sys_sendmsg+0x19b/0x260 [ 515.775313][T11590] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.775347][T11590] ? __pfx_ksys_write+0x10/0x10 [ 515.775367][T11590] ? rcu_is_watching+0x15/0xb0 [ 515.775390][T11590] ? do_syscall_64+0xbe/0x3b0 [ 515.775413][T11590] do_syscall_64+0xfa/0x3b0 [ 515.775431][T11590] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.775448][T11590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.775466][T11590] ? clear_bhb_loop+0x60/0xb0 [ 515.775488][T11590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.775506][T11590] RIP: 0033:0x7fccd278ebe9 [ 515.775523][T11590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.775538][T11590] RSP: 002b:00007fccd3653038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.775559][T11590] RAX: ffffffffffffffda RBX: 00007fccd29c5fa0 RCX: 00007fccd278ebe9 [ 515.775572][T11590] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 515.775583][T11590] RBP: 00007fccd3653090 R08: 0000000000000000 R09: 0000000000000000 [ 515.775593][T11590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.775603][T11590] R13: 00007fccd29c6038 R14: 00007fccd29c5fa0 R15: 00007fccd2aefa28 [ 515.775631][T11590] [ 515.982151][ C0] vkms_vblank_simulate: vblank timer overrun [ 516.068160][T11594] netlink: 372 bytes leftover after parsing attributes in process `syz.3.1443'. [ 516.355722][T11602] No buffer was provided with the request [ 516.386235][T10151] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 516.426073][T11603] trusted_key: encrypted_key: insufficient parameters specified [ 516.491518][T11605] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1446'. [ 516.537168][T11603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.845536][T10151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.856234][T10133] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 517.056876][T10151] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 517.066147][T10151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.092795][T10151] usb 6-1: config 0 descriptor?? [ 517.336425][ T958] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 517.486237][ T958] usb 5-1: Using ep0 maxpacket: 8 [ 517.497903][ T958] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 517.544873][ T958] usb 5-1: config 0 has no interface number 0 [ 517.556202][T10151] usbhid 6-1:0.0: can't add hid device: -71 [ 517.562333][T10151] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 517.596453][ T958] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 517.611115][T10151] usb 6-1: USB disconnect, device number 61 [ 517.623370][ T958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.658242][ T958] usb 5-1: Product: syz [ 517.663108][ T958] usb 5-1: Manufacturer: syz [ 517.679890][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1453'. [ 517.693258][ T958] usb 5-1: SerialNumber: syz [ 517.727950][ T958] usb 5-1: config 0 descriptor?? [ 517.778139][ T958] as10x_usb: device has been detected [ 517.806649][ T958] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 517.826437][ T59] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 517.907366][T11626] ptrace attach of "./syz-executor exec"[5886] was attempted by "./syz-executor exec"[11626] [ 517.947575][ T958] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 517.976094][ T958] as10x_usb: error during firmware upload part1 [ 517.987332][ T958] Registered device PCTV Systems picoStick (74e) [ 517.996862][T10133] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 517.999421][ T958] usb 5-1: USB disconnect, device number 65 [ 518.158971][ T958] Unregistered device PCTV Systems picoStick (74e) [ 518.174011][ T958] as10x_usb: device has been disconnected [ 518.336092][ T43] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 518.496126][ T43] usb 2-1: device descriptor read/64, error -71 [ 518.576354][T10151] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 518.722868][T11635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1459'. [ 518.767550][T10151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.776075][ T43] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 518.875859][T10151] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 518.888388][ T59] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 518.904109][T10151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.926043][ T43] usb 2-1: device descriptor read/64, error -71 [ 518.934887][T10151] usb 6-1: config 0 descriptor?? [ 518.940758][ T59] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 518.995809][T11643] netlink: 'syz.4.1461': attribute type 3 has an invalid length. [ 519.010858][T11643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.037016][ T43] usb usb2-port1: attempt power cycle [ 519.175815][T10151] usbhid 6-1:0.0: can't add hid device: -71 [ 519.184911][T10151] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 519.203030][T10151] usb 6-1: USB disconnect, device number 62 [ 519.406388][ T43] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 519.529736][ T43] usb 2-1: device descriptor read/8, error -71 [ 519.696257][T10151] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 519.746630][T11645] vivid-007: ================= START STATUS ================= [ 519.757502][T11645] vivid-007: Enable Output Cropping: true [ 519.790800][ T43] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 519.940947][T10133] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 519.964069][T11645] vivid-007: Enable Output Composing: true [ 519.976878][ T43] usb 2-1: device descriptor read/8, error -71 [ 520.005708][T11645] vivid-007: Enable Output Scaler: true [ 520.029394][T10151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.086482][ T43] usb usb2-port1: unable to enumerate USB device [ 520.097009][T10151] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 520.167425][T11645] vivid-007: Tx RGB Quantization Range: Automatic [ 520.175532][T10151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.190761][T11645] vivid-007: Transmit Mode: HDMI [ 520.260613][T11645] vivid-007: Hotplug Present: 0x00000000 [ 520.272794][T10151] usb 6-1: config 0 descriptor?? [ 520.304926][T11645] vivid-007: RxSense Present: 0x00000000 [ 520.328102][T11645] vivid-007: EDID Present: 0x00000000 [ 520.336445][T11645] vivid-007: ================== END STATUS ================== [ 520.754281][T10151] usbhid 6-1:0.0: can't add hid device: -71 [ 520.766073][T10151] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 520.817191][T10151] usb 6-1: USB disconnect, device number 63 [ 521.266087][T11658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.615858][T11675] bond1: entered allmulticast mode [ 521.621732][T11675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.824274][T11683] No buffer was provided with the request [ 521.832783][T11683] trusted_key: encrypted_key: insufficient parameters specified [ 521.907097][T11685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.266750][T10151] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 522.439877][T10151] usb 5-1: Using ep0 maxpacket: 16 [ 522.452725][T10151] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 522.646872][T10151] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.686088][T10151] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.700669][T10151] usb 5-1: config 0 interface 0 has no altsetting 0 [ 522.716199][T10151] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 522.727930][T10151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.751542][T10151] usb 5-1: config 0 descriptor?? [ 522.797570][T11693] lo: entered allmulticast mode [ 522.846667][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'. [ 522.930583][T11691] lo: left allmulticast mode [ 523.186595][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 523.236171][T11688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.247960][T11688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.285307][T10151] pantherlord 0003:0810:0001.0031: item fetching failed at offset 0/2 [ 523.338740][T10151] pantherlord 0003:0810:0001.0031: parse failed [ 523.398936][T10151] pantherlord 0003:0810:0001.0031: probe with driver pantherlord failed with error -22 [ 523.467305][T10151] usb 5-1: USB disconnect, device number 66 [ 523.578412][T11710] No buffer was provided with the request [ 523.594644][T11710] trusted_key: encrypted_key: insufficient parameters specified [ 523.716202][T11713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 524.469113][T10133] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 524.586087][ T43] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 524.813539][T10133] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.824109][T10133] usb 