last executing test programs: 11.365291217s ago: executing program 0 (id=155): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x0, 0x12, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0xfffffffffffffff6, 0x10080) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x0, 0x30, 0x4, 'N!8)'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x0, 0x12, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$I2C(&(0x7f0000000000), 0xfffffffffffffff6, 0x10080) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x0, 0x30, 0x4, 'N!8)'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) 9.794972951s ago: executing program 0 (id=167): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f000059a000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000581000/0x2000)=nil, 0x2000}, 0x3}) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', '', [{0x20, '\xd9m\xf4\f00\xf4\xfa\t\tT\xf6\xd18\x17\xfa\xd7\xcds\xf4\xd3\x86\x03*\x9b\xcb\x8a\x9d\xff\x8ap\xf6\xd7\x8fA\xd9b?7\xc1ry\xdfh\xd0\xa4\xa3\x919\xfc\x80R\xbf\x94\xd1\x1d\xe1c]\x92\xeaw\xca\xc1\xfa\xa2\x9d\x85=\xcc\x00'/86}]}, 0x5b) close(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x30, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x0]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000125bd7000fedbdf251d0000000c009900060000002e00000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="080003df559dc12725aab6889253c813f3cbb01c12415cb66225300054fd745f1470e9104530aff4cdef854974a95f1d2e0fc21b179a9eaf5d90c57a2725610d66c2d3a0bb5531b7a27f64a56262f2e9d5809e05a98649d05a0c4927526372b582888382662a7454f3919d19cd5cb4bad6383e12dd0de5233319393ce4891c10caaba82beb1b2e8c56794447ffe385ff65bd6355f2", @ANYRES32=0x0, @ANYBLOB="3c002380050013000000000006000a00080000000600030084000000080014002cffffff0800090002000000060002007000000005000e0001000000"], 0x74}, 0x1, 0x0, 0x0, 0x4008015}, 0x40) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x4d, 0x25, 0x86, 0x40, 0x7ab, 0xfc01, 0x2abd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0xd, 0x10, 0x3, [{{0x9, 0x4, 0xb2, 0x0, 0x0, 0xe4, 0xcd, 0xcc, 0xd5}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r10 = fcntl$dupfd(r2, 0x406, r2) ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, &(0x7f0000000540)={0x10001, 0x0, {[0x3ff, 0x7, 0xf, 0x5, 0x5c968930, 0x9, 0x2, 0x1]}}) write$binfmt_elf32(r10, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/600], 0x258) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) accept$alg(r11, 0x0, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) 6.729266701s ago: executing program 0 (id=177): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x2) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5.424947577s ago: executing program 2 (id=180): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000140)=0xda1) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000500)={0x40, 0x6, 0x28, "5fb0fab967ec41df1aade53f902466abe88363bfa8d322cd04b625d20ae74277cefc366d9326fa41"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0xfffffffffffffd39, &(0x7f0000000300)={0x40, 0x6, 0xc, "68ec6051cdb9cf21820c49a7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.701474164s ago: executing program 1 (id=181): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000000034"], 0x118}}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003000/0x1000)=nil}) socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 3.684044453s ago: executing program 1 (id=182): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000202aaaaaaaaaaaa0a0001985ae8f4b51743ae036d007770616e31000000"], 0x3c}, 0x4, 0x700000000000000}, 0x40) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}]}, 0x4c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000202aaaaaaaaaaaa0a0001985ae8f4b51743ae036d007770616e31000000"], 0x3c}, 0x4, 0x700000000000000}, 0x40) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}]}, 0x4c}}, 0x0) (async) 3.648201174s ago: executing program 0 (id=183): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x602, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/4096}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000010c0)={{0xf1, 0x64}, 'port0\x00', 0x7a, 0xa0810, 0x20002000, 0x5, 0x1, 0x4, 0xffff, 0x0, 0x1, 0x1}) (async) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001180), 0x600000, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000011c0)=""/231) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f00000012c0)) (async) r2 = syz_usb_connect$cdc_ncm(0x3, 0x15a, &(0x7f0000001300)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xde20c6237127eb55, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x148, 0x2, 0x1, 0xa, 0x10, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xc, 0xfff9, 0x82e, 0xb7}, {0x6, 0x24, 0x1a, 0xe, 0x20}, [@mdlm_detail={0x23, 0x24, 0x13, 0x0, "bfa515337e0d26d6490b57f86fbf0924a6880ff99e83c52511af9842f682a4"}, @dmm={0x7, 0x24, 0x14, 0x81, 0x5}, @mdlm_detail={0xb6, 0x24, 0x13, 0x8, "e96f281ae3b939c068e7c2a5ee025344f0cdbb3e790f535e2775604bc4f21b7c79291c6fb7a581c7c232780e2c549209ba83381448b35f3a7005d958b45c57863b9f689c4364b63be0789334d3a114857d22c419a366d20aa8a39fbc4dea3d4ce0637e25c17467d3b5d1965f78d5310d93e7d9eb6034d9535e1ff416fed46c76f0a87e31d8ac1858635651af394af4ad9b50e770fb511fb09b8240a7279e84a9b7127e4be75c68f0cdae0591c2ef515bea56"}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x1, 0x8, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xe}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0xd, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5f, 0x1, 0x6}}}}}}}]}}, &(0x7f0000001680)={0xa, &(0x7f0000001480)={0xa, 0x6, 0x300, 0x3, 0x0, 0xf, 0x10, 0x6}, 0x5, &(0x7f00000014c0)={0x5, 0xf, 0x5}, 0x4, [{0x66, &(0x7f0000001500)=@string={0x66, 0x3, "a18347f9bd7623e2ab9e8490af31f6b0a501395239ed76226cbc13609bb097bf31bd369a037301ef765d791545d3b8a5cce4981cf776598d356f1903beeb9e5c7c98c309e2aab18757a8639d5d79464aa6896c30b4ce5fb69502596c58b6893a5cf8deed"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x72, &(0x7f0000001600)=@string={0x72, 0x3, "112866f812a8d03d634d975081915df64073e2bf719b2afe59a5e03f2c653e04ef63dc612316503ae138b850c794be28fefb62f8471f6393da4e3915fe56ba259c402a2671a5bbea14811ef10ece02831468e05423338c9913df84a29d096823b451a831fff7f9cef5324fd45e6e1378"}}]}) syz_usb_disconnect(r2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r3, 0x3ba0, &(0x7f00000017c0)={0x48, 0x8, r1, 0x0, 0x4, 0x394adc, 0x65, &(0x7f0000001740)="642835fb11bb14b066ddfda0038f1d26064cfe44556aef4b882cca051c7759f1a9cb63ef957dbb72ae71c1c8a50e29aaa63d4c784efc952d9e0c5c6775267ed50fcd96abf7302faa1bc106043083efed4645b91af11b3f1913281be0bf893e0bf25757c25f", 0x10001}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000001840)=0x2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001880), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000018c0)={0xc, 0x0, 0x0}) (async) syz_clone3(&(0x7f0000001b40)={0x4000500, &(0x7f0000001900)=0xffffffffffffffff, &(0x7f0000001940), &(0x7f0000001980)=0x0, {0x1b}, &(0x7f00000019c0)=""/77, 0x4d, &(0x7f0000001a40)=""/134, &(0x7f0000001b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, {r1}}, 0x58) wait4(r7, &(0x7f0000001bc0), 0x1000000, &(0x7f0000001c00)) (async) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000001cc0)={0xc, r5}) tkill(r7, 0x3e) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000001d00)=0x2) fallocate(r1, 0x29, 0x10000, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000001d40)={{0xb}, 'port1\x00', 0x0, 0x801, 0x9, 0x8, 0x2, 0x7fff, 0x0, 0x0, 0x2, 