last executing test programs: 9.492313549s ago: executing program 2 (id=886): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x23, 0xa0, {0xa0, 0xc, "82a0b506d18388d96a8860aad541520a4843319eabc3da3490ea5a227cf7ec2cea9a503e5d05b0775fd90119fd6c1a82a53552ac1d979939df30db2e596c69486dd650ef60ec5f4c8fc6dce9541d5fff27832e7ab4f8f940758f968e0adf2e647631969f52696b2633b31446e1f0f933bb5c7ad293068ccd90733cd032b878b9c017c67f7fe76826b4e7be5031d6961dd1809a28eba8d68c148302e435ae"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_open_dev$vivid(0x0, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x10010) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) dup3(r1, r2, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000180)={0x9, 0x1a, 0x4, 0x0, "eabc6e9b0a3b6b8e2e4622bb561a559587916e3f03fb2b82d1042444bae82b83"}) 9.328815685s ago: executing program 4 (id=887): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x6a4, 0x0, 0x2}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xbd, 0xe9, 0x6, 0x20, 0x93a, 0x2600, 0xb053, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfe, 0x10, 0x0, [{{0x9, 0x4, 0x8c, 0x0, 0x0, 0xd6, 0x23, 0xf0, 0x3}}]}}]}}, 0x0) 8.789816369s ago: executing program 1 (id=888): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x80000001, 0x146, 0x62, 0x200002000001, 0x80000000, 0x2004c6, 0x2, 0xfffffffffffffffc, 0x36b0, 0x5, 0x5, 0x3, 0x400000000], 0x80a0000, 0x140}) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x3d, 0x3, 0x81, 0x6}, {0x1, 0x5, 0x6, 0x3f0d}, {0x101, 0x4, 0x1, 0x400}, {0x100, 0x7, 0x1}, {0x6, 0x94, 0x1, 0x9}]}) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) 8.438432908s ago: executing program 3 (id=889): r0 = socket(0x10, 0x80002, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x44) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x82083) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x9, 0xb801, 0x22, &(0x7f0000000140)="a011ce480205d376e17c3e0715136e15327581c71eaee1eae5957e8ca5ccc94dbb30"}], 0x1}) 8.227450099s ago: executing program 1 (id=891): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xdddd0000, 0x0, 0x9e, 0x3, 0x1, 0x11, 0x0, 0x0, 0xf9, 0x0, 0x7f}, {0xd000, 0x25000, 0x3, 0x5, 0xc2, 0xc0, 0x9, 0x66, 0xc5, 0x7, 0x30, 0x40}, {0xdddd0000, 0xdddd1000, 0x0, 0x7, 0xb, 0x34, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0x80a0000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xfc, 0x9, 0xf}, {0x504ce1cb89483871, 0x1000, 0xb, 0x8f, 0x80, 0x2, 0x9, 0x3, 0x1, 0x8, 0x4, 0x6}, {0xdddd1000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0xf8, 0xd}, {0xf7f71000, 0x100000, 0x10, 0x2, 0xc, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0xeeee0000, 0x5000, 0x9, 0x6, 0xff, 0x0, 0x9, 0x80, 0x9, 0x8f, 0xdb, 0x8}, {0x4000, 0x59}, {0x4, 0x6}, 0x10000, 0x0, 0xeeea5000, 0x151, 0x3, 0x1000, 0x200000, [0x8, 0x2, 0x4000003, 0x3]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045731, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r6, &(0x7f0000000000)='fdinfo/3\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r8, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x850) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000100001042abd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000004c00128009000100626f6e64000000003c00028005001d00fb00000008000b00", @ANYBLOB="0600180004000000080013000002000008001c"], 0x80}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 7.690649905s ago: executing program 1 (id=893): ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x25, 0x4, 0x4, "8a2efabfce962054b5457362b9bb4982fefed86cc3e9a55e5f72bc0c001558e84c05e2b895"}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d000905090000000006070905"], 0x0) openat$tun(0xffffff9c, &(0x7f0000000000), 0x1a002, 0x0) 7.637143728s ago: executing program 4 (id=894): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket(0x18, 0x0, 0x1) accept4$inet6(r2, 0x0, 0x0, 0x80000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r4 = socket$inet6(0xa, 0x3, 0x5) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x5) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r7, 0x100, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, &(0x7f0000000280)=0x7) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents64(r7, &(0x7f0000000340)=""/206, 0xce) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0x18, 0x29, 0x37, '\x00'}], 0x18}}], 0x1, 0x4000000) setsockopt$MRT6_PIM(r4, 0x29, 0xcf, &(0x7f0000000200), 0x4) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x818, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x90) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6040}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r8}]}, 0x40}}, 0x4000000) 7.298574233s ago: executing program 4 (id=895): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unshare(0x22020600) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fcntl$getflags(r3, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8, 0x0, 0x9, 0x200000000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@mcast2, 0x1, 0x2, 0x2, 0x3, 0x3c76, 0x1}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x98}}, 0x4000) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0x6e, 0x4}) mknod$loop(&(0x7f00000003c0)='./file0\x00', 0x6006, 0x1) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001fcffdb9800000000000000183000000100000000000000020100009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x27}, 0x94) 6.96807252s ago: executing program 3 (id=896): pipe(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000040)='\x00'/10, 0xa}], 0x3) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.790269732s ago: executing program 3 (id=900): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x31, &(0x7f0000001500)={0x0, 0x0}, 0x10) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0xc, @empty, 0x5000}, 0x1c) close(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x7f00, @in={0x2, 0x4e23, @empty}}}, 0x90) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=@ipv6_newrule={0x38, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80}, [@FRA_DST={0x62, 0x1, @private0}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x7}]}, 0x38}}, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000a80)={0xe, 0x20, "430f1d3908ae0e17c2cd00f89c91ca5e2874f3c01138c702", {0x75, 0x4}, 0x7}) r7 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x1124, &(0x7f00000011c0)=ANY=[]) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 5.726414798s ago: executing program 1 (id=901): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x281, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) splice(r4, 0x0, r5, &(0x7f00000002c0), 0x6, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x29, 0x9f2, 0xe7, 0x3, 0x2, 0xb1, 0x8, 0x5, 0x4, 0xe, [0xfffffffe, 0x2, 0x6, 0x3, 0x6, 0x6, 0x200, 0xd]}}) sendto$inet6(r1, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) semctl$GETNCNT(0x0, 0x1, 0xe, 0x0) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f6", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff05000700"], 0x6c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r9, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) 5.197175665s ago: executing program 2 (id=902): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x10010, r1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc61, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20040d4}, 0x4000881) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r7, 0x0, &(0x7f0000000140)) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@delqdisc={0x128, 0x25, 0x800, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1}, {0x8, 0x3}, {0x2, 0xd}}, [@TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x2, 0x2, 0x1, 0x100, 0x7f, 0x8}}, {0x14, 0x2, [0x7, 0x40, 0xf5, 0x1, 0x1ff, 0x4, 0xfff, 0x1ff]}}, {{0x1c, 0x1, {0x10, 0x6, 0x7, 0xfaca, 0x2, 0x5000000, 0x7ff, 0x1}}, {0x6, 0x2, [0x81]}}, {{0x1c, 0x1, {0x9, 0x9, 0x9, 0x9, 0x0, 0x7fffffff, 0x7, 0x3}}, {0xa, 0x2, [0xfe6, 0x101, 0xc22]}}, {{0x1c, 0x1, {0x86, 0x6, 0x8, 0x6, 0x2, 0x4, 0x5, 0x6}}, {0x10, 0x2, [0x0, 0x4, 0x0, 0x8, 0x100, 0x9]}}, {{0x1c, 0x1, {0xd, 0x3, 0x2, 0x32e, 0x2, 0x4, 0x4, 0x5}}, {0xe, 0x2, [0x0, 0x4b, 0x2, 0x3, 0x6]}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}, @TCA_RATE={0x6, 0x5, {0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmmsg$inet(r3, 0x0, 0x0, 0x8080) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0100001a00130700000000fcdbde252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000003b000100", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 5.134018101s ago: executing program 4 (id=903): r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x4000000e) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='.\x00', &(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x6, 0x1) (async) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='.\x00', &(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x6, 0x1) 4.442738126s ago: executing program 4 (id=904): syz_open_dev$loop(0x0, 0x1, 0x400000) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8000, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1) r3 = fsmount(r2, 0x0, 0x8) getdents(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x1c, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x11, 0x80a, 0x0) getsockname$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x258a, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000080)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="20050f0000000f2117c36041a1027c78d4ef8f58aba8d08fb08fbbac6955abb8cdb9e3a2da207800c9c0a6bd79377ad4172af6e968707b0db1140b590c32e957f6"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093, 0x2000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x58}}, 0x20000000) 2.888938655s ago: executing program 0 (id=906): modify_ldt$write2(0x11, &(0x7f0000000000)={0x1, 0x20000800, 0x4000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) (async) get_thread_area(&(0x7f0000000040)={0x7, 0x100000, 0x4000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}) (async) modify_ldt$write(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) (async) get_thread_area(&(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}) (async) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000100)={'netpci0\x00', 0x4}) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000140), 0x2000, 0x1000, 0xfff, 0x1}, 0x1c) (async) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x6, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000280)={r2}) (async) set_thread_area(&(0x7f00000002c0)={0x6, 0x20000000, 0x0, 0x1, 0x0, 0x1}) (async) r3 = openat$zero(0xffffff9c, &(0x7f0000000300), 0x10880, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000340)=0x30000) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000380)={@multicast1, @dev={0xac, 0x14, 0x14, 0x40}, 0xffffffffffffffff, "b12c9db77c8c7f1362495279ecccfc9c5ee0ca56a224328304bd332125835161", 0x6, 0x0, 0x7f, 0x2}, 0x3c) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r3) (async) r5 = fsmount(r3, 0x1, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) modify_ldt$write(0x1, &(0x7f0000000400)={0x1, 0x100000, 0xfffffffffffffbff, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000440)={0xd1, 0x20001000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r7, &(0x7f00000004c0)={0xa, 0x4e20, 0x6, @private0, 0x9}, 0x1c) (async) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000500)={0x5, 0x0, [{0x3, 0x4, 0x0, 0x0, @msi={0x3, 0xa84, 0x2, 0x8c}}, {0x4, 0x5, 0x0, 0x0, @msi={0xc7, 0x2, 0xd, 0x4}}, {0x9, 0x1, 0x1, 0x0, @adapter={0x7fff, 0x2, 0x3, 0xab89, 0x6}}, {0x3, 0x4, 0x1, 0x0, @sint={0x7f, 0x4}}, {0xff, 0xd, 0x0, 0x0, @sint={0x4, 0xfffffe01}}]}) r9 = openat$drirender128(0xffffff9c, &(0x7f0000000600), 0x20002, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000640)) (async) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000680)={0x9, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4010, r3, 0x8000000) syz_io_uring_submit(r10, 0x0, &(0x7f0000000700)=@IORING_OP_CLOSE={0x13, 0x42, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) 2.686350365s ago: executing program 0 (id=907): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_macvtap\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg$kcm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f00000002c0)=""/182, 0xb6}], 0x2}, 0x40012000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xeffffdfc, {0x0, 0x0, 0x0, r8, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2.663662008s ago: executing program 1 (id=908): r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x2c, 0x3) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x20, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000001c0)={"d6d766fdbd216041d4573b321564067ce7bc3649ef41dff68f5153fca805", 0x0, 0x1, 0x401, 0x3, 0x10001, 0x9, 0x4, 0x1, [0x10001, 0x1, 0x5, 0x1, 0x8, 0x9653, 0x1, 0x20, 0x9, 0x6683, 0x8, 0xfffffff4, 0x0, 0xc7c, 0x2, 0x1, 0x7fffffff, 0x5, 0x7fffffff]}) setsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000040)="ecab18f64929c5cd8b9b7e75c2f5be55f5cfe5628dc25c00b09aeab52fbab3bc58af3e17681f7f6dbba169af4b36bd001317b97f9a0541b8c350b82cec9a05a255f58078c5c559eb7a0c0096bc2f04e554696c3ccb5f68c5a8ae91368c8d", 0x5e) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x72, 0x20000}, 0x20) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000140)={0x24, &(0x7f0000000600)={0x0, 0x9, 0x1, "d9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000c80)={0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="0018010000049c"], 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 2.617304145s ago: executing program 3 (id=909): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3cddff0917d10000000000040009237c0600000000000000", @ANYRES8=r0, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x2357232d9bd3f9e0}, 0x4064) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) (async) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x4000041) mmap$dsp(&(0x7f0000365000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) (async, rerun: 32) madvise(&(0x7f000001f000/0x4000)=nil, 0x4000, 0xe) (async, rerun: 32) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x2bc, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@empty, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 'bond_slave_0\x00', 'team_slave_1\x00', {0xff}, {}, 0x1, 0x3, 0x40}, 0x0, 0xb8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}, @common=@inet=@socket3={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x93, 0x2, 0xaa78, 'syz1\x00', 'syz0\x00', {0x4}}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0x0, 0xffffff00, 'netdevsim0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x8, 0x2}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x3, 0x1, 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'bridge_slave_0\x00', {0x5911}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x318) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000b80)={'macvlan0\x00', &(0x7f0000000680)=@ethtool_rxnfc={0x32, 0x12, 0x3, {0x7, @sctp_ip4_spec={@multicast2, @dev={0xac, 0x14, 0x14, 0xa}, 0x4e21, 0x4e22, 0xb}, {0x0, @random="45d460916ac2", 0x4e90, 0x0, [0x7, 0x6]}, @usr_ip6_spec={@mcast2, @mcast2, 0x2, 0x2, 0x3}, {0x0, @random="a33146b459db", 0x400, 0x6, [0x5, 0x7ff]}, 0xffffffff7fffffff, 0x6}, 0x2, [0x101, 0x10001]}}) (async) recvmmsg(r1, 0x0, 0x0, 0x42, 0x0) socket$inet6(0xa, 0x80002, 0x10100000) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) 2.303049306s ago: executing program 0 (id=910): socket(0x840000000002, 0x3, 0xff) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000500)=r8) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x20003, 'wrr\x00', 0x1, 0x7, 0x1a}, 0x2c) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r0], 0x6c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x1}) r10 = syz_io_uring_setup(0xd8, &(0x7f0000000480), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r10, 0x8, 0x2, 0x0) r11 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12011001599e6108d90f2c006b060102030109021b000107d440000904650001be866d010905010240000103091e6b84adfb168150184e5abc7d0c93f7f103818eb2457e422c53a6a2c170fdd95cf1933a651c2fdb6bdccd400ade8f017704ff5d9e5d75"], 0x0) syz_usb_ep_read(r11, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="03aa0000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r11, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00030204000002030999372b0c94f989abc43bcfa77ddde26679ad79815d64a3ce2e54f4a5bd71a303926e1ee34e44f0cb33b8e6f05fd1ec161b0c56"]}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r12 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r12, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000780)=ANY=[@ANYBLOB="00002e0000003212"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000100)) fsopen(&(0x7f0000000400)='cifs\x00', 0x0) 2.037803075s ago: executing program 2 (id=911): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) (async) open$dir(&(0x7f0000000140)='./file0\x00', 0x27, 0x0) 1.678045355s ago: executing program 2 (id=912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x18, 0x4060019}, 0x20000041) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000280)={0x0, 0x80000000, 0x0, 