last executing test programs: 10.769616614s ago: executing program 0 (id=399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') getdents64(r2, &(0x7f0000000080)=""/38, 0x26) getdents(r2, 0xffffffffffffffff, 0x7a) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x8, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040090}, 0x20040840) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 10.540522826s ago: executing program 3 (id=401): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f0000000240)="bab7"}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0x5, 0x7, 0x6, 0x4, 0x9, 0x0, 0x3, 0xde, 0x0, 0x10}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000080)={r8, 0x401}, 0x8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x8}, 0x8) 10.528082327s ago: executing program 0 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x18}, 0x4084) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) mount_setattr(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x8c00, &(0x7f00000003c0)={0x100003, 0x2, 0x180000}, 0x20) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000010000000000000000000000000000000b93760000000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a000060000000006ad85c5eb0d459af252f4c763dd639a87c18ccabc252069a64ea01edd2643f7ce2302c4d849346f819f47ab95f021ec4546c903c", @ANYRES64=r4], 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000080) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 9.922978887s ago: executing program 2 (id=406): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x44}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0x10000001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4111, 0x100f}, {&(0x7f00000001c0)=""/229, 0xe5}], 0x4}, 0x8101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23ea4cc149681153151ff9b9e2678dcf5fd3a443da152"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x11a, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="ef0771c3"]}]}]}, 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) readv(r4, &(0x7f0000001780), 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 8.339087052s ago: executing program 3 (id=409): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc00) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000040)=""/66, 0x42}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000100)=""/198, 0xc6}, {&(0x7f0000000200)=""/155, 0x9b}, {&(0x7f00000002c0)=""/188, 0xbc}, {&(0x7f0000000380)=""/34, 0x22}, {&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f0000000400)=""/243, 0xf3}, {&(0x7f0000000500)=""/55, 0x37}], 0xa, &(0x7f0000000600)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000001600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001680)}, {&(0x7f00000016c0)=""/107, 0x6b}, {&(0x7f0000001740)=""/71, 0x47}], 0x3, &(0x7f0000001800)=""/233, 0xe9}, 0x4}, {{&(0x7f0000001900)=@sco, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001980)=""/119, 0x77}, {&(0x7f0000001a00)=""/202, 0xca}, {&(0x7f0000001b00)=""/129, 0x81}, {&(0x7f0000001bc0)=""/220, 0xdc}, {&(0x7f0000001cc0)=""/121, 0x79}], 0x5, &(0x7f0000001dc0)=""/107, 0x6b}, 0x81}, {{&(0x7f0000001e40)=@tipc=@id, 0x80, &(0x7f0000003240)=[{&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/157, 0x9d}, {&(0x7f0000002f80)=""/203, 0xcb}, {&(0x7f0000003080)=""/67, 0x43}, {&(0x7f0000003100)=""/61, 0x3d}, {&(0x7f0000003140)=""/226, 0xe2}], 0x6, &(0x7f00000032c0)=""/37, 0x25}, 0x9}, {{&(0x7f0000003300)=@nfc, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003380)=""/64, 0x40}, {&(0x7f00000033c0)=""/166, 0xa6}, {&(0x7f0000003480)=""/99, 0x63}, {&(0x7f0000003500)=""/23, 0x17}, {&(0x7f0000003540)=""/107, 0x6b}], 0x5}, 0x40}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003640)=""/239, 0xef}, {&(0x7f0000003740)=""/151, 0x97}, {&(0x7f0000003800)=""/111, 0x6f}, {&(0x7f0000003880)=""/138, 0x8a}], 0x4, &(0x7f0000003980)=""/124, 0x7c}, 0x6}], 0x6, 0x2020, &(0x7f0000003b80)={0x77359400}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000003bc0), 0x2200, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000003c00)=0x9) (async) inotify_init() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003c40)={'netpci0\x00', 0x0}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000003c80), 0x102, 0x0) (async) r5 = io_uring_setup(0x77c5, &(0x7f0000003cc0)={0x0, 0xf137, 0x80, 0x1, 0xe}) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000003d40)=[r2, 0xffffffffffffffff, r4], 0x3) (async) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003d80)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x28, '\x00', r3, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) pipe2(&(0x7f0000003e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003e40)={0x1b, 0x0, 0x0, 0x2, 0x0, r6, 0x6, '\x00', r3, r7, 0x1, 0x5, 0x3}, 0x50) (async) chdir(&(0x7f0000003ec0)='./file0\x00') (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000003f00)={'TPROXY\x00'}, &(0x7f0000003f40)=0x1e) (async) ioctl$SNDCTL_DSP_GETOPTR(r8, 0x800c5012, &(0x7f0000003f80)) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003fc0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000004000)={0x9, 0x2, 0x4, 0x0, 0x12}) (async) flock(r5, 0x5) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000040c0)={{r7}, &(0x7f0000004040), &(0x7f0000004080)=r7}, 0x20) (async) mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1, 0x8010, r8, 0x83000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x110, r7, 0x8000000) (async) close_range(r10, r9, 0x0) r11 = semget$private(0x0, 0x2, 0x408) semctl$GETNCNT(r11, 0x4, 0xe, &(0x7f0000004100)=""/11) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f00000041c0)={&(0x7f0000004140)=""/85, 0x55, 0x7, 0x5}) (async) accept4$inet(r1, 0x0, &(0x7f0000004200), 0x0) (async) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r7, 0xc0305615, &(0x7f0000004240)={0x0, {0xffff, 0x1}}) syz_usb_disconnect(0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000004400)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x8003a400}, 0xc, &(0x7f00000043c0)={&(0x7f0000004340)={0x48, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x7a}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfa2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x451}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x24000000) 7.892988821s ago: executing program 3 (id=410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="09000000180001000000200000000000021400000000000a0000000005001b0002000000"], 0x24}}, 0x4000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x406}, 0x20) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES16=r0], 0xd0}, 0x1, 0x0, 0x0, 0x4008801}, 0x4008090) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="9f9eef9830a553c470a2cf5ea5ac17b09e6fa4bc71e21ed04f8b95d52dd10bedaf9a1b99c862714fbe3061dbc506d3c216481d3c9a289278eb489dcb118d58ead99a7013990d09be0d28691993ef233b9247488babd754e61d466892d1c95b44c7c2db3623", @ANYRES16], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x42}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000100)={'syz_tun\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket(0x400000000010, 0x80000, 0x4008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x81&\xf5\t\x00\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xa9J3\x18\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V\x01\x00\x00\x00\x00\x00\x00\x00\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOe+\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\x99I\x9a9+r\x91\x06\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx', 0x3) write$binfmt_elf64(r8, &(0x7f00000002c0)=ANY=[], 0x78) sendfile(r7, r8, &(0x7f00000001c0), 0x8) fcntl$addseals(r8, 0x409, 0x8) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES8=r5, @ANYBLOB="a3bf958160d868e3ee8ab342f1f086d6f0f5e0e2399a2a5bd7848f26c648365e54019cfa6ded6359075167d926", @ANYBLOB], 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433c4"], 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000007c0)={0x1, @sliced={0x2, [0x3f, 0x6, 0x6, 0x10, 0x9cc4, 0x4, 0x99b5, 0x438, 0x2, 0x7, 0x3, 0x4, 0x2, 0x7, 0x0, 0x1ff, 0xfff7, 0x388f, 0x8, 0x4, 0x4, 0x5, 0x8000, 0xa, 0x5, 0x8, 0xf61, 0x819, 0xf505, 0x0, 0x0, 0x7, 0xa160, 0x6, 0x4, 0x75, 0x6, 0x9f4, 0x7fff, 0x0, 0x7, 0x401, 0xf43e, 0x4, 0x800, 0x6d4, 0x6, 0x5], 0x6d1}}) 7.659315724s ago: executing program 0 (id=411): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38011, r0, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00a4c199d4cf4874d9000800080001000c00ffffffff000000001000000000"], 0x24}}, 0x24000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 6.842189304s ago: executing program 0 (id=413): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="623e81d1037e3a00fc000000000000000000000000000000fc000000000000000000000000000000ff0b"], 0x3a6) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 6.545169171s ago: executing program 2 (id=414): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x1ae, &(0x7f00000003c0)=""/4085, 0x0, 0x0, '\x00', 0x0, 0xf3}, 0x94) 6.305102456s ago: executing program 2 (id=416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) mount_setattr(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x8c00, &(0x7f00000003c0)={0x100003, 0x2, 0x180000}, 0x20) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000010000000000000000000000000000000b93760000000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a000060000000006ad85c5eb0d459af252f4c763dd639a87c18ccabc252069a64ea01edd2643f7ce2302c4d849346f819f47ab95f021ec4546c903c", @ANYRES64=r4], 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000080) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 4.536974734s ago: executing program 0 (id=423): r0 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x100, &(0x7f0000000000)=0xf4, 0x0, 0x4) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000900)=ANY=[@ANYBLOB="12011003000000086b1d010140000102030109025f0003010040090904000000010100000a240108000102010209040100000102000009040101010102000009050109000200030807250101080800090402000001020000090402fc010102000009058209080001f20507250180c005007c5ea4fe9eca016082fa5b7249fa2e4fef488ec7a51f63915cd384eaec94605cd229e7b7e2c298336adc4cb9f97ef279e37dd16db9a298e4e4e760f4b3540040639d9156ee937a37e65fba9827f2e905b9e73a907373d3688826d80534f58cfc0f4e873e5a29dc41d9946cc26c54dc289f113f68a203082525"], &(0x7f00000008c0)={0x0, 0x0, 0x3a, &(0x7f0000000540)=ANY=[@ANYBLOB="050f3a00034314100afd22000000000f07005f000000003f00001510049ce9a87ec521263bbbb0398c7bad98901e2a0c100a09e008000000e0ac"]}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f00000024c0)=0x10000, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="8ffeffff", @ANYRES16=r5, @ANYBLOB="010002000000000000001200000008000900080000000000080002ed0000080007000600000008000900f00600000800090004000000740001801400020070696d36726567310000000000000000140002006c6f00000000000000000000000000000000020073797a6b616c6c65723100000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f30000001000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x820000, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC, @ANYBLOB="2c670aac408702d596726f7547b4696413", @ANYRESDEC, @ANYBLOB=',default_permissions,allow_other,default_permissions,max_read=0x0000000000000001,max_read=0x0000000000000002,measure,func=KEXEC_KERNEL_CHECK,\x00'], 0x1, 0x0, &(0x7f0000000580)="fc31889772861542c31c46ada69cdabf88f41aa43d6eda0cc0eef0958c31af2b2b12b2a063ac8cdd41a03c4c83b9f209f8c3e9082d30fae499e42dd5943a4bebdc1d3112be3293cf79432c89463829b783c7b168d506771b3e42d69a901294bf4b695141e3fe72a0aa433bf1d434854d1368be7167e1ba9c43d572ecd0fbb0b47dc2c8c8b6f6aba61c3a916da92dea50cbaa810960f7db78a16b71917ff85732ced42b879b795aebedf6fe6cbec16290a36394de0cdf976c05995dfb3282a753419f3ffc5caf337e0f9f23b5d5d89ff4b7cbae086af12dbc9524e5f08e6cba1d8dc2c08565136fb7c4b97010d60a3582bff0182230148d") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2c0c2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8007, 0x0, 0xb49, 0x200000000001, 0x6, 0x8, 0x5}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002d00)=@delchain={0x43c, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xf, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xd39, 0x8000, 0x4, 0x1, 0x7fffffff, 0x6, 0x6, 0x7, 0xffff, 0x3896330b, 0x0, 0x10000, 0x2, 0x8, 0xf, 0x2, 0x2, 0x0, 0x9, 0x7, 0x10001, 0x5, 0xc3, 0x0, 0xe, 0x3, 0x5, 0x6, 0x800, 0xbac, 0x200, 0x5, 0x10, 0x0, 0x9fe, 0x2, 0xfffffffc, 0x0, 0xffffffc0, 0x7, 0x10000, 0x2, 0x7, 0x0, 0x5, 0x100, 0xfffffffe, 0x6, 0x3, 0x803, 0x4, 0x1000, 0x3, 0x7ff, 0x2, 0x8, 0x1ee, 0x200, 0x2, 0x3ff, 0x102000, 0xffffffdc, 0x0, 0x0, 0xfff, 0xfffffffa, 0x200, 0x9, 0x8, 0xfffffbff, 0x1, 0x19, 0x7, 0x0, 0x8, 0xffffffff, 0x7f, 0x8, 0x3, 0x2, 0x1000, 0x8, 0x2, 0xfffffffe, 0x1, 0x7fffffff, 0x8, 0x5, 0xe, 0x8, 0x3f, 0x81, 0x1, 0x1000, 0x0, 0x60, 0x7, 0x3, 0xcb, 0x5, 0x3e97, 0x400, 0x3ff, 0x0, 0x8d13, 0xff, 0x5, 0x4, 0x21ad, 0x2, 0x1, 0x8, 0x8001, 0x1, 0x80000001, 0x1ff, 0x10000, 0x5, 0x101, 0xb4b4, 0x3, 0x1, 0xc, 0x8, 0x2, 0x80000000, 0x8000, 0x9, 0x1, 0x9, 0x1, 0x7, 0x6, 0xc2c9, 0x2, 0x1e9, 0x4, 0x0, 0x4, 0xfffffffa, 0x80000001, 0xff, 0xfffffffb, 0x400, 0xb0d, 0x7, 0xffffb6f2, 0xe, 0x4, 0xe, 0x5, 0x80000000, 0x8a3, 0x2d8, 0x1, 0x6299, 0x7439, 0x1, 0x6, 0x6, 0x400, 0x0, 0x5, 0x9, 0x10000, 0xfffffff6, 0xf, 0xfffffffc, 0x38, 0x5, 0x0, 0x3, 0x5, 0xe, 0x8, 0x252d, 0xfffffffe, 0xfffffffd, 0x3, 0x200, 0x0, 0x4000000, 0x9, 0xfffffff7, 0x0, 0x2, 0xf, 0x5, 0x8, 0x4000003, 0x6, 0x1, 0x8, 0x4, 0x200000, 0xfffffff4, 0x0, 0x7, 0x431e, 0x0, 0x8000000, 0x2, 0x831, 0x180000, 0x1, 0x8a1, 0x5, 0x5, 0x8, 0xffff8000, 0xffffc917, 0x9, 0x4, 0x4085, 0x40, 0x80000000, 0xdc42, 0x0, 0x7, 0xffffff7d, 0xf805, 0x6, 0x45, 0x2, 0x0, 0x8, 0x200, 0x0, 0xfffff8fe, 0x1, 0x5, 0x2, 0x80000000, 0x4, 0x1000, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xfff, 0x8, 0x81d, 0x45a, 0x3, 0x2, 0x7fdde78e, 0x7f, 0x80, 0x5, 0x3, 0x7, 0x80, 0x7993]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_bcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/233, 0xe9}, {&(0x7f00000004c0)=""/74, 0x4a}], 0x2}, 0x20) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 4.009690808s ago: executing program 3 (id=424): socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = getpid() (async, rerun: 32) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x4480, 0x0) (rerun: 32) syz_pidfd_open(r2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0xa, 0x147b42) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) (rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r4}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000000000000000040"]) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (rerun: 32) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) (async) r10 = dup(r9) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 3.926597114s ago: executing program 1 (id=425): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x200164}, &(0x7f0000000dc0), &(0x7f00000001c0)) (rerun: 32) io_uring_register$IORING_REGISTER_FILES(r5, 0x23, &(0x7f0000000100), 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060108000000000900020073f97a300000000000000500156872f7f5020000001b0005000a000000050004000000000014000780080011400000000000000b40000028e5110003006269746d61703a706f72740000000000000000003d3aac2473251d0e4767ede6fea8142d2b24a2cb0380523caf6a11740f1c50e38b778182c9fdaf293e3a372b3b31e279edb985df5f0800000000000000ab8b334c9f97d8ac2509a15749bf3543e9c477316258ce83c0f7df4f863a91067826825f69b31b"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) (async) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000000), 0x0, 0x0, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0x8004ae98, 0x20e10000) (async) r10 = dup(r0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2000) (async) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 3.397115563s ago: executing program 4 (id=426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000500bfa100000000000007010000f8ffffffb7020000ffffff1fb703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x1ae, &(0x7f00000003c0)=""/4085}, 0x94) 3.352860398s ago: executing program 4 (id=427): utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x8000b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40840) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f6870000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xf}, {0xffff, 0x6}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x100000}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0x10001, 0x20000) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x8) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) futimesat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={{}, {0x0, 0xea60}}) 3.216860398s ago: executing program 1 (id=428): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlinkprop={0x28, 0x6c, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1646, 0x2}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048040}, 0x804) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) write$binfmt_misc(r1, &(0x7f0000000400)="60334d00e1e6224e6d253c6eb5066f0d07b2da1c8f981d88b4a2cb824156b1d51ddfc1739d4dbc246161639b0852d660c150a4075567866fa3ae56778068f79769268742b4074fee33be120f048b8a7c186893884071cb060e9b838b5e0b9a520cffb102773708aac763773eb8d7de3e37ade78b4e407bdd2c8bb1b0233f286cab056d7e36172aebc5629cf7bf43dc987f05934b6d1c34f00608579d440d7c6ed81c515514d132e24dd8d36aa70e0128ffeeab3b", 