last executing test programs: 9.663813712s ago: executing program 2 (id=1366): socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="10"], 0x10}, 0x4045) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000104c05680200000000000309022400010000d00009040000010300000009210900040122a000090581034000000000"], 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000"], 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r4, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet6(r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) lseek(r1, 0x1a43, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, 0x0) 9.507469029s ago: executing program 0 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x27b, 0x1c982}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r0}}}}, @IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000844) r1 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x43, 0xd3, 0x78}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 8.391077943s ago: executing program 4 (id=1374): openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = io_uring_setup(0x4aa5, &(0x7f0000000200)={0x0, 0x4c54, 0x40}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b047e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402512eaedaa7f443b370d3f6406fa415e7e0f3e632183d4a081f423d406302"], 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_setup(0x80040af1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1104, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}, 0x108) getsockopt$inet_buf(r8, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012"], 0x3c}, 0x1, 0xba01}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) dup(0xffffffffffffffff) 7.920124402s ago: executing program 0 (id=1376): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1e28, 0x6e, 0x91a, 0x80000000, 0x80000000}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={r1, 0x58, "153f9e9cee5369c158684dafe082ffc1e59515225e02f6579d9554282513fdc50051980392287f15529d66f80b1f8d61003a75454e19c950aa97fb0e052e5ee09b22add9bc877ee750f84e787b61116a67e4684b01e567f5"}, &(0x7f00000001c0)=0x60) 7.36699352s ago: executing program 0 (id=1377): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f0000000600)="4bb16fc96dcf827965e297e4bcdc4cc27c7f5cce42d3404ebf85cb80c1e0f1800190544fb4577f9c7b137beb432502670dac13efbd760cd34255de3bf80391ae67bfe4a9e6cef0df81e89597f675b813d1ba2a46"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xfd, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="060b2f0000002f30b9d02d1fbb42de954ec65d28e579df063405d9405fe05a85b00032d3ca97d4e0b4f35a7179ba7831eca5a173c28da1921616ac15783faedfecdc7fdef12fcca2dc6599556340413a22bac48693860109a2edaa14389386af1c4581d9d30df8c2aaed98951958476659f2c73e18f5055b7e58f85d3b8ae05e3013394d535fc10df315b7e95fea646569f7036a7aedab6200000000220000006f2c8185b573ad7e939102a56b9567a562a0cd338c3568"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.366717938s ago: executing program 1 (id=1378): r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x24f9, &(0x7f0000000400)={0x0, 0x100000, 0x10100, 0x6, 0xcb}, &(0x7f0000000280)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x208800, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f00000000c0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, r3, 0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x2, {0x0, r4}}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f00000041c0)={0x10, 0x0, r6}, 0x10) write$FUSE_NOTIFY_RESEND(r5, &(0x7f0000005100)={0x14}, 0x14) r7 = syz_usb_connect_ath9k(0x3, 0x2b, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x1d0, &(0x7f0000000280)=ANY=[@ANYBLOB="2400004e6be8f0b6ee2420bf926f6af7edbb052ef8dd8f9221b900585564babc748c4fbea31865b89200004e"]) 6.432208212s ago: executing program 2 (id=1379): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x403}, 0x20040010) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1d, 0xfffffffffffffffd) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x484200) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0xa, 0x0, @void}, 0x10) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f00000000c0)=0xc3c2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x3}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x41, 0x107, 0x0, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}}, 0x4010) 5.726757253s ago: executing program 3 (id=1380): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000100001000004000008000500", @ANYRES32=r4], 0x50}}, 0x2) 5.599977892s ago: executing program 3 (id=1381): syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d0423084839010203010902"], 0x0) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x2, 0x105}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x583, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 5.516008244s ago: executing program 0 (id=1382): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x40, &(0x7f0000000000), 0x111, 0xf}}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="6800000013000100000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x68}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'xfrm0\x00', &(0x7f0000000700)=@ethtool_rxnfc={0x2e, 0xd, 0x7fff, {0xe, @esp_ip6_spec={@empty, @loopback, 0x4, 0x4a}, {0x0, @multicast, 0x11, 0x8f75, [0x6, 0x3]}, @esp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x30}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2, 0x34}, {0x0, @local, 0x8, 0xd, [0x7ff, 0x6f8]}, 0xffffffff7fffffff, 0x5}}}) syz_open_dev$dri(0x0, 0xffffffff, 0x200) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000400000080000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x20c6, 0x80, 0x2, 0x1f9}, &(0x7f0000000480)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket(0x22, 0x6, 0x0) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="d90d23001e9a23bd0b30bc19c88b251ddd1f101e83ee9e34c8f520d2a8c471ff4b4d126743b0dcd5be147e9476bbd7d717a6dd3c240a65f49291f21f7766826c7e2eb80eb730ad1a36b4c7495c4eff24eb6fd919212cbc0921476e0a47253a0000326ea85594000000000000000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xd94}, 0x1, 0x0, 0x0, 0x40008c0}, 0xc0014) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1, 0x0, 0x6) sendto$inet6(r6, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9ea685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902060f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa415ac4d31c4f7a1", 0x8b, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r9, r9, 0x0, 0x200000) cachestat(r9, &(0x7f0000000000)={0x9, 0x4000000}, &(0x7f0000000040), 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f00000000c0)) 5.166587597s ago: executing program 4 (id=1383): prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x1) truncate(&(0x7f0000000240)='./file0\x00', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) 4.875066053s ago: executing program 4 (id=1384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)='a', 0x1}], 0x1}, 0x4000001) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000817000/0x2000)=nil, &(0x7f000068c000/0x1000)=nil, &(0x7f0000691000/0x3000)=nil, &(0x7f0000692000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000690000/0x3000)=nil, &(0x7f0000691000/0x4000)=nil, &(0x7f0000000480)="8098eb6e27a54c00e293f0bec9dbc5795c7895c67f89504b257cbacfa983a874e8141c17b05174e8f61fe656f9988e92d095a6b1b03b9398fd65dd4e814629d712cc3accffa821dc417a5d4dd2e6f6862aa0eee3572059a076f21090e44cdc23c2786be5ead8a6efac6341c331e96a8b9e40ee3a1a0289caaa28ca00b6c15e115c784fee05407c777513f95aec11f81a0ba9fb928d6825b123613262a599353c8c78838bcaef6448c37d80f892d180f7922b82c9ee30710a88deb354e052b54b", 0xc0, r5}, 0x68) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff0, 0xfff3}, {}, {0xffff, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bond_slave_0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) mq_notify(r8, &(0x7f0000000340)={0x0, 0x29, 0x1, @thr={&(0x7f0000000280), 0x0}}) r9 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x13f, 0x8}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) 4.71554428s ago: executing program 4 (id=1385): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000004904000000ff054900"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="400e1300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 4.394489974s ago: executing program 0 (id=1386): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x2, 0x5, 0xa0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r6 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) read(r6, &(0x7f0000000080)=""/116, 0xfffffeb2) read(r6, &(0x7f0000000280)=""/96, 0x60) socket$nl_generic(0x10, 0x3, 0x10) 4.283882452s ago: executing program 1 (id=1387): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x0, 0xf3, 0x0, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x8, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000037c0000040042800c00018006120612"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="00022bbd7000fddbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="ae07"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x896) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x20000000000000}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000100)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000440)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r10 = dup(r9) r11 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r12 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r12, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x3f1}], 0x1}}], 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r11, 0xc06c4124, &(0x7f0000000380)) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, 0x0) 3.933915292s ago: executing program 3 (id=1388): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000480)=@ethtool_perm_addr}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a0001000000000003790b0cd418e8bafbfedbdf25020020e0000300000000000008000200ac1e0101"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8010, 0x0, 0x3, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0/file0\x00', &(0x7f00000001c0)={0x40040, 0x32, 0x10}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_tcp_int(r2, 0x6, 0x1, 0x0, &(0x7f0000000240)) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000140)=""/51, &(0x7f00000000c0)=0x33) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x8, 0x800, 0xffff, 0x9833, 0xfffffffb}) syz_open_dev$video(&(0x7f0000000040), 0x2, 0x0) 3.837555102s ago: executing program 3 (id=1389): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7f, 0xb, 0x7, 0x11, @mcast2, @rand_addr=' \x01\x00', 0x7800, 0xc2b6f7bfc9fd45fc, 0x92, 0x8}}) 3.620108669s ago: executing program 3 (id=1390): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x22, 0x2, 0x3) sendto$inet6(r2, &(0x7f0000000440)="0042fb14b5ff524b4e73f6d45dd254c581c10c036dfa08c56a494fa0a9a68bdcb97abe942de5fad052253a0b507cb8eb20736afd785781cea32c9074337c771da9f32a5ba5a58380382163bc80d0f2aa0a5c2e", 0x53, 0x8800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0xf, 0x0, 0x2, 0x8, 0x8, 0xfffffffa, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "3d186e85f3a07d09", "a373047e6878fdb57fc2596912f8bdfd", "27edd157", "3684fa3381fd0182"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, 0x0, 0x0) close(r4) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000400)={0x46, 0x4}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b0001"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x183701, 0x0) 3.064287547s ago: executing program 2 (id=1391): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x3d, 0x79, 0x40, 0x1ac7, 0x1, 0xcc19, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0x2c, 0xf4, 0x0, [], [{{0x9, 0x5, 0x88}}]}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(r0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kexec_load(0x18bf, 0x0, 0x0, 0x80000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005200014b72bd70000000000002"], 0x18}, 0x1, 0x0, 0x0, 0x40091}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, &(0x7f00000003c0)={{@my=0x1, 0x4}, 0x1000, 0xffffffffffffffff, 0x0, 0x0, 0x8e9, 0x2, 0x1004000000ff9, 0x2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x1, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8d1}) 2.865893372s ago: executing program 1 (id=1392): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xfd, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="060b2f0000002f30b9d02d1fbb42de954ec65d28e579df063405d9405fe05a85b00032d3ca97d4e0b4f35a7179ba7831eca5a173c28da1921616ac15783faedfecdc7fdef12fcca2dc6599556340413a22bac48693860109a2edaa14389386af1c4581d9d30df8c2aaed98951958476659f2c73e18f5055b7e58f85d3b8ae05e3013394d535fc10df315b7e95fea646569f7036a7aedab6200000000220000006f2c8185b573ad7e939102a56b9567a562a0cd338c3568"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.575931731s ago: executing program 4 (id=1393): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000003c0)="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", 0x6fa}, {0x0, 0xc800}], 0x2}}], 0x1, 0x20000010) 1.507595342s ago: executing program 4 (id=1394): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000340)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)="19", 0x1}, {&(0x7f0000000180)="89d1df28a9db0494b40f92e329c10fbddca40d99ab07e92f2c54ee31a1ffb9df", 0x20}, {&(0x7f0000000240)="2bd3e9fd5e8cdf0895388cf592e7e829619e750dd6242e415e96c60b0c7ed30c824011bfacfffc31e15f3739a8", 0x2d}], 0x3) socket$inet6(0xa, 0x2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00220f00000083090000000b93bf0280b37488dffcd927271b7fbc85b29844f4d8e719fc5ccbe58b25828001065f7f29eb7f8dea329783827aac1d422b"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000980)={0x2, 0x1, 0x8001, 0x6, 0x1, 0x10000002}) 1.143501866s ago: executing program 0 (id=1395): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="003024000000cbdbc9f97d3f6c39dd25764a0def67c62d07474fb444dbeb038245f098cd"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x40, 0x7, 0x61, {0x61, 0x21, "6b4367514b8e7ea3d97b3d332eeb057ee7a11094be1eb2ccbb240474d7e4a9618dbfdf8b40f0c3151197131863a0e41f48807f2dc282857fbaed01f2cc72ea530cfcc2bbdedcca097ab44c1fcb85c33f1b7aaecf8d47751c0e0b5e03e11084"}}, &(0x7f0000000180)={0x0, 0x3, 0x5f, @string={0x5f, 0x3, "bebf20c2c9dc36dc426405f857ee864639e304d2e2076dff7aeb512f6d37b5ba3745eb0e33cca8b0453dfc2c4e9fe38650a86a1bb8d224f6e6c24cf52a6aff8386661191fc413a842c1fd37d6ae2d90b2c4a00fd8cb10bae6c209c1532"}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x20, 0x7, 0x52, "3bbbd944743817c8cbd709b0f4847e1ca05669ee0e400cfc43d8f7eea2b5693e1332d0378a9f0630a9b46b66b48995d85b4716dfedd579539d5522a89c56715379ace7b46845791b7dcf6c25d27abe787bbc"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0xc0, 0x5, 0x4, "11177332"}, &(0x7f00000003c0)}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x20402) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in6=@mcast1, @in6=@remote, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x20, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, @in=@broadcast, @in6=@empty, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={'wlan0\x00', {0x2, 0x4e23, @local}}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x0, 0x3, &(0x7f0000000100)={0x15, "537a1468df50710e3d758bd16868e0bf22c7b844c1b13bd36cbd05d86428870c38"}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) 1.01771435s ago: executing program 1 (id=1396): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x4, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000500000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 904.207459ms ago: executing program 1 (id=1397): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe01) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187013, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x2, 0x1b, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), 0x0, 0x830008, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x9, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x300) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000008c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000008c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KDSKBSENT(r8, 0x4b49, &(0x7f0000002240)={0x8, "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"}) (async) ioctl$KDSKBSENT(r8, 0x4b49, &(0x7f0000002240)={0x8, "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"}) ioctl$PIO_FONTRESET(r8, 0x4b6d, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r10, 0x0, 0x9, 0x4) 661.738208ms ago: executing program 2 (id=1398): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xf7}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x11, 