5-1: config 0 has no interfaces? [ 524.835062][T10133] usb 5-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 524.858922][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.898006][ T43] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 524.907893][T10133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.148066][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.238462][T10133] usb 5-1: config 0 descriptor?? [ 525.372691][ T43] usb 4-1: config 0 descriptor?? [ 525.516480][T11712] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1477'. [ 525.701125][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 525.710159][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 525.723335][ T43] usb 4-1: USB disconnect, device number 81 [ 525.746025][T10151] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 525.898478][T10151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 525.930887][T10151] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 525.960982][T10151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.206120][ T43] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 526.248023][T10151] usb 6-1: config 0 descriptor?? [ 526.372744][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.384515][ T43] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 526.399325][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.430409][ T43] usb 4-1: config 0 descriptor?? [ 526.456194][T10133] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 526.691830][T10133] usb 3-1: Using ep0 maxpacket: 8 [ 526.723454][T10133] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 526.763988][T10133] usb 3-1: config 0 has no interface number 0 [ 526.768148][ T958] hid-generic 0000:0840:2000.0032: unknown main item tag 0x0 [ 526.773064][T10133] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 526.793941][T10133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.806963][T10133] usb 3-1: Product: syz [ 526.819939][T10133] usb 3-1: Manufacturer: syz [ 526.824739][T10133] usb 3-1: SerialNumber: syz [ 526.882020][ T958] hid-generic 0000:0840:2000.0032: hidraw0: HID v8.80 Device [syz1] on syz0 [ 526.882415][T10133] usb 3-1: config 0 descriptor?? [ 527.041526][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 527.049088][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 527.135359][ T43] usb 4-1: USB disconnect, device number 82 [ 527.145213][T10133] as10x_usb: device has been detected [ 527.176824][T10133] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 527.239676][T10133] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 527.269543][T10133] as10x_usb: error during firmware upload part1 [ 527.346703][T10133] Registered device PCTV Systems picoStick (74e) [ 527.438801][T10133] usb 3-1: USB disconnect, device number 54 [ 527.612871][T10004] usb 5-1: USB disconnect, device number 67 [ 527.672249][T10133] Unregistered device PCTV Systems picoStick (74e) [ 527.687903][T10133] as10x_usb: device has been disconnected [ 527.812909][T11739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1485'. [ 528.052345][T11743] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1487'. [ 528.067596][T10151] usbhid 6-1:0.0: can't add hid device: -71 [ 528.089936][T10151] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 528.102095][T11743] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1487'. [ 528.163007][T11743] netlink: 'syz.2.1487': attribute type 5 has an invalid length. [ 528.164349][T10151] usb 6-1: USB disconnect, device number 64 [ 528.394184][T11743] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1487'. [ 528.655569][T10133] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 528.697874][T10133] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 528.765053][T11758] IPv6: NLM_F_CREATE should be specified when creating new route [ 530.453785][T10151] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 530.626619][T11787] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1498'. [ 530.630484][T10151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.686128][T10151] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 530.726018][T10151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.776722][T10151] usb 6-1: config 0 descriptor?? [ 531.025482][T10151] usbhid 6-1:0.0: can't add hid device: -71 [ 531.041634][T10151] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 531.170131][T10151] usb 6-1: USB disconnect, device number 65 [ 531.600584][T10151] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 531.906200][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 531.946372][T10151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.946426][T10151] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 531.946449][T10151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.980968][T10151] usb 6-1: config 0 descriptor?? [ 532.393414][T10151] usbhid 6-1:0.0: can't add hid device: -71 [ 532.416111][T10151] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 532.472356][T10151] usb 6-1: USB disconnect, device number 66 [ 532.856336][ T958] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 533.036487][ T958] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 533.045050][ T958] usb 3-1: config 0 has no interface number 0 [ 533.051597][ T958] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 533.080702][ T958] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 533.146076][ T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 533.155303][ T958] usb 3-1: config 0 interface 255 has no altsetting 0 [ 533.174488][ T958] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 533.185626][ T958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.300450][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1507'. [ 533.371280][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 533.371293][ T30] audit: type=1326 audit(1757330241.561:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 533.402648][ T30] audit: type=1326 audit(1757330241.561:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 533.426010][T10151] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 533.441021][ T958] usb 3-1: config 0 descriptor?? [ 533.456035][ T10] usb 4-1: device descriptor read/64, error -71 [ 533.476740][ T958] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 533.515664][ T30] audit: type=1326 audit(1757330241.561:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 533.538202][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.669644][T10151] usb 2-1: Using ep0 maxpacket: 8 [ 533.806314][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 533.851540][T10151] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.871072][ T958] usb 3-1: USB disconnect, device number 55 [ 533.885659][T10151] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.905051][ T30] audit: type=1326 audit(1757330241.561:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 533.935498][ T30] audit: type=1326 audit(1757330241.561:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 533.957790][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.980344][T10151] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 533.989296][T11828] program syz.4.1508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.006736][T10151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.036003][T10151] usb 2-1: Product: syz [ 534.040424][T10151] usb 2-1: Manufacturer: syz [ 534.050597][T10151] usb 2-1: SerialNumber: syz [ 534.055372][ T30] audit: type=1326 audit(1757330241.571:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 534.078706][ T10] usb 4-1: device descriptor read/64, error -71 [ 534.104074][T10151] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 534.118939][T10151] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 534.135506][T10151] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 534.170422][ T30] audit: type=1326 audit(1757330241.571:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f006318d550 code=0x7ffc0000 [ 534.193446][ T10] usb usb4-port1: attempt power cycle [ 534.204183][ T30] audit: type=1326 audit(1757330241.571:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 534.250517][ T30] audit: type=1326 audit(1757330241.571:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 534.273253][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.374122][T11832] No buffer was provided with the request [ 534.380903][T11832] trusted_key: encrypted_key: insufficient parameters specified [ 534.535102][ T30] audit: type=1326 audit(1757330241.571:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 534.558005][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.573588][T11833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 