0xb4) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 3.089011493s ago: executing program 2 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x280, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x2a9, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x9, 0x81, 0x89, 0xb, 0x14}}, @TCA_RED_PARMS={0x14, 0x1, {0x80000000, 0xff, 0x3, 0x5, 0x1e, 0x1b}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1ff}, @TCA_RED_FLAGS={0xc, 0x4, {0x8}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x14, 0x7}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x8800}, 0x4000010) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11079, 0x2b}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc}}}, @IFLA_IFALIASn={0x4}, @IFLA_LINKMODE={0x0, 0x11, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 3.087107901s ago: executing program 4 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800dd8d0000000000000017020000000000000500000000060015000500000028001680240001000002"], 0x4c}}, 0x0) (async) socket(0xf, 0x4, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) r3 = socket(0x1, 0x80000, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f000022c000/0x3000)=nil) (async) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) (async) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) (async) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)=ANY=[@ANYBLOB="ffff0100000024"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r7, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x20, 0x26, 0x71, {0x71, 0xf, "decf9c91b8fe0b5572404b276c1b4d4176f18b9955cf5256bc443f3791703eabf3687a10672987abd4eb41fc25faf9318c96eccb2d9bcc69aa1e9d59ecd38b7a175f339c2845a8c3ca2b084bd27e88a2b1966dbca51885ca31603c5c01ac8c0f3af60d3499b455f9ab807ba098b044"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400f}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x40, 0x16, 0x62, "d5e13fe440c1486d35888ce204aadf3a74e76816abd3d4cb686a18c3f1053156d48f55eb0d57ca74bea39c4ba0450f5eb190cbcbd9ce8d1cb8c19756b72eea18b02d3cdd65d95843a8f53390a8b3b61674343712f5d71367d21160724c2ad2d2d9c4"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)=ANY=[@ANYBLOB="208201f93e00c2aad107035f39a17bc45cc79c27648c2b1733ac964831f8ce72379b844304b6ff00e52c16138f6b7126b8d19afd981ae86707"], &(0x7f0000000480)={0x20, 0x83, 0x3, "bc4445"}, &(0x7f00000004c0)={0x20, 0x84, 0x1, "0e"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "37fd46"}}) fsopen(&(0x7f0000000280)='efs\x00', 0x1) 2.882802707s ago: executing program 4 (id=431): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x2012, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket(0x9, 0x1, 0xe1a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x7]}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x4, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x100, 0xa, 0x0, {0x0, r6}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x144020080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004114}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300", @ANYRES16], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) close_range(r7, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rfcomm\x00') 2.813734741s ago: executing program 1 (id=432): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000140)=""/186, 0xba}], 0x1, 0x236, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000), &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x2, 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000200)={r4, r8, 0x0, 0x488c, 0xfffff000, 0x2, 0xb, 0x8, 0x8, 0x2, 0x0, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r10 = accept$alg(r9, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="b6"}, {&(0x7f0000000580)="b1cdc0a92435041e6be063329729ef5e76ad3fe345f5049c645eea4edf3eac61ac6125c4382bea15999372651c0bedb101c6de3cefe71b3c94b24b07b8aafdf4bdcc2569b869280ee381d3e45f30dbd8e28014119a6036cb506f7a2b2a5039de729d400860c16bc46bebeacfb205403097943553bbef64d6a817d60ca21b7944848733b0e4e78d36219fe86bf2274f10f977fa07fbc307484bc1feaf02343682711f9e4f55c773e427969ba85891fcf67bd340694e5cb9d5c00f376b9c56c24a7515286a8f0955784b81819d216b26cb77c27d976c9faeba5c250cac", 0xdc}, {&(0x7f00000007c0)="67a9692bdd01faed906c6411d8c3a7e0037340873e5a1f6e59dd24d02cac6a000e0000000000000000c5157b4b67317e2e9d65f6f94b47bb606a3b5972a27beec2880dae2aaf9fdf76039f47a0e9956f24bb4a2d94a5a46c4bcc8731b57e2dd876b270bfc262781bfefe470234d1af7089438b0300a46e3098df7afc754445be4f47dfc5548d483f2c9f1608e91ee2050fbbc9ab46e0fddf55f35049c188aaf606ec39f8e96e680d1c0e65", 0xffffff41}, {&(0x7f0000000680)="3568ced1970359734f553b38b7e823cd3e4b260c303ab8f70591545b2a2b14963069f94c3ca955f4bb502b1aeb095ad4c1b37b6b3b62288dfdd4c0b492978a19052e6e96eda0c016236e84100e5f5575853b502832362059529b4c31113a6c6befe743f70b26074f05cb699444c998bd9ed5b1765520c1581b18941abd3d3bd35902afb1637275c1924c35613d7c627f9478b466be188e7ca7b352919595291d82e87bc3127bc04a8575397369098197bc477a5f71b6e53cf90a926505375904", 0xc0}, {&(0x7f0000000980)="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", 0x51}], 0x5, 0x0, 0x0, 0x20040890}, 0x2404c800) 2.676651422s ago: executing program 3 (id=433): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0, 0x0, r4}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fc40)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) (async) r8 = socket(0x80000000000000a, 0x2, 0x0) syz_emit_ethernet(0x51a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) (async) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xc}}}, 0x108) (async) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000001f40)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x4, @remote, 0x1}}}, 0x108) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, &(0x7f0000000340), 0x0, 0x10, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="d14feb62fdc6a2666cd005c2afdafd4be1440d2b557be053f24490e1f3", @ANYBLOB, @ANYRES8=r3, @ANYBLOB], 0x48) r10 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, &(0x7f0000000340)={0x3, 0x0, [{0x0, 0x3ff, 0x7, 0x401, 0x32, 0x7fff, 0x2}, {0xb, 0x4, 0x6, 0x4, 0x354b0e08, 0x6, 0xf5}, {0xc0000001, 0xc, 0x2, 0xbe24, 0x5, 0x10000, 0x1}]}) (async) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) sendmmsg$inet6(r10, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000003980)}}, {{0x0, 0x0, &(0x7f00000000c0)}}, {{&(0x7f0000000a40)={0xa, 0x4e24, 0x8, @mcast1, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000a80)="506e4850d32745f39fa2408eb88c77bdf90ca407559772b0", 0x18}, {&(0x7f0000000ac0)="fd9d79070b696c802c00a6b601409300", 0x10}, {&(0x7f0000000b00)="be62cbc0e945f173db918192c8b2e13b9356cd8da8bae1db5b", 0x19}, {0x0}], 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="a80000000000000029000000370004002c11000000000000c2040000000802840277a2fed5be41da6beba139f5baacf19e86d7f2fe44edd66d3fae7a0610cf83bef5b09da90cb6f34a444127d84b06a1f69b668bfcc9dfe94ba52dc501b166aa2c97200b610b2980f2ecf239b2944207d15527e07766ea12332d5746ac64a20281a9693d2eb06993bb9dbbf72c3d4ca95895bc1b75845502399455b360a040131c3d2c14ea1ae069a6add0000100001400000000000000290000000800000003"], 0xc0}}, {{&(0x7f0000000e40)={0xa, 0x4e21, 0x6, @loopback, 0x8}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000e80)="94c97b64d018d6798f94df1de4899326b2d93a64077713a12c709b2feae6156d9ba926c230c197ae10ec535cd132732c3c5d706e448c1b28634048a278cb431191df33914dbf08c1554b2ef1d16ff856f3bb78d6f199239e4020d6d070cc5a4b6370a80aa4436afb651c710a375c2addc8d8eea4c5c9813aec4742ee361b6e6408f2d02f8b8121e959c890bd3b4fee880e68e96692f06005cb9612a26953d5bc5bd02df8c247", 0xa6}, {&(0x7f0000000f40)="4d33726a22719de9608b6924837326f8c63358093f19b2ec99606df113b97a3aaa240f92", 0x24}, {&(0x7f0000001d40)="9a23ecfbe4c570557a8005e57fdec9186870ef17e08544f8aec6c13b9576463c0d409b54786dabf4aac02ee9099cc0e312cfec9dac314121e34c6e0b445b085757151e4a11fd268cc0d6f032daa009a48d", 0x51}, {&(0x7f0000001dc0)}], 0x4, &(0x7f0000002080)=ANY=[@ANYBLOB="780000000000000029000000390027a95280020200000000fe8000000000000000000000000000aafe8000000000000000000000000000bbfc020000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000bb000000000000000000000000000000001400000000000000290000003e0000000400dbc6df2e9d2413120000000000780100000000000029000000040000003a2b000000000000c204000007abc20400000009040106fefffe187cb413ceb9bad7b3e23f8dd95bfefa263c4ce7f23f8ee4a8aaea3697785d253e9f473e3d84b097301c80020e204355f21c5a4385e5654e1804ab6eea35614ca9db6b67cea187a9302f133192ae03bc47fc09ff7826b1ef50e62a9445ff1cc80bb748dd5ab8bb4b5e9e55ddebddbb057888d733e7c687c67b39b7607627203d8ccd979effefc24c463d99471b5c781dda4ad7b42124d53ebc1dfdd5ef5763bde9572590643b5b529866b8e6bd95cdabe182cdc5f4faae0600000000000000b20c718f550bd5612398ab093d7a9875b98bbcbad5ee419fe212727a74d8f7889bd8b33184c3dad314721203adcbd214e5bb387cad0738000000030c0406001000000000000000080000000000000000000000000000000500000000000000000000000000000153000000000000000502fd8d0401e005020008010100a8040000000c000028bf01000000000029000000360000002101000000000000000100040108040110"], 0x230}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000011c0)="1395ed98d887b0d8341000e3d78c973f897c0c23828c61d2e8d8c5517c3c3d31cff360d5c940bef00fa3cd3b73a5630e5fbf2ab7b06e635c10ad3014206c4a9b7ff0ec14e6ad3306336a5a472b3eb9433e512b5184156741f85c3d63f94a5332f451e1dcb117c2948fe48133deffedae2d61e3c7562943aa00d7", 0x7a}], 0x1, &(0x7f0000001280)=ANY=[@ANYBLOB="280000000000000029000000390000008702010800000000ff020000000000000000000000000001280018000000000029000000390000000c02020300000000ff01000000000000000000000000000120000000000000002900000036000000040a42f22e5817888d040000ffff00001400000000000000290000000b0000007fffffff000000001d0400fb000000002001000000000000000000000000000000000000000000000000ffffac1414bb"], 0xc0}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001400)="fa356fa15fc134c422ac8a4181a386486fd93be52c5b8abf7b018a0cb849f6c1300d93a1fb58eb6e98d1037bb7fff2fa352a0225238eadc02c918cd248eabf1687e562111d64c40c0581f484620882738ab5d3099198e4fa5a8fee3d9458f528c672f14e6249b4e8f9ba13a2ec78a5dd17c3ac661e13d2a6e33b438451495c5bab799f890f5c4ddad2ed14776eead789ad9ac4980dc4", 0x96}, {0x0}, {&(0x7f0000001600)="f4433d65197802469ad096fdb28e93fc3df4176d2ac4239d00eb40c4e531358c5b259b8464281b12340141f81973ee967abe29cfa7394acdfc76a87d7071cccc6575042475de5d4d55bcc64a9882dc1bdbfa1e31a81327605a6fcdc2635e391eb30b1590e7581324caf947e722f97fdda6eff3bbf3681a39df1329d497c5807f3a0d1d46f24c44c55973b6cfcec7e1212454755611226d851d0877118a170c1ea7d8edd2843467fe0b4d25ef2fd23d381f4f592aca5697f38140b22acbcb5be701f5a658bf0d9285d2c2b58c70ed6e7e39878f716fc76d959222c6d225d8fbaa59c5c819aa82104bc4513d7378c1ec628a5221362c604f3e", 0xf8}], 0x3}}, {{&(0x7f0000000a00)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000a00), 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="60000000000000002900000037000000000800000000000004010905020d730720000000010680060000000000000000000300000000000000d30000000000000005020100071000000003020305000700000000000000050200850401a00000a80000000000000029000000390000002e120204000000000000000000000000000000000000000100000000000000000000ffffe0000001fc01000000000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001ff020000000000000000000000000001fc00000000000000000000000000000000000000000000000000ffffac1e0001fe80000000000000000000000000000f14000000000000002900000034000000040000000000000014000000000000002900000043000000ff0f0000000000001400000000000000290000000b0000000000080000000000a0000000000000002900000036000000161000000000000007180000000204850c00d8c300000000000007000000000000000730000000030a7a04000600000000000000010000000000000001000000000000000700000000000000522ff17a0000000007180000000204400900010001000000000004000000000000000502ffffc9100000000000000000000000000000000104010b0502000c0000000000480000000000000029000000370000001d06000000000000c204000000020728000000010805090000000000000000000500000000000000010000000100000004760000000000001400000000000000290000003e00000001000000000000001f8178515c63c74af4f62a2214cdfdfd8db4178f846eb71d7084a3fe3546a18ee42b26725e9fc6eecbe3aa4948c94844c15f22718c8e1b5fe9145d027b066210a27c8d2f026a096d6bce88427d780ded5fb9a9ecd74059898a58d49d555ad59880a198c0eafdb96ff382f485a7cf70e1bab774ae6b20f799612ebe86988b37faa143e073f90612473a9e69fd0135a7d9995cea774d9924ee71a9a40848fb08b191cbbc39f30297bd010f5d8569ad7d456971abe9deb7e1a391463a30bc7d9dc999bc037e4beda080fd42905555cdd68db7d5ed55c4a6ec27efd16d6d3167fc18167d4effd81efce2377d1e6079559db949ba626093c4645f3e86a5c590d72a821cc84d938e840752862fc425a52c1adfbf8029776004fe6f67495789c18fb39ded214839ffbb3404eb0c7a683a3f49acbbe5c498809bdf4338d5df671d9af752c855d31506deec84624d4462b6ce2503b8efa0000e8271bac83aa54af1738d03b231e7775bc4b5ab393067dfb965c7e5a7f55d2260a0f20ef49fd0db3805e21ee9f4629b463300b51eb0"], 0x250}}], 0x7, 0x4001c40) 2.675852948s ago: executing program 2 (id=434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8030ca8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8000, 0x81, 0xfffff801, 0x4]}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000088}, 0x8c40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x800000}, 0x10) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0xfdef) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) rt_sigtimedwait(&(0x7f0000000140)={[0xfffffffffffffff7]}, 0x0, 0x0, 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private1, 0x7fff}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000001580)={0x0, @in6={{0xa, 0x0, 0x0, @private1}}}, &(0x7f0000001640)=0x90) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.028328048s ago: executing program 4 (id=435): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = open(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e3042, 0x9c) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = dup(r7) ioctl$KVM_SET_XCRS(r8, 0x4188aea7, &(0x7f00000004c0)={0x1, 0x4, [{0x408, 0x0, 0xfffffffffffeffff}, {0xfffff3e8}, {0x8, 0x0, 0x100}, {0xffffffff}, {0x800, 0x0, 0x9}, {0x101, 0x0, 0x8000}, {0x4, 0x0, 0x4}, {0x7fff, 0x0, 0x9}, {0x9, 0x0, 0x8}, {0x65fe, 0x0, 0x5}, {0xc26e, 0x0, 0xd48}, {0x1620000, 0x0, 0xfffffffffffffffe}, {0x7, 0x0, 0x2}, {0x99a, 0x0, 0x7}, {0x8, 0x0, 0x7fffffff}, {0x1, 0x0, 0x8}]}) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_dev$tty20(0xc, 0x4, 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) setpriority(0x1, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x3, 0x14002}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) 1.426725483s ago: executing program 0 (id=436): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x50003, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) 1.261064618s ago: executing program 1 (id=437): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00004000bfa100000000000007010000f8ffffffb7020000ffffff1fb703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x1ae, &(0x7f00000003c0)=""/4085}, 0x94) 1.142743516s ago: executing program 1 (id=438): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r1, @ANYBLOB="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"], 0x8c8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x401, 0x100000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) 206.308777ms ago: executing program 1 (id=439): r0 = getpgrp(0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x6, 0x10000045, 0x8, 0xfffffff6, 0x7fff, 0x0, 0x266, 0x4}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b00010100c06a2e09f256e89683e900090400000207010100"], 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x604, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00'}) (async) r3 = getpid() (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) (async) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0xff5e, 0x6, 0xfd}]}) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0xa8840) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) (async) socket$unix(0x1, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) (async, rerun: 64) read(0xffffffffffffffff, &(0x7f0000000340)=""/24, 0x18) (async, rerun: 64) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) (async) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x2a0401, 0x0) (async, rerun: 32) syz_usb_connect(0x2, 0x3f, &(0x7f0000000880)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=440): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010102, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0xfffd, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x80000000}, 0x6, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in=@empty, 0x4d2, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x80, 0x400, 0xfffffffd}}, 0xe8) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000013002f0a253d70000000000007006800", @ANYRES32=r2, @ANYBLOB="000900001020060024000c800900010076"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): 580417.810:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa63918d710 code=0x7ffc0000 [ 129.940999][ T30] audit: type=1326 audit(1760580417.810:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa63918eacb code=0x7ffc0000 [ 130.007043][ T30] audit: type=1326 audit(1760580417.810:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa63918eacb code=0x7ffc0000 [ 130.081136][ T30] audit: type=1326 audit(1760580417.830:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 