0x10}) (async) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000001e00)={{0xff, 0xa0}, 'port1\x00', 0x4e, 0x10000, 0x9, 0xa6, 0x1531, 0x2c, 0x9}) r8 = syz_usb_connect$uac1(0x0, 0xf0, &(0x7f0000001ec0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x3, 0x1, 0x3, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xe}, [@selector_unit={0xa, 0x24, 0x5, 0x1, 0x9e, "5b71301e22"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x3, 0x4, 0x1, 0x4, 0x5}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x3ff, 0x0, "ef91a0"}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x2, 0x5, [0x1, 0x6, 0x5, 0x5, 0xa], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x45, 0x3, 0x5, 0xc, "24a7", "03f4"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8001, 0x1, 0x6, "ffc98d"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x96, 0x1002}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x10, 0x2, 0x8, 0x0, "bc14d79eed"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xffff, 0x80, 0x80, "e8ddd9c848ee52a203"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xf8, 0x4, 0x5, {0x7, 0x25, 0x1, 0x80, 0x9, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x81, 0xfd85, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x93, 0x7, 0xbf, {0x7, 0x25, 0x1, 0x83, 0x9, 0xff}}}}}}}]}}, &(0x7f0000002080)={0xa, &(0x7f0000001fc0)={0xa, 0x6, 0x250, 0x85, 0x9, 0xf2, 0x10, 0xd}, 0x2c, &(0x7f0000002000)={0x5, 0xf, 0x2c, 0x1, [@generic={0x27, 0x10, 0xa, "00ffbfd6f3dc3dfd32b7c75dfd4cab5248aa9b757c8dd3662bf03e08745a440c14e47b75"}]}, 0x1, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io$uac1(r8, &(0x7f0000002240)={0x14, &(0x7f00000020c0)={0x0, 0x3, 0xfe, {0xfe, 0x8, "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"}}, &(0x7f0000002200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}}, &(0x7f0000002500)={0x44, &(0x7f0000002280)={0x0, 0xe917a4829a01f8c9, 0x9d, "8428de57aad75a57a1e4f96e00687a4702806a9f4affa75c242051005fdcb13d434ca4df8546d41d8a7828e82569de642f9dd8e67132a5e8881920e539df6a101da0d97abf40ec0d5d82568c9b7b352fcad65ccbefc7220ac56f2938cb5f24db586ea70c260389cdda48172c9aeeb6aaaa66e4b6f5a3ee9d0cec27b5b33973d310a65ba93ea3fc917bdeb65b21dbdbe9e926291efb0e2ce7e822eb7d65"}, &(0x7f0000002340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000023c0)={0x20, 0x81, 0x2, "d0e8"}, &(0x7f0000002400)={0x20, 0x82, 0x2, "e730"}, &(0x7f0000002440)={0x20, 0x83, 0x1, "d4"}, &(0x7f0000002480)={0x20, 0x84, 0x4, "0bf0ae8b"}, &(0x7f00000024c0)={0x20, 0x85, 0x3, "6afe98"}}) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002580), 0x80, 0x0) ioctl$KDFONTOP_COPY(r9, 0x4b72, &(0x7f00000029c0)={0x3, 0x1, 0x8, 0x5, 0x19c, &(0x7f00000025c0)}) (async) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000002a00)={0x8, 0x2, [{0xc0a3}, {0xffff0001, 0x0, 0x7fff}, {0xa, 0x0, 0x5}, {0x1, 0x0, 0x9d3}, {0x5, 0x0, 0x8001}, {0x3, 0x0, 0x8000}, {0xc, 0x0, 0x1}, {0xff13, 0x0, 0x2}, {0x1}, {0x3, 0x0, 0x8}, {0xc, 0x0, 0x8}, {0x4334599f, 0x0, 0x5}, {0xfffffffe, 0x0, 0x5}, {0x0, 0x0, 0x1}, {0x4b8}, {0x7, 0x0, 0xa}]}) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000002bc0)=0x81000) getrusage(0x0, &(0x7f0000002c00)) (async) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000002d00)={{{0x3, 0x1}}, 0x29, 0x2, &(0x7f0000002cc0)="285d103cd88be2601333e30d28b591666635b51a429f09df73078852e4b77d6222e91710b1d56dbb58"}) 3.552285886s ago: executing program 1 (id=184): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x6, 0xd4, "fca44984b5e7bea08129201109b6d04efafe1cc49ceab527cf77913201a679ee83a3ff2c333585c2ef18ae0b1c647702888b2d7db3b8273cecb6ad2301ff662851c7fee4f9001e38004b43186b84e07f332dce03ddc94cd7f08344e4256c1466b0e3d9d508c41edbe1b406bd4d4dd3316d39636aafaf8736cac82e75ea50dff39b0157ddeccef7152b3af1cbdb77660b6503daffd0b166b26a39b6cbccd9b2c8f58461b55eba381dc62934eab80e9098889536a68dc44b492dac1ffff3fa3304ccda92fa478ca59dafe302c161bb2ce82d9fc211"}, 0xdc) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.551749107s ago: executing program 1 (id=185): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000ec0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000c00)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x40, 0x2d, 0x26, {0x26, 0x9, "8fc8a468c38d105b650794107448bccba00f83e72d34a2b49fc17c5393a953fc2e955264"}}, &(0x7f0000000080)={0x0, 0x3, 0x20, @string={0x20, 0x3, "36137cdc05e512ac49e6b323ae9ff34411cb601e5378331f90c4ecd95141"}}, &(0x7f00000000c0)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "f9309822c5e6a5d5d6b89d5c1a0d8c8d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x4, 0x7, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x8, 0x4, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x2, 0xe6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0xf4, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0x3, 0x800}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x25, 0x0, 0x4a, 0xfd, "d776741b", "4b3fc4c0"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x6, 0x11, 0x0, 0x6, 0x8000}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000200)={0x20, 0xe, 0x4f, "fe6dd4dc0a6e0bfe3462f38f942fafc44b2c36a67b549b7c80828802b762e91cc84c7dfb55b5691bdb38064b3e6f6a402d01cd3fc275744868f3126408ba6b53999eeb5197b7665f6dd75789aa6b11"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x18b0, 0x2}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0xb0e5}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x78}, &(0x7f0000000480)={0x40, 0xb, 0x2, "1328"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000500)={0x40, 0x13, 0x6}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "a198"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0xfffd}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x53}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000280)={0x20, 0x0, 0x1, "93"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3.399385541s ago: executing program 2 (id=186): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f00000000c0)=@other={'decodes', ' ', 'mem'}, 0xc) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000080)) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="200500000400"], 0x0, 0x0}) 3.224671047s ago: executing program 3 (id=187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 3.019965734s ago: executing program 3 (id=188): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000016c0)={{r2}, "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"}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000b40), 0x80, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000408117980840000102030109022400010102a0020904000101030104070921a59a060000002fde91d04e0601227d05ee0f231fc447574f52302272d7a667ebfecadf40d79eebebf5b1f1577e501c99cac59409d02aee10272edc6b330000034578a09af7a00bccc0a77a29839c11c02090c0b13c5610a5970332c3ac6809a9dbc2e8037ff4df10fbd30952c1dda45de0373b33ef327e363463159f7a6873c3d9ba5944a7682978a5de85651ac7fa"], 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) getsockopt(r4, 0x28, 0x2, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES8=r3, @ANYRES16], 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x52, 0x1, 0xfffffffc, 0x0, {0xa}}, 0x14}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x29, 0x20, 0xfe, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x6, 0x24, 0x6, 0x0, 0x0, "da"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfffb, 0x7, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x6, 0x6, 0x2}, @acm={0x4, 0x24, 0x2, 0x2}, @obex={0x5, 0x24, 0x15, 0xbd}, @ncm={0x6, 0x24, 0x1a, 0xfffd, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x9, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x94, 