last executing test programs: 9.147066362s ago: executing program 3 (id=1013): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x15, 0x1e, 0x3, 0x8, 0x6, 0xb, 0x2, 0x2}}) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000000480)="14bece2842f3c01c810890a4390229a8b58773ee763f2dd082c5ecffb1a3a7f44f7980b58250c9116e8f6d3e8e8a747d5881ecb67e089268ea7de82c44e90e387012a922d5f09d676a40e2e906dcb0d7895dbcf3c69f0209499a8aa09fe6507a4fa344563d8f046ef0cd5daa360c7966958de73b85af7209382dd65617346206aa76006cee59a7143a33b15716b4aadbe02ab7fd63dbfa95bf3d3bd603865e2b8296119b856521f6a6a6120d94253036ae5ab3802f", 0xb5) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f00000019c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) shutdown(r4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0xc, 0x104, &(0x7f0000000080)}) 8.324869982s ago: executing program 3 (id=1016): syz_usb_connect$uac1(0x3, 0x94, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0) 7.972992376s ago: executing program 0 (id=1019): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f00000037c0)=@pppoe={0x18, 0x0, {0x0, @random="b2812cf1cfb0", 'veth0_to_hsr\x00'}}, 0x80, &(0x7f00000004c0)}, 0x48f5) recvmmsg(r0, &(0x7f0000003680)=[{{&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000340)=""/218, 0xda}, {&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f00000006c0)=""/158, 0x9e}, {&(0x7f0000000140)}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000000780)=""/243, 0xf3}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000880)=""/197, 0xc5}, {&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000b00)=""/4096, 0x1000}], 0xa, &(0x7f0000000a40)=""/57, 0x39}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001bc0)=""/139, 0x8b}, {&(0x7f0000001c80)=""/181, 0xb5}, {&(0x7f0000001d40)=""/93, 0x5d}, {&(0x7f0000001dc0)=""/53, 0x35}, {&(0x7f0000001e00)=""/66, 0x42}], 0x5, &(0x7f0000001f00)=""/116, 0x74}, 0x7}, {{&(0x7f0000001f80)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000002080)=[{&(0x7f0000002000)=""/124, 0x7c}], 0x1, &(0x7f00000020c0)=""/4096, 0x1000}}, {{&(0x7f00000030c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003140)=""/139, 0x8b}, {&(0x7f0000003200)=""/219, 0xdb}, {&(0x7f0000003300)=""/165, 0xa5}], 0x3, &(0x7f0000003400)}, 0x3}, {{&(0x7f0000003440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000035c0)=[{&(0x7f00000034c0)=""/216, 0xd8}], 0x1, &(0x7f0000003600)=""/96, 0x60}, 0x2}], 0x5, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0xaf1, 0x494e4f4b, 0x7, 0x3, [{0x6, 0x4}, {0x80000000, 0x6}, {0x3, 0x6}, {0x800000, 0x5884}, {0x7, 0x36}, {0x3d7, 0x5}, {0xb, 0x7}, {0x7, 0x4}], 0xff, 0x5, 0x8, 0x0, 0x4}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000008009a000040"]) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) faccessat(0xffffffffffffffff, 0x0, 0x0) munlockall() (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6, 0xdb90}}, './file0\x00'}) epoll_wait(r3, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x2) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munlockall() r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@mcast2, 0x4e23, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x73, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6b4}, {0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x100, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0x32}, 0x2, @in=@private=0xa010102, 0x0, 0x4}}, 0xe8) (async) socket$key(0xf, 0x3, 0x2) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) (async) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 7.878618537s ago: executing program 0 (id=1020): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000009800)=[{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001400)="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", 0xfc}, {&(0x7f0000000000)="1043c18948", 0x5}], 0x2, 0x0, 0x0, 0x10}], 0x1, 0x80) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.513006317s ago: executing program 2 (id=1032): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe0a42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000000)=0x7, 0xfe09) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)=""/7, &(0x7f0000000080)=0x20) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x41, 0x3, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b0, 0x1f0, 0x1f0, 0x1b0, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xb8, 0xe0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@ttl={{0x28}}, @common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@dev, @multicast2, 0x0, 0x0, 'xfrm0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) r4 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) write$binfmt_aout(r4, 0x0, 0xffffffdb) ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) 5.146473747s ago: executing program 3 (id=1033): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) read(r0, &(0x7f0000001a80)=""/4096, 0x12) 4.953151629s ago: executing program 3 (id=1034): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x40, 0x11, 0xc2, "0605e1b17fea76ff5764c19e2729990dc838fa25ab884d022656f79a2c5e64d2f5f6a7c6465070ebe6b879d74329fabd5af85844eeb30a15c1a3cf44ad8003fbdc4dba9aa46233678f5ab1ac88278f9df5f336e19e5af2013af89197a276bb3758b263f891fbd3d35a3092948d3436e490cb776a1197280e4ee12ceb511c10b150d29d4c29281e90d112d6bc4d4d12bbf3ec0af1a5ea54815e0e00abc396946e9521627ae68ab02e9c717c17ca27dfe209dd2f5d557f6201a836c94f01bfe7884a7d"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x4aa, 0x1, 0x4, 0x85f6, 0x6, 0x630b, 0xb3, 0x9, 0x96, 0x0, 0x9, 0x80}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000600)={0x20, 0x83, 0x2}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0xf74b}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x10}}) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4110, 0x100e}], 0x1, 0xf0, 0x67) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40015b19, 0x110e22fff6) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000001c0)=0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="d0010000cceec810450c4062ae86010203010902247cb91b7900000904"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)={0x184, r4, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x7b}}}}, [@NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfff, 0x9, 0xffff, 0x7f, 0x5, 0x6, 0x3]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x3, 0x7f, 0xb, 0x30, 0x60, 0x8, 0x3, 0xb, 0x1, 0x12, 0x18, 0x36, 0x9, 0x9, 0x6c, 0x30, 0x36, 0x16, 0x18, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9a5, 0x7, 0x8, 0x5, 0x6, 0x2, 0xf64, 0x9]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x3, 0xd, 0x8001, 0x0, 0x3, 0x7184, 0x3]}}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x6}, {0x3}, {0x7, 0x8}, {0x2}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x4, 0x9}, {0x3, 0x3}, {0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x2, 0x9}, {0x2}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0x3}, {0x3, 0x8}, {0x1, 0x9}, {0x5, 0x5}, {0x1, 0x4}, {0x2, 0x3}, {0x1, 0xa}, {0x6, 0x3}, {0x2, 0x7}, {0x6, 0x8}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0x4, 0x2, 0x1b, 0x36, 0xc, 0x12, 0x16, 0x3, 0x2c, 0x6c, 0x60, 0x1b, 0x1, 0x2, 0x4, 0x9, 0x12, 0x1b, 0x6, 0x6, 0x1b, 0x9, 0x6, 0x6, 0x3, 0x16, 0x4, 0x36, 0x2, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0xcfbf, 0x3, 0x5, 0x2, 0x9, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x65a, 0x0, 0x2, 0x4, 0x1, 0x10]}}]}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x23, 0x24, [{}, {0x16}, {0x5}, {0x16}, {0x5, 0x1}, {0x48}, {0x0, 0x1}, {0x4, 0x1}, {0x18, 0x1}, {0x36, 0x1}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x51}, {0x16}, {0x2, 0x1}, {0x4, 0x1}, {0x12}, {0x48, 0x1}, {0x2}, {0x9, 0x1}, {0x60, 0x1}, {0x16, 0x1}, {0x30}, {0x6c}, {0x4}, {0x24}, {0x30, 0x1}, {0x4}, {}, {0x9, 0x1}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}], @NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, [{0x6}, {0x60}, {0x24}, {0x1b, 0x1}, {0x16, 0x1}, {0x9, 0x1}, {0x24}, {0x18}, {0x6c, 0x1}, {0x3}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x20004011) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000500000000000000740000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f837974fd76b540a8d000000b7030010a4160000850000000600000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x2}) 4.659633852s ago: executing program 0 (id=1036): r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r1, 0x1000, &(0x7f0000002a80)=""/4096}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000ac0)={'veth0_to_hsr\x00', &(0x7f0000000480)=@ethtool_link_settings={0x2, 0xfffffffc, 0x9, 0x0, 0x7, 0x10, 0x0, 0xff, 0x20, 0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0x80000, 0x3a4, 0xfffffffd]}}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001840010028bd7000fedce12580fa1408ff03190380110000"], 0x1c}}, 0x0) fallocate(r3, 0x0, 0xb7d4, 0x1001f0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x10}, {0xffff, 0xfff0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1ff, 0x6, 0x7, 0x2}}]}]}}}]}, 0x7c}}, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x2ea, 0x0, r9}, &(0x7f0000000240), &(0x7f00000001c0)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000300)=0x28cc, 0x4) fallocate(r3, 0x3, 0x4, 0x10000) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r10, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r12 = accept4(r10, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) sendmmsg(r11, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="f48f2d", 0x7313485bca3e9141}], 0x1}}], 0x2, 0x0) recvmsg$kcm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/141, 0x8d}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.24084971s ago: executing program 1 (id=1038): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x60103, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'erspan0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x7800, 0x80, 0x4, 0x7ff, {{0x32, 0x4, 0x3, 0x0, 0xc8, 0x66, 0x0, 0x7f, 0x29, 0x0, @multicast1, @private=0xa010100, {[@lsrr={0x83, 0x13, 0x68, [@loopback, @dev={0xac, 0x14, 0x14, 0x43}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @cipso={0x86, 0x21, 0x1, [{0x1, 0x12, "edac0303000000e3ffffff20dff9001b"}, {0x1, 0x4, "b8ff"}, {0x0, 0x5, "989d25"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x37, 0x3, [{0x6, 0x4, "389d"}, {0x7, 0xe, "6fe783e4a9fd014d7c5e1aaf"}, {0x2, 0x11, "149fb209fcec75b6ce3fea6f96077f"}, {0x0, 0xe, "ccd8392000199c6806eccc95"}]}, @cipso={0x86, 0x1c, 0xdaab9d15b434c6fb, [{0x0, 0x7, "f765c76dea"}, {0x5, 0xf, "87a01cacc0363c92a2077f8da2"}]}, @noop, @ssrr={0x89, 0x1f, 0x64, [@dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010102, @empty, @local, @private=0xa010102]}, @end, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbd7000fbdbdf051000000008000900b09dad121c0001800800010019d34c7555ca5e7fe0f00e3aea1aa618f8700f324a7661c2f915c080cf4fa714d277fe86cdca0f9bd7f95bb30b5a030b588338ee2d5ecd2fec78294bdbad09e1b147f55c73919e9d778d4f28e13c38b6e88f7b7e39c2e61b6842814e465294a2e9ab41d8ed943518c8c43d36a2bf932f1539079af05cfbad03e6ddcfc54c281e07f04d00add0a3a09c2bac5431ab9c4abd633d8469ec90d328", @ANYRES32=r2, @ANYBLOB="08000300020000000800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0, 0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x0, {{0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, 0x0, 0x2, [{{0xa, 0x4e23, 0x1, @mcast2, 0x1}}, {{0xa, 0x4e23, 0x9, @loopback, 0x2}}]}, 0x190) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00141202800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x60103, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'erspan0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x7800, 0x80, 0x4, 0x7ff, {{0x32, 0x4, 0x3, 0x0, 0xc8, 0x66, 0x0, 0x7f, 0x29, 0x0, @multicast1, @private=0xa010100, {[@lsrr={0x83, 0x13, 0x68, [@loopback, @dev={0xac, 0x14, 0x14, 0x43}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @cipso={0x86, 0x21, 0x1, [{0x1, 0x12, "edac0303000000e3ffffff20dff9001b"}, {0x1, 0x4, "b8ff"}, {0x0, 0x5, "989d25"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x37, 0x3, [{0x6, 0x4, "389d"}, {0x7, 0xe, "6fe783e4a9fd014d7c5e1aaf"}, {0x2, 0x11, "149fb209fcec75b6ce3fea6f96077f"}, {0x0, 0xe, "ccd8392000199c6806eccc95"}]}, @cipso={0x86, 0x1c, 0xdaab9d15b434c6fb, [{0x0, 0x7, "f765c76dea"}, {0x5, 0xf, "87a01cacc0363c92a2077f8da2"}]}, @noop, @ssrr={0x89, 0x1f, 0x64, [@dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010102, @empty, @local, @private=0xa010102]}, @end, @ra={0x94, 0x4}]}}}}}) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbd7000fbdbdf051000000008000900b09dad121c0001800800010019d34c7555ca5e7fe0f00e3aea1aa618f8700f324a7661c2f915c080cf4fa714d277fe86cdca0f9bd7f95bb30b5a030b588338ee2d5ecd2fec78294bdbad09e1b147f55c73919e9d778d4f28e13c38b6e88f7b7e39c2e61b6842814e465294a2e9ab41d8ed943518c8c43d36a2bf932f1539079af05cfbad03e6ddcfc54c281e07f04d00add0a3a09c2bac5431ab9c4abd633d8469ec90d328", @ANYRES32=r2, @ANYBLOB="08000300020000000800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket(0x1, 0x803, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0xa) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0, 0x1}) (async) pipe(&(0x7f0000000080)) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x0, {{0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, 0x0, 0x2, [{{0xa, 0x4e23, 0x1, @mcast2, 0x1}}, {{0xa, 0x4e23, 0x9, @loopback, 0x2}}]}, 0x190) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00141202800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) (async) 3.813374107s ago: executing program 1 (id=1039): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) syz_usb_connect(0x5, 0x24, &(0x7f0000001cc0)={{0x12, 0x1, 0x300, 0x1, 0xdc, 0x28, 0x8, 0xe41, 0x4159, 0x6b5b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x3, 0x30, 0x10, [{{0x9, 0x4, 0x0, 0xe4, 0x0, 0xc2, 0x75, 0x7f, 0x8}}]}}]}}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0}) 3.670033681s ago: executing program 0 (id=1040): r0 = syz_io_uring_setup(0x7ea9, &(0x7f0000000080)={0x0, 0x40003, 0x10300, 0x0, 0x3}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0xc, 0x9}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x1fd0, 0xffffffff, 0x0, 0x0, 0x0) 3.536927929s ago: executing program 4 (id=1041): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x23, 0x7ff, 0x8, 0x2a, 0x4d5, 0x2e}}}}]}, 0x4c}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='+\x00', 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x9, 0x3, 0xa7, 0x101, 0xd8d6, 0x4003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x23, 0x7ff, 0x8, 0x2a, 0x4d5, 0x2e}}}}]}, 0x4c}}, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='+\x00', 0x2) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x9, 0x3, 0xa7, 0x101, 0xd8d6, 0x4003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) (async) 3.536156566s ago: executing program 2 (id=1042): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x10, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) ioctl$KVM_XEN_HVM_CONFIG(r9, 0x4038ae7a, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0xfe0, 0xef, &(0x7f0000000640)="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", &(0x7f0000000440)=""/239, 0xfffffff8, 0x0, 0xb2, 0x32, &(0x7f00000002c0)="4832958e7275789e577f0ccd1317934a277aff5cecb50245377fbe6f167cf02c5f9f8a703766bfbe6b95b0971dc046b7e94b78b314348842a08b3528ed1d30ca6a0e4d2dcf4a0c45b756ffabb44775062995a8d12b7f4f8694b27bf412fe3d4e65e75ca1f453e14f1d85a336e5b8298dfc6679f478621457d51069cf1b15afb0d85f46696f9e2ad6b11c30c87a366f7ae78262ea852e13ba49b747fe11860613fa93f4c41e2769d786ad96db18f9706ee1f1", &(0x7f0000000040)="1505afee484306972f76d3d9b164bc376e50914b16637fbcd8d6214246afee5dab6645b9f765ae8fc51e6d3b131fa727f945", 0xa, 0x0, 0xa4bb}, 0x50) connect$pppoe(r11, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'wg0\x00'}}, 0x1e) 3.497264899s ago: executing program 0 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = semget$private(0x0, 0x1, 0x762) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x4]) (async) semop(r1, &(0x7f0000002480)=[{}], 0x1) (async) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 3.419649684s ago: executing program 0 (id=1044): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x10000005}) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) r2 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) mknod(0x0, 0xc000, 0x9) rename(&(0x7f00000003c0)='./file1/file3\x00', &(0x7f0000000100)='./file0\x00') r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c000000000001090224000100000000090400000103000200092100000000000000000081490000000000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200103000000c301000000c74966c02382565e3c21a1c53b6b41c85ab6bee3f7c53a565d4a67d22f09b381a982e73701c8a8dedf96cea7921c7551f72e2b24062dcea312f182fda678285bd18c7dc6796e9961665dd63a5ad874fca2eed5e029bc42e4b04ea74b36e00412beba1eeab4428ae384014249ecf70b6aa0e0ca81e23b06490c6df9e92e09c65598ac7857e3"], 0x0}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000580)='1', 0x1) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="402175000000750428aba7eb7b1330d62f16e86efb21768833668ec66703367e53641b8e96df16a7e1a78c053a758d66692be1be862ae0c8058ac9ebf04594f503b180d79efb00c380906c4966e426339a65372dcde28123627eab818378fe574414900ac5ae3eedf74d60835926cc361899987c9f02"], &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x5, "ec70"}, @local=@item_4={0x3, 0x2, 0x5, "d31f6826"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1af7, 0x6, 0x1, {0x22, 0xc22}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="60062600000033025321631bb9c712a02f38bfebdc0d184fe683254aac17618e5bdb660a0c58c9900c5cea2ccc56acc085ef5e504ddae530287b955cf7486bc824f13869cb"], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2001aa000000d699611bee952b401b87a77108f07d14447ba53848d5330a48640121fdcea2d8c12caa5929d212f050f9ffffffffffffff79dd7abcbfeddd527e543f92af031cdcc0470b91e065b88b2c7b605bc7551661c30913d43d5131aec0da6abfcc85dc6fa2d9c22c2ee3192d2dc4feb4efd0b741a6a1ad6b3007e76213ac88a21cf70f904c48139881f175cea77a1e61a9bf01cef8b6a9a94c951cd2d897891a24b3b2b2fda349a58f75e2f5ede07cd0fb5440e079b298eb"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0xfb}}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x50ce, 0x0, &(0x7f0000000080), &(0x7f0000ff4000)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000140)="69145b1ad360a6851b7c9db82253e790881477671f786e695ef84cab5fac56120f903e6e6abae0d0f7edfa0dd168ff18abc6efc511c8a3f5948e1a677543e0338330b056f7b6082f", 0x0, 0x48) syz_usb_connect(0x5, 0x24, &(0x7f0000003240)={{0x12, 0x1, 0x250, 0xe3, 0xce, 0xe7, 0x10, 0x54c, 0x2e1, 0x6f97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x8, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0xa, 0x0, 0xc, 0xef, 0x62, 0xfd}}]}}]}}, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r7 = gettid() tkill(r7, 0x12) 3.328787127s ago: executing program 4 (id=1045): socket$unix(0x1, 0x2, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{0x0}], 0x1}, 0x4000000) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x10) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = getpid() process_vm_readv(r1, 0x0, 0xfffffffffffffecd, &(0x7f0000008640)=[{&(0x7f00000014c0)=""/109, 0x5f}], 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x64c842, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x43, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x12d602, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8940, 0x0, 0x0) (async) ioctl$FIONCLEX(r2, 0x5450) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1428, 0xffffffff, 0x11a8, 0x11a8, 0x11a8, 0xffffffff, 0xffffffff, 0x1390, 0x1390, 0x1390, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1110, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1488) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x23}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) (async, rerun: 