130.169641][ T30] audit: type=1326 audit(1760580417.840:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 130.195299][ T6365] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 130.217630][ T5922] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 130.265116][ T30] audit: type=1326 audit(1760580417.840:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 130.364444][ T30] audit: type=1326 audit(1760580417.840:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 130.369607][ T5922] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 130.407793][ T6365] usb 3-1: Using ep0 maxpacket: 16 [ 130.413377][ T5922] usb 5-1: config 0 has no interface number 0 [ 130.430868][ T5922] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.452743][ T5922] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.464498][ T6365] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 130.474712][ T6365] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.476512][ T5922] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 130.505200][ T30] audit: type=1326 audit(1760580417.840:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 130.547818][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.605159][ T6365] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.638067][ T6365] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.647745][ T6365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.677771][ T6365] usb 3-1: Product: syz [ 130.686757][ T5922] usb 5-1: config 0 descriptor?? [ 130.687568][ T6365] usb 3-1: Manufacturer: syz [ 130.716737][ T30] audit: type=1326 audit(1760580417.840:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 130.743873][ T6365] usb 3-1: SerialNumber: syz [ 131.109685][ T5922] uclogic 0003:28BD:0905.0003: Interface probing failed: -22 [ 131.117505][ T5922] uclogic 0003:28BD:0905.0003: interface is invalid, ignoring [ 131.182629][ T6365] usb 3-1: 0:2 : does not exist [ 131.480200][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 131.726605][ T6396] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 131.814410][ T6573] program syz.1.138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.034752][ T6571] netlink: 104 bytes leftover after parsing attributes in process `syz.3.141'. [ 132.093803][ T6573] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 132.105737][ T6573] Cannot find add_set index 0 as target [ 132.249188][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.295129][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.758136][ T6365] usb 3-1: USB disconnect, device number 10 [ 132.926014][ T6589] fuse: Unknown parameter 'r' [ 133.249277][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.256188][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.328789][ T5921] usb 5-1: USB disconnect, device number 7 [ 133.367618][ T6396] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 133.373513][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.402062][ T6589] vlan2: entered promiscuous mode [ 133.446229][ T6589] vlan2: entered allmulticast mode [ 133.476344][ T6589] hsr_slave_1: entered allmulticast mode [ 133.564667][ T6396] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.575050][ T6396] usb 1-1: config 0 has no interface number 0 [ 133.594989][ T6396] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 34207, setting to 8 [ 133.650275][ T6396] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 133.683483][ T6396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.728715][ T6396] usb 1-1: config 0 descriptor?? [ 133.756429][ T6590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.797342][ T6396] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 133.999618][ T5922] usb 1-1: USB disconnect, device number 9 [ 134.137790][ T6396] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.382851][ T6396] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.405759][ T6396] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 134.429568][ T6396] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 134.457668][ T6396] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.496874][ T6396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.681338][ T6396] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.688371][ T6406] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.892439][ T6406] usb 4-1: Using ep0 maxpacket: 32 [ 134.908311][ T6406] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 134.922056][ T6406] usb 4-1: config 0 has no interface number 0 [ 134.932801][ T6406] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.975404][ T6406] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 135.000567][ T6605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.035582][ T6605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.044183][ T6406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.084521][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.100967][ T6406] usb 4-1: Product: syz [ 135.104064][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 135.104078][ T30] audit: type=1326 audit(1760580423.130:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7b98eec9 code=0x7ffc0000 [ 135.110636][ T6406] usb 4-1: Manufacturer: syz [ 135.119284][ T6605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.170067][ T30] audit: type=1326 audit(1760580423.190:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc7b98d710 code=0x7ffc0000 [ 135.229970][ T6605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.242279][ T6396] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 135.265069][ T6406] usb 4-1: SerialNumber: syz [ 135.267593][ T30] audit: type=1326 audit(1760580423.190:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc7b98eacb code=0x7ffc0000 [ 135.298493][ T6406] usb 4-1: config 0 descriptor?? [ 135.333867][ T30] audit: type=1326 audit(1760580423.190:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc7b98eacb code=0x7ffc0000 [ 135.342568][ T6406] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 135.390965][ T6406] em28xx 4-1:0.132: Video interface 132 found: [ 135.462859][ T5922] usb 5-1: USB disconnect, device number 8 [ 135.505801][ T30] audit: type=1326 audit(1760580423.410:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7b98eec9 code=0x7ffc0000 [ 135.555708][ T30] audit: type=1326 audit(1760580423.480:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fdc7b98eec9 code=0x7ffc0000 [ 135.605931][ T6406] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 135.823152][ T6406] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 135.834964][ T6406] em28xx 4-1:0.132: board has no eeprom [ 135.878859][ T30] audit: type=1326 audit(1760580423.480:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7b98eec9 code=0x7ffc0000 [ 135.900313][ T6406] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 135.910318][ T6406] em28xx 4-1:0.132: analog set to bulk mode. [ 135.937054][ T6396] em28xx 4-1:0.132: Registering V4L2 extension [ 135.994851][ T6406] usb 4-1: USB disconnect, device number 8 [ 136.015294][ T6406] em28xx 4-1:0.132: Disconnecting em28xx [ 136.087707][ T30] audit: type=1326 audit(1760580423.480:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fdc7b98eec9 code=0x7ffc0000 [ 136.200855][ T6396] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 136.236891][ T6396] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 136.256902][ T30] audit: type=1326 audit(1760580423.490:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7b98eec9 code=0x7ffc0000 [ 136.381701][ T6396] em28xx 4-1:0.132: No AC97 audio processor [ 136.437802][ T30] audit: type=1326 audit(1760580423.490:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fdc7b98eec9 code=0x7ffc0000 [ 136.534652][ T6396] usb 4-1: Decoder not found [ 136.576196][ T6396] em28xx 4-1:0.132: failed to create media graph [ 136.609050][ T6396] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 136.665632][ T6396] em28xx 4-1:0.132: Remote control support is not available for this card. [ 136.702482][ T6406] em28xx 4-1:0.132: Closing input extension [ 136.736494][ T6406] em28xx 4-1:0.132: Freeing device [ 137.077677][ T6406] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 137.331456][ T6406] usb 4-1: Invalid ep0 maxpacket: 16 [ 137.487617][ T6406] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 137.737638][ T6406] usb 4-1: Invalid ep0 maxpacket: 16 [ 137.756018][ T6406] usb usb4-port1: attempt power cycle [ 138.091186][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 138.142761][ T6406] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 138.189086][ T6406] usb 4-1: Invalid ep0 maxpacket: 16 [ 138.267773][ T6365] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.337651][ T6406] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 138.388312][ T6406] usb 4-1: Invalid ep0 maxpacket: 16 [ 138.394292][ T6406] usb usb4-port1: unable to enumerate USB device [ 138.447688][ T6365] usb 5-1: Using ep0 maxpacket: 16 [ 138.455267][ T6365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.507931][ T6365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.577607][ T6366] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 138.630406][ T6365] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.654739][ T6365] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.676391][ T6365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.701872][ T6365] usb 5-1: config 0 descriptor?? [ 138.797905][ T6366] usb 3-1: Using ep0 maxpacket: 8 [ 138.812540][ T6366] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 138.821571][ T6366] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.856586][ T6366] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.917218][ T6366] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.968259][ T6365] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 138.994647][ T6366] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.065141][ T6365] microsoft 0003:045E:07DA.0004: no inputs found [ 139.066408][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 139.092916][ T6366] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.107610][ T6365] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 139.197657][ T6366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.288788][ T5922] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 139.316312][ T6365] usb 5-1: USB disconnect, device number 9 [ 139.666183][ T6366] usb 3-1: usb_control_msg returned -32 [ 139.676794][ T6366] usbtmc 3-1:16.0: can't read capabilities [ 140.425153][ T6366] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 140.459625][ T6695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.172'. [ 140.481508][ T6693] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 140.489779][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 140.500615][ T6663] netlink: 'syz.2.164': attribute type 5 has an invalid length. [ 140.508400][ T6663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.164'. [ 140.519456][ T6695] libceph: resolve '0..' (ret=-3): failed [ 140.540459][ T6663] geneve2: entered promiscuous mode [ 140.547468][ T6663] geneve2: entered allmulticast mode [ 140.553336][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.561752][ T5922] usb 2-1: device descriptor read/64, error -71 [ 140.571276][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 140.585250][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.593534][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 140.604071][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 140.629851][ T6175] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 140.807675][ T6366] usb 5-1: Using ep0 maxpacket: 8 [ 140.815687][ T6366] usb 5-1: config 254 has an invalid interface number: 58 but max is 0 [ 140.826090][ T6366] usb 5-1: config 254 has no interface number 0 [ 140.837844][ T5922] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 140.876696][ T6366] usb 5-1: too many endpoints for config 254 interface 58 altsetting 240: 90, using maximum allowed: 30 [ 141.052023][ T6701] all (unregistering): Released all slaves [ 141.108586][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 141.117815][ T6366] usb 5-1: config 254 interface 58 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 90 [ 141.120535][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 141.132434][ T6366] usb 5-1: config 254 interface 58 has no altsetting 0 [ 141.229107][ T5922] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 141.260202][ T5922] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 141.297409][ T6366] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 141.306624][ T6366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.314845][ T6366] usb 5-1: Product: syz [ 141.319358][ T6366] usb 5-1: Manufacturer: syz [ 141.324499][ T6366] usb 5-1: SerialNumber: syz [ 141.574188][ T6685] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 141.588632][ T5922] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 141.601554][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.617578][ T5922] usb 2-1: Product: syz [ 141.621852][ T5922] usb 2-1: Manufacturer: syz [ 141.626456][ T5922] usb 2-1: SerialNumber: syz [ 141.731562][ T6366] mxuport 5-1:254.58: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 141.811113][ T5922] usb 2-1: config 0 descriptor?? [ 141.811117][ T6366] mxuport 5-1:254.58: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 141.811176][ T6366] mxuport 5-1:254.58: probe with driver mxuport failed with error -71 [ 141.853994][ T6690] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 141.892630][ T5922] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 141.903925][ T6366] usb 5-1: USB disconnect, device number 10 [ 141.918237][ T5922] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 141.955402][ T5922] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 141.967613][ T5922] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 141.977696][ T5922] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 142.216869][ T5922] usb 3-1: USB disconnect, device number 11 [ 142.475987][ T6709] capability: warning: `syz.2.174' uses 32-bit capabilities (legacy support in use) [ 142.637921][ T6366] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 142.798885][ T6717] program syz.2.177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.809411][ T6366] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.845326][ T6366] usb 5-1: config 0 has no interface number 0 [ 142.891197][ T6366] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.955559][ T6366] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.084560][ T6366] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 143.122762][ T6366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.170025][ T6366] usb 5-1: config 0 descriptor?? [ 143.233263][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.181'. [ 143.281000][ T6734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.181'. [ 143.315333][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 143.625243][ T6365] usb 2-1: USB disconnect, device number 10 [ 143.689145][ T6365] mcba_usb 2-1:0.0 can0: device disconnected [ 143.697663][ T6366] prodikeys 0003:041E:2801.0005: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 143.754780][ T6366] hid_prodikeys: hid-prodikeys: failed to find output report [ 143.754780][ T6366] [ 143.939991][ T6707] netlink: zone id is out of range [ 143.945118][ T6707] netlink: zone id is out of range [ 144.037898][ T6707] netlink: zone id is out of range [ 144.038401][ T6751] netlink: zone id is out of range [ 144.043053][ T6707] netlink: zone id is out of range [ 144.043564][ T6707] netlink: zone id is out of range [ 144.166153][ T5922] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 144.189100][ T6707] netlink: zone id is out of range [ 144.192193][ T6751] netlink: zone id is out of range [ 144.250976][ T6707] netlink: zone id is out of range [ 144.256131][ T6707] netlink: zone id is out of range [ 144.426212][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 144.457384][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.500444][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.529709][ T5922] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 144.573457][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.620415][ T5922] usb 3-1: config 0 descriptor?? [ 144.717711][ T6365] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 144.865979][ T5921] usb 5-1: USB disconnect, device number 11 [ 145.148335][ T6365] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.234394][ T6365] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.250423][ T6365] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 145.261063][ T6365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.300535][ T6365] usb 1-1: config 0 descriptor?? [ 145.377648][ T5922] usbhid 3-1:0.0: can't add hid device: -71 [ 145.383637][ T5922] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 145.407920][ T5922] usb 3-1: USB disconnect, device number 12 [ 145.809176][ T6365] apple 0003:05AC:027A.0006: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 145.952356][ T6760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.967835][ T6760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.167867][ T5949] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 146.459919][ T5949] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.538266][ T5949] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 146.623522][ T5949] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 146.686126][ T5949] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.803363][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.860908][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 146.860919][ T30] audit: type=1326 audit(1760580434.940:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f548f18eec9 code=0x0 [ 146.924034][ T5949] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.126461][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.135761][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.146727][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.155967][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.216990][ T30] audit: type=1326 audit(1760580435.220:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 147.285110][ T30] audit: type=1326 audit(1760580435.220:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4a1f8d710 code=0x7ffc0000 [ 147.328554][ T30] audit: type=1326 audit(1760580435.220:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff4a1f8eacb code=0x7ffc0000 [ 147.400057][ T30] audit: type=1326 audit(1760580435.220:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff4a1f8eacb code=0x7ffc0000 [ 147.426612][ T30] audit: type=1326 audit(1760580435.240:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 147.449461][ T30] audit: type=1326 audit(1760580435.240:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 147.473664][ T30] audit: type=1326 audit(1760580435.240:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 147.511443][ T30] audit: type=1326 audit(1760580435.240:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 147.613049][ T5921] usb 1-1: USB disconnect, device number 10 [ 147.640351][ T5949] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 147.650378][ T30] audit: type=1326 audit(1760580435.240:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 147.689298][ T5949] usb 2-1: USB disconnect, device number 11 [ 147.983399][ T6406] IPVS: starting estimator thread 0... [ 148.087168][ T6817] IPVS: using max 29 ests per chain, 69600 per kthread [ 148.187680][ T6366] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 148.322288][ T6823] syz_tun: entered allmulticast mode [ 148.343847][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 148.365399][ T6823] syz_tun (unregistering): left allmulticast mode [ 148.377614][ T6366] usb 5-1: Using ep0 maxpacket: 8 [ 148.400157][ T6366] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 148.435318][ T6366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 148.470148][ T6366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 148.502873][ T6366] usb 5-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 148.512298][ T6366] usb 5-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 148.522472][ T6366] usb 5-1: Product: syz [ 148.533379][ T6366] usb 5-1: Manufacturer: syz [ 148.542180][ T6366] usb 5-1: SerialNumber: syz [ 148.562088][ T6366] usb 5-1: config 0 descriptor?? [ 148.595025][ T6366] smsusb:smsusb_probe: board id=2, interface number 0 [ 148.652429][ T6366] smsusb:smsusb_probe: Device initialized with return code -19 [ 148.780321][ T5949] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 148.943853][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.953009][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.068527][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 149.075311][ T5949] usb 1-1: config 0 has an invalid descriptor of length 132, skipping remainder of the config [ 149.086192][ T5949] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.127646][ T5949] usb 1-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice= 0.67 [ 149.136990][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 149.162945][ T5949] usb 1-1: Manufacturer: syz [ 149.181362][ T5949] usb 1-1: config 0 descriptor?? [ 149.215666][ T6834] netlink: 64 bytes leftover after parsing attributes in process `syz.1.199'. [ 149.393006][ T5949] usb 1-1: USB disconnect, device number 11 [ 149.947930][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 150.465784][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'. [ 150.727632][ T5949] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 150.877746][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 150.884740][ T5949] usb 1-1: config 0 has an invalid interface descriptor of length 8, skipping [ 150.894431][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 150.902506][ T5949] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 150.911136][ T5949] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.922344][ T5949] usb 1-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 150.931860][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.940277][ T5949] usb 1-1: Product: syz [ 150.944574][ T5949] usb 1-1: Manufacturer: syz [ 150.950737][ T5949] usb 1-1: SerialNumber: syz [ 150.962058][ T5949] usb 1-1: config 0 descriptor?? [ 151.060353][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 151.070364][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 151.080485][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 151.090950][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 151.103548][ T10] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 151.113165][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.121898][ T10] usb 4-1: Product: syz [ 151.126157][ T10] usb 4-1: Manufacturer: syz [ 151.131184][ T10] usb 4-1: SerialNumber: syz [ 151.146730][ T10] usb 4-1: config 0 descriptor?? [ 151.185412][ T10] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 151.287794][ T5922] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 151.391600][ T6365] usb 4-1: USB disconnect, device number 13 [ 151.434095][ T6857] program syz.1.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.466161][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.205'. [ 151.620169][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 151.633680][ T5922] usb 3-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 151.649742][ T5922] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 151.679516][ T5922] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 151.688727][ T5922] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 151.696936][ T5922] usb 3-1: Product: syz [ 151.702959][ T5922] usb 3-1: Manufacturer: syz [ 151.766411][ T5922] usb 3-1: SerialNumber: syz [ 151.853762][ T6365] usb 5-1: USB disconnect, device number 12 [ 151.945211][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.206'. [ 151.965473][ T6862] syzkaller1: entered promiscuous mode [ 151.971103][ T6862] syzkaller1: entered allmulticast mode [ 152.000317][ T5949] usb 3-1: USB disconnect, device number 13 [ 152.570791][ T6871] FAULT_INJECTION: forcing a failure. [ 152.570791][ T6871] name failslab, interval 1, probability 0, space 0, times 0 [ 152.636675][ T6871] CPU: 0 UID: 0 PID: 6871 Comm: syz.3.209 Not tainted syzkaller #0 PREEMPT(full) [ 152.636699][ T6871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.636708][ T6871] Call Trace: [ 152.636715][ T6871] [ 152.636723][ T6871] dump_stack_lvl+0x189/0x250 [ 152.636747][ T6871] ? __pfx____ratelimit+0x10/0x10 [ 152.636773][ T6871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.636791][ T6871] ? __pfx__printk+0x10/0x10 [ 152.636815][ T6871] ? __pfx___might_resched+0x10/0x10 [ 152.636842][ T6871] should_fail_ex+0x414/0x560 [ 152.636874][ T6871] should_failslab+0xa8/0x100 [ 152.636898][ T6871] __kvmalloc_node_noprof+0x158/0x910 [ 152.636920][ T6871] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 152.636953][ T6871] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 152.636991][ T6871] __nf_unregister_net_hook+0x4f6/0x700 [ 152.637025][ T6871] nf_unregister_net_hooks+0xcb/0x140 [ 152.637060][ T6871] ip_vs_unregister_hooks+0xbc/0x120 [ 152.637089][ T6871] ip_vs_unlink_service+0x40d/0xa30 [ 152.637117][ T6871] ip_vs_flush+0x169/0x1c0 [ 152.637137][ T6871] do_ip_vs_set_ctl+0x470/0xa60 [ 152.637159][ T6871] ? rcu_is_watching+0x15/0xb0 [ 152.637182][ T6871] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 152.637200][ T6871] ? trace_contention_end+0x39/0x120 [ 152.637240][ T6871] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 152.637266][ T6871] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 152.637295][ T6871] ? __pfx_aa_sk_perm+0x10/0x10 [ 152.637320][ T6871] nf_setsockopt+0x26f/0x290 [ 152.637340][ T6871] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 152.637364][ T6871] do_sock_setsockopt+0x17c/0x1b0 [ 152.637394][ T6871] __x64_sys_setsockopt+0x13f/0x1b0 [ 152.637424][ T6871] do_syscall_64+0xfa/0xfa0 [ 152.637440][ T6871] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.637457][ T6871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.637474][ T6871] ? clear_bhb_loop+0x60/0xb0 [ 152.637494][ T6871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.637515][ T6871] RIP: 0033:0x7f548f18eec9 [ 152.637529][ T6871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.637541][ T6871] RSP: 002b:00007f5490097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 152.637559][ T6871] RAX: ffffffffffffffda RBX: 00007f548f3e5fa0 RCX: 00007f548f18eec9 [ 152.637570][ T6871] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000003 [ 152.637580][ T6871] RBP: 00007f5490097090 R08: 0000000000000000 R09: 0000000000000000 [ 152.637589][ T6871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.637598][ T6871] R13: 00007f548f3e6038 R14: 00007f548f3e5fa0 R15: 00007f548f50fa28 [ 152.637626][ T6871] [ 153.357607][ T6366] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.589591][ T6365] usb 1-1: USB disconnect, device number 12 [ 153.690041][ T6881] sock: sock_timestamping_bind_phc: sock not bind to device [ 153.709574][ T6366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.722203][ T6366] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 153.804976][ T6366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.860565][ T6366] usb 3-1: config 0 descriptor?? [ 154.077877][ T5949] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 154.289576][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 154.796167][ T5949] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 154.812263][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.834972][ T5949] usb 4-1: Product: syz [ 154.846287][ T5949] usb 4-1: Manufacturer: syz [ 154.853762][ T5949] usb 4-1: SerialNumber: syz [ 154.864423][ T5949] usb 4-1: config 0 descriptor?? [ 155.521995][ T6906] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 155.671982][ T6894] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 155.688406][ T6894] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 155.697039][ T6894] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 156.323232][ T6366] usbhid 3-1:0.0: can't add hid device: -71 [ 156.329347][ T6366] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 156.413479][ T6366] usb 3-1: USB disconnect, device number 14 [ 156.719169][ T6366] usb 4-1: USB disconnect, device number 14 [ 156.947695][ T5967] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 157.340279][ T5967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.350456][ T5967] usb 5-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.364602][ T5967] usb 5-1: config 0 interface 0 has no altsetting 0 [ 157.387657][ T6366] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 157.420746][ T5967] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 157.437702][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.448294][ T5967] usb 5-1: Product: syz [ 157.452580][ T5967] usb 5-1: Manufacturer: syz [ 157.457282][ T5967] usb 5-1: SerialNumber: syz [ 157.464195][ T5967] usb 5-1: config 0 descriptor?? [ 157.570558][ T6930] use of bytesused == 0 is deprecated and will be removed in the future, [ 157.607718][ T6366] usb 4-1: Using ep0 maxpacket: 8 [ 157.621879][ T6930] use the actual size instead. [ 157.625651][ T6366] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.647644][ T6366] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.703118][ T6366] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.735469][ T6366] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.757817][ T6366] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.776052][ T6366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.836394][ T6918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.220'. [ 157.858405][ T5967] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 157.944325][ T6365] usb 5-1: USB disconnect, device number 13 [ 158.003600][ T6366] usb 4-1: GET_CAPABILITIES returned 0 [ 158.022443][ T5967] usb 1-1: config 171 has an invalid interface number: 109 but max is 0 [ 158.031690][ T6366] usbtmc 4-1:16.0: can't read capabilities [ 158.041699][ T5967] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 158.059499][ T5967] usb 1-1: config 171 has no interface number 0 [ 158.071254][ T6366] usb 4-1: USB disconnect, device number 15 [ 158.088671][ T5967] usb 1-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 158.130829][ T5967] usb 1-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 29440, setting to 64 [ 158.144645][ T5967] usb 1-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 158.176700][ T5967] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 158.196126][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.223600][ T5967] usb 1-1: Product: syz [ 158.229854][ T5967] usb 1-1: Manufacturer: syz [ 158.234573][ T5967] usb 1-1: SerialNumber: syz [ 158.248501][ T5949] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 158.248807][ T6933] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 158.409844][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.421682][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.432056][ T5949] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 158.441159][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.458522][ T5949] usb 3-1: config 0 descriptor?? [ 158.619257][ T6933] netlink: 52 bytes leftover after parsing attributes in process `syz.0.224'. [ 158.655723][ T5967] ath6kl: Failed to submit usb control message: -71 [ 158.673019][ T5967] ath6kl: unable to send the bmi data to the device: -71 [ 158.678449][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 158.681001][ T5967] ath6kl: Unable to send get target info: -71 [ 158.997831][ T5949] cm6533_jd 0003:0D8C:0022.0007: invalid report_count 1192232228 [ 159.027161][ T5949] cm6533_jd 0003:0D8C:0022.0007: item 0 4 1 9 parsing failed [ 159.034168][ T5967] ath6kl: Failed to init ath6kl core: -71 [ 159.034960][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 159.042788][ T5967] ath6kl_usb 1-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 159.069336][ T5967] usb 1-1: USB disconnect, device number 13 [ 159.088337][ T10] usb 4-1: config 0 has no interfaces? [ 159.117623][ T10] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 159.127446][ T5949] cm6533_jd 0003:0D8C:0022.0007: parse failed [ 159.144298][ T5949] cm6533_jd 0003:0D8C:0022.0007: probe with driver cm6533_jd failed with error -22 [ 159.155168][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.245060][ T10] usb 4-1: config 0 descriptor?? [ 159.279909][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.296803][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.424684][ T6958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.437909][ T6958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.471211][ T5921] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 159.553597][ T5967] usb 4-1: USB disconnect, device number 16 [ 159.647816][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 159.660610][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.677591][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.688746][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 159.702597][ T5921] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 159.712473][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.726780][ T5921] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 159.736095][ T5921] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 159.744162][ T5921] usb 5-1: Manufacturer: syz [ 159.760976][ T5921] usb 5-1: config 0 descriptor?? [ 159.988417][ T6954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.009687][ T6954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.132316][ T5921] rc_core: IR keymap rc-hauppauge not found [ 160.147568][ T5921] Registered IR keymap rc-empty [ 160.152886][ T5921] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.177672][ T5921] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.199770][ T5921] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 160.218696][ T6366] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 160.230293][ T5921] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 160.262509][ T5921] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.307682][ T5921] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.347868][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 