last executing test programs: 4m5.225681004s ago: executing program 2 (id=88): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4m5.126466297s ago: executing program 2 (id=89): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x24, 0x109, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x5, 0x0, 0x0, @fd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) kcmp(r0, 0xffffffffffffffff, 0x6, r1, r2) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = inotify_init() r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@empty, @local, @val={@void, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\a\x00', 0x20, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x7, 0x0, 0x3, {[@mptcp=@generic={0x0, 0x9, "c2505f58be4b67"}]}}}}}}}}, 0x0) 4m4.86806921s ago: executing program 2 (id=91): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x1000200) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) setxattr$incfs_metadata(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003940)=@newtfilter={0x8b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x884, 0x2, [@TCA_MATCHALL_ACT={0x880, 0x2, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x8, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x84, 0x4, 0x7, 0x101, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x102, 0xc0000000, 0x6, 0x6, 0x8, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x6, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0xb, 0x5, 0xb, 0x399d, 0x8, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x2ced, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe076, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde13, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x4, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xf3, 0x0, 0x4, 0x7, 0x401, 0x2, 0x9, 0x4, 0x7, 0x5, 0x2, 0x10, 0x3, 0x7, 0x80000000, 0x6, 0x10, 0x4, 0xc0000000, 0xa, 0x1, 0x5, 0x9, 0x9, 0x2, 0x7, 0x4, 0x3ff, 0x6, 0xc97, 0x4fa, 0x7ff, 0x7f, 0x6, 0x1, 0x3, 0x0, 0x6, 0xd, 0xb, 0x2, 0x3, 0x7fffffff, 0x2491, 0x5, 0x4, 0xffffd257, 0x0, 0x9, 0x4, 0x565, 0x6, 0x9, 0x6, 0xde0, 0x8000, 0x6, 0x0, 0xa51e, 0x30, 0xfffffff9, 0x7, 0x0, 0x3, 0x1, 0x1000, 0x69, 0x3, 0x8, 0x800, 0x0, 0x6, 0x40000000, 0x8, 0xf59, 0xffffffff, 0x8c, 0x0, 0x8, 0x4, 0xa, 0x7fff, 0x6, 0x80000001, 0x7ff, 0x0, 0x7fffffff, 0x8000, 0xffff, 0xc4e2, 0x8, 0x7, 0x0, 0xbc, 0x1, 0x9, 0x8, 0x9, 0x9, 0x1, 0xffffff80, 0x0, 0x9d3a, 0x7, 0xffffffff, 0x4, 0xfffffff9, 0x6, 0x85d8, 0x4, 0xb4435f8, 0x101, 0x0, 0xfffffffd, 0x100, 0x1, 0x0, 0x4, 0x6, 0xc, 0x200, 0x1ff, 0xffffffff, 0x2d, 0x5, 0x10000, 0x7, 0x400, 0x9, 0x3ff, 0x5, 0xffffffff, 0x6, 0x8, 0x0, 0x7, 0x9, 0x7fffffff, 0xffff, 0x101, 0x2, 0xa0, 0xfffff000, 0x6, 0x81, 0x2, 0xa670, 0x80, 0x6, 0x5, 0x10, 0x20, 0x6, 0x800, 0x7, 0x5, 0x8, 0x8, 0x7d86f7bb, 0x2, 0xbed7, 0x2, 0x8, 0xfffffffa, 0x8, 0x5, 0x3, 0x0, 0x5, 0x81, 0xa00000, 0xfffffff8, 0x2, 0x5, 0x2, 0xfffffff8, 0x401, 0x7, 0x7ff, 0x3, 0x7, 0x0, 0x1, 0xffff, 0x7fffffff, 0x89a, 0x3, 0xe, 0x40, 0x0, 0x4, 0x1, 0x4000400, 0x9, 0xf2, 0x2, 0x1c, 0x2, 0x1, 0x62, 0x1000, 0x6, 0x7, 0x2000000, 0x3, 0x8143, 0x4a, 0x7fffffff, 0x7, 0x2, 0x4aa, 0x8, 0x7, 0x0, 0x8, 0x2, 0x9c, 0xfffffff9, 0x1, 0x4, 0x40, 0xa3bb, 0x4, 0x95, 0x0, 0x3, 0x1, 0x6, 0x3, 0xd, 0x5, 0x1000, 0x9, 0x23d, 0x0, 0x8, 0x2, 0x4, 0x8, 0x2, 0x10, 0x3, 0x1, 0x1f6, 0x2, 0x8, 0x1, 0x6, 0x2, 0x7, 0xcf0, 0x9270, 0xa000000, 0x6, 0x37e1, 0x7fffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m3.461088149s ago: executing program 2 (id=93): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', r2, 0x29, 0x1a, 0x3, 0x5, 0x8, @mcast2, @private2, 0x40, 0x8000, 0x412, 0x6}}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @local}, 0x48, r3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001400190126bd7000f5d3df250a0819fe", @ANYRES32=r2, @ANYBLOB="1400010000000000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) 4m3.07598063s ago: executing program 2 (id=95): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={0x0}) 4m2.886327164s ago: executing program 2 (id=97): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd']) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x1, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[@ANYBLOB="501a0000210a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c000180060001000000000008"], 0x1a50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d0101400001020301090260000301054005090400ffffffff00000a240100000a000201020904010000010200000904010101010200000905015a0725010808340009040200000102000009040201010102000009058209400008404007250104fe0008fb27b0672a0000000000"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x82c}}, {0x3a, &(0x7f00000004c0)=@string={0x3a, 0x3, "831b6d04e492da5f050d579d92116a2aa0e22e3b2b7510d8c164d6f828bccb56189649ec67ab5b01de20b413048e2b72a34b25181f165ad6"}}, {0x0, 0x0}, {0x0, 0x0}]}) 3m47.674204087s ago: executing program 32 (id=97): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd']) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x1, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[@ANYBLOB="501a0000210a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c000180060001000000000008"], 0x1a50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d0101400001020301090260000301054005090400ffffffff00000a240100000a000201020904010000010200000904010101010200000905015a0725010808340009040200000102000009040201010102000009058209400008404007250104fe0008fb27b0672a0000000000"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x82c}}, {0x3a, &(0x7f00000004c0)=@string={0x3a, 0x3, "831b6d04e492da5f050d579d92116a2aa0e22e3b2b7510d8c164d6f828bccb56189649ec67ab5b01de20b413048e2b72a34b25181f165ad6"}}, {0x0, 0x0}, {0x0, 0x0}]}) 10.627922108s ago: executing program 3 (id=780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a5c000000090a010400000000000000000600000608000a40000000000900020073797a32000000000900010073797a3000000000080005400000002c200009801c0002800c"], 0x84}}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r1, 0x0, 0x4004000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x10f, 0x7, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r6 = socket(0x1e, 0x4, 0x0) shutdown(r6, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 10.289852057s ago: executing program 5 (id=782): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000140)={&(0x7f00000000c0)=[{0x2416, 0x0, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x3, 0x80000000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a050000000000000000000100fffc0900010073797a3000000000400000f6020a010100000000000000000100fffc0900030073797a300000000014000480080002400000000008000140000000030900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080001400000001708000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) 8.565220951s ago: executing program 4 (id=786): r0 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000080)=""/149) io_uring_setup(0x3454, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x9e3c000) r1 = socket(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052409000105240000000d0b979d60a53067d50060200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, &(0x7f0000002440)={0x0, 0x0, 0x0, @raw}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000059b276ef782551ff8043363cdb7348f0000000800030000000000"], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc1105511, &(0x7f0000000040)={0x5, 0x3, 0xffff, 0xfff, 'syz1\x00', 0x2}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0xc1105511, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x1c, r6, 0x1, 0x0, 0x20000, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x100000}]}, 0x1c}}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', r2, 0x29, 0x37, 0x9, 0x3, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x7800, 0x5, 0x100}}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000200)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000280)=0xc) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="04"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xd8, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x805}, 0x40) 8.219598859s ago: executing program 3 (id=787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x6020400) splice(r4, 0x0, r5, 0x0, 0x2, 0x6) write(r3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="48b801b89734000000004d9823c80f23f835080050000f23f8c744240004000000c744240200000000c7442406000000000f011c244d0fc708c74424002a010000ff2c24b8010000000f01c10f23c00f21f835020002000f23f8c4e1b45702f341f4c4017d10e548b8c0770c90f03a5f34c42135e0220f20e035004000000fd07722e022e00000000f23f8", 0x8b}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.898412894s ago: executing program 3 (id=788): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.373505258s ago: executing program 0 (id=789): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0xa5ec0000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r2, 0x1000000}}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='cmdline\x00') exit(0xffff) read$FUSE(r3, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x100, 0x10001) ioctl$BLKFINISHZONE(r5, 0x40101288, &(0x7f00000000c0)={0x1ff, 0x10000000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) 7.002038885s ago: executing program 4 (id=790): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001a80), 0x402) sendmmsg$unix(r0, &(0x7f00000144c0), 0x0, 0x0) 6.809279792s ago: executing program 5 (id=791): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fc", 0x39}], 0x1}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000400), 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000000070300000000000000000000000000090001"], 0x20}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900), 0x0, 0x400000000000001b, 0x521219d051fa34f7, 0x0, r5}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="26c775407f3e332056d215b3c0abcfa3f3e43aa7c6572d85e5593c8749daa230cfbef825dbbcba28dee1b4152f92b7d71cffb8c2991ff6c34fc64fecee8a563ff5a50ac0faf0a28158671516f46d198259eebc840e04d93b8a661c0fcc2f4e5c26482608083da4b0c8d4ea939ab845e4f6bcb16af04aee6e40b980e495f2885ba1d77c9efd2281065943a07d2c9e170548c20499ffa5369cc1a9c60174a360f41fae1da35f02ebad78f230a6210ab925dc62cdce2bf42c37943ff0175cc8bcb66a51e0487e73ec45e91fad4a69b198b4aae54b3358cf90a8bd4a7013e3dd8e5fdfb561a2144c0f831b2c1d9479985842dac700", @ANYRESDEC=r6, @ANYBLOB="c30c424700000000280012800a0076"], 0x48}, 0x1, 0x0, 0x0, 0x200008d5}, 0x80) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x59}, @l2cap_cid_signaling={{0x55}, [@l2cap_disconn_req={{0x6, 0x10, 0x4}, {0xe5, 0x4}}, @l2cap_move_chan_rsp={{0xf, 0xb, 0x4}, {0x3}}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0xc, 0x3}}, @l2cap_conf_req={{0x4, 0x4, 0x1d}, {0x4, 0x1ff, [@l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0xf, 0x7, 0xfff, 0x7ff}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x6, 0x7, 0x2}}, @l2cap_info_rsp={{0xb, 0xc7, 0x4}, {0x5, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0xff01, 0x5}}]}}, 0x5e) select(0x40, &(0x7f0000000000)={0x100000000, 0xc8, 0x2, 0x5, 0x5, 0x9, 0x7fffffffffffffff}, &(0x7f0000000100)={0x1000, 0x80, 0x0, 0x1, 0x600000, 0x7fffffff, 0x8000000000000000, 0x3}, &(0x7f0000000140)={0x6, 0x59, 0x8, 0x5, 0x5, 0x2, 0xff, 0x6}, &(0x7f0000000340)) sendmmsg$alg(r6, 0x0, 0x0, 0x0) 6.763324773s ago: executing program 4 (id=792): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = mq_open(&(0x7f0000000000)='(\x00', 0x40, 0x28, &(0x7f0000000080)={0xecf9, 0x9, 0x8, 0xd899}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)={0x21e, 0x2, 0x0, {{0x500, 0xdd, 0x0, 0x4, {}, 0x3810000, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x21e) syz_clone3(&(0x7f0000000380)={0x100000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x2e}, &(0x7f0000000200)=""/117, 0x75, &(0x7f0000000280)=""/80, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) mq_notify(r2, &(0x7f0000000400)={0x0, 0x31, 0x2, @tid=r4}) fcntl$lock(r1, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x6a, 0x3}, 0x18, 0x1) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x2, 0x1, 0xc8e6, 0x0, 0x7, 0x100, 0x80000001, 0x8}, 0x0) 6.501435365s ago: executing program 5 (id=793): r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0xf4, r2, 0xa00, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1d2}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "b57f991606142a86a8e7c085607ff2c6515e50da3e96768ec9fa9c3cd380"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x1f, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0xf}, @TCA_PIE_LIMIT={0x8, 0x2, 0x40000000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) r4 = open(&(0x7f0000000140)='./file1\x00', 0x145142, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ftruncate(r4, 0x2007ffa) sendfile(r5, r4, 0x0, 0x80000000a) r6 = socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x88, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1e}, @void, @val={0xc, 0x99, {0x3, 0x55}}}}, [@NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "c4c1782bda9e730fdf745cbc0f3f9c298b6e299490968b77cecd81580f303be9169e55eb043356e0156ec654434381ed961311d869994250ae070ef9e200d5519d64f16a0eacf51cac836adc2af06093806a5a0f7d84cd01fa9935"}]}, 0x88}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100003e00070127bd700000000000017c00001800fc80080000008601987e185eb5b7191c8ee90eca082b34a842553702af9673648f7dee69260664488ce6e20c4c2d", @ANYRES32=r9, @ANYBLOB="0c00bb0000010000000000000c00018008000600", @ANYRES32=0x0, @ANYBLOB="08000280725eb862fd757cd39c21ad874594427b615b000cf2db51cdf02e420b7616dc0de1ecdc8dc12b6f70c9849d918b7abef0fdaa3ebfe513f3023d8fc30fc707dcfc8700598c43a74d33ddbb1c67342d0544a59f95d79b466d251dfb30a27cdbd1fa26cd8ac3357869e693c27302c9a88fdb6da8e5bee50b441542e37cdd892e0fd8c16831e033700a1f33518f4925d35862f3d9349c1669e9f14affdbd9e0068bb60ea62032623fb1a96980435b7b74501af133eb25cc3664fc7deb6ea54f732a97a755eea327cf72d056410c0f4e8f6049a326bbde55a807675c0872ead646ab9ed870896ec29c8d981ccac89892b832c4249ad7542ce743c1c292de9ca6a4ba3467b20000"], 0x140}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) write$binfmt_misc(r12, &(0x7f0000000000), 0xfffffecc) splice(r11, 0x0, r13, 0x0, 0x33fe0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x5c, r10, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xa, 0x99, {0x8, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0x0, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40081) bind$can_raw(r7, 0xffffffffffffffff, 0xfffffffffffffe68) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 6.385630535s ago: executing program 4 (id=794): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d1", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="619070424eb9", 0x6}], 0x1}}], 0x2, 0x0) 6.156829859s ago: executing program 4 (id=795): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1d, 0x3, 0x7ffc) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0xa, 0x0, 0x1, 0x9, 0xccb, 0x4, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x40045b0a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) tgkill(0x0, 0x0, 0x3f) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b00001e626ec7d85950b82ca73e"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) 5.583588372s ago: executing program 1 (id=796): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000540)={0x18, 0x0, {0x1, @local, 'hsr0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x300, 0x0}}], 0x3e8, 0x0) 5.463637674s ago: executing program 0 (id=797): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_dump={0x26, 0x80000000}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x4e22, @multicast1}}) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00003fb000)="f7", 0x1}, {&(0x7f0000000180)="bfa3415029f7297ffc3c8a8a95a310af43ca61d87ef2c4c8e30f84555094224f86dfc02d767a49d4cf20641665c0618e758083acc6f1932d073f4241aa3ee6778b3ba3efe5b280cd93ee228236e0e8957141e73a86a5c048", 0x58}], 0x2, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) (fail_nth: 1) 5.361602949s ago: executing program 5 (id=798): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.913136315s ago: executing program 0 (id=799): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e03f03001a0001000000ff7f000000008020"], 0x24}}, 0x0) 4.812964042s ago: executing program 0 (id=800): r0 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000080)=""/149) io_uring_setup(0x3454, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x9e3c000) r1 = socket(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052409000105240000000d0b979d60a53067d50060200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, &(0x7f0000002440)={0x0, 0x0, 0x0, @raw}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000059b276ef782551ff8043363cdb7348f0000000800030000000000"], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc1105511, &(0x7f0000000040)={0x5, 0x3, 0xffff, 0xfff, 'syz1\x00', 0x2}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0xc1105511, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x1c, r6, 0x1, 0x0, 0x20000, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x100000}]}, 0x1c}}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', r2, 0x29, 0x37, 0x9, 0x3, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x7800, 0x5, 0x100}}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000200)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000280)=0xc) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="04"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xd8, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x805}, 0x40) 4.735034653s ago: executing program 3 (id=801): landlock_create_ruleset(&(0x7f00000002c0)={0x6441, 0x0, 0x1}, 0x18, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r3, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r5, &(0x7f0000004380), 