64) r5 = socket$kcm(0x2, 0x5, 0x2) (async, rerun: 64) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) 2.689259607s ago: executing program 4 (id=1046): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x4e21, 0x2, 'lblc\x00', 0xa, 0x7, 0x20}, 0x2c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYRES32=r2], 0x44}}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.494738185s ago: executing program 4 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000180)={{0x2, 0x7}, 0x0, 0x5, 0xffff, {0x9, 0xb}, 0x6}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1, 0x1ff, 0x9) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f0000000200)={0x2, 0x7}, 0x0) r4 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x0, 0x6}, 0x1d, [0x8000, 0x78, 0xf, 0x9, 0x80, 0x2, 0x203, 0x7e, 0x6, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0xffffffff, 0x6, 0x7, 0x0, 0x1, 0x3, 0x3, 0x5, 0x3c5b, 0x1, 0x1000, 0x9, 0x3, 0x15bb, 0x3ca, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x9, 0x0, 0x71, 0x407, 0x5, 0x1, 0x5, 0x9, 0x3a, 0x7, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4, 0x9, 0x8, 0x7, 0x21, 0x40], [0x10000007, 0x100, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x78, 0xea4, 0x0, 0x4, 0x24, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x7, 0xff, 0x5, 0x5, 0x0, 0x7f9, 0x0, 0x2, 0x2, 0x9, 0x5, 0x9, 0x0, 0x800000d, 0x6, 0x2007, 0xd, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x0, 0x9, 0x48c93690, 0x42, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x94a, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x2, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x800003, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x9, 0x5, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x6, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x7, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20000, 0x5, 0xe8a0556, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0x4, 0x7, 0x2bf, 0x0, 0x200, 0xffff3441, 0x2]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.30126015s ago: executing program 1 (id=1048): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = syz_open_dev$video4linux(&(0x7f0000000280), 0x2ee, 0x2382) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0085666, &(0x7f0000000100)={0x4b8c76c522e9be76, 0x0, {0xaca2a353, 0x8000000, 0x3009, 0x5, 0xa, 0x0, 0x1, 0x5}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x1001a, 0x0, 0x0, 0x4}}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000380)={0x0, {0x1, 0x1}}) ioctl$TCFLSH(r0, 0x540b, 0x4) socket(0x1, 0x80000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x5, 0x3, 0x6, 0x40890, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x1, 0x6, @void, @value, @void, @value}, 0x50) socket(0x10, 0x3, 0x0) socket(0xa, 0xa, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000400)={0x20000004}) sendto$inet6(r2, &(0x7f0000000380)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x1}, 0x1c) sendto$inet6(r2, &(0x7f0000000600)="f6", 0x1, 0x80c5, &(0x7f00000001c0)={0xa, 0x0, 0x400, @local, 0x1}, 0x1c) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30eb00003e000701feffffff00000000017c000008004280040008000000000004000280"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00141202800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 1.963294613s ago: executing program 2 (id=1049): openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffffffffffe}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x240) (async, rerun: 32) r2 = io_uring_setup(0x1581, &(0x7f0000000380)={0x0, 0x1b6f, 0x40, 0x0, 0x3bd}) (async, rerun: 32) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) (async) listen(r3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x18, r5, 0x3e8c4ddb697c9f8f, 0x2, 0x0, {0x4}, [@HEADER={0x4}]}, 0x18}}, 0x2000c090) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x44) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x5000000}) (async) fcntl$lock(r9, 0x24, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0xd}) (async) fcntl$setpipe(r9, 0x407, 0x5) (async) pipe2(0x0, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x88fb, @generic={{0x5, 0x4, 0x1, 0x16, 0x14, 0x64, 0x0, 0x2, 0x6c, 0x0, @broadcast, @multicast2}}}}}, 0x0) (async) close_range(r2, r3, 0x0) 1.905708377s ago: executing program 1 (id=1050): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @remote, 0x1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20008840, 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100003a3705208129050005000102030109022400fd060009050202"], 0x0) 1.805033819s ago: executing program 2 (id=1051): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000380)="ef69a6d04ea1ff81e4fcc81d269f600b5ccca4de093b7ea280f340895974f8cb8be9d00dad26719c1f4ff912e6653e51c212b9947ec1030d458e8cfaa7a9a9a72bf1", 0x42}], 0x1, 0x7ff, 0x3, 0xa) ioctl$sock_ifreq(r8, 0x8948, &(0x7f0000000040)={'bond0\x00', @ifru_names='vxcan1\x00'}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000100)={0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) 1.63252198s ago: executing program 3 (id=1052): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r0, &(0x7f0000000140)=@un=@file={0x1, './file0\x00'}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c"], 0x140}}, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0xd, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x8080) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x3000000, &(0x7f0000000080)=[{&(0x7f0000000040)="020f000902000000e4a17c45c8d260c9", 0x33fe0}], 0x10}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014935d1071040c03e9ba010203010902120001000000000904"], 0x0) 1.496755019s ago: executing program 4 (id=1053): r0 = syz_io_uring_setup(0x7ea9, &(0x7f0000000080)={0x0, 0x40003, 0x10300, 0x0, 0x3}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0xc, 0x9}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x1fd0, 0xffffffff, 0x0, 0x0, 0x0) 1.417121626s ago: executing program 4 (id=1054): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000400)={0x8, 0x0, [{0x80000001, 0x405, 0x0, 0x203, 0x7, 0x80000000, 0xc}, {0x6, 0x5, 0x5, 0x745, 0xfa1e, 0xa, 0x1}, {0x40000000, 0x2, 0x4, 0x0, 0xa7, 0x3}, {0x2, 0x2, 0x0, 0x4, 0x53b, 0x2, 0xb}, {0x0, 0x5, 0x2, 0x10000, 0x9, 0x5, 0x10000}, {0x80000001, 0xffff0004, 0x7, 0x10, 0x7, 0x9, 0x6}, {0x6, 0x80, 0x4, 0x1, 0x6, 0x0, 0x9}, {0xa, 0x8, 0x2, 0x80000001, 0x4a4, 0xdd4eccf, 0xfffffbff}]}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0xf) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0x48, 0x52, 0x20, 0x16dc, 0x15, 0x8453, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x0, 0x1, 0xf8, 0x9d, 0x1e, 0xfe, [], [{{0x9, 0x5, 0x4, 0x3, 0x10, 0x6, 0x4, 0x4}}]}}]}}]}}, 0x0) bind$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x1, 0x63, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$can_bcm(0x1d, 0x2, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x842, 0x0) r8 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r8, 0x100847c0, 0x0, 0x1, 0x0, 0x0) r11 = accept4(r6, 0x0, 0x0, 0x0) r12 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x2000, 0x1}) io_uring_enter(r12, 0x3516, 0x0, 0x4, 0x0, 0x0) 380.592953ms ago: executing program 2 (id=1055): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r1 = fanotify_init(0x0, 0x1000) socket(0x1a, 0x1, 0x8) (async) socket(0x1a, 0x1, 0x8) fanotify_mark(r1, 0x1, 0x40001043, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, 0x0, 0x0, 0x4040008) (async) sendmmsg$unix(r0, 0x0, 0x0, 0x4040008) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707b, 0x0, 0x0, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x6020400) (async) unshare(0x6020400) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, &(0x7f0000000080)=0x2) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x300, 0x0, 0x0, 0x0) 304.704626ms ago: executing program 2 (id=1056): openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) (async) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) lseek(r0, 0x5, 0x1) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb324, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa, 0xa0, 0x52, [{{0x9, 0x4, 0x0, 0xcb, 0x2, 0x3, 0x1, 0x0, 0x63, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0xd0f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x8, 0x96}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xf1, 0x7, 0x7f}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x0, 0x5e, 0xf3, 0x40, 0xa9}, 0x37, &(0x7f0000000140)={0x5, 0xf, 0x37, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x5, 0xfffe}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x9, 0xd}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "2a10c128982a9be59859bf71e9195a65"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x1, 0x1a1}]}, 0x1, [{0x47, &(0x7f0000000180)=@string={0x47, 0x3, "92eaed646fb4be663857bc7ef3b08d2d4917c07a69e3a4fb3cf7f9b1b39e4651d3185067f60ef39de34f6f828a4091ab3102cda12e413a51612d8c78aa57b08a0cdbb73303"}}]}) (async) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb324, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa, 0xa0, 0x52, [{{0x9, 0x4, 0x0, 0xcb, 0x2, 0x3, 0x1, 0x0, 0x63, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0xd0f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x8, 0x96}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xf1, 0x7, 0x7f}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x0, 0x5e, 0xf3, 0x40, 0xa9}, 0x37, &(0x7f0000000140)={0x5, 0xf, 0x37, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x5, 0xfffe}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x9, 0xd}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "2a10c128982a9be59859bf71e9195a65"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x1, 0x1a1}]}, 0x1, [{0x47, &(0x7f0000000180)=@string={0x47, 0x3, "92eaed646fb4be663857bc7ef3b08d2d4917c07a69e3a4fb3cf7f9b1b39e4651d3185067f60ef39de34f6f828a4091ab3102cda12e413a51612d8c78aa57b08a0cdbb73303"}}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) fchmod(r1, 0x8) (async) fchmod(r1, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000000240)=[@acquire={0x40046305, 0x3}, @register_looper, @exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) socket$l2tp(0x2, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x17, 0xd0, 0xf5, 0x20, 0x421, 0x6901, 0x2d1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x6a, 0x2, 0x0, 0x2, 0xfe, 0x18}}]}}]}}, 0x0) 211.207328ms ago: executing program 1 (id=1057): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x11, 0x2, 0x0, 0x5, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom1\x00', 0x802, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x3003}, 0x4) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r7, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfcff, &(0x7f0000000f00)="9e"}) 36.829301ms ago: executing program 3 (id=1058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) (async) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000280)=@nfc={0x27, r4, 0x0, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)="6b206d6eb7dd176a573bb86ffd6d6105425e0bb0cf843cf8bc3eda1f30e26f72254a93f3dd3c4d2e296bd0982a5b61db673c79a0dbbb57de45edfc6eecd02e5709", 0x41}, {&(0x7f0000000380)="8be03be76bf1385f0d89106c51197784ea8784c7c714fc427430d6aacb0609a56c9a2a3e96dbe9df95347665b86cfb6252dadbdb072972f3ad8dbb3e507a5188dd34e631b8353c41f4213583b76713be7851401258e0fba941d30b99648cb2b90587d005c3974275ef8e4ec09a3e10e17c91284e384b3cad85c15439f88ab73fd99ce5244363c41fa7f602e17effff573f3d33223ab647740372a9ba35aad4cb34af9a0db0", 0xa5}, {&(0x7f0000000440)="1e7a33f0124f3f50e64d1f551fdeb49013fecf5bb713242bbdaaf35c8aa8d7f8124875d45284484b3113578dba3f8286a51853e6296d8f896a1f1beff5982eca593dc628a0a3169affb2b315d50d35226a44c1951d3a031cc8b13a3a764b1d242ac2e1b9a6e3e2d0cd20a59a10f8cf71f6840268c22e5f28051b5c5b84dec0e0287c3e073c2d957dc685298c798277d28a46d9b49b8e15f82d98a6822ecd290fe3928028cf682391d65a9e7f1fac3f2bd90ff03d7c384652aaa5554d7d6d053a306694299985b4e89b694654c7fddb8347d3b3b8cd", 0xd5}], 0x3, &(0x7f0000000540)=[{0x48, 0x113, 0x4, "6a193bf2fc7838d0e0be0a8762094403c779451fb8b54e71e463fd7b9b5590b34b7c6911ab7f3f41d24b5f4d9c0b945ff6"}], 0x48}, 0x9) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000280)=@nfc={0x27, r4, 0x0, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)="6b206d6eb7dd176a573bb86ffd6d6105425e0bb0cf843cf8bc3eda1f30e26f72254a93f3dd3c4d2e296bd0982a5b61db673c79a0dbbb57de45edfc6eecd02e5709", 0x41}, {&(0x7f0000000380)="8be03be76bf1385f0d89106c51197784ea8784c7c714fc427430d6aacb0609a56c9a2a3e96dbe9df95347665b86cfb6252dadbdb072972f3ad8dbb3e507a5188dd34e631b8353c41f4213583b76713be7851401258e0fba941d30b99648cb2b90587d005c3974275ef8e4ec09a3e10e17c91284e384b3cad85c15439f88ab73fd99ce5244363c41fa7f602e17effff573f3d33223ab647740372a9ba35aad4cb34af9a0db0", 0xa5}, {&(0x7f0000000440)="1e7a33f0124f3f50e64d1f551fdeb49013fecf5bb713242bbdaaf35c8aa8d7f8124875d45284484b3113578dba3f8286a51853e6296d8f896a1f1beff5982eca593dc628a0a3169affb2b315d50d35226a44c1951d3a031cc8b13a3a764b1d242ac2e1b9a6e3e2d0cd20a59a10f8cf71f6840268c22e5f28051b5c5b84dec0e0287c3e073c2d957dc685298c798277d28a46d9b49b8e15f82d98a6822ecd290fe3928028cf682391d65a9e7f1fac3f2bd90ff03d7c384652aaa5554d7d6d053a306694299985b4e89b694654c7fddb8347d3b3b8cd", 0xd5}], 0x3, &(0x7f0000000540)=[{0x48, 0x113, 0x4, "6a193bf2fc7838d0e0be0a8762094403c779451fb8b54e71e463fd7b9b5590b34b7c6911ab7f3f41d24b5f4d9c0b945ff6"}], 0x48}, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x1, 0x3, 0x0) (async) socket(0x1, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000", 0x4}, {&(0x7f0000001480)="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", 0x101}], 0x3) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000", 0x4}, {&(0x7f0000001480)="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", 0x101}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) read$nci(0xffffffffffffffff, 0x0, 0x0) (async) read$nci(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0xfffffffffffffffe) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) (async) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r1) (async) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x40}}, 0x0) 0s ago: executing program 1 (id=1059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) unshare(0x28020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0x100083, 0x0, 0x100000, {r1}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000003c0)={0x0, 0x7, 0x0, [0x0, 0x8, 0x9, 0x8, 0x9b0], [0x7fffffffffffffff, 0x0, 0x1f5, 0x3, 0x9, 0x7, 0x0, 0x8, 0x3, 0x8, 0x1, 0x0, 0x6, 0x6, 0x0, 0x4, 0x6, 0x9, 0x9, 0x9, 0x5, 0xffffffff7fffffff, 0xf, 0x8, 0x9, 0x76f, 0x1fffffffe0, 0x7, 0xa, 0xf, 0x6, 0x1, 0x80000001, 0x0, 0x88, 0x9, 0xdb, 0xfffffffffffffff4, 0xc25c, 0x7, 0x8, 0x8, 0x0, 0x4, 0x1, 0x9, 0x1, 0x9, 0x1, 0x117, 0x5, 0x8000000000000001, 0xfe, 0x4, 0x0, 0x3, 0x4, 0xb, 0xf, 0x0, 0x0, 0x8, 0x4, 0x5, 0x4, 0x2, 0xc66c, 0x9, 0x3, 0x10000, 0x8, 0x7, 0xc, 0x2, 0x8, 0x5, 0xa1, 0x6, 0x9, 0x6, 0x5, 0x2, 0x1, 0xffffffffbfd3f0e9, 0xffffffffd5f54280, 0x2, 0x5, 0x0, 0x0, 0xb7c, 0xffffffffffffff00, 0x96f0, 0x7ff, 0xe91, 0xb, 0x1, 0x8, 0x4, 0x5, 0x7fffffff, 0x1dee, 0x0, 0x8, 0x1, 0x4f48, 0xd, 0x80000000, 0x7fffffff, 0x100, 0x2, 0x3, 0xffff, 0x2, 0x8000000000000001, 0x7ff, 0x7, 0x0, 0x7, 0x1ac5cf3d, 0x7fffffffffffffff, 0xffffffff]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f00000008c0)=[{0xf3, 0xe6, 0x4, 0x9, @tick=0x5f58d3a9, {0x2, 0x5}, {0x9, 0x6}, @connect={{0x5, 0xf5}, {0x10, 0xc}}}, {0x8, 0x80, 0x8c, 0x2, @tick=0x80, {0x9}, {0x6, 0x5}, @quote={{0x2, 0x3}, 0x2, &(0x7f0000000800)={0x9, 0x5, 0x37, 0xf9, @time={0x6, 0x1}, {0x28}, {0x2, 0xe1}, @ext={0x1f, &(0x7f0000000180)="ba5bd364e1249a854412de760f595208be5998e9410643fde6d5d331a0230b"}}}}, {0x0, 0x1, 0x0, 0x1, @time={0x200, 0x9}, {0x5, 0x7}, {0x7, 0x3}, @raw32={[0x4, 0x401, 0x4]}}, {0x9, 0x7f, 0x6, 0x8c, @time={0x0, 0x7ff}, {0x4, 0x5}, {0x80, 0x4}, @quote={{0x8, 0x5}, 0x81, &(0x7f0000000880)={0x3, 0x9, 0x1, 0x3, @tick=0x81, {0x10, 0x9}, {0x4, 0x7f}, @quote={{0xe, 0x4}, 0x0, &(0x7f0000000840)={0x9, 0x3, 0x0, 0x5, @tick=0x6, {0xa2, 0x9}, {0x7, 0x1c}, @quote={{0x6, 0x9}, 0x7}}}}}}, {0x0, 0x1, 0x5, 0x9, @time={0xfffffff7, 0x3}, {0x41, 0x3e}, {0x8, 0x2}, @raw32={[0x1, 0x2, 0x9]}}], 0x8c) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000000c0)={0x23, @time={0x7, 0x3}, 0x6, {0xa, 0x5}, 0x3, 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x0, 0x5, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b00"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff0100000007000000cc9486dd60fec00000403a00fe240600000000000000000000000118ba00000000000000000000000000c4d589f10102019078000000006098a35000000000fe800000000000000000000000000002fc800000000000000000001100000000000000fafb17c103"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000500000000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="08000300111bf8d5"], 0x40}, 0x1, 0x2000000000000000}, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r8, 0xc040564a, &(0x7f0000000140)={0x1, 0x0, @value}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={0x0, 0xa8c}, 0x1, 0x0, 0x0, 0x8004}, 0x85) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501009cbd89"], 0x0) kernel console output (not intermixed with test programs): 998][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 274.081793][ T5952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.102287][ T5952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 274.165706][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 274.200195][ T5952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.227417][ T5952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 274.279151][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 274.306254][ T5952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.317171][ T5952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 274.342626][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 274.364203][ T5952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.375524][ T5952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 274.389082][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 274.399305][ T5952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.415194][ T5952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 274.449817][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 274.455420][ T30] audit: type=1326 audit(1747745709.455:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 274.490571][ T5952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.500146][ T5952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 274.511233][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 274.521257][ T5952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 274.535941][ T5952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 274.546516][ T30] audit: type=1326 audit(1747745709.455:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 274.579211][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 274.627797][ T5952] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 274.637152][ T30] audit: type=1326 audit(1747745709.455:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 274.660931][ T5952] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 274.689189][ T5952] usb 3-1: Product: syz [ 274.693420][ T5952] usb 3-1: Manufacturer: syz [ 274.707162][ T5952] usb 3-1: SerialNumber: syz [ 274.712588][ T30] audit: type=1326 audit(1747745709.495:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 274.735536][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 274.762759][ T5952] usb 3-1: config 0 descriptor?? [ 274.782270][ T5952] yurex 3-1:0.0: Could not find endpoints [ 274.945784][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.974293][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 