0xf, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x8, 0xff}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xd, 0x5, 0x3, 0x40, 0x5}, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="ef868445b22f136a"], 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x43f}}, {0x4c, &(0x7f0000000300)=@string={0x4c, 0x3, "fac4488b4edeb614aa59aa516d0f94c0e36802900a5363c46abcbb02b69a652cec163fac518c1cbbf243c2a25711e12d53a537b3c71fd2036f596753a6058d01dddf1f3561fffd8e7067"}}, {0x6c, &(0x7f0000000480)=ANY=[@ANYBLOB="6c036ce35c4554c6f4f71309df24dad1903101a974c27bc4d31ee9e56a4bf5e6e143e3ad4dc6730fbe1e422d9b721a86bb2e7bc9de74bef44a6fae5145a6159ee8c1b6e6c968ff2be1a0d768831c589c59e823da0f89f817b3b9c8a3ba05be5f"]}]}) ioctl$HIDIOCGNAME(r8, 0x80404806, &(0x7f00000001c0)) listen(r1, 0x271d) syz_usb_connect(0x3, 0x8e9, &(0x7f0000001600)=ANY=[@ANYBLOB="1201000265e1d640030471da1f06010203010902d70804020330320904"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x4, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.723489862s ago: executing program 3 (id=189): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000000)=0x5, 0x4) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) 1.661635085s ago: executing program 3 (id=190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x80a0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x80a0000, 0x0, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x60050031, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001900), 0x55}, {&(0x7f0000001980)="5f110a0000", 0x5}, {&(0x7f00000019c0)}, {&(0x7f0000001a80)='Ta', 0x2}, {&(0x7f0000001b00)='ilj{', 0x4}, {&(0x7f0000001d00)="40a3", 0x2}], 0x6}}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffb}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x2b, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) poll(&(0x7f00000000c0)=[{r7, 0x2}, {0xffffffffffffffff, 0x1404}, {0xffffffffffffffff, 0x4021}, {r0, 0x500}], 0x4, 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) 1.372276884s ago: executing program 3 (id=191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523c7000000000000006422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000c03000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.065256528s ago: executing program 2 (id=192): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="18a600007200911fdabcf8b30771a54a07"], 0xfe33) 988.682235ms ago: executing program 2 (id=193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @mcast2, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2}, 0x2, 0x2}}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @local}, 0x49) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={r5, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 544.184194ms ago: executing program 0 (id=194): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000002700)=[{&(0x7f0000000080)="2dbfbf2a597707a3424fa417", 0xc}], 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) setxattr$incfs_metadata(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, 0x0, 0x1) syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) writev(r1, &(0x7f0000002700)=[{&(0x7f0000000080)="2dbfbf2a597707a3424fa417", 0xc}], 0x1) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) (async) setxattr$incfs_metadata(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, 0x0, 0x1) (async) 455.845986ms ago: executing program 3 (id=195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000f00)={0x24, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0xd, 0x3, 0x2c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}}, 0x0) 393.314699ms ago: executing program 0 (id=196): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000100), 0x2, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x22, 0xa7, {0xa7, 0x2, "cd7a959bea45b169f99bda7f3552761be1cedc9d3db721d418e52e3e1fff861f67ad4304a359876dff29595f48b27a93b71c03b927e41506bfe37214fb2f2448602fbe5631d10624fc1a4e14036c703c9afe217deda600f489441d9179aff73408019432df4737717e4d333ae1d445d458c873aebf2651f66773239116137c29ef45a50c7b4f3dcd9e1d349b4da4e428f43d152e77ad33866fda5fab26c3044006e7836314"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}}, &(0x7f0000000340)={0x44, &(0x7f0000000140)={0x0, 0x9, 0x1a, "1e75e0fc21a575db47ca97e03362eef30bdeabad766cf0bdc78e"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x19}, &(0x7f0000000200)={0x20, 0x81, 0x3, '3kX'}, &(0x7f0000000240)={0x20, 0x82, 0x3, "791951"}, &(0x7f0000000280)={0x20, 0x83, 0x1, "a4"}, &(0x7f00000002c0)={0x20, 0x84, 0x4, "c0102797"}, &(0x7f0000000300)={0x20, 0x85, 0x3, "b39fa6"}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x12}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xaf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 240.325051ms ago: executing program 1 (id=197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0xfff1, 0x4, 0x3, 0xfffffffb, r3}, &(0x7f0000000080)=0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd00002800ff000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0xfce) 165.420233ms ago: executing program 1 (id=198): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT=r4], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000) read$char_usb(r6, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, &(0x7f0000000940)=[@rdmsr={0x32, 0x18, {0xda0}}], 0x18}) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000500)=""/12, 0xc, 0x1, 0x0, 0x0, 0xffffffff, 0xc04}}, 0x120) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0xfffffffffffffdcc}], 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) r9 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xcd7c6d2bf264d86c, 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) connect$nfc_raw(r9, &(0x7f0000000340)={0x27, r10, 0xffffffffffffffff, 0x4}, 0x10) 75.900834ms ago: executing program 2 (id=199): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) chdir(&(0x7f0000000080)='./file1\x00') quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) setns(r1, 0x24020000) r3 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x10000000) getpid() (async) syz_pidfd_open(r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000180)='./file1\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) (async) setns(r1, 0x24020000) (async) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r3, 0x0) (async) setns(r4, 0x10000000) (async) 0s ago: executing program 2 (id=200): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40800, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) (async) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) r2 = socket(0x10, 0x3, 0x1) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), 0x10000000000001e7, 0x0, 0x0, 0x20400}, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)="943a1fcb24676066260d837c8a6bf0b9beecfdc4658c963ec2657e821760538c4816fa2c38ae206755a9fa86d7a322d0f6acde1d651d13bd821b76d0a9bdf18aa3da42afcf1643e8bb70f1e1b714c65b75a3814c102e8b95", 0x58}, {&(0x7f00000002c0)="cd02e3089dbb7069", 0x8}], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.226' (ED25519) to the list of known hosts. [ 87.531650][ T5810] cgroup: Unknown subsys name 'net' [ 87.643197][ T5810] cgroup: Unknown subsys name 'cpuset' [ 