last executing test programs: 7m36.828397692s ago: executing program 1 (id=972): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x5}, {0x5}, {0x6}]}) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x82e3d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) pidfd_send_signal(r0, 0x40, &(0x7f0000000040)={0x2d, 0x8, 0x8}, 0x0) syslog(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 7m34.910529919s ago: executing program 1 (id=980): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac1414000000000000000000000000000000000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 7m34.152597486s ago: executing program 1 (id=981): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="140002000000000000000000f1"], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff00", @ANYRES32=r3, @ANYBLOB="01"], 0x3c}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @remote, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r9 = dup2(r0, r0) write$P9_RSTATFS(r9, &(0x7f00000003c0)={0x43, 0x9, 0x2f00, {0x0, 0x0, 0x2000000, 0x3be, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x100000001, 0x7fffffff}}, 0x43) 7m33.499387622s ago: executing program 1 (id=985): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x25dfdbfd, {0xa, 0x10, 0x10, 0x80, 0x0, 0x0, 0x0, 0x3, 0x16}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x20}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 7m32.960201287s ago: executing program 1 (id=987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000024000000000000010000040900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000064000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100000000fd8000000008000140002d441208000240000000000900010073797a30"], 0xd8}}, 0x0) 7m32.926052184s ago: executing program 1 (id=988): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xe7c5, 0x3, {0x0}, {}, 0x7, 0x2}) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x3, 0x2, 0x2, 0x85b, 0x5c, 0x1, 0xe2f, 0x3, 0x1}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb0220000202050905e6", @ANYBLOB="fe"], 0x0) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f00000004c0), 0x1004) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009) r5 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r6 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r6, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r5, 0x0) r7 = syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x4, 0x90, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "6875a7e4d4"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xa38c, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0x1000, 0xa}, [@acm={0x4, 0x24, 0x2, 0x1}, @obex={0x5, 0x24, 0x15, 0x8000}, @obex={0x5, 0x24, 0x15, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xeb, 0xfe, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x9, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xa7, 0x80, 0x1}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x3d, 0xf, 0x81, 0x40, 0x2}, 0x37, &(0x7f00000001c0)={0x5, 0xf, 0x37, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0xc, 0xb5}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "d864738f501e8dd97b59690f37d7ebfa"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x84, "77dfb4d1389099fc49dfdbb084710abb"}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xe8b9}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1401}}, {0x40, &(0x7f0000000280)=@string={0x40, 0x3, "fe69b0e2e1785735aa23764f10305b97e5676ad893f9e996e5c7018f83b082994954f945c00ab83c852497891201121faa38e313b6c447a57217f9e14ff5"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x807}}, {0x45, &(0x7f0000000340)=@string={0x45, 0x3, "39ca8d166a84dfd46f935a6adf9b74c56c47a3b4bb99f65f10073db1fd93601f4e988da86442c3ed71632656cdb767f8c3cf5e893c76c7c595ca7105bb08fd36722ae7"}}]}) syz_usb_ep_read(r7, 0x9, 0x5f, &(0x7f0000000440)=""/95) 7m17.862421492s ago: executing program 32 (id=988): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xe7c5, 0x3, {0x0}, {}, 0x7, 0x2}) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x3, 0x2, 0x2, 0x85b, 0x5c, 0x1, 0xe2f, 0x3, 0x1}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb0220000202050905e6", @ANYBLOB="fe"], 0x0) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f00000004c0), 0x1004) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009) r5 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r6 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r6, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r5, 0x0) r7 = syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x4, 0x90, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "6875a7e4d4"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xa38c, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0x1000, 0xa}, [@acm={0x4, 0x24, 0x2, 0x1}, @obex={0x5, 0x24, 0x15, 0x8000}, @obex={0x5, 0x24, 0x15, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xeb, 0xfe, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x9, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xa7, 0x80, 0x1}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x3d, 0xf, 0x81, 0x40, 0x2}, 0x37, &(0x7f00000001c0)={0x5, 0xf, 0x37, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0xc, 0xb5}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "d864738f501e8dd97b59690f37d7ebfa"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x84, "77dfb4d1389099fc49dfdbb084710abb"}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xe8b9}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1401}}, {0x40, &(0x7f0000000280)=@string={0x40, 0x3, "fe69b0e2e1785735aa23764f10305b97e5676ad893f9e996e5c7018f83b082994954f945c00ab83c852497891201121faa38e313b6c447a57217f9e14ff5"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x807}}, {0x45, &(0x7f0000000340)=@string={0x45, 0x3, "39ca8d166a84dfd46f935a6adf9b74c56c47a3b4bb99f65f10073db1fd93601f4e988da86442c3ed71632656cdb767f8c3cf5e893c76c7c595ca7105bb08fd36722ae7"}}]}) syz_usb_ep_read(r7, 0x9, 0x5f, &(0x7f0000000440)=""/95) 8.668803099s ago: executing program 3 (id=2892): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x740, 0x328, 0x580, 0x580, 0xd0, 0x328, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x2803, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) 8.409737222s ago: executing program 3 (id=2894): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="44010000100013070000e7ae00000000ac1e00010000000000000000000000007f000001000000000000000080ffffff00000000000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d432000000ac141400000000000000000000000000fdffffffffffffff00000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000100000000000000000000000000000000000010000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="010000"], 0x144}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 7.784704871s ago: executing program 3 (id=2896): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x3b, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0405626, 0x0) r4 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 7.334511306s ago: executing program 3 (id=2897): socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x590, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r4, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 6.254457606s ago: executing program 4 (id=2902): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r3, 0x3, r0}) 6.070775358s ago: executing program 4 (id=2905): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000010000000e0000001000000000000000200000000ac1414bb00000000000000000d00000000000000ffff00000a00800000000000", @ANYRES16=r0, @ANYRES16=r0], 0x1fc}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 5.907248537s ago: executing program 4 (id=2907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x3b, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0405626, 0x0) r4 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 4.015010915s ago: executing program 4 (id=2911): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x4048800) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) fadvise64(r2, 0x0, 0x1000, 0x1) sendmsg$nl_generic(r3, 0x0, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3f3687f14319"}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x400c000) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r7, 0x851, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysinfo(&(0x7f0000000280)=""/81) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x7}}]}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 3.196351816s ago: executing program 3 (id=2916): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e402010902"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f00000000c0)={0x0, 0xd69f, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 2.864865392s ago: executing program 2 (id=2917): syz_open_dev$vim2m(&(0x7f0000000140), 0x100000000, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000070000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 2.541979342s ago: executing program 2 (id=2919): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x61, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xf4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc4, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0xfc], 0x80, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x68, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xc6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x40}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7fffffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7ff}]}]}]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x840}, 0x4008804) 2.322947667s ago: executing program 2 (id=2920): r0 = gettid() tkill(r0, 0x11) r1 = syz_open_procfs(r0, &(0x7f0000000280)='environ\x00') lseek(r1, 0x8000000000000001, 0x2) 2.199635366s ago: executing program 4 (id=2921): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x3b, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0405626, 0x0) r4 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 2.020809786s ago: executing program 2 (id=2922): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x740, 0x328, 0x580, 0x580, 0xd0, 0x328, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x3f00, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) 1.756295035s ago: executing program 5 (id=2923): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) syz_usb_connect(0x1, 0x56, &(0x7f0000000000)=ANY=[], 0x0) 1.730217988s ago: executing program 2 (id=2924): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0xc800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xa6, 0x0, 0x5, 0x0, 0xfffffffffffffdfc}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xff, 0x2, 0x0, 0x800000000000000}, {0x2, 0x33, 0x0, 0x0, 0x4, 0x5, 0x4, 0x0, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0xff, 0x0, 0x0, 0x2, 0x7ffffffe], 0x80a0000}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x14, 0x29, 0x1, 0x70bd2a, 0x25dfdbfb, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x1}, {0x0, 0x1}, {0x5, 0xb}]}]}]}]}, 0x30}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000004400)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000005840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r7, &(0x7f0000010680)={0x0, 0x0, &(0x7f0000010640)={&(0x7f0000005880)={0x24, r8, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x78}, @val={0x8, 0x3, r9}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4881}, 0x10) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r4, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109029f0003010070000904000000010100000a24010000000201020d2406000003080000000000000c24020201010608000001000c24020000000300000000"], 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001400b59500100000000000000a780000", @ANYRES32=r12, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000000000101f0ffff000015000000000014000100fe80"], 0x54}}, 0x48010) 1.572681737s ago: executing program 0 (id=2925): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000280)={0x191, 0x140, 0x1e0, 0x3f, 0x5, 0x1, 0x0, 0x0, {}, {}, {}, {0x2, 0x0, 0x20000000}, 0x1, 0x100, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4, 0x100}) 1.336736081s ago: executing program 0 (id=2926): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x1, 0x0, 0x80}, 0x10000}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20000}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@loopback, 0x4d4, 0x33}, 0x0, @in=@multicast1, 0x3, 0x0, 0x0, 0x8}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0xa, @in6=@mcast2, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x0) 1.291067814s ago: executing program 0 (id=2927): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r3, 0x3, r0}) 1.088395005s ago: executing program 5 (id=2928): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r0, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) 1.066555135s ago: executing program 0 (id=2929): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) (async) r2 = syz_usb_connect(0x1, 0x3e7, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xfb, 0x98, 0x83, 0x10, 0x13d3, 0x3336, 0xa4c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d5, 0x1, 0x3, 0x8, 0x40, 0x80, [{{0x9, 0x4, 0x1e, 0xba, 0xa, 0x30, 0xe9, 0x45, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x800, 0xff, 0x3, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x32}, @mbim_extended={0x8, 0x24, 0x1c, 0x69, 0x10, 0x699}]}], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x2, 0x89, 0x55, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xb8bc}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x7f, 0x8, 0x8, [@generic={0x92, 0x10, "43633d3c22d42f7a8219952dad6888eb37f6c532e430d3c1280fa2f0c31a15355a292fd4c0c6d6be2d9cf698847b01ad18b219470a631438228808e2cbb3877a95b4e1f8689da3f825187d1bbe56c13d27e3c90488219fd08e4bc1f06cf294e006950084ebfc7415fde477013857e0fadf78dd69e58f623427480a432a97b2bb36851df58bf81b06fbe6f43b9f3d2b6a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x38, 0xae1}]}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x3, 0x1, 0xf6, [@generic={0xcf, 0x23, "6b620a739016f5e8fa5b052e6e936841b27707d1744ccf16544954427cb02539e3831ad51580ec0eb3ca99f7f4102625b6164ef1cad70decc2fb6cda4472ea18c2a1446c87f9903fc909fad151f1ab849c6552f9236c14133cd327be7dd8e6cb92a94ea818fc7912745b8594a7ffbe8b8755439c518a01579d4153a8a4cf16eeb2c34b916d524d48a715854f1759cc22bee3c2f97265f269ae506154f0afa84581aadb3b65377dcbd145537485a5257d2488c9c75af5941ccdc13419ad94edfae86855d674d6f204bc519be401"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x87, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x5ec}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x9, 0x49, 0x6, [@generic={0xdc, 0x10, "40ba7060d381b9fd82325ab33ca06dbd975d3786ecdab7c7db31a13118c0312c04ac8f33a13c047bff26edde6f2c8299812167e675dbb3de9501ddd0a20259f4c3f4f3841958bc7e6e6f6146ee530c1a9e6c3bb4239ec19241b0632978786b5c22767ab33e5c3b2734427463965fca4c2ef52688ce90277dc2292e1b7dc4c2550ef5da882b5796c62ad6600444b4cabe7bdcd30a1026fd5489fee2490d0a21262a3c3ae30f6558a955f04a3cfb794774747e1d36cfdc7496fde16a1900bf0c8379e5bc4fcac684065fa25ca87ff8b933ad91ce233d3926c56162"}, @generic={0xae, 0x1, "4981ae2ed20847a7e4cb7e8ea3ad24523eea87bf9903eeeac464ff87d1388d802f8b920db04a480fabd76edc434410b09860060eb1d357951bf4b13c051c9131ac0f489ba928925d3b8103b364e36638baff8e98a46682aa2901eefb8b94f8fd6bc3ae3a9b304b630b440c6bcbc567d1e86e10c8c2b2def7138df09db942503510ac755ddba757399e9e21727068448b4b48fd23a11cb8d681788ced7362ad825ecff086bcfa800d28495fba"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x90, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x800}, @generic={0xb, 0xc, "1d241bab82318173cc"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x5, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x400}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x3, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x7000}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf4, 0x6}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x8f, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xfffa}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x3, 0x9, 0x9d, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x2885}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x4, 0xfe, 0x8, 0x40, 0x4}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xff, 0x8, 0x7}]}}) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000003c0)={0x14, &(0x7f0000000340)={0xa0, 0x22, 0xa, {0xa, 0x6, "1584434d57434ce4"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000400)={0x40, 0x17, 0x12, "c5c1869bf5da9097bed9e3d70bf3b4b7373d"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xa3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x8}}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@RTM_DELMDB={0x0, 0x55, 0x10, 0x70bd2c, 0x25dfdbfe, {0x7, r1}, [@MDBA_SET_ENTRY={0x0, 0x1, {r1, 0x0, 0x3, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8edd}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r1, 0x1, 0xbca4ed5001287939, 0x1, {@in6_addr=@mcast2, 0x86dd}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r1, 0x1, 0x1, 0x3, {@ip4=@private=0xa010101}}}, @MDBA_SET_ENTRY={0x0, 0x1, {0x0, 0x0, 0x4, 0x3, {@in6_addr=@mcast2, 0x800}}}]}, 0x50}, 0x1, 0xba01, 0x0, 0x10}, 0x0) 916.54307ms ago: executing program 3 (id=2930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f00000012c0)=[{&(0x7f0000000040)=':', 0x1}], 0x1) r3 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = dup(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r8, 0xc6c3, 0x0) write$UHID_INPUT(r7, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000140)={0x5, r3, 0x1c, {0x9}, 0x6}, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x44}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x8c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x546426fb}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x2000a800) 902.327246ms ago: executing program 5 (id=2931): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000003a00)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x66, 0x2, "3f023ec8a06819bd70e58c762459e55dc2be7d23c887280c427c99e4e59d123ac235a78a68bc9daf672d4816b070f10e0b49a5ce4feac328a43d95524c2724", 0x1d}, 0x80, &(0x7f0000003d00)=[{0x0}, {&(0x7f0000003b80)="8cbc28", 0x3}], 0x2}, 0xdc050000}], 0x5, 0x885) 855.926734ms ago: executing program 4 (id=2932): name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x600) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x50) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x938, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x90c, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x6b}, @TCA_U32_ACT={0x15c, 0x7, [@m_police={0x158, 0x16, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc000000, 0x6, 0x5, 0x0, 0x2, {0xc, 0x0, 0x81, 0x4, 0x40, 0x9}, {0x2, 0x2, 0xe7b, 0x8, 0x8000, 0x5f4}, 0x2, 0x2, 0xffff}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0x0, 0xffff7603, 0x1, {0x1, 0x0, 0xcf6c, 0x4, 0x6, 0x7bd}, {0x3, 0x2, 0x7, 0xfff9, 0x4, 0x7}, 0x80004, 0xb, 0xd1}}]]}, {0x89, 0x6, "d5b1aa9ccdd75f5503beb2ab5df353def7256c1e6d58e1dbef48524b51873eb2e8b99bf0efc400a35ba938c9ac6787fa45822d350ad0a135dfa0899e9d192f0ce57816ac529484d58a2aba2573a635024ee94a70295b7d64a7e82a2e27df3538987da0c085a351bd36caec25454539156d7aa57b9bb113b2d7e59d4c18441657e7722bd6cb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_U32_MARK={0x10, 0xa, {0x741, 0xe90}}, @TCA_U32_MARK={0x10, 0xa, {0x1000, 0x7}}, @TCA_U32_HASH={0x8, 0x2, 0x58066f45}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_MARK={0x10, 0xa, {0x4}}, @TCA_U32_SEL={0x764, 0x5, {0xf, 0x4, 0x14, 0x4, 0x7, 0x0, 0x1, 0x37, [{0x4, 0xe4, 0xffff, 0x8001}, {0x3, 0x4, 0x4, 0xa}, {0x7, 0x5, 0xfffffb76, 0xdb}, {0x3, 0x69e53af8, 0x1000, 0x2}, {0x3, 0x5bf, 0xe, 0x8}, {0x7, 0x3, 0x4, 0x8000}, {0x8, 0x7fff, 0x28c, 0xddb4}, {0x3, 0x7, 0xff, 0x80000000}, {0x1, 0x8, 0x5, 0x4}, {0x9, 0x87, 0x20000000}, {0x101, 0x400, 0x40, 0xc92}, {0x96c8, 0x81, 0x8}, {0xb5, 0x9, 0x7f, 0x9}, {0x8, 0x4, 0x5, 0x5}, {0xffff, 0x1, 0x0, 0x3}, {0x8, 0x3, 0x9, 0x5}, {0x4, 0xfffffffb, 0x101, 0xe}, {0x401, 0x4, 0x80000000, 0x7}, {0x0, 0x5, 0x5, 0x8}, {0xc5, 0xae, 0x509, 0x6}, {0x0, 0x5, 0x9, 0x8}, {0x3, 0x2, 0xab3, 0xce93}, {0x2, 0xaa7, 0x1, 0x20000000}, {0x87a2, 0x4d2a, 0x81, 0x8}, {0x4, 0x0, 0xc, 0x3e8f}, {0x6, 0x4, 0x7, 0x6}, {0x7, 0x5, 0x7406df36, 0x6db4}, {0xeaa, 0x10000, 0x8, 0xe6}, {0x3, 0x9, 0x9, 0xdc9b}, {0x0, 0xa, 0x9, 0x97fb}, {0x400, 0xe, 0xc972, 0x7}, {0x0, 0x1, 0x5, 0xffff}, {0xc3, 0x5, 0x4, 0x5}, {0x7fff, 0x9, 0x2, 0x81}, {0xa, 0x9, 0x546c, 0x80}, {0x0, 0x80, 0x4, 0x1}, {0x1, 0x8, 0xf06, 0x1}, {0x1, 0x7f, 0x3, 0x5}, {0x5, 0x7, 0x4, 0x1}, {0x2, 0x7, 0x519, 0x5}, {0x8, 0x0, 0x1, 0x4}, {0x2, 0x6, 0x9, 0x6}, {0x4, 0x8001, 0xffffff00, 0x5}, {0x0, 0x19, 0x735d8aef, 0x3ff}, {0x7f, 0x0, 0x5, 0xfffffff7}, {0x1, 0x8000, 0xa06, 0x130}, {0xffff, 0x8, 0x200, 0x2b}, {0x3, 0x5, 0x1}, {0x7f, 0x422, 0x31830af3, 0x9}, {0x3f6b, 0x7, 0x8001}, {0x1, 0x5, 0xff}, {0x9, 0x1, 0x9, 0xff4}, {0x7227, 0xfff, 0x10001, 0x8}, {0xed, 0x0, 0x8, 0x93}, {0x3, 0x7, 0x3, 0xce}, {0x1, 0xfffffff2, 0x7, 0x80000001}, {0x0, 0x9, 0xfffffc00, 0x40}, {0x5, 0x5, 0x1, 0x4}, {0x6, 0x1, 0x0, 0x1ce5}, {0x8, 0x1, 0x8, 0x5}, {0x7, 0x3, 0x6, 0xff}, {0x45, 0x5, 0x42, 0xc}, {0x2, 0x8, 0x1, 0x6}, {0x80000000, 0x9, 0x7, 0x8eb6}, {0x7, 0x4, 0x1000, 0x9596}, {0x8, 0x4, 0x3, 0x2}, {0xc73, 0xf4, 0xffff, 0x8}, {0x7f, 0x5, 0x0, 0xffffffff}, {0x80, 0x0, 0x0, 0xfffffffa}, {0x80000000, 0xa, 0xdadb, 0x7}, {0xe, 0x5ba5, 0xf0, 0x10000}, {0x2, 0x9, 0x80000000, 0x10001}, {0x81, 0x200, 0x6, 0x10001}, {0x706, 0x73, 0x5, 0x7}, {0x597, 0x2, 0x3, 0x8}, {0x8, 0x6, 0x3, 0x5a5258ed}, {0x200, 0xaa1c, 0x73, 0xdbe}, {0x7, 0x18, 0x80000001, 0x4}, {0x8, 0x993d, 0xd49, 0x6}, {0xf, 0x1, 0xf, 0x9}, {0x7fff, 0xfff, 0xffff751e, 0x1}, {0x0, 0xfffffffa, 0x10, 0x17}, {0xfffffffa, 0x5, 0xfffffffb, 0x2}, {0x80000000, 0x5, 0xa, 0x1}, {0x1, 0x4, 0xff, 0x400}, {0x80000000, 0x0, 0xc, 0x80}, {0x3, 0x0, 0x5, 0x7}, {0x2, 0x5, 0x3, 0x80000000}, {0x1, 0x5, 0x4, 0x5}, {0x4, 0xffffa929, 0x5, 0x3}, {0x81, 0x2, 0x101, 0x9a3d}, {0xfd, 0x1, 0x10000, 0x7}, {0x4, 0x5, 0xc, 0x4}, {0x80000000, 0x4, 0x10001, 0x8}, {0x7, 0x401, 0x3, 0x7}, {0x5, 0x9, 0x3, 0x7f}, {0x2, 0x9, 0x5, 0xffff}, {0x60b, 0xfffff8b5, 0x6, 0x40}, {0x4, 0x4, 0x8, 0x9}, {0xffff167e, 0x3ff, 0xc59, 0xb7}, {0x8, 0xffff, 0x40000005, 0x681}, {0xec5a, 0x1, 0x4, 0x5}, {0x1ada, 0x5, 0xff, 0x401}, {0x2, 0x280000, 0x80, 0x16}, {0x6, 0xced, 0x1, 0x8000}, {0x0, 0xae, 0x6, 0xb}, {0x2, 0x7, 0x5, 0xe}, {0x9, 0x400, 0x401, 0x4}, {0x7fffffff, 0x4, 0x1, 0x2}, {0x3, 0x7, 0x3, 0xd}, {0x4, 0x5, 0x57ff, 0x8}, {0x87b9, 0x7ff, 0x5, 0x40}, {0x8, 0x8, 0x5, 0x7fffffff}, {0xff, 0x8b2, 0x80000000, 0x5}, {0x8001, 0x6, 0xf, 0x2}, {0x80, 0x10000, 0x5, 0xfffffffd}, {0x7, 0x8, 0x0, 0xffffffff}]}}]}}]}, 0x938}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f0000000440)={r12, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x1000000], [], [0x0, 0x0, 0x8]}) 712.577542ms ago: executing program 2 (id=2933): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x80000000, 0xffffffffffffffff) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xd]}, 0x8) r8 = syz_io_uring_setup(0xbcc, &(0x7f0000000380)={0x0, 0xbbd2, 0x10100, 0x0, 0x23f, 0x0, r7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r7}) io_uring_enter(r8, 0x353, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r12, &(0x7f00000013c0)=""/4089, 0xff9) syz_open_dev$dri(&(0x7f0000002180), 0xfffffffffffffffd, 0xd00) 703.348195ms ago: executing program 5 (id=2934): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 497.046026ms ago: executing program 5 (id=2935): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) syz_io_uring_setup(0x7de, 0x0, &(0x7f0000000140), &(0x7f0000000540)) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000300000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) 244.550354ms ago: executing program 5 (id=2936): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x10, 0xffffffff, 0x16}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0x2}, 0x18) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) madvise(&(0x7f0000e3b000/0x3000)=nil, 0x3000, 0x12) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000c5b000/0x3000)=nil) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000ec0), 0x20400, 0x0) preadv(r6, 0x0, 0x0, 0x9, 0xd1) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000cc0)=ANY=[@ANYRESDEC], 0x64}}, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000140)=[0x1], &(0x7f0000000000), 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2500, 0x0) dup(r7) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x100, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa249}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3425}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd76c}]}]}]}, 0x100}}, 0x20008000) 244.373411ms ago: executing program 0 (id=2937): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="0000200008000f0000000000140001"], 0x38}}, 0x0) 0s ago: executing program 0 (id=2938): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x471, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) kernel console output (not intermixed with test programs): ng 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 661.755533][T11438] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 661.778786][T11438] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 661.788459][T11438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.810761][T11438] usb 3-1: Product: syz [ 661.820937][T11438] usb 3-1: Manufacturer: syz [ 661.825586][T11438] usb 3-1: SerialNumber: syz [ 662.655511][T13640] kvm: kvm [13637]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 662.664755][T13640] kvm: kvm [13637]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 662.912650][T13654] random: crng reseeded on system resumption [ 664.037394][ T5927] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 664.198700][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 664.206051][ T5927] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 664.231219][ T5927] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.257717][ T5927] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 664.282974][ T5927] usb 1-1: config 0 interface 0 has no altsetting 0 [ 664.292987][ T5927] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 664.303497][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.318621][ T5927] usb 1-1: config 0 descriptor?? [ 664.684096][T11440] usb 3-1: USB disconnect, device number 96 [ 664.756050][ T5927] usbhid 1-1:0.0: can't add hid device: -71 [ 664.782375][ T5927] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 664.811184][ T5927] usb 1-1: USB disconnect, device number 100 [ 666.259146][T13693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2298'. [ 668.993473][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2313'. [ 669.665328][T13736] netlink: 'syz.0.2315': attribute type 13 has an invalid length. [ 669.745382][T13736] gretap0: refused to change device tx_queue_len [ 669.787425][T13736] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 670.147305][T13741] xt_bpf: check failed: parse error [ 670.168275][T13742] syz.2.2314 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 672.096415][ T5927] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 672.260939][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 672.272215][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.292412][ T5927] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 672.312068][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.344646][ T5927] usb 3-1: config 0 descriptor?? [ 672.788176][ T5927] isku 0003:1E7D:319C.001F: unknown main item tag 0x0 [ 672.795048][ T5927] isku 0003:1E7D:319C.001F: item fetching failed at offset 6/7 [ 672.837212][ T5927] isku 0003:1E7D:319C.001F: parse failed [ 672.843162][ T5927] isku 0003:1E7D:319C.001F: probe with driver isku failed with error -22 [ 672.985075][ T5927] usb 3-1: USB disconnect, device number 97 [ 673.121543][T13769] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 674.364242][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 674.364264][ T30] audit: type=1326 audit(1747549873.538:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.3.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754898e969 code=0x7ffc0000 [ 674.468061][ T30] audit: type=1326 audit(1747549873.538:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.3.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754898e969 code=0x7ffc0000 [ 674.530251][ T30] audit: type=1326 audit(1747549873.548:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.3.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f754898e969 code=0x7ffc0000 [ 674.589392][ T30] audit: type=1326 audit(1747549873.548:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.3.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754898e969 code=0x7ffc0000 [ 674.652684][ T30] audit: type=1326 audit(1747549873.548:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.3.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754898e969 code=0x7ffc0000 [ 674.783142][ T30] audit: type=1326 audit(1747549873.548:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.3.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f754898e969 code=0x7ffc0000 [ 674.863089][ T30] audit: type=1326 audit(1747549873.548:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.3.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754898e969 code=0x7ffc0000 [ 674.889660][ T30] audit: type=1326 audit(1747549873.548:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.3.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f754898e969 code=0x7ffc0000 [ 674.912875][ T30] audit: type=1326 audit(1747549873.548:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.3.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754898e969 code=0x7ffc0000 [ 674.986643][ T30] audit: type=1326 audit(1747549873.548:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.3.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754898e969 code=0x7ffc0000 [ 676.395673][T13815] bridge0: port 1(bridge_slave_0) entered listening state [ 677.794854][T13841] wg2: left promiscuous mode [ 677.855413][T13841] macsec0: left promiscuous mode [ 677.884044][T13841] macvlan2: left promiscuous mode [ 677.902271][T13841] vlan2: left promiscuous mode [ 677.936724][T13841] macvlan4: left promiscuous mode [ 677.949241][T13841] macvlan5: left promiscuous mode [ 677.967243][T13841] macvtap1: left promiscuous mode [ 677.985948][T13841] macvlan6: left promiscuous mode [ 677.998483][T13841] macvlan7: left promiscuous mode [ 678.014813][T13841] macvlan8: left promiscuous mode [ 678.043219][T13841] macvlan9: left promiscuous mode [ 678.062565][T13841] macvlan10: left promiscuous mode [ 678.786696][T13859] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2354'. [ 680.933878][T13882] xt_CT: No such helper "netbios-ns" [ 682.192210][T13899] vlan0: entered allmulticast mode [ 682.321357][T13901] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.330068][T13901] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.381435][T13901] bridge0: entered allmulticast mode [ 682.409162][T13904] bridge_slave_1: left allmulticast mode [ 682.423325][T13904] bridge_slave_1: left promiscuous mode [ 682.455147][T13904] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.495374][T13904] bridge_slave_0: left allmulticast mode [ 682.522162][T13904] bridge_slave_0: left promiscuous mode [ 682.540995][T13904] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.454262][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2382'. [ 685.471759][T13949] macvlan11: entered promiscuous mode [ 685.810538][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.817913][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.056446][T10520] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 686.329030][T10520] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 686.337310][T10520] usb 3-1: config 0 has no interface number 0 [ 686.365307][T10520] usb 3-1: config 0 interface 29 altsetting 243 endpoint 0x1 has invalid wMaxPacketSize 0 [ 686.407351][T10520] usb 3-1: config 0 interface 29 has no altsetting 0 [ 686.431027][T10520] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 686.446326][T10520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.506398][T10520] usb 3-1: Product: syz [ 686.510625][T10520] usb 3-1: Manufacturer: syz [ 686.551770][T10520] usb 3-1: SerialNumber: syz [ 686.564529][T10520] usb 3-1: config 0 descriptor?? [ 687.321737][T13956] netlink: 'syz.4.2383': attribute type 10 has an invalid length. [ 687.509773][T13956] team0: Device dummy0 failed to register rx_handler [ 687.581520][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2386'. [ 688.108380][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 688.108400][ T30] audit: type=1326 audit(1747549887.298:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13970 comm="syz.5.2387" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe6cf8e969 code=0x0 [ 688.236453][ T30] audit: type=1326 audit(1747549887.348:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13970 comm="syz.5.2387" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe6cf8e969 code=0x0 [ 688.704694][T10520] peak_usb 3-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 688.729706][T13981] FAULT_INJECTION: forcing a failure. [ 688.729706][T13981] name fail_futex, interval 1, probability 0, space 0, times 1 [ 688.749985][T13981] CPU: 1 UID: 0 PID: 13981 Comm: syz.3.2388 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 688.750014][T13981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 688.750036][T13981] Call Trace: [ 688.750046][T13981] [ 688.750055][T13981] dump_stack_lvl+0x189/0x250 [ 688.750093][T13981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.750120][T13981] ? __pfx__printk+0x10/0x10 [ 688.750152][T13981] should_fail_ex+0x414/0x560 [ 688.750180][T13981] get_futex_key+0x240/0xe10 [ 688.750209][T13981] ? __pfx_get_futex_key+0x10/0x10 [ 688.750228][T13981] ? do_raw_spin_lock+0x121/0x290 [ 688.750251][T13981] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 688.750278][T13981] futex_wait_setup+0x49/0x290 [ 688.750305][T13981] ? __futex_wait+0x9f/0x2a0 [ 688.750337][T13981] __futex_wait+0xf9/0x2a0 [ 688.750370][T13981] ? __pfx___futex_wait+0x10/0x10 [ 688.750400][T13981] ? __pfx_futex_wake_mark+0x10/0x10 [ 688.750434][T13981] ? ktime_add_safe+0x38/0x70 [ 688.750479][T13981] futex_wait+0x104/0x360 [ 688.750504][T13981] ? __pfx_futex_wait+0x10/0x10 [ 688.750531][T13981] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 688.750551][T13981] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 688.750568][T13981] ? lockdep_hardirqs_on+0x9c/0x150 [ 688.750592][T13981] do_futex+0x333/0x420 [ 688.750629][T13981] ? __pfx_do_futex+0x10/0x10 [ 688.750649][T13981] ? read_tsc+0x9/0x20 [ 688.750666][T13981] __se_sys_futex+0x36f/0x400 [ 688.750689][T13981] ? __pfx___se_sys_futex+0x10/0x10 [ 688.750713][T13981] ? __x64_sys_futex+0x21/0xf0 [ 688.750733][T13981] do_syscall_64+0xf6/0x210 [ 688.750755][T13981] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 688.750772][T13981] ? clear_bhb_loop+0x60/0xb0 [ 688.750791][T13981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.750807][T13981] RIP: 0033:0x7f754898e969 [ 688.750821][T13981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.750836][T13981] RSP: 002b:00007f7549890038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 688.750854][T13981] RAX: ffffffffffffffda RBX: 00007f7548bb5fa0 RCX: 00007f754898e969 [ 688.750867][T13981] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 000020000000cffc [ 688.750878][T13981] RBP: 00007f7549890090 R08: 0000000000000000 R09: 0000000000000000 [ 688.750888][T13981] R10: 