0x0, @any, 0x80, 0x40, 0xe, 0x80, 0xa, 0x2, 0x6e, @any, 0xdd, "5eb7c4f426b8440cbef47e3a3bff4a912c190cea526a92f230813685edab95b5a2fcf9d4774bbb7b80cec4bc714d4f40d85ab2c2ca0858ed26ab53d403fc9aa839b1316b275bea4f968e99453ffbebaf82bb2a19ace4bd78d2d1bb34f2a3f82c8de03e2bf5d3cee4c85410c7367aa50ea24a1c871b955ff63d8df1b3c1ea5d4e2f893992815882378ff34cb5155136214aa433a2ff9d296a4b127e08280d099a017fe09a19eed60f44b58e7f3b3a01aa87e8eba739211e2169374807b81c484e1573e3b8b4e2773d089449c42704b0cc80c411148387a9cc57245b0fdc"}]}}}}, 0xfa) 522.212464ms ago: executing program 3 (id=1399): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) exit(0xfe) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x10, 0x803, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000440)=0x6}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$igmp(0x2, 0x3, 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000c80)={0x30, 0x0, 0x1, 0x0, 0x10000, 0xffffffffffff9dce, 0xe8, 0x0}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x800c2, 0x0) write$vga_arbiter(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes i'], 0xd) ptrace(0x10, r5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_pidfd_open(r5, 0x0) keyctl$setperm(0x5, r7, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) ptrace$pokeuser(0x6, r5, 0x358, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 427.049417ms ago: executing program 2 (id=1400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0xfffffff5}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 215.735257ms ago: executing program 2 (id=1401): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x403}, 0x20040010) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1d, 0xfffffffffffffffd) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x484200) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0xa, 0x0, @void}, 0x10) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f00000000c0)=0xc3c2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x3}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x41, 0x107, 0x0, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}}, 0x4010) 0s ago: executing program 1 (id=1402): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x0, 0xf3, 0x0, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x8, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000037c0000040042800c00018006120612"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="00022bbd7000fddbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="ae07"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x896) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x20000000000000}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000100)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000440)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r10 = dup(r9) r11 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r12 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r12, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x3f1}], 0x1}}], 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r11, 0xc06c4124, &(0x7f0000000380)) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, 0x0) kernel console output (not intermixed with test programs): 65:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.4.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 340.103044][ T30] audit: type=1326 audit(1762052898.405:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.4.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 340.125374][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.183279][ T30] audit: type=1326 audit(1762052898.405:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.4.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 340.205650][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.254030][ T30] audit: type=1326 audit(1762052898.405:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.4.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 340.276448][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.295222][ T5934] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 340.333939][ T5934] dvb-usb: bulk message failed: -22 (3/0) [ 340.341920][ T9801] usb usb8: usbfs: process 9801 (syz.1.1096) did not claim interface 0 before use [ 340.381895][ T30] audit: type=1326 audit(1762052898.405:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.4.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 340.384482][ T5934] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 340.496513][ T9783] dvb-usb: bulk message failed: -22 (2/0) [ 340.538166][ T30] audit: type=1326 audit(1762052898.405:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.4.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 340.560396][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.612338][ T5934] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 340.653220][ T5934] usb 4-1: media controller created [ 340.696868][ T30] audit: type=1326 audit(1762052898.405:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.4.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 340.697026][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.758493][ T30] audit: type=1326 audit(1762052898.405:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.4.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 340.871556][ T5934] dvb-usb: bulk message failed: -22 (6/0) [ 340.894022][ T5934] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 340.912732][ T5934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 340.913931][ T5825] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 340.925768][ T30] audit: type=1326 audit(1762052898.405:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.4.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9662b8d810 code=0x7ffc0000 [ 340.958094][ T5934] dvb-usb: schedule remote query interval to 150 msecs. [ 340.972459][ T5934] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 341.087938][ T5825] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 341.115241][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.139219][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 341.143260][ T5825] usb 3-1: config 0 descriptor?? [ 341.153932][ T5934] dvb-usb: error while querying for an remote control event. [ 341.160477][ T5825] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 341.172001][ T9808] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1099'. [ 341.192654][ T5825] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 341.323954][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 341.329917][ T5934] dvb-usb: error while querying for an remote control event. [ 341.362797][ T9804] loop6: detected capacity change from 0 to 7 [ 341.382981][ T5831] Dev loop6: unable to read RDB block 7 [ 341.412277][ T5831] loop6: unable to read partition table [ 341.438378][ T5831] loop6: partition table beyond EOD, truncated [ 341.469971][ T9804] Dev loop6: unable to read RDB block 7 [ 341.475797][ T9804] loop6: unable to read partition table [ 341.490329][ T9804] loop6: partition table beyond EOD, truncated [ 341.633959][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 341.692385][ T5934] dvb-usb: error while querying for an remote control event. [ 341.707537][ T9804] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 341.732734][ T9818] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 341.739285][ T9818] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 341.754429][ T5825] usb 4-1: USB disconnect, device number 51 [ 341.828125][ T9822] fuse: Unknown parameter '0x0000000000000005' [ 341.846062][ T5886] usb 3-1: USB disconnect, device number 70 [ 341.962048][ T9827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1103'. [ 342.004049][ T9818] vhci_hcd vhci_hcd.0: Device attached [ 342.073301][ T5825] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 342.222831][ T9819] vhci_hcd: connection closed [ 342.279027][ T2921] vhci_hcd: stop threads [ 342.294722][ T24] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 342.330314][ T2921] vhci_hcd: release socket [ 342.344282][ T2921] vhci_hcd: disconnect device [ 342.477031][ T939] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 343.064062][ T5886] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 343.109942][ T939] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 343.127504][ T939] usb 2-1: config 160 has no interface number 0 [ 343.140681][ T939] usb 2-1: config 160 interface 200 has no altsetting 0 [ 343.181281][ T939] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 343.195175][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.209249][ T939] usb 2-1: Product: syz [ 343.222551][ T939] usb 2-1: Manufacturer: syz [ 343.237508][ T939] usb 2-1: SerialNumber: syz [ 343.422066][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.433435][ T5886] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 343.450609][ T5886] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 343.460918][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 343.474465][ T5886] usb 5-1: Product: syz [ 343.478734][ T5886] usb 5-1: Manufacturer: syz [ 343.483524][ T5886] usb 5-1: SerialNumber: syz [ 343.493432][ T5886] usb 5-1: config 0 descriptor?? [ 343.863869][ T5886] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 344.034093][ T5886] usb 3-1: device descriptor read/64, error -71 [ 344.293940][ T5886] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 344.422240][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 344.432686][ T5886] usb 3-1: device descriptor read/64, error -71 [ 344.444057][ T9850] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1108'. [ 344.557085][ T9854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.574202][ T9854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.585179][ T5886] usb usb3-port1: attempt power cycle [ 344.638152][ T939] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.653677][ T939] usb 2-1: MIDIStreaming interface descriptor not found [ 344.695257][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 344.695273][ T30] audit: type=1326 audit(1762052903.375:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62c7f8ebcb code=0x7ffc0000 [ 344.723572][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.758732][ T30] audit: type=1326 audit(1762052903.405:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62c7f8ebcb code=0x7ffc0000 [ 344.785023][ T5925] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 344.790852][ T939] usb 2-1: USB disconnect, device number 59 [ 344.912198][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.954105][ T30] audit: type=1326 audit(1762052903.585:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62c7f8ebcb code=0x7ffc0000 [ 344.976285][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.993954][ T5886] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 345.030189][ T5886] usb 3-1: device descriptor read/8, error -71 [ 345.040083][ T30] audit: type=1326 audit(1762052903.705:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62c7f8ebcb code=0x7ffc0000 [ 345.065859][ T9860] loop9: detected capacity change from 0 to 7 [ 345.087230][ T6088] Dev loop9: unable to read RDB block 7 [ 345.102992][ T6088] loop9: unable to read partition table [ 345.121059][ T6088] loop9: partition table beyond EOD, truncated [ 345.137180][ T30] audit: type=1326 audit(1762052903.705:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62c7f8ebcb code=0x7ffc0000 [ 345.159363][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.172107][ T9860] Dev loop9: unable to read RDB block 7 [ 345.180196][ T30] audit: type=1326 audit(1762052903.855:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62c7f8ebcb code=0x7ffc0000 [ 345.202881][ T9860] loop9: unable to read partition table [ 345.213007][ T30] audit: type=1326 audit(1762052903.855:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62c7f8ebcb code=0x7ffc0000 [ 345.245172][ T9860] loop9: partition table beyond EOD, truncated [ 345.251526][ T9860] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 345.276198][ T30] audit: type=1326 audit(1762052903.925:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62c7f8ebcb code=0x7ffc0000 [ 345.304085][ T5886] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 345.353416][ T5886] usb 3-1: device descriptor read/8, error -71 [ 345.363694][ T30] audit: type=1326 audit(1762052904.025:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62c7f8ebcb code=0x7ffc0000 [ 345.437166][ T30] audit: type=1326 audit(1762052904.035:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62c7f8ebcb code=0x7ffc0000 [ 345.459506][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.484081][ T5886] usb usb3-port1: unable to enumerate USB device [ 345.513416][ T5934] usb 5-1: USB disconnect, device number 58 [ 345.518805][ T9865] FAULT_INJECTION: forcing a failure. [ 345.518805][ T9865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.605157][ T9867] trusted_key: encrypted_key: insufficient parameters specified [ 345.631009][ T9865] CPU: 1 UID: 0 PID: 9865 Comm: syz.1.1112 Not tainted syzkaller #0 PREEMPT(full) [ 345.631033][ T9865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.631043][ T9865] Call Trace: [ 345.631050][ T9865] [ 345.631056][ T9865] dump_stack_lvl+0x189/0x250 [ 345.631092][ T9865] ? __pfx____ratelimit+0x10/0x10 [ 345.631112][ T9865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.631133][ T9865] ? __pfx__printk+0x10/0x10 [ 345.631163][ T9865] should_fail_ex+0x414/0x560 [ 345.631192][ T9865] _copy_to_user+0x31/0xb0 [ 345.631215][ T9865] simple_read_from_buffer+0xe1/0x170 [ 345.631244][ T9865] proc_fail_nth_read+0x1b3/0x220 [ 345.631269][ T9865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.631290][ T9865] ? rw_verify_area+0x2a6/0x4d0 [ 345.631310][ T9865] ? __lock_acquire+0xab9/0xd20 [ 345.631324][ T9865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.631345][ T9865] vfs_read+0x200/0xa30 [ 345.631366][ T9865] ? fdget_pos+0x247/0x320 [ 345.631387][ T9865] ? __pfx___mutex_lock+0x10/0x10 [ 345.631408][ T9865] ? __pfx_vfs_read+0x10/0x10 [ 345.631430][ T9865] ? __fget_files+0x2a/0x420 [ 345.631451][ T9865] ? __fget_files+0x3a0/0x420 [ 345.631465][ T9865] ? __fget_files+0x2a/0x420 [ 345.631489][ T9865] ksys_read+0x145/0x250 [ 345.631512][ T9865] ? __pfx_ksys_read+0x10/0x10 [ 345.631537][ T9865] ? do_syscall_64+0xbe/0xfa0 [ 345.631561][ T9865] do_syscall_64+0xfa/0xfa0 [ 345.631581][ T9865] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.631601][ T9865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.631617][ T9865] ? clear_bhb_loop+0x60/0xb0 [ 345.631638][ T9865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.631654][ T9865] RIP: 0033:0x7f3cf2d8d9dc [ 345.631668][ T9865] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 345.631680][ T9865] RSP: 002b:00007f3cf3c4b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 345.631698][ T9865] RAX: ffffffffffffffda RBX: 00007f3cf2fe5fa0 RCX: 00007f3cf2d8d9dc [ 345.631710][ T9865] RDX: 000000000000000f RSI: 00007f3cf3c4b0a0 RDI: 0000000000000004 [ 345.631721][ T9865] RBP: 00007f3cf3c4b090 R08: 0000000000000000 R09: 0000000000000000 [ 345.631730][ T9865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.631740][ T9865] R13: 00007f3cf2fe6038 R14: 00007f3cf2fe5fa0 R15: 00007f3cf310fa28 [ 345.631771][ T9865] [ 345.865833][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.146738][ T9869] openvswitch: netlink: IP tunnel dst address not specified [ 346.243895][ T5886] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 346.329346][ T9874] CUSE: DEVNAME unspecified [ 346.631813][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 346.767091][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.774080][ T5934] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 346.806275][ T5886] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 346.877540][ T5886] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 346.890175][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.902142][ T5886] usb 4-1: config 0 descriptor?? [ 346.948607][ T5886] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 346.956939][ T5886] dvb-usb: bulk message failed: -22 (3/0) [ 346.966129][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.981272][ T5886] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 346.990430][ T5886] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 346.997989][ T5886] usb 4-1: media controller created [ 347.004414][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 