'queue0\x00', 0xffffff00}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 1.494416646s ago: executing program 3 (id=913): r0 = open(&(0x7f0000000000)='./file0\x00', 0x1a0941, 0x190) fcntl$setlease(r0, 0x400, 0x1) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x11) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x80003519, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) (async) io_uring_enter(r3, 0x3516, 0x1ace, 0x20, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0xb0, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x28d}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5d99}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x44, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x2}}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x6}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0xb0}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 1.13830756s ago: executing program 2 (id=914): r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x32, 0x40}, 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x4, @mcast1, 0x6}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x8000}, 0x8) r3 = fsopen(&(0x7f0000000200)='9p\x00', 0x0) r4 = fsmount(r3, 0x0, 0x84) io_setup(0x5, &(0x7f0000000240)=0x0) r6 = eventfd2(0x3, 0x80002) io_submit(r5, 0x2, &(0x7f00000013c0)=[&(0x7f0000001280)={0x0, 0x0, 0x0, 0x1, 0x800, r4, &(0x7f0000000280)="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", 0x1000, 0x3, 0x0, 0x2, r3}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x2, 0x6, r3, &(0x7f00000012c0)="d60816cdf849fc917dc165fcf37ed5f77072c905d7014e4b41e7a17ebc614c300767f8ff14fcf277faee52f17da15325723d6bddcf8dad9453930143d110e3509e1182b272548c998c88e8fb05d6e298f661a37cdd8c8d58926f3da2ee39406fc9728adb16dd4b2de937fb01c38323d433a7166710f5239df01ffdd416742e8f50814fee5ded5363441fb172f36d7de9b0f7ff8092a9389b154270a936cba2", 0x9f, 0x8, 0x0, 0x0, r6}]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r7, &(0x7f00000051c0)=[{{&(0x7f0000001400)=@nfc, 0x80, &(0x7f0000002880)=[{&(0x7f0000001480)=""/47, 0x2f}, {&(0x7f00000014c0)=""/203, 0xcb}, {&(0x7f00000015c0)=""/12, 0xc}, {&(0x7f0000001600)=""/221, 0xdd}, {&(0x7f0000001700)=""/65, 0x41}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/228, 0xe4}], 0x7, &(0x7f00000028c0)=""/5, 0x5}, 0x9}, {{&(0x7f0000002900)=@hci, 0x80, &(0x7f0000003a40)=[{&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/163, 0xa3}], 0x2, &(0x7f0000003a80)=""/220, 0xdc}, 0x4}, {{&(0x7f0000003b80)=@nfc_llcp, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003c00)=""/182, 0xb6}, {&(0x7f0000003cc0)=""/53, 0x35}, {&(0x7f0000003d00)=""/254, 0xfe}], 0x3, &(0x7f0000003e40)=""/198, 0xc6}, 0x44a}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/101, 0x65}, {&(0x7f0000004fc0)=""/111, 0x6f}, {&(0x7f0000005040)=""/171, 0xab}], 0x4, &(0x7f0000005140)=""/127, 0x7f}, 0x84}], 0x4, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x6) sendmsg(r7, &(0x7f0000006600)={&(0x7f0000005240)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000006400)=[{&(0x7f00000052c0)="94f7a68868cc5d6155d35f015e67374b0d896a857f44f8d51d0f06cbc85c045e6e14fab26a8780ba7b063c0ee7e1c94042b46f6b7322ccc25e9d753209", 0x3d}, {&(0x7f0000005300)="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", 0x1000}, {&(0x7f0000006300)="fbf1bd6f674d719229e75d0a24258fa45c8a13527bb1bd0628bc6cbfd01c6997536ae03c2b94165c208bd3d41860914ee322cbb6f12df8965833e72f2f9ae222a0ef523f34f70196d3f0140c4b410ed4d5f3dbaaa2833a2ca25b65356aa165b79192f091acbf3da341432634b29d8c1b725ed0f11522b0bd5419f1d662e45a9142c1f450a08358448003f718e47ac41193cdea154b5c92d6a9f8de55d46d8b684767059480d15f94acc249ff3483b823c43c81165d8f5e835270e8faaa539b96aa6801afe708e422", 0xc8}], 0x3, &(0x7f0000006440)=[{0xc4, 0x109, 0x4, "717f34d5cb29c33a21f9c67656cacd2e3c30f1db447be405cf576bd58198b6491cbdc802e09503d7679db8f9f7663147514fd42b9ab37127970a23e6d8eec38e4f1db0405be1501c35c3c51645fd304fe3585de55ee32aa3887f83bde8a6ebb1bcaf7f0eba878a95157eb4411229f2e30655fa60a3c5aa2176883a890629cee215a0b64a619caed61543f183e13e9b0d11a32c4aff1110140d08bd64ca1c3735272245fee98c02ee66ec7a29ebc993f1385b5c0537"}, {0xd8, 0x119, 0xd7, "225e6305f089483e8aa3b90322021ce4f35f610eac28acec63c5cf5b9ef5d16db49cc2a2ab3e95be8b2e0f7c97cc7615be1b899e12f7ad0a06486ced16c195b03d8e36e4cfbbc50c8011602e10d6f81772e18d62cf9dc2825d840a09a2beab894bc31c6d8824a93d000167a793fade292da69db790a31a94f13c09037182038b61f907dff85461723e113c885b3c851bcd087da1b9975b92548bfed21d923cbb9896a819994a8d7fe937dcd21cd22b6556c34576cf8e1ace888d1a080cd16c8048fb3e842b4776911b53a8ca"}], 0x19c}, 0x40000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000006640), &(0x7f0000006680)=0x4) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg(r8, &(0x7f0000006900)={&(0x7f00000066c0)=@phonet={0x23, 0x7, 0xb, 0x8}, 0x80, &(0x7f00000067c0)=[{&(0x7f0000006740)="bb88f9e173baa6b3", 0x8}, {&(0x7f0000006780)="313338f9cb33eac1c5cf5b5f88", 0xd}], 0x2, &(0x7f0000006800)=[{0x74, 0x102, 0x3, "109fc42a830a40b834017c30aae03beb639589a2d8fa19accc5f06484e8e5e8cedf10eda792b029fcab2bad0106812e80a26ef2ccd84fe49d4cad5314254bc19b7ccecbee00d04e7e0aa0a3b06cd5f85b9177bf5897dc93d47209253019dd65ff117c5a3b7bde5f4"}, {0x60, 0x1, 0x3, "8500bf3cc6cff3f8836589ce857dda179976418bef017d9b3100d69ba600deb3b2d602cdf47c3e6e36bf6220d76246a2bf429318521f255c1a0a04e03804e9257ff888f6972ad0e579c7829da629fd2acde161"}], 0xd4}, 0x4080) r9 = openat$ttynull(0xffffff9c, &(0x7f0000006940), 0x80000, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x402c5828, &(0x7f0000006980)={0x0, 0x1, 0xed, 0xc43}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000006a40)={'wlan0\x00', &(0x7f00000069c0)=@ethtool_perm_addr={0x20, 0x4d, "958e167bbdbcd5ef80cee767fa2bc718eaf7bbe11fcb1022e33c98f09aabb38d27814d6248b208282a74142a9724dafdd88e079053faf85bb421160b0c43d31f2ce60cf6fd76c195072318b7ad"}}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000006a80)=r0, 0x1) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000006ac0)={{0x40000, 0x8000000, 0x0, 0x25, 0xfd, 0x40, 0x4, 0x3, 0x0, 0x4, 0xb, 0xf8}, {0x26000, 0x9000, 0xe, 0x6, 0x69, 0x2, 0x2, 0x0, 0x4b, 0x40, 0x5, 0x6}, {0x80f0000, 0x80a0000, 0x4, 0x3, 0x5, 0x3, 0x8, 0x0, 0x6, 0xf, 0xa9, 0x81}, {0x8080000, 0x7000, 0x14, 0x4, 0x36, 0x3, 0x6, 0x4, 0xe, 0x3, 0x40, 0x30}, {0x30000, 0x8080000, 0xb, 0x3, 0x4, 0x3, 0x5, 0x8, 0x9, 0x9, 0x0, 0x2}, {0x200000, 0x50000, 0xa, 0x0, 0x43, 0x7, 0x3, 0xbe, 0x9, 0x9, 0x7, 0x70}, {0xa000, 0x10000, 0x10, 0x2e, 0x7, 0x8, 0x3, 0x3, 0x8, 0xff, 0xa, 0x8}, {0x4000, 0x6000, 0xd, 0x5, 0x8, 0xb, 0xa, 0x8, 0x19, 0x7, 0x8, 0x30}, {0x26000, 0x1}, {0x25000, 0x8}, 0x80000004, 0x0, 0x4, 0x2064, 0xc, 0x800, 0x40000, [0x1b, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x7ff]}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000006c00)={0x2, 'veth0_to_team\x00'}, 0x18) ioctl$TCFLSH(r9, 0x540b, 0x2) socket$netlink(0x10, 0x3, 0x5) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000006c40)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000006c80)=""/212, &(0x7f0000006d80)=0xd4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000006dc0)={r2, 0x1000, 0x0, 0x5, 0x5}, &(0x7f0000006e00)=0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000006e40)={r10, 0x4f, "ee6ff13af15d9ad3cd7f5d6e0ae2544cd612e6b36f88aa24c6ece2f9f17f80d6c4eedc0ed01227b68c1d1fb462bae4ce87dedc7e46ba0af6ead1975b315b1619e9b09f2172ac8ae12a765439a38f75"}, &(0x7f0000006ec0)=0x57) 939.047248ms ago: executing program 1 (id=915): r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/60, 0x3c}, {0x0}], 0x2) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="4c8c949bfa68299f78c3e9", 0xb, 0x800, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x8, 0x6, @remote}, 0x14) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000540)={0x5, 0x7615cb1a, 0x0, 0x10, 0x9, 0x0, [{0x0, 0x6, 0x5}, {0x8, 0x9, 0x6, '\x00', 0x804}, {0x4, 0xffffffffffffffff, 0x6, '\x00', 0x3100}, {0x1, 0x8000000000000000, 0xca, '\x00', 0x5}, {0x1, 0x2, 0x81}, {0xf, 0x8, 0xe4}, {0x8, 0xfffffffffffffffc, 0x6, '\x00', 0x284}, {0x2, 0x8, 0x1a6c, '\x00', 0x3b06}, {0x0, 0x1000, 0x3a0, '\x00', 0x2405}]}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000004000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) 742.208089ms ago: executing program 0 (id=916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b010203010902240001fe00c0000904eb02027f9c1f000905060533a7ed000209058202"], 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000180)=@arm64={0x8, 0x9, 0x16, '\x00', 0x40}) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (rerun: 32) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x44}}, 0x0) 703.260475ms ago: executing program 4 (id=917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20004040) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100de000000000000000500000a28000000000a0300000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100460f000000000000797a32000000001400000011000100"/111], 0x7c}, 0x1, 0x0, 0x0, 0x200080a1}, 0x80) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0xb, 0x8}, @exit], &(0x7f0000000040)='GPL\x00', 0x9}, 0x94) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x28) setsockopt$inet6_udp_int(r4, 0x88, 0x1, &(0x7f0000000080), 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') 471.333915ms ago: executing program 0 (id=918): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0xb, 0x2, @generic=0x1, 0x2, 0x7, 0x8a}) 239.163386ms ago: executing program 3 (id=919): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400000010000100000800000000000001000000353dea1faff98cf5698bf596ab88eb7944a86723f6befd64824d6ef8c803ac770d04a09543c39ed978dfabbb98cb08de06f4212a1ccdff376c841d9302082cb73544e25279130672abfbb396", @ANYRES32=0x0, @ANYBLOB="0401010000000000140003006970366772653000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x14) 118.443358ms ago: executing program 0 (id=920): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000080)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000009022400010000c005090400008103000000092100002801220700090581030002090a116c967f9308503c4c9c4faccc20aeeca5190efc314eba375c487e47275c8f7bf614acbd20d4c7f67b48000000a7524e93f1b0053c69dbeeb2c59af8b9f0885b31e3ed366fcb602fe0472037a3"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@global=@item_012={0x2, 0x1, 0x8, "2daf"}, @local=@item_4={0x3, 0x2, 0x1, "118a8bf4"}, @local=@item_012={0x2, 0x2, 0x5, "4c16"}]}}, 0x0}, 0x0) 0s ago: executing program 2 (id=921): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0xd, 0x0, 0x3ff, 0x1, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x1, 0x5}}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xfffffdfd) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000600)={0x0, @bt={0x2d0, 0x23e, 0x1, 0x2, 0xdd9f83, 0x8, 0x9, 0x1, 0x2, 0x8, 0x725, 0x2013, 0x7, 0x7f, 0x3e, 0xb763599953cb0908, {0x6, 0x80101}, 0x3, 0xed}}) kernel console output (not intermixed with test programs): syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 229.697527][ T30] audit: type=1326 audit(1766713104.083:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 229.709504][ T5921] usb 2-1: config 0 has no interface number 0 [ 229.792280][ T5921] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.806039][ T30] audit: type=1326 audit(1766713104.083:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 229.855554][ T5921] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 229.858030][ T30] audit: type=1326 audit(1766713104.083:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 229.886785][ T6212] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 229.896225][ T30] audit: type=1326 audit(1766713104.153:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 229.909849][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.931438][ T5921] usb 2-1: Product: syz [ 229.937305][ T5921] usb 2-1: Manufacturer: syz [ 229.942706][ T5921] usb 2-1: SerialNumber: syz [ 229.978373][ T5921] usb 2-1: config 0 descriptor?? [ 229.998180][ T5921] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 230.012841][ T5921] em28xx 2-1:0.132: Video interface 132 found: [ 230.022264][ T6212] usb 4-1: device descriptor read/64, error -71 [ 230.262345][ T6212] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 230.400235][ T6212] usb 4-1: device descriptor read/64, error -71 [ 230.462154][ T5921] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 230.516261][ T6212] usb usb4-port1: attempt power cycle [ 230.544644][ T5921] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 230.564639][ T5921] em28xx 2-1:0.132: board has no eeprom [ 230.632267][ T5921] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 230.663461][ T5921] em28xx 2-1:0.132: analog set to bulk mode. [ 230.750674][ T5918] em28xx 2-1:0.132: Registering V4L2 extension [ 230.794040][ T5921] usb 2-1: USB disconnect, device number 25 [ 230.840387][ T5921] em28xx 2-1:0.132: Disconnecting em28xx [ 230.882283][ T6212] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 230.923469][ T6212] usb 4-1: device descriptor read/8, error -71 [ 231.254515][ T6212] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 231.293601][ T6212] usb 4-1: device descriptor read/8, error -71 [ 231.490296][ T6212] usb usb4-port1: unable to enumerate USB device [ 231.672328][ T5918] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 231.696355][ T5918] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 231.704270][ T5918] em28xx 2-1:0.132: No AC97 audio processor [ 231.746550][ T5918] usb 2-1: Decoder not found [ 231.763664][ T5918] em28xx 2-1:0.132: failed to create media graph [ 231.775252][ T5918] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 231.844373][ T5918] em28xx 2-1:0.132: Remote control support is not available for this card. [ 231.863092][ T5921] em28xx 2-1:0.132: Closing input extension [ 231.971730][ T5921] em28xx 2-1:0.132: Freeing device [ 232.982323][ T5921] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 233.101534][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 233.101553][ T30] audit: type=1400 audit(1766713107.833:227): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7746 comm="syz.2.423" [ 233.128110][ T6212] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 233.154384][ T5921] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 233.165794][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 233.169102][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.185499][ T5921] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 233.199846][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.221666][ T7752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.424'. [ 233.234198][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 233.347223][ T6212] usb 4-1: device descriptor read/64, error -71 [ 233.350663][ T5921] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 233.363570][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.371760][ T5921] usb 2-1: Product: syz [ 233.378812][ T5921] usb 2-1: Manufacturer: syz [ 233.402809][ T5921] usb 2-1: SerialNumber: syz [ 233.467817][ T5921] usb 2-1: config 0 descriptor?? [ 233.483541][ T7738] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 233.497803][ T7738] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 233.513664][ T5921] usb 2-1: ucan: probing device on interface #0 [ 233.612556][ T6212] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 233.652534][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 233.792265][ T6212] usb 4-1: device descriptor read/64, error -71 [ 233.900668][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.911585][ T6212] usb usb4-port1: attempt power cycle [ 233.957733][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 233.987647][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 234.001080][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 234.015517][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 234.060660][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 234.090454][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 234.100622][ T10] usb 5-1: Product: syz [ 234.107136][ T10] usb 5-1: Manufacturer: syz [ 234.177200][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 234.192624][ T5921] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 234.205844][ T5921] usb 2-1: USB disconnect, device number 26 [ 234.234204][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 234.256243][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 234.265264][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 234.322806][ T6212] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 234.367523][ T6212] usb 4-1: device descriptor read/8, error -71 [ 234.662960][ T6212] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 234.693857][ T6212] usb 4-1: device descriptor read/8, error -71 [ 234.759874][ T7767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.770356][ T7767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.811705][ T6212] usb usb4-port1: unable to enumerate USB device [ 235.191581][ T7772] xt_bpf: check failed: parse error [ 236.220174][ T5921] usb 5-1: USB disconnect, device number 16 [ 236.377381][ T7777] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.430'. [ 236.427219][ T7777] netlink: 'syz.3.430': attribute