000020000000b000 R11: 0000000000000246 R12: 0000000000000001 [ 688.750898][T13981] R13: 0000000000000000 R14: 00007f7548bb5fa0 R15: 00007f7548cdfa28 [ 688.750922][T13981] [ 689.003826][T10520] peak_usb 3-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 689.274896][T13991] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2391' sets config #0 [ 689.349585][T13991] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2391' sets config #1 [ 689.399225][T13991] ALSA: mixer_oss: invalid OSS volume '' [ 689.407531][T10520] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 689.468584][T10520] usb 3-1: USB disconnect, device number 98 [ 689.913198][T14005] loop8: detected capacity change from 0 to 8 [ 689.946726][T14005] Dev loop8: unable to read RDB block 8 [ 689.952421][T14005] loop8: unable to read partition table [ 689.959589][T14005] loop8: partition table beyond EOD, truncated [ 689.977756][T14005] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 690.168774][T14012] --map-set only usable from mangle table [ 690.231784][T14016] FAULT_INJECTION: forcing a failure. [ 690.231784][T14016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.266383][T14016] CPU: 0 UID: 0 PID: 14016 Comm: syz.4.2400 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 690.266413][T14016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 690.266425][T14016] Call Trace: [ 690.266434][T14016] [ 690.266442][T14016] dump_stack_lvl+0x189/0x250 [ 690.266478][T14016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.266507][T14016] ? __pfx__printk+0x10/0x10 [ 690.266540][T14016] should_fail_ex+0x414/0x560 [ 690.266567][T14016] _copy_to_user+0x31/0xb0 [ 690.266598][T14016] simple_read_from_buffer+0xe1/0x170 [ 690.266628][T14016] proc_fail_nth_read+0x1df/0x250 [ 690.266659][T14016] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.266682][T14016] ? rw_verify_area+0x258/0x650 [ 690.266698][T14016] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.266720][T14016] vfs_read+0x1fd/0x980 [ 690.266758][T14016] ? __pfx___mutex_lock+0x10/0x10 [ 690.266797][T14016] ? __pfx_vfs_read+0x10/0x10 [ 690.266816][T14016] ? __fget_files+0x2a/0x420 [ 690.266839][T14016] ? __fget_files+0x3a0/0x420 [ 690.266857][T14016] ? __fget_files+0x2a/0x420 [ 690.266884][T14016] ksys_read+0x145/0x250 [ 690.266900][T14016] ? __fget_files+0x2a/0x420 [ 690.266921][T14016] ? __pfx_ksys_read+0x10/0x10 [ 690.266941][T14016] ? do_syscall_64+0xba/0x210 [ 690.266965][T14016] do_syscall_64+0xf6/0x210 [ 690.266986][T14016] ? clear_bhb_loop+0x60/0xb0 [ 690.267004][T14016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.267019][T14016] RIP: 0033:0x7f54c1d8d37c [ 690.267033][T14016] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 690.267046][T14016] RSP: 002b:00007f54bfbf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 690.267062][T14016] RAX: ffffffffffffffda RBX: 00007f54c1fb5fa0 RCX: 00007f54c1d8d37c [ 690.267074][T14016] RDX: 000000000000000f RSI: 00007f54bfbf60a0 RDI: 0000000000000003 [ 690.267083][T14016] RBP: 00007f54bfbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 690.267093][T14016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.267102][T14016] R13: 0000000000000000 R14: 00007f54c1fb5fa0 R15: 00007f54c20dfa28 [ 690.267124][T14016] [ 691.100270][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2405'. [ 691.248033][T14036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2405'. [ 691.697402][T14046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2408'. [ 691.726652][T14046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2408'. [ 691.996490][ T9] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 692.146399][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 692.158535][ T9] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 692.184436][ T9] usb 4-1: config 0 has no interface number 0 [ 692.236979][ T9] usb 4-1: config 0 interface 126 has no altsetting 0 [ 692.247812][ T9] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 692.263711][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.355929][ T9] usb 4-1: Product: syz [ 692.395702][ T9] usb 4-1: Manufacturer: syz [ 692.430984][ T9] usb 4-1: SerialNumber: syz [ 692.457230][ T9] usb 4-1: config 0 descriptor?? [ 692.547148][T10029] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 692.689873][ T9] ir_usb 4-1:0.126: required endpoints missing [ 692.716462][T10029] usb 5-1: Using ep0 maxpacket: 32 [ 692.758753][ T5927] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 692.768353][T10029] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 692.778235][ T9] usb 4-1: USB disconnect, device number 86 [ 692.799214][T10029] usb 5-1: config 0 has no interface number 0 [ 692.805375][T10029] usb 5-1: config 0 interface 184 has no altsetting 0 [ 692.851257][T10029] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 692.879261][T10029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.941667][ T5927] usb 3-1: config 0 has no interfaces? [ 692.955522][T10029] usb 5-1: Product: syz [ 692.970232][T10029] usb 5-1: Manufacturer: syz [ 692.982569][T10029] usb 5-1: SerialNumber: syz [ 692.989097][ T5927] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 693.016728][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 693.035612][T10029] usb 5-1: config 0 descriptor?? [ 693.045153][ T5927] usb 3-1: Product: syz [ 693.068650][T10029] smsc75xx v1.0.0 [ 693.086513][ T5927] usb 3-1: Manufacturer: syz [ 693.096806][T10029] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 693.123053][ T5927] usb 3-1: SerialNumber: syz [ 693.141352][ T5927] usb 3-1: config 0 descriptor?? [ 693.147746][T10029] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 693.537727][T14075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 693.577881][T14075] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 693.903093][T14080] ip6erspan0: entered promiscuous mode [ 694.078201][ T5927] usb 3-1: USB disconnect, device number 99 [ 694.215205][T14089] input: syz0 as /devices/virtual/input/input74 [ 694.813086][T14097] FAULT_INJECTION: forcing a failure. [ 694.813086][T14097] name fail_futex, interval 1, probability 0, space 0, times 0 [ 694.887221][T14097] CPU: 1 UID: 0 PID: 14097 Comm: syz.2.2427 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 694.887252][T14097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 694.887265][T14097] Call Trace: [ 694.887273][T14097] [ 694.887282][T14097] dump_stack_lvl+0x189/0x250 [ 694.887320][T14097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.887350][T14097] ? __pfx__printk+0x10/0x10 [ 694.887373][T14097] ? __pfx_gup_fast_fallback+0x10/0x10 [ 694.887410][T14097] should_fail_ex+0x414/0x560 [ 694.887438][T14097] get_futex_key+0x936/0xe10 [ 694.887468][T14097] ? __pfx_get_futex_key+0x10/0x10 [ 694.887490][T14097] ? do_raw_spin_lock+0x121/0x290 [ 694.887518][T14097] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 694.887546][T14097] futex_wait_setup+0x49/0x290 [ 694.887574][T14097] ? __futex_wait+0x9f/0x2a0 [ 694.887617][T14097] __futex_wait+0xf9/0x2a0 [ 694.887662][T14097] ? __pfx___futex_wait+0x10/0x10 [ 694.887691][T14097] ? __pfx_futex_wake_mark+0x10/0x10 [ 694.887725][T14097] ? ktime_add_safe+0x38/0x70 [ 694.887757][T14097] futex_wait+0x104/0x360 [ 694.887784][T14097] ? __pfx_futex_wait+0x10/0x10 [ 694.887813][T14097] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 694.887837][T14097] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 694.887860][T14097] ? lockdep_hardirqs_on+0x9c/0x150 [ 694.887891][T14097] do_futex+0x333/0x420 [ 694.887919][T14097] ? __pfx_do_futex+0x10/0x10 [ 694.887945][T14097] ? read_tsc+0x9/0x20 [ 694.887966][T14097] __se_sys_futex+0x36f/0x400 [ 694.887997][T14097] ? __pfx___se_sys_futex+0x10/0x10 [ 694.888025][T14097] ? __x64_sys_futex+0x21/0xf0 [ 694.888050][T14097] do_syscall_64+0xf6/0x210 [ 694.888076][T14097] ? clear_bhb_loop+0x60/0xb0 [ 694.888104][T14097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.888123][T14097] RIP: 0033:0x7f56f0b8e969 [ 694.888140][T14097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.888157][T14097] RSP: 002b:00007f56f199b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 694.888179][T14097] RAX: ffffffffffffffda RBX: 00007f56f0db5fa0 RCX: 00007f56f0b8e969 [ 694.888194][T14097] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 000020000000cffc [ 694.888207][T14097] RBP: 00007f56f199b090 R08: 0000000000000000 R09: 0000000000000000 [ 694.888220][T14097] R10: 000020000000b000 R11: 0000000000000246 R12: 0000000000000001 [ 694.888234][T14097] R13: 0000000000000000 R14: 00007f56f0db5fa0 R15: 00007f56f0edfa28 [ 694.888264][T14097] [ 695.492910][T14106] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2429' sets config #0 [ 695.913885][T11440] usb 5-1: USB disconnect, device number 104 [ 695.946580][T10029] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 696.118749][T10029] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 696.129989][T10029] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 696.163906][T10029] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.191208][T10029] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 696.204600][T10029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.240319][T10029] usb 1-1: Product: ఌ [ 696.244618][T10029] usb 1-1: Manufacturer: 袁幁ட犨帬㹲꨻峳କ㑄ᝣ쏖ཎ匡쿷㉉᱿㉖㒤䄯อ뼓禾뱟查团㹲ዤ䏯惧듂七粪倥鳝䄛撄已ⷉ敧⁺衟棭 [ 696.267609][T10029] usb 1-1: SerialNumber: 䜱春ဵ貱间᪥븉퉆隡䑌ꚏ△蟟ൌ푲諜置栥ࣲ肮ᴬ飁蓌鍩➒駧툜䍠㱵㚞㉫嶟㓖ᤆ⨿ꇇ눐㺸 [ 696.580721][T14106] ALSA: mixer_oss: invalid OSS volume '' [ 696.637042][T10029] usb 1-1: 0:2 : does not exist [ 696.686781][T10029] usb 1-1: USB disconnect, device number 101 [ 696.885845][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 697.086548][T10520] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 697.289760][T10520] usb 6-1: Using ep0 maxpacket: 32 [ 697.595233][T10520] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 697.789959][T10520] usb 6-1: config 0 has no interface number 0 [ 697.886612][T10520] usb 6-1: config 0 interface 184 has no altsetting 0 [ 698.124978][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2447'. [ 698.165410][T10520] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 698.183824][T10520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.195377][T10520] usb 6-1: Product: syz [ 698.235987][T10520] usb 6-1: Manufacturer: syz [ 698.245041][T10520] usb 6-1: SerialNumber: syz [ 698.265537][T10520] usb 6-1: config 0 descriptor?? [ 698.284472][T10520] smsc75xx v1.0.0 [ 698.289894][T10520] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 698.313749][T10520] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 698.369281][ T30] audit: type=1326 audit(1747549897.558:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14171 comm="syz.2.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f0b8e969 code=0x7ffc0000 [ 698.414973][ T30] audit: type=1326 audit(1747549897.578:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14171 comm="syz.2.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f56f0b8e969 code=0x7ffc0000 [ 698.455845][ T30] audit: type=1326 audit(1747549897.578:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14171 comm="syz.2.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f0b8e969 code=0x7ffc0000 [ 698.582839][ T30] audit: type=1326 audit(1747549897.578:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14171 comm="syz.2.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f56f0b8e969 code=0x7ffc0000 [ 698.629102][ T30] audit: type=1326 audit(1747549897.578:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14171 comm="syz.2.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f0b8e969 code=0x7ffc0000 [ 698.665395][ T30] audit: type=1326 audit(1747549897.578:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14171 comm="syz.2.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f56f0b8e969 code=0x7ffc0000 [ 698.793338][ T30] audit: type=1326 audit(1747549897.578:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14171 comm="syz.2.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f0b8e969 code=0x7ffc0000 [ 698.893872][ T30] audit: type=1326 audit(1747549897.578:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14171 comm="syz.2.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f56f0b8e969 code=0x7ffc0000 [ 698.893934][ T30] audit: type=1326 audit(1747549897.578:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14171 comm="syz.2.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f0b8e969 code=0x7ffc0000 [ 698.893968][ T30] audit: type=1326 audit(1747549897.578:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14171 comm="syz.2.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f56f0b8e969 code=0x7ffc0000 [ 699.007116][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.406491][T10029] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 699.440497][T14191] tmpfs: Unknown parameter 'fd' [ 699.577739][T10029] usb 1-1: device descriptor read/64, error -71 [ 699.826477][T10029] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 699.901193][ T5872] usb 6-1: USB disconnect, device number 59 [ 699.986434][T10029] usb 1-1: device descriptor read/64, error -71 [ 700.107617][T10029] usb usb1-port1: attempt power cycle [ 700.456773][T10029] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 700.477577][T10029] usb 1-1: device descriptor read/8, error -71 [ 700.557673][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2462'. [ 700.736534][T10029] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 700.777565][T10029] usb 1-1: device descriptor read/8, error -71 [ 700.806369][ T5872] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 700.889918][T14217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2467'. [ 700.928599][T10029] usb usb1-port1: unable to enumerate USB device [ 700.975987][ T5872] usb 6-1: config 0 has an invalid interface number: 58 but max is 0 [ 700.994245][ T5872] usb 6-1: config 0 has no interface number 0 [ 701.013681][ T5872] usb 6-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 701.036806][ T5872] usb 6-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 701.066128][ T5872] usb 6-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 701.093483][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.124697][ T5872] usb 6-1: Product: syz [ 701.139313][ T5872] usb 6-1: Manufacturer: syz [ 701.159964][ T5872] usb 6-1: SerialNumber: syz [ 701.180763][ T5872] usb 6-1: config 0 descriptor?? [ 701.212100][T14212] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 701.355885][T14227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2470'. [ 701.516570][ T5872] kaweth 6-1:0.58: Firmware present in device. [ 701.748173][T14234] Cannot find del_set index 0 as target [ 701.777125][T14233] --map-set only usable from mangle table [ 701.820401][T14234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.836845][T14234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.880488][ T5872] kaweth 6-1:0.58: Error reading configuration (-71), no net device created [ 701.890828][ T5872] kaweth 6-1:0.58: probe with driver kaweth failed with error -5 [ 701.903435][ T5872] usb 6-1: USB disconnect, device number 60 [ 701.996345][T11440] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 702.256324][T11440] usb 3-1: Using ep0 maxpacket: 32 [ 702.376403][ T5927] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 702.440228][T11440] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 702.566762][T11440] usb 3-1: config 0 has no interface number 0 [ 702.606804][T11440] usb 3-1: config 0 interface 184 has no altsetting 0 [ 702.638354][ T5927] usb 5-1: not running at top speed; connect to a high speed hub [ 702.654864][ T5927] usb 5-1: config 8 has an invalid interface number: 117 but max is 0 [ 702.736867][ T5927] usb 5-1: config 8 has no interface number 0 [ 702.756746][ T5927] usb 5-1: config 8 interface 117 has no altsetting 0 [ 702.900297][ T5927] usb 5-1: Dual-Role OTG device on HNP port [ 703.000024][ T5927] usb 5-1: New USB device found, idVendor=05c6, idProduct=9033, bcdDevice=9f.f7 [ 703.012652][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.044965][T11440] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 703.074944][T11440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.083368][ T5927] usb 5-1: Product: syz [ 703.083393][ T5927] usb 5-1: Manufacturer: syz [ 703.083409][ T5927] usb 5-1: SerialNumber: syz [ 703.255390][T11440] usb 3-1: Product: syz [ 703.278547][T11440] usb 3-1: Manufacturer: syz [ 703.301161][T11440] usb 3-1: SerialNumber: syz [ 703.327309][T11440] usb 3-1: config 0 descriptor?? [ 703.408388][ T5927] usb 5-1: USB disconnect, device number 105 [ 703.419414][T11440] smsc75xx v1.0.0 [ 703.443540][T11440] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 703.486713][T11440] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 704.225538][T14267] input: syz1 as /devices/virtual/input/input75 [ 704.272901][T10029] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 704.417568][T10029] usb 5-1: device descriptor read/64, error -71 [ 704.603660][T14273] binder: 14272:14273 ioctl 4008700c 39f returned -22 [ 704.625319][T14273] binder: 14272:14273 ioctl c0306201 2000000003c0 returned -14 [ 704.666832][T10029] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 704.768606][ T5927] usb 3-1: USB disconnect, device number 100 [ 704.856390][T10029] usb 5-1: device descriptor read/64, error -71 [ 704.969707][T10029] usb usb5-port1: attempt power cycle [ 705.366436][T10029] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 705.509174][T10029] usb 5-1: device descriptor read/8, error -71 [ 705.614528][T14282] "syz.5.2488" (14282) uses obsolete ecb(arc4) skcipher [ 705.836495][T10029] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 705.872550][T10029] usb 5-1: device descriptor read/8, error -71 [ 705.919718][T14290] xt_CT: No such helper "snmp" [ 705.987005][T10029] usb