160.367677][ T5921] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.387786][ T6366] usb 1-1: device descriptor read/64, error -71 [ 160.417711][ T5921] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.467730][ T5921] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.518356][ T5921] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.537639][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 160.545075][ T10] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 160.555977][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 160.576152][ T5921] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.601917][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 160.626090][ T5921] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.646967][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.647601][ T6366] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 160.668662][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 160.687207][ T5921] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.727690][ T5921] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.735231][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 160.744386][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.789749][ T5921] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 160.821232][ T10] usb 2-1: Product: syz [ 160.827994][ T10] usb 2-1: Manufacturer: syz [ 160.832602][ T10] usb 2-1: SerialNumber: syz [ 160.837706][ T5921] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 160.849327][ T10] usb 2-1: config 0 descriptor?? [ 160.857687][ T6366] usb 1-1: device descriptor read/64, error -71 [ 160.863126][ T6973] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 160.876215][ T5921] usb 5-1: USB disconnect, device number 14 [ 160.969425][ T10] mcba_usb 2-1:0.0 can0: couldn't setup read URBs [ 160.988183][ T6366] usb usb1-port1: attempt power cycle [ 160.998676][ T10] mcba_usb 2-1:0.0 can0: couldn't start device: -90 [ 161.083753][ T5949] usb 3-1: USB disconnect, device number 15 [ 161.098631][ T10] mcba_usb 2-1:0.0: probe with driver mcba_usb failed with error -90 [ 161.111912][ T6985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.237'. [ 161.148612][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.186878][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.210744][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.222327][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.263194][ T6396] usb 2-1: USB disconnect, device number 12 [ 161.337927][ T6366] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 161.378443][ T6366] usb 1-1: device descriptor read/8, error -71 [ 161.528176][ T5949] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 161.587894][ T5921] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 161.677948][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 161.687769][ T6366] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 161.692084][ T5949] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 161.704244][ T5949] usb 3-1: config 0 has no interface number 0 [ 161.738258][ T6366] usb 1-1: device descriptor read/8, error -71 [ 161.744786][ T5949] usb 3-1: config 0 interface 89 has no altsetting 0 [ 161.755050][ T5921] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 161.766453][ T5921] usb 5-1: config 1 has no interface number 0 [ 161.775066][ T5921] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.786531][ T5921] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 161.802098][ T5949] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 161.813085][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.821933][ T5949] usb 3-1: Product: syz [ 161.826418][ T5949] usb 3-1: Manufacturer: syz [ 161.832602][ T5949] usb 3-1: SerialNumber: syz [ 161.838554][ T5921] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 161.847851][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.855824][ T5921] usb 5-1: Product: syz [ 161.860308][ T5921] usb 5-1: Manufacturer: syz [ 161.865085][ T5921] usb 5-1: SerialNumber: syz [ 161.868078][ T6366] usb usb1-port1: unable to enumerate USB device [ 161.884069][ T5949] usb 3-1: config 0 descriptor?? [ 161.891758][ T6992] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.901808][ T6992] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.920487][ T5949] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 161.933078][ T5949] em28xx 3-1:0.89: Video interface 89 found: bulk [ 161.950248][ T5921] usb 5-1: Expected 3 endpoints, found: 2 [ 161.977609][ T812] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 162.137594][ T812] usb 4-1: Using ep0 maxpacket: 16 [ 162.147172][ T812] usb 4-1: unable to get BOS descriptor or descriptor too short [ 162.162128][ T812] usb 4-1: config 8 has an invalid interface number: 132 but max is 0 [ 162.170681][ T812] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 162.187671][ T5949] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 162.195186][ T812] usb 4-1: config 8 has no interface number 0 [ 162.206193][ T812] usb 4-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.221202][ T812] usb 4-1: config 8 interface 132 has no altsetting 0 [ 162.233892][ T812] usb 4-1: string descriptor 0 read error: -22 [ 162.241142][ T812] usb 4-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 162.250661][ T812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.265564][ T5949] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 162.277632][ T5949] em28xx 3-1:0.89: board has no eeprom [ 162.284266][ T812] usb-storage 4-1:8.132: USB Mass Storage device detected [ 162.317166][ T812] usb-storage 4-1:8.132: Quirks match for vid 07cf pid 1001: a [ 162.351320][ T5949] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 162.358713][ T5949] em28xx 3-1:0.89: analog set to bulk mode. [ 162.364641][ T5921] em28xx 3-1:0.89: Registering V4L2 extension [ 162.378996][ T5949] usb 3-1: USB disconnect, device number 16 [ 162.393650][ T5949] em28xx 3-1:0.89: Disconnecting em28xx [ 162.504860][ T5921] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 162.525229][ T5921] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 162.552056][ T6366] usb 5-1: USB disconnect, device number 15 [ 162.552807][ T5921] em28xx 3-1:0.89: No AC97 audio processor [ 162.601379][ T5921] usb 3-1: Decoder not found [ 162.620102][ T5921] em28xx 3-1:0.89: failed to create media graph [ 162.636605][ T5921] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 162.763151][ T5921] em28xx 3-1:0.89: Registering snapshot button... [ 162.773665][ T5921] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input7 [ 162.789346][ T5921] em28xx 3-1:0.89: Remote control support is not available for this card. [ 162.803733][ T5949] em28xx 3-1:0.89: Closing input extension [ 162.815609][ T7018] tipc: Started in network mode [ 162.820663][ T7018] tipc: Node identity f6132ecda7cd, cluster identity 4711 [ 162.828719][ T7018] tipc: Enabled bearer , priority 0 [ 162.836965][ T5949] em28xx 3-1:0.89: Deregistering snapshot button [ 162.849214][ T7018] syzkaller0: entered promiscuous mode [ 162.855109][ T7018] syzkaller0: entered allmulticast mode [ 162.881864][ T5949] em28xx 3-1:0.89: Freeing device [ 162.899929][ T7018] tipc: Resetting bearer [ 162.928838][ T7017] tipc: Resetting bearer [ 163.040038][ T7017] tipc: Disabling bearer [ 163.217788][ T5949] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 163.412025][ T7030] netlink: 'syz.4.246': attribute type 10 has an invalid length. [ 163.419059][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 163.433805][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.455680][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 163.535541][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 163.593774][ T5949] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 163.631555][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.680504][ T5949] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.709059][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 163.738448][ T5949] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 163.748100][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.759036][ T5949] usb 3-1: Product: syz [ 163.766734][ T5949] usb 3-1: Manufacturer: syz [ 163.801966][ T7030] veth1_vlan: entered allmulticast mode [ 163.833234][ T5949] usb 3-1: SerialNumber: syz [ 163.834995][ T7030] veth1_vlan: left promiscuous mode [ 163.861577][ T7030] team0: Device veth1_vlan failed to register rx_handler [ 163.876864][ T5949] usb 3-1: config 0 descriptor?? [ 163.884444][ T7006] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 163.894880][ T5949] iuu_phoenix 3-1:0.0: iuu_phoenix converter detected [ 163.920086][ T5949] usb 3-1: iuu_phoenix converter now attached to ttyUSB0 [ 164.094247][ T5949] usb 3-1: USB disconnect, device number 17 [ 164.113687][ T5949] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 164.139824][ T5949] iuu_phoenix 3-1:0.0: device disconnected [ 164.407080][ T6366] usb 4-1: USB disconnect, device number 17 [ 164.640304][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 164.640320][ T30] audit: type=1326 audit(1760580452.720:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 164.696466][ T30] audit: type=1326 audit(1760580452.720:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 164.719392][ T30] audit: type=1326 audit(1760580452.720:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 164.741843][ T30] audit: type=1326 audit(1760580452.720:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 164.771181][ T30] audit: type=1326 audit(1760580452.720:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 164.799283][ T30] audit: type=1326 audit(1760580452.720:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 164.822985][ T30] audit: type=1326 audit(1760580452.720:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 164.847257][ T30] audit: type=1326 audit(1760580452.770:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 164.922680][ T30] audit: type=1326 audit(1760580452.770:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 164.947000][ T30] audit: type=1326 audit(1760580452.770:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63918eec9 code=0x7ffc0000 [ 165.166696][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.253'. [ 165.175888][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.253'. [ 165.299811][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 165.317507][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 165.499857][ T7067] netlink: 96 bytes leftover after parsing attributes in process `syz.1.256'. [ 165.902664][ T7068] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.257'. [ 166.434931][ T7075] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 166.441512][ T7075] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 166.483206][ T7075] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 166.502917][ T7075] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 166.514375][ T7075] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 166.544978][ T7075] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 166.561803][ T7075] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 166.569747][ T7075] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 166.596227][ T7075] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 166.613349][ T7075] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 166.621399][ T7075] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 166.644366][ T7075] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 166.672430][ T7075] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 166.684633][ T7075] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 166.707942][ T7075] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 167.217700][ T5949] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 167.225344][ T812] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 167.387701][ T812] usb 3-1: device descriptor read/64, error -71 [ 167.407882][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 167.425760][ T5949] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 167.449987][ T5949] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.468081][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.486324][ T5949] usb 2-1: Product: 률嬭슲Ԡ睏义掀Ꭷ覨Ⓑ砜昒⽢쏀뎨Ᏽ贙扩魻递ᕄⶽ銚㣰ꄚ딲᫐斿꽎Ꟈᙟ㤌愎॒븒腓禎鰖䟜埑ắ䛃琠殑蔓苌䰛Ӗ⁻퇽羁龷߳纉꤉笊슺㺫잭欇ⰹ塦윅〒땨᧶塍প쯊泉뫚옫颓寱ใ࿻鬥㑸躐咝ᶐ턛 [ 167.588941][ T5949] usb 2-1: Manufacturer: ь [ 167.605544][ T5949] usb 2-1: SerialNumber: Ї [ 167.661584][ T812] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 167.767613][ T6396] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 167.797674][ T812] usb 3-1: device descriptor read/64, error -71 [ 167.830614][ T7096] net_ratelimit: 36 callbacks suppressed [ 167.830637][ T7096] openvswitch: netlink: IP tunnel dst address not specified [ 167.874209][ T7080] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 167.918185][ T6396] usb 5-1: Using ep0 maxpacket: 8 [ 167.929122][ T6396] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 167.929301][ T812] usb usb3-port1: attempt power cycle [ 167.947847][ T6396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.958708][ T6396] usb 5-1: Product: syz [ 167.962885][ T6396] usb 5-1: Manufacturer: syz [ 167.968530][ T6396] usb 5-1: SerialNumber: syz [ 167.976234][ T6396] usb 5-1: config 0 descriptor?? [ 168.094353][ T5949] cdc_ncm 2-1:1.0: bind() failure [ 168.117234][ T5949] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 168.126458][ T5949] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 168.138074][ T5949] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 168.151604][ T5949] usb 2-1: USB disconnect, device number 13 [ 168.189843][ T6396] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 168.218433][ T6365] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 168.297653][ T812] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 168.318087][ T812] usb 3-1: device descriptor read/8, error -71 [ 168.408852][ T6365] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.419991][ T6365] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.432096][ T6365] usb 1-1: config 0 interface 0 has no altsetting 0 [ 168.438839][ T6365] usb 1-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 168.447938][ T6365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.457851][ T6365] usb 1-1: config 0 descriptor?? [ 168.487652][ T5967] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 168.508261][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 168.577672][ T812] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 168.597943][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.604159][ T812] usb 3-1: device descriptor read/8, error -71 [ 168.610680][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.650757][ T5967] usb 4-1: Using ep0 maxpacket: 16 [ 168.660659][ T5967] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.670920][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.679391][ T5967] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.691202][ T5967] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.700330][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.709505][ T5967] usb 4-1: Product: syz [ 168.713693][ T5967] usb 4-1: Manufacturer: syz [ 168.719565][ T5967] usb 4-1: SerialNumber: syz [ 168.719755][ T812] usb usb3-port1: unable to enumerate USB device [ 168.757611][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 168.892937][ T6365] thrustmaster 0003:044F:B651.0008: unknown main item tag 0x0 [ 168.900628][ T6365] thrustmaster 0003:044F:B651.0008: unknown main item tag 0x0 [ 168.907660][ T5949] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 168.908169][ T6365] thrustmaster 0003:044F:B651.0008: item fetching failed at offset 2/7 [ 168.925232][ T6365] thrustmaster 0003:044F:B651.0008: parse failed [ 168.931696][ T6365] thrustmaster 0003:044F:B651.0008: probe with driver thrustmaster failed with error -22 [ 169.072799][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 169.084804][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 48192, setting to 64 [ 169.096122][ T5949] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 169.104800][ T6365] usb 1-1: USB disconnect, device number 18 [ 169.108411][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.129823][ T5949] usb 2-1: config 0 descriptor?? [ 169.137942][ T7110] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 169.213364][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.264'. [ 169.226135][ T6396] gspca_sunplus: reg_w_riv err -71 [ 169.235806][ T6396] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 169.248479][ T6396] usb 5-1: USB disconnect, device number 16 [ 169.422040][ T5967] usb 4-1: 0:2 : does not exist [ 169.437462][ T5921] IPVS: starting estimator thread 0... [ 169.446344][ T5967] usb 4-1: USB disconnect, device number 18 [ 169.547937][ T7120] IPVS: using max 29 ests per chain, 69600 per kthread [ 169.851733][ T7136] netlink: 36 bytes leftover after parsing attributes in process `syz.3.275'. [ 169.860778][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.275'. [ 169.899258][ T6396] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 170.067667][ T6396] usb 1-1: Using ep0 maxpacket: 16 [ 170.074535][ T6396] usb 1-1: config 0 has