274.994649][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 275.013895][ T1223] usb 3-1: USB disconnect, device number 45 [ 275.024627][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.059662][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 275.077897][ T8460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 275.132319][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.328828][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.352951][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 275.368881][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 275.383084][ T24] usb 2-1: USB disconnect, device number 43 [ 275.418810][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 275.565810][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 275.587045][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.617652][ T9] usb 4-1: Product: syz [ 275.635915][ T9] usb 4-1: Manufacturer: syz [ 275.721441][ T1223] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 275.739589][ T9] usb 4-1: SerialNumber: syz [ 275.767574][ T9] usb 4-1: config 0 descriptor?? [ 275.794098][ T9] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 275.819344][ T9] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 275.949037][ T1223] usb 1-1: Using ep0 maxpacket: 32 [ 276.158880][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.182534][ T1223] usb 1-1: config 0 has no interfaces? [ 276.200888][ T9] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 276.237542][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.257794][ T1223] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 276.538888][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.539200][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 276.547714][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.571339][ T1223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.605327][ T1223] usb 1-1: Product: syz [ 276.619905][ T1223] usb 1-1: Manufacturer: syz [ 276.624563][ T1223] usb 1-1: SerialNumber: syz [ 276.659508][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.670132][ T1223] usb 1-1: config 0 descriptor?? [ 276.707486][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.807151][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.873667][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.941643][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.986320][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.191111][ T5905] usb 4-1: USB disconnect, device number 60 [ 278.200777][ T5905] garmin_gps 4-1:0.0: device disconnected [ 278.542380][ T8477] : entered promiscuous mode [ 278.567005][ T8486] syz_tun: entered allmulticast mode [ 278.720737][ T8483] syz_tun: left allmulticast mode [ 278.946952][ T8497] loop2: detected capacity change from 0 to 7 [ 278.955733][ T6003] loop2: [ 278.960244][ T6003] loop2: partition table partially beyond EOD, truncated [ 278.973716][ T8497] loop2: [ 278.976738][ T8497] loop2: partition table partially beyond EOD, truncated [ 279.099090][ T5952] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 279.264165][ T5952] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 279.278536][ T5952] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 279.298596][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.352092][ T5952] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 279.477254][ T8508] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.680' sets config #0 [ 279.507213][ T8508] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.680' sets config #1 [ 279.585551][ T1223] usb 1-1: USB disconnect, device number 53 [ 279.832196][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.683'. [ 279.848881][ T5906] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 279.924570][ T8518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.934267][ T8518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.994172][ T8517] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[8517] [ 279.998884][ T5906] usb 2-1: device descriptor read/64, error -71 [ 280.249098][ T5906] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 280.256925][ T30] audit: type=1326 audit(1747745715.245:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.4.684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ce418e969 code=0x0 [ 280.379027][ T5906] usb 2-1: device descriptor read/64, error -71 [ 280.435646][ T5952] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 280.448070][ T5952] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 280.455166][ T5952] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 280.463652][ T5952] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 280.472198][ T5952] usb 3-1: USB disconnect, device number 46 [ 280.489310][ T5906] usb usb2-port1: attempt power cycle [ 280.828983][ T5906] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 280.849627][ T5906] usb 2-1: device descriptor read/8, error -71 [ 281.068474][ T8528] hsr0: entered promiscuous mode [ 281.089048][ T5906] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 281.153272][ T5906] usb 2-1: device descriptor read/8, error -71 [ 281.290467][ T5906] usb usb2-port1: unable to enumerate USB device [ 281.439125][ T1223] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 281.530457][ T8538] fuse: Bad value for 'rootmode' [ 281.613772][ T1223] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.636883][ T1223] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 281.647614][ T1223] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.689908][ T1223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.707950][ T8529] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 281.909570][ T1223] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.121335][ T1223] usb 3-1: USB disconnect, device number 47 [ 282.509342][ T9] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 282.512210][ T5905] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 282.550733][ T5952] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 282.659742][ T5905] usb 4-1: device descriptor read/64, error -71 [ 282.670532][ T9] usb 1-1: config 0 has an invalid interface number: 212 but max is 0 [ 282.682607][ T9] usb 1-1: config 0 has no interface number 0 [ 282.692790][ T9] usb 1-1: config 0 interface 212 has no altsetting 0 [ 282.708311][ T9] usb 1-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 282.717904][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.728828][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 282.731472][ T9] usb 1-1: Product: syz [ 282.738539][ T9] usb 1-1: Manufacturer: syz [ 282.745518][ T9] usb 1-1: SerialNumber: syz [ 282.751389][ T5952] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 282.760349][ T9] usb 1-1: config 0 descriptor?? [ 282.781495][ T9] HFC-S_USB 1-1:0.212: probe with driver HFC-S_USB failed with error -5 [ 282.782959][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.809896][ T5952] usb 5-1: config 0 descriptor?? [ 282.831103][ T5952] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 282.877164][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.695'. [ 282.918891][ T5905] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 282.973827][ T8547] fuse: Bad value for 'group_id' [ 282.979382][ T8547] fuse: Bad value for 'group_id' [ 283.058929][ T5905] usb 4-1: device descriptor read/64, error -71 [ 283.176396][ T5905] usb usb4-port1: attempt power cycle [ 283.428837][ T1223] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 283.549071][ T5905] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 283.579890][ T1223] usb 2-1: Using ep0 maxpacket: 16 [ 283.587394][ T1223] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.589833][ T5905] usb 4-1: device descriptor read/8, error -71 [ 283.607041][ T1223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.625301][ T1223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 283.637564][ T1223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 50939, setting to 1024 [ 283.652790][ T1223] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.667656][ T1223] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 283.680241][ T1223] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 283.688472][ T1223] usb 2-1: Manufacturer: syz [ 283.697264][ T1223] usb 2-1: config 0 descriptor?? [ 283.858957][ T5905] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 283.881625][ T5905] usb 4-1: device descriptor read/8, error -71 [ 283.990932][ T5905] usb usb4-port1: unable to enumerate USB device [ 284.113704][ T8566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.123023][ T8566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.276628][ T5952] gspca_vc032x: reg_w err -71 [ 284.291880][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.305411][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.320155][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.331459][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.342801][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.348665][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.354211][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.359622][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.364954][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.373057][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.378408][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.383856][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.389283][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.397285][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.403054][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.408386][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.413828][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.425271][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.443414][ T5952] gspca_vc032x: Unknown sensor... [ 284.453259][ T5952] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 284.455970][ T5952] usb 5-1: USB disconnect, device number 59 [ 284.487011][ T8573] all: renamed from lo [ 284.654818][ T8578] loop2: detected capacity change from 0 to 7 [ 284.663249][ T8578] loop2: p1 [ 284.666510][ T8578] loop2: partition table partially beyond EOD, truncated [ 284.675221][ T8578] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 284.736028][ T6003] udevd[6003]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 285.178421][ T8585] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[8585] [ 285.186299][ T1223] usb 1-1: USB disconnect, device number 54 [ 285.278226][ T8587] netlink: 440 bytes leftover after parsing attributes in process `syz.0.704'. [ 285.659472][ T5906] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 285.718968][ T1223] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 285.821869][ T30] audit: type=1326 audit(1747745720.825:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce418e969 code=0x7ffc0000 [ 285.830022][ T8596] FAULT_INJECTION: forcing a failure. [ 285.830022][ T8596] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 285.844120][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.852370][ T30] audit: type=1326 audit(1747745720.825:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce418e969 code=0x7ffc0000 [ 285.857949][ T8596] CPU: 0 UID: 0 PID: 8596 Comm: syz.4.708 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 285.857978][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.858010][ T8596] Call Trace: [ 285.858019][ T8596] [ 285.858029][ T8596] dump_stack_lvl+0x189/0x250 [ 285.858065][ T8596] ? __lock_acquire+0xaac/0xd20 [ 285.858100][ T8596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.858131][ T8596] ? __pfx__printk+0x10/0x10 [ 285.858153][ T8596] ? __might_fault+0xb0/0x130 [ 285.858195][ T8596] should_fail_ex+0x414/0x560 [ 285.858223][ T8596] _copy_from_user+0x2d/0xb0 [ 285.858257][ T8596] __se_sys_select+0xd3/0x270 [ 285.858287][ T8596] ? __pfx___se_sys_select+0x10/0x10 [ 285.858324][ T8596] ? __x64_sys_select+0x20/0xc0 [ 285.858353][ T8596] do_syscall_64+0xf6/0x210 [ 285.858385][ T8596] ? clear_bhb_loop+0x60/0xb0 [ 285.858411][ T8596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.858433][ T8596] RIP: 0033:0x7f7ce418e969 [ 285.858454][ T8596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.858473][ T8596] RSP: 002b:00007f7ce1ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 285.858496][ T8596] RAX: ffffffffffffffda RBX: 00007f7ce43b5fa0 RCX: 00007f7ce418e969 [ 285.858512][ T8596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.858525][ T8596] RBP: 00007f7ce1ff6090 R08: 0000200000000140 R09: 0000000000000000 [ 285.858540][ T8596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.858552][ T8596] R13: 0000000000000000 R14: 00007f7ce43b5fa0 R15: 00007f7ce44dfa28 [ 285.858586][ T8596] [ 285.860571][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.865922][ T30] audit: type=1326 audit(1747745720.825:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ce418d2d0 code=0x7ffc0000 [ 285.910940][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.935399][ T30] audit: type=1326 audit(1747745720.825:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7ce418d41f code=0x7ffc0000 [ 285.941369][ T1223] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.944399][ T30] audit: type=1326 audit(1747745720.825:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f7ce418e969 code=0x7ffc0000 [ 285.947653][ T1223] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 285.957090][ T30] audit: type=1326 audit(1747745720.855:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7ce418d37c code=0x7ffc0000 [ 285.958142][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 285.966037][ T30] audit: type=1326 audit(1747745720.885:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7ce418d41f code=0x7ffc0000 [ 286.003167][ T1223] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.012082][ T30] audit: type=1326 audit(1747745720.885:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7ce418d5ca code=0x7ffc0000 [ 286.025905][ T5906] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 286.028114][ T30] audit: type=1326 audit(1747745720.885:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce418e969 code=0x7ffc0000 [ 286.037817][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.094116][ T30] audit: type=1326 audit(1747745720.885:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce418e969 code=0x7ffc0000 [ 286.104142][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.296270][ T5952] usb 2-1: USB disconnect, device number 48 [ 286.326899][ T8592] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 286.345748][ T10] usb 3-1: config 4 has an invalid interface number: 196 but max is 0 [ 286.354036][ T10] usb 3-1: config 4 has no interface number 0 [ 286.360519][ T10] usb 3-1: config 4 interface 196 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 286.382354][ T1223] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.415330][ T5906] usb 1-1: config 0 descriptor?? [ 286.421946][ T10] usb 3-1: config 4 interface 196 has no altsetting 0 [ 286.463937][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=f3.03 [ 286.500323][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.544586][ T10] usb 3-1: Product: syz [ 286.566058][ T10] usb 3-1: Manufacturer: syz [ 286.590118][ T1223] usb 4-1: USB disconnect, device number 65 [ 286.599357][ T10] usb 3-1: SerialNumber: syz [ 286.605290][ T8603] netlink: 830 bytes leftover after parsing attributes in process `syz.1.710'. [ 286.620185][ T8604] netlink: 830 bytes leftover after parsing attributes in process `syz.1.710'. [ 286.652046][ T8594] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 286.668122][ T10] keyspan 3-1:4.196: Keyspan 1 port adapter converter detected [ 286.706998][ T10] keyspan 3-1:4.196: found no endpoint descriptor for endpoint 84 [ 286.770784][ T10] keyspan 3-1:4.196: found no endpoint descriptor for endpoint 81 [ 286.798355][ T10] keyspan 3-1:4.196: found no endpoint descriptor for endpoint 1 [ 286.798983][ T5952] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 286.806461][ T10] keyspan 3-1:4.196: found no endpoint descriptor for endpoint 2 [ 286.822883][ T10] keyspan 3-1:4.196: found no endpoint descriptor for endpoint 83 [ 286.836745][ T10] keyspan 3-1:4.196: found no endpoint descriptor for endpoint 3 [ 286.873300][ T10] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 286.906552][ T10] usb 3-1: USB disconnect, device number 48 [ 286.919511][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 286.966526][ T10] keyspan 3-1:4.196: device disconnected [ 287.010783][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 287.046447][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 287.050788][ T8610] dvmrp0: entered allmulticast mode [ 287.097186][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 287.118265][ T5952] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 287.137490][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.145910][ T5952] usb 5-1: Product: syz [ 287.151552][ T5952] usb 5-1: Manufacturer: syz [ 287.158089][ T5952] usb 5-1: SerialNumber: syz [ 287.172911][ T5952] usb 5-1: config 0 descriptor?? [ 287.187421][ T8602] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 287.195725][ T8602] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 287.209487][ T5952] usb 5-1: ucan: probing device on interface #0 [ 287.254379][ T5906] hid-led 0003:27B8:01ED.0010: probe with driver hid-led failed with error -71 [ 287.278034][ T5906] usb 1-1: USB disconnect, device number 55 [ 288.221553][ T8613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.270790][ T5952] usb 5-1: ucan: could not read protocol version, ret=-110 [ 288.278098][ T5952] usb 5-1: ucan: probe failed; try to update the device firmware [ 288.400620][ T8629] netlink: 'syz.0.717': attribute type 3 has an invalid length. [ 288.408390][ T8629] netlink: 'syz.0.717': attribute type 1 has an invalid length. [ 288.694928][ T8634] bridge_slave_0: left allmulticast mode [ 288.694958][ T8634] bridge_slave_0: left promiscuous mode [ 288.696552][ T8634] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.806211][ T8634] bridge_slave_1: left allmulticast mode [ 288.806232][ T8634] bridge_slave_1: left promiscuous mode [ 288.806413][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.956055][ T8634] bond0: (slave bond_slave_0): Releasing backup interface [ 288.977099][ T8634] bond0: (slave bond_slave_1): Releasing backup interface [ 289.074888][ T8634] team0: Port device team_slave_0 removed [ 289.079292][ T8634] team0: Port device team_slave_1 removed [ 289.079990][ T8634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.080028][ T8634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.061996][ T8659] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 290.118899][ T5952] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 290.258949][ T5952] usb 1-1: device descriptor read/64, error -71 [ 290.499707][ T5952] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 290.638872][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 290.646713][ T5952] usb 1-1: device descriptor read/64, error -71 [ 290.759327][ T5952] usb usb1-port1: attempt power cycle [ 290.811511][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 290.823211][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.839998][ T24] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 290.866869][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.904189][ T24] usb 2-1: config 0 descriptor?? [ 290.930432][ T24] gspca_main: spca501-2.14.0 probing 0000:0000 [ 291.129104][ T5952] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 291.172598][ T5952] usb 1-1: device descriptor read/8, error -71 [ 291.250176][ T5906] usb 5-1: USB