usb5-port1: unable to enumerate USB device [ 706.346312][T14304] tipc: Started in network mode [ 706.351390][T14304] tipc: Node identity , cluster identity 4711 [ 706.475837][T14306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2492'. [ 706.665586][T14311] input: syz1 as /devices/virtual/input/input76 [ 707.031840][T11439] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 707.158402][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 707.158424][ T30] audit: type=1326 audit(1747549906.338:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14326 comm="syz.2.2500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56f0b8e969 code=0x0 [ 707.230126][T14331] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2501'. [ 707.271316][T11439] usb 6-1: config 0 has no interfaces? [ 707.302490][T11439] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 707.339746][T11439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.354301][T11440] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 707.420592][T11439] usb 6-1: Product: syz [ 707.429442][T11439] usb 6-1: Manufacturer: syz [ 707.434875][T11439] usb 6-1: SerialNumber: syz [ 707.446742][T10029] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 707.516610][T11440] usb 4-1: Using ep0 maxpacket: 32 [ 707.531417][T11440] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 707.540952][T11439] usb 6-1: config 0 descriptor?? [ 707.576337][T10029] usb 3-1: device descriptor read/64, error -71 [ 707.609347][T11440] usb 4-1: config 0 has no interface number 0 [ 707.649225][T11440] usb 4-1: config 0 interface 184 has no altsetting 0 [ 707.686815][T11440] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 707.696410][T11440] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.704436][T11440] usb 4-1: Product: syz [ 707.796488][T11440] usb 4-1: Manufacturer: syz [ 707.805024][T11440] usb 4-1: SerialNumber: syz [ 707.837900][T10029] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 707.947463][T11440] usb 4-1: config 0 descriptor?? [ 707.986445][T10029] usb 3-1: device descriptor read/64, error -71 [ 708.017908][T11440] smsc75xx v1.0.0 [ 708.032235][T11440] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 708.071844][T11440] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 708.096961][T10029] usb usb3-port1: attempt power cycle [ 708.446423][T10029] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 708.487938][T10029] usb 3-1: device descriptor read/8, error -71 [ 708.726384][T10029] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 708.757127][T10029] usb 3-1: device descriptor read/8, error -71 [ 708.777582][T11439] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 708.876837][T10029] usb usb3-port1: unable to enumerate USB device [ 708.937507][T11439] usb 5-1: device descriptor read/64, error -71 [ 709.060518][T14351] binder: 14350:14351 ioctl c018620c 200000000380 returned -22 [ 709.196625][T11439] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 709.356994][T11439] usb 5-1: device descriptor read/64, error -71 [ 709.476678][T11439] usb usb5-port1: attempt power cycle [ 709.752838][T10029] usb 6-1: USB disconnect, device number 61 [ 709.807332][ T5927] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 709.827571][T11439] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 709.869312][T11439] usb 5-1: device descriptor read/8, error -71 [ 710.015335][ T5927] usb 1-1: config 0 has no interfaces? [ 710.026204][ T5927] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 710.049750][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.065039][ T5927] usb 1-1: Product: syz [ 710.103256][ T5927] usb 1-1: Manufacturer: syz [ 710.113266][ T5927] usb 1-1: SerialNumber: syz [ 710.117814][T11439] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 710.214256][T11439] usb 5-1: device descriptor read/8, error -71 [ 710.230755][ T5927] usb 1-1: config 0 descriptor?? [ 710.296490][T10029] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 710.329661][T11439] usb usb5-port1: unable to enumerate USB device [ 710.486413][T10029] usb 6-1: Using ep0 maxpacket: 32 [ 711.285348][T10029] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 711.314241][T10029] usb 6-1: config 0 has no interface number 0 [ 711.356085][T10029] usb 6-1: config 0 interface 184 has no altsetting 0 [ 711.436077][T10029] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 711.463181][T10029] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.499418][T11440] usb 4-1: USB disconnect, device number 87 [ 711.653947][T10029] usb 6-1: Product: syz [ 711.736709][T10029] usb 6-1: Manufacturer: syz [ 711.766436][T10029] usb 6-1: SerialNumber: syz [ 711.981020][T10029] usb 6-1: config 0 descriptor?? [ 712.019016][T10029] smsc75xx v1.0.0 [ 712.022734][T10029] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 712.048261][T10029] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 712.306380][T11440] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 712.373936][T14383] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2517'. [ 712.456466][T11440] usb 4-1: Using ep0 maxpacket: 32 [ 712.464312][T11440] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 712.474942][T11440] usb 4-1: config 0 has no interface number 0 [ 712.482364][T11440] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 712.498670][T11440] usb 4-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 712.513302][T11440] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.570421][T11440] usb 4-1: Product: syz [ 712.608649][T11440] usb 4-1: Manufacturer: syz [ 712.629411][T11440] usb 4-1: SerialNumber: syz [ 712.666645][ T5927] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 712.707871][T11440] usb 4-1: config 0 descriptor?? [ 712.789669][T14379] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 712.819050][T11440] ftdi_sio 4-1:0.151: FTDI USB Serial Device converter detected [ 712.829518][T11440] ftdi_sio ttyUSB0: unknown device type: 0xadd6 [ 712.850539][ T5927] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 712.859277][ T5927] usb 5-1: config 0 has no interface number 0 [ 712.910530][ T5927] usb 5-1: config 0 interface 29 altsetting 243 endpoint 0x1 has invalid wMaxPacketSize 0 [ 712.942191][ T5927] usb 5-1: config 0 interface 29 has no altsetting 0 [ 713.028560][T11440] usb 4-1: USB disconnect, device number 88 [ 713.059134][T11440] ftdi_sio 4-1:0.151: device disconnected [ 713.095698][T10029] usb 1-1: USB disconnect, device number 106 [ 713.147714][ T5927] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 713.199126][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.257676][T14392] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2519'. [ 713.278582][ T5927] usb 5-1: Product: syz [ 713.292112][ T5927] usb 5-1: Manufacturer: syz [ 713.309229][ T5927] usb 5-1: SerialNumber: syz [ 713.350330][ T5927] usb 5-1: config 0 descriptor?? [ 713.497948][T14394] loop8: detected capacity change from 0 to 8 [ 713.506208][ T6160] Dev loop8: unable to read RDB block 8 [ 713.512756][ T6160] loop8: unable to read partition table [ 713.520069][ T6160] loop8: partition table beyond EOD, truncated [ 713.528996][T14394] Dev loop8: unable to read RDB block 8 [ 713.545601][T14394] loop8: unable to read partition table [ 713.555787][T14394] loop8: partition table beyond EOD, truncated [ 713.568076][T14394] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 714.110515][ T9] usb 6-1: USB disconnect, device number 62 [ 714.476511][T10029] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 714.586546][ T5872] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 714.658945][T10029] usb 4-1: Using ep0 maxpacket: 32 [ 714.681905][T10029] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 714.690441][T10029] usb 4-1: config 0 has no interface number 0 [ 714.696702][T10029] usb 4-1: config 0 interface 184 has no altsetting 0 [ 714.741839][T10029] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 714.751167][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 714.756492][T10029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.798358][ T5872] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 714.885201][T10029] usb 4-1: Product: syz [ 714.943715][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 714.985126][T10029] usb 4-1: Manufacturer: syz [ 715.044498][T10029] usb 4-1: SerialNumber: syz [ 715.089252][ T5872] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 715.098878][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.239290][T10029] usb 4-1: config 0 descriptor?? [ 715.317515][ T5872] usb 1-1: Product: syz [ 715.476381][T10520] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 715.486545][ T5872] usb 1-1: Manufacturer: syz [ 715.567523][T10029] smsc75xx v1.0.0 [ 715.571228][T10029] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 715.585899][ T5927] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 715.594619][ T5872] usb 1-1: SerialNumber: syz [ 715.612735][ T5927] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 715.623290][T10029] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 715.632086][T10520] usb 3-1: Using ep0 maxpacket: 16 [ 715.663880][T10520] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 715.701582][T10520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.713212][T10520] usb 3-1: Product: syz [ 715.718984][ T5927] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 715.721926][T10520] usb 3-1: Manufacturer: syz [ 715.749134][T10520] usb 3-1: SerialNumber: syz [ 715.772311][T10520] usb 3-1: config 0 descriptor?? [ 715.772900][ T5927] usb 5-1: USB disconnect, device number 114 [ 716.238931][T10520] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 716.253051][T10520] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 716.275883][T10520] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 716.285193][T10520] usb 3-1: media controller created [ 716.325579][T10520] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 716.509140][T10520] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 716.519758][T10520] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 717.153485][T14437] fuse: Bad value for 'rootmode' [ 717.499672][ T5872] usb 1-1: 0:2 : does not exist [ 717.593980][ T5872] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 717.701645][ T5872] usb 1-1: USB disconnect, device number 107 [ 717.815887][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.938800][ T30] audit: type=1326 audit(1747549917.128:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.0.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8478e969 code=0x7fc00000 [ 717.962368][ T30] audit: type=1326 audit(1747549917.148:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.0.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb8478e969 code=0x7fc00000 [ 718.159721][T11440] usb 4-1: USB disconnect, device number 89 [ 718.268896][T14463] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2542'. [ 718.528076][ T30] audit: type=1326 audit(1747549917.718:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.0.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8478e969 code=0x7fc00000 [ 718.570269][ T30] audit: type=1326 audit(1747549917.718:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.0.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb8478e969 code=0x7fc00000 [ 718.623838][ T30] audit: type=1326 audit(1747549917.718:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.0.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8478e969 code=0x7fc00000 [ 718.721659][ T30] audit: type=1326 audit(1747549917.718:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.0.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8478e969 code=0x7fc00000 [ 718.776442][ T5872] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 718.838632][ T30] audit: type=1326 audit(1747549917.718:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.0.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8478e969 code=0x7fc00000 [ 719.087196][ T30] audit: type=1326 audit(1747549917.718:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.0.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8478e969 code=0x7fc00000 [ 719.088698][T14476] netlink: 'syz.2.2546': attribute type 10 has an invalid length. [ 719.120535][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 719.145824][ T5872] usb 4-1: config 0 has no interfaces? [ 719.151728][ T30] audit: type=1326 audit(1747549917.718:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.0.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8478e969 code=0x7fc00000 [ 719.155651][ T5872] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 719.183646][T14476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2546'. [ 719.193663][T14482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2546'. [ 719.195289][T14476] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 719.226583][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.234747][ T5872] usb 4-1: Product: syz [ 719.238320][T14482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.245164][ T5872] usb 4-1: Manufacturer: syz [ 719.257370][ T5872] usb 4-1: SerialNumber: syz [ 719.275046][ T30] audit: type=1326 audit(1747549917.718:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.0.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8478e969 code=0x7fc00000 [ 719.280386][ T5872] usb 4-1: config 0 descriptor?? [ 719.307568][T14482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.521280][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2547'. [ 719.535915][T14472] dummy0: entered promiscuous mode [ 719.542679][T14472] macvtap1: entered promiscuous mode [ 719.548479][T14472] macvtap1: entered allmulticast mode [ 719.554030][T14472] dummy0: entered allmulticast mode [ 719.576801][T14489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2547'. [ 719.601630][T14489] dummy0: left allmulticast mode [ 719.611632][T14489] dummy0: left promiscuous mode [ 719.637873][T14472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2547'. [ 719.653704][T14472] dummy0: entered promiscuous mode [ 719.716565][T14472] dummy0: entered allmulticast mode [ 719.722247][T14472] macvtap1: left promiscuous mode [ 720.162010][T14472] macvtap1: left allmulticast mode [ 720.177084][T14472] dummy0: left allmulticast mode [ 720.219931][T11438] usb 4-1: USB disconnect, device number 90 [ 720.506774][T11440] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 720.773054][T11440] usb 1-1: Using ep0 maxpacket: 32 [ 720.954485][T11440] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 720.966377][T11440] usb 1-1: config 0 has no interface number 0 [ 720.981400][T11440] usb 1-1: config 0 interface 184 has no altsetting 0 [ 720.995155][T14510] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2558'. [ 721.009015][T14510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2558'. [ 721.018431][T14510] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2558'. [ 721.031337][T14510] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2558'. [ 721.105136][T14512] input: syz1 as /devices/virtual/input/input77 [ 721.278013][T11440] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 721.426672][T11440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.435053][T11440] usb 1-1: Product: syz [ 721.439395][T11440] usb 1-1: Manufacturer: syz [ 721.445159][T11440] usb 1-1: SerialNumber: syz [ 721.458973][T11440] usb 1-1: config 0 descriptor?? [ 721.486542][T11440] smsc75xx v1.0.0 [ 721.490359][T11440] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 721.502042][T11440] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 721.712875][T14490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.724685][T14490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.801930][T14490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.809726][T14490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.833062][T14522] input: syz0 as /devices/virtual/input/input78 [ 722.509163][T14535] netlink: 'syz.4.2565': attribute type 1 has an invalid length. [ 722.569717][T14537] openvswitch: netlink: IP tunnel dst address not specified [ 722.849315][T14549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.866737][T14549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.129166][T11440] usb 1-1: USB disconnect, device number 108 [ 723.265028][T14567] syz_tun: entered allmulticast mode [ 723.291414][T14567] xt_SECMARK: invalid mode: 2 [ 723.308093][T14569] __nla_validate_parse: 3 callbacks suppressed [ 723.308115][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2578'. [ 723.336551][T14570] input: syz1 as /devices/virtual/input/input79 [ 723.367414][T14571] tipc: Enabled bearer , priority 10 [ 723.574156][T14575] loop8: detected capacity change from 0 to 8 [ 723.574276][T14573] fuse: Unknown parameter '' [ 723.590950][T14575] Dev loop8: unable to read RDB block 8 [ 723.634789][T14575] loop8: unable to read partition table [ 723.641185][T14575] loop8: partition table beyond EOD, truncated [ 723.653495][T14575] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 723.801290][T14577] netlink: 'syz.5.2581': attribute type 2 has an invalid length. [ 723.915360][T14577] lm;-: entered promiscuous mode [ 724.202653][T14567] syz_tun: left allmulticast mode [ 724.488008][T11440] tipc: Node number set to 4269801642 [ 724.836364][T11440] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 725.067168][T11440] usb 1-1: config 0 has no interfaces? [ 725.079110][T11440] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 725.088467][T11440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.117388][T11440] usb 1-1: Product: syz [ 725.121627][T11440] usb 1-1: Manufacturer: syz [ 725.138500][T11440] usb 1-1: SerialNumber: syz [ 725.168149][T11440] usb 1-1: config 0 descriptor?? [ 725.190545][T14597] xt_limit: Overflow, try lower: 0/0 [ 725.463797][T14605] Cannot find add_set