534.596838][ T10] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 534.680459][ T10] usb 4-1: device descriptor read/8, error -71 [ 534.956149][ T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 535.022787][ T10] usb 4-1: device descriptor read/8, error -71 [ 535.176882][ T10] usb usb4-port1: unable to enumerate USB device [ 537.776099][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 537.823711][T10133] usb 2-1: USB disconnect, device number 55 [ 537.953521][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 537.998653][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 538.071081][ T10] usb 5-1: no configurations [ 538.087946][ T10] usb 5-1: can't read configurations, error -22 [ 538.236063][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 538.255983][T10004] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 538.569215][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 538.647036][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 538.647057][ T30] audit: type=1326 audit(1757330246.901:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11878 comm="syz.2.1524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b2a18ebe9 code=0x0 [ 538.676222][T10004] usb 4-1: Using ep0 maxpacket: 8 [ 538.694597][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 538.726543][ T10] usb 5-1: no configurations [ 538.729569][T10004] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 538.746736][T10004] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 538.760985][ T10] usb 5-1: can't read configurations, error -22 [ 538.789030][ T10] usb usb5-port1: attempt power cycle [ 538.823460][T10004] usb 4-1: config 1 has no interface number 1 [ 538.854916][T10004] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 538.867297][T10004] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 538.877250][T10004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.886209][T10004] usb 4-1: Product: syz [ 538.903455][T10004] usb 4-1: Manufacturer: syz [ 538.931134][T10004] usb 4-1: SerialNumber: syz [ 539.566010][ T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 539.607304][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 539.708445][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 539.738704][ T10] usb 5-1: no configurations [ 539.762376][T10004] usb 4-1: 0:8 : does not exist [ 539.773393][ T10] usb 5-1: can't read configurations, error -22 [ 539.817934][T10004] usb 4-1: USB disconnect, device number 87 [ 539.956271][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.072649][ T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 540.122914][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 540.148535][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 540.184672][ T10] usb 5-1: no configurations [ 540.210152][ T10] usb 5-1: can't read configurations, error -22 [ 540.240626][ T10] usb usb5-port1: unable to enumerate USB device [ 540.577145][T11904] No buffer was provided with the request [ 540.586126][T11904] trusted_key: encrypted_key: insufficient parameters specified [ 540.762047][T11909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1531'. [ 540.860735][T11911] syzkaller1: entered promiscuous mode [ 540.891158][T11911] syzkaller1: entered allmulticast mode [ 540.926045][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 540.958904][T11913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.206952][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 541.270468][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 541.291860][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 541.305596][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 541.323361][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 541.336765][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.006894][ T10] usb 3-1: config 0 descriptor?? [ 542.455044][ T10] plantronics 0003:047F:FFFF.0034: ignoring exceeding usage max [ 542.555585][ T10] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 542.586043][ T958] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 542.732663][ T30] audit: type=1326 audit(1757330250.991:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 542.743790][ T10] usb 3-1: USB disconnect, device number 56 [ 542.802182][ T958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.840009][ T30] audit: type=1326 audit(1757330250.991:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 542.862919][ T958] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 542.955254][ T30] audit: type=1326 audit(1757330251.041:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 542.986969][ T958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.992165][ T30] audit: type=1326 audit(1757330251.041:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 543.003051][ T958] usb 5-1: config 0 descriptor?? [ 543.100993][ T30] audit: type=1326 audit(1757330251.041:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 543.133823][ T30] audit: type=1326 audit(1757330251.041:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 543.166859][ T30] audit: type=1326 audit(1757330251.041:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 543.197017][T11933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.202452][T11944] vim2m vim2m.0: vidioc_s_fmt queue busy [ 543.206194][T11933] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.213569][ T30] audit: type=1326 audit(1757330251.041:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 543.296334][ T30] audit: type=1326 audit(1757330251.041:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f006318ebe9 code=0x7ffc0000 [ 543.307812][T11930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.330943][T10151] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 543.380538][T11933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.388423][T11930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.546456][T10151] usb 6-1: Using ep0 maxpacket: 16 [ 543.553756][T10151] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 543.562972][T10151] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.575649][T10151] usb 6-1: config 0 has no interface number 0 [ 543.626613][T10151] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 543.673434][T10151] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 543.674507][T11930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.693703][T10151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.726947][T10151] usb 6-1: config 0 descriptor?? [ 543.765063][T10151] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 543.776315][T11930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.927518][T11955] netlink: 372 bytes leftover after parsing attributes in process `syz.1.1542'. [ 544.050436][ T958] usbhid 5-1:0.0: can't add hid device: -71 [ 544.067950][ T958] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 544.134875][ T958] usb 5-1: USB disconnect, device number 72 [ 545.183962][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1551'. [ 545.917622][T10151] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 546.027901][ T958] usb 6-1: USB disconnect, device number 67 [ 546.160699][T10151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 546.183251][T11998] netlink: 1048 bytes leftover after parsing attributes in process `syz.5.1553'. [ 546.193863][T10151] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 546.213729][T10151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.246154][T10151] usb 3-1: config 0 descriptor?? [ 546.261549][T11992] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 546.823129][ T958] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 546.871950][T10151] elan 0003:04F3:0755.0035: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 547.038414][ T958] usb 6-1: Using ep0 maxpacket: 16 [ 547.049854][ T958] usb 6-1: unable to get BOS descriptor or descriptor too short [ 547.061809][ T958] usb 6-1: config 7 has an invalid interface number: 79 but max is 0 [ 547.071691][ T958] usb 6-1: config 7 has no interface number 0 [ 547.080795][ T958] usb 6-1: config 7 interface 79 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 547.092687][ T958] usb 6-1: config 7 interface 79 altsetting 6 endpoint 0x7 has an invalid bInterval 64, changing to 10 [ 547.109132][ T958] usb 6-1: config 7 interface 79 has no altsetting 0 [ 547.125817][ T958] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f4.98 [ 547.168897][ T958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.180360][ T958] usb 6-1: Product: syz [ 547.184781][ T958] usb 6-1: Manufacturer: syz [ 547.193669][ T958] usb 6-1: SerialNumber: syz [ 547.766242][ T958] usb 6-1: USB disconnect, device number 68 [ 548.075188][T10151] usb 3-1: reset full-speed