87.652478][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.404184][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.146257][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.170521][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.179418][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.188286][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.192006][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.196923][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.205578][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.211407][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.219264][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.232402][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.249613][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.249709][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.265759][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.265852][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.281433][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.290099][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.290530][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.298520][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.334643][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.349819][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.851155][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 93.951153][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 94.024175][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 94.205237][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 94.223181][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.231526][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.239260][ T5819] bridge_slave_0: entered allmulticast mode [ 94.247000][ T5819] bridge_slave_0: entered promiscuous mode [ 94.296341][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.303745][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.311063][ T5819] bridge_slave_1: entered allmulticast mode [ 94.318526][ T5819] bridge_slave_1: entered promiscuous mode [ 94.343356][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.351409][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.358672][ T5829] bridge_slave_0: entered allmulticast mode [ 94.367202][ T5829] bridge_slave_0: entered promiscuous mode [ 94.416082][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.423422][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.430986][ T5829] bridge_slave_1: entered allmulticast mode [ 94.438591][ T5829] bridge_slave_1: entered promiscuous mode [ 94.497173][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.543092][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.553071][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.560485][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.567766][ T5824] bridge_slave_0: entered allmulticast mode [ 94.575655][ T5824] bridge_slave_0: entered promiscuous mode [ 94.599893][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.640108][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.647374][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.655404][ T5824] bridge_slave_1: entered allmulticast mode [ 94.663146][ T5824] bridge_slave_1: entered promiscuous mode [ 94.686591][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.713826][ T5819] team0: Port device team_slave_0 added [ 94.723366][ T5819] team0: Port device team_slave_1 added [ 94.756393][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.764049][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.771735][ T5825] bridge_slave_0: entered allmulticast mode [ 94.780164][ T5825] bridge_slave_0: entered promiscuous mode [ 94.833558][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.841595][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.849723][ T5825] bridge_slave_1: entered allmulticast mode [ 94.857175][ T5825] bridge_slave_1: entered promiscuous mode [ 94.866570][ T5829] team0: Port device team_slave_0 added [ 94.874036][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.881279][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.907700][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.923629][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.950224][ T5829] team0: Port device team_slave_1 added [ 94.970617][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.978046][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.004894][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.019878][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.048003][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.061833][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.175667][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.182766][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.209843][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.246998][ T5819] hsr_slave_0: entered promiscuous mode [ 95.253993][ T5819] hsr_slave_1: entered promiscuous mode [ 95.263142][ T5824] team0: Port device team_slave_0 added [ 95.272127][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.279236][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.307210][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.322071][ T5825] team0: Port device team_slave_0 added [ 95.332635][ T5824] team0: Port device team_slave_1 added [ 95.339749][ T5837] Bluetooth: hci0: command tx timeout [ 95.340166][ T52] Bluetooth: hci1: command tx timeout [ 95.348428][ T5825] team0: Port device team_slave_1 added [ 95.352115][ T5834] Bluetooth: hci2: command tx timeout [ 95.419279][ T5834] Bluetooth: hci3: command tx timeout [ 95.458224][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.465674][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.491867][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.505631][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.512900][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.540194][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.559122][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.566103][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.592312][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.617784][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.624874][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.651097][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.703429][ T5829] hsr_slave_0: entered promiscuous mode [ 95.710097][ T5829] hsr_slave_1: entered promiscuous mode [ 95.716601][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 95.722550][ T5829] Cannot create hsr debugfs directory [ 95.830758][ T5825] hsr_slave_0: entered promiscuous mode [ 95.837981][ T5825] hsr_slave_1: entered promiscuous mode [ 95.845680][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 95.851697][ T5825] Cannot create hsr debugfs directory [ 95.908150][ T5824] hsr_slave_0: entered promiscuous mode [ 95.914952][ T5824] hsr_slave_1: entered promiscuous mode [ 95.921405][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 95.927402][ T5824] Cannot create hsr debugfs directory [ 