an invalid interface number: 115 but max is 0 [ 170.082780][ T6396] usb 1-1: config 0 has no interface number 0 [ 170.088984][ T5967] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 170.096628][ T6396] usb 1-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 170.109741][ T6396] usb 1-1: config 0 interface 115 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 170.123431][ T6396] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 170.132555][ T6396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.140628][ T6396] usb 1-1: Product: syz [ 170.144884][ T6396] usb 1-1: Manufacturer: syz [ 170.149542][ T6396] usb 1-1: SerialNumber: syz [ 170.157057][ T6396] usb 1-1: config 0 descriptor?? [ 170.223598][ T5949] usbhid 2-1:0.0: can't add hid device: -71 [ 170.237766][ T5967] usb 5-1: device descriptor read/64, error -71 [ 170.245370][ T5949] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 170.265760][ T5949] usb 2-1: USB disconnect, device number 14 [ 170.300462][ T7138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.312296][ T7138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.365774][ T7128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.384967][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.395243][ T7128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.404986][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.424595][ T5921] usb 1-1: USB disconnect, device number 19 [ 170.477682][ T5967] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 170.590746][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.670713][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.676759][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.691847][ T5967] usb 5-1: device descriptor read/64, error -71 [ 170.760252][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.848082][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 170.879387][ T5967] usb usb5-port1: attempt power cycle [ 171.457672][ T5967] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 171.497593][ T7163] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 171.550465][ T5967] usb 5-1: device descriptor read/8, error -71 [ 171.948130][ T5967] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 172.034033][ T5967] usb 5-1: device descriptor read/8, error -71 [ 172.181274][ T5967] usb usb5-port1: unable to enumerate USB device [ 172.268171][ T5921] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 172.548562][ T5921] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.640439][ T5921] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 172.662911][ T5921] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 172.673039][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.697715][ T5921] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.716954][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.753174][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.759287][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.827715][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.842292][ T5921] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.907702][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 172.938909][ T5921] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 173.016858][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.159203][ T7170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.167892][ T6365] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 173.168388][ T7170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.244322][ T7170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.253690][ T7170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.262776][ T5967] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 173.271499][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 173.271513][ T30] audit: type=1326 audit(1760580461.310:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548f18eec9 code=0x7ffc0000 [ 173.359764][ T5921] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 173.370731][ T5949] usb 4-1: USB disconnect, device number 19 [ 173.402082][ T6365] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 173.427633][ T30] audit: type=1326 audit(1760580461.320:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548f18eec9 code=0x7ffc0000 [ 173.434562][ T6365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.457921][ T5967] usb 2-1: Using ep0 maxpacket: 32 [ 173.472342][ T30] audit: type=1326 audit(1760580461.320:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f548f18d710 code=0x7ffc0000 [ 173.472384][ T5967] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 173.494554][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.514561][ T30] audit: type=1326 audit(1760580461.320:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f548f18eacb code=0x7ffc0000 [ 173.537436][ T5967] usb 2-1: config 0 has no interface number 0 [ 173.545035][ T6365] usb 1-1: config 0 descriptor?? [ 173.560639][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 173.596728][ T5967] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.598370][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.643917][ T5967] usb 2-1: config 0 interface 85 has no altsetting 0 [ 173.651391][ T30] audit: type=1326 audit(1760580461.320:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f548f18eacb code=0x7ffc0000 [ 173.673607][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.673655][ T5921] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 173.673675][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.723119][ T5967] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 173.732569][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.741275][ T5967] usb 2-1: Product: syz [ 173.745552][ T5967] usb 2-1: Manufacturer: syz [ 173.750690][ T5967] usb 2-1: SerialNumber: syz [ 173.755816][ T30] audit: type=1326 audit(1760580461.380:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548f18eec9 code=0x7ffc0000 [ 173.756440][ T5921] usb 5-1: config 0 descriptor?? [ 173.778035][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.790950][ T6365] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 173.801295][ T30] audit: type=1326 audit(1760580461.380:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548f18eec9 code=0x7ffc0000 [ 173.824413][ T5967] usb 2-1: config 0 descriptor?? [ 173.837821][ T30] audit: type=1326 audit(1760580461.380:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f548f18eec9 code=0x7ffc0000 [ 173.859892][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.886423][ T30] audit: type=1326 audit(1760580461.380:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548f18eec9 code=0x7ffc0000 [ 173.918773][ T30] audit: type=1326 audit(1760580461.390:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f548f18eec9 code=0x7ffc0000 [ 174.003073][ T7183] netlink: 104 bytes leftover after parsing attributes in process `syz.0.291'. [ 174.359009][ T5921] greenasia 0003:0E8F:0012.0009: item fetching failed at offset 0/3 [ 174.367715][ T5949] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 174.375424][ T5921] greenasia 0003:0E8F:0012.0009: parse failed [ 174.381705][ T5921] greenasia 0003:0E8F:0012.0009: probe with driver greenasia failed with error -22 [ 174.542614][ T5949] usb 3-1: config 0 has no interfaces? [ 174.554746][ T5949] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 174.576923][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.582913][ T6368] usb 5-1: USB disconnect, device number 21 [ 174.596130][ T5949] usb 3-1: config 0 descriptor?? [ 174.611450][ T5967] appletouch 2-1:0.85: Geyser mode initialized. [ 174.626540][ T5967] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input8 [ 174.646981][ C1] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 174.847645][ T5921] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 174.880386][ T5949] usb 3-1: USB disconnect, device number 22 [ 174.977730][ T5921] usb 4-1: device descriptor read/64, error -71 [ 175.217615][ T5921] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 175.357652][ T5921] usb 4-1: device descriptor read/64, error -71 [ 175.448854][ T6368] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 175.468941][ T5921] usb usb4-port1: attempt power cycle [ 175.551194][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 175.617747][ T6368] usb 5-1: Using ep0 maxpacket: 16 [ 175.674514][ T6368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.706727][ T6368] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.745285][ T6368] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.771677][ T6368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.799895][ T6368] usb 5-1: Product: syz [ 175.817932][ T5921] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 175.824310][ T6368] usb 5-1: Manufacturer: syz [ 175.848381][ T5921] usb 4-1: device descriptor read/8, error -71 [ 175.856744][ T6368] usb 5-1: SerialNumber: syz [ 176.124120][ T6365] [drm:udl_init] *ERROR* Selecting channel failed [ 176.157690][ T5921] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 176.169933][ T6365] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 176.178520][ T5921] usb 4-1: device descriptor read/8, error -71 [ 176.191935][ T6365] [drm] Initialized udl on minor 2 [ 176.215516][ T6368] usb 5-1: 0:2 : does not exist [ 176.222379][ T6368] usb 5-1: unit 6 not found! [ 176.236329][ T6365] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 176.245349][ T5949] usb 2-1: USB disconnect, device number 15 [ 176.288031][ T5921] usb usb4-port1: unable to enumerate USB device [ 176.314556][ T5949] appletouch 2-1:0.85: input: appletouch disconnected [ 176.321493][ T6365] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 176.323553][ T6366] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 176.362259][ T6368] usb 5-1: USB disconnect, device number 22 [ 176.369108][ T6366] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 176.381867][ T6365] usb 1-1: USB disconnect, device number 20 [ 176.525638][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.587667][ T7218] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 177.067721][ T6365] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 177.240419][ T6365] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.250875][ T6365] usb 1-1: config 0 interface 0 has no altsetting 0 [ 177.266873][ T6365] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 177.280122][ T6365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.297635][ T6365] usb 1-1: Product: syz [ 177.307422][ T6365] usb 1-1: Manufacturer: syz [ 177.318851][ T6365] usb 1-1: SerialNumber: syz [ 177.349526][ T6365] usb 1-1: config 0 descriptor?? [ 177.381770][ T6365] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 177.420222][ T6365] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.436047][ T6365] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 177.453464][ T6365] usb 1-1: media controller created [ 177.491717][ T6365] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.599208][ T7224] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 177.672413][ T6365] DVB: Unable to find symbol tda10046_attach() [ 177.682767][ T6365] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 177.692642][ T6365] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 177.741828][ T7229] bond1: (slave geneve2): making interface the new active one [ 177.753005][ T7229] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 177.763864][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.781466][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.825567][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.839170][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 178.173208][ T6365] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 178.390680][ T6365] usb 1-1: USB disconnect, device number 21 [ 179.482295][ T7262] netlink: 32 bytes leftover after parsing attributes in process `syz.1.311'. [ 179.760861][ T7269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.770431][ T7269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.869729][ T7270] syz.1.313 (7270) used obsolete PPPIOCDETACH ioctl [ 179.988699][ T812] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 181.268658][ T5921] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 181.304755][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.316'. [ 181.448857][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 181.455584][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 181.527634][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 181.574062][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 181.675846][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 181.723983][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.742693][ T5921] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 181.757036][ T7297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.319'. [ 181.840215][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.849396][ T5921] usb 1-1: Product: syz [ 181.853576][ T5921] usb 1-1: Manufacturer: syz [ 181.868920][ T5921] usb 1-1: SerialNumber: syz [ 181.893512][ T5921] usb 1-1: config 0 descriptor?? [ 182.097646][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 182.198034][ T6368] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 182.389308][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 182.392558][ T6368] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.396905][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.407723][ T6368] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 182.415420][ T10] usb 3-1: config 0 has no interface number 0 [ 182.422736][ T6368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.507200][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 182.519076][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.528215][ T6368] usb 5-1: Product: syz [ 182.528936][ T10] usb 3-1: Product: syz [ 182.532464][ T6368] usb 5-1: Manufacturer: syz [ 182.536651][ T10] usb 3-1: Manufacturer: syz [ 182.647511][ T6368] usb 5-1: SerialNumber: syz [ 182.652607][ T10] usb 3-1: SerialNumber: syz [ 182.668260][ T6368] usb 5-1: config 0 descriptor?? [ 182.669439][ T10] usb 3-1: config 0 descriptor?? [ 182.685490][ T6368] adutux 5-1:0.0: interrupt endpoints not found [ 182.695468][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 182.705095][ T10] usb 3-1: selecting invalid altsetting 1 [ 182.708751][ T6406] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 182.719934][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 182.738785][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 182.754864][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 182.767219][ T10] usb 3-1: media controller created [ 182.796753][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.867729][ T6406] usb 2-1: Using ep0 maxpacket: 8 [ 182.881661][ T6406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.915100][ T7291] input: syz0 as /devices/virtual/input/input9 [ 182.921686][ T6366] usb 5-1: USB disconnect, device number 23 [ 182.945837][ T6406] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.008924][ T6406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.032323][ T6406] usb 2-1: config 0 descriptor?? [ 183.099844][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 183.124276][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 183.138586][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 183.253962][ T6406] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 183.421994][ T10] usb 3-1: USB disconnect, device number 23 [ 183.739291][ T6366] usb 2-1: USB disconnect, device number 17 [ 183.891109][ T7325] sctp: [Deprecated]: syz.2.328 (pid 7325) Use of int in maxseg socket option. [ 183.891109][ T7325] Use struct sctp_assoc_value instead [ 183.921331][ T7325] IPVS: set_ctl: invalid protocol: 135 172.20.20.48:20003 [ 183.933440][ T7325] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20000 [ 184.227619][ T5949] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 184.240993][ T5921] rc_core: IR keymap rc-imon-rsc not found [ 184.260914][ T5921] Registered IR keymap rc-empty [ 184.267800][ T5921] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 184.279788][ T5921] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 184.310081][ T5921] usb 1-1: USB disconnect, device number 22 [ 184.407637][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 184.428234][ T5949] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.447735][ T5949] usb 5-1: config 0 has no interfaces? [ 184.462852][ T5949] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.476097][ T5949] usb 5-1: config 0 has no interfaces? [ 184.483161][ T5949] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.498344][ T5949] usb 5-1: config 0 has no interfaces? [ 184.507631][ T5949] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 184.518474][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 184.526568][ T5949] usb 5-1: Product: syz [ 184.537026][ T5949] usb 5-1: Manufacturer: syz [ 184.549335][ T5949] usb 5-1: config 0 descriptor?? [ 184.811781][ T6406] usb 5-1: USB disconnect, device number 24 [ 185.017840][ T7343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.047632][ T6406] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 