type 5 has an invalid length. [ 236.873201][ T7786] wg1: entered promiscuous mode [ 236.899519][ T7786] wg1: entered allmulticast mode [ 237.392828][ T30] audit: type=1400 audit(1766713112.093:228): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7794 comm="syz.3.436" [ 238.081768][ T7814] IPv4: Oversized IP packet from 172.20.20.24 [ 238.089985][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 238.096866][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 238.099130][ T7807] input: syz1 as /devices/virtual/input/input14 [ 238.239427][ T7819] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20002 [ 238.610133][ T7831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.633168][ T7831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.663141][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 238.816493][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 238.824522][ T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 238.833288][ T10] usb 5-1: config 0 has no interface number 0 [ 238.842863][ T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.861524][ T10] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 238.891550][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.900875][ T10] usb 5-1: Product: syz [ 238.932801][ T10] usb 5-1: Manufacturer: syz [ 238.937697][ T10] usb 5-1: SerialNumber: syz [ 238.950161][ T10] usb 5-1: config 0 descriptor?? [ 238.963498][ T10] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 238.975471][ T10] em28xx 5-1:0.132: Video interface 132 found: [ 239.083873][ T30] audit: type=1400 audit(1766713113.803:229): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7841 comm="syz.3.449" [ 239.299010][ T7845] netlink: zone id is out of range [ 239.305891][ T7845] netlink: zone id is out of range [ 239.311036][ T7845] netlink: zone id is out of range [ 239.322665][ T7845] netlink: zone id is out of range [ 239.336918][ T7845] netlink: zone id is out of range [ 239.342104][ T7845] netlink: zone id is out of range [ 239.347410][ T7845] netlink: zone id is out of range [ 239.465085][ T7848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.496492][ T10] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 239.512848][ T7848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.543615][ T7851] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 239.556096][ T7848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.565107][ T7848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.577689][ T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 239.587320][ T10] em28xx 5-1:0.132: board has no eeprom [ 239.653185][ T10] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 239.662939][ T10] em28xx 5-1:0.132: analog set to bulk mode. [ 239.669044][ T6212] em28xx 5-1:0.132: Registering V4L2 extension [ 239.699650][ T10] usb 5-1: USB disconnect, device number 17 [ 239.732456][ T10] em28xx 5-1:0.132: Disconnecting em28xx [ 239.739604][ T7855] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 239.787694][ T7855] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 239.801973][ T7855] bond1: (slave vcan1): making interface the new active one [ 239.813321][ T7855] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 239.827055][ T7851] bond1: entered allmulticast mode [ 239.832860][ T7851] vcan1: entered allmulticast mode [ 239.918962][ T6212] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 239.927542][ T6212] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 239.941725][ T6212] em28xx 5-1:0.132: No AC97 audio processor [ 239.955467][ T6212] usb 5-1: Decoder not found [ 239.960318][ T6212] em28xx 5-1:0.132: failed to create media graph [ 239.968356][ T6212] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 239.978433][ T6212] em28xx 5-1:0.132: Remote control support is not available for this card. [ 239.989466][ T10] em28xx 5-1:0.132: Closing input extension [ 240.016786][ T10] em28xx 5-1:0.132: Freeing device [ 240.442934][ T7880] netlink: 144 bytes leftover after parsing attributes in process `syz.3.458'. [ 240.551416][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.584169][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.690790][ T30] audit: type=1326 audit(1766713115.423:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 240.843494][ T30] audit: type=1326 audit(1766713115.453:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 240.843552][ T30] audit: type=1326 audit(1766713115.453:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 240.843599][ T30] audit: type=1326 audit(1766713115.453:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 240.843645][ T30] audit: type=1326 audit(1766713115.453:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 240.843690][ T30] audit: type=1326 audit(1766713115.453:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 240.843736][ T30] audit: type=1326 audit(1766713115.453:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 240.843782][ T30] audit: type=1326 audit(1766713115.453:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 240.843902][ T30] audit: type=1326 audit(1766713115.453:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 241.531396][ T7900] netlink: 'syz.0.463': attribute type 4 has an invalid length. [ 242.206225][ T7914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.261916][ T7914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.853496][ T106] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 242.993051][ T106] usb 2-1: device descriptor read/64, error -71 [ 243.078720][ T7923] binder: 7922:7923 ioctl 4018620d 0 returned -22 [ 243.243820][ T106] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 243.366348][ T7925] syzkaller0: entered promiscuous mode [ 243.374468][ T7925] syzkaller0: entered allmulticast mode [ 243.392988][ T106] usb 2-1: device descriptor read/64, error -71 [ 243.504012][ T106] usb usb2-port1: attempt power cycle [ 243.658314][ T7932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.674323][ T7932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.765925][ T7932] sctp: [Deprecated]: syz.0.472 (pid 7932) Use of int in max_burst socket option deprecated. [ 243.765925][ T7932] Use struct sctp_assoc_value instead [ 243.842819][ T106] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 243.877857][ T106] usb 2-1: device descriptor read/8, error -71 [ 244.132962][ T106] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 244.153801][ T106] usb 2-1: device descriptor read/8, error -71 [ 244.264230][ T106] usb usb2-port1: unable to enumerate USB device [ 244.938238][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 244.938255][ T30] audit: type=1400 audit(1766713119.673:280): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7946 comm="syz.3.477" [ 246.386909][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.436344][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.736516][ T7964] program syz.3.481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.185834][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'. [ 247.751235][ T30] audit: type=1326 audit(1766713122.453:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.0.485" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x0 [ 248.264640][ T7992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.416265][ T7992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.727369][ T30] audit: type=1400 audit(1766713124.453:282): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8004 comm="syz.2.491" [ 250.821581][ T8031] usb 1-1: USB disconnect, device number 3 [ 250.929942][ T8031] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 251.025804][ T8031] keyspan 1-1:253.252: device disconnected [ 251.380973][ T8041] netlink: 'syz.0.499': attribute type 5 has an invalid length. [ 251.672260][ T932] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 251.822632][ T932] usb 4-1: Using ep0 maxpacket: 32 [ 251.836518][ T932] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 251.850600][ T932] usb 4-1: config 0 has no interface number 0 [ 251.865166][ T932] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.905359][ T932] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 251.916236][ T932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.952233][ T932] usb 4-1: Product: syz [ 251.961480][ T932] usb 4-1: Manufacturer: syz [ 251.982010][ T932] usb 4-1: SerialNumber: syz [ 252.037341][ T932] usb 4-1: config 0 descriptor?? [ 252.055608][ T932] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 252.069730][ T932] em28xx 4-1:0.132: Video interface 132 found: [ 252.076496][ T5894] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 252.227812][ T5921] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 252.262311][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 252.276127][ T5894] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.292290][ T5894] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.308795][ T5894] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.338646][ T5894] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.385935][ T8064] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 252.429433][ T5894] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.429650][ T5921] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97 [ 252.473575][ T8066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.508'. [ 252.494142][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.507355][ T8064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.533039][ T932] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 252.541447][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.588959][ T5921] usb 5-1: config 0 descriptor?? [ 252.598944][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 252.621139][ T932] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 252.631073][ T5921] sisusb 5-1:0.0: Invalid USB2VGA device [ 252.653064][ T5921] sisusb 5-1:0.0: probe with driver sisusb failed with error -22 [ 252.665276][ T932] em28xx 4-1:0.132: board has no eeprom [ 252.726653][ T5894] usb 2-1: GET_CAPABILITIES returned 0 [ 252.732398][ T5894] usbtmc 2-1:16.0: can't read capabilities [ 252.762294][ T932] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 252.775120][ T932] em28xx 4-1:0.132: analog set to bulk mode. [ 252.795715][ T5894] em28xx 4-1:0.132: Registering V4L2 extension [ 252.843107][ T932] usb 4-1: USB disconnect, device number 33 [ 252.850657][ T932] em28xx 4-1:0.132: Disconnecting em28xx [ 252.897055][ T30] audit: type=1326 audit(1766713127.633:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.4.507" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x0 [ 252.929390][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.938590][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.947677][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.978525][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.987796][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.996983][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.021658][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.030862][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.071174][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.080376][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.089520][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.146876][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.156053][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.165174][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.188525][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.215538][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.278058][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.287238][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 253.300955][ T8075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.328979][ T8075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.496085][ T5894] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 253.509772][ T5894] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 253.534944][ T5894] em28xx 4-1:0.132: No AC97 audio processor [ 253.550625][ T5894] usb 4-1: Decoder not found [ 253.566044][ T5894] em28xx 4-1:0.132: failed to create media graph [ 253.588318][ T6212] usb 2-1: USB disconnect, device number 31 [ 253.600164][ T5894] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 253.639994][ T5894] em28xx 4-1:0.132: Remote control support is not available for this card. [ 253.676707][ T932] em28xx 4-1:0.132: Closing input extension [ 253.721240][ T932] em28xx 4-1:0.132: Freeing device [ 254.038959][ T8094] binder: 8091:8094 ioctl c018620c 800002c0 returned -1 [ 254.431197][ T8097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.513'. [ 255.000694][ T6212] usb 5-1: USB disconnect, device number 18 [ 255.442292][ T6212] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 255.484767][ T8112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.501406][ T8112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.521757][ T8115] loop7: detected capacity change from 0 to 7 [ 255.554114][ T8115] Dev loop7: unable to read RDB block 7 [ 255.559789][ T8115] loop7: unable to read partition table [ 255.575705][ T8115] loop7: partition table beyond EOD, truncated [ 255.604571][ T8115] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 255.624636][ T6212] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.654525][ C0] blk_print_req_error: 13 callbacks suppressed [ 255.654543][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 255.671043][ C0] buffer_io_error: 13 callbacks suppressed [ 255.671064][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 255.686818][ T6212] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.708015][ T6212] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 255.719259][ T6212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 255.729619][ T6212] usb 5-1: SerialNumber: syz [ 256.124401][ T8122] : renamed from bridge_slave_0 (while UP) [ 256.253121][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'. [ 257.002486][ T30] audit: type=1400 audit(1766713131.743:284): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8132 comm="syz.0.523" [ 257.502486][ T5921] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 257.654080][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 257.678734][ T5921] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 257.697606][ T5921] usb 4-1: config 0 has no interface number 0 [ 257.717680][ T5921] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 257.745981][ T5921] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 257.769198][ T5921] usb 4-1: config 0 interface 41 has no altsetting 0 [ 257.803119][ T5921] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 257.831020][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.854402][ T5921] usb 4-1: Product: syz [ 257.863377][ T5921] usb 4-1: Manufacturer: syz [ 257.872531][ T5921] usb 4-1: SerialNumber: syz [ 257.894371][ T5921] usb 4-1: config 0 descriptor?? [ 257.916587][ T8139] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 257.925923][ T8139] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 258.136258][ T6212] usb 5-1: 0:2 : does not exist [ 258.143124][ T6212] usb 5-1: unit 5: unexpected type 0x0b [ 258.152772][ T5968] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 258.168087][ T8139] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 258.217419][ T8139] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 258.247556][ T6212] usb 5-1: USB disconnect, device number 19 [ 258.371391][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.392558][ T5968] usb 2-1: Using ep0 maxpacket: 8 [ 258.451256][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.502259][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.533789][ T5968] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.562309][ T5968] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 258.581781][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.652769][ T5968] usb 2-1: config 0 descriptor?? [ 258.919913][ T5921] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 259.154571][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.189837][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.230762][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 259.255562][ T5968] nzxt-kraken2 0003:1E71:170E.0009: item fetching failed at offset 2/5 [ 259.264946][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 259.280495][ T5968] nzxt-kraken2 0003:1E71:170E.0009: hid parse failed with -22 [ 259.300337][ T5968] nzxt-kraken2 0003:1E71:170E.0009: probe with driver nzxt-kraken2 failed with error -22 [ 259.353230][ T5921] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 259.367459][ T5921] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 259.380984][ T5921] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 259.394239][ T5921] usb 4-1: USB disconnect, device number 34 [ 259.497809][ T8147] syz.4.527 (8147): drop_caches: 2 [ 259.789130][ T8165] binder: 8162:8165 ioctl c018620c 800002c0 returned -1 [ 260.247549][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.303687][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.424004][ T8143] syz.1.526 (8143): drop_caches: 2 [ 260.451612][ T5921] usb 2-1: USB disconnect, device number 32 [ 260.853070][ T6212] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 261.022885][ T6212] usb 4-1: Using ep0 maxpacket: 32 [ 261.031643][ T6212] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 261.051267][ T6212] usb 4-1: config 0 has no interface number 0 [ 261.071621][ T6212] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 261.095584][ T6212] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 261.108133][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.114637][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.126182][ T6212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.143272][ T6212] usb 4-1: Product: syz [ 261.152868][ T6212] usb 4-1: Manufacturer: syz [ 261.157549][ T6212] usb 4-1: SerialNumber: syz [ 261.187335][ T6212] usb 4-1: config 0 descriptor?? [ 261.219278][ T6212] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 261.267576][ T6212] em28xx 4-1:0.132: Video interface 132 found: [ 261.367362][ T8193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.379208][ T8193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.756383][ T6212] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 261.813344][ T30] audit: type=1400 audit(1766713136.543:285): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8197 comm="syz.4.539" [ 261.861593][ T6212] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 261.908808][ T6212] em28xx 4-1:0.132: board has no eeprom [ 261.995192][ T6212] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 262.020355][ T6212] em28xx 4-1:0.132: analog set to bulk mode. [ 262.036564][ T106] em28xx 4-1:0.132: Registering V4L2 extension [ 262.068969][ T6212] usb 4-1: USB disconnect, device number 35 [ 262.105438][ T6212] em28xx 4-1:0.132: Disconnecting em28xx [ 262.228796][ T8210] fuse: Bad value for 'user_id' [ 262.242322][ T8210] fuse: Bad value for 'user_id' [ 262.264096][ T8210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.282078][ T8210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.375300][ T106] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 262.388821][ T106] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 262.397648][ T106] em28xx 4-1:0.132: No AC97 audio processor [ 262.424703][ T106] usb 4-1: Decoder not found [ 262.441282][ T106] em28xx 4-1:0.132: failed to create media graph [ 262.482948][ T106] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 262.534840][ T106] em28xx 4-1:0.132: Remote control support is not available for this card. [ 262.551545][ T6212] em28xx 4-1:0.132: Closing input extension [ 262.798925][ T6212] em28xx 4-1:0.132: Freeing device [ 263.172289][ T5968] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 263.335891][ T8229] binder: 8223:8229 ioctl c018620c 800002c0 returned -1 [ 263.414961][ T5968] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.435394][ T5968] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.466548][ T5968] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 263.492257][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 263.500379][ T5968] usb 2-1: SerialNumber: syz [ 264.072349][ T5921] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 264.244452][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.257945][ T5921] usb 5-1: config 0 has no interfaces? [ 264.263930][ T5921] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 264.273483][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.295838][ T5921] usb 5-1: config 0 descriptor?? [ 264.303603][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.549'. [ 264.438816][ T8240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.014417][ T5921] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 265.187158][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 265.203966][ T5921] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 265.219211][ T5921] usb 4-1: config 0 has no interface number 0 [ 265.232984][ T5921] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.265806][ T5921] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 265.280902][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.315910][ T5921] usb 4-1: Product: syz [ 265.339177][ T5921] usb 4-1: Manufacturer: syz [ 265.353054][ T5921] usb 4-1: SerialNumber: syz [ 265.371536][ T5921] usb 4-1: config 0 descriptor?? [ 265.409484][ T5921] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 265.436685][ T5921] em28xx 4-1:0.132: Video interface 132 found: [ 265.447552][ T8259] pim6reg: entered allmulticast mode [ 265.637081][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 265.853377][ T5968] usb 2-1: 0:2 : does not exist [ 265.877174][ T5921] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 265.948066][ T5968] usb 2-1: USB disconnect, device number 33 [ 265.974499][ T5921] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 266.005111][ T5921] em28xx 4-1:0.132: board has no eeprom [ 266.027652][ T7356] udevd[7356]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.102380][ T5921] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 266.114184][ T5921] em28xx 4-1:0.132: analog set to bulk mode. [ 266.134891][ T24] em28xx 4-1:0.132: Registering V4L2 extension [ 266.166066][ T5921] usb 4-1: USB disconnect, device number 36 [ 266.199695][ T5921] em28xx 4-1:0.132: Disconnecting em28xx [ 266.409859][ T24] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 266.417846][ T24] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 266.440387][ T30] audit: type=1400 audit(1766713141.173:286): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8278 comm="syz.2.556" [ 266.470785][ T24] em28xx 4-1:0.132: No AC97 audio processor [ 266.480667][ T24] usb 4-1: Decoder not found [ 266.486868][ T24] em28xx 4-1:0.132: failed to create media graph [ 266.495597][ T24] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 266.509825][ T24] em28xx 4-1:0.132: Remote control support is not available for this card. [ 266.539475][ T5921] em28xx 4-1:0.132: Closing input extension [ 266.615842][ T5921] em28xx 4-1:0.132: Freeing device [ 266.649747][ T8274] could not allocate digest TFM handle poly1305-arm [ 266.825999][ T24] usb 5-1: USB disconnect, device number 20 [ 267.026131][ T8292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.038804][ T8292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.054341][ T5921] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 267.396749][ T8297] binder: 8293:8297 ioctl c018620c 800002c0 returned -1 [ 267.505944][ T5921] usb 4-1: config 0 has no interfaces? [ 267.511566][ T5921] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 267.548475][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.629632][ T5921] usb 4-1: config 0 descriptor?? [ 267.820275][ T8305] kvm: user requested TSC rate below hardware speed [ 268.323672][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.354072][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.370590][ T5901] usb 4-1: USB disconnect, device number 37 [ 268.383394][ T8307] netlink: 36 bytes leftover after parsing attributes in process `syz.0.564'. [ 268.751862][ T8309] fuse: Bad value for 'fd' [ 268.812277][ T5921] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 268.992637][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 269.000367][ T5921] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.008812][ T5921] usb 4-1: config 0 has no interface number 0 [ 269.015375][ T5921] usb 4-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.026922][ T5921] usb 4-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 269.037773][ T5921] usb 4-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 269.048297][ T5921] usb 4-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 269.058805][ T5921] usb 4-1: config 0 interface 1 has no altsetting 0 [ 269.068319][ T5921] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 269.079616][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.123026][ T6212] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 269.133552][ T5921] usb 4-1: config 0 descriptor?? [ 269.212858][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 269.293137][ T6212] usb 2-1: Using ep0 maxpacket: 16 [ 269.310700][ T6212] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 269.334152][ T6212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 269.370049][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.391544][ T6212] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 269.432081][ T6212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.450598][ T6212] usb 2-1: Product: syz [ 269.458117][ T8330] random: crng reseeded on system resumption [ 269.504643][ T8330] syzkaller0: entered promiscuous mode [ 269.510222][ T8330] syzkaller0: entered allmulticast mode [ 269.583893][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.607401][ T6212] usb 2-1: Manufacturer: syz [ 269.612117][ T6212] usb 2-1: SerialNumber: syz [ 269.614594][ T5901] usb 4-1: USB disconnect, device number 38 [ 269.630044][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 269.645542][ T6212] usb 2-1: config 0 descriptor?? [ 269.651232][ T24] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 269.670466][ T24] usb 5-1: config 0 has no interface number 0 [ 269.691495][ T24] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 269.712017][ T6212] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 269.723895][ T6212] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 269.770594][ T24] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 269.806734][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.837817][ T24] usb 5-1: Product: syz [ 269.846431][ T24] usb 5-1: Manufacturer: syz [ 269.862828][ T24] usb 5-1: SerialNumber: syz [ 269.876748][ T24] usb 5-1: config 0 descriptor?? [ 269.918409][ T24] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 269.930726][ T24] em28xx 5-1:0.132: Video interface 132 found: [ 270.325113][ T6212] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 270.340321][ T6212] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 270.359313][ T6212] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 270.378211][ T6212] em28xx 2-1:0.0: No AC97 audio processor [ 270.431239][ T6212] usb 2-1: USB disconnect, device number 34 [ 270.444603][ T6212] em28xx 2-1:0.0: Disconnecting em28xx [ 270.458575][ T24] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 270.465728][ T6212] em28xx 2-1:0.0: Freeing device [ 270.556509][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 270.591837][ T24] em28xx 5-1:0.132: board has no eeprom [ 270.699735][ T24] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 270.726792][ T24] em28xx 5-1:0.132: analog set to bulk mode. [ 270.743775][ T5921] em28xx 5-1:0.132: Registering V4L2 extension [ 270.776136][ T24] usb 5-1: USB disconnect, device number 21 [ 270.792241][ T5968] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 270.803203][ T24] em28xx 5-1:0.132: Disconnecting em28xx [ 271.002527][ T5968] usb 4-1: Using ep0 maxpacket: 8 [ 271.029936][ T5968] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 271.061714][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.094492][ T5968] usb 4-1: Product: syz [ 271.109718][ T5968] usb 4-1: Manufacturer: syz [ 271.134057][ T5968] usb 4-1: SerialNumber: syz [ 271.164838][ T5968] usb 4-1: config 0 descriptor?? [ 271.193411][ T5968] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 271.242705][ T5921] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 271.249857][ T5921] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 271.295805][ T5921] em28xx 5-1:0.132: No AC97 audio processor [ 271.330542][ T5921] usb 5-1: Decoder not found [ 271.342382][ T5921] em28xx 5-1:0.132: failed to create media graph [ 271.358002][ T5921] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 271.367646][ T5921] em28xx 5-1:0.132: Remote control support is not available for this card. [ 271.392416][ T24] em28xx 5-1:0.132: Closing input extension [ 271.411712][ T24] em28xx 5-1:0.132: Freeing device [ 271.525948][ T8368] binder: 8354:8368 ioctl c018620c 800002c0 returned -1 [ 271.743510][ T8372] netlink: 'syz.0.580': attribute type 12 has an invalid length. [ 272.230080][ T5894] usb 4-1: USB disconnect, device number 39 [ 272.772437][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 272.836884][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.584'. [ 272.942324][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 272.978742][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.022228][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.031559][ T24] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 273.052192][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 273.079940][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.089339][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.097734][ T24] usb 2-1: Product: syz [ 273.101940][ T24] usb 2-1: Manufacturer: syz [ 273.107445][ T24] usb 2-1: SerialNumber: syz [ 273.283186][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.292142][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.505724][ T24] usb 2-1: 0:2 : does not exist [ 273.515348][ T24] usb 2-1: unit 5 not found! [ 273.522556][ T5894] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 273.545088][ T24] usb 2-1: USB disconnect, device number 35 [ 273.552608][ T5968] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 273.580776][ T7356] udevd[7356]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.695412][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.721399][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.731703][ T5968] usb 5-1: Using ep0 maxpacket: 32 [ 273.747461][ T5894] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 273.757828][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.769136][ T5968] usb 5-1: config 0 has an invalid interface number: 202 but max is 0 [ 273.781486][ T5968] usb 5-1: config 0 has no interface number 0 [ 273.790375][ T5894] usb 4-1: config 0 descriptor?? [ 273.825819][ T5968] usb 5-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 273.866438][ T5968] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 273.884229][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.893972][ T5968] usb 5-1: Product: syz [ 273.904416][ T5968] usb 5-1: Manufacturer: syz [ 273.909112][ T5968] usb 5-1: SerialNumber: syz [ 273.939747][ T8402] usb usb7: usbfs: process 8402 (syz.2.588) did not claim interface 0 before use [ 273.949939][ T5968] usb 5-1: config 0 descriptor?? [ 273.995261][ T5968] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 274.060715][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 274.095553][ T8407] veth1_to_team: entered promiscuous mode [ 274.104275][ T8407] macvlan1: entered promiscuous mode [ 274.121491][ T8407] hsr1: entered allmulticast mode [ 274.128443][ T8407] veth1_to_team: entered allmulticast mode [ 274.137892][ T8407] macvlan1: entered allmulticast mode [ 274.144123][ T8407] veth1_vlan: entered allmulticast mode [ 274.171900][ T65] usb 5-1: Failed to submit usb control message: -71 [ 274.179074][ T5968] usb 5-1: USB disconnect, device number 22 [ 274.251191][ T65] usb 5-1: unable to send the bmi data to the device: -71 [ 274.259995][ T5894] elecom 0003:056E:010D.000A: item fetching failed at offset 5/8 [ 274.276689][ T5894] elecom 0003:056E:010D.000A: probe with driver elecom failed with error -22 [ 274.298397][ T8410] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 274.301788][ T65] usb 5-1: unable to get target info from device [ 274.338277][ T8410] kvm: pic: non byte read [ 274.343471][ T8410] kvm: pic: level sensitive irq not supported [ 274.343843][ T8410] kvm: pic: non byte read [ 274.357086][ T8410] kvm: pic: level sensitive irq not supported [ 274.357221][ T8410] kvm: pic: non byte read [ 274.365180][ T65] usb 5-1: could not get target info (-71) [ 274.403194][ T65] usb 5-1: could not probe fw (-71) [ 274.499515][ T5894] usb 4-1: USB disconnect, device number 40 [ 275.292096][ T30] audit: type=1400 audit(1766713149.983:287): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8422 comm="syz.0.592" [ 275.577828][ T8436] binder: 8433:8436 ioctl c018620c 800002c0 returned -1 [ 276.917956][ T8446] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 277.113086][ T8446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.264099][ T8448] bond1: (slave geneve2): making interface the new active one [ 277.304634][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.313283][ T8448] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 277.337007][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.277605][ T8469] input: syz0 as /devices/virtual/input/input16 [ 279.421667][ T8479] tap0: tun_chr_ioctl cmd 1074025677 [ 279.450938][ T8479] tap0: linktype set to 270 [ 280.210605][ T8501] binder: 8497:8501 ioctl c018620c 800002c0 returned -1 [ 281.192420][ T5918] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 281.357164][ T8512] syzkaller0: entered promiscuous mode [ 281.362981][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 281.368338][ T8512] syzkaller0: entered allmulticast mode [ 281.376456][ T5918] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 281.400736][ T5918] usb 5-1: config 0 has no interface number 0 [ 281.418092][ T5918] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.430744][ T5918] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 281.442512][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.450752][ T8512] netlink: 'syz.3.615': attribute type 1 has an invalid length. [ 281.461607][ T5918] usb 5-1: Product: syz [ 281.469026][ T5918] usb 5-1: Manufacturer: syz [ 281.477388][ T5918] usb 5-1: SerialNumber: syz [ 281.498722][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.615'. [ 281.507738][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.615'. [ 281.507780][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.615'. [ 281.509272][ T5918] usb 5-1: config 0 descriptor?? [ 281.532842][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.615'. [ 281.569963][ T5918] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 281.586473][ T8512] bond2: entered promiscuous mode [ 281.591955][ T8512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.598863][ T5918] em28xx 5-1:0.132: Video interface 132 found: [ 281.828961][ T8527] kAFS: unable to lookup cell 'Þ({^ú@' [ 281.867566][ T30] audit: type=1326 audit(1766713156.603:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 281.927693][ T30] audit: type=1326 audit(1766713156.633:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 281.963605][ T30] audit: type=1326 audit(1766713156.633:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 281.997311][ T30] audit: type=1326 audit(1766713156.633:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 282.024322][ T30] audit: type=1326 audit(1766713156.633:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 282.047454][ T30] audit: type=1326 audit(1766713156.633:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 282.082596][ T30] audit: type=1326 audit(1766713156.633:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 282.105177][ T30] audit: type=1326 audit(1766713156.633:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 282.128747][ T30] audit: type=1326 audit(1766713156.633:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 282.155289][ T30] audit: type=1326 audit(1766713156.633:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 282.179358][ T5918] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 282.246139][ T5918] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 282.255982][ T5918] em28xx 5-1:0.132: board has no eeprom [ 282.322276][ T5918] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 282.330247][ T5918] em28xx 5-1:0.132: analog set to bulk mode. [ 282.336522][ T5894] em28xx 5-1:0.132: Registering V4L2 extension [ 282.351017][ T5918] usb 5-1: USB disconnect, device number 23 [ 282.370206][ T5918] em28xx 5-1:0.132: Disconnecting em28xx [ 282.491343][ T5894] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 282.501156][ T5894] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 282.511070][ T5894] em28xx 5-1:0.132: No AC97 audio processor [ 282.519549][ T5894] usb 5-1: Decoder not found [ 282.525151][ T5894] em28xx 5-1:0.132: failed to create media graph [ 282.532492][ T5894] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 282.547740][ T5894] em28xx 5-1:0.132: Remote control support is not available for this card. [ 282.556658][ T5918] em28xx 5-1:0.132: Closing input extension [ 282.575867][ T5918] em28xx 5-1:0.132: Freeing device [ 282.919240][ T8542] lo: entered promiscuous mode [ 282.934147][ T8542] lo: entered allmulticast mode [ 283.489494][ T6212] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 283.875542][ T6212] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 283.889947][ T6212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.916093][ T6212] usb 5-1: Product: syz [ 283.921780][ T6212] usb 5-1: Manufacturer: syz [ 283.948566][ T6212] usb 5-1: SerialNumber: syz [ 284.115944][ T6212] usb 5-1: config 0 descriptor?? [ 284.933134][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 285.195346][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.213135][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.232996][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 285.252906][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.314304][ T10] usb 4-1: config 0 descriptor?? [ 285.483750][ T8554] net_ratelimit: 19 callbacks suppressed [ 285.483775][ T8554] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0001 with DS=0x3 [ 285.704818][ T6212] usb 5-1: Firmware version (0.0) predates our first public release. [ 285.714249][ T6212] usb 5-1: Please update to version 0.2 or newer [ 285.734520][ T10] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 285.741322][ T10] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 285.769314][ T10] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 285.795110][ T10] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 285.829572][ T10] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 285.847097][ T10] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 285.868238][ T10] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 285.880795][ T6212] usb 5-1: USB disconnect, device number 24 [ 285.898969][ T10] kye 0003:0458:0087.000B: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.3-1/input0 [ 285.975966][ T8579] binder: 8575:8579 ioctl c018620c 800002c0 returned -1 [ 287.502959][ T6212] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 287.673025][ T6212] usb 5-1: Using ep0 maxpacket: 32 [ 287.700553][ T6212] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 287.721969][ T6212] usb 5-1: config 0 has no interface number 0 [ 287.729586][ T6212] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 287.745640][ T6212] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 287.755858][ T6212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.764675][ T6212] usb 5-1: Product: syz [ 287.768871][ T6212] usb 5-1: Manufacturer: syz [ 287.774936][ T6212] usb 5-1: SerialNumber: syz [ 287.794578][ T6212] usb 5-1: config 0 descriptor?? [ 287.802489][ T5894] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 287.817080][ T6212] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 287.844411][ T6212] em28xx 5-1:0.132: Video interface 132 found: [ 287.914359][ T24] usb 4-1: USB disconnect, device number 41 [ 287.962443][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 287.979823][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.994219][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.004212][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 288.019424][ T5894] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 288.029356][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.052995][ T5894] usb 2-1: config 0 descriptor?? [ 288.391840][ T6212] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 288.413234][ T8601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.635'. [ 288.524495][ T6212] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 288.563382][ T6212] em28xx 5-1:0.132: board has no eeprom [ 288.610900][ T5894] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000C/input/input17 [ 288.623096][ T6212] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 288.633773][ T6212] em28xx 5-1:0.132: analog set to bulk mode. [ 288.639965][ T106] em28xx 5-1:0.132: Registering V4L2 extension [ 288.656842][ T6212] usb 5-1: USB disconnect, device number 25 [ 288.665247][ T6212] em28xx 5-1:0.132: Disconnecting em28xx [ 288.790686][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 288.790705][ T30] audit: type=1326 audit(1766713163.523:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.3.637" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d539 code=0x0 [ 288.860863][ T5894] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 288.909237][ T5894] usb 2-1: USB disconnect, device number 36 [ 289.166241][ T8621] xt_bpf: check failed: parse error [ 289.389008][ T106] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 289.419093][ T8616] fido_id[8616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 289.420364][ T106] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 289.538147][ T8624] loop6: detected capacity change from 0 to 7 [ 289.555191][ T106] em28xx 5-1:0.132: No AC97 audio processor [ 289.568888][ T8624] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 289.588712][ T106] usb 5-1: Decoder not found [ 289.654623][ T8624] loop6: partition table partially beyond EOD, truncated [ 289.668907][ T8624] loop6: p1 size 487441168 extends beyond EOD, truncated [ 289.679413][ T106] em28xx 5-1:0.132: failed to create media graph [ 289.717765][ T106] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 289.746395][ T106] em28xx 5-1:0.132: Remote control support is not available for this card. [ 289.805437][ T6212] em28xx 5-1:0.132: Closing input extension [ 290.117380][ T8626] QAT: failed to copy from user cfg_data. [ 290.216356][ T5880] udevd[5880]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 290.479820][ T6212] em28xx 5-1:0.132: Freeing device [ 290.875044][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.644'. [ 290.875063][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.644'. [ 290.981702][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 290.981887][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 291.082860][ T6212] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 291.220510][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 291.380348][ T6212] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 291.395515][ T6212] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 291.450781][ T6212] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 291.470766][ T6212] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 291.545434][ T6212] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 291.720182][ T6212] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 291.835752][ T6212] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 291.925504][ T6212] usb 2-1: Product: syz [ 291.930625][ T6212] usb 2-1: Manufacturer: syz [ 291.949747][ T6212] cdc_wdm 2-1:1.0: skipping garbage [ 291.956177][ T6212] cdc_wdm 2-1:1.0: skipping garbage [ 291.967641][ T6212] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 291.974897][ T6212] cdc_wdm 2-1:1.0: Unknown control protocol [ 292.306794][ T8656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.647'. [ 293.691927][ T5894] usb 2-1: USB disconnect, device number 37 [ 294.108388][ T8676] binder: 8666:8676 ioctl c018620c 800002c0 returned -1 [ 294.529863][ T30] audit: type=1400 audit(1766713169.243:342): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8664 comm="syz.1.650" [ 294.695791][ T8680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.707558][ T8680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.961223][ T30] audit: type=1326 audit(1766713169.693:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 295.039387][ T30] audit: type=1326 audit(1766713169.763:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 295.073679][ T30] audit: type=1326 audit(1766713169.763:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 295.096921][ T30] audit: type=1326 audit(1766713169.763:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 295.119346][ T30] audit: type=1326 audit(1766713169.763:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 295.170855][ T30] audit: type=1326 audit(1766713169.763:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 295.222636][ T30] audit: type=1326 audit(1766713169.763:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 295.272328][ T30] audit: type=1326 audit(1766713169.763:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 295.332289][ T30] audit: type=1326 audit(1766713169.763:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 296.575325][ T8691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.656'. [ 298.595430][ T8700] input: syz0 as /devices/virtual/input/input18 [ 298.914726][ T8706] netlink: 'syz.3.660': attribute type 10 has an invalid length. [ 298.925953][ T8707] binder: 8703:8707 ioctl c018620c 800002c0 returned -1 [ 299.590954][ T8706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.601852][ T8706] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 300.393265][ T8723] binder: 8719:8723 ioctl c018620c 800002c0 returned -1 [ 300.875897][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.890084][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.662965][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 301.783919][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 301.783938][ T30] audit: type=1326 audit(1766713176.423:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 301.904096][ T30] audit: type=1326 audit(1766713176.423:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 301.977082][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 301.987478][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 302.014400][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 302.031887][ T30] audit: type=1326 audit(1766713176.423:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 302.078608][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 302.149472][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 302.183610][ T30] audit: type=1326 audit(1766713176.423:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 302.221482][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 302.297400][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 302.365333][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.376662][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.474617][ T10] usb 4-1: Product: syz [ 302.478988][ T30] audit: type=1326 audit(1766713176.423:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 302.615215][ T10] usb 4-1: Manufacturer: syz [ 302.746886][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 302.757837][ T30] audit: type=1326 audit(1766713176.423:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 302.780949][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 302.788928][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 302.796064][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 302.828666][ T30] audit: type=1326 audit(1766713176.423:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 302.973181][ T30] audit: type=1326 audit(1766713176.433:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 303.036577][ T30] audit: type=1326 audit(1766713176.433:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 303.134787][ T30] audit: type=1326 audit(1766713176.433:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 305.616405][ T5968] usb 4-1: USB disconnect, device number 42 [ 306.070608][ T8763] fuse: Unknown parameter 'f³<00000000000000000006' [ 306.081171][ T8763] netlink: 'syz.1.669': attribute type 12 has an invalid length. [ 306.434065][ T8765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.448093][ T8765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.551601][ T5968] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 306.755708][ T5968] usb 4-1: Using ep0 maxpacket: 32 [ 306.807240][ T5968] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 306.817543][ T5968] usb 4-1: config 0 has no interface number 0 [ 306.828897][ T5968] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 306.843059][ T5968] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 306.854801][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.870797][ T5968] usb 4-1: Product: syz [ 307.065148][ T5968] usb 4-1: Manufacturer: syz [ 307.070064][ T5968] usb 4-1: SerialNumber: syz [ 307.080965][ T5968] usb 4-1: config 0 descriptor?? [ 307.093633][ T5968] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 307.105840][ T5968] em28xx 4-1:0.132: Video interface 132 found: [ 307.569627][ T5968] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 307.639103][ T5968] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 307.663596][ T5968] em28xx 4-1:0.132: board has no eeprom [ 308.059777][ T5968] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 308.084483][ T5968] em28xx 4-1:0.132: analog set to bulk mode. [ 308.090595][ T5918] em28xx 4-1:0.132: Registering V4L2 extension [ 308.155936][ T5968] usb 4-1: USB disconnect, device number 43 [ 308.200435][ T5968] em28xx 4-1:0.132: Disconnecting em28xx [ 308.919969][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 308.929596][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 308.944205][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 308.963774][ T5918] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 309.004615][ T5918] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 309.042999][ T5918] em28xx 4-1:0.132: No AC97 audio processor [ 309.058852][ T5918] usb 4-1: Decoder not found [ 309.074387][ T5918] em28xx 4-1:0.132: failed to create media graph [ 309.083330][ T5918] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 309.117229][ T5918] em28xx 4-1:0.132: Remote control support is not available for this card. [ 309.242044][ T5968] em28xx 4-1:0.132: Closing input extension [ 309.536554][ T5968] em28xx 4-1:0.132: Freeing device [ 310.002915][ T5968] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 