347.014357][ T9887] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 347.020882][ T9887] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 347.096817][ T5886] dvb-usb: bulk message failed: -22 (6/0) [ 347.108742][ T5886] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 347.127753][ T9887] vhci_hcd vhci_hcd.0: Device attached [ 347.179369][ T5886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 347.254229][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'. [ 347.364081][ T5886] dvb-usb: schedule remote query interval to 150 msecs. [ 347.386828][ T9888] vhci_hcd: connection reset by peer [ 347.395423][ T2123] vhci_hcd: stop threads [ 347.399727][ T2123] vhci_hcd: release socket [ 347.408380][ T2123] vhci_hcd: disconnect device [ 347.413139][ T5886] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 347.443924][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.479494][ T24] vhci_hcd: vhci_device speed not set [ 347.511569][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'. [ 347.513093][ T9895] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.513213][ T9895] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.535094][ T2123] bond1: (slave bridge0): link status definitely down, disabling slave [ 347.536504][ T2123] bond1: now running without any active interface! [ 347.603845][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 347.603879][ T5886] dvb-usb: error while querying for an remote control event. [ 347.694863][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.730825][ T5934] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.742035][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.775451][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 347.781317][ T5886] dvb-usb: error while querying for an remote control event. [ 347.804691][ T9898] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 347.832339][ T5934] usb 5-1: config 0 descriptor?? [ 347.964509][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 348.153982][ T5886] dvb-usb: error while querying for an remote control event. [ 348.314087][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 348.319864][ T5825] dvb-usb: error while querying for an remote control event. [ 348.638430][ T5934] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 348.784176][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 348.795914][ T5825] dvb-usb: error while querying for an remote control event. [ 348.974380][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 348.980411][ T5825] dvb-usb: error while querying for an remote control event. [ 349.166593][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 349.200857][ T5825] dvb-usb: error while querying for an remote control event. [ 349.293569][ T5925] usb 4-1: USB disconnect, device number 52 [ 349.413891][ T5934] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 349.433388][ T5925] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 349.634544][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.676968][ T5934] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 349.741434][ T5934] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 349.750990][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 349.786571][ T9917] No such timeout policy "syz0" [ 349.878548][ T5934] usb 3-1: Product: syz [ 349.890773][ T5934] usb 3-1: Manufacturer: syz [ 349.904538][ T5934] usb 3-1: SerialNumber: syz [ 349.931286][ T5934] usb 3-1: config 0 descriptor?? [ 349.936620][ T10] usb 5-1: reset high-speed USB device number 59 using dummy_hcd [ 351.214828][ T9] usb 5-1: USB disconnect, device number 59 [ 351.461703][ T9935] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1132'. [ 351.463922][ T9] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 351.786524][ T5886] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 351.836443][ T5925] usb 3-1: USB disconnect, device number 75 [ 351.853943][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 351.993949][ T9] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 352.014598][ T9949] trusted_key: encrypted_key: insufficient parameters specified [ 352.093637][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 352.144519][ T5886] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 352.163633][ T5886] usb 1-1: config 0 has no interface number 0 [ 352.171714][ T5886] usb 1-1: config 0 interface 184 has no altsetting 0 [ 352.178978][ T5825] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 352.189886][ T5886] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 352.199635][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.209682][ T5886] usb 1-1: Product: syz [ 352.214502][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 352.214808][ T5886] usb 1-1: Manufacturer: syz [ 352.222421][ T9] usb usb5-port1: attempt power cycle [ 352.225686][ T5886] usb 1-1: SerialNumber: syz [ 352.242921][ T5886] usb 1-1: config 0 descriptor?? [ 352.252367][ T5886] smsc75xx v1.0.0 [ 352.353946][ T5925] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 352.396181][ T5825] usb 2-1: device descriptor read/64, error -71 [ 352.468774][ T9956] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 352.475313][ T9956] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 352.486002][ T9956] vhci_hcd vhci_hcd.0: Device attached [ 352.578780][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.589802][ T5925] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 352.600761][ T5925] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 352.644955][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.654942][ T9] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 352.679340][ T5925] usb 3-1: config 0 descriptor?? [ 352.685915][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 352.693983][ T5825] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 352.705768][ T5925] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 352.716041][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 352.723888][ T5934] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 352.741108][ T5925] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 352.759806][ T5925] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 352.775505][ T5925] usb 3-1: media controller created [ 352.804061][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.814023][ T9] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 352.834696][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 352.840337][ T9] usb usb5-port1: unable to enumerate USB device [ 352.850463][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 352.864321][ T5825] usb 2-1: device descriptor read/64, error -71 [ 352.871182][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 352.882062][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 352.945057][ T9949] dvb-usb: bulk message failed: -22 (2/0) [ 352.958474][ T5925] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 352.975432][ T5925] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 352.996594][ T5925] dvb-usb: schedule remote query interval to 150 msecs. [ 353.010906][ T5925] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 353.048772][ T5825] usb usb2-port1: attempt power cycle [ 353.099765][ T9957] vhci_hcd: connection reset by peer [ 353.109289][ T7812] vhci_hcd: stop threads [ 353.113769][ T7812] vhci_hcd: release socket [ 353.118647][ T7812] vhci_hcd: disconnect device [ 353.217769][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 353.276938][ T5925] dvb-usb: error while querying for an remote control event. [ 353.457158][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 353.469427][ T5925] dvb-usb: error while querying for an remote control event. [ 353.494042][ T5825] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 353.520993][ T5825] usb 2-1: device descriptor read/8, error -71 [ 353.643918][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 353.649797][ T5925] dvb-usb: error while querying for an remote control event. [ 353.793917][ T5825] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 353.833973][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 353.839893][ T5925] dvb-usb: error while querying for an remote control event. [ 353.861233][ T5825] usb 2-1: device descriptor read/8, error -71 [ 353.915451][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 353.926584][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 353.959875][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 354.014013][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 354.019788][ T5925] dvb-usb: error while querying for an remote control event. [ 354.224839][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 354.224858][ T30] audit: type=1326 audit(1762052912.835:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 354.487206][ T5825] usb usb2-port1: unable to enumerate USB device [ 354.575138][ T5886] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 354.613924][ T5886] usb 1-1: USB disconnect, device number 64 [ 354.736153][ T30] audit: type=1326 audit(1762052912.835:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 354.797930][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 354.873449][ T5925] dvb-usb: error while querying for an remote control event. [ 354.922500][ T30] audit: type=1326 audit(1762052912.835:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 354.953381][ T30] audit: type=1326 audit(1762052912.845:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 355.014017][ T30] audit: type=1326 audit(1762052912.845:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 355.084012][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 355.092414][ T5925] dvb-usb: error while querying for an remote control event. [ 355.093481][ T939] usb 3-1: USB disconnect, device number 76 [ 355.124081][ T30] audit: type=1326 audit(1762052912.865:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 355.189668][ T30] audit: type=1326 audit(1762052912.865:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 355.199720][ T939] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 355.260602][ T30] audit: type=1326 audit(1762052912.935:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 355.294897][ T30] audit: type=1326 audit(1762052912.935:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 355.314416][ T5886] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 355.329721][ T30] audit: type=1326 audit(1762052912.935:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9662b8efc9 code=0x7ffc0000 [ 355.460498][ T9979] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1144'. [ 355.495394][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 355.502584][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.524304][ T5886] usb 2-1: config 0 has no interfaces? [ 355.536621][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 355.546626][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.554970][ T5886] usb 2-1: Product: syz [ 355.559438][ T5886] usb 2-1: Manufacturer: syz [ 355.559459][ T5886] usb 2-1: SerialNumber: syz [ 355.632253][ T5886] usb 2-1: config 0 descriptor?? [ 355.923114][ T9969] netlink: 'syz.1.1140': attribute type 1 has an invalid length. [ 356.006901][ T9969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.045678][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 356.145991][ T5886] usb 2-1: USB disconnect, device number 64 [ 356.237221][T10004] netlink: 'syz.3.1150': attribute type 32 has an invalid length. [ 356.288618][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 356.306647][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 356.554390][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.582091][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 356.605121][T10004] bond4: option coupled_control: invalid value (110) [ 356.625994][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 356.670154][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 356.674874][T10004] bond4 (unregistering): Released all slaves [ 356.707415][ T9] usb 3-1: Product: syz [ 356.723088][ T9] usb 3-1: Manufacturer: syz [ 356.740157][ T9] usb 3-1: SerialNumber: syz [ 356.787421][ T9] usb 3-1: config 0 descriptor?? [ 357.554036][ T5925] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 357.658165][T10020] loop9: detected capacity change from 0 to 7 [ 357.693914][ T5925] usb 2-1: device descriptor read/64, error -71 [ 357.700903][ T5831] Dev loop9: unable to read RDB block 7 [ 357.707429][ T5831] loop9: unable to read partition table [ 357.714196][ T5831] loop9: partition table beyond EOD, truncated [ 357.810405][T10020] Dev loop9: unable to read RDB block 7 [ 357.833671][ T5934] vhci_hcd: vhci_device speed not set [ 357.839257][ T5917] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 357.889469][T10020] loop9: unable to read partition table [ 357.933949][ T5925] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 358.007354][ T5917] usb 4-1: too many configurations: 160, using maximum allowed: 8 [ 358.020558][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 358.033927][ T5917] usb 4-1: can't read configurations, error -61 [ 358.050124][T10020] loop9: partition table beyond EOD, truncated [ 358.157498][ T5925] usb 2-1: device descriptor read/64, error -71 [ 358.173990][ T5917] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 358.193603][T10020] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 358.274099][ T5925] usb usb2-port1: attempt power cycle [ 358.529125][ T5917] usb 4-1: too many configurations: 160, using maximum allowed: 8 [ 358.560385][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 358.570051][ T5917] usb 4-1: can't read configurations, error -61 [ 358.581475][ T5917] usb usb4-port1: attempt power cycle [ 358.633905][ T5925] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 358.676021][ T5925] usb 2-1: device descriptor read/8, error -71 [ 358.708845][T10029] loop8: detected capacity change from 0 to 8 [ 358.897014][T10029] Dev loop8: unable to read RDB block 8 [ 358.976133][ T5925] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 358.983874][ T5917] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 359.021683][ T10] usb 3-1: USB disconnect, device number 77 [ 359.022385][T10029] loop8: unable to read partition table [ 359.036305][ T5917] usb 4-1: too many configurations: 160, using maximum allowed: 8 [ 359.044725][T10029] loop8: partition table beyond EOD, truncated [ 359.054534][ T5925] usb 2-1: device descriptor read/8, error -71 [ 359.060139][T10029] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 359.090848][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 359.119045][ T5917] usb 4-1: can't read configurations, error -61 [ 359.169871][ T5925] usb usb2-port1: unable to enumerate USB device [ 359.265808][T10031] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1157'. [ 359.275072][ T5917] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 359.294912][ T5917] usb 4-1: too many configurations: 160, using maximum allowed: 8 [ 359.315281][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 359.322881][ T5917] usb 4-1: can't read configurations, error -61 [ 359.360033][ T5917] usb usb4-port1: unable to enumerate USB device [ 359.622751][T10042] fuse: Unknown parameter 'ÿ0x000000000000000c' [ 359.643953][ T10] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 359.775513][ T939] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 359.814900][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 359.835781][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 359.851272][ T10] usb 3-1: config 9 has an invalid interface number: 1 but max is 0 [ 359.867458][ T10] usb 3-1: config 9 has no interface number 0 [ 359.887529][ T10] usb 3-1: config 9 interface 1 has no altsetting 0 [ 359.912840][ T10] usb 3-1: New USB device found, idVendor=19d2, idProduct=0025, bcdDevice=ac.91 [ 359.940407][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.953255][ T10] usb 3-1: Product: syz [ 359.955442][ T939] usb 5-1: Using ep0 maxpacket: 8 [ 359.957638][ T10] usb 3-1: Manufacturer: syz [ 359.966538][ T939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.969875][ T10] usb 3-1: SerialNumber: syz [ 360.000333][ T939] usb 5-1: config 0 has no interfaces? [ 360.015919][ T939] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 360.025718][ T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.034398][ T939] usb 5-1: Product: syz [ 360.098513][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 360.129412][ T939] usb 5-1: Manufacturer: syz [ 360.134359][ T939] usb 5-1: SerialNumber: syz [ 360.141688][ T939] usb 5-1: config 0 descriptor?? [ 360.302549][T10055] binder: 10035:10055 ioctl c0306201 200000000180 returned -14 [ 360.366705][T10039] netlink: 'syz.4.1161': attribute type 1 has an invalid length. [ 360.415216][ T10] qmi_wwan 3-1:9.1: bogus CDC Union: master=0, slave=1 [ 360.431457][ T10] qmi_wwan 3-1:9.1: probe with driver qmi_wwan failed with error -22 [ 360.448558][ T10] usb 3-1: USB disconnect, device number 78 [ 360.554628][T10039] 8021q: adding VLAN 0 to HW filter on device bond4 [ 360.619208][ T939] usb 5-1: USB disconnect, device number 64 [ 361.564024][ T5886] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 361.753495][ T5886] usb 2-1: config 0 has no interfaces? [ 362.149357][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 362.169039][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.177245][ T939] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 362.233750][ T5886] usb 2-1: Product: syz [ 362.246153][ T5886] usb 2-1: Manufacturer: syz [ 362.253327][ T5886] usb 2-1: SerialNumber: syz [ 362.704339][ T939] usb 1-1: device descriptor read/64, error -71 [ 362.792617][ T5886] usb 2-1: config 0 descriptor?? [ 362.973883][ T939] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 363.095432][ T5917] usb 2-1: USB disconnect, device number 69 [ 363.125091][ T939] usb 1-1: device descriptor read/64, error -71 [ 363.192257][ T5886] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 363.193967][ T5925] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 363.234814][ T939] usb usb1-port1: attempt power cycle [ 363.294576][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 363.333929][ T5886] usb 3-1: device descriptor read/64, error -71 [ 363.355177][ T5925] usb 5-1: config 0 has no interfaces? [ 363.362655][ T5925] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 363.372008][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.380650][ T5925] usb 5-1: Product: syz [ 363.384997][ T5925] usb 5-1: Manufacturer: syz [ 363.389591][ T5925] usb 5-1: SerialNumber: syz [ 363.396032][ T5925] usb 5-1: config 0 descriptor?? [ 363.455774][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 363.464921][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.475037][ T10] usb 4-1: config 0 descriptor?? [ 363.482260][ T10] cp210x 4-1:0.0: cp210x converter detected [ 363.573928][ T5886] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 363.581617][ T939] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 363.604678][ T939] usb 1-1: device descriptor read/8, error -71 [ 363.629505][ T5925] usb 5-1: USB disconnect, device number 65 [ 363.665413][T10117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1183'. [ 363.705899][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 363.710954][T10120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.721042][ T5886] usb 3-1: device descriptor read/64, error -71 [ 363.729683][T10120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.854720][ T5886] usb usb3-port1: attempt power cycle [ 363.873964][ T939] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 363.896666][ T5925] usb 4-1: USB disconnect, device number 57 [ 363.907009][ T939] usb 1-1: device descriptor read/8, error -71 [ 363.907479][ T5925] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 363.922421][ T5925] cp210x 4-1:0.0: device disconnected [ 363.943965][ T5825] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 364.014432][ T939] usb usb1-port1: unable to enumerate USB device [ 364.103919][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 364.110558][ T5825] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 364.118839][ T5825] usb 2-1: config 0 has no interface number 0 [ 364.124963][ T5825] usb 2-1: config 0 interface 235 has no altsetting 0 [ 364.134133][ T5825] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=92.0d [ 364.143249][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.151648][ T5825] usb 2-1: Product: syz [ 364.156513][ T5825] usb 2-1: Manufacturer: syz [ 364.161125][ T5825] usb 2-1: SerialNumber: syz [ 364.169674][ T5825] usb 2-1: config 0 descriptor?? [ 364.213948][ T5886] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 364.234364][ T5886] usb 3-1: device descriptor read/8, error -71 [ 364.561736][ T10] usb 2-1: USB disconnect, device number 70 [ 364.683978][ T5886] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 364.714723][ T5886] usb 3-1: device descriptor read/8, error -71 [ 364.843572][ T5886] usb usb3-port1: unable to enumerate USB device [ 364.854353][T10126] trusted_key: encrypted_key: keylen parameter is missing [ 365.124164][ T10] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 365.165901][T10139] kvm: user requested TSC rate below hardware speed [ 365.174603][T10139] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 365.183237][T10139] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 365.277771][T10144] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1189'. [ 365.288786][ T10] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 365.314157][ T10] usb 1-1: config 0 has no interface number 0 [ 365.333210][ T10] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 365.347172][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.357823][ T10] usb 1-1: Product: syz [ 365.362087][ T10] usb 1-1: Manufacturer: syz [ 365.372618][ T10] usb 1-1: SerialNumber: syz [ 365.380894][ T10] usb 1-1: config 0 descriptor?? [ 365.543967][ T24] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 365.555518][T10151] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1194'. [ 365.556402][T10152] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1194'. [ 365.564710][ T5886] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 365.703919][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 365.711927][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 365.721127][ T24] usb 2-1: config 6 has an invalid interface number: 11 but max is 1 [ 365.729532][ T24] usb 2-1: config 6 has an invalid interface number: 216 but max is 1 [ 365.738178][ T24] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 365.750135][ T24] usb 2-1: config 6 has no interface number 0 [ 365.756674][ T24] usb 2-1: config 6 has no interface number 1 [ 365.763049][ T5886] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 365.772958][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.781235][ T24] usb 2-1: config 6 interface 216 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 365.799420][ T5886] usb 5-1: config 0 descriptor?? [ 365.807153][ T24] usb 2-1: config 6 interface 11 has no altsetting 0 [ 365.814295][ T24] usb 2-1: config 6 interface 216 has no altsetting 0 [ 365.835481][ T24] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=26.cf [ 365.885653][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.898333][T10132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.908066][T10132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.923856][ T24] usb 2-1: Product: syz [ 365.929191][ T24] usb 2-1: Manufacturer: syz [ 365.934765][ T24] usb 2-1: SerialNumber: syz [ 366.032175][T10146] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1192'. [ 366.075590][T10146] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 366.099992][T10155] dummy0: entered allmulticast mode [ 366.130777][ T10] usb 1-1: Firmware version (0.0) predates our first public release. [ 366.147658][ T10] usb 1-1: Please update to version 0.2 or newer [ 366.156430][ T24] usb 2-1: Expected 3 endpoints, found: 0 [ 366.217474][ T24] sierra 2-1:6.216: Sierra USB modem converter detected [ 366.242621][ T10] usb 1-1: USB disconnect, device number 69 [ 366.244841][ T24] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 366.262588][ T24] usb 2-1: USB disconnect, device number 71 [ 366.271599][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 366.281012][ T24] sierra 2-1:6.216: device disconnected [ 366.314565][ T5886] usbhid 5-1:0.0: can't add hid device: -71 [ 366.323416][ T5886] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 366.382673][ T5886] usb 5-1: USB disconnect, device number 66 [ 367.194310][ T24] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 367.352176][ T24] usb 3-1: device descriptor read/64, error -71 [ 367.504609][ T5886] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 367.573161][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 367.612789][ T24] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 367.736829][ T5886] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 367.745817][ T5886] usb 4-1: config 160 has no interface number 0 [ 367.783960][ T24] usb 3-1: device descriptor read/64, error -71 [ 367.824677][ T10] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 367.883658][ T5886] usb 4-1: config 160 interface 200 has no altsetting 0 [ 368.023954][ T24] usb usb3-port1: attempt power cycle [ 368.056568][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.068394][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.074364][ T5886] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 368.127626][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 368.203116][ T5825] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 368.254251][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.316630][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 368.344069][ T5886] usb 4-1: Product: syz [ 368.353897][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.372170][ T5886] usb 4-1: Manufacturer: syz [ 368.376908][ T5886] usb 4-1: SerialNumber: syz [ 368.442627][ T10] usb 1-1: config 0 descriptor?? [ 368.497702][ T5825] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.517322][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 368.528379][ T24] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 368.556411][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 368.572843][ T24] usb 3-1: device descriptor read/8, error -71 [ 368.589399][ T5825] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 368.622581][ T5825] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 368.652444][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.687672][ T5825] usb 2-1: config 0 descriptor?? [ 368.826691][ T24] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 368.858990][ T24] usb 3-1: device descriptor read/8, error -71 [ 368.929682][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'. [ 368.942027][T10196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1206'. [ 368.975008][ T24] usb usb3-port1: unable to enumerate USB device [ 369.059805][ T10] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 369.140212][ T5825] plantronics 0003:047F:FFFF.001E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 369.338540][ T10] usb 2-1: USB disconnect, device number 72 [ 369.641935][ T5917] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 369.723985][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 369.748281][T10199] fido_id[10199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 369.816567][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.839391][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.895637][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 369.919922][ T5917] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 369.933152][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 369.949829][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 369.968659][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.983528][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 370.014232][ T5925] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 370.026406][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 370.039632][ T5917] usb 5-1: config 0 descriptor?? [ 370.167349][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 370.190238][ T5925] usb 3-1: can't read configurations, error -61 [ 370.229130][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 370.311276][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 370.413980][ T5925] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 370.433943][ T5825] usb 1-1: reset high-speed USB device number 70 using dummy_hcd [ 370.472255][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.526783][ T10] usb 2-1: config 0 descriptor?? [ 370.622876][ T5886] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.645635][T10202] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 370.674316][ T5886] usb 4-1: MIDIStreaming interface descriptor not found [ 370.692734][ T5917] usbhid 5-1:0.0: can't add hid device: -71 [ 370.724269][ T5917] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 370.739231][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 370.814672][ T5886] usb 4-1: USB disconnect, device number 58 [ 370.866741][ T5925] usb 3-1: can't read configurations, error -61 [ 370.894094][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.894807][ T5824] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 370.921883][ T5917] usb 5-1: USB disconnect, device number 67 [ 370.939311][T10201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.948195][ T5925] usb usb3-port1: attempt power cycle [ 371.080761][ T10] usb 2-1: USB disconnect, device number 73 [ 371.344355][ T5925] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 371.353885][ T5886] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 371.375448][T10215] syzkaller0: entered promiscuous mode [ 371.381392][T10215] syzkaller0: entered allmulticast mode [ 371.389934][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 371.398953][ T5925] usb 3-1: can't read configurations, error -61 [ 371.537108][ T5925] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 371.543891][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 371.544915][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 371.559646][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.570372][ T5886] usb 4-1: config 0 has no interfaces? [ 371.578872][ T5886] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 371.584351][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 371.603529][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.611028][ T5925] usb 3-1: can't read configurations, error -61 [ 371.611666][ T5886] usb 4-1: Product: syz [ 371.621215][ T5925] usb usb3-port1: unable to enumerate USB device [ 371.637169][ T5886] usb 4-1: Manufacturer: syz [ 371.643849][ T5886] usb 4-1: SerialNumber: syz [ 371.654342][ T5886] usb 4-1: config 0 descriptor?? [ 371.728823][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 371.743674][ T10] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 371.762175][ T10] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.782595][ T10] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 371.800401][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.880311][T10210] netlink: 'syz.3.1209': attribute type 1 has an invalid length. [ 371.907730][ T24] usb 1-1: USB disconnect, device number 70 [ 372.051545][ T10] usb 2-1: string descriptor 0 read error: -71 [ 372.066125][ T10] hub 2-1:32.0: bad descriptor, ignoring hub [ 372.072379][ T10] hub 2-1:32.0: probe with driver hub failed with error -5 [ 372.145420][ T10] usb 2-1: USB disconnect, device number 74 [ 372.721369][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 372.730334][T10235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1217'. [ 374.339030][T10210] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 374.349802][T10236] kthread_run failed with err -4 [ 374.433281][ T5917] usb 4-1: USB disconnect, device number 59 [ 374.946696][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 375.266386][ T5886] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 375.371443][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.383954][ T5925] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 375.478964][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.509952][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.529346][ T5886] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.583937][ T5925] usb 3-1: device descriptor read/64, error -71 [ 375.617455][ T5886] usb 4-1: config 0 interface 0 has no altsetting 0 [ 375.630824][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.649855][ T5886] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 375.665632][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.676924][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.692419][ T24] usb 5-1: config 0 descriptor?? [ 375.705991][ T5886] usb 4-1: config 0 descriptor?? [ 375.833900][ T5925] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 375.975292][ T5925] usb 3-1: device descriptor read/64, error -71 [ 376.094859][ T5925] usb usb3-port1: attempt power cycle [ 376.152116][ T24] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 376.503968][ T5925] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 376.696436][ T5925] usb 3-1: device descriptor read/8, error -71 [ 376.834675][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 376.847910][T10288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1229'. [ 376.954254][ T5925] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 377.012313][ T5925] usb 3-1: device descriptor read/8, error -71 [ 377.148892][ T5925] usb usb3-port1: unable to enumerate USB device [ 377.273977][ T5917] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 377.424164][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 377.434655][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.459795][ T5917] usb 2-1: config 0 has no interfaces? [ 377.478248][ T5917] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 377.487701][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.496630][ T5917] usb 2-1: Product: syz [ 377.501546][ T5917] usb 2-1: Manufacturer: syz [ 377.507907][ T5917] usb 2-1: SerialNumber: syz [ 377.519133][ T5917] usb 2-1: config 0 descriptor?? [ 377.584058][ T9] usb 5-1: reset high-speed USB device number 68 using dummy_hcd [ 377.604440][ T5886] usbhid 4-1:0.0: can't add hid device: -71 [ 377.638757][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 377.735758][T10292] netlink: 'syz.1.1230': attribute type 1 has an invalid length. [ 377.791972][ T5886] usb 4-1: USB disconnect, device number 60 [ 378.007191][T10292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.039450][T10299] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.046710][T10299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.054368][T10299] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.061530][T10299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.117627][T10309] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 378.151871][T10299] bond2: (slave bridge0): making interface the new active one [ 378.197685][T10299] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 378.268378][ T10] usb 2-1: USB disconnect, device number 75 [ 378.365718][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1240'. [ 378.374346][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 378.549708][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.556424][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.770992][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'. [ 378.795906][ T5925] usb 5-1: USB disconnect, device number 68 [ 378.823384][ T30] audit: type=1326 audit(1762052937.495:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 378.845756][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.850179][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 378.863707][T10335] FAULT_INJECTION: forcing a failure. [ 378.863707][T10335] name failslab, interval 1, probability 0, space 0, times 0 [ 378.910864][T10335] CPU: 0 UID: 0 PID: 10335 Comm: syz.2.1245 Not tainted syzkaller #0 PREEMPT(full) [ 378.910889][T10335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.910903][T10335] Call Trace: [ 378.910910][T10335] [ 378.910918][T10335] dump_stack_lvl+0x189/0x250 [ 378.910946][T10335] ? __pfx____ratelimit+0x10/0x10 [ 378.910967][T10335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.910987][T10335] ? __pfx__printk+0x10/0x10 [ 378.911000][T10335] ? vsnprintf+0x386/0xf00 [ 378.911018][T10335] ? __pfx_snprintf+0x10/0x10 [ 378.911038][T10335] should_fail_ex+0x414/0x560 [ 378.911067][T10335] should_failslab+0xa8/0x100 [ 378.911085][T10335] __kmalloc_noprof+0xcb/0x7f0 [ 378.911106][T10335] ? aa_label_asxprint+0x70/0x130 [ 378.911130][T10335] aa_label_asxprint+0x70/0x130 [ 378.911152][T10335] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 378.911179][T10335] audit_log_subj_ctx+0xfa/0x510 [ 378.911205][T10335] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 378.911233][T10335] ? apparmor_current_getlsmprop_subj+0xdd/0x190 [ 378.911257][T10335] audit_log_task_context+0x8c/0xd0 [ 378.911280][T10335] ? __pfx_audit_log_task_context+0x10/0x10 [ 378.911302][T10335] ? audit_log_start+0x7f4/0xa20 [ 378.911327][T10335] audit_log_task+0x190/0x3c0 [ 378.911345][T10335] ? get_pid_task+0x20/0x1f0 [ 378.911365][T10335] ? __pfx_audit_log_task+0x10/0x10 [ 378.911386][T10335] ? __pfx___cant_migrate+0x10/0x10 [ 378.911409][T10335] audit_seccomp+0x86/0x190 [ 378.911433][T10335] __seccomp_filter+0xce4/0x1e10 [ 378.911462][T10335] ? ksys_write+0x1cb/0x250 [ 378.911485][T10335] ? __pfx___seccomp_filter+0x10/0x10 [ 378.911505][T10335] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 378.911528][T10335] ? __pfx_vfs_write+0x10/0x10 [ 378.911551][T10335] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 378.911577][T10335] ? __fget_files+0x3a0/0x420 [ 378.911611][T10335] ? ksys_write+0x22a/0x250 [ 378.911638][T10335] ? __secure_computing+0xe2/0x2a0 [ 378.911661][T10335] syscall_trace_enter+0xaa/0x160 [ 378.911682][T10335] do_syscall_64+0xd3/0xfa0 [ 378.911701][T10335] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.911721][T10335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.911737][T10335] ? clear_bhb_loop+0x60/0xb0 [ 378.911757][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.911778][T10335] RIP: 0033:0x7f62c7f8efc9 [ 378.911794][T10335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.911808][T10335] RSP: 002b:00007f62c8db6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 378.911827][T10335] RAX: ffffffffffffffda RBX: 00007f62c81e5fa0 RCX: 00007f62c7f8efc9 [ 378.911839][T10335] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000003 [ 378.911849][T10335] RBP: 00007f62c8db6090 R08: 0000000000000000 R09: 0000000000000000 [ 378.911859][T10335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.911870][T10335] R13: 00007f62c81e6038 R14: 00007f62c81e5fa0 R15: 00007f62c830fa28 [ 378.911895][T10335] [ 378.911904][T10335] audit: error in audit_log_subj_ctx [ 378.983967][ T30] audit: type=1326 audit(1762052937.525:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 379.348279][ T5925] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 379.437267][ T30] audit: type=1326 audit(1762052937.525:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 379.443905][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 379.493918][ T5925] usb 3-1: device descriptor read/64, error -71 [ 379.498314][ T30] audit: type=1326 audit(1762052937.535:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 379.563920][ T30] audit: type=1326 audit(1762052937.535:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 379.605732][ T30] audit: type=1326 audit(1762052937.535:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 379.646215][ T30] audit: type=1326 audit(1762052937.535:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62c7f8d810 code=0x7ffc0000 [ 379.684001][ T5825] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 379.693764][ T30] audit: type=1326 audit(1762052937.535:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f62c7f8da7f code=0x7ffc0000 [ 379.718416][ T30] audit: type=1326 audit(1762052937.535:892): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10332 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 379.744051][ T5925] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 379.799175][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.811408][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.830050][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 379.844366][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.847279][ T5825] usb 4-1: config 0 has no interfaces? [ 379.859573][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.861796][ T5825] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 379.878177][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.883906][ T5925] usb 3-1: device descriptor read/64, error -71 [ 379.895497][ T5825] usb 4-1: Product: syz [ 379.902171][ T9] usb 5-1: config 0 descriptor?? [ 379.908439][ T5825] usb 4-1: Manufacturer: syz [ 379.920177][ T5825] usb 4-1: SerialNumber: syz [ 379.937754][ T5825] usb 4-1: config 0 descriptor?? [ 380.007180][ T5925] usb usb3-port1: attempt power cycle [ 380.176467][ T5825] usb 4-1: USB disconnect, device number 61 [ 380.363891][ T5925] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 380.394958][ T5925] usb 3-1: device descriptor read/8, error -71 [ 380.404612][ T9] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 380.634915][ T5925] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 380.664871][ T5925] usb 3-1: device descriptor read/8, error -71 [ 380.785080][ T5925] usb usb3-port1: unable to enumerate USB device [ 381.498587][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 381.539936][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1259'. [ 381.564046][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 381.714033][ T5825] usb 5-1: reset high-speed USB device number 69 using dummy_hcd [ 381.724269][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 381.746229][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.776224][ T9] usb 1-1: config 0 has no interfaces? [ 381.818904][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 381.851173][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.883480][ T9] usb 1-1: Product: syz [ 381.897962][ T9] usb 1-1: Manufacturer: syz [ 381.931709][ T9] usb 1-1: SerialNumber: syz [ 381.978771][ T9] usb 1-1: config 0 descriptor?? [ 382.039372][T10391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.084283][T10391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.253961][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 382.287454][T10375] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 382.345457][ T5825] usb 5-1: device descriptor read/64, error -71 [ 382.379563][T10375] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.412601][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 382.419650][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.430940][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.431535][T10400] bond1: (slave bridge0): Releasing active interface [ 382.451521][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 382.461395][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.489924][ T9] usb 3-1: config 0 descriptor?? [ 382.521298][T10400] bond4: (slave bridge0): Enslaving as an active interface with a down link [ 382.603874][ T5825] usb 5-1: reset high-speed USB device number 69 using dummy_hcd [ 382.613323][ T5925] usb 1-1: USB disconnect, device number 71 [ 382.744578][ T5825] usb 5-1: device descriptor read/64, error -71 [ 382.994060][ T5825] usb 5-1: reset high-speed USB device number 69 using dummy_hcd [ 383.028698][ T5825] usb 5-1: device descriptor read/8, error -71 [ 383.108770][ T9] usb 3-1: string descriptor 0 read error: -71 [ 383.144357][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 383.161723][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 383.192435][ T9] usb 3-1: USB disconnect, device number 99 [ 383.273875][ T5825] usb 5-1: reset high-speed USB device number 69 using dummy_hcd [ 383.315702][ T5825] usb 5-1: device descriptor read/8, error -71 [ 383.417247][T10414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1271'. [ 383.427784][ T24] usb 5-1: USB disconnect, device number 69 [ 383.522795][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1272'. [ 383.532619][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1272'. [ 383.603948][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 383.806032][ T24] usb 5-1: device descriptor read/64, error -71 [ 384.065849][ T24] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 384.073645][ T5886] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 384.240344][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'. [ 384.249423][ T24] usb 5-1: device descriptor read/64, error -71 [ 384.325665][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 384.397155][ T24] usb usb5-port1: attempt power cycle [ 384.409465][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.424296][ T5886] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 384.445979][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.471546][ T5886] usb 2-1: config 0 descriptor?? [ 384.785503][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 384.849404][ T24] usb 5-1: device descriptor read/8, error -71 [ 385.203920][ T5825] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 385.373938][ T5825] usb 4-1: Using ep0 maxpacket: 8 [ 385.411753][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.450821][ T5825] usb 4-1: config 0 has no interfaces? [ 385.474874][ T5825] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 385.546772][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.555247][ T5825] usb 4-1: Product: syz [ 385.567428][ T5825] usb 4-1: Manufacturer: syz [ 385.572424][ T5825] usb 4-1: SerialNumber: syz [ 385.584989][ T5825] usb 4-1: config 0 descriptor?? [ 385.624854][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 385.678074][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 385.691336][ T24] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 385.715796][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 385.753404][ T24] usb 5-1: config 1 has no interface number 1 [ 385.766765][ T24] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 385.776306][ T24] usb 5-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 385.791524][ T24] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 385.812242][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.826531][T10445] netlink: 'syz.3.1281': attribute type 1 has an invalid length. [ 385.847397][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.883977][ T24] usb 5-1: Product: syz [ 385.890503][ T24] usb 5-1: Manufacturer: syz [ 385.933673][ T24] usb 5-1: SerialNumber: syz [ 386.085773][T10445] 8021q: adding VLAN 0 to HW filter on device bond4 [ 386.158198][ T5825] usb 4-1: USB disconnect, device number 62 [ 386.233323][ T24] usb 5-1: 0:8 : does not exist [ 386.301272][ T24] usb 5-1: USB disconnect, device number 73 [ 386.377246][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 386.381722][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.751985][T10482] dlm: no locking on control device [ 386.842508][ T5886] usbhid 2-1:0.0: can't add hid device: -71 [ 386.872658][ T5886] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 386.904577][ T5886] usb 2-1: USB disconnect, device number 76 [ 386.969524][T10489] syzkaller0: entered promiscuous mode [ 386.977240][T10489] syzkaller0: entered allmulticast mode [ 386.984449][ T5925] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 387.153883][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 387.176241][ T5925] usb 1-1: unable to get BOS descriptor or descriptor too short [ 387.197068][ T5925] usb 1-1: config 120 has an invalid interface number: 243 but max is 0 [ 387.229035][ T5925] usb 1-1: config 120 has no interface number 0 [ 387.254162][ T5925] usb 1-1: config 120 interface 243 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 16 [ 387.293759][ T5925] usb 1-1: config 120 interface 243 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 387.318852][ T5925] usb 1-1: New USB device found, idVendor=2304, idProduct=0243, bcdDevice=66.1c [ 387.329669][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.398621][T10502] trusted_key: encrypted_key: insufficient parameters specified [ 387.535766][ T5925] usb 1-1: Product: syz [ 387.551527][ T5925] usb 1-1: Manufacturer: syz [ 387.561616][ T5925] usb 1-1: SerialNumber: syz [ 387.592068][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 387.592084][ T30] audit: type=1326 audit(1762052946.255:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf2d8efc9 code=0x7ffc0000 [ 387.638930][T10476] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 387.735471][T10476] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 387.767236][ T30] audit: type=1326 audit(1762052946.255:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf2d8efc9 code=0x7ffc0000 [ 387.792496][ T30] audit: type=1326 audit(1762052946.255:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3cf2d8efc9 code=0x7ffc0000 [ 387.814981][ T24] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 387.868878][ T30] audit: type=1326 audit(1762052946.255:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf2d8efc9 code=0x7ffc0000 [ 387.914787][T10509] fuse: Invalid uid '00000000000000000006' [ 387.964663][T10476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.979979][T10476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.012637][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.015374][T10476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.069573][T10476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.080315][T10476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.090383][T10476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.101089][T10476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.113190][T10476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.121406][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 388.164074][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 388.173209][ T30] audit: type=1326 audit(1762052946.255:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3cf2d8efc9 code=0x7ffc0000 [ 388.196197][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.206039][ T30] audit: type=1326 audit(1762052946.255:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf2d8efc9 code=0x7ffc0000 [ 388.261048][ T24] usb 4-1: config 0 descriptor?? [ 388.267673][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 388.280214][T10476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.295041][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 388.303347][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 388.322391][T10476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.340074][ T30] audit: type=1326 audit(1762052946.255:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3cf2d8efc9 code=0x7ffc0000 [ 388.379254][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 388.424374][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 388.498730][ T24] usb 4-1: media controller created [ 388.506971][ T30] audit: type=1326 audit(1762052946.255:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf2d8efc9 code=0x7ffc0000 [ 388.524030][ T5925] dvb-usb: found a 'Pinnacle PCTV 73A' in cold state, will try to load a firmware [ 388.549152][T10502] dvb-usb: bulk message failed: -22 (2/0) [ 388.583278][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.676220][ T5925] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 388.700252][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 388.716128][ T5925] dib0700: firmware download failed at 7 with -71 [ 388.734073][ T30] audit: type=1326 audit(1762052946.255:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3cf2d8d810 code=0x7ffc0000 [ 388.764347][ T5925] usb 1-1: USB disconnect, device number 72 [ 388.767265][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 388.833056][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 [ 388.861727][ T30] audit: type=1326 audit(1762052946.255:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf2d8efc9 code=0x7ffc0000 [ 388.909519][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 388.919385][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 389.084996][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 389.178579][ T5886] dvb-usb: error while querying for an remote control event. [ 389.495245][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 389.511248][ T5825] dvb-usb: error while querying for an remote control event. [ 389.724410][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 389.806473][ T24] dvb-usb: error while querying for an remote control event. [ 390.095985][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 390.104595][T10532] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1305'. [ 390.195009][ T5825] dvb-usb: error while querying for an remote control event. [ 390.390835][ T24] usb 4-1: USB disconnect, device number 63 [ 390.565140][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 391.640123][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 392.076969][T10559] netlink: 'syz.4.1311': attribute type 27 has an invalid length. [ 392.699748][T10559] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.707057][T10559] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.993878][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 393.174372][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 393.186000][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 393.207638][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 393.241554][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 393.270707][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.312139][ T9] usb 1-1: config 0 descriptor?? [ 393.389828][T10559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.466469][T10559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.753931][ T9] nzxt-smart2 0003:1E71:2009.0021: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 393.898276][T10559] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 393.950250][T10559] sit1: left promiscuous mode [ 393.999189][ T7812] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.013145][ T7812] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.054330][ T7812] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.274167][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 394.274186][ T30] audit: type=1326 audit(1762052952.825:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 394.303976][ T30] audit: type=1326 audit(1762052952.825:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 394.428241][ T7812] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.696174][ T30] audit: type=1326 audit(1762052952.825:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 394.830435][ T30] audit: type=1326 audit(1762052952.825:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 394.932352][ T30] audit: type=1326 audit(1762052952.825:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 395.148402][ T30] audit: type=1326 audit(1762052952.825:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 395.255904][ T30] audit: type=1326 audit(1762052952.825:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 395.278328][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.550630][ T9] usb 1-1: USB disconnect, device number 73 [ 395.569460][ T30] audit: type=1326 audit(1762052952.825:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 395.591855][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.642102][ T30] audit: type=1326 audit(1762052952.845:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 395.664832][ T5925] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 395.731980][ T30] audit: type=1326 audit(1762052952.845:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.2.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 395.855595][ T5925] usb 2-1: config 0 has no interfaces? [ 395.875721][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 395.886579][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.916419][ T5925] usb 2-1: Product: syz [ 395.931213][ T5925] usb 2-1: Manufacturer: syz [ 395.941367][ T5925] usb 2-1: SerialNumber: syz [ 395.964906][ T5925] usb 2-1: config 0 descriptor?? [ 396.163892][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 396.217338][T10595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.260487][T10595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.313985][ T5925] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 396.327781][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 396.339887][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.346202][ T5886] usb 2-1: USB disconnect, device number 77 [ 396.365521][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 396.366040][ T9] usb 4-1: Product: syz [ 396.395622][ T9] usb 4-1: Manufacturer: syz [ 396.407261][ T9] usb 4-1: SerialNumber: syz [ 396.467642][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 396.475734][ T5925] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 396.488455][T10610] loop9: detected capacity change from 0 to 7 [ 396.494992][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.507243][T10610] Dev loop9: unable to read RDB block 7 [ 396.512879][T10610] loop9: unable to read partition table [ 396.519796][ T5925] usb 1-1: config 0 has no interface number 0 [ 396.526324][ T5925] usb 1-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 396.538624][ T5925] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 396.549359][ T5925] usb 1-1: config 0 interface 1 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 396.554407][T10610] loop9: partition table beyond EOD, truncated [ 396.572697][ T5925] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.589466][ T5925] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 396.594922][T10610] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 396.616120][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.665502][ T5925] usb 1-1: config 0 descriptor?? [ 396.691320][ T5925] hso 1-1:0.1: Failed to find BULK OUT ep [ 396.857797][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 396.904998][T10600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.923946][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 396.940844][T10600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.951895][ T5917] usb 1-1: USB disconnect, device number 74 [ 396.958059][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 396.974682][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 396.998991][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 397.028328][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 397.067522][ T9] usb 4-1: USB disconnect, device number 64 [ 397.594515][ T5886] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 397.617112][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 397.795970][T10639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1334'. [ 397.855975][T10639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1334'. [ 397.889882][ T5886] usb 2-1: config 0 has no interfaces? [ 397.898825][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 397.910748][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.919259][ T5886] usb 2-1: Product: syz [ 397.923579][ T5886] usb 2-1: Manufacturer: syz [ 397.928271][ T5886] usb 2-1: SerialNumber: syz [ 397.938873][ T5886] usb 2-1: config 0 descriptor?? [ 398.292595][ T5886] usb 2-1: USB disconnect, device number 78 [ 398.778952][ T5886] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 398.796546][ T5917] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 399.081270][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.095615][ T5886] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 399.111446][ T5886] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 399.120646][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 399.129359][ T5886] usb 1-1: Product: syz [ 399.133971][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 399.134249][ T5886] usb 1-1: Manufacturer: syz [ 399.144051][ T5886] usb 1-1: SerialNumber: syz [ 399.148032][ T5917] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 399.152433][ T5886] usb 1-1: config 0 descriptor?? [ 399.206025][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.753540][ T5917] usb 4-1: Product: syz [ 399.795385][ T5917] usb 4-1: Manufacturer: syz [ 399.800339][T10660] usb usb8: usbfs: process 10660 (syz.1.1339) did not claim interface 0 before use [ 399.809909][ T5917] usb 4-1: SerialNumber: syz [ 400.253058][ T5917] usb 4-1: config 0 descriptor?? [ 400.277115][ T5917] gspca_main: se401-2.14.0 probing 047d:5003 [ 400.658619][T10662] ERROR: Out of memory at tomoyo_memory_ok. [ 400.674308][ T5917] gspca_se401: ExtraFeatures: 7 [ 400.881402][ T5917] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 401.264032][ T5917] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 401.338054][ T9] usb 4-1: USB disconnect, device number 65 [ 401.455165][ T5917] usb 5-1: config 16 has an invalid interface number: 168 but max is 0 [ 401.500852][T10682] usb usb8: usbfs: process 10682 (syz.2.1340) did not claim interface 0 before use [ 401.531207][ T5917] usb 5-1: config 16 has no interface number 0 [ 401.569348][T10680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1344'. [ 401.622286][ T5917] usb 5-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 401.652822][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.734433][ T5917] HFC-S_USB 5-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 401.794099][ T5886] usb 1-1: USB disconnect, device number 75 [ 401.824093][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 401.993932][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 402.193679][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 402.218883][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 402.237685][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.253385][ T9] usb 4-1: Product: syz [ 402.261122][ T9] usb 4-1: Manufacturer: syz [ 402.273886][ T9] usb 4-1: SerialNumber: syz [ 402.285783][ T9] usb 4-1: config 0 descriptor?? [ 402.310238][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'. [ 402.325508][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 402.343694][T10672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1342'. [ 402.565490][ T9] gspca_zc3xx: reg_w_i err -71 [ 403.164000][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 403.170384][ T9] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 403.229894][ T9] usb 4-1: USB disconnect, device number 66 [ 403.651060][T10700] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1349'. [ 403.723871][ T5886] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 403.759764][T10703] dummy0: entered promiscuous mode [ 403.783220][T10703] dummy0: entered allmulticast mode [ 403.887762][ T5886] usb 3-1: config 16 has an invalid interface number: 168 but max is 0 [ 403.900692][ T5886] usb 3-1: config 16 has no interface number 0 [ 403.933433][ T5886] usb 3-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 403.983284][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.098568][ T5886] HFC-S_USB 3-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 404.375851][ T5886] usb 5-1: USB disconnect, device number 74 [ 404.409706][T10697] tls_set_device_offload_rx: netdev not found [ 404.422158][T10697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1347'. [ 404.729057][T10722] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 404.913904][ T5886] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 405.117535][ T5886] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 405.189132][ T5886] usb 1-1: config 160 has no interface number 0 [ 405.201971][ T5886] usb 1-1: config 160 interface 200 has no altsetting 0 [ 405.301940][ T5886] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 405.434326][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.513327][ T5886] usb 1-1: Product: syz [ 405.517838][ T5886] usb 1-1: Manufacturer: syz [ 405.522528][ T5886] usb 1-1: SerialNumber: syz [ 405.898290][ T5925] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 406.876288][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.901505][ T5925] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 406.944320][ T5925] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 406.953390][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 407.090717][ T5925] usb 4-1: Product: syz [ 407.104054][ T5925] usb 4-1: Manufacturer: syz [ 407.108794][ T5925] usb 4-1: SerialNumber: syz [ 407.136243][ T5925] usb 4-1: config 0 descriptor?? [ 407.222137][ T5925] usb 3-1: USB disconnect, device number 101 [ 407.448043][T10737] syzkaller0: entered promiscuous mode [ 407.454822][T10737] syzkaller0: entered allmulticast mode [ 408.032360][ T5886] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 408.040445][ T5886] usb 1-1: MIDIStreaming interface descriptor not found [ 408.141643][ T5886] usb 1-1: USB disconnect, device number 76 [ 408.276520][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 408.276537][ T30] audit: type=1326 audit(1762052966.955:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 408.385504][ T30] audit: type=1326 audit(1762052966.955:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 408.513219][ T30] audit: type=1326 audit(1762052966.985:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 408.537751][ T30] audit: type=1326 audit(1762052966.985:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 408.566001][ T30] audit: type=1326 audit(1762052966.985:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 408.590630][ T30] audit: type=1326 audit(1762052966.985:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 408.613086][ T5917] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 408.622249][ T30] audit: type=1326 audit(1762052966.985:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 408.655015][ T30] audit: type=1326 audit(1762052966.985:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 408.677886][ T30] audit: type=1326 audit(1762052966.985:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 408.702685][ T30] audit: type=1326 audit(1762052966.985:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.2.