disconnect, device number 60 [ 291.408983][ T5884] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 291.418991][ T5952] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 291.499804][ T5952] usb 1-1: device descriptor read/8, error -71 [ 291.589033][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 291.605063][ T8669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.614369][ T5884] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 291.630818][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.645604][ T5884] usb 3-1: Product: syz [ 291.648314][ T5952] usb usb1-port1: unable to enumerate USB device [ 291.653655][ T5884] usb 3-1: Manufacturer: syz [ 291.657429][ T24] gspca_spca501: reg write: error -110 [ 291.672891][ T5884] usb 3-1: SerialNumber: syz [ 291.681218][ T5884] usb 3-1: config 0 descriptor?? [ 291.689342][ T8669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.708143][ T24] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 291.723690][ T24] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 291.739619][ T5906] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 291.909176][ T5884] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 291.940933][ T5906] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 291.952534][ T5906] usb 5-1: config 0 has no interface number 0 [ 291.959102][ T5906] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 291.975382][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.998236][ T5906] usb 5-1: config 0 descriptor?? [ 292.026823][ T5906] usb 5-1: selecting invalid altsetting 1 [ 292.036552][ T5906] dvb_ttusb_budget: ttusb_init_controller: error [ 292.043932][ T5906] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 292.118646][ T5884] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 292.207791][ T5906] DVB: Unable to find symbol cx22700_attach() [ 292.298711][ T5906] DVB: Unable to find symbol tda10046_attach() [ 292.307194][ T5906] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 292.327020][ T5906] usb 5-1: USB disconnect, device number 61 [ 292.907066][ T5884] usb 3-1: USB disconnect, device number 49 [ 293.625748][ T24] usb 2-1: USB disconnect, device number 49 [ 293.790563][ T8698] binder: 8697:8698 ioctl c018620c 200000000380 returned -22 [ 293.845946][ T8701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.253290][ T8706] dvmrp0: left allmulticast mode [ 294.321051][ T30] audit: type=1326 audit(1747745729.325:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 294.393027][ T30] audit: type=1326 audit(1747745729.325:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 294.454872][ T30] audit: type=1326 audit(1747745729.355:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 294.598900][ T24] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 294.758948][ T24] usb 2-1: Invalid ep0 maxpacket: 32 [ 294.898914][ T24] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 294.998831][ T5883] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 295.018962][ T5884] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 295.048891][ T24] usb 2-1: Invalid ep0 maxpacket: 32 [ 295.055692][ T24] usb usb2-port1: attempt power cycle [ 295.088839][ T5905] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 295.161439][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 295.180247][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 29706, setting to 64 [ 295.180549][ T5884] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 295.197585][ T5883] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 295.202636][ T5884] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 295.217354][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.233655][ T5883] usb 3-1: Product: syz [ 295.234773][ T5884] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 295.238636][ T5883] usb 3-1: Manufacturer: syz [ 295.250360][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.263954][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.276492][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 295.277544][ T8715] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 295.287553][ T5883] usb 3-1: SerialNumber: syz [ 295.299520][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 295.316815][ T5884] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.325922][ T5883] usb 3-1: config 0 descriptor?? [ 295.331893][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.349035][ T5905] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.361568][ T5883] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0250 [ 295.385327][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.408866][ T24] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 295.437411][ T5905] usb 1-1: config 0 descriptor?? [ 295.448226][ T24] usb 2-1: Invalid ep0 maxpacket: 32 [ 295.575985][ T5952] usb 3-1: USB disconnect, device number 50 [ 295.607361][ T24] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 295.617571][ T5884] usb 5-1: USB disconnect, device number 62 [ 295.665577][ T24] usb 2-1: Invalid ep0 maxpacket: 32 [ 295.672607][ T24] usb usb2-port1: unable to enumerate USB device [ 295.780295][ T8729] netlink: 'syz.3.743': attribute type 4 has an invalid length. [ 295.802917][ T8729] netlink: 'syz.3.743': attribute type 4 has an invalid length. [ 295.873887][ T5905] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 295.894803][ T5905] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 295.903157][ T5905] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 295.913478][ T5905] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 295.924724][ T5905] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 295.942139][ T5905] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 295.954692][ T5905] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 295.973261][ T5905] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x2 [ 295.985915][ T5905] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 295.993741][ T5905] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 296.005037][ T5905] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 296.116018][ T5905] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 296.160360][ T8717] netlink: 368 bytes leftover after parsing attributes in process `syz.0.740'. [ 296.287968][ T8731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.332495][ T8731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.872353][ T5906] usb 1-1: USB disconnect, device number 60 [ 296.979062][ T1223] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 297.143308][ T1223] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 297.154876][ T1223] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.167086][ T1223] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 297.176465][ T1223] usb 3-1: config 0 has no interface number 0 [ 297.182929][ T1223] usb 3-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 297.196588][ T1223] usb 3-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 297.302294][ T1223] usb 3-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 297.306619][ T8745] xt_hashlimit: overflow, try lower: 18446744073709551613/254 [ 297.352663][ T1223] usb 3-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 297.437368][ T1223] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 297.448834][ T1223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.557979][ T1223] usb 3-1: Product: syz [ 297.587535][ T1223] usb 3-1: Manufacturer: syz [ 297.596690][ T1223] usb 3-1: SerialNumber: syz [ 297.605589][ T30] audit: type=1326 audit(1747745732.605:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce418e969 code=0x7ffc0000 [ 297.626170][ T1223] usb 3-1: config 0 descriptor?? [ 297.664123][ T30] audit: type=1326 audit(1747745732.615:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f7ce418e969 code=0x7ffc0000 [ 297.666808][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 297.888672][ T30] audit: type=1326 audit(1747745732.885:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc78e969 code=0x7ffc0000 [ 297.924349][ T1223] cypress_m8 3-1:0.74: HID->COM RS232 Adapter converter detected [ 297.970860][ T1223] usb 3-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 297.979066][ T30] audit: type=1326 audit(1747745732.885:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ffc78e969 code=0x7ffc0000 [ 297.979119][ T30] audit: type=1326 audit(1747745732.885:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc78e969 code=0x7ffc0000 [ 298.082931][ T30] audit: type=1326 audit(1747745732.925:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1ffc78e969 code=0x7ffc0000 [ 298.106239][ T1223] usb 3-1: USB disconnect, device number 51 [ 298.109792][ T30] audit: type=1326 audit(1747745732.925:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc78e969 code=0x7ffc0000 [ 298.156518][ T1223] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 298.170620][ T8760] netlink: 440 bytes leftover after parsing attributes in process `syz.1.752'. [ 298.187598][ T1223] cypress_m8 3-1:0.74: device disconnected [ 298.298897][ T5884] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 298.437734][ T8769] netlink: 36 bytes leftover after parsing attributes in process `syz.1.755'. [ 298.450838][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 298.478541][ T5884] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 298.525805][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.555404][ T5884] usb 1-1: Product: syz [ 298.563529][ T5884] usb 1-1: Manufacturer: syz [ 298.583660][ T5884] usb 1-1: SerialNumber: syz [ 298.614175][ T5884] usb 1-1: config 0 descriptor?? [ 298.634340][ T5884] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 298.700029][ T5884] usb 1-1: Detected FT-X [ 298.847135][ T5884] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 298.853648][ T8780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.758'. [ 299.228969][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 299.303948][ T8778] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[8778] [ 299.331651][ T5884] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 299.345316][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 299.345335][ T30] audit: type=1326 audit(1747745734.345:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 299.401432][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 299.420931][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 299.466426][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 299.527031][ T5884] usb 1-1: USB disconnect, device number 61 [ 299.543600][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.562213][ T30] audit: type=1326 audit(1747745734.345:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 299.614238][ T5884] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 299.629696][ T8784] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 299.645616][ T30] audit: type=1326 audit(1747745734.345:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 299.675778][ T5884] ftdi_sio 1-1:0.0: device disconnected [ 299.691396][ T30] audit: type=1326 audit(1747745734.355:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 299.720977][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 299.747053][ T30] audit: type=1326 audit(1747745734.355:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 299.884291][ T10] usb 3-1: USB disconnect, device number 52 [ 300.249810][ T8801] netlink: 440 bytes leftover after parsing attributes in process `syz.0.764'. [ 300.375424][ T8806] bridge_slave_0: left allmulticast mode [ 300.382298][ T8806] bridge_slave_0: left promiscuous mode [ 300.388258][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.517427][ T8806] bridge_slave_1: left allmulticast mode [ 300.537306][ T8806] bridge_slave_1: left promiscuous mode [ 300.560190][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.642187][ T8806] bond0: (slave bond_slave_0): Releasing backup interface [ 300.697766][ T8806] bond0: (slave bond_slave_1): Releasing backup interface [ 300.760051][ T8806] team0: Port device team_slave_0 removed [ 300.796549][ T8806] team0: Port device team_slave_1 removed [ 300.827028][ T8806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.846550][ T8806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.874627][ T8806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.888081][ T8806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.943182][ T8806] bond1: (slave bond2): Releasing backup interface [ 301.345682][ T8840] loop8: detected capacity change from 0 to 1 [ 301.376845][ T8840] Dev loop8: unable to read RDB block 1 [ 301.408448][ T8840] loop8: unable to read partition table [ 301.419059][ T8840] loop8: partition table beyond EOD, truncated [ 301.447092][ T8840] loop_reread_partitions: partition scan of loop8 (被> ) failed (rc=-5) [ 301.728301][ T8846] wg1: entered promiscuous mode [ 301.745212][ T8846] wg1: entered allmulticast mode [ 302.073968][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 303.411634][ T30] audit: type=1326 audit(1747745738.365:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce418e969 code=0x7ffc0000 [ 303.451144][ T8868] xt_NFQUEUE: number of total queues is 0 [ 303.524922][ T30] audit: type=1326 audit(1747745738.365:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce418e969 code=0x7ffc0000 [ 303.573936][ T30] audit: type=1326 audit(1747745738.365:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f7ce418e969 code=0x7ffc0000 [ 303.919931][ T30] audit: type=1326 audit(1747745738.365:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce418e969 code=0x7ffc0000 [ 304.071493][ T30] audit: type=1326 audit(1747745738.365:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce418e969 code=0x7ffc0000 [ 304.513953][ T8879] netlink: 440 bytes leftover after parsing attributes in process `syz.1.776'. [ 304.828729][ T8884] program syz.1.782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.847896][ T8887] netlink: 132 bytes leftover after parsing attributes in process `syz.4.783'. [ 304.874528][ T8884] netlink: 15 bytes leftover after parsing attributes in process `syz.1.782'. [ 304.939497][ T8892] AppArmor: change_hat: Invalid input 'O' [ 305.129036][ T5884] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 305.183348][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 305.291170][ T5884] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 305.314526][ T5884] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=67.3e [ 305.348573][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.357175][ T10] usb 3-1: config 0 has no interfaces? [ 305.362880][ T1223] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 305.387043][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 305.407659][ T5884] usb 2-1: Product: syz [ 305.414400][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.425540][ T5884] usb 2-1: Manufacturer: syz [ 305.431025][ T5884] usb 2-1: SerialNumber: syz [ 305.435874][ T10] usb 3-1: Product: syz [ 305.441468][ T10] usb 3-1: Manufacturer: syz [ 305.450650][ T5884] usb 2-1: config 0 descriptor?? [ 305.463832][ T10] usb 3-1: SerialNumber: syz [ 305.503439][ T10] usb 3-1: config 0 descriptor?? [ 305.533319][ T1223] usb 5-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 305.559143][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.576333][ T1223] usb 5-1: Product: syz [ 305.592258][ T1223] usb 5-1: Manufacturer: syz [ 305.596975][ T1223] usb 5-1: SerialNumber: syz [ 305.630124][ T1223] usb 5-1: config 0 descriptor?? [ 305.640421][ T1223] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 305.683527][ T8902] program syz.1.782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.723078][ T5884] usb 2-1: USB disconnect, device number 54 [ 305.829092][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 305.922798][ T8910] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 306.012940][ T10] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 306.037374][ T10] usb 4-1: can't read configurations, error -22 [ 306.147563][ T8908] dvmrp1: entered allmulticast mode [ 306.163064][ T1223] pwc: Failed to set LED on/off time (-71) [ 306.182803][ T1223] pwc: send_video_command error -71 [ 306.192506][ T1223] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 306.212550][ T8913] netlink: 40 bytes leftover after parsing attributes in process `syz.0.789'. [ 306.228152][ T1223] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 306.254172][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 306.345397][ T1223] usb 5-1: USB disconnect, device number 63 [ 306.355214][ T8916] batman_adv: batadv0: Adding interface: dummy0 [ 306.389960][ T8916] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.446760][ T8916] batman_adv: batadv0: Interface activated: dummy0 [ 306.460453][ T10] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 306.484264][ T10] usb 4-1: can't read configurations, error -22 [ 306.506421][ T10] usb usb4-port1: attempt power cycle [ 306.572779][ T8917] batadv0: mtu less than device minimum [ 306.605020][ T8917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.617635][ T8917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.630063][ T8917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.641503][ T8917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.652873][ T8917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.664303][ T8917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.676240][ T8917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.687807][ T8917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.699491][ T8917] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 307.008885][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 307.034242][ T10] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 307.043082][ T10] usb 4-1: can't read configurations, error -22 [ 307.179554][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 307.222621][ T10] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 307.234597][ T10] usb 4-1: can't read configurations, error -22 [ 307.248033][ T10] usb usb4-port1: unable to enumerate USB device [ 307.731450][ T8933] netlink: 72 bytes leftover after parsing attributes in process `syz.4.796'. [ 307.880280][ T10] usb 3-1: USB disconnect, device number 53 [ 308.975190][ T8960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.805'. [ 309.151599][ T8956] tap0: tun_chr_ioctl cmd 1074812118 [ 309.210907][ T8965] netlink: 440 bytes leftover after parsing attributes in process `syz.1.806'. [ 309.272949][ T5952] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 309.428926][ T5952] usb 3-1: device descriptor read/64, error -71 [ 309.483090][ T8971] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 309.698966][ T5952] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 309.838940][ T1223] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 309.859755][ T5952] usb 3-1: device descriptor read/64, error -71 [ 309.980065][ T5952] usb usb3-port1: attempt power cycle [ 310.011807][ T1223] usb 4-1: Using ep0 maxpacket: 32 [ 310.022828][ T1223] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 310.031835][ T1223] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 310.044523][ T1223] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 310.055347][ T1223] usb 4-1: config 1 has no interface number 0 [ 310.076486][ T1223] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.108361][ T1223] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 310.126043][ T1223] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 310.138181][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.346402][ T1223] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 310.393088][ T5952] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 310.466798][ T5952] usb 3-1: device descriptor