186.222777][ T6406] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 186.257809][ T6365] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 186.279029][ T6406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.289662][ T6406] usb 1-1: Product: syz [ 186.293862][ T6406] usb 1-1: Manufacturer: syz [ 186.306247][ T6406] usb 1-1: SerialNumber: syz [ 186.314525][ T6406] usb 1-1: config 0 descriptor?? [ 186.371469][ T6406] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 023 [ 186.570708][ T7357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.610709][ T7357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.853158][ T6406] (null): failure reading functionality [ 186.881364][ T6406] i2c i2c-2: failure reading functionality [ 186.890384][ T6406] i2c i2c-2: connected i2c-tiny-usb device [ 186.901655][ T6406] usb 1-1: USB disconnect, device number 23 [ 187.437649][ T5949] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 187.532335][ T7391] netlink: 132 bytes leftover after parsing attributes in process `syz.1.348'. [ 187.610504][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 187.626551][ T5949] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 187.645057][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.666938][ T5949] usb 5-1: Product: syz [ 187.683591][ T5949] usb 5-1: Manufacturer: syz [ 187.694321][ T5949] usb 5-1: SerialNumber: syz [ 187.717277][ T5949] usb 5-1: config 0 descriptor?? [ 187.747651][ T5921] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 187.916242][ T5921] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 187.928059][ T5921] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 187.944953][ T5921] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 187.947619][ T6406] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 187.954342][ T5949] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 187.971391][ T7411] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 187.977638][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.987066][ T5921] usb 1-1: Product: syz [ 187.994151][ T5921] usb 1-1: Manufacturer: syz [ 187.999255][ T5949] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 188.009932][ T5921] usb 1-1: SerialNumber: syz [ 188.019982][ T5921] usb 1-1: config 0 descriptor?? [ 188.031659][ T7411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.353'. [ 188.038262][ T5949] usb 5-1: USB disconnect, device number 25 [ 188.054637][ T7394] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 188.066874][ T7394] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 188.104297][ T7413] xt_hashlimit: size too large, truncated to 1048576 [ 188.111475][ T7413] xt_hashlimit: max too large, truncated to 1048576 [ 188.179872][ T6406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.197409][ T6406] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 188.212974][ T6406] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 188.222142][ T6406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.295903][ T6406] usb 3-1: config 0 descriptor?? [ 188.359766][ T7393] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 188.371791][ T7393] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 188.530032][ T7399] netlink: 'syz.2.350': attribute type 1 has an invalid length. [ 188.593817][ T7399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.684460][ T5921] Error reading MAC address [ 188.750407][ T7428] input: syz1 as /devices/virtual/input/input11 [ 188.774836][ T5921] usb 1-1: USB disconnect, device number 24 [ 188.931188][ T7421] bond1: (slave ip6erspan0): making interface the new active one [ 188.988153][ T7436] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[7436] [ 189.027733][ T812] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 189.048987][ T7421] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 189.118827][ T7428] tipc: New replicast peer: 0.0.0.0 [ 189.133598][ T7428] tipc: Enabled bearer , priority 10 [ 189.190754][ T6406] kovaplus 0003:1E7D:2D50.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 189.247611][ T812] usb 5-1: Using ep0 maxpacket: 16 [ 189.378485][ T812] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 189.386786][ T812] usb 5-1: config 0 has no interface number 0 [ 189.395343][ T812] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 189.487593][ T812] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 189.570415][ T812] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 189.579719][ T812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.627865][ T812] usb 5-1: Product: syz [ 189.656343][ T812] usb 5-1: Manufacturer: syz [ 189.685856][ T812] usb 5-1: SerialNumber: syz [ 189.736229][ T812] usb 5-1: config 0 descriptor?? [ 189.773784][ T7426] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.787794][ T7426] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.008341][ T7426] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.064387][ T7426] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.249031][ T5949] tipc: Node number set to 3824976555 [ 190.548258][ T7426] sctp: [Deprecated]: syz.4.356 (pid 7426) Use of int in max_burst socket option deprecated. [ 190.548258][ T7426] Use struct sctp_assoc_value instead [ 191.045591][ T6406] kovaplus 0003:1E7D:2D50.000A: couldn't init struct kovaplus_device [ 191.067990][ T6406] kovaplus 0003:1E7D:2D50.000A: couldn't install mouse [ 191.109653][ T6406] kovaplus 0003:1E7D:2D50.000A: probe with driver kovaplus failed with error -71 [ 191.173767][ T6406] usb 3-1: USB disconnect, device number 24 [ 191.305668][ T7480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.331200][ T7480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.437655][ T6365] usb 2-1: device descriptor read/64, error -110 [ 191.577642][ T6368] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 191.667615][ T6406] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 191.677639][ T6365] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 191.727711][ T6368] usb 4-1: Using ep0 maxpacket: 32 [ 191.745070][ T6368] usb 4-1: unable to get BOS descriptor or descriptor too short [ 191.754025][ T6368] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 191.761750][ T6368] usb 4-1: can't read configurations, error -71 [ 191.807687][ T6365] usb 2-1: device descriptor read/64, error -32 [ 191.819275][ T6406] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 191.826700][ T6406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 191.837421][ T6406] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.849572][ T6406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 191.860752][ T6406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 191.885248][ T6406] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 191.892785][ T6406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 191.903540][ T6406] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.916262][ T6406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 191.930832][ T6365] usb usb2-port1: attempt power cycle [ 191.936449][ T6406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 191.953170][ T6406] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 191.962012][ T6406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 191.973949][ T6406] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.986425][ T6406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 191.998089][ T6406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 192.015001][ T6406] usb 3-1: string descriptor 0 read error: -22 [ 192.023599][ T6406] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 192.032909][ T6406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.051769][ T6406] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 192.251343][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 192.269901][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 192.269917][ T30] audit: type=1326 audit(1760580480.350:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.1.367" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4a1f8eec9 code=0x0 [ 192.297812][ T6365] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 192.345235][ T6365] usb 2-1: device descriptor read/8, error -32 [ 192.361388][ T10] usb 3-1: USB disconnect, device number 25 [ 192.368762][ T7501] warning: `syz.1.367' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 192.380685][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 192.398060][ T7499] usb 3-1: Couldn't submit interrupt_out_urb -19 [ 192.481109][ T6365] raw-gadget.1 gadget.1: failed to queue suspend event [ 192.493205][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.368'. [ 192.513705][ T6365] raw-gadget.1 gadget.1: failed to queue reset event [ 192.608029][ T6365] raw-gadget.1 gadget.1: failed to queue resume event [ 192.677638][ T6365] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 192.717814][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 192.726361][ T6365] usb 2-1: device descriptor read/8, error -32 [ 192.850998][ T6365] raw-gadget.1 gadget.1: failed to queue suspend event [ 192.858012][ T6406] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 192.868039][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 192.875908][ T6365] usb usb2-port1: unable to enumerate USB device [ 193.017647][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 193.024291][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.034671][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.039250][ T6406] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.044497][ T10] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 193.056270][ T6406] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.063837][ T10] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 193.063865][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 193.066212][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0201, bcdDevice= 0.40 [ 193.075996][ T6406] usb 1-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 193.092193][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.119118][ T6406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.131092][ T6406] usb 1-1: config 0 descriptor?? [ 193.144044][ T10] usb 3-1: Product: syz [ 193.156937][ T10] usb 3-1: Manufacturer: syz [ 193.162005][ T10] usb 3-1: SerialNumber: syz [ 193.311768][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 193.366126][ T7514] syzkaller0: entered promiscuous mode [ 193.371853][ T7514] syzkaller0: entered allmulticast mode [ 193.401413][ T7514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.419840][ T7514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.496119][ T7525] capability: warning: `syz.3.373' uses deprecated v2 capabilities in a way that may be insecure [ 193.692223][ T7530] tipc: Enabling of bearer rejected, already enabled [ 193.707080][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 193.730520][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 193.741341][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 193.753498][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 193.767130][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 193.778069][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 193.790193][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 193.801154][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 193.811725][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 193.843087][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 193.856042][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 193.868927][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 193.881434][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 193.892545][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 193.903078][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 193.915230][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 193.926600][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 193.937199][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 193.949433][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 193.960408][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 193.972419][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 193.985964][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 193.998814][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.009190][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 194.022017][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.032877][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.043352][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 194.055358][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.070236][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.080695][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 194.092765][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.108192][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.125431][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 194.137444][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.148355][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.158852][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 194.212429][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.224645][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.236269][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 194.248669][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.259577][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.272058][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 194.284086][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.295119][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.306153][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 194.318934][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.330857][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.344080][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 194.356711][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.367399][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.378550][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 194.390256][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.401200][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.411547][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 194.423838][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.434951][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.445438][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 194.509663][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.547713][ T30] audit: type=1326 audit(1760580482.610:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 194.569895][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.583832][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.583846][ T30] audit: type=1326 audit(1760580482.610:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 194.583884][ T30] audit: type=1326 audit(1760580482.610:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 194.638422][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.645451][ T30] audit: type=1326 audit(1760580482.610:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 194.667622][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.675298][ T30] audit: type=1326 audit(1760580482.610:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 194.700880][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.707197][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.715361][ T30] audit: type=1326 audit(1760580482.610:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 194.729729][ T7547] netlink: 'syz.3.378': attribute type 5 has an invalid length. [ 194.737525][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.738313][ T30] audit: type=1326 audit(1760580482.610:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 194.780098][ T30] audit: type=1326 audit(1760580482.610:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 194.787261][ T7547] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.378'. [ 194.802186][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.822583][ T30] audit: type=1326 audit(1760580482.610:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 194.823094][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 194.872495][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.886102][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.897160][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 194.912716][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.958190][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.991279][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 195.005908][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.012847][ T7550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.379'. [ 195.026325][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 195.036861][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 195.050040][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.060809][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 195.071258][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 195.083071][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.095339][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 