index 0 as target [ 726.045832][T14611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.058789][T14611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.075782][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'. [ 726.087543][ T5872] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 726.127216][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'. [ 726.148632][T14611] dummy0: entered promiscuous mode [ 726.156092][T14611] macvtap2: entered promiscuous mode [ 726.250354][T14613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2592'. [ 726.262726][T14611] macvtap2: entered allmulticast mode [ 726.266569][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 726.274953][ T5872] usb 4-1: no configurations [ 726.281715][ T5872] usb 4-1: can't read configurations, error -22 [ 726.322094][T14611] dummy0: entered allmulticast mode [ 726.354829][T14612] dummy0: left allmulticast mode [ 726.366399][T14612] dummy0: left promiscuous mode [ 726.379156][T14613] dummy0: entered promiscuous mode [ 726.397418][T14613] dummy0: entered allmulticast mode [ 726.402930][T14613] macvtap2: left promiscuous mode [ 726.415326][T14613] macvtap2: left allmulticast mode [ 726.425936][T14613] dummy0: left allmulticast mode [ 726.446452][ T5872] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 726.617238][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 726.623703][ T5872] usb 4-1: no configurations [ 726.631502][ T5872] usb 4-1: can't read configurations, error -22 [ 726.640592][ T5872] usb usb4-port1: attempt power cycle [ 726.986496][ T5872] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 727.029438][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 727.035570][ T5872] usb 4-1: no configurations [ 727.040982][ T5872] usb 4-1: can't read configurations, error -22 [ 727.112241][T14624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.121805][T14624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.280918][ T5872] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 727.318515][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 727.324338][ T5872] usb 4-1: no configurations [ 727.329273][ T5872] usb 4-1: can't read configurations, error -22 [ 727.337207][ T5872] usb usb4-port1: unable to enumerate USB device [ 727.462555][ T5872] usb 1-1: USB disconnect, device number 109 [ 727.954011][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2598'. [ 727.991657][T14633] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2597'. [ 728.017445][T14633] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2597'. [ 728.049525][T14633] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2597'. [ 728.075753][T14633] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2597'. [ 728.402479][T14644] input: syz1 as /devices/virtual/input/input80 [ 728.856802][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2607'. [ 732.092509][T14700] xt_connbytes: Forcing CT accounting to be enabled [ 732.099376][T14700] Cannot find add_set index 0 as target [ 732.551100][T11438] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 732.591944][T11438] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 733.276817][T10520] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 733.439008][T10520] usb 6-1: Using ep0 maxpacket: 16 [ 733.447146][T10520] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 733.459711][T10520] usb 6-1: config 0 has no interface number 0 [ 733.480904][T10520] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 733.544850][T10520] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 733.584966][T10520] usb 6-1: config 0 interface 41 has no altsetting 0 [ 733.620647][T10520] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 733.634726][T10520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.646380][T10520] usb 6-1: Product: syz [ 733.663343][T10520] usb 6-1: Manufacturer: syz [ 733.678048][T10520] usb 6-1: SerialNumber: syz [ 733.707014][T10520] usb 6-1: config 0 descriptor?? [ 733.724350][T14729] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 733.731878][T14729] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 733.786725][T14738] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2634'. [ 734.013592][T10520] dm9601 6-1:0.41: probe with driver dm9601 failed with error -71 [ 734.025970][T10520] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71 [ 734.088418][T10520] usb 6-1: USB disconnect, device number 63 [ 734.626360][T10520] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 734.808199][T10520] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 735.101900][T10520] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 735.128643][T10520] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 735.162087][T10520] usb 6-1: config 220 has no interface number 2 [ 735.181178][T10520] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 735.206537][ T5872] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 735.253072][T10520] usb 6-1: config 220 interface 0 has no altsetting 0 [ 735.269359][T10520] usb 6-1: config 220 interface 76 has no altsetting 0 [ 735.291916][T10520] usb 6-1: config 220 interface 1 has no altsetting 0 [ 735.309333][T10520] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 735.361378][T10520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.379845][T10520] usb 6-1: Product: syz [ 735.386729][T10520] usb 6-1: Manufacturer: syz [ 735.395762][T10520] usb 6-1: SerialNumber: syz [ 735.414605][T14763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.456948][T14763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.510788][ T5872] usb 4-1: config index 0 descriptor too short (expected 65535, got 77) [ 735.606005][ T5872] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 735.622658][ T5872] usb 4-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 735.656326][ T5872] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 735.743134][ T5872] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 735.813625][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.842021][ T5872] usb 4-1: Product: syz [ 735.855262][ T5872] usb 4-1: Manufacturer: syz [ 735.872626][ T5872] usb 4-1: SerialNumber: syz [ 735.913547][ T5872] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 735.982943][ T5872] usb 4-1: no configuration chosen from 1 choice [ 736.026404][T11438] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 736.129040][T10520] usb 6-1: selecting invalid altsetting 0 [ 736.157670][T10520] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 736.164101][T10520] usb 6-1: No valid video chain found. [ 736.180594][T11438] usb 1-1: Using ep0 maxpacket: 32 [ 736.203732][T11438] usb 1-1: config 0 has an invalid interface number: 101 but max is 1 [ 736.245284][T11438] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.304150][T10520] usb 6-1: selecting invalid altsetting 0 [ 736.317074][T11438] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 736.326127][T10520] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 736.353389][T11438] usb 1-1: config 0 has no interface number 0 [ 736.388501][T10520] usb 6-1: USB disconnect, device number 64 [ 736.413840][T11438] usb 1-1: config 0 interface 101 has no altsetting 0 [ 736.469403][T11438] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 736.528884][T11438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.575290][T11438] usb 1-1: config 0 descriptor?? [ 736.592038][T11438] hub 1-1:0.101: bad descriptor, ignoring hub [ 736.600079][T11438] hub 1-1:0.101: probe with driver hub failed with error -5 [ 736.856443][T10520] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 736.873693][T14775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.891479][T14775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.006360][T10520] usb 6-1: Using ep0 maxpacket: 16 [ 737.018049][T10520] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.028831][T10520] usb 6-1: config 0 interface 0 has no altsetting 0 [ 737.036854][T10520] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 737.048996][T14769] netlink: 'syz.4.2645': attribute type 10 has an invalid length. [ 737.056445][T10520] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.086806][T10520] usb 6-1: config 0 descriptor?? [ 737.086873][ T5927] usb 1-1: USB disconnect, device number 110 [ 737.588949][T10520] usbhid 6-1:0.0: can't add hid device: -71 [ 737.600656][T10520] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 737.619159][T10520] usb 6-1: USB disconnect, device number 65 [ 737.723041][ T5872] usb 4-1: USB disconnect, device number 95 [ 737.836406][ T5927] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 737.935938][T14783] tmpfs: Unknown parameter 'fd' [ 738.006444][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 738.015171][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.057657][ T5927] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=20.00 [ 738.067067][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.080214][ T5927] usb 1-1: config 0 descriptor?? [ 738.111956][T14789] input: syz1 as /devices/virtual/input/input81 [ 738.900790][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 738.900810][ T30] audit: type=1326 audit(1747549938.088:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14779 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8478e969 code=0x7ffc0000 [ 739.021805][ T30] audit: type=1326 audit(1747549938.118:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14779 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8478e969 code=0x7ffc0000 [ 739.068217][ T30] audit: type=1326 audit(1747549938.228:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14779 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fbb8478e969 code=0x7ffc0000 [ 739.105699][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 739.131506][ T30] audit: type=1326 audit(1747549938.228:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14779 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8478e969 code=0x7ffc0000 [ 739.162348][ T30] audit: type=1326 audit(1747549938.228:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14779 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8478e969 code=0x7ffc0000 [ 739.185874][ T30] audit: type=1326 audit(1747549938.228:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14779 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb8478e56b code=0x7ffc0000 [ 739.211232][ T30] audit: type=1326 audit(1747549938.238:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14779 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb8472ab39 code=0x7ffc0000 [ 739.238619][ T30] audit: type=1326 audit(1747549938.238:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14779 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb8472ab39 code=0x7ffc0000 [ 739.261262][ T30] audit: type=1326 audit(1747549938.238:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14779 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb8472ab39 code=0x7ffc0000 [ 739.285457][ T30] audit: type=1326 audit(1747549938.238:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14779 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb8472ab39 code=0x7ffc0000 [ 739.788854][T10029] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 740.061529][T10029] usb 4-1: config 0 has no interfaces? [ 740.075286][T10029] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 740.084969][T10029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.104743][T14810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.114744][T10029] usb 4-1: Product: syz [ 740.128514][T10029] usb 4-1: Manufacturer: syz [ 740.166420][T10029] usb 4-1: SerialNumber: syz [ 740.192118][T10029] usb 4-1: config 0 descriptor?? [ 740.259538][T14810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.417324][ T5927] usbhid 1-1:0.0: can't add hid device: -71 [ 740.446205][ T5927] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 740.581032][ T5927] usb 1-1: USB disconnect, device number 111 [ 741.939076][T14834] tmpfs: Unknown parameter 'fd' [ 742.487892][T14824] netlink: 'syz.0.2661': attribute type 10 has an invalid length. [ 742.953089][T10520] usb 4-1: USB disconnect, device number 96 [ 743.046707][ T9] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 743.238830][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 743.269355][ T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 743.366278][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 743.404400][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 743.546126][ T9] usb 5-1: config 1 has no interface number 0 [ 743.566423][ T5872] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 743.575281][T14857] input: syz0 as /devices/virtual/input/input82 [ 743.610330][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 743.747649][ T5872] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 743.762801][ T5872] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 743.776426][ T9] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 743.943950][ T5872] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 743.964356][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 743.979787][ T5872] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 743.988987][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.001357][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.044890][ T5872] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 744.053442][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 744.138739][ T5872] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 744.224663][T14841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2667'. [ 744.247274][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 744.534915][T11439] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 744.651326][T14841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.668106][T14841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.698934][T11439] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 744.799492][ T9] usb 5-1: USB disconnect, device number 115 [ 744.807509][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 744.889910][T11439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 744.906521][T11439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 744.923098][T11439] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 744.944311][T11439] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 744.963659][T11439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.999622][T11439] usb 4-1: config 0 descriptor?? [ 745.013092][T14863] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 745.306534][ T9] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 745.466423][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 745.473897][ T9] usb 5-1: config 0 has no interfaces? [ 745.485769][ T9] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 745.497318][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.509004][ T9] usb 5-1: Product: syz [ 745.520386][ T9] usb 5-1: Manufacturer: syz [ 745.537450][ T9] usb 5-1: SerialNumber: syz [ 745.547559][T11439] plantronics 0003:047F:FFFF.0021: reserved main item tag 0xd [ 745.558380][T11439] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 745.561586][ T9] usb 5-1: config 0 descriptor?? [ 745.589366][T11439] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 745.715478][T11439] usb 4-1: USB disconnect, device number 97 [ 745.804785][T14874] fido_id[14874]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 745.849034][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 745.905919][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 745.935765][T11439] usb 6-1: USB disconnect, device number 66 [ 745.949789][T14873] macvtap5: entered promiscuous mode [ 745.953001][T14850] delete_channel: no stack [ 746.066508][T14873] dummy0: entered promiscuous mode [ 746.084399][T14878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2674'. [ 746.153030][T14873] macvtap5: entered allmulticast mode [ 746.209439][T14873] dummy0: entered allmulticast mode [ 746.280790][T14875] dummy0: left allmulticast mode [ 746.286726][T14875] dummy0: left promiscuous mode [ 746.323964][T14878] dummy0: entered allmulticast mode [ 746.346427][T14878] dummy0: entered promiscuous mode [ 746.356980][T14878] macvtap5: left promiscuous mode [ 746.372346][T14878] dummy0: left promiscuous mode [ 746.469226][T14878] macvtap5: left allmulticast mode [ 746.521846][T14878] dummy0: left allmulticast mode [ 746.572367][T11439] usb 5-1: USB disconnect, device number 116 [ 746.656101][T14889] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 746.674876][T14889] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 746.747469][T14888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.807102][T14888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.988803][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 747.237560][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.244012][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.556352][T11438] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 747.779046][T11438] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 747.789086][T11438] usb 4-1: config 0 has no interface number 0 [ 747.796917][T11438] usb 4-1: config 0 interface 29 altsetting 243 endpoint 0x1 has invalid wMaxPacketSize 0 [ 747.807813][T11438] usb 4-1: config 0 interface 29 has no altsetting 0 [ 747.963648][T11438] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 747.983564][T11438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.002518][T11438] usb 4-1: Product: syz [ 748.011650][T11438] usb 4-1: Manufacturer: syz [ 748.018092][T14913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.027556][T11438] usb 4-1: SerialNumber: syz [ 748.034300][T11438] usb 4-1: config 0 descriptor?? [ 748.040707][T14913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.156925][ T9] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 