read/8, error -71 [ 310.523885][ T1223] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 310.727750][ T5952] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 310.758253][ T49] usb 4-1: USB disconnect, device number 71 [ 310.776266][ T49] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 310.799711][ T5952] usb 3-1: device descriptor read/8, error -71 [ 310.813094][ T8989] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 310.919913][ T5952] usb usb3-port1: unable to enumerate USB device [ 311.119044][ T5905] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 311.274386][ T5905] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 311.286267][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.306168][ T5905] usb 1-1: Product: syz [ 311.328857][ T5905] usb 1-1: Manufacturer: syz [ 311.346708][ T5905] usb 1-1: SerialNumber: syz [ 311.361004][ T5905] usb 1-1: config 0 descriptor?? [ 311.831264][ T5905] usb 1-1: Firmware: major: 0, minor: 97, hardware type: ATUSB (0) [ 312.129130][ T5905] usb 1-1: Firmware: build za+[)WvXY}+#8\*=8psu(B S>/bFi [ 312.129130][ T5905] uwr7g1 LOFu><~F9q@Ѭ5q)\ WOfM 6}vym9.'iBǵ [ 312.408882][ T1223] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 312.455882][ T5905] usb 1-1: failed to fetch extended address, random address set [ 312.597412][ T1223] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 312.612932][ T1223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.626288][ T1223] usb 3-1: Product: syz [ 312.704378][ T5905] usb 1-1: USB disconnect, device number 62 [ 312.722345][ T1223] usb 3-1: Manufacturer: syz [ 312.790124][ T1223] usb 3-1: SerialNumber: syz [ 312.807570][ T1223] usb 3-1: config 0 descriptor?? [ 313.236684][ T1223] airspy 3-1:0.0: Board ID: 00 [ 313.264947][ T1223] airspy 3-1:0.0: Firmware version: [ 313.511840][ T9023] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 313.647174][ T1223] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 313.661370][ T1223] airspy 3-1:0.0: Registered as swradio24 [ 313.667617][ T1223] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 313.685269][ T1223] usb 3-1: USB disconnect, device number 58 [ 313.738820][ T5905] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 313.949543][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 313.961530][ T5905] usb 2-1: unable to get BOS descriptor or descriptor too short [ 314.068551][ T5905] usb 2-1: config 4 interface 0 has no altsetting 0 [ 314.102494][ T5905] usb 2-1: string descriptor 0 read error: -22 [ 314.132065][ T5905] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 314.161894][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.194415][ T5905] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 314.216461][ T5905] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 314.254169][ T5905] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 314.305124][ T5905] usb 2-1: media controller created [ 314.425793][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 314.534065][ T5905] zl10353_read_register: readreg error (reg=127, ret==0) [ 314.761934][ T9041] pimreg: entered allmulticast mode [ 314.776519][ T9041] pimreg: left allmulticast mode [ 314.876182][ T5905] usb 2-1: USB disconnect, device number 55 [ 315.220863][ T9044] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 315.282967][ T9049] program syz.2.827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.588052][ T9056] netlink: 440 bytes leftover after parsing attributes in process `syz.3.830'. [ 315.928826][ T5905] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 316.100982][ T5905] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 316.142586][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.212760][ T5905] usb 3-1: Product: syz [ 316.240702][ T5905] usb 3-1: Manufacturer: syz [ 316.252458][ T5905] usb 3-1: SerialNumber: syz [ 316.273352][ T5905] usb 3-1: config 0 descriptor?? [ 316.498242][ T5905] usb-storage 3-1:0.0: USB Mass Storage device detected [ 316.737513][ T5905] usb 3-1: USB disconnect, device number 59 [ 317.156606][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.164435][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.384974][ T9090] loop8: detected capacity change from 0 to 1 [ 317.392265][ T9090] Dev loop8: unable to read RDB block 1 [ 317.397884][ T9090] loop8: unable to read partition table [ 317.407132][ T9093] netlink: 165 bytes leftover after parsing attributes in process `syz.2.841'. [ 317.416891][ T9090] loop8: partition table beyond EOD, truncated [ 317.423443][ T9090] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 317.523025][ T9097] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 318.858676][ T9081] delete_channel: no stack [ 319.006288][ T9112] loop2: detected capacity change from 0 to 7 [ 319.059790][ T6003] loop2: [ 319.062842][ T6003] loop2: partition table partially beyond EOD, truncated [ 319.106332][ T9112] loop2: [ 319.109418][ T9112] loop2: partition table partially beyond EOD, truncated [ 319.710470][ T9126] netlink: 32 bytes leftover after parsing attributes in process `syz.0.849'. [ 319.722198][ T9126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.849'. [ 319.748973][ T9126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.849'. [ 319.871112][ T5906] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 320.118933][ T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 320.168809][ T5905] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 320.177931][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 320.349746][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 320.388903][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 320.389609][ T5906] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 320.396638][ T5905] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 320.419044][ T5906] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 320.443094][ T5905] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 320.459112][ T10] usb 4-1: device descriptor read/64, error -71 [ 320.472286][ T5905] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 320.498884][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 320.532849][ T5906] usb 2-1: config 1 interface 0 has no altsetting 0 [ 320.542429][ T5905] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 320.574054][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 320.607960][ T5906] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 320.617260][ T5905] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 320.630464][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.638517][ T5906] usb 2-1: Product: syz [ 320.650180][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.687477][ T5905] usb 3-1: config 0 descriptor?? [ 320.811471][ T5906] usb 2-1: Manufacturer: syz [ 320.816156][ T5906] usb 2-1: SerialNumber: syz [ 320.866106][ T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 320.916753][ T9128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.935755][ T9128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.944128][ T9120] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 320.977695][ T9128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.019401][ T9128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.042207][ T5905] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 321.187270][ T5906] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input22 [ 321.235460][ T5186] bcm5974 2-1:1.0: could not read from device [ 321.270292][ T5186] bcm5974 2-1:1.0: could not read from device [ 321.282628][ T5186] bcm5974 2-1:1.0: could not read from device [ 321.296362][ T5186] bcm5974 2-1:1.0: could not read from device [ 321.302724][ T5952] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 321.319900][ T5906] usb 2-1: USB disconnect, device number 56 [ 321.474893][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 321.489634][ T5952] usb 1-1: too many configurations: 23, using maximum allowed: 8 [ 321.509787][ T5952] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 321.526960][ T5952] usb 1-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 321.539247][ T5952] usb 1-1: config 0 has no interface number 0 [ 321.545413][ T5952] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.566238][ T5952] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 321.579409][ T5952] usb 1-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 321.593977][ T5952] usb 1-1: config 0 has no interface number 0 [ 321.610224][ T5952] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.630840][ T5952] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 321.640588][ T5952] usb 1-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 321.651416][ T5952] usb 1-1: config 0 has no interface number 0 [ 321.657572][ T5952] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.677393][ T5952] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 321.686021][ T5952] usb 1-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 321.700417][ T5952] usb 1-1: config 0 has no interface number 0 [ 321.710579][ T5952] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.736601][ T5952] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 321.748794][ T5952] usb 1-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 321.758906][ T10] usb 4-1: device descriptor read/64, error -71 [ 321.763195][ T5952] usb 1-1: config 0 has no interface number 0 [ 321.774217][ T5952] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.793228][ T5952] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 321.803015][ T5952] usb 1-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 321.816756][ T5952] usb 1-1: config 0 has no interface number 0 [ 321.824015][ T5952] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.846371][ T5952] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 321.855945][ T5952] usb 1-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 321.866618][ T5952] usb 1-1: config 0 has no interface number 0 [ 321.880388][ T5952] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.896198][ T10] usb usb4-port1: attempt power cycle [ 321.913188][ T5952] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 321.921674][ T5952] usb 1-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 321.932508][ T5952] usb 1-1: config 0 has no interface number 0 [ 321.939062][ T5952] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.958175][ T5952] usb 1-1: New USB device found, idVendor=061d, idProduct=c110, bcdDevice=ce.6f [ 321.967937][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.982667][ T5952] usb 1-1: Product: syz [ 321.986968][ T5952] usb 1-1: Manufacturer: syz [ 321.992101][ T5952] usb 1-1: SerialNumber: syz [ 322.002238][ T5952] usb 1-1: config 0 descriptor?? [ 322.158974][ T49] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 322.238909][ T10] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 322.242654][ T5952] usb 1-1: USB disconnect, device number 63 [ 322.287200][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 322.303790][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.319619][ T49] usb 2-1: too many configurations: 153, using maximum allowed: 8 [ 322.337208][ T10] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 322.337220][ T49] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 322.337242][ T49] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.366853][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.369652][ T49] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 322.385090][ T10] usb 4-1: Product: syz [ 322.385116][ T10] usb 4-1: Manufacturer: syz [ 322.385203][ T10] usb 4-1: SerialNumber: syz [ 322.405031][ T10] usb 4-1: config 0 descriptor?? [ 322.410563][ T49] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.412252][ T49] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 322.431661][ T49] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.445365][ T49] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 322.451253][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 322.457046][ T49] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.473635][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 322.488117][ T49] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 322.493158][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.499925][ T49] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.522473][ T49] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 322.533344][ T49] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.544744][ T49] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 322.555988][ T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 322.556504][ T49] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.583334][ T49] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 322.595414][ T49] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.607256][ T49] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c30, bcdDevice= 4.00 [ 322.617022][ T49] usb 2-1: New USB device strings: Mfr=0, Product=244, SerialNumber=14 [ 322.626149][ T49] usb 2-1: Product: syz [ 322.639266][ T49] usb 2-1: SerialNumber: syz [ 322.646783][ T9149] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 322.656165][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.702691][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 322.702722][ T30] audit: type=1326 audit(1747745757.675:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.3.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 322.770096][ T49] usb 2-1: config 0 descriptor?? [ 322.786469][ T30] audit: type=1326 audit(1747745757.675:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.3.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 322.956277][ T30] audit: type=1326 audit(1747745757.675:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.3.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 323.001058][ T30] audit: type=1326 audit(1747745757.675:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.3.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 323.058192][ T30] audit: type=1326 audit(1747745757.675:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.3.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 323.094966][ T30] audit: type=1326 audit(1747745757.675:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.3.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 323.119586][ T30] audit: type=1326 audit(1747745757.675:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.3.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 323.141993][ T30] audit: type=1326 audit(1747745757.675:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.3.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 323.164610][ T10] usb 4-1: USB disconnect, device number 74 [ 323.175871][ T30] audit: type=1326 audit(1747745757.675:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.3.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 323.206145][ T30] audit: type=1326 audit(1747745757.675:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.3.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6319f8e969 code=0x7ffc0000 [ 323.244685][ T5952] usb 3-1: USB disconnect, device number 60 [ 323.277958][ T5952] usblp0: removed [ 323.330002][ T1223] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 323.370307][ T9157] loop2: detected capacity change from 0 to 7 [ 323.377382][ T9157] loop2: [ 323.383612][ T9157] loop2: partition table partially beyond EOD, truncated [ 323.498954][ T1223] usb 1-1: Using ep0 maxpacket: 8 [ 323.510130][ T1223] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 323.540731][ T1223] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.576545][ T1223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.605071][ T1223] usb 1-1: Product: syz [ 323.627319][ T1223] usb 1-1: Manufacturer: syz [ 323.632325][ T1223] usb 1-1: SerialNumber: syz [ 323.878884][ T9155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.918157][ T9155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.957845][ T9169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.861'. [ 323.984402][ T9155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.995960][ T9155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.318844][ T5952] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 324.478822][ T5952] usb 5-1: Using ep0 maxpacket: 16 [ 324.486386][ T5952] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.497390][ T5952] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.503958][ T5884] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 324.518472][ T5952] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 324.529426][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.551526][ T5952] usb 5-1: Product: syz [ 324.562793][ T5952] usb 5-1: Manufacturer: syz [ 324.571629][ T5952] usb 5-1: SerialNumber: syz [ 324.669000][ T24] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 324.688941][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 324.701697][ T5884] usb 3-1: config 0 has no interfaces? [ 324.708214][ T5884] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 324.724210][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.746784][ T5884] usb 3-1: config 0 descriptor?? [ 324.793847][ T5952] usb 5-1: 0:2 : does not exist [ 324.799340][ T24] usb 4-1: device descriptor read/64, error -71 [ 324.824133][ T5952] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 324.882631][ T5952] usb 5-1: USB disconnect, device number 64 [ 324.966854][ T5906] usb 2-1: USB disconnect, device number 57 [ 325.046935][ T6119] udevd[6119]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.082719][ T24] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 325.249004][ T24] usb 4-1: device descriptor read/64, error -71 [ 325.370825][ T24] usb usb4-port1: attempt power cycle [ 325.569246][ T5952] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 325.718966][ T24] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 325.735816][ T5906] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 325.748428][ T5952] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 325.757833][ T24] usb 4-1: device descriptor read/8, error -71 [ 325.766891][ T5952] usb 2-1: config 0 has no interface number 0 [ 325.803325][ T5952] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 325.814530][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.823077][ T5952] usb 2-1: Product: syz [ 325.827660][ T5952] usb 2-1: Manufacturer: syz [ 325.832866][ T5952] usb 2-1: SerialNumber: syz [ 325.843681][ T5952] usb 2-1: config 0 descriptor?? [ 325.865435][ T5952] ems_usb 2-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 325.894496][ T5952] ems_usb 2-1:0.204: probe with driver ems_usb failed with error -22 [ 325.898990][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 325.919610][ T5906] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 325.929172][ T5906] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.939727][ T5906] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.953319][ T5906] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.966178][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.976227][ T5906] usb 5-1: Product: syz [ 325.984744][ T5906] usb 5-1: Manufacturer: syz [ 325.991207][ T5906] usb 5-1: SerialNumber: syz [ 326.028996][ T24] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 326.052087][ T24] usb 4-1: device descriptor read/8, error -71 [ 326.052510][ T1223] cdc_ncm 1-1:1.0: bind() failure [ 326.102702][ T1223] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 326.111024][ T1223] cdc_ncm 1-1:1.1: bind() failure [ 326.141160][ T1223] usb 1-1: USB disconnect, device number 64 [ 326.157225][ T5952] usb 2-1: USB disconnect, device number 58 [ 326.180374][ T24] usb usb4-port1: unable to enumerate USB device [ 326.327962][ T9190] netlink: 'syz.0.868': attribute type 1 has an invalid length. [ 327.067813][ T10] usb 3-1: USB disconnect, device number 61 [ 327.165244][ T9202] netlink: 132 bytes leftover after parsing attributes in process `syz.4.871'. [ 327.213044][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 327.240258][ T9205] netlink: 132 bytes leftover after parsing attributes in process `syz.4.871'. [ 327.349653][ T24] usb 2-1: device descriptor read/64, error -71 [ 327.449773][ T9210] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 327.614179][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 327.769211][ T24] usb 2-1: device descriptor read/64, error -71 [ 327.818914][ T1223] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 327.888109][ T24] usb usb2-port1: attempt power cycle [ 328.011777][ T1223] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.026590][ T1223] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.088518][ T1223] usb 4-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 328.140758][ T1223] usb 4-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 328.191840][ T1223] usb 4-1: config 1 interface 1 has no altsetting 0 [ 328.231878][ T1223] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.241284][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.252725][ T1223] usb 4-1: Product: syz [ 328.262869][ T1223] usb 4-1: Manufacturer: syz [ 328.268815][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 328.278947][ T1223] usb 4-1: SerialNumber: syz [ 328.324489][ T1223] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 328.389919][ T24] usb 2-1: device descriptor read/8, error -71 [ 328.559925][ T9215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.590343][ T9215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.605573][ T5952] usb 4-1: USB disconnect, device number 79 [ 328.689009][ T24] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 328.731078][ T24] usb 2-1: device descriptor read/8, error -71 [ 328.855461][ T24] usb usb2-port1: unable to enumerate USB device [ 329.205140][ T9232] loop2: detected capacity change from 0 to 7 [ 329.214479][ T9232] Dev loop2: unable to read RDB block 7 [ 329.232787][ T9232] loop2: unable to read partition table [ 329.249088][ T9232] loop2: partition table beyond EOD, truncated [ 329.271973][ T9232] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 329.829646][ T9248] loop2: detected capacity change from 0 to 7 [ 329.948006][ T6119] Dev loop2: unable to read RDB block 7 [ 329.989530][ T9254] syz.1.883 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 329.991310][ T6119] loop2: unable to read partition table [ 330.025445][ T6119] loop2: partition table beyond EOD, truncated [ 330.053230][ T5884] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 330.642140][ T9236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.719128][ T9236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.191158][ T5884] usb 3-1: device descriptor read/64, error -71 [ 331.438844][ T5884] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 331.470016][ T5906] usb 5-1: 0:2 : does not exist [ 331.481165][ T5906] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 331.508854][ T5905] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 331.599395][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 331.639120][ T5905] usb 2-1: device descriptor read/64, error -71 [ 331.693189][ T5884] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 331.731190][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.788101][ T5884] usb 3-1: Product: syz [ 331.793434][ T5884] usb 3-1: Manufacturer: syz [ 331.812285][ T5884] usb 3-1: SerialNumber: syz [ 331.850451][ T5884] usb 3-1: config 0 descriptor?? [ 331.889239][ T5905] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 331.894842][ T5884] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 332.039785][ T5905] usb 2-1: device descriptor read/64, error -71 [ 332.064633][ T5884] gp8psk: usb in 128 operation failed. [ 332.073989][ T5884] gp8psk: usb in 137 operation failed. [ 332.079982][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.092105][ T5884] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 332.102168][ T5884] usb 3-1: media controller created [ 332.153003][ T5905] usb usb2-port1: attempt power cycle [ 332.153762][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.189867][ T5884] gp8psk_fe: Frontend revision 1 attached [ 332.197824][ T5884] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 332.218571][ T5884] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 332.231295][ T5952] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 332.417002][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 332.434395][ T5952] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 332.448916][ T5952] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 332.471132][ T5952] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.482612][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.491876][ T5952] usb 4-1: Manufacturer: Д [ 332.497189][ T5952] usb 4-1: SerialNumber: ࢚䵄㋟蹚⃿哎娄Ẳ殑햂솳跭쓥ᮁ腽㤜ꮕ焜錀㞣臕麟Ἕ虩≬틞⬷逥﹟铽๔늸咁␂⿀ [ 332.528905][ T9288] netlink: 36 bytes leftover after parsing attributes in process `syz.4.892'. [ 332.548847][ T5905] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 332.568431][ T5884] gp8psk: usb in 137 operation failed. [ 332.639678][ T5905] usb 2-1: device descriptor read/8, error -71 [ 332.642259][ T5884] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 332.682962][ T5884] gp8psk: found Genpix USB device pID = 201 (hex) [ 332.710373][ T5884] usb 3-1: USB disconnect, device number 63 [ 332.878933][ T5905] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 332.923065][ T5884] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 332.930754][ T5905] usb 2-1: device descriptor read/8, error -71 [ 332.982282][ T5952] cdc_ncm 4-1:1.0: bind() failure [ 333.023376][ T5952] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 333.037007][ T5952] cdc_ncm 4-1:1.1: bind() failure [ 333.049147][ T5905] usb usb2-port1: unable to enumerate USB device [ 333.059300][ T5952] usb 4-1: USB disconnect, device number 80 [ 333.511022][ T5905] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 333.633610][ T9295] netlink: 36 bytes leftover after parsing attributes in process `syz.3.895'. [ 333.698942][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 333.733695][ T5905] usb 1-1: unable to get BOS descriptor or descriptor too short [ 333.771422][ T5905] usb 1-1: config 1 interface 0 altsetting 38 bulk endpoint 0x1 has invalid maxpacket 64 [ 333.810375][ T5905] usb 1-1: config 1 interface 0 altsetting 38 bulk endpoint 0x82 has invalid maxpacket 64 [ 333.841836][ T5905] usb 1-1: config 1 interface 0 has no altsetting 0 [ 333.868902][ T5905] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 333.898416][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.927609][ T5905] usb 1-1: Product: syz [ 333.945626][ T5905] usb 1-1: Manufacturer: syz [ 333.949599][ T5884] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 333.976400][ T5905] usb 1-1: SerialNumber: syz [ 334.008340][ T9290] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 334.018299][ T9290] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 334.102892][ T5884] usb 4-1: device descriptor read/64, error -71 [ 334.159919][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.897'. [ 334.172553][ T9300] bridge_slave_1: left allmulticast mode [ 334.178295][ T9300] bridge_slave_1: left promiscuous mode [ 334.185653][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.198950][ T9300] bridge_slave_0: left allmulticast mode [ 334.204846][ T9300] bridge_slave_0: left promiscuous mode [ 334.211613][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.228660][ T9290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.242075][ T9290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.283552][ T5905] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 38 proto 2 vid 0x0525 pid 0xA4A8 [ 334.303826][ T5905] usb 1-1: USB disconnect, device number 65 [ 334.323537][ T5905] usblp0: removed [ 334.349161][ T5884] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 334.499060][ T5884] usb 4-1: device descriptor read/64, error -71 [ 334.609185][ T5884] usb usb4-port1: attempt power cycle [ 335.269335][ T5884] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 335.294405][ T5884] usb 4-1: device descriptor read/8, error -71 [ 335.558944][ T5884] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 335.580077][ T5884] usb 4-1: device descriptor read/8, error -71 [ 335.694930][ T5884] usb usb4-port1: unable to enumerate USB device [ 336.486650][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 336.486670][ T30] audit: type=1326 audit(1747745771.475:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 336.598805][ T30] audit: type=1326 audit(1747745771.475:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 336.659672][ T9336] netlink: 'syz.2.907': attribute type 13 has an invalid length. [ 336.695827][ T30] audit: type=1326 audit(1747745771.475:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 336.775930][ T30] audit: type=1326 audit(1747745771.475:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 336.882006][ T30] audit: type=1326 audit(1747745771.475:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 336.929485][ T30] audit: type=1326 audit(1747745771.475:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 336.979866][ T5905] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 336.981232][ T30] audit: type=1326 audit(1747745771.475:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 337.093789][ T30] audit: type=1326 audit(1747745771.475:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 337.168930][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 337.188860][ T30] audit: type=1326 audit(1747745771.475:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 337.201276][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.272761][ T30] audit: type=1326 audit(1747745771.475:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 337.297801][ T5905] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 337.351053][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.409537][ T5905] usb 2-1: config 0 descriptor?? [ 337.429191][ T5905] gspca_main: spca501-2.14.0 probing 0000:0000 [ 337.623559][ T9336] hsr0: left promiscuous mode [ 337.637814][ T9340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.649575][ T9340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.855159][ T9336] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.891921][ T9336] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.913263][ T9336] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.938843][ T9336] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.186309][ T9355] loop2: detected capacity change from 0 to 7 [ 338.202091][ T9336] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 338.229721][ T9336] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 338.239919][ T9355] loop2: [ 338.242929][ T9355] loop2: partition table partially beyond EOD, truncated [ 338.272046][ T5905] gspca_spca501: reg write: error -110 [ 338.286312][ T9336] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 338.317748][ T9336] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 338.326637][ T5905] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 338.326735][ T5905] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 338.547175][ T9358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.577258][ T9358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.703690][ T9364] [U] [ 338.875599][ T9371] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 339.126078][ T9381] netlink: 'syz.3.918': attribute type 3 has an invalid length. [ 339.168952][ T9381] netlink: 152988 bytes leftover after parsing attributes in process `syz.3.918'. [ 339.298218][ T9391] : entered promiscuous mode [ 339.377738][ T9396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.421373][ T5884] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 339.424936][ T9396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.491459][ T9396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.523212][ T9396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.544421][ T9400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.554633][ T49] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 339.575291][ T5884] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 339.587583][ T9400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.604199][ T5884] usb 1-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 339.617127][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.656610][ T1223] usb 2-1: USB disconnect, device number 67 [ 339.723256][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 339.750335][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.766504][ T49] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 339.777651][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.813863][ T5884] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 339.827112][ T49] usb 3-1: config 0 descriptor?? [ 340.058891][ T10] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 340.173426][ T24] usb 1-1: USB disconnect, device number 66 [ 340.233048][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 340.245224][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.259545][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 340.268631][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.501362][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 340.538910][ T10] usbtmc 4-1:16.0: can't read capabilities [ 340.665329][ T10] usb 4-1: USB disconnect, device number 85 [ 341.548837][ T5884] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 341.650986][ T5906] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 341.748824][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 341.761994][ T9434] netlink: 'syz.3.933': attribute type 30 has an invalid length. [ 341.773135][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.799429][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.817958][ T5884] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 341.827129][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.836105][ T9434] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.847118][ T9434] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.858624][ T9434] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.867957][ T9434] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.885042][ T5884] usb 1-1: config 0 descriptor?? [ 341.895540][ T5906] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 341.905178][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.917228][ T5884] hub 1-1:0.0: USB hub found [ 341.927460][ T5906] usb 2-1: config 0 descriptor?? [ 341.954417][ T5906] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 341.961062][ T9434] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.970278][ T9434] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.979466][ T9434] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.988401][ T9434] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.137379][ T9438] pim6reg: entered allmulticast mode [ 342.151302][ T9438] pim6reg: left allmulticast mode [ 342.338121][ T49] usbhid 3-1:0.0: can't add hid device: -71 [ 342.359026][ T49] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 342.387213][ T49] usb 3-1: USB disconnect, device number 64 [ 342.526398][ T5884] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 342.862719][ T5884] usbhid 1-1:0.0: can't add hid device: -71 [ 342.869039][ T5884] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 342.922793][ T5884] usb 1-1: USB disconnect, device number 67 [ 343.259051][ T9456] program syz.2.941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.273088][ T5906] usb 2-1: USB disconnect, device number 68 [ 343.586855][ T9471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.943'. [ 343.650667][ T9473] x_tables: duplicate underflow at hook 2 [ 343.898457][ T9480] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.949'. [ 344.040871][ T9489] program syz.2.952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.185626][ T9494] netlink: 36 bytes leftover after parsing attributes in process `syz.1.951'. [ 344.200000][ T9494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.951'. [ 344.213478][ T9494] netlink: 36 bytes leftover after parsing attributes in process `syz.1.951'. [ 344.223363][ T9494] netlink: 36 bytes leftover after parsing attributes in process `syz.1.951'. [ 344.496047][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'. [ 344.550311][ T9502] program syz.4.955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.650218][ T49] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 344.831059][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.846793][ T9506] vlan2: entered allmulticast mode [ 344.852088][ T9506] bond0: entered allmulticast mode [ 345.007963][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.047585][ T49] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.083355][ T49] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 345.108929][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.299078][ T49] usb 4-1: config 0 descriptor?? [ 345.578848][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 345.578864][ T30] audit: type=1400 audit(1747745780.555:513): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9514 comm="syz.4.958" [ 345.946669][ T9497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.180129][ T9497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.234156][ T49] usbhid 4-1:0.0: can't add hid device: -71 [ 346.295610][ T49] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 346.344289][ T49] usb 4-1: USB disconnect, device number 86 [ 347.580267][ T5884] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 347.708983][ T5905] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 347.779010][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 347.797524][ T5884] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 347.812777][ T5884] usb 2-1: config 0 has no interface number 0 [ 347.841762][ T5884] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 347.893274][ T5884] usb 2-1: config 0 interface 85 has no altsetting 0 [ 347.991226][ T5905] usb 1-1: config 0 has no interfaces? [ 348.000862][ T5905] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 348.011409][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.020483][ T5884] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 348.049039][ T5905] usb 1-1: Product: syz [ 348.055952][ T5905] usb 1-1: Manufacturer: syz [ 348.064040][ T5905] usb 1-1: SerialNumber: syz [ 348.081906][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.092011][ T5905] usb 1-1: config 0 descriptor?? [ 348.135037][ T5884] usb 2-1: Product: syz [ 348.148328][ T5884] usb 2-1: Manufacturer: syz [ 348.184465][ T5884] usb 2-1: SerialNumber: syz [ 348.213113][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 348.217015][ T5884] usb 2-1: config 0 descriptor?? [ 348.479716][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 348.489723][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 348.501888][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 348.774419][ T24] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 348.795481][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.808411][ T24] usb 3-1: Product: 䀊 [ 348.813940][ T9549] program syz.4.