310.476025][ T5968] usb 4-1: Using ep0 maxpacket: 8 [ 310.709013][ T5968] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 310.783640][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.807787][ T5968] usb 4-1: Product: syz [ 310.812008][ T5968] usb 4-1: Manufacturer: syz [ 310.830082][ T5968] usb 4-1: SerialNumber: syz [ 310.841343][ T5968] usb 4-1: config 0 descriptor?? [ 310.855297][ T5968] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 310.958728][ T8810] binder: 8807:8810 ioctl c018620c 800002c0 returned -1 [ 311.199004][ T5968] gspca_sonixj: reg_r err -32 [ 311.205575][ T5968] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 311.670425][ T5968] usb 4-1: USB disconnect, device number 44 [ 312.323946][ T8827] binder: 8819:8827 ioctl c018620c 800002c0 returned -1 [ 312.733619][ T5914] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 313.153551][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 313.161871][ T5914] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.211533][ T5914] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 313.233018][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 313.282757][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 313.311554][ T5914] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 313.345589][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.406584][ T5914] hub 5-1:1.0: bad descriptor, ignoring hub [ 313.473939][ T8833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.684'. [ 313.523275][ T5914] hub 5-1:1.0: probe with driver hub failed with error -5 [ 313.531552][ T5914] cdc_wdm 5-1:1.0: skipping garbage [ 313.537862][ T5914] cdc_wdm 5-1:1.0: skipping garbage [ 313.584348][ T5914] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 313.590362][ T5914] cdc_wdm 5-1:1.0: Unknown control protocol [ 315.154301][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 315.154316][ T30] audit: type=1800 audit(1766713189.893:401): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.685" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 315.953420][ T5968] usb 5-1: USB disconnect, device number 26 [ 315.961529][ T8855] fuse: Unknown parameter 'f³<00000000000000000006' [ 315.972330][ T8855] netlink: 'syz.0.687': attribute type 12 has an invalid length. [ 316.226084][ T5914] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 316.245930][ T8857] random: crng reseeded on system resumption [ 316.435145][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 316.453951][ T8860] dvmrp6: entered allmulticast mode [ 316.460746][ T5914] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 316.483569][ T5914] usb 2-1: config 0 has no interface number 0 [ 316.497593][ T5914] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 316.531166][ T5914] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 316.555236][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.581930][ T5914] usb 2-1: Product: syz [ 316.611399][ T5914] usb 2-1: Manufacturer: syz [ 316.640450][ T5914] usb 2-1: SerialNumber: syz [ 316.661680][ T5914] usb 2-1: config 0 descriptor?? [ 316.740916][ T5914] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 316.753710][ T5914] em28xx 2-1:0.132: Video interface 132 found: [ 317.200433][ T8871] netlink: 32 bytes leftover after parsing attributes in process `syz.4.691'. [ 317.251604][ T5914] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 317.260604][ C0] raw-gadget.3 gadget.1: ignoring, device is not running [ 317.325995][ T5914] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 317.344399][ T5914] em28xx 2-1:0.132: board has no eeprom [ 317.416615][ T5914] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 317.433414][ T5914] em28xx 2-1:0.132: analog set to bulk mode. [ 317.443484][ T5901] em28xx 2-1:0.132: Registering V4L2 extension [ 317.458657][ T5914] usb 2-1: USB disconnect, device number 38 [ 317.474303][ T5914] em28xx 2-1:0.132: Disconnecting em28xx [ 317.570186][ T8875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.883917][ T5901] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 317.893512][ T5901] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 317.900696][ T5901] em28xx 2-1:0.132: No AC97 audio processor [ 317.931349][ T5901] usb 2-1: Decoder not found [ 317.975103][ T5901] em28xx 2-1:0.132: failed to create media graph [ 318.007220][ T5901] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 318.058227][ T5901] em28xx 2-1:0.132: Remote control support is not available for this card. [ 318.101218][ T5914] em28xx 2-1:0.132: Closing input extension [ 318.121211][ T5914] em28xx 2-1:0.132: Freeing device [ 318.725830][ T8908] binder: 8898:8908 ioctl c018620c 800002c0 returned -1 [ 318.844039][ T8910] binder: 8904:8910 ioctl c018620c 800002c0 returned -1 [ 319.822800][ T8915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.702'. [ 320.641045][ T30] audit: type=1400 audit(1766713195.373:402): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8924 comm="syz.1.705" [ 320.663534][ T5894] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 320.834554][ T5894] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 320.844809][ T5894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.856768][ T5894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 320.866880][ T5894] usb 5-1: config 1 has no interface number 0 [ 320.873876][ T5894] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 320.887442][ T5894] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.900521][ T5894] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 320.913759][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.921916][ T5894] usb 5-1: Product: syz [ 320.927304][ T5894] usb 5-1: Manufacturer: syz [ 320.933929][ T5894] usb 5-1: SerialNumber: syz [ 320.949196][ T5894] cdc_wdm 5-1:1.128: skipping garbage [ 320.963491][ T5894] cdc_wdm 5-1:1.128: cdc-wdm0: USB WDM device [ 320.970264][ T5894] cdc_wdm 5-1:1.128: Unknown control protocol [ 321.415570][ T8940] random: crng reseeded on system resumption [ 321.474046][ T8940] syzkaller0: entered promiscuous mode [ 321.479607][ T8940] syzkaller0: entered allmulticast mode [ 321.552525][ T5921] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 321.722920][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 321.731042][ T5921] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 321.740162][ T5921] usb 4-1: config 0 has no interface number 0 [ 321.781769][ T5921] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 321.819657][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.826424][ T6212] usb 5-1: USB disconnect, device number 27 [ 321.869617][ T5921] usb 4-1: Product: syz [ 321.881114][ T5921] usb 4-1: Manufacturer: syz [ 321.900668][ T5921] usb 4-1: SerialNumber: syz [ 321.936519][ T5921] usb 4-1: config 0 descriptor?? [ 322.186744][ T5921] radio-si470x 4-1:0.35: this is not a si470x device. [ 322.228574][ T5921] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 322.249991][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 322.538993][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.546916][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.649731][ T5921] usb 4-1: USB disconnect, device number 45 [ 322.943612][ T5901] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 323.191555][ T5901] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 323.204058][ T5901] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 323.224124][ T5901] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 323.245254][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.288960][ T8955] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 323.328858][ T8963] binder: 8960:8963 ioctl c018620c 800002c0 returned -1 [ 323.349227][ T5901] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 323.785096][ T8966] Set syz1 is full, maxelem 65536 reached [ 324.011330][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.127173][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'. [ 324.153850][ T8973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'. [ 324.635738][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.872962][ T5921] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 324.948705][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.029771][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.064140][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 325.202908][ T5921] usb 4-1: config 9 has an invalid interface number: 23 but max is 0 [ 325.232622][ T5921] usb 4-1: config 9 has no interface number 0 [ 325.253953][ T5921] usb 4-1: config 9 interface 23 has no altsetting 0 [ 325.287813][ T5901] usb 2-1: USB disconnect, device number 39 [ 325.307074][ T5921] usb 4-1: New USB device found, idVendor=0403, idProduct=c811, bcdDevice=9f.db [ 325.343599][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.375163][ T5921] usb 4-1: Product: syz [ 325.392258][ T5921] usb 4-1: Manufacturer: 틙䎞ì–䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费ä…ç¿ç¼³à°»ì‘‰é½®æ¢“ଟ純é æœä·¤â¾£å¤‚å‡ì¯´ï¨¹ëŒ±ì‘€ä«·éŒ¶ï¯½ïƒ¶î¨£éŒ”腮䪖떜怸ᾭ桔䅹闢ë ï‚‰è’몙텞ᒢȉ或篣턄湊诌귇 [ 325.552902][ T5921] usb 4-1: SerialNumber: syz [ 326.247641][ T30] audit: type=1400 audit(1766713200.983:403): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8986 comm="syz.1.722" [ 326.343688][ T30] audit: type=1400 audit(1766713201.073:404): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8984 comm="syz.4.721" [ 326.519093][ T8994] sctp: [Deprecated]: syz.0.724 (pid 8994) Use of int in maxseg socket option. [ 326.519093][ T8994] Use struct sctp_assoc_value instead [ 326.580089][ T8994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.648439][ T8994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.723800][ T8994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.755543][ T8994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.051247][ T5921] ftdi_sio 4-1:9.23: FTDI USB Serial Device converter detected [ 327.070669][ T5921] ftdi_sio ttyUSB0: unknown device type: 0x9fdb [ 327.100158][ T5921] usb 4-1: USB disconnect, device number 46 [ 327.151417][ T5921] ftdi_sio 4-1:9.23: device disconnected [ 327.518806][ T9005] IPv6: NLM_F_REPLACE set, but no existing node found! [ 328.656580][ T9018] binder: 9014:9018 ioctl c018620c 800002c0 returned -1 [ 329.272932][ T9024] loop4: detected capacity change from 0 to 7 [ 329.319627][ T7356] Dev loop4: unable to read RDB block 7 [ 329.366643][ T7356] loop4: unable to read partition table [ 329.374548][ T7356] loop4: partition table beyond EOD, truncated [ 329.398330][ T9024] Dev loop4: unable to read RDB block 7 [ 329.405051][ T9024] loop4: unable to read partition table [ 329.449732][ T9024] loop4: partition table beyond EOD, truncated [ 329.467120][ T9024] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 330.950781][ T9045] input: syz0 as /devices/virtual/input/input19 [ 331.866502][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 331.949873][ T9069] openvswitch: netlink: Missing valid actions attribute. [ 331.961403][ T9070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.743'. [ 331.984429][ T9069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.015689][ T9061] netlink: 80 bytes leftover after parsing attributes in process `syz.1.743'. [ 332.036575][ T9072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.744'. [ 332.350767][ T9078] batman_adv: batadv0: Adding interface: dummy0 [ 332.387994][ T9078] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.440868][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 332.445812][ T5914] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 332.464925][ T9078] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 332.478024][ T9083] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 332.516936][ T9083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.653487][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 332.661743][ T5914] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.672997][ T5914] usb 4-1: config 0 has no interface number 0 [ 332.731834][ T5914] usb 4-1: config 0 interface 1 has no altsetting 0 [ 332.746451][ T5914] usb 4-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=da.9a [ 332.756651][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.789578][ T5914] usb 4-1: Product: syz [ 332.798752][ T5914] usb 4-1: Manufacturer: syz [ 332.816568][ T5914] usb 4-1: SerialNumber: syz [ 332.856479][ T5914] usb 4-1: config 0 descriptor?? [ 333.340826][ T9098] binder: BINDER_SET_CONTEXT_MGR already set [ 333.394801][ T9098] binder: 9096:9098 ioctl 4018620d 80000100 returned -16 [ 333.451438][ T9099] binder: 9096:9099 ioctl c0306201 800002c0 returned -14 [ 333.569569][ T5914] snd-usb-audio 4-1:0.1: probe with driver snd-usb-audio failed with error -22 [ 333.591732][ T5914] usb 4-1: USB disconnect, device number 47 [ 333.598511][ T9089] netlink: 108 bytes leftover after parsing attributes in process `syz.0.750'. [ 333.613443][ T7356] udevd[7356]: setting owner of /dev/bus/usb/004/047 to uid=0, gid=0 failed: No such file or directory [ 333.750704][ T30] audit: type=1400 audit(1766713208.423:405): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9101 comm="syz.4.753" [ 333.838446][ T7356] udevd[7356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.841646][ T9150] binder: 9143:9150 ioctl c018620c 800002c0 returned -1 [ 336.399625][ T9154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.430796][ T9154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.594177][ T9154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.652062][ T9154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.914877][ T5914] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 337.083247][ T6212] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 337.101695][ T5914] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 337.117092][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.128722][ T5914] usb 4-1: Product: syz [ 337.146741][ T5914] usb 4-1: Manufacturer: syz [ 337.151760][ T5914] usb 4-1: SerialNumber: syz [ 337.170638][ T5914] usb 4-1: config 0 descriptor?? [ 337.243873][ T6212] usb 5-1: Using ep0 maxpacket: 32 [ 337.254437][ T6212] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 337.265341][ T6212] usb 5-1: config 0 has no interface number 0 [ 337.274225][ T6212] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 337.291227][ T6212] usb 5-1: config 0 interface 196 has no altsetting 0 [ 337.310957][ T6212] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 337.349680][ T6212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.394536][ T6212] usb 5-1: Product: syz [ 337.418724][ T6212] usb 5-1: Manufacturer: syz [ 337.430210][ T6212] usb 5-1: SerialNumber: syz [ 337.455883][ T6212] usb 5-1: config 0 descriptor?? [ 337.474236][ T9158] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 337.640385][ T9163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.676675][ T9163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.906334][ T5914] usb-storage 4-1:0.0: USB Mass Storage device detected [ 337.961926][ T5914] usb 4-1: USB disconnect, device number 48 [ 338.094447][ T6212] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 338.168316][ T6212] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 338.197394][ T6212] usb 5-1: USB disconnect, device number 28 [ 338.255507][ T9173] sctp: [Deprecated]: syz.1.771 (pid 9173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.255507][ T9173] Use struct sctp_sack_info instead [ 338.285418][ T6212] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 338.744136][ T6212] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 340.201920][ T30] audit: type=1400 audit(1766713214.913:406): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9201 comm="syz.1.778" [ 340.873168][ T5968] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 341.057003][ T9219] binder: 9214:9219 ioctl c018620c 800002c0 returned -1 [ 341.068354][ T9219] Set syz1 is full, maxelem 65536 reached [ 341.166067][ T5968] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.180434][ T5968] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 341.199354][ T5968] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.213486][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.263557][ T9211] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 341.445481][ T5968] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.630466][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.825349][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.428530][ T9228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.463714][ T9228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.726780][ T5921] usb 4-1: USB disconnect, device number 49 [ 343.554007][ T9244] netlink: 'syz.4.789': attribute type 10 has an invalid length. [ 343.611049][ T9244] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 343.664630][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 343.787251][ T9252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.791'. [ 344.092976][ T5921] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 344.133031][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 344.275423][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 