USB device number 57 using dummy_hcd [ 548.946200][T10133] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 549.028178][T12029] fuse: Unknown parameter '' [ 549.216305][T10133] usb 2-1: Using ep0 maxpacket: 8 [ 549.491418][T10133] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 549.502924][T10133] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 549.543958][T10133] usb 2-1: config 1 has no interface number 1 [ 549.574711][T10133] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 549.623942][T10133] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 549.725479][T10133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.751440][T10133] usb 2-1: Product: syz [ 549.755816][T10133] usb 2-1: Manufacturer: syz [ 549.761801][T10133] usb 2-1: SerialNumber: syz [ 549.796713][T12036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1561'. [ 550.078400][T10133] usb 2-1: 0:8 : does not exist [ 550.191933][T10133] usb 2-1: USB disconnect, device number 56 [ 550.252652][ T6018] usb 3-1: USB disconnect, device number 57 [ 550.318864][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.533963][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1567'. [ 550.906306][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1570'. [ 551.375981][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 551.376004][ T30] audit: type=1326 audit(1757330259.161:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.3.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddda58ebe9 code=0x7ffc0000 [ 551.544746][ T30] audit: type=1326 audit(1757330259.161:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.3.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddda58ebe9 code=0x7ffc0000 [ 551.644975][T12067] fuse: Bad value for 'fd' [ 551.649663][T10133] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 551.655348][ T30] audit: type=1326 audit(1757330259.161:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.3.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddda58ebe9 code=0x7ffc0000 [ 551.680162][ C0] vkms_vblank_simulate: vblank timer overrun [ 551.696018][ T30] audit: type=1326 audit(1757330259.161:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.3.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddda58ebe9 code=0x7ffc0000 [ 551.786146][ T30] audit: type=1326 audit(1757330259.161:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.3.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fddda58ebe9 code=0x7ffc0000 [ 551.921514][ T30] audit: type=1326 audit(1757330259.171:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.3.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddda58ebe9 code=0x7ffc0000 [ 551.943996][ C0] vkms_vblank_simulate: vblank timer overrun [ 551.984405][T10133] usb 2-1: Using ep0 maxpacket: 8 [ 552.082681][T10133] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 552.094961][T10133] usb 2-1: config 0 interface 0 has no altsetting 0 [ 552.104610][T10133] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 552.113883][T10133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.122601][T10133] usb 2-1: Product: syz [ 552.128235][T10133] usb 2-1: Manufacturer: syz [ 552.136281][T10133] usb 2-1: SerialNumber: syz [ 552.161338][T10133] usb 2-1: config 0 descriptor?? [ 552.173064][ T30] audit: type=1326 audit(1757330259.181:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.3.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddda58ebe9 code=0x7ffc0000 [ 552.174206][T10133] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 552.195672][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.346194][T10004] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 552.375697][T10133] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 552.403905][ T30] audit: type=1326 audit(1757330259.181:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.3.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fddda58ebe9 code=0x7ffc0000 [ 552.426842][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.454744][T10133] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 552.498305][T10133] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 552.526351][ T30] audit: type=1326 audit(1757330259.181:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.3.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddda58ebe9 code=0x7ffc0000 [ 552.536755][T10004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 552.635988][T10004] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 552.682151][T10004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.716789][T10004] usb 6-1: config 0 descriptor?? [ 552.733269][T12073] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 552.776001][ T30] audit: type=1326 audit(1757330259.181:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.3.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fddda58ebe9 code=0x7ffc0000 [ 552.805389][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1573'. [ 553.113973][T12078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.144640][T12078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.181771][T10004] elan 0003:04F3:0755.0036: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 553.291865][T12086] No buffer was provided with the request [ 553.316166][T12086] trusted_key: encrypted_key: insufficient parameters specified [ 553.514365][T12086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 554.167226][T12094] binder: 12090:12094 ioctl c0306201 200000000100 returned -11 [ 554.176654][T12094] fuse: Bad value for 'fd' [ 554.429284][T10004] usb 6-1: reset full-speed USB device number 69 using dummy_hcd [ 555.731088][ T6018] usb 2-1: USB disconnect, device number 57 [ 556.087858][T10133] usb 6-1: USB disconnect, device number 69 [ 556.252477][T12115] fuse: Bad value for 'group_id' [ 556.315681][T12115] fuse: Bad value for 'group_id' [ 556.468182][T12117] nft_compat: unsupported protocol 1 [ 557.275010][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 557.275031][ T30] audit: type=1326 audit(1757330265.531:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12136 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd278ebe9 code=0x7ffc0000 [ 557.393796][ T30] audit: type=1326 audit(1757330265.531:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12136 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd278ebe9 code=0x7ffc0000 [ 557.514066][ T30] audit: type=1326 audit(1757330265.541:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12136 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fccd278ebe9 code=0x7ffc0000 [ 557.653311][ T30] audit: type=1326 audit(1757330265.541:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12136 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd278ebe9 code=0x7ffc0000 [ 557.791085][ T30] audit: type=1326 audit(1757330265.541:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12136 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccd278ebe9 code=0x7ffc0000 [ 557.885511][ T30] audit: type=1326 audit(1757330265.541:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12136 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd278ebe9 code=0x7ffc0000 [ 558.056686][ T30] audit: type=1326 audit(1757330265.541:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12136 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fccd278ebe9 code=0x7ffc0000 [ 558.179975][T12148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1590'. [ 558.190846][ T30] audit: type=1326 audit(1757330265.541:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12136 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd278ebe9 code=0x7ffc0000 [ 558.331110][ T30] audit: type=1326 audit(1757330265.541:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12136 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd278ebe9 code=0x7ffc0000 [ 558.418952][ T30] audit: type=1326 audit(1757330265.541:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12136 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd278ebe9 code=0x7ffc0000 [ 558.446091][T10004] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 558.484276][T12151] vlan2: entered promiscuous mode [ 558.652276][T10004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 558.663912][T10004] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 558.724292][T10004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.756273][T10004] usb 2-1: config 0 descriptor?? [ 558.763133][T12149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 559.541336][T10004] elan 0003:04F3:0755.0037: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 560.556890][T12176] No buffer was provided with the request [ 560.576320][T12176] trusted_key: encrypted_key: insufficient parameters