748.165204][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 748.165222][ T30] audit: type=1326 audit(1747549947.348:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.5.2687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe6cf8e969 code=0x0 [ 748.367231][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 748.375022][ T9] usb 5-1: config index 0 descriptor too short (expected 2210, got 1175) [ 748.384635][ T9] usb 5-1: config 0 has an invalid interface number: 241 but max is 2 [ 748.424490][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.436322][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 748.450093][ T9] usb 5-1: config 0 has no interface number 0 [ 748.456634][ T9] usb 5-1: config 0 interface 241 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 748.469017][ T9] usb 5-1: config 0 interface 241 altsetting 4 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 748.482163][ T9] usb 5-1: config 0 interface 241 altsetting 4 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 748.495819][ T9] usb 5-1: config 0 interface 241 altsetting 4 endpoint 0x8E has invalid wMaxPacketSize 0 [ 748.511116][ T9] usb 5-1: config 0 interface 241 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 748.526059][ T9] usb 5-1: config 0 interface 241 has no altsetting 0 [ 748.541782][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e0.70 [ 748.567038][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.576890][ T9] usb 5-1: Product: syz [ 748.583129][ T9] usb 5-1: Manufacturer: syz [ 748.589172][ T9] usb 5-1: SerialNumber: syz [ 748.607274][ T9] usb 5-1: config 0 descriptor?? [ 748.893863][ T9] usb 5-1: USB disconnect, device number 117 [ 748.975418][T14920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.985752][T14920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.017202][T14936] input: syz0 as /devices/virtual/input/input84 [ 750.726645][ T5927] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 750.885039][ T5927] usb 6-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 750.909714][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.002392][T14950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2698'. [ 751.040112][ T5927] usb 6-1: Product: syz [ 751.054172][ T5927] usb 6-1: Manufacturer: syz [ 751.110869][T11438] peak_usb 4-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 751.115700][ T5927] usb 6-1: SerialNumber: syz [ 751.126748][T11438] peak_usb 4-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 751.158393][ T5927] usb 6-1: config 0 descriptor?? [ 751.170269][ T5927] f81232 6-1:0.0: f81232 converter detected [ 751.178669][ T5927] usb 6-1: f81232 converter now attached to ttyUSB0 [ 751.191710][T14952] loop6: detected capacity change from 0 to 63 [ 751.221125][ T5930] Buffer I/O error on dev loop6, logical block 0, async page read [ 751.232538][ T5930] Buffer I/O error on dev loop6, logical block 0, async page read [ 751.241318][T14952] Buffer I/O error on dev loop6, logical block 0, async page read [ 751.313268][T14953] Buffer I/O error on dev loop6, logical block 0, async page read [ 751.337204][T14952] Buffer I/O error on dev loop6, logical block 0, async page read [ 751.347767][ T5930] Buffer I/O error on dev loop6, logical block 0, async page read [ 751.356475][T14953] Buffer I/O error on dev loop6, logical block 0, async page read [ 751.376106][ T5927] usb 6-1: USB disconnect, device number 67 [ 751.392440][ T5927] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 751.404370][ T5927] f81232 6-1:0.0: device disconnected [ 751.417556][ T5930] Buffer I/O error on dev loop6, logical block 0, async page read [ 751.448994][T14952] Buffer I/O error on dev loop6, logical block 0, async page read [ 751.457916][T11438] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 751.472225][T14953] Buffer I/O error on dev loop6, logical block 0, async page read [ 751.497017][T11438] usb 4-1: USB disconnect, device number 98 [ 751.629105][T14960] macsec1: entered promiscuous mode [ 751.681984][T14961] netlink: 'syz.0.2701': attribute type 1 has an invalid length. [ 751.746360][ T5927] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 751.892154][T14961] bond1: entered promiscuous mode [ 751.897703][T14961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 751.904438][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 751.942050][ T5927] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 751.959095][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.970064][ T5927] usb 6-1: Product: syz [ 751.974358][ T5927] usb 6-1: Manufacturer: syz [ 751.984895][ T5927] usb 6-1: SerialNumber: syz [ 752.000854][ T5927] r8152-cfgselector 6-1: Unknown version 0x0000 [ 752.008600][ T5927] r8152-cfgselector 6-1: config 0 descriptor?? [ 752.068805][T14965] netlink: 'syz.0.2702': attribute type 1 has an invalid length. [ 752.482585][T11439] r8152-cfgselector 6-1: USB disconnect, device number 68 [ 752.486516][ T5872] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 752.717770][ T5872] usb 4-1: config 0 has no interfaces? [ 752.745094][ T5872] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 752.814749][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.847269][ T5872] usb 4-1: Product: syz [ 752.886062][ T5872] usb 4-1: Manufacturer: syz [ 752.901656][ T5872] usb 4-1: SerialNumber: syz [ 752.926401][T10520] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 752.948847][ T5872] usb 4-1: config 0 descriptor?? [ 753.101751][T10520] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 753.206368][T10520] usb 1-1: can't read configurations, error -61 [ 753.486006][T10520] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 753.522557][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2710'. [ 753.552454][T14992] macvlan4: entered promiscuous mode [ 753.818371][ T5927] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 753.964547][T15000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.014475][T15000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.043246][ T5927] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 754.051551][ T5927] usb 6-1: config 0 has no interface number 0 [ 754.059239][ T5927] usb 6-1: config 0 interface 29 altsetting 243 endpoint 0x1 has invalid wMaxPacketSize 0 [ 754.094302][ T5927] usb 6-1: config 0 interface 29 has no altsetting 0 [ 754.129651][T15004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.143356][T15004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.208830][ T5927] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 754.218950][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.242754][ T5927] usb 6-1: Product: syz [ 754.254531][ T5927] usb 6-1: Manufacturer: syz [ 754.271528][ T5927] usb 6-1: SerialNumber: syz [ 754.294118][ T5927] usb 6-1: config 0 descriptor?? [ 754.317643][T10520] usb 1-1: device descriptor read/64, error -71 [ 754.426858][T10520] usb usb1-port1: attempt power cycle [ 754.786570][T10520] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 754.837954][T10520] usb 1-1: Using ep0 maxpacket: 32 [ 754.850189][T10520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.880860][T10520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.939833][T10520] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 755.084242][T10520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.174886][T15014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.204419][T10520] usb 1-1: config 0 descriptor?? [ 755.213921][T15014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.279414][T15014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.298381][T15014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.311697][T10520] hub 1-1:0.0: USB hub found [ 755.323657][T15014] tipc: Started in network mode [ 755.349482][T15014] tipc: Node identity ac14140f, cluster identity 4711 [ 755.479656][T15014] tipc: New replicast peer: 255.255.255.255 [ 755.514630][T10520] hub 1-1:0.0: 1 port detected [ 755.522228][T15014] tipc: Enabled bearer , priority 10 [ 755.547721][T11439] usb 4-1: USB disconnect, device number 99 [ 755.977690][T15023] input: syz0 as /devices/virtual/input/input85 [ 756.204408][T15025] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2721'. [ 756.265714][T10520] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 756.276673][T10520] usb 1-1: USB disconnect, device number 114 [ 756.284164][ T2151] usb 1-1: Failed to suspend device, error -19 [ 756.646376][ T2151] tipc: Node number set to 2886997007 [ 757.071998][ T5927] peak_usb 6-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 757.145926][ T5927] peak_usb 6-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 757.401021][ T5927] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -71 [ 757.584106][ T5927] usb 6-1: USB disconnect, device number 69 [ 757.781013][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'. [ 757.873234][T15053] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.2731' sets config #0 [ 757.998831][T15053] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.2731' sets config #1 [ 758.071116][T15052] ALSA: mixer_oss: invalid OSS volume '' [ 758.134944][T15059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2735'. [ 758.176922][T15059] only policy match revision 0 supported [ 758.176942][T15059] unable to load match [ 758.192445][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2735'. [ 758.214768][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2737'. [ 758.603571][ T5927] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 759.399340][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 759.410729][ T5927] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 759.425435][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.455942][T15078] FAULT_INJECTION: forcing a failure. [ 759.455942][T15078] name failslab, interval 1, probability 0, space 0, times 0 [ 759.468971][ T5927] usb 5-1: Product: syz [ 759.480609][ T5927] usb 5-1: Manufacturer: syz [ 759.480655][T15078] CPU: 1 UID: 0 PID: 15078 Comm: syz.3.2741 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 759.480683][T15078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 759.480696][T15078] Call Trace: [ 759.480706][T15078] [ 759.480717][T15078] dump_stack_lvl+0x189/0x250 [ 759.480759][T15078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.480791][T15078] ? __pfx__printk+0x10/0x10 [ 759.480820][T15078] ? __pfx___might_resched+0x10/0x10 [ 759.480841][T15078] ? fs_reclaim_acquire+0x7d/0x100 [ 759.480879][T15078] should_fail_ex+0x414/0x560 [ 759.480908][T15078] should_failslab+0xa8/0x100 [ 759.480940][T15078] __kmalloc_noprof+0xcb/0x4f0 [ 759.480966][T15078] ? kfree+0x4d/0x440 [ 759.480988][T15078] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 759.481022][T15078] tomoyo_realpath_from_path+0xe3/0x5d0 [ 759.481063][T15078] ? tomoyo_mount_permission+0x27a/0x970 [ 759.481089][T15078] tomoyo_mount_permission+0x377/0x970 [ 759.481119][T15078] ? stack_depot_save_flags+0x40/0x910 [ 759.481142][T15078] ? tomoyo_mount_permission+0x27a/0x970 [ 759.481167][T15078] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 759.481265][T15078] security_sb_mount+0xec/0x350 [ 759.481298][T15078] path_mount+0xbc/0xfe0 [ 759.481324][T15078] ? user_path_at+0x44/0x60 [ 759.481342][T15078] ? kmem_cache_free+0x192/0x3f0 [ 759.481380][T15078] __se_sys_mount+0x317/0x410 [ 759.481416][T15078] ? __pfx___se_sys_mount+0x10/0x10 [ 759.481449][T15078] ? do_syscall_64+0xba/0x210 [ 759.481476][T15078] ? __x64_sys_mount+0x20/0xc0 [ 759.481507][T15078] do_syscall_64+0xf6/0x210 [ 759.481537][T15078] ? clear_bhb_loop+0x60/0xb0 [ 759.481563][T15078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.481584][T15078] RIP: 0033:0x7f754898e969 [ 759.481604][T15078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.481622][T15078] RSP: 002b:00007f7549890038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 759.481645][T15078] RAX: ffffffffffffffda RBX: 00007f7548bb5fa0 RCX: 00007f754898e969 [ 759.481661][T15078] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 759.481675][T15078] RBP: 00007f7549890090 R08: 0000000000000000 R09: 0000000000000000 [ 759.481687][T15078] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 759.481701][T15078] R13: 0000000000000000 R14: 00007f7548bb5fa0 R15: 00007f7548cdfa28 [ 759.481734][T15078] [ 759.481743][T15078] ERROR: Out of memory at tomoyo_realpath_from_path. [ 759.505948][ T5927] usb 5-1: SerialNumber: syz [ 759.945652][ T5927] usb 5-1: config 0 descriptor?? [ 761.501413][ T5927] usb 5-1: USB disconnect, device number 118 [ 761.664173][T15098] xt_connbytes: Forcing CT accounting to be enabled [ 761.671268][T15098] Cannot find add_set index 0 as target [ 761.821450][T15109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2747'. [ 762.006398][T10520] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 762.158304][T10520] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 762.167368][T10520] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 762.191767][T10520] usb 4-1: config 220 has no interface number 2 [ 762.207394][T10520] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 762.501661][T10520] usb 4-1: config 220 interface 0 has no altsetting 0 [ 762.509176][T10520] usb 4-1: config 220 interface 76 has no altsetting 0 [ 762.516455][T10520] usb 4-1: config 220 interface 1 has no altsetting 0 [ 762.578113][T10520] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 762.605571][T10520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.655005][T10520] usb 4-1: Product: syz [ 762.672129][T10520] usb 4-1: Manufacturer: syz [ 762.709091][T10520] usb 4-1: SerialNumber: syz [ 763.038806][T10520] usb 4-1: selecting invalid altsetting 0 [ 763.103568][T10520] usb 4-1: selecting invalid altsetting 0 [ 763.139711][T10520] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 763.154081][T10520] usb 4-1: No valid video chain found. [ 763.213055][T10520] usb 4-1: selecting invalid altsetting 0 [ 763.329900][T10520] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 763.427402][ T5927] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 763.477832][T10520] usb 4-1: USB disconnect, device number 100 [ 763.587769][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 763.608790][ T5927] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 763.646671][ T5927] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 763.712174][ T5927] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 763.722267][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.770775][ T5927] usb 1-1: Product: syz [ 763.816336][ T5927] usb 1-1: Manufacturer: syz [ 763.845757][ T5927] usb 1-1: SerialNumber: syz [ 764.229894][ T5927] usb 1-1: 0:2 : does not exist [ 764.338109][ T5927] usb 1-1: USB disconnect, device number 115 [ 764.848264][ T30] audit: type=1400 audit(1747549964.008:832): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A3732206B420A52737346696C653A092020203232363932206B420A52737353686D656D3A092020202020202030206B420A566D446174613A092020203336353834206B420A566D53746B3A092020202020313332206B420A566D4578653A092020202031363732206B420A566D4C69623A092020202020202038206B420A566D5054453A092020202020313332206B420A566D537761703A092020202020202030206B420A48756765746C6250616765733A092020202020202030206B420A436F726544756D70696E673A09300A5448505F656E61626C65643A09310A756E7461675F6D61736B3A093078666666 pid=15145 comm="syz.5.2758" [ 765.136390][ T2151] usb 6-1: new low-speed USB device number 70 using dummy_hcd [ 765.246742][ T5927] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 765.296482][ T2151] usb 6-1: Invalid ep0 maxpacket: 16 [ 765.407013][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 765.413904][ T5927] usb 1-1: config 0 has an invalid interface number: 150 but max is 0 [ 765.422394][ T5927] usb 1-1: config 0 has no interface number 0 [ 765.429447][ T5927] usb 1-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice=e1.1f [ 765.446389][ T2151] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 765.450762][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.479509][ T5927] usb 1-1: config 0 descriptor?? [ 765.638344][ T2151] usb 6-1: Invalid ep0 maxpacket: 16 [ 765.649853][ T2151] usb usb6-port1: attempt power cycle [ 765.705821][ T5927] usb 1-1: string descriptor 0 read error: -71 [ 765.742601][ T5927] snd-usb-caiaq 1-1:0.150: can't set alt interface. [ 765.750192][ T5927] usb 1-1: unable to init card! (ret=-5) [ 765.759450][ T5927] snd-usb-caiaq 1-1:0.150: probe with driver snd-usb-caiaq failed with error -5 [ 765.828014][ T5927] usb 1-1: USB disconnect, device number 116 [ 766.006396][ T2151] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 766.036123][ T2151] usb 6-1: Invalid ep0 maxpacket: 16 [ 766.166410][ T2151] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 766.206988][ T2151] usb 6-1: Invalid ep0 maxpacket: 16 [ 766.212631][ T2151] usb usb6-port1: unable to enumerate USB device [ 766.424070][T15176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2770'. [ 766.456452][T11439] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 766.542653][T15181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.553906][T15181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.586713][T10520] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 766.609731][T11439] usb 5-1: config 0 has no interfaces? [ 766.618661][T11439] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 766.630005][T11439] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 766.638397][T11439] usb 5-1: Product: syz [ 766.649646][T11439] usb 5-1: Manufacturer: syz [ 766.657644][T11439] usb 5-1: SerialNumber: syz [ 766.673921][T11439] usb 5-1: config 0 descriptor?? [ 766.746567][T10520] usb 1-1: Using ep0 maxpacket: 16 [ 766.755776][T10520] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 766.776355][T10520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.788686][T10520] usb 1-1: Product: syz [ 766.792891][T10520] usb 1-1: Manufacturer: syz [ 766.798000][T10520] usb 1-1: SerialNumber: syz [ 766.817641][T10520] usb 1-1: config 0 descriptor?? [ 767.364708][T15189] No such timeout policy "syz0" [ 767.378502][T15189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2773'. [ 767.389223][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2773'. [ 767.403748][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2773'. [ 767.487662][ T2151] usb 5-1: USB disconnect, device number 119 [ 767.555901][T10520] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 767.655794][T15193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.788479][T15193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.050591][T15197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.060517][T15197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.276739][T15204] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 769.952606][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2782'. [ 771.143857][T15238] kvm: pic: non byte write [ 771.148899][T15238] kvm: pic: non byte write [ 771.153409][T15238] kvm: pic: non byte write [ 771.187542][T15238] kvm: pic: level sensitive irq not supported [ 771.187918][T15238] kvm: pic: single mode not supported [ 771.194394][T15238] kvm: pic: level sensitive irq not supported [ 771.254468][T15243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.290269][T15243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.557075][T10520] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 771.799023][T10520] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 771.799057][T10520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.810730][T10520] usb 5-1: config 0 descriptor?? [ 771.813967][T10520] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 771.909698][T15251] netlink: 'syz.3.2793': attribute type 10 has an invalid length. [ 771.909779][T15251] team0: Device dummy0 is up. Set it down before adding it as a team port [ 772.206602][T15272] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2798'. [ 772.806686][T15287] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2801'. [ 772.826751][T10520] gspca_cpia1: usb_control_msg 05, error -110 [ 772.861608][T10520] gspca_cpia1: usb_control_msg 01, error -32 [ 772.898160][T10520] gspca_cpia1: usb_control_msg 01, error -32 [ 772.920428][T10520] gspca_cpia1: usb_control_msg 01, error -32 [ 772.930597][T10520] gspca_cpia1: usb_control_msg 01, error -32 [ 772.936956][T10520] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 773.736613][T10520] usb 5-1: USB disconnect, device number 120 [ 774.705905][T10029] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 774.941433][T10029] usb 5-1: Using ep0 maxpacket: 16 [ 774.988628][T10029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.040743][T10029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.118606][T10029] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice=2c.00 [ 775.131309][T10029] usb 5-1: New USB device strings: Mfr=136, Product=0, SerialNumber=0 [ 775.154095][T10029] usb 5-1: Manufacturer: syz [ 775.167188][T10029] usb 5-1: config 0 descriptor?? [ 775.182629][T10029] usbhid 5-1:0.0: can't add hid device: -22 [ 775.191462][T10029] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 775.351672][T15319] Option '[y$ [ 775.351672][T15319] >ڎTkS@SVfhJ' to dns_resolver key: bad/missing value [ 775.485673][T15317] netlink: 'syz.3.2813': attribute type 10 has an invalid length. [ 775.924962][ T9] usb 5-1: USB disconnect, device number 121 [ 775.986374][ T2151] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 776.146364][ T2151] usb 6-1: Using ep0 maxpacket: 8 [ 776.162480][ T2151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 776.206358][ T2151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 776.259760][ T2151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 776.296394][ T2151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 776.335508][ T2151] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 776.366072][ T2151] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 776.436415][ T2151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.487086][ T2151] usb 6-1: config 0 descriptor?? [ 776.682298][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2817'. [ 776.714818][T15319] Cannot find add_set index 0 as target [ 776.721925][T15319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.759563][T15319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.835486][T15319] Option '[y$ [ 776.835486][T15319] >ڎTkS@SVfhJ' to dns_resolver key: bad/missing value [ 776.974184][T15335] macvlan6: entered promiscuous mode [ 777.007684][T10520] usb 6-1: USB disconnect, device number 74 [ 777.117249][ T2151] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 777.198848][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 777.231567][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 777.240838][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 777.257240][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 777.265009][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 777.302151][ T7564] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.316687][ T2151] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 777.325128][ T2151] usb 5-1: config 0 has no interface number 0 [ 777.331921][ T2151] usb 5-1: config 0 interface 29 altsetting 243 endpoint 0x1 has invalid wMaxPacketSize 0 [ 777.361768][ T2151] usb 5-1: config 0 interface 29 has no altsetting 0 [ 777.407047][ T2151] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 777.426378][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.434527][ T2151] usb 5-1: Product: syz [ 777.440930][ T2151] usb 5-1: Manufacturer: syz [ 777.445704][ T2151] usb 5-1: SerialNumber: syz [ 777.459456][ T2151] usb 5-1: config 0 descriptor?? [ 777.640362][ T7564] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.027708][ T7564] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.258253][ T7564] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 778.323272][ T7564] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.349130][T15361] netlink: 'syz.5.2821': attribute type 10 has an invalid length. [ 778.602057][T15361] team0: Device dummy0 is up. Set it down before adding it as a team port [ 779.053293][T15373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.084856][T15373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.386501][ T55] Bluetooth: hci2: command tx timeout [ 779.862351][ T2151] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 780.006497][ T2151] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 781.337508][ T7564] bond0 (unregistering): left promiscuous mode [ 781.354274][ T7564] bond_slave_0: left promiscuous mode [ 781.369745][ T7564] bond_slave_1: left promiscuous mode [ 781.427689][ T7564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.449107][ T7564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.476612][ T55] Bluetooth: hci2: command tx timeout [ 781.484638][ T7564] bond0 (unregistering): Released all slaves [ 781.587601][ T2151] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 781.597433][T15393] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2832'. [ 781.604257][ T2151] usb 5-1: USB disconnect, device number 122 [ 781.671697][T15393] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2832'. [ 781.869282][T15397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2833'. [ 781.871553][T15393] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2832'. [ 781.959057][T15391] netlink: 'syz.4.2827': attribute type 10 has an invalid length. [ 782.395525][T15391] dummy0: entered promiscuous mode [ 782.414565][T15391] team0: Device dummy0 failed to register rx_handler [ 782.526433][T10520] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 782.733740][T15410] team_slave_1: mtu greater than device maximum [ 782.746446][T10520] usb 6-1: Using ep0 maxpacket: 32 [ 782.755019][T10520] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 782.763460][T10520] usb 6-1: config 4 has no interface number 0 [ 782.769921][T10520] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.781105][T10520] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.791266][T10520] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 782.800903][T10520] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.828267][T10520] hub 6-1:4.128: USB hub found [ 783.034605][T10520] hub 6-1:4.128: 2 ports detected [ 783.056381][T10520] hub 6-1:4.128: Using single TT (err -22) [ 783.088627][ T7564] hsr_slave_0: left promiscuous mode [ 783.234929][ T7564] veth1_macvtap: left promiscuous mode [ 783.253193][T10520] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 783.296141][ T7564] veth1_vlan: left promiscuous mode [ 783.304020][T10520] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 783.333648][ T7564] veth0_vlan: left promiscuous mode [ 783.400100][T10520] usb 6-1: USB disconnect, device number 75 [ 783.546738][ T55] Bluetooth: hci2: command tx timeout [ 783.789106][T15437] netlink: 'syz.2.2839': attribute type 10 has an invalid length. [ 784.406295][T10520] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 784.426968][ T7564] team0 (unregistering): Port device team_slave_1 removed [ 784.470533][ T7564] team0 (unregistering): Port device team_slave_0 removed [ 784.567290][T10520] usb 6-1: Using ep0 maxpacket: 32 [ 784.580893][T10520] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 784.601562][T10520] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.631880][T10520] usb 6-1: config 0 descriptor?? [ 784.654975][T10520] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 784.914473][T15350] chnl_net:caif_netlink_parms(): no params data found [ 785.034099][T15437] team0: Device dummy0 is up. Set it down before adding it as a team port [ 785.314608][T15350] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.325173][T15350] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.333884][T15350] bridge_slave_0: entered allmulticast mode [ 785.342245][T15350] bridge_slave_0: entered promiscuous mode [ 785.355976][T15350] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.363846][T15350] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.371365][T15350] bridge_slave_1: entered allmulticast mode [ 785.378922][T15350] bridge_slave_1: entered promiscuous mode [ 785.459721][T15350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.477212][T15350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.584651][ T7564] IPVS: stop unused estimator thread 0... [ 785.633798][ T55] Bluetooth: hci2: command tx timeout [ 785.648755][T15350] team0: Port device team_slave_0 added [ 785.685685][T15350] team0: Port device team_slave_1 added [ 785.830684][T15350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.856591][T15350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.894894][T15350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.369263][T15350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.390118][T10520] usb 6-1: USB disconnect, device number 76 [ 786.397436][T15350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.424987][T15350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.495184][T15483] netlink: 'syz.4.2850': attribute type 21 has an invalid length. [ 786.523057][T15483] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2850'. [ 786.604955][T15483] netlink: 'syz.4.2850': attribute type 4 has an invalid length. [ 786.621802][T15483] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2850'. [ 786.996299][T10520] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 787.098194][T15492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.118023][T15492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.178533][T15350] hsr_slave_0: entered promiscuous mode [ 787.190229][T15350] hsr_slave_1: entered promiscuous mode [ 787.200589][T10520] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.245289][T10520] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 787.259616][T15350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 787.267722][T15350] Cannot create hsr debugfs directory [ 787.279963][T10520] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 787.300482][T10520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.319727][T10520] usb 5-1: Product: syz [ 787.329582][T10520] usb 5-1: Manufacturer: syz [ 787.337872][T10520] usb 5-1: SerialNumber: syz [ 787.756929][T15483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.781473][T15483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.854046][T10520] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 787.928069][T15504] tmpfs: Unknown parameter 'fd' [ 788.073007][T10520] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 788.073593][T15506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.099430][T10520] usb 5-1: USB disconnect, device number 123 [ 788.109252][T15506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.148216][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.066861][ T2151] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 789.124606][T15350] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 789.150201][T15350] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 789.226656][ T2151] usb 5-1: Using ep0 maxpacket: 16 [ 789.233902][ T2151] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.245142][ T2151] usb 5-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 789.261392][ T2151] usb 5-1: config 0 interface 0 has no altsetting 0 [ 789.268322][ T2151] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 789.283445][ T2151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.410402][ T2151] usb 5-1: config 0 descriptor?? [ 789.422781][T15350] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 789.447970][ T2151] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 789.577277][T15350] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 790.046515][ T2151] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 790.197127][T15350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.226587][ T2151] usb 6-1: Using ep0 maxpacket: 8 [ 790.233864][ T2151] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.246286][ T2151] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 790.275307][ T2151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 790.275889][T15350] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.315257][ T2151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 790.362105][ T2151] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 790.364132][ T7564] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.378376][ T7564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.407142][T10029] usb 5-1: USB disconnect, device number 124 [ 790.431873][ T2151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.448453][ T2151] usb 6-1: Product: syz [ 790.452828][ T2151] usb 6-1: Manufacturer: syz [ 790.457978][ T2151] usb 6-1: SerialNumber: syz [ 790.510463][ T2151] usb 6-1: config 0 descriptor?? [ 790.527176][ T7564] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.533807][ T2151] imon_raw 6-1:0.0: IR endpoint missing [ 790.534439][ T7564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.566403][T15540] netlink: 'syz.0.2860': attribute type 10 has an invalid length. [ 790.676686][T15540] team0: Device dummy0 is up. Set it down before adding it as a team port [ 790.723409][ T2151] usb 6-1: USB disconnect, device number 77 [ 790.773810][T15350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.923258][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2863'. [ 791.223559][T15350] veth0_vlan: entered promiscuous mode [ 791.229308][T10520] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 791.321542][T15350] veth1_vlan: entered promiscuous mode [ 791.438993][T10520] usb 5-1: Using ep0 maxpacket: 16 [ 791.480734][T10520] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 791.495851][T15350] veth0_macvtap: entered promiscuous mode [ 791.531764][T10520] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 791.585998][T15350] veth1_macvtap: entered promiscuous mode [ 791.603418][T10520] usb 5-1: config 0 has an invalid descriptor of length 125, skipping remainder of the config [ 791.624498][T10520] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 791.694741][T15350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.712019][T10520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 19200, setting to 64 [ 791.757726][T15570] Cannot find add_set index 0 as target [ 791.846007][T10520] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.863091][T15350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.883675][T15573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2868'. [ 791.914214][T15350] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.939515][T10520] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 791.965716][T15573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2868'. [ 791.980017][T15350] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.994652][T10520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.019667][T15350] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.039367][T10520] usb 5-1: Product: syz [ 792.056422][T10520] usb 5-1: Manufacturer: syz [ 792.070976][T15350] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.086607][T10520] usb 5-1: SerialNumber: syz [ 792.119234][T10520] usb 5-1: config 0 descriptor?? [ 792.170551][T10520] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 792.381681][T10520] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 792.404884][T10520] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 792.435903][T10520] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 792.465250][T10520] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 792.489650][T10520] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 