344.293144][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 344.303064][ T5921] usb 4-1: not running at top speed; connect to a high speed hub [ 344.314792][ T24] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 344.331412][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 344.342894][ T5921] usb 4-1: can't read configurations, error -61 [ 344.353291][ T24] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 344.382940][ T24] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.402958][ T24] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 344.443149][ T24] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 344.461197][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.483032][ T24] usb 5-1: Product: syz [ 344.487276][ T24] usb 5-1: Manufacturer: syz [ 344.491943][ T24] usb 5-1: SerialNumber: syz [ 344.502996][ T5921] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 344.529474][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 344.565261][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input20 [ 344.666398][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 344.676365][ T5921] usb 4-1: not running at top speed; connect to a high speed hub [ 344.686966][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 344.697304][ T5921] usb 4-1: can't read configurations, error -61 [ 344.706919][ T5921] usb usb4-port1: attempt power cycle [ 344.747501][ T30] audit: type=1400 audit(1766713219.483:407): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9262 comm="syz.1.795" [ 344.823386][ T24] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 344.834516][ T24] (id 0x00) [ 345.121046][ T5921] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 345.392072][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 345.458743][ T5921] usb 4-1: not running at top speed; connect to a high speed hub [ 345.480469][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 345.511985][ T5921] usb 4-1: can't read configurations, error -61 [ 345.565464][ T24] rc_core: IR keymap rc-imon-pad not found [ 345.579855][ T24] Registered IR keymap rc-empty [ 345.623646][ T24] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 345.645083][ T24] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 345.676042][ T5921] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 345.714319][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 345.723658][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 345.739338][ T5921] usb 4-1: not running at top speed; connect to a high speed hub [ 345.753173][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 345.766233][ T5921] usb 4-1: can't read configurations, error -61 [ 345.773663][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input21 [ 345.786087][ T5921] usb usb4-port1: unable to enumerate USB device [ 345.803311][ T9274] binder: 9270:9274 ioctl c018620c 800002c0 returned -1 [ 345.920447][ T24] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:29> initialized [ 346.645725][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.698664][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.766732][ T9272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.911030][ T9272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.393730][ T9284] futex_wake_op: syz.3.800 tries to shift op by -1; fix this program [ 347.486886][ T9286] netlink: 76 bytes leftover after parsing attributes in process `syz.3.800'. [ 347.893720][ T9291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.803'. [ 347.958566][ T9256] imon:send_packet: task interrupted [ 347.965293][ T9256] imon:send_packet: packet tx failed (-512) [ 347.976824][ T9256] imon:vfd_write: send packet #1 failed [ 348.014554][ T9277] imon:display_open: display port is already open [ 348.066689][ T24] usb 5-1: USB disconnect, device number 29 [ 348.238790][ T9295] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 348.245359][ T9295] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 348.270035][ T9295] vhci_hcd vhci_hcd.0: Device attached [ 348.393605][ T5901] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 348.513722][ T5914] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 349.295057][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 349.307264][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 349.343549][ T5901] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 349.370528][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.406004][ T5901] usb 4-1: config 0 descriptor?? [ 349.425434][ T9293] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 349.501599][ T5921] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 349.523119][ T9274] Set syz1 is full, maxelem 65536 reached [ 349.550247][ T5921] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 349.764097][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.804'. [ 349.777797][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.795950][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.840660][ T5901] usbhid 4-1:0.0: can't add hid device: -71 [ 349.853632][ T5901] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 350.003108][ T9317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.808'. [ 350.044402][ T5901] usb 4-1: USB disconnect, device number 54 [ 350.963729][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.809'. [ 351.058653][ T5901] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 351.089607][ T9323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.809'. [ 351.630640][ T5901] usb 4-1: device descriptor read/64, error -71 [ 352.050443][ T9333] veth0_to_bridge: entered promiscuous mode [ 352.419906][ T9330] veth0_to_bridge: left promiscuous mode [ 352.678927][ T9346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.815'. [ 353.239577][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'. [ 353.256043][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'. [ 353.909783][ T9361] binder: 9358:9361 ioctl c018620c 800002c0 returned -1 [ 353.992955][ T5921] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 354.284939][ T9361] Set syz1 is full, maxelem 65536 reached [ 354.416338][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 354.437806][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.460208][ T5921] usb 4-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 354.519781][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.596033][ T5921] usb 4-1: config 0 descriptor?? [ 355.053236][ T5921] semitek 0003:1EA7:0907.000E: item fetching failed at offset 0/2 [ 355.092715][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'. [ 355.145521][ T5921] semitek 0003:1EA7:0907.000E: probe with driver semitek failed with error -22 [ 355.236473][ T9375] caif0: entered promiscuous mode [ 355.241718][ T9375] caif0: entered allmulticast mode [ 355.255497][ T24] usb 4-1: USB disconnect, device number 57 [ 356.184700][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.828'. [ 356.425765][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 356.493531][ T6212] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 356.653155][ T6212] usb 5-1: Using ep0 maxpacket: 16 [ 356.689879][ T6212] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.717362][ T6212] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.848918][ T6212] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 356.866774][ T6212] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 356.879385][ T9403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.889470][ T6212] usb 5-1: Manufacturer: syz [ 356.900550][ T6212] usb 5-1: config 0 descriptor?? [ 356.928386][ T9403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.945490][ T9403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.958246][ T9403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.054095][ T5921] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 357.215321][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 358.004156][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.023603][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.063862][ T5921] usb 4-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 358.079289][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.154969][ T5921] usb 4-1: config 0 descriptor?? [ 358.769670][ T5921] glorious 0003:258A:0033.000F: item fetching failed at offset 0/3 [ 358.821244][ T5921] glorious 0003:258A:0033.000F: probe with driver glorious failed with error -22 [ 359.258753][ T5921] usb 5-1: USB disconnect, device number 30 [ 359.390293][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 359.411113][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 359.920200][ T30] audit: type=1326 audit(1766713234.653:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 359.959945][ T9430] binder: 9424:9430 ioctl c018620c 800002c0 returned -1 [ 359.977224][ T9430] Set syz1 is full, maxelem 65536 reached [ 360.014634][ T30] audit: type=1326 audit(1766713234.653:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=237 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 360.274866][ T30] audit: type=1326 audit(1766713234.653:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 360.401316][ T9427] bond2: option mode: invalid value (130) [ 360.434488][ T9427] bond2 (unregistering): Released all slaves [ 360.478150][ T6212] usb 4-1: USB disconnect, device number 58 [ 360.599781][ T30] audit: type=1326 audit(1766713234.653:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 360.630609][ T30] audit: type=1326 audit(1766713234.653:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 360.785015][ T30] audit: type=1326 audit(1766713234.653:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 360.850598][ T30] audit: type=1326 audit(1766713234.653:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 360.897382][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 360.967362][ T30] audit: type=1326 audit(1766713234.653:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 361.030854][ T30] audit: type=1326 audit(1766713234.653:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 361.063702][ T30] audit: type=1326 audit(1766713234.653:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.838" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 361.357813][ T9440] netlink: 'syz.0.843': attribute type 1 has an invalid length. [ 361.390412][ T9440] netlink: 'syz.0.843': attribute type 1 has an invalid length. [ 361.477088][ T9440] netlink: 'syz.0.843': attribute type 1 has an invalid length. [ 361.513533][ T6212] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 361.625566][ T5881] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 361.676482][ T6212] usb 2-1: Using ep0 maxpacket: 8 [ 361.686755][ T6212] usb 2-1: unable to get BOS descriptor or descriptor too short [ 361.705257][ T6212] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 361.725577][ T6212] usb 2-1: config 4 has no interface number 0 [ 361.734817][ T6212] usb 2-1: config 4 interface 30 has no altsetting 0 [ 361.756532][ T6212] usb 2-1: string descriptor 0 read error: -22 [ 361.777140][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 361.791387][ T6212] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 361.801957][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 361.825675][ T5881] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 361.840432][ T6212] usb 2-1: New USB device strings: Mfr=127, Product=2, SerialNumber=3 [ 361.853491][ T5881] usb 4-1: can't read configurations, error -61 [ 361.876404][ T6212] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 361.907685][ T6212] dw2102: su3000_power_ctrl: 1, initialized 0 [ 361.924365][ T6212] dvb-usb: bulk message failed: -22 (2/0) [ 361.954555][ T6212] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 361.977191][ T6212] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 361.993655][ T5881] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 362.016096][ T6212] usb 2-1: media controller created [ 362.034263][ T6212] dvb-usb: bulk message failed: -22 (6/0) [ 362.040518][ T6212] dw2102: i2c transfer failed. [ 362.057450][ T6212] dvb-usb: bulk message failed: -22 (6/0) [ 362.073564][ T6212] dw2102: i2c transfer failed. [ 362.085380][ T9442] dvb-usb: bulk message failed: -22 (4/0) [ 362.094349][ T9442] dw2102: i2c transfer failed. [ 362.099308][ T9442] dvb-usb: bulk message failed: -22 (3/0) [ 362.122553][ T9442] dw2102: i2c transfer failed. [ 362.128620][ T9442] dvb-usb: bulk message failed: -22 (4/0) [ 362.143210][ T9442] dw2102: i2c transfer failed. [ 362.144081][ T5901] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 362.158969][ T6212] dvb-usb: bulk message failed: -22 (6/0) [ 362.173484][ T6212] dw2102: i2c transfer failed. [ 362.178338][ T6212] dvb-usb: bulk message failed: -22 (6/0) [ 362.185610][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 362.201934][ T6212] dw2102: i2c transfer failed. [ 362.209858][ T5881] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 362.219809][ T5881] usb 4-1: can't read configurations, error -61 [ 362.228150][ T6212] dvb-usb: bulk message failed: -22 (6/0) [ 362.236925][ T5881] usb usb4-port1: attempt power cycle [ 362.244395][ T6212] dw2102: i2c transfer failed. [ 362.255136][ T6212] dvb-usb: bulk message failed: -22 (6/0) [ 362.274453][ T6212] dw2102: i2c transfer failed. [ 362.279455][ T6212] dvb-usb: MAC address: 02:02:02:02:02:02 [ 362.318680][ T6212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.345941][ T5901] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 362.370846][ T5901] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 362.388489][ T5901] usb 5-1: config 0 interface 0 has no altsetting 0 [ 362.397467][ T6212] dvb-usb: bulk message failed: -22 (3/0) [ 362.405260][ T6212] dw2102: command 0x0e transfer failed. [ 362.413954][ T5901] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 362.425229][ T6212] dvb-usb: bulk message failed: -22 (3/0) [ 362.431104][ T6212] dw2102: command 0x0e transfer failed. [ 362.438343][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.457274][ T5901] usb 5-1: config 0 descriptor?? [ 362.464771][ T9453] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 362.612932][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.852'. [ 362.655512][ T5881] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 362.695114][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 362.705740][ T5881] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 362.766918][ T6212] dvb-usb: bulk message failed: -22 (3/0) [ 362.783730][ T6212] dw2102: command 0x0e transfer failed. [ 362.793727][ T5881] usb 4-1: can't read configurations, error -61 [ 362.807455][ T6212] dvb-usb: bulk message failed: -22 (3/0) [ 362.828567][ T6212] dw2102: command 0x0e transfer failed. [ 362.846213][ T6212] dvb-usb: bulk message failed: -22 (1/0) [ 362.873560][ T6212] dw2102: command 0x51 transfer failed. [ 362.884552][ T9453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.901900][ T6212] dvb-usb: bulk message failed: -22 (5/0) [ 362.916121][ T6212] dw2102: i2c probe for address 0x68 failed. [ 362.922261][ T9453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.961515][ T5881] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 363.037280][ T6212] dvb-usb: bulk message failed: -22 (5/0) [ 363.054335][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 363.063886][ T5881] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 363.074329][ T5881] usb 4-1: can't read configurations, error -61 [ 363.085173][ T6212] dw2102: i2c probe for address 0x69 failed. [ 363.095595][ T5881] usb usb4-port1: unable to enumerate USB device [ 363.106227][ T6212] dvb-usb: bulk message failed: -22 (5/0) [ 363.112020][ T6212] dw2102: i2c probe for address 0x6a failed. [ 363.143683][ T6212] dw2102: probing for demodulator failed. Is the external power switched on? [ 363.154437][ T5901] usbhid 5-1:0.0: can't add hid device: -71 [ 363.160994][ T5901] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 363.181377][ T6212] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 363.249453][ T5901] usb 5-1: USB disconnect, device number 31 [ 363.583397][ T6212] rc_core: IR keymap rc-tt-1500 not found [ 363.589502][ T6212] Registered IR keymap rc-empty [ 363.620816][ T6212] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 363.655225][ T6212] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input23 [ 363.744537][ T6212] dvb-usb: schedule remote query interval to 250 msecs. [ 363.761937][ T6212] dw2102: su3000_power_ctrl: 0, initialized 1 [ 363.779926][ T6212] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 363.829503][ T6212] usb 2-1: USB disconnect, device number 41 [ 364.036248][ T6212] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 364.108662][ T9496] binder: 9488:9496 ioctl c018620c 800002c0 returned -1 [ 364.119329][ T9496] Set syz1 is full, maxelem 65536 reached [ 364.738841][ T9482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.856'. [ 364.867138][ T9483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.969679][ T9483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.060271][ C0] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 365.075272][ T9482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.856'. [ 