last executing test programs: 7.711984251s ago: executing program 4 (id=446): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0xba, 0xe, 0x55, 0x0, 0xff, 0x8, 0x2c, 0x3, 0x4, 0xa6, 0x5, 0x2, 0x80, 0x9, 0x5, 0x5d}}) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x80) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x142ba3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000280)={r3, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f9858c1a7bedabd69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30d50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc20d81a8ca55ba139c01802c4dae4162e43acff03ad02", [0x7fffffffffffffff, 0x7]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) write$P9_RAUTH(r3, &(0x7f00000003c0)={0x14, 0x67, 0x2, {0x4, 0x3, 0x4}}, 0x14) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00102e07000915810300020000000904010000020d00000904010102020d0000090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e61b3a40fd080200"], 0x0) 7.127182824s ago: executing program 1 (id=448): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000053030000060000008c080000", @ANYRES32=0x1, @ANYBLOB="030000000000000000009e000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000030000000e"], 0x50) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201305"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.886333965s ago: executing program 2 (id=456): openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000f9ffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 4.834187273s ago: executing program 2 (id=457): ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x405}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6d1}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000002c0)='n', 0x1}], 0x1}}], 0x2, 0x20004801) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x74e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0xfffffffc, 0x1, 0x2, 0x2, 0x11, 0xf7, 0xfd}, &(0x7f0000000080)=0x9c) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040461380a0d34850cbbefe5f2"], 0xd) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 4.732318071s ago: executing program 4 (id=458): socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80) r1 = syz_open_dev$usbmon(&(0x7f0000000f40), 0x9, 0x101800) close(r1) mq_timedsend(r0, 0x0, 0xff2c, 0x8, 0x0) futex(0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000040)={0x1c0000, 0x0, {[0x44c5925c, 0x7, 0x3, 0xb83, 0x9, 0x100000000, 0x3, 0x2]}}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x9) timer_create(0x4, &(0x7f00000002c0)={0x0, 0x1b, 0x4}, &(0x7f0000000300)=0x0) timer_delete(r6) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x1, 0x6a6}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000004c0)={r7, 0x3c, &(0x7f0000000480)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0x3}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}]}, &(0x7f0000000500)=0x10) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r8, 0x4606, &(0x7f0000000040)={0x356, 0xa0, 0x780, 0x600, 0x0, 0x4, 0x0, 0xfffffffe, {0x9, 0x7}, {0x27, 0x0, 0x1}, {0x401, 0x7}, {0x1, 0x4, 0x1}, 0x3, 0x0, 0xe512, 0x7fff, 0x1, 0x6e, 0x10, 0x2, 0x803, 0x80, 0x8fac, 0x8, 0x8, 0x100, 0x0, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0xf0, 0x17, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'netpci0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040012}, 0x20000080) 4.441744227s ago: executing program 3 (id=460): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x250, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'bridge0\x00', 'macvlan0\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_macvtap\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}, {0x4, 0x0, [0x0, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x2, 0x1}, {0x4, 0x4, 0x4}, 0x3, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_deladdrlabel={0x1c, 0x49, 0x4, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x0, r2, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x56592a445bc89e6d) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYRES32=r0], 0xa0}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 4.369707233s ago: executing program 3 (id=461): r0 = syz_usb_connect(0x4, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) 4.294629502s ago: executing program 4 (id=462): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e640000000034000280050001000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x4040) 4.291462558s ago: executing program 4 (id=463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xcd) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r7, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xc983, 0x2, 0x1ff, 0xf99e, 0x4cfc}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)={r8, 0x3}, &(0x7f0000000300)=0x8) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) 4.258592744s ago: executing program 2 (id=464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x60bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r7}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x312}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendto$inet6(r5, &(0x7f0000000180)='s', 0x1, 0x800, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) unshare(0x2c060000) rt_sigqueueinfo(0x0, 0x21, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r2, 0x0, 0x0, 'syz1\x00', 0x0}) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x36}, 0x0, [0x1688, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r9, 0x80796c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000001c0)="65652ef2d89f6e29b889058ed00fa5140f12c9202cb80d008ee8f1f30f11f666b80001c0fe0f23c00f21f86635000000000f23f80f1f5d00", 0x38}], 0x1, 0x0, &(0x7f0000000240)=[@flags={0x3, 0x200000}, @cr0={0x0, 0x40000002}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6f6163767461700000000900010073797a310000000064000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004800b00070066"], 0x330}}, 0x4008800) 3.987210513s ago: executing program 1 (id=465): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x537d6150, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 3.795902025s ago: executing program 1 (id=466): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) pread64(r0, &(0x7f0000001940)=""/4096, 0x1000, 0x2) 3.750846117s ago: executing program 3 (id=467): openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000faffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 3.538078s ago: executing program 3 (id=468): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f00000005c0)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}, 0x4) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c464a030403ff0700000000000002000300040000003e03000038000000d6000000977000007e03200007", @ANYRES32=r2, @ANYBLOB="5a206725c5d21d87266aea60aa854507d9da485921c9d2ce037bc8db05feeae1db2da225959c43392f775dcacd8b4a23090713e02c35ff01a3592cbb40ec7cca2904fa184c1ba89fe90282c20a4d7c64c5d2de0de3d547d8bc65ba3bb22b6a6d5b53b0754e5def3654bc1610b7bcd52631ba56245479a2421500", @ANYRESHEX, @ANYBLOB="2096b3010ca5f47feab0b62b27d2f4df4454b43e00191005b04120136883472bd2ee9f9c352c4b183c86625b700238aa6cda1acc42d7befabb10530abdea0a8de3c95cafb0bb2ef97bf66779741e07637478c4d171adc5e5e6b80d275a96f0120ab5e466d6883a81a79b5babe8213e07d471a2a5237a07219059df0f0a25cb927fbb8e4e314077ed278a3589d93310240fce00a55820742bf01ca95d7b2c199659f01fe54954fd7821ced97f803dc43189996ea3a402df364f8b150aa8e95302ec"], 0x38) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x35c3, 0x1000, 0x3}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}, 0x20) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) 2.956203162s ago: executing program 4 (id=469): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x4, 0x3, 0x8, 0xf, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_ident={0x2, 0xb, 0xf59, 0x0, 0x80000001}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, @in6={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd28, 0x3507}]}, 0x78}}, 0x2000000) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, 0x17, 0x15}}) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.937816984s ago: executing program 1 (id=470): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="2000000010"], 0x20}}, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000500)={0x66666666666666d, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x4}, {0x7, 0xb, 0x6, 0x7f, 0xd11, 0x4, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0x2}, {0x2, 0x40, 0x5, 0x5, 0x2, 0x4, 0x1}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x5, &(0x7f0000000200)={0x17, "14956544c8306b23cda7dd68fe132f1d0259da184039589d199f3db71c15606d95"}}) 2.664694842s ago: executing program 2 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x121) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x3, 0x9, 0xfffffffffffffffd, 0x6, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x401}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e0000003800028014000600200100000000000000000000000e000214000700fc02000000000000000000000000000004001200", @ANYRES32, @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 2.431263399s ago: executing program 2 (id=472): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="0ef21cdc45aa", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="84241d157b67", 0x6}], 0x1}}], 0x2, 0x4000) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04080b"], 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b04, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) (async) r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r5, 0x80079a0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb, 0x40010, r5, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x22bc2fc78e92c4cb) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0xffffffffffffffff, 0x1, 0x5002) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r6, 0x8931, &(0x7f0000000300)={'macvtap0\x00', @ifru_ivalue=0x1}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r7, 0x0, 0x800) (async) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd7, 0x1000, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) (async) modify_ldt$write2(0x11, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) lseek(r5, 0x0, 0x4) close(r0) 2.148675612s ago: executing program 0 (id=473): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 2.085851347s ago: executing program 0 (id=474): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) sendfile(r1, r2, &(0x7f0000000000), 0xd029) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) 1.984197217s ago: executing program 1 (id=475): syz_usb_connect(0x5, 0xb1c, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="32032b8943bf95e241ad216c94f90bb912df0f378772179ff881b64b7dd3255ff3ce514a4030b3215a2abcd79930216d95d3"]}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd054c433b0582784c7000fcdbdf25030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x4000080) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000810) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000300)={{0xffffffffffffffff, &(0x7f0000000180)=':!$}&/\x00', 0x800, &(0x7f00000001c0)={@_ha_fsid={[0x4]}, {0x8, 0xd, 0x48, 0x80000000}}, 0x2, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x1000}, {[0x1, 0xc, 0x3, 0xfffffe00]}, 0x2, 0x55, &(0x7f0000000280)=""/85}) accept$unix(r7, &(0x7f0000000040), &(0x7f0000000380)=0x6e) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x340) 1.864038886s ago: executing program 0 (id=476): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x55000000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 1.787263993s ago: executing program 0 (id=477): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a000d0b090000000000000083626765"], 0x18}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0xa00, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x20048895) 1.734058182s ago: executing program 0 (id=478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x4000) (async) r4 = signalfd(r1, &(0x7f0000000040)={[0x5]}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f00000000c0), 0x0}, 0x20) sendfile(r3, r3, 0x0, 0x200000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYRES8=r1], 0x104}}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r8) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) (async) set_mempolicy(0x0, &(0x7f0000000040)=0x7, 0x5) 1.595870645s ago: executing program 0 (id=479): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x20000080) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x24040084) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x8, 0x6, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0x100000001}}}, 0x90) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x3}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c", 0x7, 0xfffffffffffffffb) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.215381443s ago: executing program 1 (id=480): inotify_init() socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f00000001c0)={0x17, 0x0, 0x3, 0x1, 0xffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) unshare(0x600) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x83}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x400c891}, 0x24000000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettaction={0x40, 0x32, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040901}, 0x4048090) 1.173965114s ago: executing program 2 (id=481): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000008c0)={r3, &(0x7f0000000740)='I\x00', 0x200000, &(0x7f0000000800)={@align=0x1, {0x8, 0x2, 0x9, 0x4}}, 0x7, &(0x7f0000000840), &(0x7f0000000880)=0x80000001}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000900)) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f00000}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10001}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40000, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e27", 0x56, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) r7 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) lstat(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r7, r8, r9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r10, 0xc0945662, &(0x7f0000000100)={0x1000, 0x0, '\x00', {0x0, @bt={0x0, 0x5, 0x0, 0x0, 0x9, 0x9, 0xb, 0x7f, 0xbc, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x14, 0x1b, {0x0, 0x6}, 0x7, 0x40}}}) 537.615773ms ago: executing program 4 (id=482): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00036450000004030a50"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002500)={0x38, r2, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0xd, 0x0, 0x3, 0xfffffffd, 0x0, 0xfffffff9, 0x4d47}]}) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000000)='./file1\x00', 0x44000732) write$binfmt_elf64(r7, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x0, 0x38, 0x1, 0xfffe, 0x2}, [{0x3, 0x5, 0x4, 0x40000000200d, 0x1c8, 0x7f, 0x8, 0x2}]}, 0x78) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x81, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x15, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0003fd000000ec03"]}, 0x0) 215.999625ms ago: executing program 3 (id=483): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=484): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x10000000}}], 0x7ffffe2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): tpacket_rcv: packet too big, clamped from 3028 to 4294967272. macoff=96 [ 99.437579][ T47] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.448398][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.487388][ T6360] netlink: 'syz.3.131': attribute type 10 has an invalid length. [ 99.541974][ T6361] 8021q: VLANs not supported on caif0 [ 99.573280][ T6360] netlink: 40 bytes leftover after parsing attributes in process `syz.3.131'. [ 99.588286][ T6362] batadv0: entered promiscuous mode [ 99.620858][ T6362] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 99.640295][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.651442][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 99.656821][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.669991][ T47] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 99.680167][ T47] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 99.696133][ T6360] batman_adv: batadv0: Adding interface: virt_wifi0 [ 99.696182][ T5881] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 99.705483][ T47] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 99.723617][ T6360] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.749547][ T47] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 99.757739][ T6360] batman_adv: batadv0: Interface activated: virt_wifi0 [ 99.762999][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.780336][ T5881] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 99.781063][ T47] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 99.965386][ T47] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 99.974182][ T47] usb 5-1: Product: syz [ 99.978577][ T47] usb 5-1: Manufacturer: syz [ 99.983320][ T47] usb 5-1: SerialNumber: syz [ 100.037637][ T5881] usb 2-1: Manufacturer: syz [ 100.069411][ T5881] usb 2-1: config 0 descriptor?? [ 100.076497][ T47] usb 5-1: config 0 descriptor?? [ 100.085868][ T47] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 100.114417][ T47] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 100.391660][ T6367] loop5: detected capacity change from 0 to 7 [ 100.406441][ T5925] Dev loop5: unable to read RDB block 7 [ 100.412206][ T5925] loop5: AHDI p1 [ 100.415961][ T5925] loop5: partition table partially beyond EOD, truncated [ 100.454072][ T6367] Dev loop5: unable to read RDB block 7 [ 100.500133][ T6367] loop5: AHDI p1 [ 100.504853][ T6367] loop5: partition table partially beyond EOD, truncated [ 100.802149][ T9] usb 5-1: USB disconnect, device number 5 [ 100.826442][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 101.028781][ T10] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 101.037618][ T47] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 101.038742][ T5881] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0005/input/input9 [ 101.096174][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 101.125219][ T5881] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0005/input/input10 [ 101.142812][ T6377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.135'. [ 101.167168][ T5881] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0005/input/input11 [ 101.187807][ T10] usb 4-1: device descriptor read/64, error -71 [ 101.195840][ T5881] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0005/input/input12 [ 101.231639][ T5881] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 101.280802][ T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.316631][ T47] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 101.404104][ T47] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.447506][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 101.459490][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.531109][ T47] usb 3-1: Product: syz [ 101.558452][ T47] usb 3-1: Manufacturer: syz [ 101.594758][ T47] usb 3-1: SerialNumber: syz [ 101.657603][ T10] usb 4-1: device descriptor read/64, error -71 [ 101.660125][ T6386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.690680][ T796] usb 2-1: USB disconnect, device number 4 [ 101.784068][ T10] usb usb4-port1: attempt power cycle [ 101.879835][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 101.899583][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.137'. [ 101.922312][ T6374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.983740][ T6374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.990882][ T6388] team0: entered promiscuous mode [ 101.997095][ T6388] team_slave_0: entered promiscuous mode [ 102.003420][ T6388] team_slave_1: entered promiscuous mode [ 102.013417][ T6388] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.031400][ T6388] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 102.033501][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.051108][ T47] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 102.074599][ T47] usb 3-1: USB disconnect, device number 13 [ 102.090137][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.147826][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 102.182665][ T10] usb 4-1: device descriptor read/8, error -71 [ 102.231489][ T6394] Invalid logical block size (21061) [ 102.438742][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 102.487695][ T6405] netlink: 'syz.4.141': attribute type 29 has an invalid length. [ 102.489106][ T10] usb 4-1: device descriptor read/8, error -71 [ 102.506008][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.141'. [ 102.611977][ T6406] program syz.4.141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.633590][ T10] usb usb4-port1: unable to enumerate USB device [ 102.957554][ T796] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.997606][ T5895] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 103.017549][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.117607][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 103.124921][ T796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.137613][ T5881] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 103.146426][ T796] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 103.162018][ T796] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 103.174384][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.182695][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 103.190332][ T5895] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 103.192737][ T10] usb 5-1: config index 0 descriptor too short (expected 59188, got 18) [ 103.198962][ T5895] usb 1-1: config 1 has no interface number 0 [ 103.216790][ T796] usb 2-1: config 0 descriptor?? [ 103.218443][ T10] usb 5-1: config 51 has too many interfaces: 77, using maximum allowed: 32 [ 103.232844][ T5895] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 103.244056][ T10] usb 5-1: config 51 has an invalid descriptor of length 187, skipping remainder of the config [ 103.255115][ T10] usb 5-1: config 51 has 0 interfaces, different from the descriptor's value: 77 [ 103.267356][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 103.274624][ T5895] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 103.279429][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.295672][ T10] usb 5-1: Product: syz [ 103.297048][ T5895] usb 1-1: config 1 interface 105 has no altsetting 0 [ 103.300974][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 103.313115][ T10] usb 5-1: Manufacturer: syz [ 103.318172][ T10] usb 5-1: SerialNumber: syz [ 103.320299][ T5895] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 103.324326][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.337496][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 103.345059][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 103.357528][ T5895] usb 1-1: Product: syz [ 103.364304][ T5881] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 103.379035][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.387268][ T5895] usb 1-1: Manufacturer: syz [ 103.393274][ T5895] usb 1-1: SerialNumber: syz [ 103.395488][ T5881] usb 3-1: config 0 descriptor?? [ 103.419500][ T6419] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 103.421668][ T5881] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 103.427142][ T6419] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 103.476750][ T6416] input: syz0 as /devices/virtual/input/input13 [ 103.585962][ T796] usb 2-1: string descriptor 0 read error: -71 [ 103.608660][ T796] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 103.638169][ T796] usb 2-1: USB disconnect, device number 5 [ 103.721072][ T10] usb 5-1: USB disconnect, device number 6 [ 103.878095][ T5881] usb 3-1: USB disconnect, device number 14 [ 103.912408][ T6419] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 103.931140][ T6419] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 104.482399][ T796] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.632042][ T5895] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 104.650685][ T5895] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 104.733411][ T5895] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b4:17:dc:b1:bf:b1 [ 104.766745][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 104.780136][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.797338][ T5895] usb 1-1: USB disconnect, device number 10 [ 104.807261][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.830331][ T796] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 104.857522][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.867878][ T5895] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 104.920663][ T796] usb 2-1: config 0 descriptor?? [ 105.038167][ T5895] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 105.087753][ T5895] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 105.105097][ T5895] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 105.331903][ T6458] netlink: 76 bytes leftover after parsing attributes in process `syz.0.155'. [ 105.379123][ T5881] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 105.415656][ T796] ntrig 0003:1B96:0008.0006: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.1-1/input0 [ 105.501943][ T6468] trusted_key: encrypted_key: insufficient parameters specified [ 105.609554][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 105.647040][ T796] usb 2-1: USB disconnect, device number 6 [ 105.664497][ T5881] usb 3-1: config 0 has no interfaces? [ 105.689596][ T5881] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 105.724760][ T5881] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 105.770803][ T5881] usb 3-1: Manufacturer: syz [ 105.827105][ T5881] usb 3-1: config 0 descriptor?? [ 106.027530][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 106.182387][ T10] usb 1-1: device descriptor read/64, error -71 [ 106.251538][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 106.264638][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 106.398269][ T47] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.427778][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 106.558494][ T10] usb 1-1: device descriptor read/64, error -71 [ 106.569571][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 106.576651][ T47] usb 5-1: unable to get BOS descriptor or descriptor too short [ 106.585671][ T47] usb 5-1: config 9 has an invalid interface number: 160 but max is 0 [ 106.594503][ T47] usb 5-1: config 9 has no interface number 0 [ 106.601577][ T47] usb 5-1: config 9 interface 160 altsetting 6 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 106.613970][ T47] usb 5-1: config 9 interface 160 altsetting 6 endpoint 0x86 has an invalid bInterval 132, changing to 7 [ 106.625701][ T47] usb 5-1: config 9 interface 160 altsetting 6 bulk endpoint 0xC has invalid maxpacket 32 [ 106.636098][ T47] usb 5-1: config 9 interface 160 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 106.648367][ T47] usb 5-1: config 9 interface 160 has no altsetting 0 [ 106.656923][ T47] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=39.33 [ 106.667094][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.667989][ T10] usb usb1-port1: attempt power cycle [ 106.675416][ T47] usb 5-1: Product: syz [ 106.685249][ T47] usb 5-1: Manufacturer: syz [ 106.690181][ T47] usb 5-1: SerialNumber: syz [ 106.698899][ T6476] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 106.797623][ T5895] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 106.917408][ T47] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 106.927850][ T5895] usb 4-1: device descriptor read/64, error -71 [ 106.998541][ T47] usb 5-1: USB disconnect, device number 7 [ 107.049346][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 107.060241][ T6381] udevd[6381]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:9.160/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.097677][ T10] usb 1-1: device descriptor read/8, error -71 [ 107.177565][ T5895] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 107.317613][ T5895] usb 4-1: device descriptor read/64, error -71 [ 107.358261][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 107.389119][ T10] usb 1-1: device descriptor read/8, error -71 [ 107.427871][ T5895] usb usb4-port1: attempt power cycle [ 107.477929][ T6495] netlink: 76 bytes leftover after parsing attributes in process `syz.4.164'. [ 107.518017][ T10] usb usb1-port1: unable to enumerate USB device [ 107.653667][ T47] usb 3-1: USB disconnect, device number 15 [ 107.778718][ T5895] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 107.823882][ T5895] usb 4-1: device descriptor read/8, error -71 [ 108.023083][ T6502] loop5: detected capacity change from 0 to 7 [ 108.037777][ T6502] Dev loop5: unable to read RDB block 7 [ 108.054259][ T6502] loop5: unable to read partition table [ 108.060161][ T5929] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 108.078224][ T6502] loop5: partition table beyond EOD, truncated [ 108.088215][ T5895] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 108.097949][ T6502] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 108.128382][ T5895] usb 4-1: device descriptor read/8, error -71 [ 108.238016][ T5895] usb usb4-port1: unable to enumerate USB device [ 108.283273][ T5929] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.317591][ T5929] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 108.317624][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.317652][ T5929] usb 5-1: Product: syz [ 108.317667][ T5929] usb 5-1: Manufacturer: syz [ 108.317681][ T5929] usb 5-1: SerialNumber: syz [ 108.588351][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 108.611846][ T29] audit: type=1326 audit(1775829875.620:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752579c819 code=0x7ffc0000 [ 108.636054][ T29] audit: type=1326 audit(1775829875.620:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752579c819 code=0x7ffc0000 [ 108.660556][ T29] audit: type=1326 audit(1775829875.640:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752579c819 code=0x7ffc0000 [ 108.684057][ T29] audit: type=1326 audit(1775829875.640:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752579c819 code=0x7ffc0000 [ 108.713154][ T29] audit: type=1326 audit(1775829875.640:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f752579c819 code=0x7ffc0000 [ 108.745306][ T29] audit: type=1326 audit(1775829875.640:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752579c819 code=0x7ffc0000 [ 108.767880][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 108.787119][ T29] audit: type=1326 audit(1775829875.640:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752579c819 code=0x7ffc0000 [ 108.787278][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.846620][ T29] audit: type=1326 audit(1775829875.640:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752579c819 code=0x7ffc0000 [ 108.861199][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 108.877271][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.888281][ T29] audit: type=1326 audit(1775829875.640:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752579c819 code=0x7ffc0000 [ 108.913731][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 108.929739][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 108.939313][ T29] audit: type=1326 audit(1775829875.640:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f752579c819 code=0x7ffc0000 [ 108.961522][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.972525][ T10] usb 3-1: config 0 descriptor?? [ 109.087799][ T5929] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 109.117060][ T5929] usb 5-1: unit 13 not found! [ 109.230086][ T6518] loop5: detected capacity change from 0 to 7 [ 109.239562][ T5925] Dev loop5: unable to read RDB block 7 [ 109.245398][ T5925] loop5: unable to read partition table [ 109.267796][ T5925] loop5: partition table beyond EOD, truncated [ 109.287061][ T6518] Dev loop5: unable to read RDB block 7 [ 109.304615][ T5929] usb 5-1: USB disconnect, device number 8 [ 109.324245][ T6518] loop5: unable to read partition table [ 109.346817][ T6518] loop5: partition table beyond EOD, truncated [ 109.369633][ T6518] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 109.404468][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.421711][ T6506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.442206][ T6506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.494342][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 109.505473][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 109.545717][ T10] usb 3-1: USB disconnect, device number 16 [ 109.623127][ T6524] FAULT_INJECTION: forcing a failure. [ 109.623127][ T6524] name failslab, interval 1, probability 0, space 0, times 0 [ 109.671839][ T6524] CPU: 1 UID: 0 PID: 6524 Comm: syz.3.176 Not tainted syzkaller #0 PREEMPT(full) [ 109.671865][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 109.671875][ T6524] Call Trace: [ 109.671882][ T6524] [ 109.671889][ T6524] dump_stack_lvl+0xe8/0x150 [ 109.671916][ T6524] should_fail_ex+0x412/0x560 [ 109.671947][ T6524] should_failslab+0xa8/0x100 [ 109.671968][ T6524] ? dst_alloc+0x105/0x170 [ 109.671985][ T6524] kmem_cache_alloc_noprof+0x87/0x650 [ 109.671996][ T6524] ? __x64_sys_connect+0x7a/0x90 [ 109.672007][ T6524] ? do_syscall_64+0x14d/0xf80 [ 109.672025][ T6524] dst_alloc+0x105/0x170 [ 109.672041][ T6524] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 109.672059][ T6524] ? ip_route_output_key_hash+0xd8/0x2a0 [ 109.672072][ T6524] ip_route_output_key_hash+0x18d/0x2a0 [ 109.672086][ T6524] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 109.672101][ T6524] ? call_rcu+0x644/0x890 [ 109.672120][ T6524] ip_route_output_flow+0x2a/0x150 [ 109.672131][ T6524] ? security_sk_classify_flow+0x6d/0x150 [ 109.672145][ T6524] __ip4_datagram_connect+0x9a5/0x1270 [ 109.672168][ T6524] __ip6_datagram_connect+0x9f0/0x1150 [ 109.672186][ T6524] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 109.672198][ T6524] ? udpv6_connect+0x29/0x240 [ 109.672211][ T6524] ? __local_bh_enable_ip+0xd0/0x130 [ 109.672227][ T6524] udpv6_connect+0x36/0x240 [ 109.672241][ T6524] __sys_connect+0x312/0x450 [ 109.672261][ T6524] ? __pfx___sys_connect+0x10/0x10 [ 109.672278][ T6524] ? __pfx_ksys_write+0x10/0x10 [ 109.672297][ T6524] __x64_sys_connect+0x7a/0x90 [ 109.672309][ T6524] do_syscall_64+0x14d/0xf80 [ 109.672321][ T6524] ? trace_irq_disable+0x3b/0x150 [ 109.672330][ T6524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.672340][ T6524] ? clear_bhb_loop+0x40/0x90 [ 109.672353][ T6524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.672363][ T6524] RIP: 0033:0x7f344c19c819 [ 109.672373][ T6524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.672381][ T6524] RSP: 002b:00007f344d092028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 109.672393][ T6524] RAX: ffffffffffffffda RBX: 00007f344c415fa0 RCX: 00007f344c19c819 [ 109.672400][ T6524] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 109.672407][ T6524] RBP: 00007f344d092090 R08: 0000000000000000 R09: 0000000000000000 [ 109.672413][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.672418][ T6524] R13: 00007f344c416038 R14: 00007f344c415fa0 R15: 00007f344c53fa48 [ 109.672434][ T6524] [ 110.243546][ T6544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.282747][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 110.312999][ T6544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.450275][ T6553] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 110.471401][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.505118][ T6559] binder: 6556:6559 ioctl 40046210 0 returned -14 [ 110.522799][ T6559] ipvlan2: entered allmulticast mode [ 110.547570][ T5929] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 110.563953][ T6559] syz_tun: entered allmulticast mode [ 110.584507][ T6561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.185'. [ 110.596118][ T6561] unsupported nlmsg_type 40 [ 110.606623][ T6562] fuse: Bad value for 'rootmode' [ 110.639480][ T9] usb 2-1: device descriptor read/64, error -71 [ 110.730849][ T5929] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 110.758203][ T5929] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 110.790307][ T5929] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 110.792758][ T6568] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 110.802998][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.849584][ T5929] usb 5-1: Product: syz [ 110.853809][ T5929] usb 5-1: Manufacturer: syz [ 110.869059][ T5929] usb 5-1: SerialNumber: syz [ 110.892083][ T5929] usb 5-1: config 0 descriptor?? [ 110.898699][ T6546] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 110.911849][ T6546] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 110.940578][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 111.087625][ T9] usb 2-1: device descriptor read/64, error -71 [ 111.125751][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.135747][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.157596][ T47] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 111.201257][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.211673][ T9] usb usb2-port1: attempt power cycle [ 111.218018][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.296525][ T6585] xt_hashlimit: size too large, truncated to 1048576 [ 111.327551][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 111.336337][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 111.348440][ T6587] capability: warning: `syz.4.181' uses deprecated v2 capabilities in a way that may be insecure [ 111.364232][ T47] usb 4-1: config 9 has an invalid interface number: 114 but max is 0 [ 111.374307][ T6587] xt_hashlimit: size too large, truncated to 1048576 [ 111.382300][ T47] usb 4-1: config 9 has no interface number 0 [ 111.389284][ T5895] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 111.401128][ T47] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=52.b8 [ 111.411088][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.419479][ T47] usb 4-1: Product: syz [ 111.423882][ T47] usb 4-1: Manufacturer: syz [ 111.429317][ T47] usb 4-1: SerialNumber: syz [ 111.481599][ T6587] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 111.497706][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 111.550096][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.560713][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.571785][ T5895] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 111.581557][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.588409][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 111.590077][ T5895] usb 1-1: Product: syz [ 111.601893][ T5895] usb 1-1: Manufacturer: syz [ 111.606730][ T5895] usb 1-1: SerialNumber: syz [ 111.616396][ T5895] usb 1-1: config 0 descriptor?? [ 111.622265][ T9] usb 2-1: device descriptor read/8, error -71 [ 111.632396][ T5895] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 111.643551][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.655426][ T5895] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 111.667318][ T47] ums-datafab 4-1:9.114: USB Mass Storage device detected [ 111.674656][ T5895] usb 1-1: media controller created [ 111.677740][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 111.694537][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 111.702221][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.703965][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.721822][ T10] usb 3-1: Product: syz [ 111.726812][ T10] usb 3-1: Manufacturer: syz [ 111.730460][ T47] ums-sddr55 4-1:9.114: USB Mass Storage device detected [ 111.738055][ T10] usb 3-1: SerialNumber: syz [ 111.790841][ T5895] DVB: Unable to find symbol tda10046_attach() [ 111.797131][ T5895] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 111.807553][ T5895] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 111.823975][ T47] usb 4-1: USB disconnect, device number 13 [ 111.837619][ T6583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.846448][ T6583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.888196][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 111.908317][ T9] usb 2-1: device descriptor read/8, error -71 [ 112.018660][ T9] usb usb2-port1: unable to enumerate USB device [ 112.239634][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 112.262828][ T5895] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 112.288932][ T5895] usb 1-1: USB disconnect, device number 15 [ 112.414463][ T5881] IPVS: starting estimator thread 0... [ 112.426533][ T6604] IPVS: set_ctl: invalid protocol: 115 172.20.20.13:20001 [ 112.435086][ T6603] IPVS: set_ctl: invalid protocol: 115 172.20.20.13:20001 [ 112.507771][ T6605] IPVS: using max 33 ests per chain, 79200 per kthread [ 112.687603][ T5881] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 112.833451][ T6607] tipc: Started in network mode [ 112.838517][ T6607] tipc: Node identity 76150e52b496, cluster identity 4711 [ 112.846956][ T6607] tipc: Enabled bearer , priority 0 [ 112.854844][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 112.863051][ T6607] syzkaller0: entered promiscuous mode [ 112.863465][ T5881] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.876944][ T6607] syzkaller0: entered allmulticast mode [ 112.878377][ T5881] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 7 [ 112.898577][ T5881] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 112.908554][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.912752][ T6607] tipc: Resetting bearer [ 112.916592][ T5881] usb 4-1: Product: syz [ 112.916614][ T5881] usb 4-1: Manufacturer: syz [ 112.916629][ T5881] usb 4-1: SerialNumber: syz [ 112.936149][ T6606] tipc: Resetting bearer [ 112.952439][ T6606] tipc: Disabling bearer [ 113.093005][ T6611] FAULT_INJECTION: forcing a failure. [ 113.093005][ T6611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.108996][ T6611] CPU: 0 UID: 0 PID: 6611 Comm: syz.0.201 Not tainted syzkaller #0 PREEMPT(full) [ 113.109032][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 113.109042][ T6611] Call Trace: [ 113.109049][ T6611] [ 113.109055][ T6611] dump_stack_lvl+0xe8/0x150 [ 113.109083][ T6611] should_fail_ex+0x412/0x560 [ 113.109112][ T6611] _copy_to_user+0x31/0xb0 [ 113.109133][ T6611] simple_read_from_buffer+0xe1/0x170 [ 113.109161][ T6611] proc_fail_nth_read+0x1bb/0x230 [ 113.109186][ T6611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.109211][ T6611] ? rw_verify_area+0x2a6/0x4d0 [ 113.109230][ T6611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.109255][ T6611] vfs_read+0x20c/0xa70 [ 113.109271][ T6611] ? fdget_pos+0x246/0x320 [ 113.109285][ T6611] ? udpv6_connect+0x52/0x240 [ 113.109308][ T6611] ? __pfx___mutex_lock+0x10/0x10 [ 113.109332][ T6611] ? __pfx_vfs_read+0x10/0x10 [ 113.109352][ T6611] ? __fget_files+0x2a/0x420 [ 113.109371][ T6611] ? __fget_files+0x3a0/0x420 [ 113.109385][ T6611] ? __fget_files+0x2a/0x420 [ 113.109409][ T6611] ksys_read+0x150/0x270 [ 113.109428][ T6611] ? __pfx_ksys_read+0x10/0x10 [ 113.109456][ T6611] do_syscall_64+0x14d/0xf80 [ 113.109477][ T6611] ? trace_irq_disable+0x3b/0x150 [ 113.109491][ T6611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.109506][ T6611] ? clear_bhb_loop+0x40/0x90 [ 113.109525][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.109540][ T6611] RIP: 0033:0x7faa6035d04e [ 113.109557][ T6611] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.109570][ T6611] RSP: 002b:00007faa61303fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.109589][ T6611] RAX: ffffffffffffffda RBX: 00007faa613046c0 RCX: 00007faa6035d04e [ 113.109601][ T6611] RDX: 000000000000000f RSI: 00007faa613040a0 RDI: 0000000000000004 [ 113.109611][ T6611] RBP: 00007faa61304090 R08: 0000000000000000 R09: 0000000000000000 [ 113.109620][ T6611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.109630][ T6611] R13: 00007faa60616038 R14: 00007faa60615fa0 R15: 00007faa6073fa48 [ 113.109658][ T6611] [ 113.393773][ T5881] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 113.498537][ T5929] dm9601 5-1:0.0: probe with driver dm9601 failed with error -71 [ 113.565689][ T5881] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 113.583158][ T6614] trusted_key: syz.1.200 sent an empty control message without MSG_MORE. [ 113.596808][ T5881] usb 4-1: invalid MIDI EP [ 113.603209][ T5881] usb 4-1: snd-bcd2000: error during probing [ 113.613795][ T5881] snd-bcd2000 4-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 113.616255][ T5929] usb 5-1: USB disconnect, device number 9 [ 113.626772][ T5881] usb 4-1: invalid MIDI EP [ 113.637840][ T5881] usb 4-1: snd-bcd2000: error during probing [ 113.659942][ T5881] snd-bcd2000 4-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 113.733139][ T5881] usb 4-1: invalid MIDI EP [ 113.739753][ T5881] usb 4-1: snd-bcd2000: error during probing [ 113.753392][ T5881] snd-bcd2000 4-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 113.810369][ T5881] usb 4-1: USB disconnect, device number 14 [ 113.862674][ T6382] udevd[6382]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.087590][ T5929] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 114.129661][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 114.180077][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 114.287671][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 114.300839][ T5929] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.309009][ T5929] usb 5-1: config 0 has no interface number 0 [ 114.315122][ T5929] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 114.379535][ T5929] usb 5-1: config 0 interface 1 has no altsetting 0 [ 114.410464][ T10] usb 3-1: USB disconnect, device number 17 [ 114.625135][ T5929] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 114.657961][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.667574][ T5929] usb 5-1: Product: syz [ 114.671793][ T5929] usb 5-1: Manufacturer: syz [ 114.684344][ T6644] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 114.696806][ T5929] usb 5-1: SerialNumber: syz [ 114.709140][ T5929] usb 5-1: config 0 descriptor?? [ 114.835154][ T6639] netlink: 44 bytes leftover after parsing attributes in process `syz.2.206'. [ 114.931309][ T5929] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 114.998863][ T5929] cx231xx 5-1:0.1: Failed to read PCB config [ 115.029306][ T5929] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 115.089881][ T5929] usb 5-1: USB disconnect, device number 10 [ 115.457544][ T796] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 115.477561][ T5929] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 115.619776][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.630920][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 115.636280][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.648107][ T5929] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.656230][ T5929] usb 5-1: config 0 has no interface number 0 [ 115.664759][ T5929] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 115.667630][ T5881] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 115.675805][ T796] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 115.692420][ T5929] usb 5-1: config 0 interface 1 has no altsetting 0 [ 115.697554][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 115.699510][ T796] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 115.715919][ T796] usb 2-1: Manufacturer: syz [ 115.722430][ T5929] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 115.731864][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.741039][ T796] usb 2-1: config 0 descriptor?? [ 115.746228][ T5929] usb 5-1: Product: syz [ 115.751049][ T5929] usb 5-1: Manufacturer: syz [ 115.757593][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 115.757820][ T5929] usb 5-1: SerialNumber: syz [ 115.773471][ T5929] usb 5-1: config 0 descriptor?? [ 115.837888][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 115.843271][ T10] usb 3-1: device descriptor read/64, error -71 [ 115.854078][ T5881] usb 1-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 115.864945][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.874009][ T5881] usb 1-1: Product: syz [ 115.878262][ T5881] usb 1-1: Manufacturer: syz [ 115.882971][ T5881] usb 1-1: SerialNumber: syz [ 115.940757][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.950062][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 115.961449][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 115.980729][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 115.999529][ T5929] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 116.000134][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.012477][ T5929] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 116.023180][ T9] usb 4-1: Product: syz [ 116.029514][ T9] usb 4-1: Manufacturer: syz [ 116.036036][ T9] usb 4-1: SerialNumber: syz [ 116.041190][ T796] usbhid 2-1:0.0: can't add hid device: -71 [ 116.054825][ T796] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 116.098083][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 116.101282][ T796] usb 2-1: USB disconnect, device number 11 [ 116.124059][ T5881] usb 1-1: 1:1 : bogus bTerminalLink 0 [ 116.158923][ T5929] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 116.168665][ T5929] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 116.188605][ T5929] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 116.189761][ T5881] usb 1-1: can't set first interface for hiFace device. [ 116.201931][ T5929] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 116.206182][ T5881] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 116.225959][ T5881] usb 1-1: USB disconnect, device number 16 [ 116.237698][ T5929] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 116.258926][ T10] usb 3-1: device descriptor read/64, error -71 [ 116.269208][ T5929] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -32 [ 116.269851][ T6663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.332825][ T6663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.385917][ T5929] i2c i2c-3: Added multiplexed i2c bus 5 [ 116.399193][ T10] usb usb3-port1: attempt power cycle [ 116.433212][ T5929] i2c i2c-3: Added multiplexed i2c bus 6 [ 116.445368][ T6669] 8021q: VLANs not supported on caif0 [ 116.451330][ T5929] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 116.465519][ T5929] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 116.495176][ T5929] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 116.511773][ T5929] usb 5-1: USB disconnect, device number 11 [ 116.621577][ T6663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.635979][ T6663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.673886][ T9] usb 4-1: Can't get UAC3 power state for id 10 [ 116.700283][ T9] usb 4-1: BAAD HEADSET c_chmask mismatch [ 116.748260][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 116.789297][ T10] usb 3-1: device descriptor read/8, error -71 [ 116.871211][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 116.933842][ T9] usb 4-1: USB disconnect, device number 15 [ 117.005622][ T6321] udevd[6321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.059368][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 117.121006][ T10] usb 3-1: device descriptor read/8, error -71 [ 117.235223][ T10] usb usb3-port1: unable to enumerate USB device [ 117.517862][ T6686] netlink: 'syz.3.219': attribute type 61 has an invalid length. [ 117.719309][ T6693] netlink: 'syz.3.219': attribute type 4 has an invalid length. [ 117.958409][ T6702] netlink: 48 bytes leftover after parsing attributes in process `syz.1.224'. [ 117.988345][ T6702] netlink: 'syz.1.224': attribute type 8 has an invalid length. [ 118.249164][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 118.442653][ T9] usb 5-1: config index 0 descriptor too short (expected 177, got 92) [ 118.473285][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.537622][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 118.597586][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.645294][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.676634][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.715349][ T6718] loop5: detected capacity change from 0 to 7 [ 118.728146][ T9] usb 5-1: Product: syz [ 118.743262][ T9] usb 5-1: Manufacturer: syz [ 118.752040][ T6718] Buffer I/O error on dev loop5, logical block 0, async page read [ 118.766691][ T9] usb 5-1: SerialNumber: syz [ 118.782451][ T6718] Buffer I/O error on dev loop5, logical block 0, async page read [ 118.816790][ T9] cdc_ncm 5-1:1.0: skipping garbage [ 118.823167][ T6718] Buffer I/O error on dev loop5, logical block 0, async page read [ 118.854789][ T9] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 118.858633][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 118.870722][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.226'. [ 118.888183][ T6718] Buffer I/O error on dev loop5, logical block 0, async page read [ 118.911176][ T9] cdc_ncm 5-1:1.0: bind() failure [ 118.925410][ T6718] Buffer I/O error on dev loop5, logical block 0, async page read [ 118.978603][ T6718] Buffer I/O error on dev loop5, logical block 0, async page read [ 119.016539][ T6704] netlink: 'syz.4.223': attribute type 1 has an invalid length. [ 119.024476][ T6718] Buffer I/O error on dev loop5, logical block 0, async page read [ 119.060919][ T6718] ldm_validate_partition_table(): Disk read failed. [ 119.077828][ T6718] Buffer I/O error on dev loop5, logical block 0, async page read [ 119.110516][ T6718] Buffer I/O error on dev loop5, logical block 0, async page read [ 119.144598][ T6718] Buffer I/O error on dev loop5, logical block 0, async page read [ 119.176147][ T6718] Dev loop5: unable to read RDB block 0 [ 119.200120][ T6718] loop5: unable to read partition table [ 119.218983][ T6718] loop5: partition table beyond EOD, truncated [ 119.254821][ T6718] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 119.383543][ T6726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.402723][ T6726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.618859][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 119.745560][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.753493][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.790879][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 119.808154][ T10] usb 5-1: USB disconnect, device number 12 [ 119.821970][ T9] usb 4-1: config 149 has an invalid interface number: 79 but max is 0 [ 119.870791][ T9] usb 4-1: config 149 has an invalid descriptor of length 0, skipping remainder of the config [ 119.913567][ T9] usb 4-1: config 149 has no interface number 0 [ 119.935956][ T9] usb 4-1: config 149 interface 79 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 119.980899][ T9] usb 4-1: config 149 interface 79 has no altsetting 0 [ 120.006712][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=6940, bcdDevice=ff.a3 [ 120.038435][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.072702][ T9] usb 4-1: Product: syz [ 120.087908][ T9] usb 4-1: Manufacturer: syz [ 120.105206][ T9] usb 4-1: SerialNumber: syz [ 120.159436][ T6738] loop5: detected capacity change from 0 to 7 [ 120.171561][ T5825] Dev loop5: unable to read RDB block 7 [ 120.177174][ T5825] loop5: unable to read partition table [ 120.217000][ T6730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.225292][ T5825] loop5: partition table beyond EOD, truncated [ 120.253151][ T6738] Dev loop5: unable to read RDB block 7 [ 120.272213][ T6738] loop5: unable to read partition table [ 120.293315][ T6738] loop5: partition table beyond EOD, truncated [ 120.315970][ T6738] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.360632][ T9] usb 4-1: USB disconnect, device number 16 [ 120.441261][ T6730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.665548][ T35] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.707041][ T35] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.752157][ T35] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.788825][ T6756] loop5: detected capacity change from 0 to 7 [ 120.801924][ T35] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.825295][ T6756] loop5: [ 120.831008][ T6756] loop5: partition table partially beyond EOD, truncated [ 120.877609][ T796] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 120.947913][ T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 121.017258][ T6758] Invalid logical block size (17746) [ 121.152622][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.199088][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 121.242096][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.276327][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.311411][ T9] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 121.355067][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.403819][ T9] usb 1-1: Product: syz [ 121.419370][ T9] usb 1-1: Manufacturer: syz [ 121.438990][ T9] usb 1-1: SerialNumber: syz [ 121.527939][ T5881] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 121.671992][ T6751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.707547][ T47] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 121.709920][ T5881] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 121.725023][ T6751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.776193][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.787934][ T9] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 121.820984][ T9] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 121.830785][ T5881] usb 3-1: config 0 descriptor?? [ 121.855595][ T9] usb 1-1: 3:0: cannot get min/max values for control 3 (id 3) [ 121.886269][ T9] usb 1-1: 3:0: cannot get min/max values for control 4 (id 3) [ 121.910185][ T9] usb 1-1: 3:0: cannot get min/max values for control 5 (id 3) [ 121.927564][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.939348][ T9] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 121.960644][ T47] usb 4-1: not running at top speed; connect to a high speed hub [ 121.972884][ T9] usb 1-1: 3:0: cannot get min/max values for control 8 (id 3) [ 121.989412][ T9] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 122.005021][ T9] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 122.019018][ T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.055103][ T9] usb 1-1: 3:0: cannot get min/max values for control 11 (id 3) [ 122.080254][ T5881] usb 3-1: Cannot read MAC address [ 122.087715][ T9] usb 1-1: 3:0: cannot get min/max values for control 12 (id 3) [ 122.110698][ T5881] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 122.133794][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.147009][ T9] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 122.184514][ T47] usb 4-1: string descriptor 0 read error: -22 [ 122.195209][ T5881] usb 3-1: USB disconnect, device number 22 [ 122.222163][ T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.270384][ T9] usb 1-1: 3:0: cannot get min/max values for control 3 (id 3) [ 122.302245][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.326638][ T9] usb 1-1: 3:0: cannot get min/max values for control 5 (id 3) [ 122.453794][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 122.463021][ T47] usb 4-1: 0:2 : does not exist [ 122.465094][ T9] usb 1-1: USB disconnect, device number 17 [ 122.497451][ C1] hrtimer: interrupt took 60861 ns [ 122.671964][ T6770] tipc: Enabled bearer , priority 0 [ 122.682031][ T6770] syzkaller0: entered promiscuous mode [ 122.688047][ T6770] syzkaller0: entered allmulticast mode [ 122.732191][ T6770] tipc: Resetting bearer [ 122.747483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 122.773637][ T6769] tipc: Resetting bearer [ 122.839294][ T6769] tipc: Disabling bearer [ 122.846223][ T47] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 122.871571][ T47] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 122.900957][ T47] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 122.980079][ T47] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 123.046966][ T47] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 123.066444][ T6774] fuse: Invalid gid '00000000000000000000004' [ 123.127923][ T47] usb 4-1: USB disconnect, device number 17 [ 123.521931][ T6780] loop5: detected capacity change from 0 to 7 [ 123.530623][ T6780] Dev loop5: unable to read RDB block 7 [ 123.539364][ T6780] loop5: unable to read partition table [ 123.546332][ T6780] loop5: partition table beyond EOD, truncated [ 123.564298][ T6780] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 123.895430][ T6786] loop5: detected capacity change from 0 to 7 [ 123.923980][ T6786] loop5: [ 123.938477][ T6786] loop5: partition table partially beyond EOD, truncated [ 124.070376][ T6790] netlink: 'syz.2.250': attribute type 5 has an invalid length. [ 124.102633][ T6793] loop5: detected capacity change from 0 to 7 [ 124.145219][ T6795] Dev loop5: unable to read RDB block 7 [ 124.161872][ T6785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.173604][ T6795] loop5: AHDI p1 [ 124.191934][ T6795] loop5: partition table partially beyond EOD, truncated [ 124.227521][ T6793] Dev loop5: unable to read RDB block 7 [ 124.234253][ T6793] loop5: AHDI p1 [ 124.242750][ T6793] loop5: partition table partially beyond EOD, truncated [ 124.406885][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 124.807646][ T6810] Invalid logical block size (65423) [ 124.868943][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 124.868987][ T29] audit: type=1326 audit(1775829891.870:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8417f9c819 code=0x7ffc0000 [ 124.942667][ T29] audit: type=1326 audit(1775829891.930:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8417f9c819 code=0x7ffc0000 [ 124.980069][ T29] audit: type=1326 audit(1775829891.930:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8417f9c819 code=0x7ffc0000 [ 125.198048][ T47] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 125.357558][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 125.369079][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 125.387967][ T29] audit: type=1326 audit(1775829891.950:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f8417f9c819 code=0x7ffc0000 [ 125.462513][ T29] audit: type=1326 audit(1775829891.950:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8417f9c819 code=0x7ffc0000 [ 125.537517][ T29] audit: type=1326 audit(1775829891.950:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8417f9c819 code=0x7ffc0000 [ 125.587791][ T47] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 125.597721][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 125.610840][ T47] usb 1-1: config 0 has no interface number 0 [ 125.617328][ T29] audit: type=1326 audit(1775829891.990:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8417f9c819 code=0x7ffc0000 [ 125.639918][ T47] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 125.666860][ T10] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 125.685381][ T10] usb 3-1: config 2 has no interface number 0 [ 125.705717][ T10] usb 3-1: config 2 interface 88 has no altsetting 0 [ 125.720636][ T47] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 125.720853][ T10] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 125.735437][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.748609][ T47] usb 1-1: Product: syz [ 125.757301][ T29] audit: type=1326 audit(1775829892.030:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8417f9c819 code=0x7ffc0000 [ 125.787582][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.808961][ T10] usb 3-1: Product: syz [ 125.818162][ T10] usb 3-1: Manufacturer: syz [ 125.822795][ T10] usb 3-1: SerialNumber: syz [ 125.828213][ T29] audit: type=1326 audit(1775829892.030:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8417f9c819 code=0x7ffc0000 [ 125.877517][ T29] audit: type=1326 audit(1775829892.030:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8417f9c819 code=0x7ffc0000 [ 125.937906][ T47] usb 1-1: Manufacturer: syz [ 125.942584][ T47] usb 1-1: SerialNumber: syz [ 126.008250][ T6819] loop2: detected capacity change from 0 to 7 [ 126.017220][ T5925] Dev loop2: unable to read RDB block 7 [ 126.025020][ T5925] loop2: unable to read partition table [ 126.035051][ T5925] loop2: partition table beyond EOD, truncated [ 126.039171][ T796] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.087580][ T47] usb 1-1: config 0 descriptor?? [ 126.093408][ T6813] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 126.115132][ T6819] Dev loop2: unable to read RDB block 7 [ 126.119012][ T796] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 126.139542][ T6819] loop2: unable to read partition table [ 126.145587][ T6819] loop2: partition table beyond EOD, truncated [ 126.160033][ T796] usb 2-1: can't read configurations, error -71 [ 126.169443][ T6819] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 126.350219][ T6813] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 126.366808][ T6824] 8021q: VLANs not supported on caif0 [ 126.395754][ T6826] loop5: detected capacity change from 0 to 7 [ 126.423887][ T6826] loop5: [ 126.427051][ T6826] loop5: partition table partially beyond EOD, truncated [ 126.587895][ T6813] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 126.714786][ T10] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 126.738631][ T10] asix 3-1:2.88: probe with driver asix failed with error -71 [ 126.773437][ T10] usb 3-1: USB disconnect, device number 23 [ 127.257705][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 127.335081][ T6833] netlink: 36 bytes leftover after parsing attributes in process `syz.2.265'. [ 127.427536][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 127.444012][ T10] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 127.468749][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.477248][ T10] usb 5-1: Product: syz [ 127.488292][ T10] usb 5-1: Manufacturer: syz [ 127.497268][ T10] usb 5-1: SerialNumber: syz [ 127.509670][ T10] usb 5-1: config 0 descriptor?? [ 127.523656][ T10] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 127.534432][ T6839] Invalid logical block size (21930) [ 127.543760][ T10] usb 5-1: Detected FT-X [ 127.628788][ T1208] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 127.730311][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 127.797562][ T1208] usb 2-1: Using ep0 maxpacket: 16 [ 127.855566][ T1208] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 