0x0, 0x0) 4.309024641s ago: executing program 3 (id=802): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000403bcad5b31caa84719a5fb09e6534375804155000000000000109022400010000480b0904000001030001000921fd7f000122e30181030004050a70c2393eadf908238666b72662fbb4897896fe400200000000000000377ecfc61bceaaad2a2194f4b0c0d5d25dbc046a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffb, 0x0, 0xffffffff}, 0x10) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1}, 0x2174eda0}], 0x1, 0x1, &(0x7f0000000580)={0x77359400}) openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000005c0)=0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x8000000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_clone(0xe78eb500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000580), 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) 3.920005559s ago: executing program 1 (id=803): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fc", 0x39}], 0x1}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000400), 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000000070300000000000000000000000000090001"], 0x20}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900), 0x0, 0x400000000000001b, 0x521219d051fa34f7, 0x0, r5}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="26c775407f3e332056d215b3c0abcfa3f3e43aa7c6572d85e5593c8749daa230cfbef825dbbcba28dee1b4152f92b7d71cffb8c2991ff6c34fc64fecee8a563ff5a50ac0faf0a28158671516f46d198259eebc840e04d93b8a661c0fcc2f4e5c26482608083da4b0c8d4ea939ab845e4f6bcb16af04aee6e40b980e495f2885ba1d77c9efd2281065943a07d2c9e170548c20499ffa5369cc1a9c60174a360f41fae1da35f02ebad78f230a6210ab925dc62cdce2bf42c37943ff0175cc8bcb66a51e0487e73ec45e91fad4a69b198b4aae54b3358cf90a8bd4a7013e3dd8e5fdfb561a2144c0f831b2c1d9479985842dac700", @ANYRESDEC=r6, @ANYBLOB="c30c424700000000280012800a0076"], 0x48}, 0x1, 0x0, 0x0, 0x200008d5}, 0x80) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x59}, @l2cap_cid_signaling={{0x55}, [@l2cap_disconn_req={{0x6, 0x10, 0x4}, {0xe5, 0x4}}, @l2cap_move_chan_rsp={{0xf, 0xb, 0x4}, {0x3}}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0xc, 0x3}}, @l2cap_conf_req={{0x4, 0x4, 0x1d}, {0x4, 0x1ff, [@l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0xf, 0x7, 0xfff, 0x7ff}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x6, 0x7, 0x2}}, @l2cap_info_rsp={{0xb, 0xc7, 0x4}, {0x5, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0xff01, 0x5}}]}}, 0x5e) select(0x40, &(0x7f0000000000)={0x100000000, 0xc8, 0x2, 0x5, 0x5, 0x9, 0x7fffffffffffffff}, &(0x7f0000000100)={0x1000, 0x80, 0x0, 0x1, 0x600000, 0x7fffffff, 0x8000000000000000, 0x3}, &(0x7f0000000140)={0x6, 0x59, 0x8, 0x5, 0x5, 0x2, 0xff, 0x6}, &(0x7f0000000340)) sendmmsg$alg(r6, 0x0, 0x0, 0x0) 3.641941589s ago: executing program 1 (id=804): r0 = syz_usb_connect(0x6, 0x24, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRES64], 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x2042, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x2) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}, {0x0}], 0x2) setresgid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, 0x0, 0x0}, &(0x7f0000000900)={0x44, &(0x7f0000000080)={0x20, 0x9, 0x9a, "03fc64f1b84b98fcfed83c988fdf0504bb21607a2269ff43cf72a4e82e930145a763aa3981817cb127b74f0014df546dc3c64830c373afecad05bea8b91c761689ef9c163e07c5935eb680f0efdd029266f2221aec9aa7e202ce950a70dbd291a693ef47c5e62fa3d337f79d73b98bcb4e06cc77ad93fa29e4c18f5da92a2f76764362be6bc72cd67e8be8fde85027789e418a70a71e3236537f"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x84, 0x3, "28ca34"}, &(0x7f0000000000)={0x20, 0x85, 0x3, "72cb3c"}}) 3.107060197s ago: executing program 0 (id=805): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343", 0x12}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="619070424eb9", 0x6}], 0x1}}], 0x2, 0x0) 2.966371007s ago: executing program 0 (id=806): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1d, 0x3, 0x7ffc) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0xa, 0x0, 0x1, 0x9, 0xccb, 0x4, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x40045b0a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) tgkill(0x0, 0x0, 0x3f) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b00001e626ec7d85950b82ca73e"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) 2.444011698s ago: executing program 1 (id=807): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x29, 0x2, 0x0) (async) rseq(0x0, 0xfffffdcd, 0x11004, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000000)) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) r11 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000080)=r10, 0x12) (async) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r14, 0x5) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x12) 2.116558562s ago: executing program 5 (id=808): r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0xf4, r2, 0xa00, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1d2}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "b57f991606142a86a8e7c085607ff2c6515e50da3e96768ec9fa9c3cd380"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x1f, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0xf}, @TCA_PIE_LIMIT={0x8, 0x2, 0x40000000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) r4 = open(&(0x7f0000000140)='./file1\x00', 0x145142, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ftruncate(r4, 0x2007ffa) sendfile(r5, r4, 0x0, 0x80000000a) r6 = socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x88, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1e}, @void, @val={0xc, 0x99, {0x3, 0x55}}}}, [@NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "c4c1782bda9e730fdf745cbc0f3f9c298b6e299490968b77cecd81580f303be9169e55eb043356e0156ec654434381ed961311d869994250ae070ef9e200d5519d64f16a0eacf51cac836adc2af06093806a5a0f7d84cd01fa9935"}]}, 0x88}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100003e00070127bd700000000000017c00001800fc80080000008601987e185eb5b7191c8ee90eca082b34a842553702af9673648f7dee69260664488ce6e20c4c2d", @ANYRES32=r9, @ANYBLOB="0c00bb0000010000000000000c00018008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) write$binfmt_misc(r12, &(0x7f0000000000), 0xfffffecc) splice(r11, 0x0, r13, 0x0, 0x33fe0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x5c, r10, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xa, 0x99, {0x8, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0x0, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40081) bind$can_raw(r7, 0xffffffffffffffff, 0xfffffffffffffe68) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 1.941780563s ago: executing program 1 (id=809): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e21, @remote}}}, 0x88) (async, rerun: 32) io_setup(0x6, &(0x7f0000000280)=0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) (async) accept4$alg(r2, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) 1.502913762s ago: executing program 1 (id=810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000000, 0x820b01) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0xff) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001f3ffffff00000000000500000a28d9c5813d9dee6eaa5bdc694567ae794af85731000a030000000000000000e10900000708000b0c000000020900010073797a31000008002c000000030affff00000040000000000a00030709000100ba7ad050000000000900030073797a369ee4e2a6"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000020000000000a03000000000000000000050000070900010073797a310000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, 0x0, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000000)=0xff, 0x4) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c) 931.458294ms ago: executing program 3 (id=811): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 743.679763ms ago: executing program 5 (id=812): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000380)={&(0x7f0000000800)=[{0x7f, 0x4001, 0x0, 0x0}, {0x1, 0x4210, 0x0, 0x0}], 0x2}) (fail_nth: 2) 0s ago: executing program 4 (id=813): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040), 0x8) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x0, 0x11, 0x4, "65ef1b62"}, 0x0, 0x0}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="8700000000000000fabb8e61034f26141b158011772bb7e0c70367ff0e6d11a7771e10452817d224c019c96ceb4f400000000000000084bc34b43705ee55ec34b9c5355e4217a8d34a02f0b94ffaed1fb66e5f3f33c3ec34b6d4ffa4"], 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x7, 0x5}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x57, &(0x7f00000003c0)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r6, 0x1) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/79, 0x4f}], 0x1, 0x21}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/139, 0x8b}], 0x1, 0x8, 0x3}}], 0x90}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): B device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.492280][ T7547] xt_hashlimit: size too large, truncated to 1048576 [ 238.755895][ T30] audit: type=1326 audit(1776607085.757:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.0.497" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b9239c819 code=0x0 [ 238.867710][ T5906] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 238.958468][ T5906] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input35 [ 239.013326][ T5906] input: failed to attach handler kbd to device input35, error: -5 [ 239.194328][ T5906] usb 1-1: USB disconnect, device number 46 [ 239.548468][ T5937] usb 6-1: USB disconnect, device number 16 [ 239.617225][ T7570] xt_hashlimit: size too large, truncated to 1048576 [ 239.660171][ T5906] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 239.841409][ T5906] usb 1-1: device descriptor read/64, error -71 [ 240.109978][ T5906] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 240.572485][ T5937] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 240.777028][ T5937] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 240.810892][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.831667][ T5937] usb 4-1: Product: syz [ 240.841461][ T5937] usb 4-1: Manufacturer: syz [ 240.859893][ T5937] usb 4-1: SerialNumber: syz [ 240.859911][ T5905] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 241.017009][ T5905] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 241.049477][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.077659][ T5905] usb 5-1: Product: syz [ 241.091277][ T5905] usb 5-1: Manufacturer: syz [ 241.108360][ T5905] usb 5-1: SerialNumber: syz [ 241.303052][ T5906] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 241.336663][ T5937] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 241.376205][ T5937] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 241.470034][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 241.489577][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 241.523267][ T5906] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 241.539453][ T5905] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 241.559997][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.568356][ T5906] usb 1-1: Product: syz [ 241.575917][ T5905] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 241.589019][ T5906] usb 1-1: Manufacturer: syz [ 241.599088][ T5906] usb 1-1: SerialNumber: syz [ 241.626258][ T5906] usb 1-1: config 0 descriptor?? [ 241.644724][ T5906] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 241.679253][ T5906] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 241.803908][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 242.060069][ T3102] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 242.231209][ T3102] usb 2-1: Using ep0 maxpacket: 32 [ 242.247764][ T3102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.262020][ T3102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.273828][ T3102] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 242.284039][ T3102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.297913][ T3102] usb 2-1: config 0 descriptor?? [ 242.347180][ T5906] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 242.437606][ T5937] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 242.451181][ T5937] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 242.465933][ T5937] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 242.475164][ T24] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 242.493975][ T5937] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 242.517074][ T5937] usb 4-1: USB disconnect, device number 33 [ 242.619942][ T5905] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 242.635668][ T5905] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 242.648865][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 242.653642][ T5905] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 242.671628][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.682999][ T5905] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 242.687495][ T24] usb 6-1: Product: syz [ 242.696078][ T24] usb 6-1: Manufacturer: syz [ 242.701140][ T24] usb 6-1: SerialNumber: syz [ 242.716618][ T24] usb 6-1: config 0 descriptor?? [ 242.739650][ T3102] nintendo 0003:057E:200E.000E: item fetching failed at offset 3/5 [ 242.761420][ T5905] usb 5-1: USB disconnect, device number 37 [ 242.777412][ T5906] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 242.788279][ T3102] nintendo 0003:057E:200E.000E: HID parse failed [ 242.808504][ T5906] em28xx 1-1:0.0: board has no eeprom [ 242.820164][ T3102] nintendo 0003:057E:200E.000E: probe - fail = -22 [ 242.835643][ T3102] nintendo 0003:057E:200E.000E: probe with driver nintendo failed with error -22 [ 242.931911][ T3102] usb 2-1: USB disconnect, device number 38 [ 242.947986][ T24] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 243.189941][ T5906] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 243.217487][ T5906] em28xx 1-1:0.0: dvb set to bulk mode. [ 243.230645][ T3102] em28xx 1-1:0.0: Binding DVB extension [ 243.421354][ T988] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 243.593062][ T988] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 243.627859][ T988] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 243.669127][ T988] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 243.720193][ T988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.143489][ T7610] netlink: 76 bytes leftover after parsing attributes in process `syz.4.523'. [ 244.411309][ T7582] em28xx 1-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 244.457039][ T5898] usb 1-1: USB disconnect, device number 49 [ 244.502989][ T5898] em28xx 1-1:0.0: Disconnecting em28xx [ 244.534990][ T7614] syz.1.524 (7614): drop_caches: 2 [ 244.668790][ T30] audit: type=1326 audit(1776607091.677:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.3.522" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3322b9c819 code=0x0 [ 244.702324][ T3102] em28xx 1-1:0.0: Registering input extension [ 244.741174][ T5898] em28xx 1-1:0.0: Closing input extension [ 244.897917][ T988] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 244.922447][ T5898] em28xx 1-1:0.0: Freeing device [ 244.966699][ T988] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input36 [ 245.061858][ T988] input: failed to attach handler kbd to device input36, error: -5 [ 245.198009][ T988] usb 4-1: USB disconnect, device number 34 [ 245.207892][ T24] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 245.266918][ T24] usb 6-1: USB disconnect, device number 17 [ 245.535142][ T5897] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 245.579086][ T7627] Invalid logical block size (151) [ 245.669951][ T988] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 245.734482][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.754952][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 245.776340][ T5897] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 245.801997][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.829968][ T988] usb 4-1: device descriptor read/64, error -71 [ 245.840513][ T5897] usb 2-1: config 0 descriptor?? [ 245.867196][ T5897] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 245.914775][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 246.022561][ T5897] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 246.089991][ T988] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 246.108656][ T5897] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 246.159995][ T5897] usb 2-1: media controller created [ 246.212476][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.269998][ T988] usb 4-1: device descriptor read/64, error -71 [ 246.336728][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 246.375800][ T5897] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 246.409672][ T5897] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input38 [ 246.452468][ T988] usb usb4-port1: attempt power cycle [ 246.472680][ T5897] dvb-usb: schedule remote query interval to 150 msecs. [ 246.514207][ T5897] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 246.562458][ T5897] usb 2-1: USB disconnect, device number 39 [ 246.621737][ T5898] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 246.662938][ T5897] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 246.822186][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 246.830819][ T7631] netlink: 76 bytes leftover after parsing attributes in process `syz.5.529'. [ 246.859381][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 246.877961][ T5898] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 246.904015][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.936439][ T5898] usb 1-1: Product: syz [ 246.949103][ T5898] usb 1-1: Manufacturer: syz [ 246.956324][ T5898] usb 1-1: SerialNumber: syz [ 246.973420][ T5898] usb 1-1: config 0 descriptor?? [ 247.006319][ T5898] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 247.043199][ T5898] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 247.320082][ T3102] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 247.552927][ T3102] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 247.582513][ T3102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.606252][ T3102] usb 2-1: Product: syz [ 247.623911][ T3102] usb 2-1: Manufacturer: syz [ 247.636469][ T3102] usb 2-1: SerialNumber: syz [ 247.750382][ T5897] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 247.824918][ T5898] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 247.914231][ T7647] : renamed from veth0_to_bond (while UP) [ 247.928457][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.977889][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.016724][ T5897] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 248.040312][ T5897] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 248.077360][ T5897] usb 6-1: Manufacturer: syz [ 248.089236][ T3102] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 248.125881][ T3102] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 248.160086][ T5897] usb 6-1: config 0 descriptor?? [ 248.273163][ T5898] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 248.282070][ T5898] em28xx 1-1:0.0: board has no eeprom [ 248.529940][ T5906] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 248.592281][ T5897] usbhid 6-1:0.0: can't add hid device: -71 [ 248.610866][ T5897] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 248.620414][ T5898] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 248.632801][ T5897] usb 6-1: USB disconnect, device number 18 [ 248.639074][ T5898] em28xx 1-1:0.0: dvb set to bulk mode. [ 248.656105][ T988] em28xx 1-1:0.0: Binding DVB extension [ 248.718356][ T5906] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 248.767590][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.810539][ T5906] usb 5-1: Product: syz [ 248.826564][ T5906] usb 5-1: Manufacturer: syz [ 248.844601][ T5906] usb 5-1: SerialNumber: syz [ 248.865081][ T5906] usb 5-1: config 0 descriptor?? [ 248.904381][ T7653] fuse: Unknown parameter '0x0000000000000005' [ 249.110752][ T5906] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 249.165405][ T3102] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 249.220342][ T3102] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 249.252268][ T3102] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 249.301394][ T3102] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 249.346148][ T3102] usb 2-1: USB disconnect, device number 40 [ 249.661755][ T7667] netlink: 16 bytes leftover after parsing attributes in process `syz.5.538'. [ 249.762279][ T5897] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 249.856249][ T7629] em28xx 1-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 249.908508][ T3102] usb 1-1: USB disconnect, device number 50 [ 249.951644][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.986797][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.988742][ T3102] em28xx 1-1:0.0: Disconnecting em28xx [ 249.997696][ T988] em28xx 1-1:0.0: Registering input extension [ 250.038730][ T5897] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 250.059288][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.067974][ T3102] em28xx 1-1:0.0: Closing input extension [ 250.086899][ T5897] usb 4-1: config 0 descriptor?? [ 250.151379][ T3102] em28xx 1-1:0.0: Freeing device [ 250.180242][ T988] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 250.229448][ T7672] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 250.354824][ T988] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 250.386479][ T988] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 250.447145][ T988] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 250.467561][ T988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.543035][ T5897] playstation 0003:054C:0DF2.000F: global environment stack underflow [ 250.614852][ T5897] playstation 0003:054C:0DF2.000F: item 0 2 1 11 parsing failed [ 250.664969][ T5897] playstation 0003:054C:0DF2.000F: Parse failed [ 250.695216][ T5897] playstation 0003:054C:0DF2.000F: probe with driver playstation failed with error -22 [ 250.802904][ T5897] usb 4-1: USB disconnect, device number 38 [ 251.374125][ T5906] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 251.475028][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 251.520895][ T5906] usb 5-1: USB disconnect, device number 38 [ 251.850520][ T5905] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 252.035760][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 252.057650][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.092267][ T30] audit: type=1326 audit(1776607099.107:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.1.540" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce5819c819 code=0x0 [ 252.102904][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.190950][ T5905] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 252.231954][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.270319][ T5905] usb 1-1: config 0 descriptor?? [ 252.340444][ T5906] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 252.552403][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 252.577714][ T5906] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 252.611416][ T5906] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 252.643871][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.682104][ T5906] usb 4-1: Product: syz [ 252.700019][ T5906] usb 4-1: Manufacturer: syz [ 252.716790][ T5906] usb 4-1: SerialNumber: syz [ 252.736546][ T5905] nintendo 0003:057E:200E.0010: item fetching failed at offset 3/5 [ 252.765803][ T5906] r8152-cfgselector 4-1: Unknown version 0x0000 [ 252.786914][ T5905] nintendo 0003:057E:200E.0010: HID parse failed [ 252.804704][ T5906] r8152-cfgselector 4-1: config 0 descriptor?? [ 252.829628][ T5905] nintendo 0003:057E:200E.0010: probe - fail = -22 [ 252.864994][ T5905] nintendo 0003:057E:200E.0010: probe with driver nintendo failed with error -22 [ 253.000513][ T5905] usb 1-1: USB disconnect, device number 51 [ 253.050549][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 253.227396][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.273231][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.260918][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 254.278311][ T7708] netlink: 'syz.4.547': attribute type 2 has an invalid length. [ 254.590008][ T803] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 254.788076][ T988] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 254.848408][ T803] usb 5-1: unable to get BOS descriptor or descriptor too short [ 254.872491][ T988] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input40 [ 254.932693][ T803] usb 5-1: not running at top speed; connect to a high speed hub [ 254.952454][ T988] input: failed to attach handler kbd to device input40, error: -5 [ 254.983669][ T803] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.994726][ T7712] fuse: Unknown parameter '0x0000000000000005' [ 255.072056][ T803] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.083809][ T988] usb 2-1: USB disconnect, device number 41 [ 255.205503][ T803] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.229868][ T5897] r8152-cfgselector 4-1: USB disconnect, device number 39 [ 255.269630][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.309760][ T803] usb 5-1: Product: syz [ 255.333749][ T803] usb 5-1: Manufacturer: syz [ 255.366722][ T803] usb 5-1: SerialNumber: syz [ 255.477584][ T7708] !: entered promiscuous mode [ 255.691413][ T5897] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 255.755260][ T7706] netlink: 'syz.4.547': attribute type 2 has an invalid length. [ 255.930491][ T5897] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 255.959475][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.991174][ T5897] usb 4-1: Product: syz [ 256.017899][ T5897] usb 4-1: Manufacturer: syz [ 256.036673][ T5897] usb 4-1: SerialNumber: syz [ 256.106038][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.116395][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.236411][ T988] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 256.433895][ T988] usb 2-1: unable to get BOS descriptor or descriptor too short [ 256.456295][ T5905] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 256.497130][ T988] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 256.532711][ T5897] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 256.549715][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.570250][ T988] usb 2-1: Product: syz [ 256.578613][ T5897] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 256.597140][ T988] usb 2-1: Manufacturer: syz [ 256.603769][ T988] usb 2-1: SerialNumber: syz [ 256.654762][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.691083][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.726281][ T5905] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 256.767037][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.806534][ T5905] usb 1-1: config 0 descriptor?? [ 256.942245][ T988] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 257.239226][ T5905] playstation 0003:054C:0DF2.0011: global environment stack underflow [ 257.269408][ T5905] playstation 0003:054C:0DF2.0011: item 0 2 1 11 parsing failed [ 257.302497][ T5905] playstation 0003:054C:0DF2.0011: Parse failed [ 257.330955][ T5905] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -22 [ 257.439965][ T5905] usb 1-1: USB disconnect, device number 52 [ 257.440598][ T988] usb 2-1: USB disconnect, device number 42 [ 257.689421][ T5897] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 257.753763][ T5897] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 257.804685][ T7727] udevd[7727]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.854317][ T5897] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 257.933405][ T5897] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 258.033693][ T5897] usb 4-1: USB disconnect, device number 40 [ 258.336265][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.558'. [ 258.522771][ T7736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.556'. [ 258.641347][ T5917] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 258.810511][ T803] usb 5-1: 0:2 : does not exist [ 258.821598][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 258.833587][ T803] usb 5-1: unit 4 not found! [ 258.844311][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.882532][ T803] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 258.909145][ T803] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 258.933904][ T803] usb 5-1: [5] FU [HMD Audio Playback Volume] ch = 1, val = 0/1/1 [ 258.958879][ T803] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 258.986468][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.069153][ T803] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 259.080914][ T5917] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 259.139370][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.154655][ T7750] fuse: Unknown parameter '0x0000000000000005' [ 259.172257][ T5917] usb 6-1: config 0 descriptor?? [ 259.219876][ T803] usb 5-1: USB disconnect, device number 39 [ 259.304355][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.462961][ T7736] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 259.664363][ T5917] nintendo 0003:057E:200E.0012: item fetching failed at offset 3/5 [ 259.742424][ T5917] nintendo 0003:057E:200E.0012: HID parse failed [ 259.786052][ T5917] nintendo 0003:057E:200E.0012: probe - fail = -22 [ 259.824796][ T5917] nintendo 0003:057E:200E.0012: probe with driver nintendo failed with error -22 [ 259.875828][ T5917] usb 6-1: USB disconnect, device number 19 [ 260.171965][ T5898] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 260.363013][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.407564][ T5898] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 260.444795][ T5898] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 260.475532][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.530189][ T5898] usb 1-1: config 0 descriptor?? [ 260.577338][ T5898] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 260.623692][ T5898] dvb-usb: bulk message failed: -22 (3/0) [ 260.665276][ T5898] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 260.705357][ T5898] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 260.728479][ T5898] usb 1-1: media controller created [ 260.772183][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.839033][ T5898] dvb-usb: bulk message failed: -22 (6/0) [ 260.867953][ T5898] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 260.905729][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input41 [ 260.960693][ T5898] dvb-usb: schedule remote query interval to 150 msecs. [ 260.979918][ T803] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 260.994821][ T5898] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 261.043800][ T5898] usb 1-1: USB disconnect, device number 53 [ 261.156195][ T5898] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 261.164209][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.570'. [ 261.170553][ T803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.193996][ T803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.223550][ T803] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 261.239134][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.263814][ T803] usb 4-1: config 0 descriptor?? [ 261.310034][ T5917] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 261.389968][ T5906] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 261.470079][ T5905] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 261.491610][ T5917] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 261.501714][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.529903][ T5917] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 261.544428][ T5917] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 261.559901][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 261.566712][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.590331][ T5917] usb 2-1: Product: syz [ 261.594936][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 261.606496][ T5917] usb 2-1: Manufacturer: syz [ 261.616780][ T5917] usb 2-1: SerialNumber: syz [ 261.630106][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 261.640272][ T5906] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 261.655658][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.667462][ T5917] usb 2-1: config 0 descriptor?? [ 261.673024][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.680161][ T803] usbhid 4-1:0.0: can't add hid device: -71 [ 261.686325][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.697885][ T5906] usb 5-1: Product: syz [ 261.712622][ T5906] usb 5-1: Manufacturer: syz [ 261.719515][ T803] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 261.720397][ T5905] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 261.739577][ T5906] usb 5-1: SerialNumber: syz [ 261.755102][ T803] usb 4-1: USB disconnect, device number 41 [ 261.760509][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.770735][ T5906] usb 5-1: config 0 descriptor?? [ 261.797076][ T5906] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 261.821717][ T5905] usb 6-1: config 0 descriptor?? [ 261.835326][ T5906] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 262.269191][ T5905] nintendo 0003:057E:200E.0013: item fetching failed at offset 3/5 [ 262.316484][ T5905] nintendo 0003:057E:200E.0013: HID parse failed [ 262.331447][ T5905] nintendo 0003:057E:200E.0013: probe - fail = -22 [ 262.348543][ T5905] nintendo 0003:057E:200E.0013: probe with driver nintendo failed with error -22 [ 262.352282][ T7786] fuse: Unknown parameter '0x0000000000000005' [ 262.470555][ T5905] usb 6-1: USB disconnect, device number 20 [ 262.501453][ T5906] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 262.940430][ T5906] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 262.968025][ T5906] em28xx 5-1:0.0: board has no eeprom [ 263.139944][ T5898] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 263.234202][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.576'. [ 263.309970][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 263.320053][ T5906] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 263.321868][ T5898] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.345645][ T5906] em28xx 5-1:0.0: dvb set to bulk mode. [ 263.363018][ T5898] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 263.363095][ T5914] em28xx 5-1:0.0: Binding DVB extension [ 263.378467][ T5898] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 263.391101][ T5898] usb 4-1: Product: syz [ 263.398168][ T5898] usb 4-1: Manufacturer: syz [ 263.435422][ T5898] hub 4-1:4.0: bad descriptor, ignoring hub [ 263.468027][ T5898] hub 4-1:4.0: probe with driver hub failed with error -5 [ 263.508385][ T5898] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 263.516041][ T988] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 263.680121][ T988] usb 6-1: Using ep0 maxpacket: 32 [ 263.706569][ T988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.738803][ T988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.773409][ T988] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 263.795911][ T988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.815331][ T988] usb 6-1: config 0 descriptor?? [ 264.114152][ T5897] usb 2-1: USB disconnect, device number 43 [ 264.276823][ T988] nintendo 0003:057E:200E.0014: item fetching failed at offset 3/5 [ 264.291676][ T988] nintendo 0003:057E:200E.0014: HID parse failed [ 264.315308][ T988] nintendo 0003:057E:200E.0014: probe - fail = -22 [ 264.322618][ T988] nintendo 0003:057E:200E.0014: probe with driver nintendo failed with error -22 [ 264.474324][ T988] usb 6-1: USB disconnect, device number 21 [ 264.571437][ T7765] em28xx 5-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 264.599211][ T5897] usb 5-1: USB disconnect, device number 40 [ 264.628046][ T5897] em28xx 5-1:0.0: Disconnecting em28xx [ 264.727265][ T5914] em28xx 5-1:0.0: Registering input extension [ 264.756078][ T5897] em28xx 5-1:0.0: Closing input extension [ 264.868645][ T5897] em28xx 5-1:0.0: Freeing device [ 265.112631][ T7826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.579'. [ 265.351400][ T7826] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 265.485025][ T7833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.581'. [ 265.586114][ T7824] netlink: 76 bytes leftover after parsing attributes in process `syz.0.580'. [ 265.604496][ T7833] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 265.830103][ T5914] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 266.031588][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.071977][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.149700][ T5914] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 266.181068][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.244903][ T5897] usb 4-1: USB disconnect, device number 42 [ 266.264642][ T5914] usb 5-1: config 0 descriptor?? [ 266.489959][ T5906] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 266.660958][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 266.689258][ T5914] usbhid 5-1:0.0: can't add hid device: -71 [ 266.697709][ T5906] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.715576][ T5914] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 266.734846][ T5906] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 266.781191][ T5914] usb 5-1: USB disconnect, device number 41 [ 266.818010][ T5906] usb 1-1: config 0 interface 0 has no altsetting 0 [ 266.862923][ T5835] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 266.895448][ T5906] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 266.954214][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.994058][ T5906] usb 1-1: Product: syz [ 267.013263][ T5906] usb 1-1: Manufacturer: syz [ 267.034429][ T5906] usb 1-1: SerialNumber: syz [ 267.063775][ T5906] usb 1-1: config 0 descriptor?? [ 267.525895][ T5906] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 267.571304][ T5906] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 267.651308][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 267.940122][ T5906] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 268.110021][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 268.137602][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.172805][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.205467][ T5906] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 268.220862][ T5914] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 268.238075][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.266452][ T5906] usb 5-1: config 0 descriptor?? [ 268.399213][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 268.420998][ T5914] usb 4-1: not running at top speed; connect to a high speed hub [ 268.447766][ T5914] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 268.470306][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.497079][ T5914] usb 4-1: Product: syz [ 268.514406][ T5914] usb 4-1: Manufacturer: syz [ 268.530323][ T5914] usb 4-1: SerialNumber: syz [ 268.728757][ T5906] nintendo 0003:057E:200E.0015: item fetching failed at offset 3/5 [ 268.774242][ T5906] nintendo 0003:057E:200E.0015: HID parse failed [ 268.804049][ T5906] nintendo 0003:057E:200E.0015: probe - fail = -22 [ 268.837482][ T5906] nintendo 0003:057E:200E.0015: probe with driver nintendo failed with error -22 [ 268.912506][ T5906] usb 5-1: USB disconnect, device number 42 [ 268.996627][ T5914] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.029208][ T5914] usb 4-1: MIDIStreaming interface descriptor not found [ 269.269404][ T5897] usb 1-1: USB disconnect, device number 54 [ 269.336103][ T5914] usb 4-1: USB disconnect, device number 43 [ 269.594118][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 269.639771][ T7727] udevd[7727]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.917136][ T5835] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 270.010680][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 270.019495][ T5832] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 270.480328][ T5937] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 270.650654][ T988] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 270.663386][ T7891] netlink: 16 bytes leftover after parsing attributes in process `syz.5.600'. [ 270.705842][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.741292][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.760400][ T5937] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 270.780035][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.806116][ T5937] usb 4-1: config 0 descriptor?? [ 270.859343][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 270.898441][ T988] usb 2-1: Using ep0 maxpacket: 8 [ 270.931000][ T7891] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 270.996809][ T988] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.037608][ T988] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.082721][ T988] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.116594][ T988] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.164672][ T988] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.183969][ T988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.240313][ T5937] usbhid 4-1:0.0: can't add hid device: -71 [ 271.266895][ T5937] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 271.326316][ T5937] usb 4-1: USB disconnect, device number 44 [ 271.478137][ T988] usb 2-1: GET_CAPABILITIES returned 0 [ 271.493668][ T988] usbtmc 2-1:16.0: can't read capabilities [ 271.947645][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.998844][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.050434][ T5898] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 272.108228][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 272.250165][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 272.312416][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 272.338039][ T5898] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 272.381731][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.390250][ T5906] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 272.408080][ T5898] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 272.435833][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.451669][ T5898] usb 5-1: Product: syz [ 272.455990][ T5898] usb 5-1: Manufacturer: syz [ 272.461979][ T5898] usb 5-1: SerialNumber: syz [ 272.485823][ T5898] usb 5-1: config 0 descriptor?? [ 272.581864][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 272.616829][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.678729][ T5906] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 272.726980][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.826089][ T5906] usb 4-1: Product: syz [ 272.840827][ T5906] usb 4-1: Manufacturer: syz [ 272.866586][ T5906] usb 4-1: SerialNumber: syz [ 272.933038][ T5906] usb 4-1: config 0 descriptor?? [ 272.941860][ T5898] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 272.965278][ T5898] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 273.221822][ T5832] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 274.764149][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.611'. [ 274.841712][ T5906] usb 5-1: USB disconnect, device number 43 [ 275.137302][ T5898] usb 4-1: USB disconnect, device number 45 [ 275.649993][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.617'. [ 275.879983][ T5898] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 276.140072][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 276.225266][ T5898] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.277505][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.326880][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.369483][ T5898] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.413499][ T5937] usb 2-1: USB disconnect, device number 44 [ 276.438403][ T5898] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.512398][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.550002][ T5914] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 276.753557][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 276.791316][ T5898] usb 1-1: GET_CAPABILITIES returned 0 [ 276.802692][ T5914] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.804159][ T5898] usbtmc 1-1:16.0: can't read capabilities [ 276.859201][ T7963] kvm: emulating exchange as write [ 276.876977][ T5914] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.938189][ T5914] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 277.009850][ T5914] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.082247][ T5914] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 277.121536][ T7965] binder: 7964:7965 ioctl 800c581e 200000000000 returned -22 [ 277.133271][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.395976][ T5914] usb 4-1: GET_CAPABILITIES returned 0 [ 277.416026][ T5914] usbtmc 4-1:16.0: can't read capabilities [ 277.549966][ T5898] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 277.565502][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.585637][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.624'. [ 277.634454][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.750971][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 277.766210][ T5898] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 277.782299][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.805406][ T5898] usb 2-1: Product: syz [ 277.826284][ T7977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.835140][ T5898] usb 2-1: Manufacturer: syz [ 277.844613][ T5898] usb 2-1: SerialNumber: syz [ 277.851281][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 277.873340][ T5898] usb 2-1: config 0 descriptor?? [ 277.888085][ T5898] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 277.903010][ T7977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.939327][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 278.087500][ T5898] ssu100 2-1:0.0: probe with driver ssu100 failed with error -5 [ 278.776495][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.625'. [ 278.788680][ T5906] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 278.959924][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 278.978523][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.014815][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.046299][ T5906] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 279.072413][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.119326][ T5906] usb 6-1: config 0 descriptor?? [ 279.621610][ T5906] nintendo 0003:057E:200E.0016: item fetching failed at offset 3/5 [ 279.654694][ T5906] nintendo 0003:057E:200E.0016: HID parse failed [ 279.672092][ T5914] usb 2-1: USB disconnect, device number 45 [ 279.732996][ T5906] nintendo 0003:057E:200E.0016: probe - fail = -22 [ 279.768911][ T5906] nintendo 0003:057E:200E.0016: probe with driver nintendo failed with error -22 [ 279.809202][ T5906] usb 6-1: USB disconnect, device number 22 [ 280.821152][ T5914] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 280.992739][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.046445][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 281.081429][ T5914] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 281.111867][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.140113][ T5898] usb 1-1: USB disconnect, device number 55 [ 281.140244][ T5914] usb 5-1: config 0 descriptor?? [ 281.206003][ T5914] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 281.233350][ T5914] dvb-usb: bulk message failed: -22 (3/0) [ 281.297791][ T5914] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 281.360330][ T803] usb 4-1: USB disconnect, device number 46 [ 281.405085][ T5914] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 281.418403][ T7996] dvb-usb: bulk message failed: -22 (2/0) [ 281.440129][ T5914] usb 5-1: media controller created [ 281.483259][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.548049][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 281.584224][ T5914] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 281.592773][ T8011] No such timeout policy "syz1" [ 281.670795][ T5914] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 281.728202][ T5914] dvb-usb: schedule remote query interval to 150 msecs. [ 281.728222][ T5914] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 281.739695][ T5914] usb 5-1: USB disconnect, device number 44 [ 281.836756][ T5914] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 282.570983][ T803] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 282.680126][ T5914] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 282.780780][ T803] usb 1-1: Using ep0 maxpacket: 8 [ 282.831877][ T803] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.866538][ T803] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.882275][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 282.886756][ T803] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.920167][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 282.934468][ T803] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.971796][ T5914] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 282.997662][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.006121][ T803] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.021179][ T5937] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 283.032052][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.033432][ T5914] usb 6-1: Product: syz [ 283.072461][ T5914] usb 6-1: Manufacturer: syz [ 283.091706][ T5914] usb 6-1: SerialNumber: syz [ 283.140907][ T5914] usb 6-1: config 0 descriptor?? [ 283.174896][ T5914] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 283.192090][ T5937] usb 5-1: too many configurations: 206, using maximum allowed: 8 [ 283.227027][ T5914] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 283.285220][ T5937] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 283.327731][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.365592][ T803] usb 1-1: GET_CAPABILITIES returned 0 [ 283.373751][ T5937] usb 5-1: Product: syz [ 283.410139][ T5937] usb 5-1: Manufacturer: syz [ 283.420756][ T803] usbtmc 1-1:16.0: can't read capabilities [ 283.452080][ T5937] usb 5-1: SerialNumber: syz [ 283.850101][ T5906] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 283.900221][ T8039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.935602][ T8039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.042139][ T5906] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.065448][ T8039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.640'. [ 284.080014][ T5906] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.100069][ T5914] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 284.137137][ T5906] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.158945][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.180455][ T5906] usb 4-1: Product: syz [ 284.193698][ T5906] usb 4-1: Manufacturer: syz [ 284.204111][ T5906] usb 4-1: SerialNumber: syz [ 284.241985][ T5906] cdc_ncm 4-1:1.0: skipping garbage [ 284.261697][ T5906] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 284.279021][ T5906] cdc_ncm 4-1:1.0: bind() failure [ 284.307898][ T5906] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 284.329449][ T5906] cdc_ncm 4-1:1.1: bind() failure [ 284.391472][ T803] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 284.496829][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 284.544322][ T5914] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 284.569276][ T5914] em28xx 6-1:0.0: board has no eeprom [ 284.626087][ T5898] usb 4-1: USB disconnect, device number 47 [ 284.653546][ T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.699630][ T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.762981][ T803] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 284.789265][ T803] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 284.819839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 284.858005][ T803] usb 2-1: Manufacturer: syz [ 284.892900][ T803] usb 2-1: config 0 descriptor?? [ 284.950048][ T5914] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 284.965982][ T5914] em28xx 6-1:0.0: dvb set to bulk mode. [ 284.981555][ T5906] em28xx 6-1:0.0: Binding DVB extension [ 285.514353][ T5937] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 285.570618][ T5937] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 285.698243][ T5937] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 285.769530][ T803] uclogic 0003:256C:006D.0017: interface is invalid, ignoring [ 285.825828][ T8051] fuse: Bad value for 'rootmode' [ 285.953240][ T5937] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 285.968698][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.020427][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.100442][ T803] usb 2-1: USB disconnect, device number 46 [ 286.111554][ T5937] usb 5-1: USB disconnect, device number 45 [ 286.267161][ T8010] em28xx 6-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 286.303377][ T5897] usb 6-1: USB disconnect, device number 23 [ 286.312166][ T8045] netlink: 76 bytes leftover after parsing attributes in process `syz.3.646'. [ 286.334977][ T5897] em28xx 6-1:0.0: Disconnecting em28xx [ 286.349690][ T5906] em28xx 6-1:0.0: Registering input extension [ 286.384787][ T5897] em28xx 6-1:0.0: Closing input extension [ 286.637983][ T5897] em28xx 6-1:0.0: Freeing device [ 286.851629][ T8064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.650'. [ 287.519988][ T5906] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 287.738737][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 287.760674][ T5906] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.796363][ T5906] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.820768][ T5906] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.886226][ T5906] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.001327][ T8065] FAULT_INJECTION: forcing a failure. [ 288.001327][ T8065] name failslab, interval 1, probability 0, space 0, times 0 [ 288.038500][ T5906] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.142568][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.5.651 Not tainted syzkaller #0 PREEMPT(full) [ 288.142589][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 288.142598][ T8065] Call Trace: [ 288.142606][ T8065] [ 288.142613][ T8065] dump_stack_lvl+0xe8/0x150 [ 288.142639][ T8065] should_fail_ex+0x412/0x560 [ 288.142660][ T8065] should_failslab+0xa8/0x100 [ 288.142676][ T8065] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 288.142691][ T8065] ? __alloc_skb+0x1d0/0x7d0 [ 288.142703][ T8065] ? __local_bh_enable_ip+0xd0/0x130 [ 288.142723][ T8065] __alloc_skb+0x1d0/0x7d0 [ 288.142734][ T8065] ? atomic_notifier_call_chain+0x26/0x180 [ 288.142759][ T8065] mroute_netlink_event+0x8f/0x150 [ 288.142780][ T8065] ipmr_mfc_add+0x6ee/0x24c0 [ 288.142802][ T8065] ? ipmr_mfc_add+0x105/0x24c0 [ 288.142818][ T8065] ? __might_fault+0xaf/0x130 [ 288.142833][ T8065] ? __pfx_ipmr_mfc_add+0x10/0x10 [ 288.142850][ T8065] ? __pfx___mutex_lock+0x10/0x10 [ 288.142878][ T8065] ip_mroute_setsockopt+0xe19/0x1090 [ 288.142901][ T8065] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 288.142919][ T8065] ? get_pid_task+0x20/0x1f0 [ 288.142940][ T8065] ? __lock_acquire+0x6b5/0x2cf0 [ 288.142960][ T8065] do_ip_setsockopt+0xf1e/0x2ea0 [ 288.142982][ T8065] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 288.142998][ T8065] ? aa_sk_perm+0x6d5/0x900 [ 288.143014][ T8065] ? __fget_files+0x2a/0x420 [ 288.143034][ T8065] ? __pfx_aa_sk_perm+0x10/0x10 [ 288.143051][ T8065] ? __fget_files+0x2a/0x420 [ 288.143073][ T8065] ? aa_sock_opt_perm+0xff/0x1a0 [ 288.143091][ T8065] ip_setsockopt+0x66/0x110 [ 288.143106][ T8065] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 288.143129][ T8065] do_sock_setsockopt+0x17c/0x1b0 [ 288.143145][ T8065] __x64_sys_setsockopt+0x13d/0x1b0 [ 288.143159][ T8065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.143173][ T8065] do_syscall_64+0x15f/0xf80 [ 288.143188][ T8065] ? trace_irq_disable+0x3b/0x140 [ 288.143204][ T8065] ? clear_bhb_loop+0x40/0x90 [ 288.143218][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.143231][ T8065] RIP: 0033:0x7f7bb919c819 [ 288.143244][ T8065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.143255][ T8065] RSP: 002b:00007f7bba0bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 288.143270][ T8065] RAX: ffffffffffffffda RBX: 00007f7bb9416090 RCX: 00007f7bb919c819 [ 288.143279][ T8065] RDX: 00000000000000cc RSI: 0000000000000000 RDI: 0000000000000003 [ 288.143287][ T8065] RBP: 00007f7bba0bc090 R08: 000000000000003c R09: 0000000000000000 [ 288.143294][ T8065] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 288.143302][ T8065] R13: 00007f7bb9416128 R14: 00007f7bb9416090 R15: 00007f7bb953fa48 [ 288.143321][ T8065] [ 288.789583][ T5897] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 288.842490][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.980668][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 289.097935][ T5897] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.145779][ T5897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.186736][ T5897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.206671][ T5906] usb 5-1: GET_CAPABILITIES returned 0 [ 289.239342][ T5897] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.244985][ T5906] usbtmc 5-1:16.0: can't read capabilities [ 289.320016][ T5914] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 289.377243][ T5897] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.460066][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.473669][ T5937] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 289.494436][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 289.562560][ T5914] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 289.634053][ T5914] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 289.692969][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.717858][ T5914] usb 6-1: Product: syz [ 289.732052][ T5914] usb 6-1: Manufacturer: syz [ 289.741038][ T5937] usb 4-1: Using ep0 maxpacket: 8 [ 289.768492][ T803] usb 1-1: USB disconnect, device number 56 [ 289.797043][ T5914] usb 6-1: SerialNumber: syz [ 289.806060][ T5937] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.821294][ T5897] usb 2-1: GET_CAPABILITIES returned 0 [ 289.844339][ T5897] usbtmc 2-1:16.0: can't read capabilities [ 289.859919][ T5937] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.861144][ T5914] r8152-cfgselector 6-1: Unknown version 0x0000 [ 289.918621][ T5937] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.961220][ T5937] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.004688][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.009049][ T5937] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 290.019864][ T5914] r8152-cfgselector 6-1: config 0 descriptor?? [ 290.097879][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.236367][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.331909][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 290.368444][ T5937] usb 4-1: GET_CAPABILITIES returned 0 [ 290.388254][ T5937] usbtmc 4-1:16.0: can't read capabilities [ 290.445082][ T8087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.479942][ T803] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 290.538132][ T8087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.660221][ T8087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.653'. [ 290.733119][ T803] usb 1-1: Using ep0 maxpacket: 8 [ 290.753202][ T803] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.775022][ T803] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.827550][ T803] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.894176][ T803] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.939273][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.953073][ T803] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 290.966289][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.014624][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.143173][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'. [ 291.294542][ T803] usb 1-1: GET_CAPABILITIES returned 0 [ 291.312917][ T803] usbtmc 1-1:16.0: can't read capabilities [ 291.773070][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.875029][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.991160][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 292.070882][ T5914] r8152-cfgselector 6-1: USB disconnect, device number 24 [ 292.606359][ T5937] usb 5-1: USB disconnect, device number 46 [ 293.098031][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 293.141272][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 293.669973][ T5937] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 293.755873][ T8101] netlink: 76 bytes leftover after parsing attributes in process `syz.5.659'. [ 293.844500][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.885850][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.922853][ T5937] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 293.947180][ T5937] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 293.964865][ T5937] usb 5-1: Manufacturer: syz [ 293.978918][ T5937] usb 5-1: config 0 descriptor?? [ 294.223259][ T5905] usb 4-1: USB disconnect, device number 48 [ 294.748234][ T5897] usb 2-1: USB disconnect, device number 47 [ 294.827139][ T5937] uclogic 0003:256C:006D.0018: interface is invalid, ignoring [ 295.058735][ T8109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.111341][ T8109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.950101][ T3102] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 296.152345][ T3102] usb 6-1: Using ep0 maxpacket: 16 [ 296.177714][ T3102] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 296.212981][ T3102] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 296.236862][ T3102] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.298554][ T3102] usb 6-1: Product: syz [ 296.309555][ T3102] usb 6-1: Manufacturer: syz [ 296.325553][ T3102] usb 6-1: SerialNumber: syz [ 296.411781][ T3102] r8152-cfgselector 6-1: Unknown version 0x0000 [ 296.435977][ T3102] r8152-cfgselector 6-1: config 0 descriptor?? [ 296.450215][ T5914] usb 1-1: USB disconnect, device number 57 [ 297.850283][ T8144] netlink: 44 bytes leftover after parsing attributes in process `syz.3.668'. [ 297.985653][ T5914] usb 5-1: USB disconnect, device number 47 [ 298.313677][ T8146] xt_hashlimit: size too large, truncated to 1048576 [ 298.626466][ T8151] netlink: 'syz.0.671': attribute type 21 has an invalid length. [ 298.894876][ T803] r8152-cfgselector 6-1: USB disconnect, device number 25 [ 300.362173][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 300.509994][ T5914] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 300.520154][ T803] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 300.582939][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.677'. [ 300.679864][ T803] usb 2-1: Using ep0 maxpacket: 16 [ 300.685136][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 300.694953][ T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 300.711891][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 300.723158][ T5914] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 300.723190][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.723211][ T5914] usb 5-1: Product: syz [ 300.723226][ T5914] usb 5-1: Manufacturer: syz [ 300.723241][ T5914] usb 5-1: SerialNumber: syz [ 300.727492][ T5914] usb 5-1: config 0 descriptor?? [ 300.731228][ T803] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 300.731261][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.731282][ T803] usb 2-1: Product: syz [ 300.731298][ T803] usb 2-1: Manufacturer: syz [ 300.731313][ T803] usb 2-1: SerialNumber: syz [ 300.731853][ T5914] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 300.731885][ T5914] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 300.736954][ T803] usb 2-1: config 0 descriptor?? [ 300.753236][ T803] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 300.753278][ T803] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 301.483603][ T5914] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 301.504339][ T803] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 301.912634][ T5914] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 301.934023][ T5914] em28xx 5-1:0.0: board has no eeprom [ 301.936712][ T803] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 301.959176][ T803] em28xx 2-1:0.0: board has no eeprom [ 302.291030][ T5914] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 302.300373][ T803] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 302.315788][ T803] em28xx 2-1:0.0: dvb set to bulk mode. [ 302.322992][ T5914] em28xx 5-1:0.0: dvb set to bulk mode. [ 302.346546][ T3102] em28xx 5-1:0.0: Binding DVB extension [ 302.837459][ T8180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.680'. [ 302.875187][ T8180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.680'. [ 303.072965][ T8183] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 303.095512][ T8183] PKCS7: Only support pkcs7_signedData type [ 303.610136][ T8154] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 303.636847][ T8157] em28xx 2-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 303.657238][ T5914] usb 5-1: USB disconnect, device number 48 [ 303.707220][ T803] usb 2-1: USB disconnect, device number 48 [ 303.742533][ T5914] em28xx 5-1:0.0: Disconnecting em28xx [ 303.748126][ T803] em28xx 2-1:0.0: Disconnecting em28xx [ 303.776118][ T3102] em28xx 5-1:0.0: Registering input extension [ 303.809236][ T5937] em28xx 2-1:0.0: Binding DVB extension [ 304.081035][ T3102] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 304.235594][ T5937] em28xx 2-1:0.0: Registering input extension [ 304.261033][ T3102] usb 6-1: Using ep0 maxpacket: 32 [ 304.266328][ T803] em28xx 2-1:0.0: Closing input extension [ 304.292376][ T3102] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 304.318705][ T5914] em28xx 5-1:0.0: Closing input extension [ 304.328412][ T3102] usb 6-1: config 0 has no interface number 0 [ 304.377231][ T3102] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 304.421956][ T3102] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.497320][ T3102] usb 6-1: Product: syz [ 304.525799][ T3102] usb 6-1: Manufacturer: syz [ 304.559137][ T803] em28xx 2-1:0.0: Freeing device [ 304.668035][ T8192] xt_hashlimit: size too large, truncated to 1048576 [ 304.716435][ T3102] usb 6-1: SerialNumber: syz [ 304.836118][ T3102] usb 6-1: config 0 descriptor?? [ 304.849627][ T5914] em28xx 5-1:0.0: Freeing device [ 305.331390][ T3102] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 305.360127][ T8200] FAULT_INJECTION: forcing a failure. [ 305.360127][ T8200] name failslab, interval 1, probability 0, space 0, times 0 [ 305.388021][ T8200] CPU: 1 UID: 0 PID: 8200 Comm: syz.0.685 Not tainted syzkaller #0 PREEMPT(full) [ 305.388042][ T8200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 305.388050][ T8200] Call Trace: [ 305.388055][ T8200] [ 305.388061][ T8200] dump_stack_lvl+0xe8/0x150 [ 305.388085][ T8200] should_fail_ex+0x412/0x560 [ 305.388106][ T8200] should_failslab+0xa8/0x100 [ 305.388121][ T8200] ? dst_alloc+0x105/0x170 [ 305.388142][ T8200] kmem_cache_alloc_noprof+0x87/0x650 [ 305.388161][ T8200] dst_alloc+0x105/0x170 [ 305.388179][ T8200] ipv4_blackhole_route+0x32/0x680 [ 305.388207][ T8200] xfrm_lookup_route+0xd7/0x1c0 [ 305.388231][ T8200] __ip4_datagram_connect+0x9a5/0x1270 [ 305.388257][ T8200] udp_connect+0x33/0x1f0 [ 305.388276][ T8200] __sys_connect+0x312/0x450 [ 305.388296][ T8200] ? __pfx___sys_connect+0x10/0x10 [ 305.388324][ T8200] ? __pfx_ksys_write+0x10/0x10 [ 305.388341][ T8200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.388354][ T8200] __x64_sys_connect+0x7a/0x90 [ 305.388373][ T8200] do_syscall_64+0x15f/0xf80 [ 305.388389][ T8200] ? trace_irq_disable+0x3b/0x140 [ 305.388406][ T8200] ? clear_bhb_loop+0x40/0x90 [ 305.388421][ T8200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.388432][ T8200] RIP: 0033:0x7f8b9239c819 [ 305.388446][ T8200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.388462][ T8200] RSP: 002b:00007f8b93186028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 305.388484][ T8200] RAX: ffffffffffffffda RBX: 00007f8b92615fa0 RCX: 00007f8b9239c819 [ 305.388498][ T8200] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000004 [ 305.388506][ T8200] RBP: 00007f8b93186090 R08: 0000000000000000 R09: 0000000000000000 [ 305.388513][ T8200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.388521][ T8200] R13: 00007f8b92616038 R14: 00007f8b92615fa0 R15: 00007f8b9273fa48 [ 305.388540][ T8200] [ 305.791840][ T5914] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 305.802608][ T3102] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 305.853515][ T3102] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 305.895892][ T3102] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 305.946068][ T3102] usb 6-1: USB disconnect, device number 26 [ 306.001090][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 306.016252][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.066397][ T5914] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 306.106614][ T5914] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 306.118398][ T5917] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 306.165160][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 60930, setting to 1024 [ 306.207342][ T5914] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 306.239923][ T5914] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 306.287568][ T5914] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.306262][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 306.326822][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 306.342787][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 306.368828][ T5914] usb 5-1: SerialNumber: syz [ 306.390718][ T5917] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 306.417778][ T8196] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 306.440111][ T8196] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 