specified [ 560.759971][T12178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.776148][T10133] usb 2-1: reset full-speed USB device number 58 using dummy_hcd [ 561.569405][T12185] lo: entered allmulticast mode [ 561.585350][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1599'. [ 561.598805][T12184] lo: left allmulticast mode [ 562.914299][T12212] netlink: 'syz.3.1609': attribute type 28 has an invalid length. [ 562.950037][T10002] usb 2-1: USB disconnect, device number 58 [ 563.276480][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.282947][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.176197][T10002] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 564.203222][T12231] raw_sendmsg: syz.4.1617 forgot to set AF_INET. Fix it! [ 564.290509][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 564.290528][ T30] audit: type=1804 audit(1757330272.551:629): pid=12233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1618" name="/newroot/254/file0" dev="tmpfs" ino=1334 res=1 errno=0 [ 564.422032][T10002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 564.487676][T10002] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 564.510983][T10002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.538443][T10002] usb 2-1: config 0 descriptor?? [ 564.607170][T12225] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 565.054342][T10002] elan 0003:04F3:0755.0038: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 565.325217][T12245] No buffer was provided with the request [ 565.332178][T12245] trusted_key: encrypted_key: insufficient parameters specified [ 565.402889][T12245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 565.545027][T12247] netlink: 'syz.5.1622': attribute type 12 has an invalid length. [ 565.593459][T12247] netlink: 'syz.5.1622': attribute type 29 has an invalid length. [ 565.624452][T12247] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1622'. [ 565.673432][T12247] netlink: 'syz.5.1622': attribute type 2 has an invalid length. [ 565.724031][T12247] netlink: 'syz.5.1622': attribute type 3 has an invalid length. [ 566.286142][T10002] usb 2-1: reset full-speed USB device number 59 using dummy_hcd [ 567.149846][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1629'. [ 567.284992][T12268] vlan2: entered promiscuous mode [ 567.291584][T12268] bridge0: entered promiscuous mode [ 567.336442][T10004] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 567.498547][T10004] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 567.536253][T10004] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 567.550070][T10004] usb 3-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 567.560267][T10004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.572245][T10004] usb 3-1: config 0 descriptor?? [ 567.687841][T10133] usb 2-1: USB disconnect, device number 59 [ 567.951840][T10151] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 568.039877][T10004] thrustmaster 0003:044F:B320.0039: hidraw0: USB HID v0.00 Device [HID 044f:b320] on usb-dummy_hcd.2-1/input0 [ 568.126322][T10004] thrustmaster 0003:044F:B320.0039: no inputs found [ 568.193958][T10151] usb 5-1: unable to get BOS descriptor or descriptor too short [ 568.218619][T10151] usb 5-1: config 13 has an invalid interface number: 50 but max is 3 [ 568.227087][T10151] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 568.238059][T10151] usb 5-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 568.265258][T10151] usb 5-1: config 13 has no interface number 0 [ 568.282099][T10151] usb 5-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 568.296091][T10151] usb 5-1: config 13 interface 50 has no altsetting 0 [ 568.339219][T10151] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 568.350038][T10151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.358376][T10151] usb 5-1: Product: syz [ 568.362934][T10151] usb 5-1: Manufacturer: syz [ 568.375634][T10151] usb 5-1: SerialNumber: syz [ 568.505625][T12285] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1636'. [ 568.554743][T10004] usb 3-1: USB disconnect, device number 58 [ 568.833060][T12286] binder: 12283:12286 ioctl c0306201 200000000080 returned -14 [ 568.877530][T12289] fido_id[12289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 568.908105][T12285] : renamed from sit0 (while UP) [ 569.022181][T12285] : entered promiscuous mode [ 569.107792][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'. [ 569.805608][T12311] binder: 12309:12311 ioctl c0306201 200000000540 returned -14 [ 569.884849][T12314] No buffer was provided with the request [ 569.896043][T12314] trusted_key: encrypted_key: insufficient parameters specified [ 570.098223][T12315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 570.276062][ T6018] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 570.781474][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 570.800855][ T6018] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 570.826287][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.028684][T12320] netlink: 'syz.3.1645': attribute type 10 has an invalid length. [ 571.064927][ T6018] usb 6-1: config 0 descriptor?? [ 571.077378][T12305] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 571.519502][ T6018] elan 0003:04F3:0755.003A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 571.857377][ T30] audit: type=1326 audit(1757330280.121:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 571.915113][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'. [ 572.132595][ T30] audit: type=1326 audit(1757330280.151:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 572.225819][ T30] audit: type=1326 audit(1757330280.171:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 572.299204][ T30] audit: type=1326 audit(1757330280.171:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 572.428397][ T30] audit: type=1326 audit(1757330280.171:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 572.495500][ T30] audit: type=1326 audit(1757330280.351:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 572.615186][ T30] audit: type=1326 audit(1757330280.351:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 572.766001][ T6018] usb 6-1: reset full-speed USB device number 70 using dummy_hcd [ 572.775093][ T30] audit: type=1326 audit(1757330280.581:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 572.885169][ T30] audit: type=1326 audit(1757330280.581:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 573.016164][ T30] audit: type=1326 audit(1757330280.581:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5b2a18ebe9 code=0x7ffc0000 [ 573.211323][T10151] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 573.248044][ T49] usb 5-1: Failed to submit usb control message: -71 [ 573.258122][ T49] usb 5-1: unable to send the bmi data to the device: -71 [ 573.265437][ T49] usb 5-1: unable to get target info from device [ 573.288032][T10151] usb 5-1: USB disconnect, device number 73 [ 573.306979][ T49] usb 5-1: could not get target info (-71) [ 573.312893][ T49] usb 5-1: could not probe fw (-71) [ 573.679068][T12342] binder: BINDER_SET_CONTEXT_MGR already set [ 573.690521][T12342] binder: 12341:12342 ioctl 4018620d 200000000040 returned -16 [ 575.275008][ T958] usb 6-1: USB disconnect, device number 70 [ 575.429026][ T958] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 576.429780][ T958] usb 6-1: Using ep0 maxpacket: 8 [ 576.453935][ T958] usb 6-1: config 0 has no interfaces? [ 576.465548][ T958] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 576.516006][ T958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.541570][ T958] usb 6-1: Product: syz [ 576.592441][ T958] usb 6-1: Manufacturer: syz [ 576.625984][ T958] usb 6-1: SerialNumber: syz [ 576.686168][ T958] usb 6-1: config 0 descriptor?? [ 576.919192][T12358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.928393][T12358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.981997][ T958] usb 6-1: USB disconnect, device number 71 [ 577.486649][T10004] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 577.606149][T10133] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 577.655281][T10004] usb 2-1: Using ep0 maxpacket: 8 [ 577.672894][T10004] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 577.722860][T12418] netlink: 'syz.4.1668': attribute type 10 has an invalid length. [ 577.723025][T10004] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 577.760781][T10004] usb 2-1: config 1 has no interface number 1 [ 577.776001][T10004] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 577.815014][T10133] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 