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f62c7f8efc9 code=0x7ffc0000 [ 408.733937][ T5886] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 408.789531][ T5917] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 408.800143][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.808896][ T5917] usb 3-1: Product: syz [ 408.813295][ T5917] usb 3-1: Manufacturer: syz [ 408.818418][ T5917] usb 3-1: SerialNumber: syz [ 408.825438][ T5917] usb 3-1: config 0 descriptor?? [ 408.883913][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 408.891272][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.901116][ T5886] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 408.910443][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.922781][ T5886] usb 1-1: config 0 descriptor?? [ 408.984829][ T5825] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 409.043933][ T24] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 409.136029][ T5825] usb 2-1: unable to get BOS descriptor or descriptor too short [ 409.145461][ T5825] usb 2-1: not running at top speed; connect to a high speed hub [ 409.155042][ T5825] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 409.162717][ T5825] usb 2-1: can't read configurations, error -61 [ 409.195624][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 409.204964][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.216593][ T24] usb 5-1: config 0 descriptor?? [ 409.227924][ T24] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 409.238622][ T5917] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 409.247113][ T5917] usb 3-1: Firmware version (0.0) predates our first public release. [ 409.256864][ T5917] usb 3-1: Please update to version 0.2 or newer [ 409.294024][ T5825] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 409.336536][ T5886] stadia 0003:18D1:9400.0022: item fetching failed at offset 0/4 [ 409.345982][ T5886] stadia 0003:18D1:9400.0022: parse failed [ 409.351880][ T5886] stadia 0003:18D1:9400.0022: probe with driver stadia failed with error -22 [ 409.424684][ T5824] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 409.446643][ T5825] usb 2-1: unable to get BOS descriptor or descriptor too short [ 409.455601][ T5825] usb 2-1: not running at top speed; connect to a high speed hub [ 409.469344][ T5825] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 409.477597][ T5825] usb 2-1: can't read configurations, error -61 [ 409.485420][ T5825] usb usb2-port1: attempt power cycle [ 409.508910][ T5917] usb 3-1: USB disconnect, device number 102 [ 409.536424][ T5925] usb 1-1: USB disconnect, device number 77 [ 409.635478][ T24] gspca_stv06xx: I2C: Read error writing address: -71 [ 409.652765][ T5934] usb 4-1: USB disconnect, device number 67 [ 409.685215][ T24] usb 5-1: USB disconnect, device number 75 [ 409.759956][T10754] misc userio: The device must be registered before sending interrupts [ 409.843929][ T5825] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 409.866598][ T5825] usb 2-1: unable to get BOS descriptor or descriptor too short [ 409.874938][ T5825] usb 2-1: not running at top speed; connect to a high speed hub [ 409.884176][ T5825] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 409.891756][ T5825] usb 2-1: can't read configurations, error -61 [ 410.033922][ T5825] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 410.074702][ T5934] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 410.083631][ T5825] usb 2-1: unable to get BOS descriptor or descriptor too short [ 410.094794][ T5825] usb 2-1: not running at top speed; connect to a high speed hub [ 410.106307][ T5825] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 410.117848][ T5825] usb 2-1: can't read configurations, error -61 [ 410.132501][ T5825] usb usb2-port1: unable to enumerate USB device [ 410.175030][T10762] loop8: detected capacity change from 0 to 8 [ 410.182336][T10762] Dev loop8: unable to read RDB block 8 [ 410.190461][T10762] loop8: unable to read partition table [ 410.196975][T10762] loop8: partition table beyond EOD, truncated [ 410.203237][T10762] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 410.238967][ T5934] usb 4-1: No LPM exit latency info found, disabling LPM. [ 410.262262][ T5934] usb 4-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt [ 410.273726][ T5934] usb 4-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt [ 410.284606][ T5934] usb 4-1: config 1 interface 0 has no altsetting 0 [ 410.308345][ T5934] usb 4-1: string descriptor 0 read error: -22 [ 410.324552][ T5934] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 410.343579][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.358032][T10754] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 410.367400][T10754] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 410.493887][ T5917] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 410.574298][ T5825] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 410.688943][ T5934] usb 4-1: USB disconnect, device number 68 [ 410.695044][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 410.731548][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.744692][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 410.761797][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.766015][ T5825] usb 1-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 410.785495][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.804464][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.822781][ T5825] usb 1-1: Product: syz [ 410.827865][ T5825] usb 1-1: Manufacturer: syz [ 410.831889][ T5917] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 410.832477][ T5825] usb 1-1: SerialNumber: syz [ 410.865089][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.889991][ T5825] usb 1-1: config 0 descriptor?? [ 410.892317][ T5917] usb 3-1: config 0 descriptor?? [ 411.333834][ T5825] mxuport 1-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 411.346865][ T5825] mxuport 1-1:0.0: probe with driver mxuport failed with error -5 [ 411.411463][ T5825] usb 1-1: USB disconnect, device number 78 [ 411.424381][ T5934] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 411.600335][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.610863][ T5934] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 411.626060][ T5934] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 411.636258][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 411.645163][ T5934] usb 4-1: Product: syz [ 411.649434][ T5934] usb 4-1: Manufacturer: syz [ 411.654911][ T5934] usb 4-1: SerialNumber: syz [ 411.671381][ T5934] usb 4-1: config 0 descriptor?? [ 411.769654][ T5925] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 411.843938][T10799] FAULT_INJECTION: forcing a failure. [ 411.843938][T10799] name failslab, interval 1, probability 0, space 0, times 0 [ 411.914677][T10799] CPU: 1 UID: 0 PID: 10799 Comm: syz.1.1375 Not tainted syzkaller #0 PREEMPT(full) [ 411.914702][T10799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 411.914713][T10799] Call Trace: [ 411.914721][T10799] [ 411.914730][T10799] dump_stack_lvl+0x189/0x250 [ 411.914759][T10799] ? __pfx____ratelimit+0x10/0x10 [ 411.914781][T10799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.914804][T10799] ? __pfx__printk+0x10/0x10 [ 411.914824][T10799] ? __lock_acquire+0xab9/0xd20 [ 411.914851][T10799] should_fail_ex+0x414/0x560 [ 411.914882][T10799] should_failslab+0xa8/0x100 [ 411.914909][T10799] kmem_cache_alloc_noprof+0x74/0x6e0 [ 411.914931][T10799] ? ipv6_chk_mcast_addr+0x2e/0x860 [ 411.914953][T10799] ? skb_clone+0x212/0x3a0 [ 411.914978][T10799] skb_clone+0x212/0x3a0 [ 411.914995][T10799] ? ip6_finish_output2+0x476/0x1480 [ 411.915022][T10799] ip6_finish_output2+0x48a/0x1480 [ 411.915060][T10799] ? __pfx_ip6_finish_output2+0x10/0x10 [ 411.915086][T10799] ? ip6_mtu+0x7d/0x490 [ 411.915106][T10799] ? ip6_mtu+0x38c/0x490 [ 411.915129][T10799] ? ip6_finish_output+0x2ef/0x4e0 [ 411.915152][T10799] ? ip6_output+0x126/0x550 [ 411.915174][T10799] ip6_output+0x340/0x550 [ 411.915201][T10799] ip6_mr_output+0x4e9/0x1100 [ 411.915233][T10799] ? ip6_mr_output+0x1ca/0x1100 [ 411.915260][T10799] ? __pfx_ip6_mr_output+0x10/0x10 [ 411.915290][T10799] ? __ip6_local_out+0x609/0x870 [ 411.915315][T10799] ? __ip6_local_out+0x82c/0x870 [ 411.915334][T10799] ? __lock_acquire+0xab9/0xd20 [ 411.915353][T10799] ? __ip6_local_out+0x609/0x870 [ 411.915387][T10799] ? skb_dst+0x4f/0xd0 [ 411.915409][T10799] ? dst_output+0x17b/0x1c0 [ 411.915427][T10799] ? ip6_send_skb+0x10f/0x390 [ 411.915451][T10799] ip6_send_skb+0x1d5/0x390 [ 411.915478][T10799] rawv6_push_pending_frames+0x6e6/0x8d0 [ 411.915504][T10799] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 411.915527][T10799] ? __pfx_raw6_getfrag+0x10/0x10 [ 411.915551][T10799] rawv6_sendmsg+0x133d/0x1830 [ 411.915585][T10799] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 411.915629][T10799] ? __pfx_aa_sk_perm+0x10/0x10 [ 411.915656][T10799] ? sock_rps_record_flow+0x19/0x410 [ 411.915684][T10799] ? inet_sendmsg+0x2f4/0x370 [ 411.915706][T10799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.915727][T10799] __sock_sendmsg+0x19c/0x270 [ 411.915753][T10799] ____sys_sendmsg+0x52d/0x830 [ 411.915778][T10799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.915807][T10799] ? import_iovec+0x74/0xa0 [ 411.915833][T10799] ___sys_sendmsg+0x21f/0x2a0 [ 411.915856][T10799] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.915922][T10799] ? __fget_files+0x2a/0x420 [ 411.915937][T10799] ? __fget_files+0x3a0/0x420 [ 411.915965][T10799] __sys_sendmmsg+0x227/0x430 [ 411.915987][T10799] ? __pfx___sys_sendmmsg+0x10/0x10 [ 411.916013][T10799] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 411.916054][T10799] ? ksys_write+0x22a/0x250 [ 411.916079][T10799] ? __pfx_ksys_write+0x10/0x10 [ 411.916105][T10799] __x64_sys_sendmmsg+0xa0/0xc0 [ 411.916126][T10799] do_syscall_64+0xfa/0xfa0 [ 411.916147][T10799] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.916168][T10799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.916186][T10799] ? clear_bhb_loop+0x60/0xb0 [ 411.916208][T10799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.916225][T10799] RIP: 0033:0x7f3cf2d8efc9 [ 411.916242][T10799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.916257][T10799] RSP: 002b:00007f3cf3c4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 411.916276][T10799] RAX: ffffffffffffffda RBX: 00007f3cf2fe5fa0 RCX: 00007f3cf2d8efc9 [ 411.916289][T10799] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 411.916300][T10799] RBP: 00007f3cf3c4b090 R08: 0000000000000000 R09: 0000000000000000 [ 411.916311][T10799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.916322][T10799] R13: 00007f3cf2fe6038 R14: 00007f3cf2fe5fa0 R15: 00007f3cf310fa28 [ 411.916352][T10799] [ 411.926042][ T5925] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 412.354666][ T5925] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 412.365287][ T5925] usb 5-1: config 220 has no interface number 2 [ 412.371625][ T5925] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 412.386776][ T5925] usb 5-1: config 220 interface 0 has no altsetting 0 [ 412.433149][ T5925] usb 5-1: config 220 interface 76 has no altsetting 0 [ 412.448610][ T5925] usb 5-1: config 220 interface 1 has no altsetting 0 [ 412.461521][ T5925] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 412.472347][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.481224][ T5925] usb 5-1: Product: syz [ 412.485758][ T5925] usb 5-1: Manufacturer: syz [ 412.490482][ T5925] usb 5-1: SerialNumber: syz [ 412.767388][ T5825] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 412.775236][ T5934] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 412.806976][T10797] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 412.925910][ T5825] usb 2-1: config index 0 descriptor too short (expected 72, got 25) [ 412.935790][ T5825] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 412.964511][ T5825] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 412.990212][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 413.010094][ T5825] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 413.010168][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.037550][ T5934] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 413.038824][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.047485][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.066303][ T5825] usb 2-1: Product: syz [ 413.075412][ T5934] usb 1-1: config 0 descriptor?? [ 413.082754][ T5825] usb 2-1: Manufacturer: syz [ 413.097079][ T5825] usb 2-1: SerialNumber: syz [ 413.121927][ T5825] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 413.253459][ T5917] usbhid 3-1:0.0: can't add hid device: -71 [ 413.278802][ T5917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 413.367075][ T5917] usb 3-1: USB disconnect, device number 103 [ 413.458872][T10811] trusted_key: encrypted_key: insufficient parameters specified [ 413.511399][ T5934] stadia 0003:18D1:9400.0023: item fetching failed at offset 0/4 [ 413.532064][ T5934] stadia 0003:18D1:9400.0023: parse failed [ 413.538340][ T5934] stadia 0003:18D1:9400.0023: probe with driver stadia failed with error -22 [ 413.719479][ T939] usb 1-1: USB disconnect, device number 79 [ 413.774266][ T5917] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 413.947051][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.969556][ T5917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 413.978974][ T5917] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 413.989337][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.004474][ T5917] usb 3-1: config 0 descriptor?? [ 414.064248][ T5934] usb 4-1: USB disconnect, device number 69 [ 414.091391][ T5917] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 414.098244][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 414.109920][ T5917] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 414.148835][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 414.184940][ T5917] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 414.208965][ T5917] usb 3-1: media controller created [ 414.226089][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 414.271740][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 414.311668][T10811] dvb-usb: bulk message failed: -22 (2/0) [ 414.314145][ T5917] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 414.336354][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 414.496459][ T5917] dvb-usb: schedule remote query interval to 150 msecs. [ 414.507132][ T5917] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 414.593991][ T5825] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 414.619676][ T5925] usb 5-1: selecting invalid altsetting 0 [ 414.626524][ T5925] usb 5-1: selecting invalid altsetting 0 [ 414.639695][ T5925] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 414.769715][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 414.775940][ T5925] uvcvideo 5-1:220.0: No valid video chain found. [ 414.795509][T10822] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1383'. [ 414.798255][ T5917] dvb-usb: error while querying for an remote control event. [ 414.836326][ T5925] usb 5-1: selecting invalid altsetting 0 [ 414.842120][ T5925] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 414.878957][ T5825] usb 4-1: config 0 has no interfaces? [ 414.882138][ T5925] usb 5-1: USB disconnect, device number 76 [ 414.896223][ T5825] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 414.923702][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.954765][ T5825] usb 4-1: Product: syz [ 414.988981][ T5825] usb 4-1: Manufacturer: syz [ 414.996279][ T5825] usb 4-1: SerialNumber: syz [ 414.996663][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 415.018217][ T5917] dvb-usb: error while querying