306.454078][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.484313][ T5917] usb 1-1: Product: syz [ 306.495390][ T5917] usb 1-1: Manufacturer: syz [ 306.506922][ T5917] usb 1-1: SerialNumber: syz [ 306.527543][ T5917] usb 1-1: config 0 descriptor?? [ 306.620133][ T803] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 306.699982][ T3102] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 306.728481][ T8196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.759188][ T8196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.792207][ T803] usb 6-1: Using ep0 maxpacket: 8 [ 306.847133][ T803] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.896114][ T803] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 306.902401][ T3102] usb 2-1: Using ep0 maxpacket: 16 [ 306.949714][ T803] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 306.952170][ T3102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 306.982317][ T8215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.989831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 307.002933][ T803] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.019348][ T803] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.062158][ T8215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.072415][ T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.089278][ T3102] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 307.112565][ T3102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.139850][ T3102] usb 2-1: Product: syz [ 307.147656][ T3102] usb 2-1: Manufacturer: syz [ 307.170192][ T5937] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 307.179895][ T3102] usb 2-1: SerialNumber: syz [ 307.227131][ T3102] usb 2-1: config 0 descriptor?? [ 307.262181][ T5914] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 307.285863][ T3102] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 307.320630][ T5914] usb 5-1: USB disconnect, device number 49 [ 307.331026][ T3102] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 307.340401][ T5937] usb 4-1: Using ep0 maxpacket: 8 [ 307.386060][ T803] usb 6-1: GET_CAPABILITIES returned 0 [ 307.411330][ T803] usbtmc 6-1:16.0: can't read capabilities [ 307.445645][ T5937] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.490439][ T5937] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.503986][ T5937] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.514641][ T5937] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.528515][ T5937] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.544766][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.829580][ T5937] usb 4-1: GET_CAPABILITIES returned 0 [ 307.846162][ T5937] usbtmc 4-1:16.0: can't read capabilities [ 307.926422][ T8219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.005759][ T8219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.158899][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.688'. [ 308.176637][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.194738][ T3102] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 308.221803][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.590973][ T30] audit: type=1326 audit(1776607155.607:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.4.691" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f341cf9c819 code=0x0 [ 308.659322][ T3102] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 308.694283][ T3102] em28xx 2-1:0.0: board has no eeprom [ 308.973320][ T5937] usb 1-1: USB disconnect, device number 58 [ 309.172677][ T3102] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 309.204785][ T3102] em28xx 2-1:0.0: dvb set to bulk mode. [ 309.221093][ T5905] em28xx 2-1:0.0: Binding DVB extension [ 309.510167][ T5937] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 309.725208][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.782497][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.816572][ T5937] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 309.832705][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.873219][ T5937] usb 1-1: config 0 descriptor?? [ 310.254420][ T8204] em28xx 2-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 310.308611][ T803] usb 2-1: USB disconnect, device number 49 [ 310.361674][ T5937] playstation 0003:054C:0DF2.0019: global environment stack underflow [ 310.412170][ T803] em28xx 2-1:0.0: Disconnecting em28xx [ 310.418016][ T5937] playstation 0003:054C:0DF2.0019: item 0 2 1 11 parsing failed [ 310.436846][ T5937] playstation 0003:054C:0DF2.0019: Parse failed [ 310.452282][ T5937] playstation 0003:054C:0DF2.0019: probe with driver playstation failed with error -22 [ 310.537839][ T5937] usb 1-1: USB disconnect, device number 59 [ 310.638390][ T5905] em28xx 2-1:0.0: Registering input extension [ 310.659126][ T803] em28xx 2-1:0.0: Closing input extension [ 310.807059][ T803] em28xx 2-1:0.0: Freeing device [ 311.541650][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 311.808182][ T5937] usb 6-1: USB disconnect, device number 27 [ 311.972528][ T8246] xt_hashlimit: size too large, truncated to 1048576 [ 312.006693][ T803] usb 4-1: USB disconnect, device number 49 [ 312.623366][ T8258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.128067][ T8265] : renamed from veth0_to_bond (while UP) [ 313.300594][ T5905] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 313.480408][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 313.547185][ T5905] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.583642][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.626806][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.667940][ T5905] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.719907][ T5937] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 313.764100][ T5905] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 313.818971][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.903590][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 313.987477][ T5937] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.069715][ T5937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.134747][ T5937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.167143][ T5905] usb 5-1: GET_CAPABILITIES returned 0 [ 314.180300][ T5937] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.219057][ T5905] usbtmc 5-1:16.0: can't read capabilities [ 314.252217][ T5937] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.308416][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.592376][ T8284] fuse: Unknown parameter 'rmode' [ 314.663368][ T5937] usb 1-1: GET_CAPABILITIES returned 0 [ 314.683458][ T5937] usbtmc 1-1:16.0: can't read capabilities [ 314.715182][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.767381][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.334355][ T8293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.473526][ T8293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.130687][ T5937] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 316.369983][ T5914] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 316.399914][ T5937] usb 4-1: Using ep0 maxpacket: 8 [ 316.494120][ T5937] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 316.543842][ T5937] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 316.585485][ T5937] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 316.619338][ T5937] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.662117][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 316.679962][ T5937] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 316.716771][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 316.737031][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.762430][ T5914] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 316.827919][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.846683][ T5914] usb 6-1: Product: syz [ 316.851475][ T5914] usb 6-1: Manufacturer: syz [ 316.856550][ T5914] usb 6-1: SerialNumber: syz [ 316.883778][ T5914] usb 6-1: config 0 descriptor?? [ 316.921305][ T5914] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 317.121945][ T5937] usb 4-1: GET_CAPABILITIES returned 0 [ 317.219294][ T5937] usbtmc 4-1:16.0: can't read capabilities [ 317.363650][ T5914] usb 6-1: USB disconnect, device number 28 [ 317.561759][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.592529][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.599980][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.630869][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.646632][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'. [ 318.072672][ T8315] : renamed from veth0_to_bond (while UP) [ 318.817957][ T5905] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 318.937031][ T988] usb 1-1: USB disconnect, device number 60 [ 318.970410][ T5937] usb 5-1: USB disconnect, device number 50 [ 318.999897][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 319.017470][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 319.157095][ T5905] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 319.369646][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.545030][ T5905] usb 2-1: Product: syz [ 319.665976][ T5905] usb 2-1: Manufacturer: syz [ 319.729275][ T5905] usb 2-1: SerialNumber: syz [ 319.780036][ T5913] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 319.815006][ T5905] usb 2-1: config 0 descriptor?? [ 319.841196][ T5905] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 319.872106][ T5905] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 319.980044][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 320.088936][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 320.284426][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 320.430308][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.472284][ T5913] usb 5-1: Product: syz [ 320.478038][ T8346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.725'. [ 320.488881][ T5913] usb 5-1: Manufacturer: syz [ 320.498978][ T5913] usb 5-1: SerialNumber: syz [ 320.530745][ T8346] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 320.556916][ T5913] usb 5-1: config 0 descriptor?? [ 320.673093][ T5905] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 320.704126][ T5913] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 320.726473][ T5913] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 320.820054][ T5937] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 320.938711][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.727'. [ 321.009914][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 321.062439][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.095073][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.183883][ T5937] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 321.201723][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.223496][ T5905] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 321.234601][ T5937] usb 6-1: config 0 descriptor?? [ 321.252341][ T5905] em28xx 2-1:0.0: board has no eeprom [ 321.333856][ T5913] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 321.631349][ T5905] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 321.650065][ T5905] em28xx 2-1:0.0: dvb set to bulk mode. [ 321.660965][ T3102] em28xx 2-1:0.0: Binding DVB extension [ 321.700734][ T5937] nintendo 0003:057E:200E.001A: item fetching failed at offset 3/5 [ 321.723063][ T5937] nintendo 0003:057E:200E.001A: HID parse failed [ 321.737428][ T5905] usb 4-1: USB disconnect, device number 50 [ 321.748265][ T5913] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 321.771528][ T5937] nintendo 0003:057E:200E.001A: probe - fail = -22 [ 321.779193][ T5937] nintendo 0003:057E:200E.001A: probe with driver nintendo failed with error -22 [ 321.833630][ T5913] em28xx 5-1:0.0: board has no eeprom [ 321.900755][ T5937] usb 6-1: USB disconnect, device number 29 [ 322.240002][ T5913] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 322.260579][ T5913] em28xx 5-1:0.0: dvb set to bulk mode. [ 322.891401][ T8317] em28xx 2-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 322.930291][ T8331] em28xx 2-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 322.933326][ T803] usb 2-1: USB disconnect, device number 50 [ 322.984256][ T803] em28xx 2-1:0.0: Disconnecting em28xx [ 323.004646][ T3102] em28xx 2-1:0.0: Registering input extension [ 323.081095][ T803] em28xx 2-1:0.0: Closing input extension [ 323.108901][ T8370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.731'. [ 323.140083][ T5905] em28xx 5-1:0.0: Binding DVB extension [ 323.327005][ T5937] usb 5-1: USB disconnect, device number 51 [ 323.335843][ T803] em28xx 2-1:0.0: Freeing device [ 323.353955][ T8371] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 323.387787][ T5937] em28xx 5-1:0.0: Disconnecting em28xx [ 323.652874][ T5905] em28xx 5-1:0.0: Registering input extension [ 323.672470][ T5937] em28xx 5-1:0.0: Closing input extension [ 323.829746][ T5937] em28xx 5-1:0.0: Freeing device [ 324.519734][ T8379] binder: 8378:8379 ioctl 800c581e 200000000000 returned -22 [ 324.909983][ T5937] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 324.959889][ T5905] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 325.082032][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 325.094191][ T5937] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 325.104873][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.122395][ T5905] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.145763][ T5937] usb 5-1: Product: syz [ 325.146619][ T5905] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.169277][ T5937] usb 5-1: Manufacturer: syz [ 325.194255][ T5937] usb 5-1: SerialNumber: syz [ 325.198449][ T5905] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.219967][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.233074][ T5905] usb 6-1: Product: syz [ 325.242788][ T5905] usb 6-1: Manufacturer: syz [ 325.254745][ T5905] usb 6-1: SerialNumber: syz [ 325.267273][ T5937] usb 5-1: config 0 descriptor?? [ 325.285147][ T5905] cdc_ncm 6-1:1.0: skipping garbage [ 325.303246][ T5905] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 325.322196][ T5937] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 325.335977][ T5905] cdc_ncm 6-1:1.0: bind() failure [ 325.360777][ T5905] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 325.387235][ T5905] cdc_ncm 6-1:1.1: bind() failure [ 325.519532][ T5937] ssu100 5-1:0.0: probe with driver ssu100 failed with error -5 [ 325.547912][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.735'. [ 325.591443][ T5905] usb 6-1: USB disconnect, device number 30 [ 326.383367][ T8392] bridge0: port 3(vlan0) entered blocking state [ 326.410058][ T8392] bridge0: port 3(vlan0) entered disabled state [ 326.448949][ T8392] vlan0: entered allmulticast mode [ 326.466710][ T8392] bridge0: entered allmulticast mode [ 326.523363][ T8392] vlan0: left allmulticast mode [ 326.535916][ T8392] bridge0: left allmulticast mode [ 326.708278][ T8398] FAULT_INJECTION: forcing a failure. [ 326.708278][ T8398] name failslab, interval 1, probability 0, space 0, times 0 [ 326.757202][ T8398] CPU: 0 UID: 0 PID: 8398 Comm: syz.0.738 Not tainted syzkaller #0 PREEMPT(full) [ 326.757232][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 326.757245][ T8398] Call Trace: [ 326.757253][ T8398] [ 326.757262][ T8398] dump_stack_lvl+0xe8/0x150 [ 326.757308][ T8398] should_fail_ex+0x412/0x560 [ 326.757341][ T8398] should_failslab+0xa8/0x100 [ 326.757374][ T8398] __kmalloc_cache_noprof+0x88/0x660 [ 326.757400][ T8398] ? alloc_pipe_info+0xe8/0x4d0 [ 326.757430][ T8398] alloc_pipe_info+0xe8/0x4d0 [ 326.757458][ T8398] splice_direct_to_actor+0xa08/0xc70 [ 326.757485][ T8398] ? kstrtouint+0x6e/0xe0 [ 326.757512][ T8398] ? __pfx_direct_splice_actor+0x10/0x10 [ 326.757534][ T8398] ? __pfx_aa_file_perm+0x10/0x10 [ 326.757566][ T8398] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 326.757597][ T8398] do_splice_direct+0x195/0x290 [ 326.757619][ T8398] ? __pfx_do_splice_direct+0x10/0x10 [ 326.757640][ T8398] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 326.757666][ T8398] ? bpf_lsm_file_permission+0x9/0x20 [ 326.757690][ T8398] ? security_file_permission+0x75/0x260 [ 326.757715][ T8398] ? rw_verify_area+0x255/0x4d0 [ 326.757743][ T8398] do_sendfile+0x535/0x7d0 [ 326.757771][ T8398] ? __pfx_vfs_write+0x10/0x10 [ 326.757800][ T8398] ? __pfx_do_sendfile+0x10/0x10 [ 326.757828][ T8398] ? __fget_files+0x3a0/0x420 [ 326.757869][ T8398] __se_sys_sendfile64+0x144/0x1a0 [ 326.757900][ T8398] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 326.757937][ T8398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.757958][ T8398] do_syscall_64+0x15f/0xf80 [ 326.757984][ T8398] ? trace_irq_disable+0x3b/0x140 [ 326.758010][ T8398] ? clear_bhb_loop+0x40/0x90 [ 326.758036][ T8398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.758055][ T8398] RIP: 0033:0x7f8b9239c819 [ 326.758075][ T8398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.758092][ T8398] RSP: 002b:00007f8b905f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 326.758116][ T8398] RAX: ffffffffffffffda RBX: 00007f8b92616090 RCX: 00007f8b9239c819 [ 326.758131][ T8398] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000007 [ 326.758143][ T8398] RBP: 00007f8b905f6090 R08: 0000000000000000 R09: 0000000000000000 [ 326.758156][ T8398] R10: 00000000578410eb R11: 0000000000000246 R12: 0000000000000001 [ 326.758169][ T8398] R13: 00007f8b92616128 R14: 00007f8b92616090 R15: 00007f8b9273fa48 [ 326.758202][ T8398] [ 327.239114][ T5937] usb 5-1: USB disconnect, device number 52 [ 327.359257][ T8403] gretap0: entered promiscuous mode [ 