365.403571][ T5881] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 365.566291][ T5881] usb 2-1: not running at top speed; connect to a high speed hub [ 365.585195][ T5881] usb 2-1: config 8 has an invalid interface number: 232 but max is 1 [ 365.608973][ T5881] usb 2-1: config 8 has an invalid descriptor of length 1, skipping remainder of the config [ 365.663628][ T6212] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 365.691710][ T5881] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 365.721227][ T5881] usb 2-1: config 8 has no interface number 0 [ 365.759932][ T5881] usb 2-1: config 8 interface 232 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 365.781500][ T5881] usb 2-1: config 8 interface 232 altsetting 255 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 365.796778][ T5881] usb 2-1: config 8 interface 232 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 365.839182][ T5881] usb 2-1: config 8 interface 232 has no altsetting 0 [ 365.854457][ T5881] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0162, bcdDevice=f9.2c [ 365.878077][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.888126][ T6212] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 365.897837][ T6212] usb 5-1: config 0 has no interface number 0 [ 365.947239][ T6212] usb 5-1: config 0 interface 41 has no altsetting 0 [ 365.959367][ T5881] usb 2-1: Product: syz [ 365.967588][ T5881] usb 2-1: Manufacturer: ч [ 365.974251][ T5881] usb 2-1: SerialNumber: syz [ 365.981227][ T6212] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 366.015131][ T5881] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 366.030345][ T6212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.045512][ T5881] usb 2-1: no configuration chosen from 1 choice [ 366.055605][ T6212] usb 5-1: Product: syz [ 366.059882][ T6212] usb 5-1: Manufacturer: syz [ 366.073510][ T6212] usb 5-1: SerialNumber: syz [ 366.092930][ T6212] usb 5-1: config 0 descriptor?? [ 366.724644][ T6212] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -32 [ 367.239672][ T9549] netlink: 84 bytes leftover after parsing attributes in process `syz.3.874'. [ 367.668124][ T9554] binder: 9551:9554 ioctl c018620c 800002c0 returned -1 [ 367.988634][ T9559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.140492][ T9559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.174649][ T6212] usb 2-1: USB disconnect, device number 42 [ 368.938196][ T6212] usb 5-1: USB disconnect, device number 32 [ 369.058821][ T9569] netlink: 68 bytes leftover after parsing attributes in process `syz.0.879'. [ 369.618480][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 369.685858][ T9574] binder: 9570:9574 ioctl c018620c 800002c0 returned -1 [ 370.715450][ T9591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.884'. [ 370.839066][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 370.839089][ T30] audit: type=1326 audit(1766713245.443:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.2.883" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x0 [ 371.660535][ T5901] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 371.823534][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 371.835002][ T5901] usb 5-1: config 0 has an invalid interface number: 140 but max is 0 [ 371.856993][ T5901] usb 5-1: config 0 has no interface number 0 [ 371.886188][ T5901] usb 5-1: New USB device found, idVendor=093a, idProduct=2600, bcdDevice=b0.53 [ 371.909797][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.935085][ T5901] usb 5-1: Product: syz [ 371.939297][ T5901] usb 5-1: Manufacturer: syz [ 371.946219][ T5901] usb 5-1: SerialNumber: syz [ 371.980369][ T5901] usb 5-1: config 0 descriptor?? [ 372.074648][ T9576] Set syz1 is full, maxelem 65536 reached [ 372.218308][ T5901] gspca_main: pac7311-2.14.0 probing 093a:2600 [ 372.247228][ T5901] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 372.269449][ T5901] pac7311 5-1:0.140: probe with driver pac7311 failed with error -71 [ 372.305565][ T5901] usb 5-1: USB disconnect, device number 33 [ 372.316964][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.889'. [ 372.339218][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.889'. [ 372.445669][ T9607] netlink: 4528 bytes leftover after parsing attributes in process `syz.0.890'. [ 372.456719][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 372.527482][ T9609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.891'. [ 372.545231][ T9609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.891'. [ 372.566009][ T9612] loop7: detected capacity change from 0 to 16384 [ 372.590859][ T9609] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 372.613026][ T24] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 372.636143][ T9609] bond2 (unregistering): Released all slaves [ 372.821952][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.841847][ T24] usb 4-1: config 0 has no interface number 0 [ 372.860316][ T24] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 372.870269][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.890752][ T24] usb 4-1: config 0 descriptor?? [ 372.909528][ T24] usb 4-1: selecting invalid altsetting 1 [ 372.928577][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 372.959033][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 373.055875][ T24] DVB: Unable to find symbol cx22700_attach() [ 373.055908][ C0] I/O error, dev loop7, sector 12928 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 373.074011][ T9614] loop7: detected capacity change from 16384 to 0 [ 373.080579][ C0] I/O error, dev loop7, sector 12928 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 373.090681][ C0] Buffer I/O error on dev loop7, logical block 1616, async page read [ 373.226800][ T24] DVB: Unable to find symbol tda10046_attach() [ 373.250964][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 373.306390][ T9610] Buffer I/O error on dev loop7, logical block 800, lost async page write [ 373.331866][ T24] usb 4-1: USB disconnect, device number 63 [ 373.351454][ T9610] Buffer I/O error on dev loop7, logical block 801, lost async page write [ 373.374740][ T9610] Buffer I/O error on dev loop7, logical block 802, lost async page write [ 373.390188][ T9610] Buffer I/O error on dev loop7, logical block 803, lost async page write [ 373.425151][ T9610] Buffer I/O error on dev loop7, logical block 804, lost async page write [ 373.436493][ T9610] Buffer I/O error on dev loop7, logical block 805, lost async page write [ 373.448382][ T9610] Buffer I/O error on dev loop7, logical block 806, lost async page write [ 373.458620][ T9610] Buffer I/O error on dev loop7, logical block 807, lost async page write [ 373.468286][ T9610] Buffer I/O error on dev loop7, logical block 808, lost async page write [ 373.514695][ T5901] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 373.787703][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 373.799228][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB8, changing to 0x88 [ 373.811873][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 373.835743][ T5901] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 373.845990][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.855718][ T5901] usb 2-1: Product: syz [ 373.859984][ T5901] usb 2-1: Manufacturer: syz [ 373.932361][ T5901] usb 2-1: SerialNumber: syz [ 374.055197][ T5901] usb 2-1: config 0 descriptor?? [ 374.070035][ T5901] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 88, bSynchAddress 07 [ 374.175585][ T9625] pim6reg: entered allmulticast mode [ 374.201698][ T9632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.227414][ T9632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.304554][ T9625] pim6reg: left allmulticast mode [ 374.358950][ T9632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.376215][ T9632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.444749][ T5901] usb 2-1: USB disconnect, device number 43 [ 374.999206][ T9640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.900'. [ 375.012909][ T9640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.900'. [ 375.066781][ T9643] binder: 9637:9643 ioctl c018620c 800002c0 returned -1 [ 375.081117][ T9643] Set syz1 is full, maxelem 65536 reached [ 375.352969][ T5921] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 375.502924][ T5921] usb 4-1: device descriptor read/64, error -71 [ 375.774951][ T5921] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 375.955306][ T5921] usb 4-1: device descriptor read/64, error -71 [ 376.143239][ T5921] usb usb4-port1: attempt power cycle [ 376.533208][ T5921] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 376.574642][ T5921] usb 4-1: device descriptor read/8, error -71 [ 376.701617][ T5968] IPVS: starting estimator thread 0... [ 376.913844][ T9662] IPVS: using max 29 ests per chain, 69600 per kthread [ 376.957588][ T6212] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 377.065553][ T5921] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 377.131539][ T5921] usb 4-1: device descriptor read/8, error -71 [ 377.273528][ T5921] usb usb4-port1: unable to enumerate USB device [ 377.323384][ T6212] usb 5-1: Using ep0 maxpacket: 32 [ 377.344952][ T6212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.373541][ T6212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.413469][ T6212] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 377.446286][ T6212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.508739][ T6212] usb 5-1: config 0 descriptor?? [ 377.590220][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.905'. [ 377.630747][ T9665] openvswitch: netlink: Key type 132 is out of range max 32 [ 378.040593][ T6212] glorious 0003:258A:0033.0010: item fetching failed at offset 0/3 [ 378.205000][ T6212] glorious 0003:258A:0033.0010: probe with driver glorious failed with error -22 [ 378.470704][ T5921] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 378.638915][ T5921] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 378.653164][ T5921] usb 2-1: config 0 has no interface number 0 [ 378.667738][ T5921] usb 2-1: too many endpoints for config 0 interface 186 altsetting 179: 188, using maximum allowed: 30 [ 378.707048][ T5921] usb 2-1: config 0 interface 186 altsetting 179 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 378.787956][ T5921] usb 2-1: config 0 interface 186 has no altsetting 0 [ 378.808664][ T5921] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 378.829295][ T9681] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 378.842984][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.860487][ T9681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.876263][ T5921] usb 2-1: config 0 descriptor?? [ 378.893170][ T9681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.927436][ T9681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.967680][ T9681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.110436][ T5921] usb 2-1: string descriptor 0 read error: -71 [ 379.120809][ T5921] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 379.143201][ T5921] gp8psk: usb in 128 operation failed. [ 379.160635][ T5921] gp8psk: usb in 137 operation failed. [ 379.200938][ T5921] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 379.219380][ T5921] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 379.290676][ T5921] usb 2-1: USB disconnect, device number 44 [ 379.895635][ T6212] usb 5-1: USB disconnect, device number 34 [ 380.102884][ T5921] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 380.252798][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 380.260667][ T5921] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 380.281531][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.294618][ T9712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.917'. [ 380.337321][ T5921] usb 2-1: config 0 descriptor?? [ 380.370320][ T5921] gspca_main: sq930x-2.14.0 probing 041e:403c [ 380.595574][ T9719] team0: Port device ip6gre0 removed [ 380.645229][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.660475][ T6212] skbuff: skb_under_panic: text:ffffffff8a25e7d8 len:136 put:40 head:ffff88807a69c000 data:ffff88807a69bfe8 tail:0x70 end:0x6c0 dev:team0 [ 380.680228][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.696375][ T9719] bond0: (slave batadv0): Releasing backup interface [ 380.744471][ T6212] ------------[ cut here ]------------ [ 380.750059][ T6212] kernel BUG at net/core/skbuff.c:213! [ 380.766968][ T6212] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 380.773304][ T6212] CPU: 0 UID: 0 PID: 6212 Comm: kworker/0:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.784285][ T6212] Tainted: [L]=SOFTLOCKUP [ 380.788634][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 380.798721][ T6212] Workqueue: mld mld_ifc_work [ 380.803476][ T6212] RIP: 0010:skb_panic+0x157/0x160 [ 380.808590][ T6212] Code: c7 60 9c 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 ce 6a f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 380.828329][ T6212] RSP: 0018:ffffc9000c017440 EFLAGS: 00010282 [ 380.834455][ T6212] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 44620dd777f92000 [ 380.842468][ T6212] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 380.850490][ T6212] RBP: 00000000000006c0 R08: ffffc9000c0171a7 R09: 1ffff92001802e34 [ 380.858673][ T6212] R10: dffffc0000000000 R11: fffff52001802e35 R12: ffff888079803150 [ 380.866892][ T6212] R13: ffff88807a69c000 R14: ffff88807a69bfe8 R15: 0000000000000070 [ 380.874937][ T6212] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 380.884108][ T6212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.894085][ T6212] CR2: 00000000f74399b4 CR3: 000000005ffee000 CR4: 00000000003526f0 [ 380.902209][ T6212] Call Trace: [ 380.905527][ T6212] [ 380.908502][ T6212] ? ip6gre_header+0xc8/0x790 [ 380.913236][ T6212] ? ip6gre_header+0xc8/0x790 [ 380.917967][ T6212] skb_push+0xc3/0xe0 [ 380.922193][ T6212] ip6gre_header+0xc8/0x790 [ 380.926776][ T6212] ? __pfx_ip6gre_header+0x10/0x10 [ 380.931943][ T6212] ? neigh_connected_output+0x1ea/0x460 [ 380.937535][ T6212] ? read_seqbegin+0xac/0x180 [ 380.942284][ T6212] ? lockdep_hardirqs_on+0x7b/0x110 [ 380.947529][ T6212] ? __pfx_ip6gre_header+0x10/0x10 [ 380.952692][ T6212] neigh_connected_output+0x286/0x460 [ 380.958132][ T6212] ? ip6_output+0x126/0x550 [ 380.962742][ T6212] ip6_output+0x340/0x550 [ 380.967124][ T6212] NF_HOOK+0x9e/0x380 [ 380.971163][ T6212] ? NF_HOOK+0x101/0x380 [ 380.975432][ T6212] ? __pfx_NF_HOOK+0x10/0x10 [ 380.980048][ T6212] ? __pfx_dst_output+0x10/0x10 [ 380.984920][ T6212] ? lockdep_hardirqs_on+0x7b/0x110 [ 380.990145][ T6212] ? __local_bh_enable_ip+0xd0/0x130 [ 380.995490][ T6212] ? icmp6_dst_alloc+0x3a5/0x420 [ 381.000497][ T6212] mld_sendpack+0x8d4/0xe60 [ 381.004061][ T5921] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 381.005035][ T6212] ? mld_sendpack+0x1e7/0xe60 [ 381.015572][ T6212] ? __pfx_mld_sendpack+0x10/0x10 [ 381.020639][ T6212] mld_ifc_work+0x83e/0xd60 [ 381.025179][ T6212] ? process_scheduled_works+0x9ef/0x1770 [ 381.031014][ T6212] process_scheduled_works+0xad1/0x1770 [ 381.036589][ T6212] ? __pfx_process_scheduled_works+0x10/0x10 [ 381.042608][ T6212] ? do_raw_spin_lock+0x121/0x290 [ 381.044350][ T5921] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 381.047769][ T6212] worker_thread+0x8a0/0xda0 [ 381.060102][ T6212] ? __kthread_parkme+0x7b/0x200 [ 381.065062][ T6212] kthread+0x711/0x8a0 [ 381.069152][ T6212] ? __pfx_worker_thread+0x10/0x10 [ 381.074271][ T6212] ? __pfx_kthread+0x10/0x10 [ 381.078875][ T6212] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.084097][ T6212] ? __pfx_kthread+0x10/0x10 [ 381.088702][ T6212] ret_from_fork+0x510/0xa50 [ 381.093313][ T6212] ? __pfx_ret_from_fork+0x10/0x10 [ 381.098427][ T6212] ? __switch_to+0xc9e/0x1480 [ 381.103113][ T6212] ? __pfx_kthread+0x10/0x10 [ 381.107716][ T6212] ret_from_fork_asm+0x1a/0x30 [ 381.112508][ T6212] [ 381.115558][ T6212] Modules linked in: [ 381.121436][ T6212] ---[ end trace 0000000000000000 ]--- [ 381.181060][ T6212] RIP: 0010:skb_panic+0x157/0x160 [ 381.188369][ T6212] Code: c7 60 9c 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 ce 6a f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 381.196271][ T5921] usb 2-1: USB disconnect, device number 45 [ 381.220478][ T6212] RSP: 0018:ffffc9000c017440 EFLAGS: 00010282 [ 381.228770][ T6212] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 44620dd777f92000 [ 381.239151][ T6212] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 381.248601][ T6212] RBP: 00000000000006c0 R08: ffffc9000c0171a7 R09: 1ffff92001802e34 [ 381.264434][ T6212] R10: dffffc0000000000 R11: fffff52001802e35 R12: ffff888079803150 [ 381.276565][ T6212] R13: ffff88807a69c000 R14: ffff88807a69bfe8 R15: 0000000000000070 [ 381.288727][ T6212] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 381.300213][ T6212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.310145][ T6212] CR2: 000000000c375752 CR3: 0000000052f18000 CR4: 00000000003526f0 [ 381.319635][ T6212] Kernel panic - not syncing: Fatal exception [ 381.326262][ T6212] Kernel Offset: disabled [ 381.330719][ T6212] Rebooting in 86400 seconds..