195.105838][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 195.179811][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.208638][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 195.220879][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 195.251504][ T5921] usb 1-1: USB disconnect, device number 25 [ 195.332436][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.365671][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 195.397173][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 195.419530][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.659717][ T812] asix 5-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 195.718818][ T812] asix 5-1:0.251: probe with driver asix failed with error -5 [ 196.021518][ T812] usb 5-1: USB disconnect, device number 26 [ 196.030241][ T10] usb 3-1: 0:2 : does not exist [ 196.106459][ T10] usb 3-1: unit 3 not found! [ 196.264549][ T10] usb 3-1: USB disconnect, device number 26 [ 196.416417][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.558799][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.608496][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.867972][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 196.890089][ T7580] netlink: 'syz.4.388': attribute type 2 has an invalid length. [ 196.903326][ T7577] 8021q: adding VLAN 0 to HW filter on device team1 [ 196.940973][ T7574] VFS: Lookup of 'binder0' in fuse fuse would have caused loop [ 197.040039][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.049320][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.319488][ T7585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.328240][ T7585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.991947][ T7607] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 198.032705][ T7607] futex_wake_op: syz.1.393 tries to shift op by 32; fix this program [ 199.359438][ T7656] netlink: 68 bytes leftover after parsing attributes in process `syz.0.403'. [ 199.370212][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.403'. [ 199.424566][ T812] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 199.604135][ T812] usb 5-1: Using ep0 maxpacket: 8 [ 199.620160][ T812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 199.640484][ T812] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 199.685559][ T812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 199.727230][ T812] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 199.736938][ T812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.746598][ T812] usb 5-1: Product: syz [ 199.754994][ T812] usb 5-1: Manufacturer: syz [ 199.764450][ T812] usb 5-1: SerialNumber: syz [ 199.895965][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.908207][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.920393][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.929847][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.943440][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.953404][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.998292][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 200.017376][ T30] audit: type=1326 audit(1760580488.020:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 200.019404][ T812] usb 5-1: config 0 descriptor?? [ 200.072497][ T812] radioshark2 5-1:0.0: Invalid radioSHARK2 device [ 200.079416][ T812] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22 [ 200.103392][ T812] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 200.111183][ T5922] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 200.128079][ T30] audit: type=1326 audit(1760580488.020:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4a1f8d710 code=0x7ffc0000 [ 200.216405][ T30] audit: type=1326 audit(1760580488.020:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff4a1f8eacb code=0x7ffc0000 [ 200.354298][ T812] usb 5-1: USB disconnect, device number 27 [ 200.399176][ T30] audit: type=1326 audit(1760580488.020:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff4a1f8eacb code=0x7ffc0000 [ 200.462996][ T5922] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.504782][ T30] audit: type=1326 audit(1760580488.080:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 200.513121][ T5922] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 200.629204][ T5922] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 200.645032][ T30] audit: type=1326 audit(1760580488.080:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 200.697591][ T5922] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.737597][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.792960][ T30] audit: type=1326 audit(1760580488.080:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 201.007989][ T5922] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.036239][ T30] audit: type=1326 audit(1760580488.080:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 201.236642][ T30] audit: type=1326 audit(1760580488.080:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 201.300732][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.325795][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.396407][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.408955][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.651977][ T30] audit: type=1326 audit(1760580488.080:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff4a1f8eec9 code=0x7ffc0000 [ 201.655631][ T5922] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 201.877441][ T5922] usb 3-1: USB disconnect, device number 27 [ 202.837641][ T812] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 202.990519][ T812] usb 4-1: config 0 has an invalid descriptor of length 224, skipping remainder of the config [ 203.001429][ T812] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 203.012592][ T6365] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 203.027792][ T812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 147, changing to 11 [ 203.039554][ T812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 25028, setting to 1024 [ 203.051076][ T812] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.173543][ T812] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 203.226919][ T812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.237680][ T6365] usb 1-1: Using ep0 maxpacket: 16 [ 203.257362][ T6365] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.265038][ T812] usb 4-1: Product: syz [ 203.280876][ T6365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.284260][ T812] usb 4-1: Manufacturer: syz [ 203.326963][ T6365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 203.336674][ T812] usb 4-1: SerialNumber: syz [ 203.339781][ T812] usb 4-1: config 0 descriptor?? [ 203.357633][ T6365] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 203.372674][ T7696] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 203.398119][ T6365] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.412750][ T6365] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 203.413623][ T812] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 203.428546][ T6365] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 203.472385][ T6365] usb 1-1: Manufacturer: syz [ 203.488097][ T812] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 203.499553][ T6365] usb 1-1: config 0 descriptor?? [ 203.544353][ T812] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 203.667673][ T6366] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 203.817625][ T6366] usb 3-1: Using ep0 maxpacket: 8 [ 203.824723][ T6366] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.885442][ T6365] rc_core: IR keymap rc-hauppauge not found [ 203.895766][ T6365] Registered IR keymap rc-empty [ 203.978472][ T6365] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 203.990915][ T6366] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 204.003257][ T6365] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 204.010497][ T6366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.018714][ T6366] usb 3-1: Product: syz [ 204.024540][ T6366] usb 3-1: Manufacturer: syz [ 204.029589][ T6366] usb 3-1: SerialNumber: syz [ 204.046758][ T6365] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 204.060332][ T6366] usb 3-1: config 0 descriptor?? [ 204.068088][ T6365] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 204.084821][ T6366] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 204.093940][ T6366] usb 3-1: selecting invalid altsetting 1 [ 204.106360][ T6365] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 204.127905][ T6365] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 204.148790][ T6365] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 204.202265][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 204.215072][ T7716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.420'. [ 204.237690][ T6365] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 204.257681][ T6365] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 204.287732][ T6365] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 204.308309][ T6365] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 204.327739][ T6365] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 204.377681][ T6365] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 204.400650][ T6365] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 204.509801][ T6365] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 204.520395][ T6365] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 204.572934][ T6365] usb 1-1: USB disconnect, device number 26 [ 204.961658][ T7728] netlink: 68 bytes leftover after parsing attributes in process `syz.4.421'. [ 204.974530][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.421'. [ 205.001017][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.012329][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.327707][ T5922] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 205.488848][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 205.517837][ T6365] usb 4-1: USB disconnect, device number 26 [ 205.542566][ T6365] garmin_gps 4-1:0.0: device disconnected [ 205.554605][ T5922] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 205.612106][ T5922] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 205.671743][ T5922] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.773693][ T5922] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.784434][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.825917][ T5922] usb 1-1: Product: syz [ 205.833540][ T5922] usb 1-1: Manufacturer: syz [ 205.842996][ T5922] usb 1-1: SerialNumber: syz [ 205.943649][ T7740] netlink: 76 bytes leftover after parsing attributes in process `syz.1.425'. [ 206.251610][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.427'. [ 206.289926][ T7746] mmap: syz.4.427 (7746) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 206.384939][ T812] usb 3-1: USB disconnect, device number 28 [ 206.483839][ T7748] loop9: detected capacity change from 0 to 7 [ 206.501274][ T7750] netlink: 596 bytes leftover after parsing attributes in process `syz.2.429'. [ 206.519409][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 206.522620][ T7748] Dev loop9: unable to read RDB block 7 [ 206.534208][ T7748] loop9: AHDI p3 p4 [ 206.544570][ T7748] loop9: partition table partially beyond EOD, truncated [ 206.571460][ T7748] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 206.581274][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 206.688109][ T5885] udevd[5885]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 207.197937][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 208.116903][ T5922] usb 1-1: 0:2 : does not exist [ 208.194393][ T5922] usb 1-1: USB disconnect, device number 27 [ 208.697682][ T5922] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 208.867956][ T812] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 208.911361][ T5922] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 208.932309][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.026528][ T5922] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 209.073773][ T5922] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 209.093762][ T5922] usb 1-1: Manufacturer: syz [ 209.098620][ T812] usb 5-1: Using ep0 maxpacket: 32 [ 209.108711][ T812] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 209.164499][ T812] usb 5-1: config 0 has no interface number 0 [ 209.358676][ T5922] usb 1-1: config 0 descriptor?? [ 209.403838][ T812] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 209.488838][ T812] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 209.496399][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.525968][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.533912][ T812] usb 5-1: Product: syz [ 209.557611][ T812] usb 5-1: Manufacturer: syz [ 209.567788][ T7794] tty tty1: ldisc open failed (-12), clearing slot 0 [ 209.574875][ T6180] Oops: general protection fault, probably for non-canonical address 0xdffffc000000044c: 0000 [#1] SMP KASAN PTI [ 209.586771][ T6180] KASAN: probably user-memory-access in range [0x0000000000002260-0x0000000000002267] [ 209.588139][ T812] usb 5-1: config 0 descriptor?? [ 209.596318][ T6180] CPU: 1 UID: 0 PID: 6180 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 209.610756][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.620797][ T6180] Workqueue: events_unbound flush_to_ldisc [ 209.626592][ T6180] RIP: 0010:n_tty_receive_buf_common+0x166/0x12f0 [ 209.632992][ T6180] Code: e9 03 48 89 8c 24 a0 00 00 00 48 81 c3 38 04 00 00 31 ed 4c 89 7c 24 38 48 89 5c 24 70 48 89 6c 24 28 48 8b 84 24 08 01 00 00 <42> 80 3c 28 00 74 0d 48 8b bc 24 f8 00 00 00 e8 96 a9 15 fd 4c 89 [ 209.652581][ T6180] RSP: 0018:ffffc9000bb37850 EFLAGS: 00010246 [ 209.658632][ T6180] RAX: 000000000000044c RBX: ffff8880562ee438 RCX: 000000000000000b [ 209.666582][ T6180] RDX: 1ffff1100ac5dc74 RSI: 000000000000000b RDI: ffff8880562ee558 [ 209.674534][ T6180] RBP: 0000000000000000 R08: ffff8880562ee287 R09: 1ffff1100ac5dc50 [ 209.682486][ T6180] R10: dffffc0000000000 R11: ffffed100ac5dc51 R12: ffff8880114a1fa0 [ 209.690438][ T6180] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880562ee5f0 [ 209.698388][ T6180] FS: 0000000000000000(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 209.707296][ T6180] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.713857][ T6180] CR2: 0000000000000000 CR3: 00000000773cc000 CR4: 00000000003526f0 [ 209.721811][ T6180] Call Trace: [ 209.725070][ T6180] [ 209.727986][ T6180] ? tty_ldisc_ref+0x1c/0x90 [ 209.732568][ T6180] ? __pfx_tty_buffer_free+0x10/0x10 [ 209.737841][ T6180] ? tty_ldisc_receive_buf+0x89/0x160 [ 209.743201][ T6180] tty_port_default_receive_buf+0x6e/0xa0 [ 209.748908][ T6180] flush_to_ldisc+0x24a/0x6e0 [ 209.753568][ T6180] ? process_scheduled_works+0x9ef/0x17b0 [ 209.759274][ T6180] process_scheduled_works+0xae1/0x17b0 [ 209.764812][ T6180] ? __pfx_process_scheduled_works+0x10/0x10 [ 209.770820][ T6180] worker_thread+0x8a0/0xda0 [ 209.775404][ T6180] kthread+0x711/0x8a0 [ 209.779452][ T6180] ? __pfx_worker_thread+0x10/0x10 [ 209.784548][ T6180] ? __pfx_kthread+0x10/0x10 [ 209.789118][ T6180] ? _raw_spin_unlock_irq+0x23/0x50 [ 209.794306][ T6180] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.799484][ T6180] ? __pfx_kthread+0x10/0x10 [ 209.804051][ T6180] ret_from_fork+0x4bc/0x870 [ 209.808631][ T6180] ? __pfx_ret_from_fork+0x10/0x10 [ 209.813728][ T6180] ? __switch_to_asm+0x39/0x70 [ 209.818472][ T6180] ? __switch_to_asm+0x33/0x70 [ 209.823214][ T6180] ? __pfx_kthread+0x10/0x10 [ 209.827787][ T6180] ret_from_fork_asm+0x1a/0x30 [ 209.832537][ T6180] [ 209.835537][ T6180] Modules linked in: [ 209.840018][ T6180] ---[ end trace 0000000000000000 ]--- [ 209.868093][ T5922] rc_core: IR keymap rc-hauppauge not found [ 209.874078][ T5922] Registered IR keymap rc-empty [ 209.880008][ T5922] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 209.884524][ T6180] RIP: 0010:n_tty_receive_buf_common+0x166/0x12f0 [ 209.907217][ T5922] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 209.924845][ T6180] Code: e9 03 48 89 8c 24 a0 00 00 00 48 81 c3 38 04 00 00 31 ed 4c 89 7c 24 38 48 89 5c 24 70 48 89 6c 24 28 48 8b 84 24 08 01 00 00 <42> 80 3c 28 00 74 0d 48 8b bc 24 f8 00 00 00 e8 96 a9 15 fd 4c 89 [ 209.952070][ T6180] RSP: 0018:ffffc9000bb37850 EFLAGS: 00010246 [ 209.961329][ T5922] usb 1-1: USB disconnect, device number 28 [ 209.962504][ T6180] RAX: 000000000000044c RBX: ffff8880562ee438 RCX: 000000000000000b [ 209.980828][ T6180] RDX: 1ffff1100ac5dc74 RSI: 000000000000000b RDI: ffff8880562ee558 [ 209.988987][ T6180] RBP: 0000000000000000 R08: ffff8880562ee287 R09: 1ffff1100ac5dc50 [ 209.997002][ T6180] R10: dffffc0000000000 R11: ffffed100ac5dc51 R12: ffff8880114a1fa0 [ 210.005255][ T6180] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880562ee5f0 [ 210.013301][ T6180] FS: 0000000000000000(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 210.022375][ T6180] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.033485][ T6180] CR2: 000000110c388f95 CR3: 0000000077556000 CR4: 00000000003526f0 [ 210.052932][ T6180] Kernel panic - not syncing: Fatal exception [ 210.059255][ T6180] Kernel Offset: disabled [ 210.063562][ T6180] Rebooting in 86400 seconds..