327.381985][ T8403] vlan2: entered promiscuous mode [ 327.584570][ T5832] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 328.140425][ T3102] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 328.148965][ T5905] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 328.199932][ T5913] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 328.330252][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 328.339237][ T3102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.376379][ T5905] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 328.387203][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 328.392932][ T3102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.420178][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.432030][ T5905] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 328.455701][ T3102] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 328.471226][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.483556][ T5905] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 328.501979][ T3102] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 328.524165][ T5913] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 328.534601][ T5905] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.551591][ T3102] usb 2-1: Manufacturer: syz [ 328.569449][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.586295][ T5905] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 328.599154][ T3102] usb 2-1: config 0 descriptor?? [ 328.624537][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.689558][ T5913] usb 4-1: config 0 descriptor?? [ 328.800221][ T5917] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 328.949980][ T5905] usb 6-1: GET_CAPABILITIES returned 0 [ 328.957666][ T5905] usbtmc 6-1:16.0: can't read capabilities [ 328.990836][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 329.016290][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 329.047228][ T5917] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 329.071038][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.110061][ T5917] usb 5-1: Product: syz [ 329.117310][ T5917] usb 5-1: Manufacturer: syz [ 329.122212][ T5917] usb 5-1: SerialNumber: syz [ 329.130455][ T5917] usb 5-1: config 0 descriptor?? [ 329.155103][ T5917] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 329.177152][ T5917] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 329.213143][ T5913] nintendo 0003:057E:200E.001C: item fetching failed at offset 3/5 [ 329.236535][ T5913] nintendo 0003:057E:200E.001C: HID parse failed [ 329.311345][ T5913] nintendo 0003:057E:200E.001C: probe - fail = -22 [ 329.318691][ T5913] nintendo 0003:057E:200E.001C: probe with driver nintendo failed with error -22 [ 329.383689][ T5913] usb 4-1: USB disconnect, device number 51 [ 329.461826][ T3102] uclogic 0003:256C:006D.001B: interface is invalid, ignoring [ 329.523993][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.556483][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.654224][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.745'. [ 329.748433][ T8421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.820505][ T8421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.850521][ T5917] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 330.277024][ T5917] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 330.314862][ T5917] em28xx 5-1:0.0: board has no eeprom [ 330.669949][ T5913] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 330.685337][ T5917] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 330.724904][ T5917] em28xx 5-1:0.0: dvb set to bulk mode. [ 330.736713][ T3102] em28xx 5-1:0.0: Binding DVB extension [ 330.871999][ T5913] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 330.913822][ T5913] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 330.931431][ T5913] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 330.943785][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.120082][ T8436] xt_hashlimit: size too large, truncated to 1048576 [ 331.854649][ T8415] em28xx 5-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 331.905900][ T803] usb 5-1: USB disconnect, device number 53 [ 331.937334][ T803] em28xx 5-1:0.0: Disconnecting em28xx [ 332.127442][ T3102] em28xx 5-1:0.0: Registering input extension [ 332.188397][ T30] audit: type=1326 audit(1776607179.197:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.3.749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3322b9c819 code=0x0 [ 332.224930][ T803] em28xx 5-1:0.0: Closing input extension [ 332.331382][ T5913] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 332.392532][ T5913] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input50 [ 332.491808][ T5913] input: failed to attach handler kbd to device input50, error: -5 [ 332.492143][ T803] em28xx 5-1:0.0: Freeing device [ 332.584120][ T5913] usb 4-1: USB disconnect, device number 52 [ 332.599912][ T3102] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 332.803007][ T3102] usb 1-1: Using ep0 maxpacket: 16 [ 332.838621][ T3102] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 332.868651][ T3102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.913035][ T3102] usb 1-1: Product: syz [ 332.942448][ T3102] usb 1-1: Manufacturer: syz [ 333.048084][ T803] usb 2-1: USB disconnect, device number 51 [ 333.049978][ T3102] usb 1-1: SerialNumber: syz [ 333.129993][ T5913] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 333.404883][ T5913] usb 4-1: device descriptor read/64, error -71 [ 333.417486][ T3102] usb 1-1: config 0 descriptor?? [ 333.481833][ T3102] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 333.695614][ T3102] ssu100 1-1:0.0: probe with driver ssu100 failed with error -5 [ 333.712808][ T5913] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 334.228222][ T8469] binder_alloc: binder_alloc_mmap_handler: 8467 200000ffd000-200001000000 already mapped failed -16 [ 334.350519][ T8473] binder: BINDER_SET_CONTEXT_MGR already set [ 334.375064][ T8473] binder: 8467:8473 ioctl 4018620d 200000004a80 returned -16 [ 334.392100][ T8469] binder_alloc: binder_alloc_mmap_handler: 8467 200000ffd000-200001000000 already mapped failed -16 [ 334.483529][ T5832] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 335.112748][ T3102] usb 1-1: USB disconnect, device number 61 [ 335.445051][ T8489] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 335.629885][ T3102] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 335.687679][ T5913] usb 6-1: USB disconnect, device number 31 [ 335.849987][ T3102] usb 2-1: Using ep0 maxpacket: 16 [ 335.869546][ T3102] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 335.892258][ T3102] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 335.924379][ T3102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.951034][ T3102] usb 2-1: Product: syz [ 335.962015][ T3102] usb 2-1: Manufacturer: syz [ 335.973682][ T3102] usb 2-1: SerialNumber: syz [ 336.008492][ T3102] r8152-cfgselector 2-1: Unknown version 0x0000 [ 336.020634][ T3102] r8152-cfgselector 2-1: config 0 descriptor?? [ 336.149943][ T803] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 336.331560][ T803] usb 5-1: Using ep0 maxpacket: 32 [ 336.362129][ T803] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 336.389987][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.411860][ T803] usb 5-1: Product: syz [ 336.429008][ T803] usb 5-1: Manufacturer: syz [ 336.436488][ T803] usb 5-1: SerialNumber: syz [ 336.469925][ T803] usb 5-1: config 0 descriptor?? [ 336.487206][ T3102] r8152-cfgselector 2-1: USB disconnect, device number 52 [ 336.888330][ T5905] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 337.050234][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 337.072493][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 337.101486][ T5905] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 337.121467][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.141940][ T5905] usb 6-1: Product: syz [ 337.158168][ T5905] usb 6-1: Manufacturer: syz [ 337.169936][ T5905] usb 6-1: SerialNumber: syz [ 337.201087][ T5905] usb 6-1: config 0 descriptor?? [ 337.238884][ T5905] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 337.275140][ T5905] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 337.362200][ T5913] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 337.402629][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.441885][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.498419][ T803] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 337.524905][ T803] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 337.545290][ T803] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 337.561387][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 337.586028][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.625473][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.690916][ T803] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 337.692410][ T5913] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 337.711540][ T5937] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 337.725246][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.748021][ T5913] usb 1-1: Product: syz [ 337.762397][ T5913] usb 1-1: Manufacturer: syz [ 337.786159][ T5913] usb 1-1: SerialNumber: syz [ 337.819154][ T5913] usb 1-1: config 0 descriptor?? [ 337.886686][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.898738][ T5905] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 337.928752][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.969152][ T5937] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 337.986530][ T5937] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 338.005816][ T803] usb 5-1: USB disconnect, device number 54 [ 338.032320][ T5937] usb 2-1: Manufacturer: syz [ 338.059601][ T5937] usb 2-1: config 0 descriptor?? [ 338.174909][ T5832] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 338.334965][ T5905] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 338.360009][ T5905] em28xx 6-1:0.0: board has no eeprom [ 338.721133][ T5905] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 338.729646][ T5905] em28xx 6-1:0.0: dvb set to bulk mode. [ 338.736025][ T9] em28xx 6-1:0.0: Binding DVB extension [ 338.920978][ T5937] uclogic 0003:256C:006D.001D: interface is invalid, ignoring [ 339.131864][ T5905] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 339.177047][ T8514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.223919][ T8514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.320708][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 339.401493][ T5905] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.467803][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 339.548102][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 339.596600][ T5905] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.641171][ T5913] usb 1-1: USB disconnect, device number 62 [ 339.694462][ T5905] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 339.774779][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.786379][ T8536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.931564][ T8497] em28xx 6-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 339.954089][ T5937] usb 6-1: USB disconnect, device number 32 [ 339.986295][ T5937] em28xx 6-1:0.0: Disconnecting em28xx [ 340.058843][ T5905] usb 5-1: GET_CAPABILITIES returned 0 [ 340.076964][ T5905] usbtmc 5-1:16.0: can't read capabilities [ 340.109738][ T9] em28xx 6-1:0.0: Registering input extension [ 340.165898][ T5937] em28xx 6-1:0.0: Closing input extension [ 340.242540][ T5937] em28xx 6-1:0.0: Freeing device [ 340.552557][ T8546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.628873][ T8546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.690395][ T8546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.771'. [ 342.271409][ T9] usb 2-1: USB disconnect, device number 53 [ 343.487861][ T5832] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 343.850762][ T8579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.871888][ T8579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.050483][ T803] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 344.201816][ T803] usb 1-1: device descriptor read/64, error -71 [ 344.448031][ T8576] macvlan2: entered promiscuous mode [ 344.462396][ T803] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 344.480385][ T8576] veth1_to_bridge: entered promiscuous mode [ 344.504020][ T8576] team0: Port device macvlan2 added [ 344.670935][ T803] usb 1-1: device descriptor read/64, error -71 [ 344.803497][ T803] usb usb1-port1: attempt power cycle [ 344.839927][ T5937] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 345.000074][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 345.017265][ T5937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.055791][ T5937] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.114417][ T5937] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 345.149899][ T803] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 345.165413][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.192635][ T5937] usb 6-1: Product: syz [ 345.204695][ T803] usb 1-1: device descriptor read/8, error -71 [ 345.215273][ T5937] usb 6-1: Manufacturer: syz [ 345.221965][ T5898] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 345.235893][ T988] usb 5-1: USB disconnect, device number 55 [ 345.249933][ T5937] usb 6-1: SerialNumber: syz [ 345.299955][ T5937] usb 6-1: config 0 descriptor?? [ 345.392573][ T5898] usb 2-1: device descriptor read/64, error -71 [ 345.472400][ T803] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 345.511993][ T803] usb 1-1: device descriptor read/8, error -71 [ 345.630535][ T803] usb usb1-port1: unable to enumerate USB device [ 345.651592][ T5898] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 345.829895][ T5898] usb 2-1: device descriptor read/64, error -71 [ 345.952745][ T5898] usb usb2-port1: attempt power cycle [ 346.050698][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 346.213859][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.227106][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.282748][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.301266][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.316192][ T9] usb 5-1: Product: syz [ 346.322719][ T9] usb 5-1: Manufacturer: syz [ 346.327482][ T9] usb 5-1: SerialNumber: syz [ 346.333101][ T5898] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 346.348052][ T9] cdc_ncm 5-1:1.0: skipping garbage [ 346.368631][ T9] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 346.379378][ T9] cdc_ncm 5-1:1.0: bind() failure [ 346.393970][ T5898] usb 2-1: device descriptor read/8, error -71 [ 346.398706][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 346.408699][ T9] cdc_ncm 5-1:1.1: bind() failure [ 346.560275][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 346.589563][ T803] usb 5-1: USB disconnect, device number 56 [ 346.590770][ T5913] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 346.660559][ T5898] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 346.702534][ T5898] usb 2-1: device descriptor read/8, error -71 [ 346.730496][ T5913] usb 4-1: device descriptor read/64, error -71 [ 346.830130][ T5898] usb usb2-port1: unable to enumerate USB device [ 346.988640][ T5905] usb 6-1: USB disconnect, device number 33 [ 346.997512][ T5913] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 347.169962][ T5913] usb 4-1: device descriptor read/64, error -71 [ 347.312687][ T5913] usb usb4-port1: attempt power cycle [ 347.588073][ T5832] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 347.669952][ T5913] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 347.720744][ T5913] usb 4-1: device descriptor read/8, error -71 [ 347.989927][ T5913] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 348.041834][ T5913] usb 4-1: device descriptor read/8, error -71 [ 348.200323][ T5913] usb usb4-port1: unable to enumerate USB device [ 348.549886][ T803] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 348.667443][ T8623] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 348.673950][ T8623] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 348.703732][ T8623] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 348.710301][ T8623] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 348.754554][ T8623] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 348.761331][ T8623] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 348.772368][ T803] usb 5-1: Using ep0 maxpacket: 8 [ 348.782543][ T8623] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 348.789241][ T8623] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 348.834374][ T803] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.845407][ T8626] FAULT_INJECTION: forcing a failure. [ 348.845407][ T8626] name failslab, interval 1, probability 0, space 0, times 0 [ 348.875422][ T803] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.886889][ T8623] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 348.890182][ T8626] CPU: 0 UID: 0 PID: 8626 Comm: syz.0.797 Not tainted syzkaller #0 PREEMPT(full) [ 348.890207][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 348.890219][ T8626] Call Trace: [ 348.890227][ T8626] [ 348.890234][ T8626] dump_stack_lvl+0xe8/0x150 [ 348.890268][ T8626] should_fail_ex+0x412/0x560 [ 348.890298][ T8626] should_failslab+0xa8/0x100 [ 348.890323][ T8626] __kvmalloc_node_noprof+0x178/0x8a0 [ 348.890347][ T8626] ? proc_sys_call_handler+0x3d1/0x830 [ 348.890377][ T8626] proc_sys_call_handler+0x3d1/0x830 [ 