577.844962][T10004] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.865295][T10133] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 577.883018][T10004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.915294][T10004] usb 2-1: Product: syz [ 577.920031][T10133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 577.936055][T10004] usb 2-1: Manufacturer: syz [ 577.942110][T10004] usb 2-1: SerialNumber: syz [ 577.949580][T10133] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 577.960378][T10133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.042103][T10133] usb 4-1: Product: syz [ 578.059335][T10133] usb 4-1: Manufacturer: syz [ 578.074572][T10133] usb 4-1: SerialNumber: syz [ 578.107422][T10133] usb 4-1: config 0 descriptor?? [ 578.132376][T12399] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 578.152264][T10133] usb 4-1: ucan: probing device on interface #0 [ 578.187801][T10133] usb 4-1: ucan: invalid endpoint configuration [ 578.206871][T12429] netlink: 'syz.5.1677': attribute type 28 has an invalid length. [ 578.298779][T12432] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1675'. [ 578.688687][T10133] usb 4-1: ucan: probe failed; try to update the device firmware [ 578.706172][T10004] usb 2-1: 0:8 : does not exist [ 579.090258][T10004] usb 2-1: USB disconnect, device number 60 [ 579.214774][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.669236][ T958] usb 4-1: USB disconnect, device number 88 [ 580.116106][T10004] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 580.300544][T10004] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 580.340095][T10004] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 580.391776][T10004] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 580.431035][T10004] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 580.477222][T10004] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 580.518325][T10004] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 580.538028][T10004] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 580.569612][T10004] usb 2-1: Product: syz [ 580.573847][T10004] usb 2-1: Manufacturer: syz [ 580.631063][T10004] cdc_wdm 2-1:1.0: skipping garbage [ 580.641034][T10004] cdc_wdm 2-1:1.0: skipping garbage [ 580.701856][T10004] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 580.734539][T10004] cdc_wdm 2-1:1.0: Unknown control protocol [ 580.930000][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 581.008452][T12467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1686'. [ 581.024809][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'. [ 582.202216][T12480] binder: 12479:12480 unknown command 0 [ 582.214550][T12480] binder: 12479:12480 ioctl c0306201 200000000080 returned -22 [ 582.515988][T12485] lo: entered allmulticast mode [ 582.558258][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1691'. [ 582.613931][T12484] lo: left allmulticast mode [ 582.920795][ T958] usb 2-1: USB disconnect, device number 61 [ 583.390803][T10004] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 583.420999][T12517] loop2: detected capacity change from 0 to 14 [ 583.480320][T12517] loop2: [ 583.705109][T10004] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.727381][T10004] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 583.893098][T10004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 583.954995][T10004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 584.017699][T10004] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 584.098151][T10004] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 584.148067][T10004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 584.190416][T10004] usb 2-1: Product: syz [ 584.194780][T10004] usb 2-1: Manufacturer: syz [ 584.237785][T10004] usb 2-1: SerialNumber: syz [ 584.282554][T10004] usb 2-1: config 0 descriptor?? [ 584.416041][T10133] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 584.516010][T10004] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 584.582979][T10004] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 584.706106][T10004] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 584.733581][T10133] usb 6-1: Using ep0 maxpacket: 8 [ 584.802693][T10004] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 584.837070][T10133] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 584.855835][T10004] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 584.885155][T10133] usb 6-1: config 0 interface 0 has no altsetting 0 [ 584.938152][T10133] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 584.957131][T10133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.066099][T10004] usb 2-1: USB disconnect, device number 62 [ 585.116887][T10133] usb 6-1: Product: syz [ 585.174889][T10133] usb 6-1: Manufacturer: syz [ 585.297931][T10133] usb 6-1: SerialNumber: syz [ 585.565533][T10133] usb 6-1: config 0 descriptor?? [ 585.693939][T10133] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 585.848733][T10133] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 585.876172][T10133] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 585.994516][T10004] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 586.025993][T10002] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 586.052302][T10133] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 586.401542][T12562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.431737][T10004] usb 3-1: Using ep0 maxpacket: 8 [ 586.436983][T10002] usb 2-1: Using ep0 maxpacket: 16 [ 586.528091][T10004] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 586.539719][T10002] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.564278][T10004] usb 3-1: config 0 interface 0 has no altsetting 0 [ 586.575974][T10002] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 586.585187][T10002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.602875][T10002] usb 2-1: config 0 descriptor?? [ 586.632728][T12562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.640742][T10004] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 586.775307][T10004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.827037][T12567] No buffer was provided with the request [ 586.834655][T12567] trusted_key: encrypted_key: insufficient parameters specified [ 586.950134][T12568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.023821][T10004] usb 3-1: Product: syz [ 587.030103][T10004] usb 3-1: Manufacturer: syz [ 587.034788][T10004] usb 3-1: SerialNumber: syz [ 587.043803][T10004] usb 3-1: config 0 descriptor?? [ 587.059620][T10004] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 587.233715][T10002] usbhid 2-1:0.0: can't add hid device: -71 [ 587.248235][T10002] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 587.472266][T10004] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 587.494936][T10004] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 587.519584][T10004] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 587.529871][T10002] usb 2-1: USB disconnect, device number 63 [ 588.056935][T12571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.066446][T12571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.373253][ T958] usb 6-1: USB disconnect, device number 72 [ 589.986569][T12601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1724'. [ 590.278637][ T958] usb 3-1: USB disconnect, device number 59 [ 590.890453][ T958] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 591.081764][ T958] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.092794][ T958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 591.673946][ T958] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 591.892599][ T958] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 591.902985][ T958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.917819][ T958] usb 6-1: Product: syz [ 591.941636][ T958] usb 6-1: Manufacturer: syz [ 592.019816][ T958] usb 6-1: SerialNumber: syz [ 592.060777][ T958] usb 6-1: config 0 descriptor?? [ 592.083287][ T958] usb 6-1: ucan: probing device on interface #0 [ 592.093894][ T958] usb 6-1: ucan: invalid EP count (1) [ 592.099644][ T958] usb 6-1: ucan: probe failed; try to update the device firmware [ 592.422643][T12603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.435117][T12603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.739353][T12627] No buffer was provided with the request [ 592.752642][T12627] trusted_key: encrypted_key: insufficient parameters specified [ 594.172255][ T958] usb 6-1: USB disconnect, device number 73 [ 594.416093][T10002] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 594.672423][T10002] usb 2-1: Using ep0 maxpacket: 16 [ 594.696097][T10002] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.719038][T10002] usb 2-1: config 0 interface 