96.268437][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.312803][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.343316][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.355304][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.455489][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.490272][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.502132][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.522626][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.593155][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.603994][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.616640][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.635267][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.741585][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.766622][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.790517][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.805000][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.858491][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.937051][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.957851][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.987772][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.995307][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.045914][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.053267][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.067037][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.081503][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.137504][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.144912][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.165028][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.194051][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.204214][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.211526][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.234092][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.241328][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.284752][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.292075][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.395515][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.422028][ T52] Bluetooth: hci2: command tx timeout [ 97.422319][ T5837] Bluetooth: hci1: command tx timeout [ 97.428137][ T5834] Bluetooth: hci0: command tx timeout [ 97.447651][ T778] cfg80211: failed to load regulatory.db [ 97.467805][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.475063][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.503560][ T5834] Bluetooth: hci3: command tx timeout [ 97.543459][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.567394][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.574863][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.737350][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.935502][ T5819] veth0_vlan: entered promiscuous mode [ 97.955797][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.017268][ T5819] veth1_vlan: entered promiscuous mode [ 98.098604][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.138510][ T5829] veth0_vlan: entered promiscuous mode [ 98.162018][ T5819] veth0_macvtap: entered promiscuous mode [ 98.176606][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.191284][ T5819] veth1_macvtap: entered promiscuous mode [ 98.210406][ T5829] veth1_vlan: entered promiscuous mode [ 98.283789][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.297510][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.325299][ T5825] veth0_vlan: entered promiscuous mode [ 98.358608][ T1149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.370095][ T5825] veth1_vlan: entered promiscuous mode [ 98.390946][ T5824] veth0_vlan: entered promiscuous mode [ 98.401105][ T1149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.411004][ T1149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.436898][ T1149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.463600][ T5829] veth0_macvtap: entered promiscuous mode [ 98.483772][ T5824] veth1_vlan: entered promiscuous mode [ 98.515001][ T5825] veth0_macvtap: entered promiscuous mode [ 98.526867][ T5829] veth1_macvtap: entered promiscuous mode [ 98.557257][ T5825] veth1_macvtap: entered promiscuous mode [ 98.597235][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.626015][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.636326][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.653593][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.694138][ T5824] veth0_macvtap: entered promiscuous mode [ 98.703184][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.712905][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.732843][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.741906][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.753188][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.775779][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.777018][ T5824] veth1_macvtap: entered promiscuous mode [ 98.785311][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.799805][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.845513][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.856444][ T1162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.886597][ T1162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.907903][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.925664][ T1162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.927916][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.936349][ T1162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.984056][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.993387][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.015987][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.033429][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.130471][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.148560][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.164092][ T5916] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.262983][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.273851][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.336429][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.354637][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.389630][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.409673][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.487302][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.500702][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.505505][ T5834] Bluetooth: hci1: command tx timeout [ 99.508431][ T5837] Bluetooth: hci0: command tx timeout [ 99.513686][ T52] Bluetooth: hci2: command tx timeout [ 99.542172][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.551521][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.579773][ T5837] Bluetooth: hci3: command tx timeout [ 99.741579][ T778] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.787153][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 99.876985][ T5926] capability: warning: `syz.3.6' uses deprecated v2 capabilities in a way that may be insecure [ 99.909788][ T778] usb 1-1: Using ep0 maxpacket: 16 [ 99.932312][ T778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.959157][ T778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.971778][ T778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 99.987025][ T778] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 99.997252][ T778] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.021293][ T778] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 100.031192][ T778] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 100.040550][ T778] usb 1-1: Manufacturer: syz [ 100.056276][ T778] usb 1-1: config 0 descriptor?? [ 100.158886][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 100.209593][ T5897] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.300016][ T9] usb 4-1: device descriptor read/64, error -71 [ 100.361288][ T5897] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 100.370328][ T5897] usb 2-1: config 0 has no interface number 0 [ 100.377041][ T5897] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.392086][ T5865] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.392460][ T5897] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.411299][ T5897] usb 2-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 100.424597][ T5897] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 100.434524][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.445530][ T5897] usb 2-1: config 0 descriptor?? [ 100.540426][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 100.549337][ T5865] usb 3-1: Using ep0 maxpacket: 32 [ 100.560949][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.574051][ T5865] usb 3-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 100.584281][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.594207][ T5865] usb 3-1: Product: syz [ 100.598419][ T5865] usb 3-1: Manufacturer: syz [ 100.603353][ T5865] usb 3-1: SerialNumber: syz [ 100.612489][ T5865] usb 3-1: config 0 descriptor?? [ 100.625257][ T5865] snd_usb_variax 3-1:0.0: Line 6 Variax Workbench found [ 100.632926][ T5865] usb 3-1: selecting invalid altsetting 1 [ 100.638716][ T5865] snd_usb_variax 3-1:0.0: set_interface failed [ 100.646629][ T5865] snd_usb_variax 3-1:0.0: Line 6 Variax Workbench now disconnected [ 100.655167][ T5865] snd_usb_variax 3-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 100.679280][ T9] usb 4-1: device descriptor read/64, error -71 [ 100.789415][ T9] usb usb4-port1: attempt power cycle [ 100.827831][ T5896] usb 3-1: USB disconnect, device number 2 [ 101.077679][ T5865] usb 2-1: USB disconnect, device number 2 [ 101.131001][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 101.160733][ T9] usb 4-1: device descriptor read/8, error -71 [ 101.403261][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 101.429536][ T9] usb 4-1: device descriptor read/8, error -71 [ 101.445287][ T5934] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 101.539263][ T9] usb usb4-port1: unable to enumerate USB device [ 101.578909][ T5837] Bluetooth: hci0: command tx timeout [ 101.590447][ T5837] Bluetooth: hci1: command tx timeout [ 101.590479][ T5834] Bluetooth: hci2: command tx timeout [ 101.659804][ T5834] Bluetooth: hci3: command tx timeout [ 101.750943][ T5940] tmpfs: Unknown parameter 'nr_ikodes' [ 102.069834][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.230676][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 102.241344][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 102.251291][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.261669][ T9] usb 3-1: Product: syz [ 102.266526][ T9] usb 3-1: Manufacturer: syz [ 102.273461][ T9] usb 3-1: SerialNumber: syz [ 102.286489][ T9] usb 3-1: config 0 descriptor?? [ 102.508085][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 102.579960][ T778] rc_core: IR keymap rc-hauppauge not found [ 102.585924][ T778] Registered IR keymap rc-empty [ 102.592747][ T778] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.607618][ T5967] 9p: Bad value for 'rfdno' [ 102.619730][ T778] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.651548][ T778] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 102.658919][ T5865] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.670117][ T778] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 102.699200][ T778] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.737572][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 102.748981][ T778] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.758874][ T9] usb 3-1: USB disconnect, device number 3 [ 102.768281][ T5970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20'. [ 102.798895][ T778] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.819998][ T778] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.840960][ T778] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.847563][ T5865] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 102.861845][ T778] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.862114][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.879875][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.899092][ T778] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.923759][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.939876][ T778] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.953125][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.974949][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.989128][ T778] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.001258][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.010758][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.029523][ T778] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 103.030380][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.047829][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.059680][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.066333][ T778] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 103.077361][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.080829][ T778] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 103.088588][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.106179][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.119806][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.122886][ T778] usb 1-1: USB disconnect, device number 2 [ 103.158676][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.172789][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.187085][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.201791][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.213081][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.226494][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.242368][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.282955][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.293065][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.307131][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.317616][ T5865] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 103.330499][ T5865] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 103.350051][ T5865] usb 2-1: Product: syz [ 103.356636][ T5865] usb 2-1: Manufacturer: syz [ 103.364363][ T5865] usb 2-1: SerialNumber: syz [ 103.381922][ T5865] usb 2-1: config 0 descriptor?? [ 103.404389][ T5865] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 103.410984][ T5986] syz.2.24 uses obsolete (PF_INET,SOCK_PACKET) [ 103.552064][ T5991] FAULT_INJECTION: forcing a failure. [ 103.552064][ T5991] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.566802][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 103.566834][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.566855][ T5991] Call Trace: [ 103.566868][ T5991] [ 103.566877][ T5991] dump_stack_lvl+0x189/0x250 [ 103.566910][ T5991] ? __pfx____ratelimit+0x10/0x10 [ 103.566939][ T5991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.566965][ T5991] ? __pfx__printk+0x10/0x10 [ 103.567005][ T5991] should_fail_ex+0x414/0x560 [ 103.567041][ T5991] _copy_to_user+0x31/0xb0 [ 103.567070][ T5991] simple_read_from_buffer+0xe1/0x170 [ 103.567098][ T5991] proc_fail_nth_read+0x1b3/0x220 [ 103.567133][ T5991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.567168][ T5991] ? rw_verify_area+0x2a6/0x4d0 [ 103.567200][ T5991] ? __lock_acquire+0xab9/0xd20 [ 103.567219][ T5991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.567252][ T5991] vfs_read+0x200/0xa30 [ 103.567283][ T5991] ? fdget_pos+0x247/0x320 [ 103.567311][ T5991] ? __pfx___mutex_lock+0x10/0x10 [ 103.567342][ T5991] ? __pfx_vfs_read+0x10/0x10 [ 