348.890403][ T8626] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 348.890435][ T8626] do_iter_readv_writev+0x619/0x8c0 [ 348.890461][ T8626] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 348.890499][ T8626] vfs_writev+0x33c/0x990 [ 348.890539][ T8626] ? __pfx_vfs_writev+0x10/0x10 [ 348.890578][ T8626] ? __fget_files+0x2a/0x420 [ 348.890609][ T8626] ? __fget_files+0x3a0/0x420 [ 348.890634][ T8626] ? __fget_files+0x2a/0x420 [ 348.890668][ T8626] do_writev+0x154/0x2e0 [ 348.890696][ T8626] ? __pfx_do_writev+0x10/0x10 [ 348.890729][ T8626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.890749][ T8626] do_syscall_64+0x15f/0xf80 [ 348.890772][ T8626] ? trace_irq_disable+0x3b/0x140 [ 348.890796][ T8626] ? clear_bhb_loop+0x40/0x90 [ 348.890819][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.890837][ T8626] RIP: 0033:0x7f8b9239c819 [ 348.890855][ T8626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.890870][ T8626] RSP: 002b:00007f8b905f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 348.890890][ T8626] RAX: ffffffffffffffda RBX: 00007f8b92616090 RCX: 00007f8b9239c819 [ 348.890903][ T8626] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 348.890914][ T8626] RBP: 00007f8b905f6090 R08: 0000000000000000 R09: 0000000000000000 [ 348.890926][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.890936][ T8626] R13: 00007f8b92616128 R14: 00007f8b92616090 R15: 00007f8b9273fa48 [ 348.890966][ T8626] [ 349.103048][ T8623] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 349.111947][ T803] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.119886][ T5905] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 349.130129][ T803] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.166371][ T803] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 349.238893][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.299869][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 349.314651][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 349.353294][ T5905] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 349.403489][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.458663][ T5905] usb 6-1: Product: syz [ 349.487261][ T5905] usb 6-1: Manufacturer: syz [ 349.516558][ T5905] usb 6-1: SerialNumber: syz [ 349.604627][ T5905] usb 6-1: config 0 descriptor?? [ 349.614387][ T803] usb 5-1: GET_CAPABILITIES returned 0 [ 349.636882][ T803] usbtmc 5-1:16.0: can't read capabilities [ 349.653356][ T5905] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 349.694509][ T5905] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 349.771367][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 349.942343][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.971795][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.003597][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.024150][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.070830][ T9] usb 1-1: Product: syz [ 350.085430][ T8636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.097868][ T9] usb 1-1: Manufacturer: syz [ 350.108013][ T9] usb 1-1: SerialNumber: syz [ 350.137337][ T8636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.142134][ T9] cdc_ncm 1-1:1.0: skipping garbage [ 350.183989][ T8636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.795'. [ 350.199915][ T9] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 350.207011][ T3102] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 350.219879][ T9] cdc_ncm 1-1:1.0: bind() failure [ 350.253456][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 350.280113][ T5905] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 350.288507][ T9] cdc_ncm 1-1:1.1: bind() failure [ 350.361750][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 350.384077][ T3102] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 350.416454][ T5832] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 350.436302][ T3102] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 350.458231][ T803] usb 1-1: USB disconnect, device number 67 [ 350.464982][ T3102] usb 4-1: can't read configurations, error -61 [ 350.600916][ T3102] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 350.723223][ T5905] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 350.743771][ T5905] em28xx 6-1:0.0: board has no eeprom [ 350.760857][ T3102] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 350.791315][ T3102] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 350.800216][ T3102] usb 4-1: can't read configurations, error -61 [ 350.807598][ T3102] usb usb4-port1: attempt power cycle [ 351.070365][ T5905] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 351.088881][ T5905] em28xx 6-1:0.0: dvb set to bulk mode. [ 351.136105][ T5913] em28xx 6-1:0.0: Binding DVB extension [ 351.169957][ T3102] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 351.223312][ T3102] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 351.253635][ T3102] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 351.272047][ T3102] usb 4-1: can't read configurations, error -61 [ 351.479949][ T3102] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 351.492160][ T9] usb 6-1: USB disconnect, device number 34 [ 351.524204][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 351.544331][ T3102] usb 4-1: too many configurations: 95, using maximum allowed: 8 [ 351.568531][ T3102] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 351.584145][ T3102] usb 4-1: can't read configurations, error -61 [ 351.600510][ T3102] usb usb4-port1: unable to enumerate USB device [ 351.760683][ T5897] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 351.823223][ T5913] em28xx 6-1:0.0: Registering input extension [ 351.881497][ T9] em28xx 6-1:0.0: Closing input extension [ 351.910021][ T5897] usb 1-1: device descriptor read/64, error -71 [ 351.983290][ T9] em28xx 6-1:0.0: Freeing device [ 352.238883][ T5897] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 352.584113][ T5897] usb 1-1: device descriptor read/64, error -71 [ 352.800344][ T5897] usb usb1-port1: attempt power cycle [ 353.031342][ T988] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 353.161144][ T5897] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 353.204143][ T5897] usb 1-1: device descriptor read/8, error -71 [ 353.233510][ T988] usb 2-1: Using ep0 maxpacket: 32 [ 353.262758][ T988] usb 2-1: config 123 interface 0 has no altsetting 0 [ 353.348622][ T988] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 353.516213][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.535476][ T5897] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 353.580697][ T988] usb 2-1: Product: syz [ 353.616408][ T5905] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 353.630547][ T988] usb 2-1: Manufacturer: syz [ 353.635425][ T988] usb 2-1: SerialNumber: syz [ 353.646613][ T5897] usb 1-1: device descriptor read/8, error -71 [ 353.729897][ T5917] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 353.759939][ T5905] usb 4-1: device descriptor read/64, error -71 [ 353.761869][ T5897] usb usb1-port1: unable to enumerate USB device [ 353.884017][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.896687][ T5917] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 353.908488][ T5917] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 353.919912][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.963405][ T988] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 353.976583][ T5917] usb 6-1: config 0 descriptor?? [ 354.008378][ T988] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 354.009675][ T5917] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 354.027820][ T5905] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 354.058347][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 354.065009][ T988] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 354.065085][ T988] usb 2-1: media controller created [ 354.077216][ T5917] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 354.089671][ T5897] usb 5-1: USB disconnect, device number 57 [ 354.122343][ T5917] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 354.141076][ T5917] usb 6-1: media controller created [ 354.148173][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.170410][ T5905] usb 4-1: device descriptor read/64, error -71 [ 354.189917][ T8673] FAULT_INJECTION: forcing a failure. [ 354.189917][ T8673] name failslab, interval 1, probability 0, space 0, times 0 [ 354.223431][ T8673] CPU: 0 UID: 0 PID: 8673 Comm: syz.5.812 Not tainted syzkaller #0 PREEMPT(full) [ 354.223461][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 354.223473][ T8673] Call Trace: [ 354.223481][ T8673] [ 354.223490][ T8673] dump_stack_lvl+0xe8/0x150 [ 354.223529][ T8673] should_fail_ex+0x412/0x560 [ 354.223563][ T8673] should_failslab+0xa8/0x100 [ 354.223590][ T8673] __kmalloc_noprof+0xe8/0x760 [ 354.223614][ T8673] ? tomoyo_encode+0x28b/0x550 [ 354.223648][ T8673] tomoyo_encode+0x28b/0x550 [ 354.223684][ T8673] tomoyo_realpath_from_path+0x58d/0x5d0 [ 354.223725][ T8673] ? tomoyo_path_number_perm+0x219/0x630 [ 354.223750][ T8673] tomoyo_path_number_perm+0x246/0x630 [ 354.223779][ T8673] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 354.223802][ T8673] ? __lock_acquire+0x6b5/0x2cf0 [ 354.223850][ T8673] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 354.223898][ T8673] ? __fget_files+0x2a/0x420 [ 354.223931][ T8673] ? __fget_files+0x2a/0x420 [ 354.223958][ T8673] ? __fget_files+0x3a0/0x420 [ 354.223985][ T8673] ? __fget_files+0x2a/0x420 [ 354.224020][ T8673] security_file_ioctl+0xc3/0x2a0 [ 354.224047][ T8673] __se_sys_ioctl+0x47/0x170 [ 354.224072][ T8673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.224095][ T8673] do_syscall_64+0x15f/0xf80 [ 354.224120][ T8673] ? trace_irq_disable+0x3b/0x140 [ 354.224157][ T8673] ? clear_bhb_loop+0x40/0x90 [ 354.224182][ T8673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.224203][ T8673] RIP: 0033:0x7f7bb919c819 [ 354.224224][ T8673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.224242][ T8673] RSP: 002b:00007f7bba0dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.224265][ T8673] RAX: ffffffffffffffda RBX: 00007f7bb9415fa0 RCX: 00007f7bb919c819 [ 354.224280][ T8673] RDX: 0000200000000380 RSI: 0000000000000707 RDI: 0000000000000006 [ 354.224294][ T8673] RBP: 00007f7bba0dd090 R08: 0000000000000000 R09: 0000000000000000 [ 354.224307][ T8673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.224319][ T8673] R13: 00007f7bb9416038 R14: 00007f7bb9415fa0 R15: 00007f7bb953fa48 [ 354.224354][ T8673] [ 354.227329][ T8673] ERROR: Out of memory at tomoyo_realpath_from_path. [ 354.490381][ T5905] usb usb4-port1: attempt power cycle [ 354.506868][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 354.519702][ T5917] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 354.536636][ T988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.551528][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input55 [ 354.588698][ T8673] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 354.600745][ T8673] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 354.609346][ T8673] CPU: 0 UID: 0 PID: 8673 Comm: syz.5.812 Not tainted syzkaller #0 PREEMPT(full) [ 354.618650][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 354.629089][ T8673] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 354.634472][ T8673] Code: e0 13 4b 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3e 12 00 00 83 3d a0 79 93 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 b6 dd 78 f6 4d 39 64 24 58 0f 85 6a 11 00 [ 354.654374][ T8673] RSP: 0018:ffffc90003d3f420 EFLAGS: 00010206 [ 354.660536][ T8673] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a4b1303 [ 354.668783][ T8673] RDX: 0000000000000000 RSI: ffffffff8e247e65 RDI: 00000000000000c0 [ 354.677053][ T8673] RBP: ffffc90003d3f5d8 R08: ffffc90003d3f547 R09: 0000000000000000 [ 354.685125][ T8673] R10: ffffc90003d3f520 R11: fffff520007a7ea9 R12: 0000000000000068 [ 354.693106][ T8673] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920007a7e9c [ 354.701217][ T8673] FS: 00007f7bba0dd6c0(0000) GS:ffff888125225000(0000) knlGS:0000000000000000 [ 354.710522][ T8673] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.717208][ T8673] CR2: 0000001b31615ff8 CR3: 000000002686e000 CR4: 00000000003526f0 [ 354.725275][ T8673] Call Trace: [ 354.728563][ T8673] [ 354.731492][ T8673] ? __mutex_lock+0x319/0x1550 [ 354.736354][ T8673] ? __mutex_trylock_common+0x158/0x260 [ 354.741923][ T8673] ? dvb_usbv2_generic_write+0x26/0x60 [ 354.747585][ T8673] ? __pfx___mutex_lock+0x10/0x10 [ 354.752712][ T8673] ? __pfx___mutex_lock+0x10/0x10 [ 354.757776][ T8673] ? __mutex_lock+0x32d/0x1550 [ 354.762562][ T8673] dvb_usbv2_generic_write+0x26/0x60 [ 354.767934][ T8673] mxl111sf_ctrl_msg+0x160/0x2f0 [ 354.773076][ T8673] mxl111sf_write_reg+0xa9/0x1b0 [ 354.778053][ T8673] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 354.783623][ T8673] ? __bpf_trace_contention_end+0xda/0x150 [ 354.789469][ T8673] mxl111sf_i2c_xfer+0x496/0x5100 [ 354.794516][ T8673] ? unwind_next_frame+0xa6/0x2550 [ 354.799643][ T8673] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 354.805279][ T8673] ? is_bpf_text_address+0x292/0x2b0 [ 354.810676][ T8673] ? is_bpf_text_address+0x26/0x2b0 [ 354.816061][ T8673] ? kernel_text_address+0xa5/0xe0 [ 354.821272][ T8673] ? __kernel_text_address+0xd/0x30 [ 354.826489][ T8673] ? unwind_get_return_address+0x4d/0x90 [ 354.832124][ T8673] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 354.838305][ T8673] ? arch_stack_walk+0xfb/0x150 [ 354.843174][ T8673] ? stack_trace_save+0xa9/0x100 [ 354.848316][ T8673] ? __pfx_stack_trace_save+0x10/0x10 [ 354.853826][ T8673] ? stack_depot_save_flags+0x33/0x810 [ 354.859387][ T8673] ? __pfx_stack_trace_save+0x10/0x10 [ 354.864932][ T8673] ? look_up_lock_class+0x57/0x110 [ 354.870061][ T8673] ? register_lock_class+0x31/0x2e0 [ 354.875285][ T8673] ? __lock_acquire+0x6b5/0x2cf0 [ 354.880235][ T8673] __i2c_transfer+0x79a/0x1f70 [ 354.885086][ T8673] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 354.889979][ T5897] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 354.890982][ T8673] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 354.904508][ T8673] ? i2c_transfer+0xc8/0x2d0 [ 354.909130][ T8673] i2c_transfer+0x1cc/0x2d0 [ 354.913647][ T8673] i2cdev_ioctl_rdwr+0x460/0x740 [ 354.918597][ T8673] i2cdev_ioctl+0x6a5/0x880 [ 354.923106][ T8673] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 354.928406][ T8673] ? __fget_files+0x3a0/0x420 [ 354.933083][ T8673] ? __fget_files+0x2a/0x420 [ 354.937761][ T8673] ? bpf_lsm_file_ioctl+0x9/0x20 [ 354.942696][ T8673] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 354.947817][ T8673] __se_sys_ioctl+0xfc/0x170 [ 354.952498][ T8673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.958882][ T8673] do_syscall_64+0x15f/0xf80 [ 354.963517][ T8673] ? trace_irq_disable+0x3b/0x140 [ 354.968562][ T8673] ? clear_bhb_loop+0x40/0x90 [ 354.973270][ T8673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.979214][ T8673] RIP: 0033:0x7f7bb919c819 [ 354.984003][ T8673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.003624][ T8673] RSP: 002b:00007f7bba0dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.012317][ T8673] RAX: ffffffffffffffda RBX: 00007f7bb9415fa0 RCX: 00007f7bb919c819 [ 355.020943][ T8673] RDX: 0000200000000380 RSI: 0000000000000707 RDI: 0000000000000006 [ 355.029467][ T8673] RBP: 00007f7bba0dd090 R08: 0000000000000000 R09: 0000000000000000 [ 355.037835][ T8673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.046085][ T8673] R13: 00007f7bb9416038 R14: 00007f7bb9415fa0 R15: 00007f7bb953fa48 [ 355.054347][ T8673] [ 355.057549][ T8673] Modules linked in: [ 355.062301][ T8673] ---[ end trace 0000000000000000 ]--- [ 355.099910][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 355.119919][ T5917] dvb-usb: schedule remote query interval to 150 msecs. [ 355.134152][ T5917] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 355.185639][ T8673] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 355.191162][ T8673] Code: e0 13 4b 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3e 12 00 00 83 3d a0 79 93 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 b6 dd 78 f6 4d 39 64 24 58 0f 85 6a 11 00 [ 355.211044][ T5905] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 355.232808][ T8673] RSP: 0018:ffffc90003d3f420 EFLAGS: 00010206 [ 355.240540][ T5905] usb 4-1: device descriptor read/8, error -71 [ 355.242596][ T5897] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 355.249538][ T8673] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a4b1303 [ 355.288977][ T8673] RDX: 0000000000000000 RSI: ffffffff8e247e65 RDI: 00000000000000c0 [ 355.298313][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 355.306136][ T5917] dvb-usb: error while querying for an remote control event. [ 355.318744][ T5897] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 355.325580][ T8673] RBP: ffffc90003d3f5d8 R08: ffffc90003d3f547 R09: 0000000000000000 [ 355.342565][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.350734][ T8673] R10: ffffc90003d3f520 R11: fffff520007a7ea9 R12: 0000000000000068 [ 355.350760][ T8673] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920007a7e9c [ 355.350776][ T8673] FS: 00007f7bba0dd6c0(0000) GS:ffff888125225000(0000) knlGS:0000000000000000 [ 355.350795][ T8673] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.350809][ T8673] CR2: 0000555570cee4e8 CR3: 000000002686e000 CR4: 00000000003526f0 [ 355.350833][ T8673] Kernel panic - not syncing: Fatal exception [ 355.351034][ T8673] Kernel Offset: disabled