0 has no altsetting 0 [ 594.725819][T10002] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 594.736025][T10002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.752616][T10002] usb 2-1: config 0 descriptor?? [ 595.236591][T10002] nzxt-smart2 0003:1E71:2009.003B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 595.676361][T10002] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 595.836086][T10002] usb 5-1: Using ep0 maxpacket: 8 [ 595.845099][T10002] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 595.872941][T12671] netlink: 14212 bytes leftover after parsing attributes in process `syz.5.1741'. [ 595.883174][T10002] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 595.915089][T10002] usb 5-1: config 1 has no interface number 1 [ 595.924533][T10002] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 595.970872][T10002] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 596.113794][T10002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.172995][T10002] usb 5-1: Product: syz [ 596.187968][T10002] usb 5-1: Manufacturer: syz [ 596.192684][T10002] usb 5-1: SerialNumber: syz [ 596.467590][T10002] usb 5-1: 0:8 : does not exist [ 596.522804][T10002] usb 5-1: USB disconnect, device number 74 [ 596.537929][T10004] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 596.644720][T12679] binder: 12678:12679 unknown command 0 [ 596.653775][T12679] binder: 12678:12679 ioctl c0306201 200000000080 returned -22 [ 596.747798][T10004] usb 6-1: config 0 has no interfaces? [ 596.759817][T10004] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 596.792129][T10004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.803633][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.825248][T10004] usb 6-1: Product: syz [ 596.830360][T10004] usb 6-1: Manufacturer: syz [ 596.835587][T10004] usb 6-1: SerialNumber: syz [ 596.851615][T10004] usb 6-1: config 0 descriptor?? [ 597.065298][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1743'. [ 597.097862][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1746'. [ 597.141046][ T958] usb 2-1: USB disconnect, device number 64 [ 597.581110][T12701] No buffer was provided with the request [ 597.587807][T12701] trusted_key: encrypted_key: insufficient parameters specified [ 597.964292][T10151] usb 6-1: USB disconnect, device number 74 [ 598.188714][ T958] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 598.396016][ T958] usb 5-1: Using ep0 maxpacket: 32 [ 598.403344][ T958] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 598.412449][ T958] usb 5-1: config 0 has no interface number 0 [ 598.786309][ T958] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 599.100184][ T958] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 599.109619][ T958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.145354][ T958] usb 5-1: Product: syz [ 599.159863][ T958] usb 5-1: Manufacturer: syz [ 599.169970][ T958] usb 5-1: SerialNumber: syz [ 599.212684][ T958] usb 5-1: config 0 descriptor?? [ 599.259045][ T958] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 599.305920][ T958] em28xx 5-1:0.132: Video interface 132 found: [ 599.648514][ T958] em28xx 5-1:0.132: chip ID is em2710/2820 [ 600.080623][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1755'. [ 600.321945][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 600.776791][ T958] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 600.785830][ T958] em28xx 5-1:0.132: board has no eeprom [ 600.887637][ T958] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 600.915970][ T958] em28xx 5-1:0.132: analog set to bulk mode. [ 600.922064][T10151] em28xx 5-1:0.132: Registering V4L2 extension [ 601.270560][T12720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.293596][T12720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.315076][ T10] usb 5-1: USB disconnect, device number 75 [ 601.322334][ T10] em28xx 5-1:0.132: Disconnecting em28xx [ 601.456035][ T6018] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 601.464013][ T958] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 601.633103][T12762] vlan2: entered promiscuous mode [ 601.694124][T10151] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 601.702926][T10151] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 601.713214][T10151] em28xx 5-1:0.132: No AC97 audio processor [ 601.736075][ T958] usb 2-1: Using ep0 maxpacket: 8 [ 601.745013][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 601.765330][ T6018] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 601.778059][ T958] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 601.789577][ T958] usb 2-1: config 0 interface 0 has no altsetting 0 [ 601.810073][T12766] No buffer was provided with the request [ 601.831808][ T958] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 601.848066][T10151] usb 5-1: Decoder not found [ 601.859476][T12766] trusted_key: encrypted_key: insufficient parameters specified [ 601.867789][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.877680][ T958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.885794][ T958] usb 2-1: Product: syz [ 601.932303][T10151] em28xx 5-1:0.132: failed to create media graph [ 601.985654][ T6018] usb 6-1: config 0 descriptor?? [ 601.992251][T10151] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 602.008694][ T958] usb 2-1: Manufacturer: syz [ 602.021769][T12757] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 602.062841][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 602.062857][ T30] audit: type=1326 audit(1757330310.311:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddda58ebe9 code=0x7ffc0000 [ 602.105450][ T958] usb 2-1: SerialNumber: syz [ 602.140940][T10151] em28xx 5-1:0.132: Remote control support is not available for this card. [ 602.184882][ T10] em28xx 5-1:0.132: Closing input extension [ 602.207022][ T958] usb 2-1: config 0 descriptor?? [ 602.219419][ T10] ================================================================== [ 602.227539][ T10] BUG: KASAN: slab-use-after-free in media_device_unregister+0x141/0x400 [ 602.236079][ T10] Read of size 8 at addr ffff888059aa4210 by task kworker/0:1/10 [ 602.244087][ T10] [ 602.246431][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 602.246456][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 602.246471][ T10] Workqueue: usb_hub_wq hub_event [ 602.246511][ T10] Call Trace: [ 602.246521][ T10] [ 602.246530][ T10] dump_stack_lvl+0x189/0x250 [ 602.246554][ T10] ? rcu_is_watching+0x15/0xb0 [ 602.246573][ T10] ? __kasan_check_byte+0x12/0x40 [ 602.246601][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.246623][ T10] ? rcu_is_watching+0x15/0xb0 [ 602.246642][ T10] ? lock_release+0x4b/0x3e0 [ 602.246673][ T10] ? __virt_addr_valid+0x1c8/0x5c0 [ 602.246698][ T10] ? __virt_addr_valid+0x4a5/0x5c0 [ 602.246723][ T10] print_report+0xca/0x240 [ 602.246742][ T10] ? media_device_unregister+0x141/0x400 [ 602.246763][ T10] kasan_report+0x118/0x150 [ 602.246791][ T10] ? media_device_unregister+0x141/0x400 [ 602.246815][ T10] media_device_unregister+0x141/0x400 [ 602.246840][ T10] em28xx_release_resources+0xac/0x240 [ 602.246866][ T10] em28xx_usb_disconnect+0x19f/0x2f0 [ 602.246893][ T10] usb_unbind_interface+0x26e/0x910 [ 602.246926][ T10] ? __pfx_usb_unbind_interface+0x10/0x10 [ 602.246955][ T10] device_release_driver_internal+0x4d9/0x800 [ 602.246984][ T10] bus_remove_device+0x34d/0x410 [ 602.247006][ T10] device_del+0x511/0x8e0 [ 602.247030][ T10] ? kfree+0x18e/0x440 [ 602.247055][ T10] ? __pfx_device_del+0x10/0x10 [ 602.247077][ T10] ? kobject_put+0x446/0x480 [ 602.247103][ T10] usb_disable_device+0x3e9/0x8a0 [ 602.247133][ T10] usb_disconnect+0x330/0x950 [ 602.247160][ T10] hub_event+0x1cf5/0x4a20 [ 602.247197][ T10] ? do_raw_spin_lock+0x121/0x290 [ 602.247222][ T10] ? register_lock_class+0x51/0x320 [ 602.247253][ T10] ? __pfx_hub_event+0x10/0x10 [ 602.247280][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 602.247310][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 602.247338][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 602.247357][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 602.247376][ T10] process_scheduled_works+0xae1/0x17b0 [ 602.247408][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 602.247435][ T10] worker_thread+0x8a0/0xda0 [ 602.247466][ T10] kthread+0x70e/0x8a0 [ 602.247492][ T10] ? __pfx_worker_thread+0x10/0x10 [ 602.247512][ T10] ? __pfx_kthread+0x10/0x10 [ 602.247537][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 602.247562][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 602.247580][ T10] ? __pfx_kthread+0x10/0x10 [ 602.247603][ T10] ret_from_fork+0x3fc/0x770 [ 602.247624][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 