127.878946][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 127.889634][ T1208] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 127.904997][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 127.919015][ T1208] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 127.933345][ T1208] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 127.955515][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 127.967794][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.976451][ T10] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 127.993111][ T10] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 128.004424][ T1208] usb 2-1: Product: syz [ 128.013042][ T1208] usb 2-1: Manufacturer: syz [ 128.024411][ T1208] usb 2-1: SerialNumber: syz [ 128.034778][ T10] usb 5-1: USB disconnect, device number 13 [ 128.059237][ T1208] usb 2-1: config 0 descriptor?? [ 128.070975][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 128.093539][ T1208] port100 2-1:0.0: NFC: Could not get supported command types [ 128.110151][ T10] ftdi_sio 5-1:0.0: device disconnected [ 128.246048][ T47] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 128.260782][ T47] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 128.274967][ T47] asix 1-1:0.188: probe with driver asix failed with error -71 [ 128.304902][ T47] usb 1-1: USB disconnect, device number 18 [ 128.309675][ T1208] usb 2-1: USB disconnect, device number 14 [ 128.334970][ T6853] loop5: detected capacity change from 0 to 7 [ 128.363862][ T6853] loop5: [ 128.370631][ T6853] loop5: partition table partially beyond EOD, truncated [ 128.807817][ T1208] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 128.922090][ T6855] fuse: Unknown parameter '' [ 128.969819][ T1208] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.016708][ T1208] usb 5-1: not running at top speed; connect to a high speed hub [ 129.081124][ T1208] usb 5-1: config 8 has an invalid interface number: 69 but max is 0 [ 129.110371][ T1208] usb 5-1: config 8 has no interface number 0 [ 129.141028][ T1208] usb 5-1: config 8 interface 69 has no altsetting 0 [ 129.168969][ T1208] usb 5-1: language id specifier not provided by device, defaulting to English [ 129.254565][ T6880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.285677][ T1208] usb 5-1: New USB device found, idVendor=05c6, idProduct=9079, bcdDevice=87.a6 [ 129.327511][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.405368][ T6883] loop5: detected capacity change from 0 to 7 [ 129.437338][ T6883] Dev loop5: unable to read RDB block 7 [ 129.464422][ T6883] loop5: AHDI p1 [ 129.486944][ T6883] loop5: partition table partially beyond EOD, truncated [ 129.607513][ T47] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 129.884752][ T1208] uvcvideo 5-1:8.69: Found UVC 0.00 device (05c6:9079) [ 129.907390][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 129.929454][ T1208] uvcvideo 5-1:8.69: No valid video chain found. [ 129.944235][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.968651][ T47] usb 4-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 129.991453][ T1208] usb 5-1: USB disconnect, device number 14 [ 130.014155][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 130.062832][ T47] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.128785][ T47] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.150990][ T47] usb 4-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3 [ 130.177766][ T47] usb 4-1: Product: syz [ 130.200508][ T47] usb 4-1: Manufacturer: syz [ 130.230849][ T47] usb 4-1: SerialNumber: syz [ 130.486524][ T47] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 130.510323][ T47] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 130.531368][ T47] cdc_ncm 4-1:1.0: bind() failure [ 130.538113][ T1208] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 130.567208][ T47] usb 4-1: USB disconnect, device number 18 [ 130.710691][ T1208] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.732560][ T1208] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.764145][ T1208] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.778092][ T796] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 130.815020][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.849564][ T6902] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.881900][ T1208] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.977704][ T796] usb 5-1: Using ep0 maxpacket: 8 [ 131.001322][ T796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 131.034007][ T796] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 131.060689][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.100022][ T796] usb 5-1: Product: syz [ 131.104293][ T796] usb 5-1: Manufacturer: syz [ 131.133750][ T796] usb 5-1: SerialNumber: syz [ 131.149258][ T10] usb 3-1: USB disconnect, device number 24 [ 131.172218][ T796] usb 5-1: config 0 descriptor?? [ 131.202274][ T796] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 131.395788][ T6904] xt_hashlimit: max too large, truncated to 1048576 [ 131.462395][ T796] gspca_zc3xx: reg_w_i err -71 [ 131.544814][ T6923] netlink: 'syz.4.292': attribute type 1 has an invalid length. [ 131.608909][ T6923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.663484][ T6925] bond1: (slave ip6gretap1): making interface the new active one [ 131.709691][ T6925] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 131.752550][ T6931] erspan0: entered allmulticast mode [ 131.779230][ T6931] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 132.069900][ T796] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 132.089785][ T796] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 132.131639][ T796] usb 5-1: USB disconnect, device number 15 [ 132.297994][ T47] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 132.487605][ T796] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 132.612792][ T47] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.640174][ T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.672260][ T796] usb 5-1: Using ep0 maxpacket: 8 [ 132.689849][ T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.700393][ T796] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 132.727770][ T6946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.737508][ T796] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 132.747674][ T47] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.775795][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.786572][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.801137][ T47] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 132.812200][ T796] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.839019][ T796] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.854704][ T47] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 132.877036][ T47] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 132.891217][ T796] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.911444][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.922767][ T47] usb 2-1: New USB device found, idVendor=0521, idProduct=a4a1, bcdDevice= 0.40 [ 132.947851][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.956030][ T47] usb 2-1: Product: 俓졻⚿諙嬨匪戈匼曎ì‘ê¯ê´Ú»ìº£ì»¡à­à¦ì‡¢ã®¢é²§ä¨¿ë–꓾ⱻ嗡σ待é¼ãµ›ì¦¾ã‘µé«¤è¶€ê›¡ä¡Žê‰ºï¸¿áž©ê«¿ã‘棃뿟⨟魬몷쳑繁Õ䮊㼛ⵕ☪蘺嘇Ħ釳꒘ɗട굤濠䒴 [ 132.982074][ T47] usb 2-1: Manufacturer: 粧֠飛렑⥩ㅄ楾ꔄ譪æ§ê®¸æ§ï­®áˆíŽ¼é–ªä’·ìŒå¥Žã¬Œî繤䞚ç›æ›œä‹¼Ã¿ [ 132.994304][ T47] usb 2-1: SerialNumber: ṑꗩ괶æ—ë…–äš…á„⧼ἑꉴ宴櫖᚜㎷ꌻ챗룱å—熚럶懺䦴å話⧇䟪䅗鮪귰᮶푦孌㈼ìµë¬è©ê‘°è»éŽ“äµè³…悄㦩ê¨è·›ï‘°ï››ìšªá·’﬉⨋í³é™˜î溗ᯘ퓆霌é›ê‡ãª¢ë†¹â€åººÍ›ç¨½Ñ± [ 133.017886][ T1208] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 133.142902][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.151848][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.163177][ T796] usb 5-1: GET_CAPABILITIES returned 0 [ 133.171132][ T796] usbtmc 5-1:16.0: can't read capabilities [ 133.369857][ T6943] usb 5-1: usbtmc_ioctl_clear_in_halt returned -32 [ 133.592922][ T6943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.643693][ T796] usb 5-1: USB disconnect, device number 16 [ 134.064472][ T6966] Invalid logical block size (33423360) [ 134.140636][ T6968] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 134.218939][ T796] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 134.387925][ T796] usb 4-1: Using ep0 maxpacket: 8 [ 134.411776][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 134.459275][ T796] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 134.521238][ T796] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 134.569478][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.579938][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'. [ 134.589298][ T796] usb 4-1: Product: syz [ 134.594449][ T796] usb 4-1: Manufacturer: syz [ 134.600143][ T796] usb 4-1: SerialNumber: syz [ 134.613253][ T796] usb 4-1: config 0 descriptor?? [ 134.988386][ T1208] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 135.004112][ T47] cdc_ncm 2-1:1.0: bind() failure [ 135.027588][ T47] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 135.027640][ T47] cdc_ncm 2-1:1.1: bind() failure [ 135.087996][ T47] usb 2-1: USB disconnect, device number 15 [ 135.119867][ T1208] usb 1-1: device descriptor read/64, error -71 [ 135.182980][ T7004] Invalid logical block size (33554432) [ 135.230248][ T1208] usb usb1-port1: attempt power cycle [ 135.252065][ T5929] usb 4-1: USB disconnect, device number 19 [ 135.587598][ T1208] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 135.618220][ T1208] usb 1-1: device descriptor read/8, error -71 [ 135.638118][ T7015] Invalid logical block size (51711) [ 135.877516][ T1208] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 135.920014][ T1208] usb 1-1: device descriptor read/8, error -71 [ 136.021196][ T7023] loop5: detected capacity change from 0 to 7 [ 136.029459][ T1208] usb usb1-port1: unable to enumerate USB device [ 136.039288][ T7023] Dev loop5: unable to read RDB block 7 [ 136.047241][ T7023] loop5: unable to read partition table [ 136.053661][ T7023] loop5: partition table beyond EOD, truncated [ 136.061076][ T7023] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 136.458559][ T7043] loop5: detected capacity change from 0 to 7 [ 136.465950][ T5825] Dev loop5: unable to read RDB block 7 [ 136.493413][ T5825] loop5: unable to read partition table [ 136.510384][ T5825] loop5: partition table beyond EOD, truncated [ 136.532106][ T7043] Dev loop5: unable to read RDB block 7 [ 136.539099][ T7043] loop5: unable to read partition table [ 136.544956][ T7043] loop5: partition table beyond EOD, truncated [ 136.574626][ T7040] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 136.582165][ T7043] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 136.596659][ T10] IPVS: starting estimator thread 0... [ 136.697586][ T7045] IPVS: using max 56 ests per chain, 134400 per kthread [ 137.144468][ T7056] netlink: 'syz.1.329': attribute type 3 has an invalid length. [ 137.547839][ T5929] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 137.730824][ T7065] loop5: detected capacity change from 0 to 7 [ 137.749932][ T6382] Dev loop5: unable to read RDB block 7 [ 137.767869][ T6382] loop5: unable to read partition table [ 137.789057][ T6382] loop5: partition table beyond EOD, truncated [ 137.812917][ T7065] Dev loop5: unable to read RDB block 7 [ 137.825301][ T7065] loop5: unable to read partition table [ 137.832118][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 137.873695][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 137.889189][ T7065] loop5: partition table beyond EOD, truncated [ 137.914438][ T5929] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 137.938883][ T7065] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.991591][ T5929] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 138.047107][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.119215][ T5929] usb 5-1: Product: syz [ 138.137555][ T5929] usb 5-1: Manufacturer: syz [ 138.177724][ T5929] usb 5-1: SerialNumber: syz [ 138.216706][ T5929] usb 5-1: config 0 descriptor?? [ 138.304724][ T7062] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.560353][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 138.697571][ T5881] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 138.718517][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 138.733889][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.746371][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.760782][ T7062] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.768108][ T10] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 138.788021][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.802596][ T10] usb 3-1: config 0 descriptor?? [ 138.858472][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 138.872081][ T5881] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.890571][ T5881] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 138.914465][ T5881] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 138.924497][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.933338][ T5881] usb 1-1: Product: syz [ 138.946712][ T5881] usb 1-1: Manufacturer: syz [ 138.952253][ T5881] usb 1-1: SerialNumber: syz [ 139.229713][ T10] zydacron 0003:13EC:0006.0007: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 139.424740][ T10] usb 3-1: USB disconnect, device number 25 [ 139.703291][ T7094] netlink: 'syz.3.336': attribute type 10 has an invalid length. [ 139.734781][ T7094] team0: Device xfrm0 is of different type [ 140.041913][ T7096] loop5: detected capacity change from 0 to 7 [ 140.053485][ T7096] Dev loop5: unable to read RDB block 7 [ 140.062955][ T7096] loop5: unable to read partition table [ 140.070615][ T7096] loop5: partition table beyond EOD, truncated [ 140.085477][ T7096] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 140.281153][ T7098] cgroup: fork rejected by pids controller in /syz2 [ 140.817047][ T5881] usb 1-1: USB disconnect, device number 23 [ 141.197572][ T5929] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 141.359326][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.368326][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 141.374118][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.382802][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.392131][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.400278][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.408349][ T5929] usb 4-1: unable to get BOS descriptor or descriptor too short [ 141.418314][ T5929] usb 4-1: config 8 has an invalid interface number: 85 but max is 1 [ 141.426839][ T5929] usb 4-1: config 8 has an invalid interface number: 72 but max is 1 [ 141.435340][ T5929] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 141.446683][ T5929] usb 4-1: config 8 has no interface number 0 [ 141.453565][ T5929] usb 4-1: config 8 has no interface number 1 [ 141.465794][ T5929] usb 4-1: config 8 interface 72 altsetting 231 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 141.486473][ T5929] usb 4-1: config 8 interface 72 altsetting 231 endpoint 0x2 has invalid maxpacket 447, setting to 64 [ 141.497943][ T5929] usb 4-1: config 8 interface 72 altsetting 231 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 141.509125][ T5929] usb 4-1: config 8 interface 72 altsetting 231 has an invalid descriptor for endpoint zero, skipping [ 141.520254][ T5929] usb 4-1: config 8 interface 72 altsetting 231 has an invalid descriptor for endpoint zero, skipping [ 141.531335][ T5929] usb 4-1: config 8 interface 72 altsetting 231 has an invalid descriptor for endpoint zero, skipping [ 141.545337][ T5929] usb 4-1: config 8 interface 72 altsetting 231 has a duplicate endpoint with address 0x7, skipping [ 141.557881][ T5929] usb 4-1: config 8 interface 72 altsetting 231 has a duplicate endpoint with address 0x7, skipping [ 141.570649][ T5929] usb 4-1: config 8 interface 72 has no altsetting 0 [ 141.588446][ T5929] usb 4-1: string descriptor 0 read error: -22 [ 141.594816][ T5929] usb 4-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice= a.4a [ 141.608682][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.635248][ T5929] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 141.662374][ T5929] microtek usb (rev 0.4.3): expecting 3 got 6 endpoints! Bailing out. [ 141.688057][ T47] usb 5-1: USB disconnect, device number 17 [ 141.861206][ T7211] chnl_net:caif_netlink_parms(): no params data found [ 142.014872][ T7220] syzkaller1: entered promiscuous mode [ 142.033482][ T7220] syzkaller1: entered allmulticast mode [ 142.080364][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.094663][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.121145][ T7211] bridge_slave_0: entered allmulticast mode [ 142.142466][ T7211] bridge_slave_0: entered promiscuous mode [ 142.219785][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.227223][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.234307][ T10] usb 4-1: USB disconnect, device number 20 [ 142.248178][ T7211] bridge_slave_1: entered allmulticast mode [ 142.267993][ T7211] bridge_slave_1: entered promiscuous mode [ 142.327713][ T1208] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 142.348137][ T35] bridge_slave_1: left allmulticast mode [ 142.367709][ T35] bridge_slave_1: left promiscuous mode [ 142.374386][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.410234][ T35] bridge_slave_0: left allmulticast mode [ 142.415897][ T35] bridge_slave_0: left promiscuous mode [ 142.449057][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.519497][ T1208] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.547646][ T1208] usb 1-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 142.582403][ T1208] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.605110][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.614756][ T1208] usb 1-1: Product: syz [ 142.631026][ T1208] usb 1-1: Manufacturer: syz [ 142.635845][ T1208] usb 1-1: SerialNumber: syz [ 142.668580][ T1208] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 142.675439][ T1208] cdc_ncm 1-1:1.0: bind() failure [ 142.709003][ T1208] cdc_ncm 1-1:1.1: skipping garbage [ 142.724601][ T1208] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 142.734787][ T1208] cdc_ncm 1-1:1.1: bind() failure [ 142.877523][ T1208] usb 1-1: USB disconnect, device number 24 [ 142.918484][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.945468][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.970275][ T35] bond0 (unregistering): Released all slaves [ 143.120251][ T7211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.188949][ T7211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.339328][ T7211] team0: Port device team_slave_0 added [ 143.377449][ T7211] team0: Port device team_slave_1 added [ 143.485094][ T35] hsr_slave_0: left promiscuous mode [ 143.499353][ T35] hsr_slave_1: left promiscuous mode [ 143.506330][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.516684][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.547733][ T5830] Bluetooth: hci0: command tx timeout [ 143.692549][ T35] team0 (unregistering): Port device team_slave_1 removed [ 143.734429][ T35] team0 (unregistering): Port device team_slave_0 removed [ 143.944624][ T7274] Invalid logical block size (150994944) [ 144.024761][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.055751][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.161932][ T7211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.227056][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.256155][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.322095][ T7211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.675775][ T7211] hsr_slave_0: entered promiscuous mode [ 144.701085][ T7211] hsr_slave_1: entered promiscuous mode [ 144.708178][ T7211] debugfs: 'hsr0' already exists in 'hsr' [ 144.714038][ T7211] Cannot create hsr debugfs directory [ 144.865914][ T7300] netlink: 144 bytes leftover after parsing attributes in process `syz.0.361'. [ 144.968360][ T7308] netlink: 52 bytes leftover after parsing attributes in process `syz.0.361'. [ 145.044122][ T7312] netlink: 48 bytes leftover after parsing attributes in process `syz.0.361'. [ 145.621085][ T5830] Bluetooth: hci0: command tx timeout [ 145.760659][ T7328] netlink: 32 bytes leftover after parsing attributes in process `syz.3.364'. [ 146.037519][ T796] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 146.139098][ T7345] Invalid logical block size (218103808) [ 146.209658][ T7348] loop5: detected capacity change from 0 to 7 [ 146.216353][ T796] usb 4-1: unable to get BOS descriptor or descriptor too short [ 146.226941][ T796] usb 4-1: not running at top speed; connect to a high speed hub [ 146.235456][ T6382] Dev loop5: unable to read RDB block 7 [ 146.242848][ T796] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.247499][ T6382] loop5: unable to read partition table [ 146.253046][ T796] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 146.269225][ T6382] loop5: partition table beyond EOD, truncated [ 146.270443][ T796] usb 4-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 146.287589][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.297140][ T796] usb 4-1: Product: syz [ 146.301640][ T7348] Dev loop5: unable to read RDB block 7 [ 146.307259][ T7348] loop5: unable to read partition table [ 146.315037][ T796] usb 4-1: Manufacturer: syz [ 146.324024][ T796] usb 4-1: SerialNumber: syz [ 146.333349][ T7348] loop5: partition table beyond EOD, truncated [ 146.344383][ T7348] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 146.576208][ T7356] netlink: 68 bytes leftover after parsing attributes in process `syz.0.369'. [ 146.666676][ T7211] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 146.712595][ T7211] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 146.782569][ T7211] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 146.839977][ T7211] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 146.876255][ T7373] loop4: detected capacity change from 0 to 7 [ 146.909316][ T7373] Dev loop4: unable to read RDB block 7 [ 146.927655][ T7373] loop4: unable to read partition table [ 146.933570][ T7373] loop4: partition table beyond EOD, truncated [ 146.965591][ T7373] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 147.061772][ T5194] Dev loop4: unable to read RDB block 7 [ 147.090015][ T796] usb 4-1: unit 2 not found! [ 147.094671][ T796] usb 4-1: unit 8 not found! [ 147.096303][ T5194] loop4: unable to read partition table [ 147.115556][ T5194] loop4: partition table beyond EOD, truncated [ 147.136527][ T7211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.178943][ T10] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 147.199438][ T7211] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.235430][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.242615][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.257133][ T5194] Dev loop4: unable to read RDB block 7 [ 147.274176][ T5194] loop4: unable to read partition table [ 147.282048][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.289187][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.313340][ T5194] loop4: partition table beyond EOD, truncated [ 147.323529][ T796] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 147.367536][ T10] usb 2-1: Invalid ep0 maxpacket: 32 [ 147.386008][ T796] usb 4-1: USB disconnect, device number 21 [ 147.449674][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.495679][ T7211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.503450][ T10] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 147.564263][ T7211] veth0_vlan: entered promiscuous mode [ 147.576709][ T7211] veth1_vlan: entered promiscuous mode [ 147.610042][ T7211] veth0_macvtap: entered promiscuous mode [ 147.620132][ T7211] veth1_macvtap: entered promiscuous mode [ 147.640377][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.654506][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.672253][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.682825][ T10] usb 2-1: Invalid ep0 maxpacket: 32 [ 147.688497][ T10] usb usb2-port1: attempt power cycle [ 147.694128][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.703020][ T5830] Bluetooth: hci0: command tx timeout [ 147.718134][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.728276][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.757565][ T796] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 147.895392][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.915988][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.947649][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 147.960487][ T796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.971958][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.980508][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.987657][ T796] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.015539][ T796] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 148.030306][ T796] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 148.039767][ T796] usb 4-1: Product: syz [ 148.044652][ T796] usb 4-1: Manufacturer: syz [ 148.050839][ T796] usb 4-1: SerialNumber: syz [ 148.078296][ T10] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 148.107737][ T796] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input17 [ 148.167059][ T10] usb 2-1: Invalid ep0 maxpacket: 32 [ 148.307528][ T10] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 148.346513][ T5881] usb 4-1: USB disconnect, device number 22 [ 148.354538][ T10] usb 2-1: Invalid ep0 maxpacket: 32 [ 148.361206][ T10] usb usb2-port1: unable to enumerate USB device [ 148.395371][ T5881] appletouch 4-1:1.0: input: appletouch disconnected [ 148.446198][ T7412] loop5: detected capacity change from 0 to 7 [ 148.457798][ T6382] Dev loop5: unable to read RDB block 7 [ 148.463850][ T6382] loop5: unable to read partition table [ 148.469892][ T6382] loop5: partition table beyond EOD, truncated [ 148.489172][ T7412] Dev loop5: unable to read RDB block 7 [ 148.494809][ T7412] loop5: unable to read partition table [ 148.512147][ T7412] loop5: partition table beyond EOD, truncated [ 148.533246][ T7412] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 148.724944][ T5194] Dev loop4: unable to read RDB block 7 [ 148.747123][ T5194] loop4: unable to read partition table [ 148.758061][ T5194] loop4: partition table beyond EOD, truncated [ 148.787531][ T796] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 148.804769][ T7418] Invalid logical block size (1163001856) [ 148.857142][ T5194] Dev loop4: unable to read RDB block 7 [ 148.879531][ T5194] loop4: unable to read partition table [ 148.896629][ T5194] loop4: partition table beyond EOD, truncated [ 148.947602][ T796] usb 1-1: Using ep0 maxpacket: 32 [ 148.968450][ T796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.969573][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 148.995044][ T796] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.029794][ T796] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 149.075323][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 149.097111][ T796] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 149.142298][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 149.155289][ T796] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 149.168929][ T796] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 149.197768][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.214863][ T796] usb 1-1: Product: syz [ 149.225281][ T796] usb 1-1: Manufacturer: syz [ 149.236253][ T796] usb 1-1: SerialNumber: syz [ 149.251621][ T796] usb 1-1: config 0 descriptor?? [ 149.268184][ T7416] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.278425][ T796] usb 1-1: NFC: Reader power on cmd error -90 [ 149.285721][ T796] pn533_usb 1-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 149.297920][ T796] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -90 [ 149.486310][ T5881] usb 1-1: USB disconnect, device number 25 [ 149.777995][ T5830] Bluetooth: hci0: command tx timeout [ 149.818491][ T5194] Dev loop4: unable to read RDB block 7 [ 149.824116][ T5194] loop4: unable to read partition table [ 149.831754][ T5194] loop4: partition table beyond EOD, truncated [ 149.858774][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 149.950273][ T7459] Invalid logical block size (1263748178) [ 150.027977][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 150.042341][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 150.067512][ T10] usb 4-1: config 0 has no interface number 0 [ 150.084752][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.118855][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 150.171412][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.220443][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.273719][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 150.303421][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.317233][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 150.345288][ T5881] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 150.362494][ T10] usb 4-1: config 0 descriptor?? [ 150.400700][ T5881] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 150.427212][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 150.466277][ T7476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.396'. [ 150.550561][ T7479] capability: warning: `syz.0.397' uses 32-bit capabilities (legacy support in use) [ 150.581181][ T7479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.610060][ T7479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.988864][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 151.014029][ T7491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.112845][ T7498] syz.4.400 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 151.197575][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 151.205262][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 151.217348][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 151.251417][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 151.292741][ T9] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 151.310046][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.348400][ T9] usb 3-1: Product: syz [ 151.362973][ T9] usb 3-1: Manufacturer: syz [ 151.373742][ T5881] usb 4-1: USB disconnect, device number 23 [ 151.403183][ T5881] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 151.410670][ T9] usb 3-1: SerialNumber: syz [ 151.443295][ T9] usb 3-1: config 0 descriptor?? [ 151.521666][ T9] usb 3-1: no audio or video endpoints found [ 151.690774][ T5881] usb 3-1: USB disconnect, device number 26 [ 152.487820][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 152.497791][ T47] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 152.587566][ T5895] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 152.627700][ T9] usb 4-1: device descriptor read/64, error -71 [ 152.647614][ T796] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 152.657084][ T47] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 152.667290][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.677310][ T47] usb 5-1: config 0 descriptor?? [ 152.685494][ T47] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 152.738109][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 152.745674][ T5895] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.754909][ T5895] usb 3-1: config 6 has an invalid interface number: 67 but max is 0 [ 152.763225][ T5895] usb 3-1: config 6 has no interface number 0 [ 152.769541][ T5895] usb 3-1: config 6 interface 67 has no altsetting 0 [ 152.779172][ T5895] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=75.cb [ 152.788422][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.796530][ T5895] usb 3-1: Product: syz [ 152.800944][ T5895] usb 3-1: Manufacturer: syz [ 152.805719][ T5895] usb 3-1: SerialNumber: syz [ 152.817036][ T796] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 152.826942][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.836652][ T796] usb 1-1: Product: syz [ 152.841063][ T796] usb 1-1: Manufacturer: syz [ 152.845684][ T796] usb 1-1: SerialNumber: syz [ 152.868623][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 152.997577][ T9] usb 4-1: device descriptor read/64, error -71 [ 153.028705][ T7514] trusted_key: encrypted_key: keylen parameter is missing [ 153.047654][ T5895] qmi_wwan 3-1:6.67: probe with driver qmi_wwan failed with error -22 [ 153.055741][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.064065][ T5895] usb 3-1: USB disconnect, device number 27 [ 153.077406][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.086083][ T47] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 153.105265][ T796] usb 1-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 153.113973][ T796] usb 1-1: 1:1 : sample bitwidth 9 in over sample bytes 1 [ 153.117717][ T9] usb usb4-port1: attempt power cycle [ 153.124320][ T796] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 153.176127][ T796] usb 1-1: USB disconnect, device number 27 [ 153.199755][ T6381] udevd[6381]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 153.221891][ T6381] udevd[6381]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 