792.506410][T10520] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 792.562572][T10520] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 792.612821][T10520] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 792.635953][T10520] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 792.658490][T10520] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 792.677408][T10520] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 792.690140][T10520] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 792.753325][T10520] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 792.774018][T10520] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 792.809745][T10520] usb 5-1: USB disconnect, device number 125 [ 792.870259][T10520] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 792.957558][T10520] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 793.023987][T10520] keyspan 5-1:0.0: device disconnected [ 793.281831][ T7564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.297166][ T7564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.465489][ T7564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.475036][ T7564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.907137][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 794.233491][T15613] macvlan12: entered promiscuous mode [ 794.233664][T15604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.298788][T15617] netlink: 'syz.4.2874': attribute type 20 has an invalid length. [ 794.361334][T15604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.329905][T15641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.356803][T15641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.666859][ T5927] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 795.826319][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 795.833090][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 795.920068][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 795.965464][ T5927] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 796.032351][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 796.101645][ T5927] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 796.163074][ T5927] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 796.191435][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.220362][ T5927] usb 5-1: config 0 descriptor?? [ 796.264754][ T55] Bluetooth: hci4: urb ffff888024a24800 submission failed (90) [ 796.469699][T11440] usb 5-1: USB disconnect, device number 126 [ 797.475137][T15671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.606733][T15671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.171053][T15671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.181458][T15671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.404260][T15681] fuse: Unknown parameter 'root000 000040000' [ 798.809711][T15687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.840903][T15687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.099029][ T30] audit: type=1326 audit(1747549998.278:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2866f8e969 code=0x7fc00000 [ 799.200891][ T30] audit: type=1326 audit(1747549998.278:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2866f8e969 code=0x7fc00000 [ 799.278230][ T30] audit: type=1326 audit(1747549998.278:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2866f8e969 code=0x7fc00000 [ 799.346284][ T30] audit: type=1326 audit(1747549998.278:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2866f8e969 code=0x7fc00000 [ 799.427069][ T30] audit: type=1326 audit(1747549998.278:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2866f8e969 code=0x7fc00000 [ 799.458027][ T30] audit: type=1326 audit(1747549998.278:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2866f8e969 code=0x7fc00000 [ 799.503032][ T30] audit: type=1326 audit(1747549998.278:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2866f8e969 code=0x7fc00000 [ 799.525432][ C1] vkms_vblank_simulate: vblank timer overrun [ 799.637126][ T30] audit: type=1326 audit(1747549998.278:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2866f8e969 code=0x7fc00000 [ 799.659567][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.678495][T15727] netlink: 'syz.2.2898': attribute type 21 has an invalid length. [ 800.688845][T15727] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2898'. [ 800.757510][T15727] netlink: 'syz.2.2898': attribute type 4 has an invalid length. [ 800.816413][T15727] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2898'. [ 800.879733][T15727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.967166][T15727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.999619][T15727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.016425][ T5927] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 801.119854][T15727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.210754][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 801.227976][ T5927] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 801.242050][ T5927] usb 4-1: config 0 has no interface number 0 [ 801.256259][ T5927] usb 4-1: config 0 interface 184 has no altsetting 0 [ 801.295926][ T5927] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 801.313540][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.331367][T15734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2900'. [ 801.358510][ T5927] usb 4-1: Product: syz [ 801.361812][T15734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2900'. [ 801.366102][ T5927] usb 4-1: Manufacturer: syz [ 801.441309][ T5927] usb 4-1: SerialNumber: syz [ 801.489511][ T5927] usb 4-1: config 0 descriptor?? [ 801.552736][ T5927] smsc75xx v1.0.0 [ 801.573080][ T5927] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 801.596491][ T5927] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 801.630193][ T30] audit: type=1326 audit(1747550000.818:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.4.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c1d8e969 code=0x7fc00000 [ 801.690297][ T30] audit: type=1326 audit(1747550000.848:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.4.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54c1d8e969 code=0x7fc00000 [ 801.752861][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2903'. [ 801.798313][T15728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.830156][T15746] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2905'. [ 801.838258][T15728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.925082][T15728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 802.279451][T15728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.412001][T15766] fuse: Unknown parameter 'Kd' [ 804.550994][T11439] usb 4-1: USB disconnect, device number 101 [ 804.815601][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 804.815620][ T30] audit: type=1326 audit(1747550003.998:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f0b8e969 code=0x7fc00000 [ 804.957337][ T30] audit: type=1326 audit(1747550004.038:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56f0b8e969 code=0x7fc00000 [ 805.046425][T11439] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 805.072107][ T30] audit: type=1326 audit(1747550004.038:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f0b8e969 code=0x7fc00000 [ 805.198145][T11439] usb 4-1: config 0 has no interfaces? [ 805.224903][T11439] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 805.237326][ T30] audit: type=1326 audit(1747550004.038:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f0b8e969 code=0x7fc00000 [ 805.296375][T11439] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 805.347464][T11439] usb 4-1: Product: syz [ 805.367707][T11439] usb 4-1: Manufacturer: syz [ 805.372370][T11439] usb 4-1: SerialNumber: syz [ 805.386512][ T30] audit: type=1326 audit(1747550004.038:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f0b8e969 code=0x7fc00000 [ 805.422602][T11439] usb 4-1: config 0 descriptor?? [ 805.514790][ T30] audit: type=1326 audit(1747550004.038:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f0b8e969 code=0x7fc00000 [ 805.581027][ T30] audit: type=1326 audit(1747550004.038:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f0b8e969 code=0x7fc00000 [ 805.604891][ T30] audit: type=1326 audit(1747550004.038:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.2.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f0b8e969 code=0x7fc00000 [ 806.274072][T10520] usb 4-1: USB disconnect, device number 102 [ 806.336647][T15823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.337081][T15823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.867596][T15832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.920321][T15832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.206374][T11439] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 807.369414][T11439] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.390932][T11439] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 807.419863][T11439] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 807.444684][T11439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.483374][T11439] usb 4-1: config 0 descriptor?? [ 807.505881][T11439] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 807.538250][T11439] dvb-usb: bulk message failed: -22 (3/0) [ 807.612700][T11439] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 807.657283][T11439] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 807.674712][T11439] usb 4-1: media controller created [ 807.690597][T15855] netlink: 'syz.0.2937': attribute type 1 has an invalid length. [ 807.712219][T11439] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 807.721065][T15834] ------------[ cut here ]------------ [ 807.726825][T15834] usb 3-1: BOGUS control dir, pipe 80006980 doesn't match bRequestType c0 [ 807.777894][T15834] WARNING: CPU: 0 PID: 15834 at drivers/usb/core/urb.c:413 usb_submit_urb+0x1112/0x1870 [ 807.787886][T15834] Modules linked in: [ 807.793611][T15834] CPU: 0 UID: 0 PID: 15834 Comm: syz.3.2930 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 807.807158][T15834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 807.817371][T15834] RIP: 0010:usb_submit_urb+0x1112/0x1870 [ 807.823130][T15834] Code: 0f b6 44 05 00 84 c0 0f 85 38 06 00 00 45 0f b6 04 24 48 c7 c7 00 86 12 8c 48 8b 74 24 18 4c 89 fa 44 89 f1 e8 5f f7 6e fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 2b f4 ff ff 89 e9 80 [ 807.827984][T11439] dvb-usb: bulk message failed: -22 (6/0) [ 807.842883][T15834] RSP: 0018:ffffc90004b3f610 EFLAGS: 00010246 [ 807.842930][T15834] RAX: f5838b6742b91e00 RBX: ffff88801ff35300 RCX: 0000000000080000 [ 807.842949][T15834] RDX: ffffc90010c7f000 RSI: 0000000000004945 RDI: 0000000000004946 [ 807.842966][T15834] RBP: 1ffff11003fd2d6c R08: ffff8880b8923e93 R09: 1ffff110171247d2 [ 807.881130][T15834] R10: dffffc0000000000 R11: ffffed10171247d3 R12: ffff88801fe96b60 [ 807.881160][T15834] R13: dffffc0000000000 R14: 0000000080006980 R15: ffff8881422eaa60 [ 807.881193][T15834] FS: 00007f2867dba6c0(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 807.881216][T15834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 807.881236][T15834] CR2: 00007f2867d99d58 CR3: 0000000067e32000 CR4: 00000000003526f0 [ 807.881256][T15834] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 807.881270][T15834] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 807.881285][T15834] Call Trace: [ 807.881296][T15834] [ 807.881321][T15834] usb_start_wait_urb+0x114/0x4c0 [ 807.951403][T15834] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 807.957059][T15834] usb_control_msg+0x232/0x3e0 [ 807.961840][T15834] dtv5100_i2c_msg+0x250/0x330 [ 807.966804][T15834] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 807.971831][T15834] __i2c_transfer+0x871/0x2170 [ 807.976660][T15834] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.981885][T15834] ? __pfx___i2c_transfer+0x10/0x10 [ 807.987184][T15834] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 807.992598][T15834] ? i2c_transfer+0x120/0x3a0 [ 807.998357][T15834] i2c_transfer+0x25b/0x3a0 [ 808.002871][T15834] ? __pfx_i2c_transfer+0x10/0x10 [ 808.008757][T15834] ? __might_fault+0xb0/0x130 [ 808.013468][T15834] i2c_transfer_buffer_flags+0x105/0x190 [ 808.019207][T15834] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 808.025546][T15834] ? _copy_from_user+0x94/0xb0 [ 808.031086][T15834] i2cdev_write+0x112/0x1b0 [ 808.035625][T15834] vfs_writev+0x4a5/0x9a0 [ 808.040570][T15834] ? __pfx_i2cdev_write+0x10/0x10 [ 808.045613][T15834] ? __pfx_vfs_writev+0x10/0x10 [ 808.050530][T15834] ? __fget_files+0x2a/0x420 [ 808.055186][T15834] ? __fget_files+0x3a0/0x420 [ 808.059933][T15834] ? __fget_files+0x2a/0x420 [ 808.064551][T15834] do_writev+0x14d/0x2d0 [ 808.068850][T15834] ? __pfx_do_writev+0x10/0x10 [ 808.073687][T15834] ? do_syscall_64+0xba/0x210 [ 808.078445][T15834] do_syscall_64+0xf6/0x210 [ 808.082970][T15834] ? clear_bhb_loop+0x60/0xb0 [ 808.087763][T15834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.093692][T15834] RIP: 0033:0x7f2866f8e969 [ 808.099308][T15834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.120327][T15834] RSP: 002b:00007f2867dba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 808.128854][T15834] RAX: ffffffffffffffda RBX: 00007f28671b5fa0 RCX: 00007f2866f8e969 [ 808.136906][T15834] RDX: 0000000000000001 RSI: 00002000000012c0 RDI: 0000000000000005 [ 808.144952][T15834] RBP: 00007f2867010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 808.153015][T15834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.161070][T15834] R13: 0000000000000000 R14: 00007f28671b5fa0 R15: 00007f28672dfa28 [ 808.169117][T15834] [ 808.172187][T15834] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 808.179470][T15834] CPU: 0 UID: 0 PID: 15834 Comm: syz.3.2930 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 808.191527][T15834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 808.201583][T15834] Call Trace: [ 808.204860][T15834] [ 808.207793][T15834] dump_stack_lvl+0x99/0x250 [ 808.212393][T15834] ? __asan_memcpy+0x40/0x70 [ 808.216986][T15834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.222190][T15834] ? __pfx__printk+0x10/0x10 [ 808.226792][T15834] panic+0x2db/0x790 [ 808.230705][T15834] ? __pfx_panic+0x10/0x10 [ 808.235138][T15834] __warn+0x31b/0x4b0 [ 808.239126][T15834] ? usb_submit_urb+0x1112/0x1870 [ 808.244158][T15834] ? usb_submit_urb+0x1112/0x1870 [ 808.249269][T15834] report_bug+0x2be/0x4f0 [ 808.253599][T15834] ? usb_submit_urb+0x1112/0x1870 [ 808.258626][T15834] ? usb_submit_urb+0x1112/0x1870 [ 808.263656][T15834] ? usb_submit_urb+0x1114/0x1870 [ 808.268686][T15834] handle_bug+0x84/0x160 [ 808.272937][T15834] exc_invalid_op+0x1a/0x50 [ 808.277448][T15834] asm_exc_invalid_op+0x1a/0x20 [ 808.282298][T15834] RIP: 0010:usb_submit_urb+0x1112/0x1870 [ 808.287938][T15834] Code: 0f b6 44 05 00 84 c0 0f 85 38 06 00 00 45 0f b6 04 24 48 c7 c7 00 86 12 8c 48 8b 74 24 18 4c 89 fa 44 89 f1 e8 5f f7 6e fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 2b f4 ff ff 89 e9 80 [ 808.307547][T15834] RSP: 0018:ffffc90004b3f610 EFLAGS: 00010246 [ 808.313617][T15834] RAX: f5838b6742b91e00 RBX: ffff88801ff35300 RCX: 0000000000080000 [ 808.321588][T15834] RDX: ffffc90010c7f000 RSI: 0000000000004945 RDI: 0000000000004946 [ 808.329582][T15834] RBP: 1ffff11003fd2d6c R08: ffff8880b8923e93 R09: 1ffff110171247d2 [ 808.337563][T15834] R10: dffffc0000000000 R11: ffffed10171247d3 R12: ffff88801fe96b60 [ 808.345542][T15834] R13: dffffc0000000000 R14: 0000000080006980 R15: ffff8881422eaa60 [ 808.353536][T15834] usb_start_wait_urb+0x114/0x4c0 [ 808.358576][T15834] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 808.364140][T15834] usb_control_msg+0x232/0x3e0 [ 808.368919][T15834] dtv5100_i2c_msg+0x250/0x330 [ 808.373687][T15834] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 808.378544][T15834] __i2c_transfer+0x871/0x2170 [ 808.383324][T15834] ? lockdep_hardirqs_on+0x9c/0x150 [ 808.388651][T15834] ? __pfx___i2c_transfer+0x10/0x10 [ 808.393847][T15834] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 808.399225][T15834] ? i2c_transfer+0x120/0x3a0 [ 808.403930][T15834] i2c_transfer+0x25b/0x3a0 [ 808.408435][T15834] ? __pfx_i2c_transfer+0x10/0x10 [ 808.413458][T15834] ? __might_fault+0xb0/0x130 [ 808.418142][T15834] i2c_transfer_buffer_flags+0x105/0x190 [ 808.423777][T15834] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 808.429937][T15834] ? _copy_from_user+0x94/0xb0 [ 808.434718][T15834] i2cdev_write+0x112/0x1b0 [ 808.439237][T15834] vfs_writev+0x4a5/0x9a0 [ 808.443574][T15834] ? __pfx_i2cdev_write+0x10/0x10 [ 808.448598][T15834] ? __pfx_vfs_writev+0x10/0x10 [ 808.453462][T15834] ? __fget_files+0x2a/0x420 [ 808.458071][T15834] ? __fget_files+0x3a0/0x420 [ 808.462748][T15834] ? __fget_files+0x2a/0x420 [ 808.467344][T15834] do_writev+0x14d/0x2d0 [ 808.471602][T15834] ? __pfx_do_writev+0x10/0x10 [ 808.476387][T15834] ? do_syscall_64+0xba/0x210 [ 808.481089][T15834] do_syscall_64+0xf6/0x210 [ 808.485600][T15834] ? clear_bhb_loop+0x60/0xb0 [ 808.490278][T15834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.496170][T15834] RIP: 0033:0x7f2866f8e969 [ 808.500596][T15834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.520221][T15834] RSP: 002b:00007f2867dba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 808.528644][T15834] RAX: ffffffffffffffda RBX: 00007f28671b5fa0 RCX: 00007f2866f8e969 [ 808.536649][T15834] RDX: 0000000000000001 RSI: 00002000000012c0 RDI: 0000000000000005 [ 808.544618][T15834] RBP: 00007f2867010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 808.552589][T15834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.560555][T15834] R13: 0000000000000000 R14: 00007f28671b5fa0 R15: 00007f28672dfa28 [ 808.568535][T15834] [ 808.571975][T15834] Kernel Offset: disabled [ 808.576323][T15834] Rebooting in 86400 seconds..