602.247645][ T10] ? __switch_to_asm+0x39/0x70 [ 602.247670][ T10] ? __switch_to_asm+0x33/0x70 [ 602.247694][ T10] ? __pfx_kthread+0x10/0x10 [ 602.247718][ T10] ret_from_fork_asm+0x1a/0x30 [ 602.247750][ T10] [ 602.247758][ T10] [ 602.531183][ T10] Allocated by task 10151: [ 602.535611][ T10] kasan_save_track+0x3e/0x80 [ 602.540355][ T10] __kasan_kmalloc+0x93/0xb0 [ 602.545006][ T10] __kmalloc_cache_noprof+0x230/0x3d0 [ 602.550401][ T10] em28xx_v4l2_init+0x10b/0x2e70 [ 602.555341][ T10] em28xx_init_extension+0x120/0x1c0 [ 602.560621][ T10] process_scheduled_works+0xae1/0x17b0 [ 602.566333][ T10] worker_thread+0x8a0/0xda0 [ 602.570916][ T10] kthread+0x70e/0x8a0 [ 602.574986][ T10] ret_from_fork+0x3fc/0x770 [ 602.579578][ T10] ret_from_fork_asm+0x1a/0x30 [ 602.584347][ T10] [ 602.586672][ T10] Freed by task 10151: [ 602.590846][ T10] kasan_save_track+0x3e/0x80 [ 602.595527][ T10] kasan_save_free_info+0x46/0x50 [ 602.600549][ T10] __kasan_slab_free+0x5b/0x80 [ 602.605323][ T10] kfree+0x18e/0x440 [ 602.609224][ T10] em28xx_v4l2_init+0x1683/0x2e70 [ 602.614254][ T10] em28xx_init_extension+0x120/0x1c0 [ 602.619632][ T10] process_scheduled_works+0xae1/0x17b0 [ 602.625224][ T10] worker_thread+0x8a0/0xda0 [ 602.629868][ T10] kthread+0x70e/0x8a0 [ 602.633952][ T10] ret_from_fork+0x3fc/0x770 [ 602.638640][ T10] ret_from_fork_asm+0x1a/0x30 [ 602.643427][ T10] [ 602.645846][ T10] The buggy address belongs to the object at ffff888059aa4000 [ 602.645846][ T10] which belongs to the cache kmalloc-8k of size 8192 [ 602.659908][ T10] The buggy address is located 528 bytes inside of [ 602.659908][ T10] freed 8192-byte region [ffff888059aa4000, ffff888059aa6000) [ 602.673887][ T10] [ 602.676239][ T10] The buggy address belongs to the physical page: [ 602.682741][ T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59aa0 [ 602.691703][ T10] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 602.700466][ T10] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 602.708023][ T10] page_type: f5(slab) [ 602.712037][ T10] raw: 00fff00000000040 ffff88801a442280 ffffea0001176200 dead000000000002 [ 602.720627][ T10] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 602.729215][ T10] head: 00fff00000000040 ffff88801a442280 ffffea0001176200 dead000000000002 [ 602.737877][ T10] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 602.746535][ T10] head: 00fff00000000003 ffffea000166a801 00000000ffffffff 00000000ffffffff [ 602.755258][ T10] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 602.763982][ T10] page dumped because: kasan: bad access detected [ 602.770506][ T10] page_owner tracks the page as allocated [ 602.776222][ T10] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11822, tgid 11818 (syz.5.1507), ts 533314343224, free_ts 533141810897 [ 602.797776][ T10] post_alloc_hook+0x240/0x2a0 [ 602.802548][ T10] get_page_from_freelist+0x21e4/0x22c0 [ 602.808176][ T10] __alloc_frozen_pages_noprof+0x181/0x370 [ 602.813973][ T10] alloc_pages_mpol+0x232/0x4a0 [ 602.818824][ T10] allocate_slab+0x8a/0x370 [ 602.823595][ T10] ___slab_alloc+0xbeb/0x1420 [ 602.828269][ T10] __kmalloc_cache_noprof+0x296/0x3d0 [ 602.833815][ T10] audit_log_d_path+0xb5/0x190 [ 602.838588][ T10] audit_log_d_path_exe+0x42/0x70 [ 602.843601][ T10] audit_log_task+0x2b3/0x3c0 [ 602.848297][ T10] audit_seccomp+0x86/0x190 [ 602.853323][ T10] __seccomp_filter+0x9aa/0x1a40 [ 602.858251][ T10] syscall_trace_enter+0xaa/0x160 [ 602.863284][ T10] do_syscall_64+0xd3/0x3b0 [ 602.867805][ T10] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.873735][ T10] page last free pid 5236 tgid 5236 stack trace: [ 602.880046][ T10] __free_frozen_pages+0xbc4/0xd30 [ 602.885160][ T10] __put_partials+0x156/0x1a0 [ 602.889927][ T10] put_cpu_partial+0x17c/0x250 [ 602.894768][ T10] __slab_free+0x2d5/0x3c0 [ 602.899234][ T10] qlist_free_all+0x97/0x140 [ 602.903823][ T10] kasan_quarantine_reduce+0x148/0x160 [ 602.909633][ T10] __kasan_slab_alloc+0x22/0x80 [ 602.914489][ T10] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 602.919941][ T10] flock_lock_inode+0x21f/0x1420 [ 602.924872][ T10] locks_lock_inode_wait+0x107/0x410 [ 602.930160][ T10] __se_sys_flock+0x467/0x5b0 [ 602.934859][ T10] do_syscall_64+0xfa/0x3b0 [ 602.939369][ T10] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.945270][ T10] [ 602.947610][ T10] Memory state around the buggy address: [ 602.953270][ T10] ffff888059aa4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 602.961520][ T10] ffff888059aa4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 602.969884][ T10] >ffff888059aa4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 602.978000][ T10] ^ [ 602.982630][ T10] ffff888059aa4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 602.990690][ T10] ffff888059aa4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 602.999064][ T10] ================================================================== [ 603.018580][T12772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 603.123212][ T30] audit: type=1326 audit(1757330310.311:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddda58ebe9 code=0x7ffc0000 [ 603.343576][ T958] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 603.377524][ T958] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 603.385294][ T958] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 603.395392][ T958] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 603.416642][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 603.423903][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 603.433215][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 603.443387][ T10] Workqueue: usb_hub_wq hub_event [ 603.448455][ T10] Call Trace: [ 603.451783][ T10] [ 603.455029][ T10] dump_stack_lvl+0x99/0x250 [ 603.459765][ T10] ? __asan_memcpy+0x40/0x70 [ 603.465013][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.470332][ T10] ? __pfx__printk+0x10/0x10 [ 603.474977][ T10] vpanic+0x281/0x750 [ 603.479155][ T10] ? preempt_schedule+0xae/0xc0 [ 603.484126][ T10] ? __pfx_vpanic+0x10/0x10 [ 603.488834][ T10] ? preempt_schedule_common+0x83/0xd0 [ 603.494424][ T10] ? preempt_schedule+0xae/0xc0 [ 603.499846][ T10] ? __pfx_preempt_schedule+0x10/0x10 [ 603.505280][ T10] panic+0xb9/0xc0 [ 603.509036][ T10] ? __pfx_panic+0x10/0x10 [ 603.513644][ T10] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 603.519796][ T10] ? media_device_unregister+0x141/0x400 [ 603.525495][ T10] check_panic_on_warn+0x89/0xb0 [ 603.530499][ T10] ? media_device_unregister+0x141/0x400 [ 603.536171][ T10] end_report+0x78/0x160 [ 603.540496][ T10] kasan_report+0x129/0x150 [ 603.545041][ T10] ? media_device_unregister+0x141/0x400 [ 603.550701][ T10] media_device_unregister+0x141/0x400 [ 603.556197][ T10] em28xx_release_resources+0xac/0x240 [ 603.561685][ T10] em28xx_usb_disconnect+0x19f/0x2f0 [ 603.566999][ T10] usb_unbind_interface+0x26e/0x910 [ 603.572248][ T10] ? __pfx_usb_unbind_interface+0x10/0x10 [ 603.578016][ T10] device_release_driver_internal+0x4d9/0x800 [ 603.584391][ T10] bus_remove_device+0x34d/0x410 [ 603.589363][ T10] device_del+0x511/0x8e0 [ 603.593713][ T10] ? kfree+0x18e/0x440 [ 603.597889][ T10] ? __pfx_device_del+0x10/0x10 [ 603.603482][ T10] ? kobject_put+0x446/0x480 [ 603.608429][ T10] usb_disable_device+0x3e9/0x8a0 [ 603.613456][ T10] usb_disconnect+0x330/0x950 [ 603.618226][ T10] hub_event+0x1cf5/0x4a20 [ 603.622690][ T10] ? do_raw_spin_lock+0x121/0x290 [ 603.627806][ T10] ? register_lock_class+0x51/0x320 [ 603.633130][ T10] ? __pfx_hub_event+0x10/0x10 [ 603.637941][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 603.643706][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 603.649049][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 603.655079][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 603.661020][ T10] process_scheduled_works+0xae1/0x17b0 [ 603.666622][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 603.672735][ T10] worker_thread+0x8a0/0xda0 [ 603.677477][ T10] kthread+0x70e/0x8a0 [ 603.682183][ T10] ? __pfx_worker_thread+0x10/0x10 [ 603.687436][ T10] ? __pfx_kthread+0x10/0x10 [ 603.692044][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 603.697348][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 603.702550][ T10] ? __pfx_kthread+0x10/0x10 [ 603.707150][ T10] ret_from_fork+0x3fc/0x770 [ 603.711878][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 603.717003][ T10] ? __switch_to_asm+0x39/0x70 [ 603.721773][ T10] ? __switch_to_asm+0x33/0x70 [ 603.726732][ T10] ? __pfx_kthread+0x10/0x10 [ 603.731423][ T10] ret_from_fork_asm+0x1a/0x30 [ 603.736289][ T10] [ 603.739710][ T10] Kernel Offset: disabled [ 603.744127][ T10] Rebooting in 86400 seconds..