for an remote control event. [ 415.019943][ T5825] usb 4-1: config 0 descriptor?? [ 415.183905][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 415.189763][ T5925] dvb-usb: error while querying for an remote control event. [ 415.250876][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1381'. [ 415.276609][ T5825] usb 4-1: USB disconnect, device number 70 [ 415.324237][ T5917] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 415.353949][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 415.364173][ T5925] dvb-usb: error while querying for an remote control event. [ 415.445344][ T5925] usb 2-1: USB disconnect, device number 83 [ 415.475534][ T5917] usb 5-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 415.489685][ T5917] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 415.506060][ T5917] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 415.515248][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.523239][ T5917] usb 5-1: Product: syz [ 415.527523][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 415.533263][ T5934] dvb-usb: error while querying for an remote control event. [ 415.540808][ T5917] usb 5-1: Manufacturer: syz [ 415.545790][ T5917] usb 5-1: SerialNumber: syz [ 415.553169][ T5917] usb 5-1: config 0 descriptor?? [ 415.618189][T10833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1387'. [ 415.643904][ T24] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 415.704481][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 415.710249][ T5925] dvb-usb: error while querying for an remote control event. [ 415.814043][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 415.834726][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.861946][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 415.873912][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 415.888997][ T5934] dvb-usb: error while querying for an remote control event. [ 415.915519][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 415.946536][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 415.961926][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.976584][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 415.994549][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 416.004432][ T24] usb 1-1: Manufacturer: syz [ 416.012252][ T24] usb 1-1: config 0 descriptor?? [ 416.063970][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 416.069952][ T5934] dvb-usb: error while querying for an remote control event. [ 416.344294][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 416.350048][ T5934] dvb-usb: error while querying for an remote control event. [ 416.443767][ T5825] usb 3-1: USB disconnect, device number 104 [ 416.792039][ T5934] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 416.800709][ T5825] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 417.006581][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.037741][ T5934] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 417.051454][ T5934] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 417.061097][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 417.069425][ T5934] usb 4-1: Product: syz [ 417.073730][ T5934] usb 4-1: Manufacturer: syz [ 417.082377][ T5934] usb 4-1: SerialNumber: syz [ 417.105408][ T5934] usb 4-1: config 0 descriptor?? [ 417.166551][ T5825] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 417.243921][ T5917] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 417.413551][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 417.443985][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 417.467688][ T5825] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 417.470533][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.489431][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.500037][ T5917] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 417.500386][ T5825] usb 3-1: Product: syz [ 417.513725][ T5825] usb 3-1: Manufacturer: syz [ 417.519449][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.520677][ T5825] usb 3-1: SerialNumber: syz [ 417.551089][ T5825] usb 3-1: config 0 descriptor?? [ 417.565381][ T5825] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 417.591032][ T5917] usb 2-1: config 0 descriptor?? [ 418.016554][ T5917] stadia 0003:18D1:9400.0024: item fetching failed at offset 0/4 [ 418.036770][ T5917] stadia 0003:18D1:9400.0024: parse failed [ 418.050757][ T5917] stadia 0003:18D1:9400.0024: probe with driver stadia failed with error -22 [ 418.118564][ T5825] usb 5-1: USB disconnect, device number 77 [ 418.216784][ T5886] usb 2-1: USB disconnect, device number 84 [ 418.424042][T10851] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x4) [ 418.506714][ T5917] usb 3-1: USB disconnect, device number 105 [ 418.573958][ T5825] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 418.704208][ T24] rc_core: IR keymap rc-hauppauge not found [ 418.710349][ T24] Registered IR keymap rc-empty [ 418.717294][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.744397][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.765889][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 418.779918][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.792552][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.801884][T10863] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1396'. [ 418.812546][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input39 [ 418.825486][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 418.841900][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.849433][ T5825] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 418.858790][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.866971][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.877938][ T5825] usb 5-1: config 0 descriptor?? [ 418.904073][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.924330][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.951075][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.974013][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.994432][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 419.014004][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 419.054125][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 419.073998][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 419.121771][ T24] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 419.139431][ T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 419.172763][ T24] usb 1-1: USB disconnect, device number 80 [ 419.256066][ T5824] Bluetooth: hci0: Unknown advertising packet type: 0x11 [ 419.266795][ T5917] usb 4-1: USB disconnect, device number 71 [ 419.340691][ T5825] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 419.406125][T10876] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 419.703901][ T24] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 419.749901][T10884] trusted_key: encrypted_key: insufficient parameters specified [ 419.890817][ T24] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 419.900282][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.908703][ T24] usb 1-1: Product: syz [ 419.913080][ T24] usb 1-1: Manufacturer: syz [ 419.918237][ T24] usb 1-1: SerialNumber: syz [ 419.946902][ T24] usb 1-1: config 0 descriptor?? [ 419.958210][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 419.965197][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 420.088200][T10888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1402'. [ 420.170799][ T5917] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 420.319479][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 420.339333][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 420.359111][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 420.384197][ T24] usb 1-1: media controller created [ 420.416025][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.434073][ T5917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 420.456888][ T5917] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 420.483479][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.510666][ T5917] usb 3-1: config 0 descriptor?? [ 420.512128][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.544868][ T5917] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 420.560780][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 420.583472][ T5917] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 420.645643][ C1] plantronics 0003:047F:FFFF.0025: usb_submit_urb(ctrl) failed: -1 [ 420.725415][ T5917] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 420.750410][T10884] ------------[ cut here ]------------ [ 420.756311][T10884] usb 1-1: BOGUS control dir, pipe 80005180 doesn't match bRequestType c0 [ 420.770640][ T24] DVB: Unable to find symbol dib7000p_attach() [ 420.776932][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 420.786023][T10884] WARNING: CPU: 1 PID: 10884 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 420.795867][T10884] Modules linked in: [ 420.800012][T10884] CPU: 1 UID: 0 PID: 10884 Comm: syz.2.1401 Not tainted syzkaller #0 PREEMPT(full) [ 420.809446][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 420.819544][T10884] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 420.825305][T10884] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 40 14 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 0a 90 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 420.844976][T10884] RSP: 0018:ffffc9001c7af820 EFLAGS: 00010246 [ 420.851039][T10884] RAX: 907e6bd8690ab100 RBX: ffff8880777ad900 RCX: 0000000000080000 [ 420.859311][T10884] RDX: ffffc9000db4e000 RSI: 00000000000054c2 RDI: 00000000000054c3 [ 420.867405][T10884] RBP: 1ffff110288de37c R08: 0000000000000003 R09: 0000000000000004 [ 420.875490][T10884] R10: dffffc0000000000 R11: fffffbfff1bba678 R12: ffff88807e160100 [ 420.883471][T10884] R13: ffff8881446f1be0 R14: 0000000080005180 R15: ffff8880781b4e40 [ 420.891632][T10884] FS: 00007f62c8d956c0(0000) GS:ffff88812623d000(0000) knlGS:0000000000000000 [ 420.901256][T10884] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.908219][T10884] CR2: 00007f37f9ed6e9c CR3: 00000000779ce000 CR4: 00000000003526f0 [ 420.916247][T10884] Call Trace: [ 420.919518][T10884] [ 420.922436][T10884] usb_start_wait_urb+0x114/0x4c0 [ 420.927490][T10884] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 420.933035][T10884] usb_control_msg+0x232/0x3e0 [ 420.937818][T10884] dib0700_i2c_xfer+0xba7/0xf70 [ 420.942672][T10884] __i2c_transfer+0x874/0x2170 [ 420.947458][T10884] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.952644][T10884] ? __pfx___i2c_transfer+0x10/0x10 [ 420.957878][T10884] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 420.963231][T10884] ? i2c_transfer+0x120/0x3a0 [ 420.968008][T10884] i2c_transfer+0x25b/0x3a0 [ 420.972499][T10884] ? __pfx_i2c_transfer+0x10/0x10 [ 420.977545][T10884] ? _copy_from_user+0x94/0xb0 [ 420.982295][T10884] i2cdev_ioctl_rdwr+0x460/0x740 [ 420.987252][T10884] i2cdev_ioctl+0x64b/0x7f0 [ 420.991735][T10884] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 420.996786][T10884] ? __fget_files+0x3a0/0x420 [ 421.001441][T10884] ? __fget_files+0x2a/0x420 [ 421.006077][T10884] ? bpf_lsm_file_ioctl+0x9/0x20 [ 421.011027][T10884] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 421.016135][T10884] __se_sys_ioctl+0xfc/0x170 [ 421.020742][T10884] do_syscall_64+0xfa/0xfa0 [ 421.025527][ T5917] usb 3-1: media controller created [ 421.027427][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 421.030768][T10884] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.044358][T10884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.050413][T10884] ? clear_bhb_loop+0x60/0xb0 [ 421.055148][T10884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.061035][T10884] RIP: 0033:0x7f62c7f8efc9 [ 421.065475][T10884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.085126][T10884] RSP: 002b:00007f62c8d95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.093522][T10884] RAX: ffffffffffffffda RBX: 00007f62c81e6090 RCX: 00007f62c7f8efc9 [ 421.101528][T10884] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 000000000000000a [ 421.109551][T10884] RBP: 00007f62c8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 421.117546][T10884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.125524][T10884] R13: 00007f62c81e6128 R14: 00007f62c81e6090 R15: 00007f62c830fa28 [ 421.133487][T10884] [ 421.136546][T10884] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 421.143810][T10884] CPU: 1 UID: 0 PID: 10884 Comm: syz.2.1401 Not tainted syzkaller #0 PREEMPT(full) [ 421.153169][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.163200][T10884] Call Trace: [ 421.166462][T10884] [ 421.169376][T10884] dump_stack_lvl+0x99/0x250 [ 421.173950][T10884] ? __asan_memcpy+0x40/0x70 [ 421.178518][T10884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.183697][T10884] ? __pfx__printk+0x10/0x10 [ 421.188268][T10884] vpanic+0x237/0x6d0 [ 421.192235][T10884] ? __pfx_vpanic+0x10/0x10 [ 421.196720][T10884] panic+0xb9/0xc0 [ 421.200425][T10884] ? __pfx_panic+0x10/0x10 [ 421.204832][T10884] __warn+0x31b/0x4b0 [ 421.208797][T10884] ? usb_submit_urb+0x114d/0x18b0 [ 421.213804][T10884] ? usb_submit_urb+0x114d/0x18b0 [ 421.218820][T10884] report_bug+0x2be/0x4f0 [ 421.223133][T10884] ? usb_submit_urb+0x114d/0x18b0 [ 421.228161][T10884] ? usb_submit_urb+0x114d/0x18b0 [ 421.233176][T10884] ? usb_submit_urb+0x114f/0x18b0 [ 421.238187][T10884] handle_bug+0x84/0x160 [ 421.242424][T10884] exc_invalid_op+0x1a/0x50 [ 421.246931][T10884] asm_exc_invalid_op+0x1a/0x20 [ 421.251786][T10884] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 421.257468][T10884] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 40 14 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 0a 90 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 421.277066][T10884] RSP: 0018:ffffc9001c7af820 EFLAGS: 00010246 [ 421.283124][T10884] RAX: 907e6bd8690ab100 RBX: ffff8880777ad900 RCX: 0000000000080000 [ 421.291080][T10884] RDX: ffffc9000db4e000 RSI: 00000000000054c2 RDI: 00000000000054c3 [ 421.299040][T10884] RBP: 1ffff110288de37c R08: 0000000000000003 R09: 0000000000000004 [ 421.306997][T10884] R10: dffffc0000000000 R11: fffffbfff1bba678 R12: ffff88807e160100 [ 421.314951][T10884] R13: ffff8881446f1be0 R14: 0000000080005180 R15: ffff8880781b4e40 [ 421.322932][T10884] usb_start_wait_urb+0x114/0x4c0 [ 421.327955][T10884] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 421.333509][T10884] usb_control_msg+0x232/0x3e0 [ 421.338264][T10884] dib0700_i2c_xfer+0xba7/0xf70 [ 421.343127][T10884] __i2c_transfer+0x874/0x2170 [ 421.347880][T10884] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.353073][T10884] ? __pfx___i2c_transfer+0x10/0x10 [ 421.358266][T10884] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 421.363622][T10884] ? i2c_transfer+0x120/0x3a0 [ 421.368290][T10884] i2c_transfer+0x25b/0x3a0 [ 421.372781][T10884] ? __pfx_i2c_transfer+0x10/0x10 [ 421.377793][T10884] ? _copy_from_user+0x94/0xb0 [ 421.382565][T10884] i2cdev_ioctl_rdwr+0x460/0x740 [ 421.387521][T10884] i2cdev_ioctl+0x64b/0x7f0 [ 421.392032][T10884] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 421.397062][T10884] ? __fget_files+0x3a0/0x420 [ 421.401729][T10884] ? __fget_files+0x2a/0x420 [ 421.406317][T10884] ? bpf_lsm_file_ioctl+0x9/0x20 [ 421.411253][T10884] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 421.416267][T10884] __se_sys_ioctl+0xfc/0x170 [ 421.420849][T10884] do_syscall_64+0xfa/0xfa0 [ 421.425343][T10884] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.430530][T10884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.436577][T10884] ? clear_bhb_loop+0x60/0xb0 [ 421.441240][T10884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.447113][T10884] RIP: 0033:0x7f62c7f8efc9 [ 421.451517][T10884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.471107][T10884] RSP: 002b:00007f62c8d95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.479513][T10884] RAX: ffffffffffffffda RBX: 00007f62c81e6090 RCX: 00007f62c7f8efc9 [ 421.487470][T10884] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 000000000000000a [ 421.495430][T10884] RBP: 00007f62c8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 421.503386][T10884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.511337][T10884] R13: 00007f62c81e6128 R14: 00007f62c81e6090 R15: 00007f62c830fa28 [ 421.519305][T10884] [ 421.522557][T10884] Kernel Offset: disabled [ 421.526867][T10884] Rebooting in 86400 seconds..