153.488415][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 153.490351][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.504950][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.516767][ T47] gspca_cpia1: usb_control_msg 02, error -71 [ 153.525418][ T47] gspca_cpia1: usb_control_msg 05, error -71 [ 153.525456][ T9] usb 4-1: device descriptor read/8, error -71 [ 153.532015][ T47] cpia1 5-1:0.0: unexpected systemstate: 00 [ 153.548637][ T47] usb 5-1: USB disconnect, device number 18 [ 153.604785][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 153.777613][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 153.812000][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 153.822047][ T9] usb 4-1: device descriptor read/8, error -71 [ 153.840918][ T7526] input: syz0 as /devices/virtual/input/input18 [ 153.941625][ T9] usb usb4-port1: unable to enumerate USB device [ 154.146594][ T7535] loop5: detected capacity change from 0 to 7 [ 154.208559][ T47] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 154.369818][ T47] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.403423][ T47] usb 1-1: not running at top speed; connect to a high speed hub [ 154.414967][ T47] usb 1-1: config 4 has an invalid interface number: 106 but max is 0 [ 154.426590][ T47] usb 1-1: config 4 has no interface number 0 [ 154.433232][ T47] usb 1-1: config 4 interface 106 has no altsetting 0 [ 154.444890][ T47] usb 1-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=96.91 [ 154.455327][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.464286][ T47] usb 1-1: Product: syz [ 154.470588][ T47] usb 1-1: Manufacturer: syz [ 154.476234][ T47] usb 1-1: SerialNumber: syz [ 154.482702][ T7541] netlink: 'syz.4.415': attribute type 18 has an invalid length. [ 154.503155][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 154.550511][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.551132][ T7541] netlink: 'syz.4.415': attribute type 18 has an invalid length. [ 154.559834][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.590627][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.600516][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.625530][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 155.096658][ T7551] 8021q: VLANs not supported on caif0 [ 155.290499][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 155.427315][ T7555] fuse: Unknown parameter 'fowner' [ 156.027813][ T796] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 156.074586][ T7559] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.197494][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 156.243652][ T796] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 156.262873][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 156.275133][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 156.305966][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 156.323680][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 156.359695][ T796] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 156.369234][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.379764][ T796] usb 4-1: Product: syz [ 156.384058][ T796] usb 4-1: Manufacturer: syz [ 156.388797][ T796] usb 4-1: SerialNumber: syz [ 156.395676][ T796] usb 4-1: config 0 descriptor?? [ 156.796063][ T7575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.808632][ T7575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.887972][ T5894] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 157.047657][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 157.074155][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 157.100770][ T5894] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 157.120641][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.145018][ T5894] usb 5-1: Product: syz [ 157.154840][ T5894] usb 5-1: Manufacturer: syz [ 157.159587][ T5894] usb 5-1: SerialNumber: syz [ 157.169245][ T5894] usb 5-1: config 0 descriptor?? [ 157.178459][ T5894] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 157.439946][ T5894] gspca_zc3xx: reg_w_i err -71 [ 157.457810][ T796] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 157.474632][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.549071][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.583911][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.613803][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.647191][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.674613][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.707350][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.722353][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.736169][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.744221][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.758155][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.768346][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.796633][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.807911][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.829042][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.837032][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.855258][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.862348][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.871188][ T796] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 157.878077][ T796] input input20: Timeout waiting for response from device. [ 158.067508][ T5894] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 158.079581][ T5894] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 158.112144][ T5894] usb 5-1: USB disconnect, device number 19 [ 158.365030][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 158.447665][ T5894] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 158.619280][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 158.640189][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.660120][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x26, changing to 0x6 [ 158.687570][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 158.717577][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 158.727301][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 158.756830][ T5894] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 158.766370][ T5894] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.775788][ T5894] usb 5-1: Manufacturer: syz [ 158.788019][ T5894] usb 5-1: config 0 descriptor?? [ 159.019700][ T796] usb 5-1: USB disconnect, device number 20 [ 159.102078][ T10] usb 4-1: USB disconnect, device number 28 [ 159.175333][ T47] uvcvideo 1-1:4.106: Found UVC 0.00 device syz (0408:4033) [ 159.185501][ T47] uvcvideo 1-1:4.106: Forcing UVC version to 1.0a [ 159.193482][ T47] uvcvideo 1-1:4.106: No valid video chain found. [ 159.208845][ T47] usb 1-1: USB disconnect, device number 28 [ 159.237518][ T5894] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 159.294167][ T7603] cifs: Unknown parameter 'f,' [ 159.319298][ T7602] 8021q: VLANs not supported on caif0 [ 159.380004][ T796] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 159.418958][ T5894] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 159.427282][ T5894] usb 3-1: config 0 has no interface number 0 [ 159.459705][ T5894] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 159.470241][ T5894] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 159.490956][ T5894] usb 3-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 159.510000][ T5894] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 159.519221][ T5894] usb 3-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 159.527328][ T5894] usb 3-1: Product: syz [ 159.533494][ T5894] usb 3-1: Manufacturer: syz [ 159.542350][ T5894] usb 3-1: SerialNumber: syz [ 159.551182][ T796] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 159.559811][ T796] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.573140][ T5894] usb 3-1: config 0 descriptor?? [ 159.578428][ T796] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 159.590618][ T796] usb 5-1: config 1 has no interface number 0 [ 159.603152][ T5894] ni6501 3-1:0.238: driver 'ni6501' failed to auto-configure device. [ 159.613610][ T796] usb 5-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.641382][ T796] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.653564][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.663060][ T796] usb 5-1: Product: syz [ 159.667378][ T796] usb 5-1: Manufacturer: syz [ 159.672730][ T796] usb 5-1: SerialNumber: syz [ 159.712675][ T796] cdc_wdm 5-1:1.128: skipping garbage [ 159.718323][ T5895] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 159.726484][ T796] cdc_wdm 5-1:1.128: probe with driver cdc_wdm failed with error -22 [ 159.832692][ T7609] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 159.832692][ T7609] program syz.1.440 not setting count and/or reply_len properly [ 159.877607][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 159.885608][ T5895] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 159.898043][ T7610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.434'. [ 159.921628][ T5895] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 159.931576][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.940845][ T5895] usb 1-1: Product: syz [ 159.945301][ T5895] usb 1-1: Manufacturer: syz [ 159.950218][ T5895] usb 1-1: SerialNumber: syz [ 159.958764][ T5895] usb 1-1: config 0 descriptor?? [ 159.966958][ T5895] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 160.178619][ T5881] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 160.199047][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 160.214788][ T5895] gspca_zc3xx: reg_w_i err -71 [ 160.339727][ T5881] usb 2-1: config 1 has an invalid interface association descriptor of length 6, skipping [ 160.353361][ T5881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.364768][ T5881] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.387581][ T5881] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 160.396653][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.405466][ T5881] usb 2-1: Product: syz [ 160.414062][ T5881] usb 2-1: Manufacturer: syz [ 160.419017][ T5881] usb 2-1: SerialNumber: syz [ 160.458031][ T796] usb 5-1: USB disconnect, device number 21 [ 160.671072][ T7629] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.743155][ T7629] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.446'. [ 160.817729][ T5895] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 160.824273][ T5895] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 160.835513][ T5895] usb 1-1: USB disconnect, device number 29 [ 160.907600][ T5894] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 160.997924][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 161.057554][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 161.064704][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 161.076275][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 161.089568][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 161.102888][ T5894] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 161.113980][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.122135][ T5894] usb 4-1: Product: syz [ 161.127771][ T5894] usb 4-1: Manufacturer: syz [ 161.132525][ T5894] usb 4-1: SerialNumber: syz [ 161.147807][ T5895] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 161.157204][ T5894] usb 4-1: config 0 descriptor?? [ 161.171085][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.183015][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.191230][ T5894] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 161.199212][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.224087][ T5881] usb 2-1: selecting invalid altsetting 1 [ 161.251392][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.277498][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.295925][ T9] usb 5-1: Product: syz [ 161.317554][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 161.324591][ T5895] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 161.328241][ T9] usb 5-1: Manufacturer: syz [ 161.345509][ T5895] usb 1-1: config 0 has no interface number 1 [ 161.355844][ T9] usb 5-1: SerialNumber: syz [ 161.358977][ T5895] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.365616][ T5881] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 161.372721][ T5895] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 161.397067][ T5881] usb 2-1: USB disconnect, device number 20 [ 161.406431][ T9] cdc_ncm 5-1:1.0: skipping garbage [ 161.417310][ T5895] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 161.429305][ T5895] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 161.429690][ T5908] usb 4-1: USB disconnect, device number 29 [ 161.439784][ C0] xpad 4-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 161.442384][ T5895] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.461792][ T6382] udevd[6382]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.486749][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 161.499440][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 161.516294][ T5895] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 161.526221][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.536881][ T5895] usb 1-1: Product: syz [ 161.541971][ T5895] usb 1-1: Manufacturer: syz [ 161.546658][ T5895] usb 1-1: SerialNumber: syz [ 161.557949][ T5895] usb 1-1: config 0 descriptor?? [ 161.564000][ T7621] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 161.575987][ T5895] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.590139][ T5895] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.807616][ T5881] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 161.957568][ T5881] usb 2-1: device descriptor read/64, error -71 [ 162.017080][ T5908] usb 3-1: USB disconnect, device number 28 [ 162.217604][ T5881] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 162.377611][ T5881] usb 2-1: device descriptor read/64, error -71 [ 162.442581][ T7629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.473567][ T7629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.487858][ T5881] usb usb2-port1: attempt power cycle [ 162.497341][ T7629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.508954][ T7629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.736276][ T7629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.777971][ T7629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.823680][ T9] cdc_ncm 5-1:1.0: bind() failure [ 162.847647][ T5881] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 162.858490][ T9] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 162.885535][ T9] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 162.896225][ T5881] usb 2-1: device descriptor read/8, error -71 [ 162.904915][ T9] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 162.935571][ T9] usb 5-1: USB disconnect, device number 22 [ 163.137525][ T5881] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 163.179876][ T5881] usb 2-1: device descriptor read/8, error -71 [ 163.271961][ T1208] usb 1-1: USB disconnect, device number 30 [ 163.310544][ T5881] usb usb2-port1: unable to enumerate USB device [ 163.329631][ T5908] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 163.382673][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 163.386163][ T7656] program syz.0.454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.498465][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 163.513989][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 163.529564][ T5830] Bluetooth: unknown link type 242 [ 163.535105][ T5830] Bluetooth: hci0: connection err: -111 [ 163.542086][ T7659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.454'. [ 163.542452][ T5908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 163.563242][ T5908] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 163.585453][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.596246][ T5908] usb 4-1: Product: syz [ 163.601440][ T5908] usb 4-1: Manufacturer: syz [ 163.606180][ T5908] usb 4-1: SerialNumber: syz [ 163.620453][ T5908] usb 4-1: config 0 descriptor?? [ 163.634111][ T5908] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 163.842777][ T5908] gspca_zc3xx: reg_w_i err -71 [ 163.911608][ T7670] netlink: 128 bytes leftover after parsing attributes in process `syz.3.460'. [ 164.008014][ T5895] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 164.183287][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.212846][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.235730][ T7683] netlink: 40 bytes leftover after parsing attributes in process `syz.2.464'. [ 164.252587][ T5895] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 164.289275][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.341401][ T5895] usb 1-1: config 0 descriptor?? [ 164.447520][ T5908] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 164.454191][ T5908] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 164.504842][ T5908] usb 4-1: USB disconnect, device number 30 [ 164.722155][ T7688] syzkaller0: entered promiscuous mode [ 164.761845][ T7688] syzkaller0: entered allmulticast mode [ 164.795128][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.828293][ T7688] 0: reclassify loop, rule prio 0, protocol 800 [ 164.846963][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.887053][ T7692] snd_aloop snd_aloop.0: control 5:6:4:syz1:-2147483647 is already present [ 165.267699][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 165.427540][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 165.437049][ T5895] hid-led 0003:27B8:01ED.0009: probe with driver hid-led failed with error -71 [ 165.455621][ T24] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 165.477129][ T24] usb 4-1: config 0 has no interface number 0 [ 165.484688][ T5895] usb 1-1: USB disconnect, device number 31 [ 165.502106][ T24] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 165.528040][ T24] usb 4-1: config 0 interface 89 has no altsetting 0 [ 165.553692][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 165.580753][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.611854][ T24] usb 4-1: Product: syz [ 165.616075][ T24] usb 4-1: Manufacturer: syz [ 165.640900][ T24] usb 4-1: SerialNumber: syz [ 165.651264][ T24] usb 4-1: config 0 descriptor?? [ 165.675852][ T24] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 165.721268][ T24] em28xx 4-1:0.89: Video interface 89 found: [ 165.730084][ T796] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 165.759861][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 165.898150][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 165.911963][ T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 165.947685][ T796] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 165.967184][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.983935][ T796] usb 2-1: Product: syz [ 165.992997][ T796] usb 2-1: Manufacturer: syz [ 166.003402][ T796] usb 2-1: SerialNumber: syz [ 166.021269][ T796] usb 2-1: config 0 descriptor?? [ 166.050803][ T796] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 166.161304][ T5881] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 166.265832][ T796] gspca_zc3xx: reg_w_i err -71 [ 166.279876][ T24] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 166.337556][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 166.349887][ T5881] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 166.374797][ T5881] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.394678][ T5881] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.405206][ T5881] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.428415][ T5881] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.468286][ T5881] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 166.489383][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.716528][ T5881] usb 3-1: usb_control_msg returned -32 [ 166.722417][ T5881] usbtmc 3-1:16.0: can't read capabilities [ 166.887731][ T796] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 166.894342][ T796] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 166.915386][ T796] usb 2-1: USB disconnect, device number 25 [ 167.017184][ T7763] mmap: syz.0.479 (7763) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.071163][ T7714] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 167.112511][ T5881] usb 3-1: USB disconnect, device number 29 [ 167.640856][ T24] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 167.650734][ T24] em28xx 4-1:0.89: board has no eeprom [ 167.727498][ T24] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 167.736441][ T24] em28xx 4-1:0.89: analog set to bulk mode. [ 167.744613][ T796] em28xx 4-1:0.89: Registering V4L2 extension [ 168.041796][ T5881] usb 4-1: USB disconnect, device number 31 [ 168.068024][ T796] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 168.100219][ T796] em28xx 4-1:0.89: reading from i2c device at 0x48 failed (error=-19) [ 168.101746][ T5881] em28xx 4-1:0.89: Disconnecting em28xx [ 168.157300][ T796] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 168.177567][ T796] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 168.185090][ T796] em28xx 4-1:0.89: No AC97 audio processor [ 168.191917][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 168.237741][ T796] usb 4-1: Decoder not found [ 168.266950][ T796] em28xx 4-1:0.89: failed to create media graph [ 168.327493][ T796] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 168.417792][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 168.480179][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 168.490426][ T796] em28xx 4-1:0.89: Registering snapshot button... [ 168.507608][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.537669][ T796] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input24 [ 168.557848][ T7792] ================================================================== [ 168.565945][ T7792] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 168.573311][ T7792] Read of size 8 at addr ffff88804e684790 by task v4l_id/7792 [ 168.580813][ T7792] [ 168.583234][ T7792] CPU: 0 UID: 0 PID: 7792 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 168.583249][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 168.583257][ T7792] Call Trace: [ 168.583263][ T7792] [ 168.583269][ T7792] dump_stack_lvl+0xe8/0x150 [ 168.583287][ T7792] print_report+0xba/0x230 [ 168.583300][ T7792] ? v4l2_fh_open+0xac/0x420 [ 168.583314][ T7792] kasan_report+0x117/0x150 [ 168.583328][ T7792] ? v4l2_fh_open+0xac/0x420 [ 168.583342][ T7792] v4l2_fh_open+0xac/0x420 [ 168.583356][ T7792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.583373][ T7792] em28xx_v4l2_open+0x157/0x9a0 [ 168.583385][ T7792] ? do_raw_spin_lock+0x12b/0x2f0 [ 168.583397][ T7792] v4l2_open+0x1bf/0x3a0 [ 168.583413][ T7792] chrdev_open+0x4cd/0x5e0 [ 168.583426][ T7792] ? __pfx_chrdev_open+0x10/0x10 [ 168.583437][ T7792] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 168.583450][ T7792] ? __pfx_chrdev_open+0x10/0x10 [ 168.583461][ T7792] do_dentry_open+0x785/0x14e0 [ 168.583478][ T7792] vfs_open+0x3b/0x340 [ 168.583490][ T7792] ? path_openat+0x2df0/0x3860 [ 168.583502][ T7792] path_openat+0x2e08/0x3860 [ 168.583515][ T7792] ? __pfx_stack_trace_save+0x10/0x10 [ 168.583526][ T7792] ? stack_depot_save_flags+0x33/0x810 [ 168.583544][ T7792] ? __pfx_path_openat+0x10/0x10 [ 168.583554][ T7792] ? __x64_sys_openat+0x138/0x170 [ 168.583567][ T7792] ? do_syscall_64+0x14d/0xf80 [ 168.583580][ T7792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.583592][ T7792] ? __lock_acquire+0x6b5/0x2cf0 [ 168.583606][ T7792] do_file_open+0x23e/0x4a0 [ 168.583618][ T7792] ? __pfx_do_file_open+0x10/0x10 [ 168.583633][ T7792] ? _raw_spin_unlock+0x28/0x50 [ 168.583644][ T7792] ? alloc_fd+0x64b/0x6c0 [ 168.583659][ T7792] do_sys_openat2+0x113/0x200 [ 168.583673][ T7792] ? __pfx_do_sys_openat2+0x10/0x10 [ 168.583688][ T7792] ? exc_page_fault+0x6a/0xc0 [ 168.583701][ T7792] ? do_user_addr_fault+0xc6f/0x1340 [ 168.583715][ T7792] __x64_sys_openat+0x138/0x170 [ 168.583730][ T7792] do_syscall_64+0x14d/0xf80 [ 168.583742][ T7792] ? trace_irq_disable+0x3b/0x150 [ 168.583756][ T7792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.583766][ T7792] ? clear_bhb_loop+0x40/0x90 [ 168.583777][ T7792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.583788][ T7792] RIP: 0033:0x7f0046ca7407 [ 168.583798][ T7792] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 168.583808][ T7792] RSP: 002b:00007ffe873ff150 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 168.583820][ T7792] RAX: ffffffffffffffda RBX: 00007f00473b1880 RCX: 00007f0046ca7407 [ 168.583827][ T7792] RDX: 0000000000000000 RSI: 00007ffe87400f1c RDI: ffffffffffffff9c [ 168.583835][ T7792] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 168.583841][ T7792] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 168.583847][ T7792] R13: 00007ffe873ff3a0 R14: 00007f0047518000 R15: 000055c81f7354d8 [ 168.583858][ T7792] [ 168.583862][ T7792] [ 168.879560][ T7792] Allocated by task 796: [ 168.883820][ T7792] kasan_save_track+0x3e/0x80 [ 168.888518][ T7792] __kasan_kmalloc+0x93/0xb0 [ 168.893092][ T7792] __kmalloc_cache_noprof+0x31c/0x660 [ 168.898452][ T7792] em28xx_v4l2_init+0x10b/0x2e70 [ 168.903398][ T7792] em28xx_init_extension+0x120/0x1c0 [ 168.908781][ T7792] process_scheduled_works+0xb6e/0x18c0 [ 168.914342][ T7792] worker_thread+0xa53/0xfc0 [ 168.919012][ T7792] kthread+0x388/0x470 [ 168.923084][ T7792] ret_from_fork+0x51e/0xb90 [ 168.927684][ T7792] ret_from_fork_asm+0x1a/0x30 [ 168.932451][ T7792] [ 168.934752][ T7792] Freed by task 796: [ 168.938716][ T7792] kasan_save_track+0x3e/0x80 [ 168.943389][ T7792] kasan_save_free_info+0x46/0x50 [ 168.948434][ T7792] __kasan_slab_free+0x5c/0x80 [ 168.953205][ T7792] kfree+0x1c1/0x630 [ 168.957095][ T7792] em28xx_v4l2_init+0x1683/0x2e70 [ 168.962219][ T7792] em28xx_init_extension+0x120/0x1c0 [ 168.967497][ T7792] process_scheduled_works+0xb6e/0x18c0 [ 168.973042][ T7792] worker_thread+0xa53/0xfc0 [ 168.977617][ T7792] kthread+0x388/0x470 [ 168.981670][ T7792] ret_from_fork+0x51e/0xb90 [ 168.986245][ T7792] ret_from_fork_asm+0x1a/0x30 [ 168.990993][ T7792] [ 168.993300][ T7792] The buggy address belongs to the object at ffff88804e684000 [ 168.993300][ T7792] which belongs to the cache kmalloc-8k of size 8192 [ 169.007343][ T7792] The buggy address is located 1936 bytes inside of [ 169.007343][ T7792] freed 8192-byte region [ffff88804e684000, ffff88804e686000) [ 169.021311][ T7792] [ 169.023629][ T7792] The buggy address belongs to the physical page: [ 169.030037][ T7792] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4e680 [ 169.038800][ T7792] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 169.047297][ T7792] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 169.054832][ T7792] page_type: f5(slab) [ 169.058804][ T7792] raw: 00fff00000000040 ffff88813fea7280 dead000000000122 0000000000000000 [ 169.067389][ T7792] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 169.075961][ T7792] head: 00fff00000000040 ffff88813fea7280 dead000000000122 0000000000000000 [ 169.084627][ T7792] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 169.093289][ T7792] head: 00fff00000000003 ffffea000139a001 00000000ffffffff 00000000ffffffff [ 169.101939][ T7792] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 169.110587][ T7792] page dumped because: kasan: bad access detected [ 169.116997][ T7792] page_owner tracks the page as allocated [ 169.122712][ T7792] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 796, tgid 796 (kworker/1:2), ts 167810277292, free_ts 167725605762 [ 169.144004][ T7792] post_alloc_hook+0x231/0x280 [ 169.148796][ T7792] get_page_from_freelist+0x24dc/0x2580 [ 169.154341][ T7792] __alloc_frozen_pages_noprof+0x18d/0x380 [ 169.160132][ T7792] allocate_slab+0x77/0x660 [ 169.164652][ T7792] refill_objects+0x331/0x3c0 [ 169.169319][ T7792] __pcs_replace_empty_main+0x2e6/0x730 [ 169.174877][ T7792] __kmalloc_cache_noprof+0x392/0x660 [ 169.180251][ T7792] em28xx_v4l2_init+0x10b/0x2e70 [ 169.185186][ T7792] em28xx_init_extension+0x120/0x1c0 [ 169.190475][ T7792] process_scheduled_works+0xb6e/0x18c0 [ 169.196024][ T7792] worker_thread+0xa53/0xfc0 [ 169.200626][ T7792] kthread+0x388/0x470 [ 169.204709][ T7792] ret_from_fork+0x51e/0xb90 [ 169.209425][ T7792] ret_from_fork_asm+0x1a/0x30 [ 169.214196][ T7792] page last free pid 7759 tgid 7752 stack trace: [ 169.220529][ T7792] __free_frozen_pages+0xc2b/0xdb0 [ 169.225717][ T7792] __slab_free+0x263/0x2b0 [ 169.230134][ T7792] qlist_free_all+0x97/0x100 [ 169.234731][ T7792] kasan_quarantine_reduce+0x148/0x160 [ 169.240232][ T7792] __kasan_slab_alloc+0x22/0x80 [ 169.245090][ T7792] kmem_cache_alloc_noprof+0x2bc/0x650 [ 169.250532][ T7792] ptlock_alloc+0x20/0x70 [ 169.254842][ T7792] pte_alloc_one+0x7a/0x370 [ 169.259328][ T7792] __pte_alloc+0x25/0x1a0 [ 169.263668][ T7792] copy_pmd_range+0x77d2/0x8050 [ 169.268677][ T7792] copy_page_range+0xbe8/0x11f0 [ 169.273532][ T7792] dup_mmap+0xf40/0x1d90 [ 169.277764][ T7792] copy_mm+0x13b/0x4a0 [ 169.281919][ T7792] copy_process+0x18b6/0x3cd0 [ 169.286683][ T7792] kernel_clone+0x248/0x8e0 [ 169.291193][ T7792] __x64_sys_clone+0x1b6/0x230 [ 169.295962][ T7792] [ 169.298354][ T7792] Memory state around the buggy address: [ 169.303973][ T7792] ffff88804e684680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.312021][ T7792] ffff88804e684700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.320083][ T7792] >ffff88804e684780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.328319][ T7792] ^ [ 169.332892][ T7792] ffff88804e684800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.340933][ T7792] ffff88804e684880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.348985][ T7792] ================================================================== [ 169.519335][ T7792] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.526603][ T7792] CPU: 0 UID: 0 PID: 7792 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 169.535576][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 169.546033][ T7792] Call Trace: [ 169.549335][ T7792] [ 169.552309][ T7792] vpanic+0x56c/0xa60 [ 169.556303][ T7792] ? __pfx_vpanic+0x10/0x10 [ 169.560824][ T7792] panic+0xc5/0xd0 [ 169.564560][ T7792] ? __pfx_panic+0x10/0x10 [ 169.568997][ T7792] ? preempt_schedule_thunk+0x16/0x30 [ 169.574555][ T7792] ? preempt_schedule_thunk+0x16/0x30 [ 169.579949][ T7792] ? v4l2_fh_open+0xac/0x420 [ 169.584561][ T7792] check_panic_on_warn+0x89/0xb0 [ 169.589522][ T7792] ? v4l2_fh_open+0xac/0x420 [ 169.594139][ T7792] end_report+0x73/0x180 [ 169.598390][ T7792] ? v4l2_fh_open+0xac/0x420 [ 169.603074][ T7792] kasan_report+0x128/0x150 [ 169.607644][ T7792] ? v4l2_fh_open+0xac/0x420 [ 169.612233][ T7792] v4l2_fh_open+0xac/0x420 [ 169.616665][ T7792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.622662][ T7792] em28xx_v4l2_open+0x157/0x9a0 [ 169.627526][ T7792] ? do_raw_spin_lock+0x12b/0x2f0 [ 169.632742][ T7792] v4l2_open+0x1bf/0x3a0 [ 169.636989][ T7792] chrdev_open+0x4cd/0x5e0 [ 169.641486][ T7792] ? __pfx_chrdev_open+0x10/0x10 [ 169.646417][ T7792] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 169.652753][ T7792] ? __pfx_chrdev_open+0x10/0x10 [ 169.657772][ T7792] do_dentry_open+0x785/0x14e0 [ 169.662535][ T7792] vfs_open+0x3b/0x340 [ 169.666598][ T7792] ? path_openat+0x2df0/0x3860 [ 169.671353][ T7792] path_openat+0x2e08/0x3860 [ 169.675934][ T7792] ? __pfx_stack_trace_save+0x10/0x10 [ 169.681303][ T7792] ? stack_depot_save_flags+0x33/0x810 [ 169.686770][ T7792] ? __pfx_path_openat+0x10/0x10 [ 169.691700][ T7792] ? __x64_sys_openat+0x138/0x170 [ 169.696756][ T7792] ? do_syscall_64+0x14d/0xf80 [ 169.701510][ T7792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.707623][ T7792] ? __lock_acquire+0x6b5/0x2cf0 [ 169.712559][ T7792] do_file_open+0x23e/0x4a0 [ 169.717147][ T7792] ? __pfx_do_file_open+0x10/0x10 [ 169.722170][ T7792] ? _raw_spin_unlock+0x28/0x50 [ 169.727014][ T7792] ? alloc_fd+0x64b/0x6c0 [ 169.731374][ T7792] do_sys_openat2+0x113/0x200 [ 169.736046][ T7792] ? __pfx_do_sys_openat2+0x10/0x10 [ 169.741250][ T7792] ? exc_page_fault+0x6a/0xc0 [ 169.745932][ T7792] ? do_user_addr_fault+0xc6f/0x1340 [ 169.751217][ T7792] __x64_sys_openat+0x138/0x170 [ 169.756065][ T7792] do_syscall_64+0x14d/0xf80 [ 169.760651][ T7792] ? trace_irq_disable+0x3b/0x150 [ 169.765664][ T7792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.771724][ T7792] ? clear_bhb_loop+0x40/0x90 [ 169.776410][ T7792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.782301][ T7792] RIP: 0033:0x7f0046ca7407 [ 169.786711][ T7792] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 169.806399][ T7792] RSP: 002b:00007ffe873ff150 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 169.814813][ T7792] RAX: ffffffffffffffda RBX: 00007f00473b1880 RCX: 00007f0046ca7407 [ 169.822783][ T7792] RDX: 0000000000000000 RSI: 00007ffe87400f1c RDI: ffffffffffffff9c [ 169.830764][ T7792] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 169.838735][ T7792] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 169.846704][ T7792] R13: 00007ffe873ff3a0 R14: 00007f0047518000 R15: 000055c81f7354d8 [ 169.854703][ T7792] [ 169.858077][ T7792] Kernel Offset: disabled [ 169.862398][ T7792] Rebooting in 86400 seconds..