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.823281][ T24] usb 3-1: Manufacturer: 촨㭄릟繕胬꿳鹭李쌉﹖靠ᨋ挨』跳떋䪁뿁㼛醭蔦 [ 348.848800][ T24] usb 3-1: SerialNumber: 觶莋죅☙靛¨資徃漧ᄠᜉ飪垖勹蝶ᰃӨ䔞뛤֧Ν눇땊텋揫ꮊ䘁숍镦퓗鷹咞ᳶ㯒࣭琉滠괹뚾ᲆ☍孕꿶봢骼⃉侵ᖶ타ᖍ筂器匾㴌묀ꁤ荁쀆℻ᙷ䛶䒪듚࿣냏弁呫起ꗍｭ牥ꬕ窜뭷阑䷣呋㔚퉕纡翭얿릤뱴爅ἰ듐貮꤫읝됷︸龓琙铄뇀釭췣Ⅿ瓷ꈝ큔៽ [ 349.012352][ T5884] appletouch 2-1:0.85: Geyser mode initialized. [ 349.020947][ T5884] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input25 [ 349.048828][ T30] audit: type=1800 audit(1747745783.995:514): pid=9556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.968" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=29881 res=0 errno=0 [ 349.291776][ T5884] usb 2-1: USB disconnect, device number 69 [ 349.397456][ T5884] appletouch 2-1:0.85: input: appletouch disconnected [ 349.448406][ T9531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.469520][ T9561] binder: 9559:9561 ioctl c0306201 0 returned -14 [ 349.477888][ T9531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.169030][ T49] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 350.219813][ T9565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.230690][ T9565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.333038][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 350.342885][ T49] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.361841][ T49] usb 2-1: config 0 has no interfaces? [ 350.372665][ T49] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 350.467321][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.868838][ T49] usb 2-1: Product: syz [ 350.873186][ T49] usb 2-1: Manufacturer: syz [ 350.877852][ T49] usb 2-1: SerialNumber: syz [ 350.886646][ T49] usb 2-1: config 0 descriptor?? [ 350.956009][ T49] usb 1-1: USB disconnect, device number 68 [ 351.289471][ T1223] usb 2-1: USB disconnect, device number 70 [ 351.399514][ T24] usbhid 3-1:1.0: can't add hid device: -71 [ 351.427271][ T24] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 351.442963][ T24] usb 3-1: USB disconnect, device number 65 [ 351.888835][ T1223] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 352.058971][ T1223] usb 2-1: Using ep0 maxpacket: 8 [ 352.092284][ T1223] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 352.120894][ T1223] usb 2-1: config 2 has no interface number 0 [ 352.138429][ T1223] usb 2-1: config 2 interface 31 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 352.166663][ T1223] usb 2-1: config 2 interface 31 has no altsetting 0 [ 352.199218][ T1223] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 352.246340][ T1223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.273809][ T1223] usb 2-1: Product: syz [ 352.290394][ T1223] usb 2-1: Manufacturer: syz [ 352.307324][ T1223] usb 2-1: SerialNumber: syz [ 352.347059][ T1223] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 352.554310][ T1223] usb 2-1: USB disconnect, device number 71 [ 352.806613][ T9600] loop8: detected capacity change from 0 to 1 [ 352.823069][ T9600] Dev loop8: unable to read RDB block 1 [ 352.845802][ T9600] loop8: unable to read partition table [ 352.867300][ T9600] loop8: partition table beyond EOD, truncated [ 352.878395][ T9600] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 353.055751][ T9606] net_ratelimit: 10 callbacks suppressed [ 353.055765][ T9606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.210985][ T9610] netlink: 64 bytes leftover after parsing attributes in process `syz.0.982'. [ 353.803299][ T9615] kvm: kvm [9614]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xf8 [ 353.912284][ T5884] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 354.173117][ T9624] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 354.212110][ T5884] usb 2-1: config 0 has no interfaces? [ 354.401810][ T5884] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 354.410973][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.419304][ T5884] usb 2-1: Product: syz [ 354.423495][ T5884] usb 2-1: Manufacturer: syz [ 354.428126][ T5884] usb 2-1: SerialNumber: syz [ 354.489156][ T5884] usb 2-1: config 0 descriptor?? [ 354.704469][ T9637] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 354.876551][ T9638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.888506][ T9638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.124609][ T9654] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 356.168994][ T49] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 356.242058][ T9655] mmap: syz.0.993 (9655): VmData 37855232 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 356.346323][ T49] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.364709][ T49] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 356.385064][ T49] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 356.407110][ T49] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 356.416540][ T49] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 356.432748][ T49] usb 3-1: Manufacturer: syz [ 356.441938][ T49] usb 3-1: SerialNumber: syz [ 357.195366][ T49] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 357.328368][ T49] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input26 [ 357.390471][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 357.397485][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 357.407924][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 357.415286][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 357.422300][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 357.429348][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 357.436315][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 357.438922][ T5884] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 357.443385][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 357.457489][ C1] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 357.504577][ T49] usb 3-1: USB disconnect, device number 66 [ 357.612758][ T30] audit: type=1326 audit(1747745792.595:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 357.678860][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 357.689919][ T5884] usb 1-1: too many configurations: 59, using maximum allowed: 8 [ 357.718564][ T5906] usb 2-1: USB disconnect, device number 72 [ 357.760219][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 357.798430][ T30] audit: type=1326 audit(1747745792.595:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 357.803825][ T5884] usb 1-1: can't read configurations, error -61 [ 357.949224][ T30] audit: type=1326 audit(1747745792.595:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 358.023240][ T30] audit: type=1326 audit(1747745792.595:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 358.045766][ T5884] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 358.137317][ T9676] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 358.149819][ T30] audit: type=1326 audit(1747745792.595:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d4132ab39 code=0x7ffc0000 [ 358.222985][ T30] audit: type=1326 audit(1747745792.595:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 358.228958][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 358.293035][ T30] audit: type=1326 audit(1747745792.595:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 358.310226][ T5884] usb 1-1: too many configurations: 59, using maximum allowed: 8 [ 358.348303][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 358.397802][ T5884] usb 1-1: can't read configurations, error -61 [ 358.415515][ T5884] usb usb1-port1: attempt power cycle [ 358.419015][ T30] audit: type=1326 audit(1747745792.595:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d4132ab39 code=0x7ffc0000 [ 358.511608][ T30] audit: type=1326 audit(1747745792.595:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d4132ab39 code=0x7ffc0000 [ 358.535100][ T30] audit: type=1326 audit(1747745792.595:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4138e969 code=0x7ffc0000 [ 358.605936][ T9685] ======================================================= [ 358.605936][ T9685] WARNING: The mand mount option has been deprecated and [ 358.605936][ T9685] and is ignored by this kernel. Remove the mand [ 358.605936][ T9685] option from the mount to silence this warning. [ 358.605936][ T9685] ======================================================= [ 358.648968][ T5906] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 358.766592][ T9688] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 358.776259][ T5884] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 358.806649][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 358.814494][ T5884] usb 1-1: too many configurations: 59, using maximum allowed: 8 [ 358.822585][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 358.826998][ T9691] netlink: 'syz.4.1003': attribute type 10 has an invalid length. [ 358.832232][ T5906] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 358.846010][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 358.861102][ T5906] usb 4-1: config 0 has no interface number 0 [ 358.881717][ T5884] usb 1-1: can't read configurations, error -61 [ 358.902176][ T5906] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.043218][ T5906] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.078838][ T5884] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 359.093242][ T5906] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.126310][ T5906] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 359.138231][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 359.155160][ T5884] usb 1-1: too many configurations: 59, using maximum allowed: 8 [ 359.177552][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.190316][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 359.223531][ T5884] usb 1-1: can't read configurations, error -61 [ 359.258060][ T5906] usb 4-1: Product: syz [ 359.276499][ T5906] usb 4-1: Manufacturer: syz [ 359.309912][ T5884] usb usb1-port1: unable to enumerate USB device [ 359.370938][ T5906] usb 4-1: SerialNumber: syz [ 359.395045][ T5906] usb 4-1: config 0 descriptor?? [ 359.422080][ T5906] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 359.494038][ T5906] snd-usb-audio 4-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 359.516752][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.585953][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 359.607064][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.650781][ T24] usb 4-1: USB disconnect, device number 87 [ 360.088799][ T5906] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 360.251805][ T5906] usb 2-1: device descriptor read/64, error -71 [ 360.386303][ T9715] loop2: detected capacity change from 0 to 7 [ 360.413144][ T9715] loop2: p1 [ 360.422120][ T9715] loop2: partition table partially beyond EOD, truncated [ 360.439300][ T9715] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 360.518012][ T5906] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 360.888949][ T5906] usb 2-1: device descriptor read/64, error -71 [ 360.947902][ T6003] udevd[6003]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 361.031347][ T5906] usb usb2-port1: attempt power cycle [ 361.421183][ T5906] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 361.501110][ T5906] usb 2-1: device descriptor read/8, error -71 [ 361.841135][ T5906] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 361.911956][ T5906] usb 2-1: device descriptor read/8, error -71 [ 362.034039][ T5906] usb usb2-port1: unable to enumerate USB device [ 362.201185][ T9737] netlink: 'syz.4.1017': attribute type 2 has an invalid length. [ 362.239005][ T9737] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1017'. [ 362.268402][ T9737] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 362.268875][ T5884] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 362.485510][ T5884] usb 4-1: device descriptor read/64, error -71 [ 362.590469][ T9749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.629251][ T9749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.740732][ T5883] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 362.749535][ T5884] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 362.878853][ T5884] usb 4-1: device descriptor read/64, error -71 [ 362.903058][ T5883] usb 1-1: device descriptor read/64, error -71 [ 362.989269][ T5884] usb usb4-port1: attempt power cycle [ 363.048839][ T49] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 363.159020][ T5883] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 363.209017][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 363.220329][ T49] usb 2-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config [ 363.245473][ T49] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 140, using maximum allowed: 30 [ 363.257672][ T49] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 363.274387][ T49] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 363.284522][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.299667][ T49] usb 2-1: config 0 descriptor?? [ 363.312145][ T5883] usb 1-1: device descriptor read/64, error -71 [ 363.334171][ T5884] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 363.359819][ T5884] usb 4-1: device descriptor read/8, error -71 [ 363.430127][ T5883] usb usb1-port1: attempt power cycle [ 363.598898][ T5884] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 363.629932][ T5884] usb 4-1: device descriptor read/8, error -71 [ 363.695256][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 363.721471][ T9755] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1023'. [ 363.732434][ T9755] xt_HMARK: proto mask must be zero with L3 mode [ 363.744133][ T49] usb 2-1: string descriptor 0 read error: -71 [ 363.768913][ T5883] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 363.776954][ T5884] usb usb4-port1: unable to enumerate USB device [ 363.780437][ T49] usb 2-1: USB disconnect, device number 77 [ 363.810769][ T5883] usb 1-1: device descriptor read/8, error -71 [ 364.069255][ T5883] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 364.099758][ T5883] usb 1-1: device descriptor read/8, error -71 [ 364.209645][ T5883] usb usb1-port1: unable to enumerate USB device [ 364.818786][ T5883] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 364.860011][ T9781] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 364.993024][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 365.019738][ T5883] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 365.031349][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.096368][ T5883] usb 2-1: Product: syz [ 365.101438][ T5883] usb 2-1: Manufacturer: syz [ 365.106392][ T5883] usb 2-1: SerialNumber: syz [ 365.115650][ T5883] usb 2-1: config 0 descriptor?? [ 365.326735][ T9771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.337608][ T9771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.451390][ T5883] usb 2-1: USB disconnect, device number 78 [ 365.892539][ T49] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 366.060862][ T9803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1038'. [ 366.078640][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 366.082549][ T9803] ip6gretap0: entered promiscuous mode [ 366.097987][ T9803] ip6gretap0: left promiscuous mode [ 366.106553][ T49] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 366.117923][ T49] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.132056][ T49] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.142278][ T49] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.152623][ T49] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.182977][ T49] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.227761][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.510041][ T49] usb 4-1: usb_control_msg returned -32 [ 366.523708][ T49] usbtmc 4-1:16.0: can't read capabilities [ 366.867236][ T5906] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 366.904458][ T9822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.931651][ T9822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.041032][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 367.051619][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 367.066994][ T5906] usb 2-1: config 5 interface 0 has no altsetting 0 [ 367.095493][ T5906] usb 2-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=6b.5b [ 367.125434][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.154225][ T5906] usb 2-1: Product: syz [ 367.162899][ T5906] usb 2-1: Manufacturer: syz [ 367.177529][ T5906] usb 2-1: SerialNumber: syz [ 367.259134][ T1223] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 367.420817][ T1223] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.432208][ T5906] snd_usb_podhd 2-1:5.0: Line 6 POD HD500X found [ 367.460368][ T5906] usb 2-1: selecting invalid altsetting 1 [ 367.471945][ T1223] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.548033][ T5906] snd_usb_podhd 2-1:5.0: set_interface failed [ 367.560488][ T5906] snd_usb_podhd 2-1:5.0: Line 6 POD HD500X now disconnected [ 367.570622][ T1223] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 367.591660][ T5906] snd_usb_podhd 2-1:5.0: probe with driver snd_usb_podhd failed with error -22 [ 367.605635][ T1223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.624013][ T5906] usb 2-1: USB disconnect, device number 79 [ 367.658300][ T1223] usb 1-1: config 0 descriptor?? [ 367.689782][ T1223] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 367.735267][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 367.958429][ T9840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.010108][ T9840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.550321][ T5906] usb 4-1: USB disconnect, device number 92 [ 368.692296][ T9859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.731950][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 368.741097][ T49] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 368.761351][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 368.920420][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 368.940814][ T49] usb 2-1: config 6 has too many interfaces: 253, using maximum allowed: 32 [ 368.951084][ T49] usb 2-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 368.966235][ T49] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 368.983326][ T49] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 253 [ 369.005578][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.022576][ T49] usb 2-1: New USB device found, idVendor=2981, idProduct=0005, bcdDevice= 0.05 [ 369.033763][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.046388][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.054455][ T49] usb 2-1: Product: syz [ 369.062314][ T49] usb 2-1: Manufacturer: syz [ 369.067482][ T49] usb 2-1: SerialNumber: syz [ 369.114663][ T5906] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 369.278882][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 369.299374][ T5906] usb 4-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 369.358182][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.376274][ T5906] usb 4-1: Product: syz [ 369.383820][ T5906] usb 4-1: Manufacturer: syz [ 369.388499][ T5906] usb 4-1: SerialNumber: syz [ 369.414096][ T5906] usb 4-1: config 0 descriptor?? [ 369.426238][ T5906] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 369.472598][ T1223] usb 2-1: USB disconnect, device number 80 [ 369.625415][ T5906] pwc: send_video_command error -71 [ 369.651824][ T5906] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 369.679694][ T5906] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 369.700983][ T5906] usb 4-1: USB disconnect, device number 93 [ 369.712366][ T9870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.721103][ T9870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.082996][ T9875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.132932][ T9875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.209622][ T9875] binder: 9874:9875 ioctl c0306201 200000001440 returned -11 [ 370.244745][ T9875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.276624][ T9875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.318802][ T5906] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 370.354701][ T9884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.362670][ T9884] IPv6: NLM_F_CREATE should be set when creating new route [ 370.374191][ T9884] lo: entered allmulticast mode [ 370.394000][ T9884] tunl0: entered allmulticast mode [ 370.404675][ T9884] gre0: entered allmulticast mode [ 370.429755][ T9884] gretap0: entered allmulticast mode [ 370.438259][ T9884] erspan0: entered allmulticast mode [ 370.453680][ T9884] ip_vti0: entered allmulticast mode [ 370.458956][ T5906] usb 3-1: device descriptor read/64, error -71 [ 370.462363][ T9884] ip6_vti0: entered allmulticast mode [ 370.475229][ T9884] sit0: entered allmulticast mode [ 370.493703][ T9884] ip6tnl0: entered allmulticast mode [ 370.503755][ T9884] ip6gre0: entered allmulticast mode [ 370.515786][ T9884] syz_tun: entered allmulticast mode [ 370.524975][ T9884] ip6gretap0: entered allmulticast mode [ 370.536025][ T9884] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.543404][ T9884] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.558790][ T9884] bridge0: entered allmulticast mode [ 370.567294][ T9884] vcan0: entered allmulticast mode [ 370.576282][ T9884] bond0: entered allmulticast mode [ 370.581668][ T9884] bond_slave_0: entered allmulticast mode [ 370.587409][ T9884] bond_slave_1: entered allmulticast mode [ 370.602551][ T9884] team0: entered allmulticast mode [ 370.607713][ T9884] team_slave_0: entered allmulticast mode [ 370.615159][ T9884] team_slave_1: entered allmulticast mode [ 370.621462][ T9884] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 370.631175][ T9884] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 9884, name: syz.1.1059 [ 370.640317][ T9884] preempt_count: 0, expected: 0 [ 370.645352][ T9884] RCU nest depth: 1, expected: 0 [ 370.650930][ T9884] 2 locks held by syz.1.1059/9884: [ 370.656180][ T9884] #0: ffffffff8f2fa848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 370.666319][ T9884] #1: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 370.676861][ T9884] CPU: 1 UID: 0 PID: 9884 Comm: syz.1.1059 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 370.676889][ T9884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 370.676907][ T9884] Call Trace: [ 370.676919][ T9884] [ 370.676929][ T9884] dump_stack_lvl+0x189/0x250 [ 370.676967][ T9884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.677007][ T9884] ? print_lock_name+0xde/0x100 [ 370.677046][ T9884] __might_resched+0x495/0x610 [ 370.677072][ T9884] ? dev_set_rx_mode+0x54/0x2d0 [ 370.677093][ T9884] ? __pfx___might_resched+0x10/0x10 [ 370.677108][ T9884] ? __pfx__printk+0x10/0x10 [ 370.677120][ T9884] ? __mutex_trylock_common+0x153/0x260 [ 370.677148][ T9884] __mutex_lock+0x106/0xe80 [ 370.677173][ T9884] ? __pfx___dev_notify_flags+0x10/0x10 [ 370.677204][ T9884] ? __local_bh_enable_ip+0x12d/0x1c0 [ 370.677225][ T9884] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.677250][ T9884] ? dev_set_allmulti+0x10e/0x260 [ 370.677281][ T9884] ? __pfx___mutex_lock+0x10/0x10 [ 370.677306][ T9884] ? do_raw_spin_unlock+0x122/0x240 [ 370.677329][ T9884] ? netif_set_allmulti+0x267/0x380 [ 370.677360][ T9884] dev_set_allmulti+0x10e/0x260 [ 370.677394][ T9884] team_change_rx_flags+0x20f/0x330 [ 370.677427][ T9884] ? team_change_rx_flags+0x29/0x330 [ 370.677462][ T9884] ? __pfx_team_change_rx_flags+0x10/0x10 [ 370.677491][ T9884] netif_set_allmulti+0x212/0x380 [ 370.677517][ T9884] __dev_change_flags+0x52e/0x6d0 [ 370.677542][ T9884] ? __pfx___dev_change_flags+0x10/0x10 [ 370.677561][ T9884] ? netif_state_change+0x256/0x3a0 [ 370.677580][ T9884] ? __pfx_netif_state_change+0x10/0x10 [ 370.677598][ T9884] ? kernel_text_address+0xa5/0xe0 [ 370.677622][ T9884] netif_change_flags+0x88/0x1a0 [ 370.677647][ T9884] do_setlink+0xcb9/0x40d0 [ 370.677678][ T9884] ? __pfx_do_setlink+0x10/0x10 [ 370.677701][ T9884] ? __lock_acquire+0xaac/0xd20 [ 370.677728][ T9884] ? __mutex_trylock_common+0x153/0x260 [ 370.677747][ T9884] ? __pfx___mutex_trylock_common+0x10/0x10 [ 370.677767][ T9884] ? rcu_is_watching+0x15/0xb0 [ 370.677782][ T9884] ? trace_contention_end+0x39/0x120 [ 370.677799][ T9884] ? __mutex_lock+0x330/0xe80 [ 370.677828][ T9884] ? __pfx_aa_get_newest_label+0x10/0x10 [ 370.677849][ T9884] ? rtnl_newlink+0x8db/0x1c70 [ 370.677867][ T9884] ? rcu_is_watching+0x15/0xb0 [ 370.677881][ T9884] ? __pfx___mutex_lock+0x10/0x10 [ 370.677909][ T9884] ? ns_capable+0x8a/0xf0 [ 370.677925][ T9884] ? rtnl_link_get_net_capable+0x16a/0x350 [ 370.677948][ T9884] rtnl_newlink+0x149f/0x1c70 [ 370.677971][ T9884] ? kasan_save_track+0x3e/0x80 [ 370.678009][ T9884] ? __pfx_rtnl_newlink+0x10/0x10 [ 370.678068][ T9884] ? kasan_quarantine_put+0xdd/0x220 [ 370.678094][ T9884] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.678127][ T9884] ? nlmon_xmit+0xb0/0x100 [ 370.678153][ T9884] ? kmem_cache_free+0x192/0x3f0 [ 370.678178][ T9884] ? __local_bh_enable_ip+0x12d/0x1c0 [ 370.678193][ T9884] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.678213][ T9884] ? __local_bh_enable_ip+0x12d/0x1c0 [ 370.678227][ T9884] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 370.678248][ T9884] ? aa_get_newest_label+0xf7/0x5d0 [ 370.678268][ T9884] ? __lock_acquire+0xaac/0xd20 [ 370.678308][ T9884] ? __pfx_rtnl_newlink+0x10/0x10 [ 370.678325][ T9884] rtnetlink_rcv_msg+0x7cf/0xb70 [ 370.678346][ T9884] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 370.678363][ T9884] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 370.678384][ T9884] ? ref_tracker_free+0x63a/0x7d0 [ 370.678400][ T9884] ? __copy_skb_header+0xa7/0x550 [ 370.678430][ T9884] netlink_rcv_skb+0x21c/0x490 [ 370.678449][ T9884] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 370.678468][ T9884] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.678517][ T9884] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.678543][ T9884] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.678576][ T9884] netlink_unicast+0x758/0x8d0 [ 370.678602][ T9884] netlink_sendmsg+0x805/0xb30 [ 370.678628][ T9884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.678649][ T9884] ? aa_sock_msg_perm+0x94/0x160 [ 370.678668][ T9884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 370.678694][ T9884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.678720][ T9884] __sock_sendmsg+0x219/0x270 [ 370.678745][ T9884] ____sys_sendmsg+0x505/0x830 [ 370.678781][ T9884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.678828][ T9884] ? import_iovec+0x74/0xa0 [ 370.678862][ T9884] ___sys_sendmsg+0x21f/0x2a0 [ 370.678895][ T9884] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.678933][ T9884] ? futex_wait+0x285/0x360 [ 370.678992][ T9884] ? __lock_acquire+0xaac/0xd20 [ 370.679048][ T9884] __x64_sys_sendmsg+0x19b/0x260 [ 370.679079][ T9884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.679148][ T9884] ? do_syscall_64+0xba/0x210 [ 370.679182][ T9884] do_syscall_64+0xf6/0x210 [ 370.679211][ T9884] ? clear_bhb_loop+0x60/0xb0 [ 370.679237][ T9884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.679257][ T9884] RIP: 0033:0x7f1ffc78e969 [ 370.679276][ T9884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.679295][ T9884] RSP: 002b:00007f1ffd5bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.679317][ T9884] RAX: ffffffffffffffda RBX: 00007f1ffc9b5fa0 RCX: 00007f1ffc78e969 [ 370.679332][ T9884] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000a [ 370.679345][ T9884] RBP: 00007f1ffc810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 370.679358][ T9884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.679370][ T9884] R13: 0000000000000000 R14: 00007f1ffc9b5fa0 R15: 00007f1ffcadfa28 [ 370.679403][ T9884] [ 371.213248][ T5906] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 371.244650][ T49] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 371.261738][ T9884] [ 371.264125][ T9884] ============================= [ 371.268990][ T9884] [ BUG: Invalid wait context ] [ 371.273843][ T9884] 6.15.0-rc7-syzkaller #0 Tainted: G W [ 371.280775][ T9884] ----------------------------- [ 371.285621][ T9884] syz.1.1059/9884 is trying to lock: [ 371.290905][ T9884] ffff88807fe32d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0x10e/0x260 [ 371.301084][ T9884] other info that might help us debug this: [ 371.306972][ T9884] context-{5:5} [ 371.310429][ T9884] 2 locks held by syz.1.1059/9884: [ 371.315547][ T9884] #0: ffffffff8f2fa848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 371.324649][ T9884] #1: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 371.334517][ T9884] stack backtrace: [ 371.338279][ T9884] CPU: 0 UID: 0 PID: 9884 Comm: syz.1.1059 Tainted: G W 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 371.338304][ T9884] Tainted: [W]=WARN [ 371.338310][ T9884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.338321][ T9884] Call Trace: [ 371.338329][ T9884] [ 371.338337][ T9884] dump_stack_lvl+0x189/0x250 [ 371.338368][ T9884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.338392][ T9884] ? __pfx__printk+0x10/0x10 [ 371.338409][ T9884] ? print_lock_name+0xde/0x100 [ 371.338437][ T9884] __lock_acquire+0xbcf/0xd20 [ 371.338463][ T9884] ? dev_set_allmulti+0x10e/0x260 [ 371.338484][ T9884] lock_acquire+0x120/0x360 [ 371.338507][ T9884] ? dev_set_allmulti+0x10e/0x260 [ 371.338533][ T9884] __mutex_lock+0x182/0xe80 [ 371.338559][ T9884] ? dev_set_allmulti+0x10e/0x260 [ 371.338581][ T9884] ? __pfx___dev_notify_flags+0x10/0x10 [ 371.338603][ T9884] ? __local_bh_enable_ip+0x12d/0x1c0 [ 371.338618][ T9884] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.338638][ T9884] ? dev_set_allmulti+0x10e/0x260 [ 371.338659][ T9884] ? __pfx___mutex_lock+0x10/0x10 [ 371.338683][ T9884] ? do_raw_spin_unlock+0x122/0x240 [ 371.338707][ T9884] ? netif_set_allmulti+0x267/0x380 [ 371.338731][ T9884] dev_set_allmulti+0x10e/0x260 [ 371.338753][ T9884] team_change_rx_flags+0x20f/0x330 [ 371.338782][ T9884] ? team_change_rx_flags+0x29/0x330 [ 371.338807][ T9884] ? __pfx_team_change_rx_flags+0x10/0x10 [ 371.338832][ T9884] netif_set_allmulti+0x212/0x380 [ 371.338857][ T9884] __dev_change_flags+0x52e/0x6d0 [ 371.338880][ T9884] ? __pfx___dev_change_flags+0x10/0x10 [ 371.338901][ T9884] ? netif_state_change+0x256/0x3a0 [ 371.338920][ T9884] ? __pfx_netif_state_change+0x10/0x10 [ 371.338938][ T9884] ? kernel_text_address+0xa5/0xe0 [ 371.338962][ T9884] netif_change_flags+0x88/0x1a0 [ 371.338986][ T9884] do_setlink+0xcb9/0x40d0 [ 371.339013][ T9884] ? __pfx_do_setlink+0x10/0x10 [ 371.339041][ T9884] ? __lock_acquire+0xaac/0xd20 [ 371.339066][ T9884] ? __mutex_trylock_common+0x153/0x260 [ 371.339084][ T9884] ? __pfx___mutex_trylock_common+0x10/0x10 [ 371.339104][ T9884] ? rcu_is_watching+0x15/0xb0 [ 371.339119][ T9884] ? trace_contention_end+0x39/0x120 [ 371.339136][ T9884] ? __mutex_lock+0x330/0xe80 [ 371.339158][ T9884] ? __pfx_aa_get_newest_label+0x10/0x10 [ 371.339179][ T9884] ? rtnl_newlink+0x8db/0x1c70 [ 371.339198][ T9884] ? rcu_is_watching+0x15/0xb0 [ 371.339212][ T9884] ? __pfx___mutex_lock+0x10/0x10 [ 371.339237][ T9884] ? ns_capable+0x8a/0xf0 [ 371.339252][ T9884] ? rtnl_link_get_net_capable+0x16a/0x350 [ 371.339275][ T9884] rtnl_newlink+0x149f/0x1c70 [ 371.339294][ T9884] ? kasan_save_track+0x3e/0x80 [ 371.339317][ T9884] ? __pfx_rtnl_newlink+0x10/0x10 [ 371.339347][ T9884] ? kasan_quarantine_put+0xdd/0x220 [ 371.339366][ T9884] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.339388][ T9884] ? nlmon_xmit+0xb0/0x100 [ 371.339412][ T9884] ? kmem_cache_free+0x192/0x3f0 [ 371.339435][ T9884] ? __local_bh_enable_ip+0x12d/0x1c0 [ 371.339450][ T9884] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.339470][ T9884] ? __local_bh_enable_ip+0x12d/0x1c0 [ 371.339485][ T9884] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 371.339503][ T9884] ? aa_get_newest_label+0xf7/0x5d0 [ 371.339523][ T9884] ? __lock_acquire+0xaac/0xd20 [ 371.339554][ T9884] ? __pfx_rtnl_newlink+0x10/0x10 [ 371.339573][ T9884] rtnetlink_rcv_msg+0x7cf/0xb70 [ 371.339593][ T9884] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 371.339611][ T9884] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 371.339632][ T9884] ? ref_tracker_free+0x63a/0x7d0 [ 371.339650][ T9884] ? __copy_skb_header+0xa7/0x550 [ 371.339677][ T9884] netlink_rcv_skb+0x21c/0x490 [ 371.339697][ T9884] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 371.339716][ T9884] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.339755][ T9884] ? netlink_deliver_tap+0x2e/0x1b0 [ 371.339776][ T9884] ? netlink_deliver_tap+0x2e/0x1b0 [ 371.339797][ T9884] netlink_unicast+0x758/0x8d0 [ 371.339818][ T9884] netlink_sendmsg+0x805/0xb30 [ 371.339842][ T9884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.339863][ T9884] ? aa_sock_msg_perm+0x94/0x160 [ 371.339882][ T9884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.339901][ T9884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.339921][ T9884] __sock_sendmsg+0x219/0x270 [ 371.339939][ T9884] ____sys_sendmsg+0x505/0x830 [ 371.339965][ T9884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.339991][ T9884] ? import_iovec+0x74/0xa0 [ 371.340026][ T9884] ___sys_sendmsg+0x21f/0x2a0 [ 371.340063][ T9884] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.340088][ T9884] ? futex_wait+0x285/0x360 [ 371.340121][ T9884] ? __lock_acquire+0xaac/0xd20 [ 371.340148][ T9884] __x64_sys_sendmsg+0x19b/0x260 [ 371.340172][ T9884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.340202][ T9884] ? do_syscall_64+0xba/0x210 [ 371.340226][ T9884] do_syscall_64+0xf6/0x210 [ 371.340249][ T9884] ? clear_bhb_loop+0x60/0xb0 [ 371.340268][ T9884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.340285][ T9884] RIP: 0033:0x7f1ffc78e969 [ 371.340300][ T9884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.340316][ T9884] RSP: 002b:00007f1ffd5bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.340334][ T9884] RAX: ffffffffffffffda RBX: 00007f1ffc9b5fa0 RCX: 00007f1ffc78e969 [ 371.340346][ T9884] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000a [ 371.340357][ T9884] RBP: 00007f1ffc810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 371.340367][ T9884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.340377][ T9884] R13: 0000000000000000 R14: 00007f1ffc9b5fa0 R15: 00007f1ffcadfa28 [ 371.340394][ T9884] [ 371.893268][ T9884] dummy0: entered allmulticast mode [ 371.894047][ T5884] usb 1-1: USB disconnect, device number 77 [ 371.924812][ T9884] nlmon0: entered allmulticast mode [ 371.967735][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 371.987338][ T9884] caif0: entered allmulticast mode [ 371.988241][ T49] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 371.992904][ T9884] batadv0: entered allmulticast mode [ 372.009386][ T9884] vxcan0: entered allmulticast mode [ 372.015227][ T9884] vxcan1: entered allmulticast mode [ 372.020611][ T5906] usb 3-1: device descriptor read/64, error -71 [ 372.028675][ T9884] veth0: entered allmulticast mode [ 372.035554][ T9884] veth1: entered allmulticast mode [ 372.063488][ T49] usb 2-1: config 0 has no interface number 0 [ 372.069970][ T9884] wg0: entered allmulticast mode [ 372.077118][ T9884] wg1: entered allmulticast mode [ 372.084395][ T49] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 372.094403][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.104281][ T49] usb 2-1: Product: syz [ 372.116366][ T49] usb 2-1: Manufacturer: syz [ 372.124567][ T9884] wg2: entered allmulticast mode [ 372.128990][ T5906] usb usb3-port1: attempt power cycle [ 372.135608][ T49] usb 2-1: SerialNumber: syz [ 372.142072][ T9884] veth0_to_bridge: entered allmulticast mode [ 372.150274][ T49] usb 2-1: config 0 descriptor?? [ 372.161732][ T9884] veth1_to_bridge: entered allmulticast mode [ 372.172447][ T9884] veth0_to_bond: entered allmulticast mode [ 372.181299][ T9884] veth1_to_bond: entered allmulticast mode [ 372.189903][ T9884] veth0_to_team: entered allmulticast mode [ 372.197619][ T9884] veth1_to_team: entered allmulticast mode [ 372.207108][ T9884] veth0_to_batadv: entered allmulticast mode [ 372.215214][ T9884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.222815][ T9884] batadv_slave_0: entered allmulticast mode [ 372.232572][ T9884] veth1_to_batadv: entered allmulticast mode [ 372.240893][ T9884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.248371][ T9884] batadv_slave_1: entered allmulticast mode [ 372.257160][ T9884] xfrm0: entered allmulticast mode [ 372.264040][ T9884] veth0_to_hsr: entered allmulticast mode [ 372.274863][ T9884] hsr_slave_0: entered allmulticast mode [ 372.281958][ T9884] veth1_to_hsr: entered allmulticast mode [ 372.290061][ T9884] hsr_slave_1: entered allmulticast mode [ 372.297269][ T9884] hsr0: left promiscuous mode [ 372.302350][ T9884] hsr0: entered allmulticast mode [ 372.309414][ T9884] veth1_virt_wifi: entered allmulticast mode [ 372.317208][ T9884] veth0_virt_wifi: entered allmulticast mode [ 372.325049][ T9884] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 372.333201][ T9884] veth1_vlan: entered allmulticast mode [ 372.342644][ T9884] veth0_vlan: entered allmulticast mode [ 372.355133][ T9884] vlan0: entered allmulticast mode [ 372.360913][ T9884] vlan1: entered allmulticast mode [ 372.366451][ T9884] macvlan0: entered allmulticast mode [ 372.374551][ T9884] macvlan1: entered allmulticast mode [ 372.381838][ T9884] ipvlan0: entered allmulticast mode [ 372.387357][ T9884] ipvlan1: entered allmulticast mode [ 372.393886][ T9884] veth1_macvtap: entered allmulticast mode [ 372.402230][ T9884] veth0_macvtap: entered allmulticast mode [ 372.410412][ T9884] macsec0: entered allmulticast mode [ 372.417888][ T9884] geneve0: entered allmulticast mode [ 372.425380][ T9884] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.434620][ T9884] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.443895][ T9884] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.455265][ T9884] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.464652][ T9884] geneve1: entered allmulticast mode [ 372.470210][ T5906] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 372.477911][ T9884] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 372.486919][ T9884] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 372.489454][ T5906] usb 3-1: device descriptor read/8, error -71 [ 372.502249][ T9884] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 372.511287][ T9884] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 372.524447][ T9884] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 372.536788][ T9884] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 372.546035][ T9884] bond0: left promiscuous mode [ 372.551254][ T9884] bond_slave_0: left promiscuous mode [ 372.557613][ T9884] bond_slave_1: left promiscuous mode [ 372.565601][ T9884] macvlan2: left promiscuous mode [ 372.570824][ T9884] macvlan2: entered allmulticast mode [ 372.577396][ T9884] gtp0: entered allmulticast mode [ 372.597429][ T49] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 372.604007][ T49] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 372.612708][ T49] usb 2-1: Failed to create links for entity 5 [ 372.625665][ T49] usb 2-1: Failed to register entities (-22). [ 372.638408][ T49] usb 2-1: USB disconnect, device number 81 [ 372.738928][ T5906] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 372.760745][ T5906] usb 3-1: device descriptor read/8, error -71 [ 372.868986][ T5906] usb usb3-port1: unable to enumerate USB device [ 378.591815][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.598169][ T1299] ieee802154 phy1 wpan1: encryption failed: -22