103.567376][ T5991] ? __fget_files+0x2a/0x420 [ 103.567404][ T5991] ? __fget_files+0x3a0/0x420 [ 103.567427][ T5991] ? __fget_files+0x2a/0x420 [ 103.567462][ T5991] ksys_read+0x145/0x250 [ 103.567483][ T5991] ? __pfx_ksys_read+0x10/0x10 [ 103.567507][ T5991] ? do_syscall_64+0xbe/0xfa0 [ 103.567540][ T5991] do_syscall_64+0xfa/0xfa0 [ 103.567579][ T5991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.567596][ T5991] ? clear_bhb_loop+0x60/0xb0 [ 103.567617][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.567639][ T5991] RIP: 0033:0x7fa1f018e0dc [ 103.567662][ T5991] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 103.567676][ T5991] RSP: 002b:00007fa1f10c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.567695][ T5991] RAX: ffffffffffffffda RBX: 00007fa1f03e5fa0 RCX: 00007fa1f018e0dc [ 103.567708][ T5991] RDX: 000000000000000f RSI: 00007fa1f10c60a0 RDI: 0000000000000004 [ 103.567718][ T5991] RBP: 00007fa1f10c6090 R08: 0000000000000000 R09: 0000000000000000 [ 103.567729][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.567738][ T5991] R13: 00007fa1f03e6038 R14: 00007fa1f03e5fa0 R15: 00007ffca0fa7fd8 [ 103.567767][ T5991] [ 103.889174][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 103.921594][ T5896] usb 2-1: USB disconnect, device number 3 [ 103.969733][ T5896] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 104.005796][ T6000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.049397][ T6000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.091025][ T5962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.094991][ T6007] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.121114][ T6000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.157460][ T6000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.229963][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.340604][ T5896] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 104.448898][ T5865] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 104.510968][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.519805][ T5896] usb 4-1: not running at top speed; connect to a high speed hub [ 104.529439][ T5896] usb 4-1: config 2 has an invalid interface number: 212 but max is 1 [ 104.537889][ T5896] usb 4-1: config 2 has an invalid interface number: 226 but max is 1 [ 104.547130][ T5896] usb 4-1: config 2 has no interface number 0 [ 104.555459][ T5896] usb 4-1: config 2 has no interface number 1 [ 104.561927][ T5896] usb 4-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 104.573227][ T5896] usb 4-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 104.584420][ T5896] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 104.596199][ T5896] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 104.604480][ T5865] usb 2-1: not running at top speed; connect to a high speed hub [ 104.606455][ T5896] usb 4-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 104.630710][ T5865] usb 2-1: config 5 has an invalid interface number: 115 but max is 0 [ 104.631359][ T5896] usb 4-1: config 2 interface 212 has no altsetting 0 [ 104.639952][ T5865] usb 2-1: config 5 has no interface number 0 [ 104.648710][ T5896] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 104.654143][ T5865] usb 2-1: config 5 interface 115 has no altsetting 0 [ 104.665496][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.673811][ T5865] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01bc, bcdDevice=f4.98 [ 104.677768][ T5896] usb 4-1: Product: syz [ 104.688075][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.693593][ T5896] usb 4-1: Manufacturer: syz [ 104.701920][ T5865] usb 2-1: Product: syz [ 104.708389][ T5896] usb 4-1: SerialNumber: syz [ 104.712352][ T5865] usb 2-1: Manufacturer: syz [ 104.721323][ T5865] usb 2-1: SerialNumber: syz [ 104.829259][ T43] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 104.943927][ T5865] ftdi_sio 2-1:5.115: FTDI USB Serial Device converter detected [ 104.957129][ T5896] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.226/input/input7 [ 104.970926][ T5865] ftdi_sio ttyUSB0: unknown device type: 0xf498 [ 104.980752][ T43] usb 3-1: device descriptor read/64, error -71 [ 104.985545][ T5865] usb 2-1: USB disconnect, device number 4 [ 104.996365][ T5865] ftdi_sio 2-1:5.115: device disconnected [ 105.031909][ T5896] usb 4-1: USB disconnect, device number 6 [ 105.109145][ T43] usb usb3-port1: attempt power cycle [ 105.248122][ T6019] mmap: syz.0.34 (6019) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.448932][ T43] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 105.469516][ T43] usb 3-1: device descriptor read/8, error -71 [ 105.506323][ T5896] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.691406][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.706294][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.716851][ T5896] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 105.728991][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.738953][ T43] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 105.754788][ T5896] usb 1-1: config 0 descriptor?? [ 105.760296][ T5897] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 105.799523][ T43] usb 3-1: device descriptor read/8, error -71 [ 105.909864][ T43] usb usb3-port1: unable to enumerate USB device [ 105.919170][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 105.927670][ T5897] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 105.937837][ T5897] usb 4-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.951450][ T5897] usb 4-1: config 1 interface 0 has no altsetting 0 [ 105.964199][ T5897] usb 4-1: language id specifier not provided by device, defaulting to English [ 105.975368][ T5897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.986537][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.994766][ T5897] usb 4-1: Product: 랓⡲Â瓡ᘒࡨ纕ꛘ旉╓ମ闇ⶽỦ鮀¢쫓膬栅㵥⠮ç‡ã·•ê ‚㹎笹쮴⋯୚﵀ì½å„¸ëª¨ì‰“热龇澥⯀湒ᖧ懲䤬æ‘Ṛꕜ뭦쥴벡﫥঴⸧ï¼ç’«äŒ„령盵殽Ψ햎鱖ã¤Ý§à¡¹ì¶§ç§·çš“銼ዞìžç€ë¹´íŽ¤é†‡ì¥°à´‘尸⥮åšéŽí‡–⑺ìœí•ˆè´´á‰µí‘¿äŸ‚ [ 106.022861][ T5897] usb 4-1: Manufacturer: င [ 106.027580][ T5897] usb 4-1: SerialNumber: syz [ 106.036715][ T6021] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 106.044842][ T6021] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 106.183122][ T5896] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 106.192847][ T5896] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 106.199990][ T5896] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 106.207019][ T5896] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 106.214288][ T5896] stadia 0003:18D1:9400.0002: unknown main item tag 0x0 [ 106.226260][ T5896] stadia 0003:18D1:9400.0002: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.0-1/input0 [ 106.237558][ T5896] stadia 0003:18D1:9400.0002: no inputs found [ 106.243802][ T5896] stadia 0003:18D1:9400.0002: force feedback init failed [ 106.271436][ T5897] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 106.287483][ T5897] usb 4-1: USB disconnect, device number 7 [ 106.383033][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.409966][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.438054][ T43] usb 1-1: USB disconnect, device number 3 [ 106.760810][ T6034] input: syz1 as /devices/virtual/input/input8 [ 107.062596][ T6043] syzkaller1: entered promiscuous mode [ 107.068227][ T6043] syzkaller1: entered allmulticast mode [ 107.082732][ T6045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.093361][ T6043] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 107.265523][ T6051] kvm: user requested TSC rate below hardware speed [ 107.590368][ T6064] syz.2.48: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 107.607721][ T6064] CPU: 0 UID: 0 PID: 6064 Comm: syz.2.48 Not tainted syzkaller #0 PREEMPT(full) [ 107.607752][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.607766][ T6064] Call Trace: [ 107.607776][ T6064] [ 107.607785][ T6064] dump_stack_lvl+0x189/0x250 [ 107.607822][ T6064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.607851][ T6064] ? __pfx__printk+0x10/0x10 [ 107.607876][ T6064] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 107.607912][ T6064] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 107.607949][ T6064] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 107.607988][ T6064] warn_alloc+0x214/0x310 [ 107.608018][ T6064] ? stack_trace_save+0x9c/0xe0 [ 107.608053][ T6064] ? __pfx_warn_alloc+0x10/0x10 [ 107.608090][ T6064] ? kasan_save_track+0x4f/0x80 [ 107.608115][ T6064] ? kasan_save_track+0x3e/0x80 [ 107.608148][ T6064] ? __kasan_kmalloc+0x93/0xb0 [ 107.608174][ T6064] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 107.608200][ T6064] ? xskq_create+0x56/0x170 [ 107.608226][ T6064] ? xsk_setsockopt+0x4dc/0x8d0 [ 107.608248][ T6064] ? do_sock_setsockopt+0x17c/0x1b0 [ 107.608275][ T6064] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 107.608301][ T6064] ? do_syscall_64+0xfa/0xfa0 [ 107.608335][ T6064] __vmalloc_node_range_noprof+0x134/0x1640 [ 107.608400][ T6064] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.608437][ T6064] ? __kasan_kmalloc+0x93/0xb0 [ 107.608473][ T6064] vmalloc_user_noprof+0xad/0xf0 [ 107.608501][ T6064] ? xskq_create+0xbf/0x170 [ 107.608529][ T6064] xskq_create+0xbf/0x170 [ 107.608561][ T6064] xsk_init_queue+0xb0/0x110 [ 107.608590][ T6064] xsk_setsockopt+0x4dc/0x8d0 [ 107.608616][ T6064] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.608646][ T6064] ? __pfx_aa_sk_perm+0x10/0x10 [ 107.608672][ T6064] ? aa_sock_opt_perm+0xff/0x1b0 [ 107.608704][ T6064] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 107.608737][ T6064] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.608763][ T6064] do_sock_setsockopt+0x17c/0x1b0 [ 107.608795][ T6064] __x64_sys_setsockopt+0x13f/0x1b0 [ 107.608830][ T6064] do_syscall_64+0xfa/0xfa0 [ 107.608861][ T6064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.608883][ T6064] ? clear_bhb_loop+0x60/0xb0 [ 107.608910][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.608931][ T6064] RIP: 0033:0x7f9e8698f6c9 [ 107.608950][ T6064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.608968][ T6064] RSP: 002b:00007f9e877be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.608990][ T6064] RAX: ffffffffffffffda RBX: 00007f9e86be5fa0 RCX: 00007f9e8698f6c9 [ 107.609006][ T6064] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 107.609019][ T6064] RBP: 00007f9e86a11f91 R08: 0000000000000004 R09: 0000000000000000 [ 107.609031][ T6064] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 107.609045][ T6064] R13: 00007f9e86be6038 R14: 00007f9e86be5fa0 R15: 00007ffc379a3c18 [ 107.609081][ T6064] [ 107.916851][ T6064] Mem-Info: [ 107.920138][ T6064] active_anon:5616 inactive_anon:0 isolated_anon:0 [ 107.920138][ T6064] active_file:2252 inactive_file:39901 isolated_file:0 [ 107.920138][ T6064] unevictable:768 dirty:527 writeback:0 [ 107.920138][ T6064] slab_reclaimable:10422 slab_unreclaimable:91006 [ 107.920138][ T6064] mapped:24530 shmem:1355 pagetables:1060 [ 107.920138][ T6064] sec_pagetables:0 bounce:0 [ 107.920138][ T6064] kernel_misc_reclaimable:0 [ 107.920138][ T6064] free:1341801 free_pcp:18703 free_cma:0 [ 107.930809][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.983897][ T6064] Node 0 active_anon:22464kB inactive_anon:0kB active_file:9008kB inactive_file:159404kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98220kB dirty:2108kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11432kB pagetables:4124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.016583][ T6064] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.055720][ T6064] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.088580][ T6064] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 108.104299][ T6064] Node 0 DMA32 free:1461384kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22364kB inactive_anon:0kB active_file:9008kB inactive_file:159404kB unevictable:1536kB writepending:2108kB zspages:0kB present:3129332kB managed:2551448kB mlocked:0kB bounce:0kB free_pcp:55492kB local_pcp:22184kB free_cma:0kB [ 108.145028][ T6064] lowmem_reserve[]: 0 0 0 0 0 [ 108.153688][ T6064] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.183218][ T5865] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 108.194836][ T6064] lowmem_reserve[]: 0 0 0 0 0 [ 108.200282][ T6064] Node 1 Normal free:3890460kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19424kB local_pcp:8288kB free_cma:0kB [ 108.205944][ T10] usb 2-1: config 254 has an invalid interface number: 66 but max is 0 [ 108.242310][ T6064] lowmem_reserve[]: 0 0 0 0 0 [ 108.248097][ T6064] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 108.253361][ T10] usb 2-1: config 254 has no interface number 0 [ 108.268604][ T43] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 108.269266][ T6064] Node 0 DMA32: 320*4kB (UME) 68*8kB (UE) 16*16kB (UM) 8*32kB (UME) 4*64kB (UME) 23*128kB (UME) 10*256kB (UM) 9*512kB (M) 5*1024kB (M) 3*2048kB (ME) 351*4096kB (M) = 1461664kB [ 108.295349][ T6064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 108.307779][ T6064] Node 1 Normal: 189*4kB (UE) 37*8kB (UME) 46*16kB (UME) 53*32kB (UME) 20*64kB (UME) 9*128kB (UME) 4*256kB (UM) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3890460kB [ 108.311378][ T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7706, bcdDevice= 0.00 [ 108.327508][ T6064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.337567][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.351765][ T6064] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 108.354725][ T5865] usb 3-1: Using ep0 maxpacket: 32 [ 108.364777][ T6064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.369901][ T10] usb 2-1: Product: syz [ 108.383440][ T6064] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 108.383768][ T10] usb 2-1: Manufacturer: syz [ 108.398387][ T10] usb 2-1: SerialNumber: syz [ 108.398487][ T6064] 43505 total pagecache pages [ 108.406906][ T5865] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 108.412540][ T6064] 0 pages in swap cache [ 108.417318][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.424326][ T6064] Free swap = 124996kB [ 108.430125][ T5865] usb 3-1: Product: syz [ 108.436000][ T6064] Total swap = 124996kB [ 108.438422][ T5865] usb 3-1: Manufacturer: syz [ 108.438444][ T5865] usb 3-1: SerialNumber: syz [ 108.455728][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 108.457014][ T10] hso 2-1:254.66: Not our interface [ 108.465758][ T43] usb 1-1: can't read configurations, error -61 [ 108.473230][ T5865] usb 3-1: config 0 descriptor?? [ 108.479536][ T6064] 2097051 pages RAM [ 108.485933][ T6064] 0 pages HighMem/MovableOnly [ 108.488102][ T10] usb-storage 2-1:254.66: USB Mass Storage device detected [ 108.491842][ T778] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 108.494132][ T6064] 427419 pages reserved [ 108.516591][ T6064] 0 pages cma reserved [ 108.521205][ T5865] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 108.609890][ T43] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 108.624875][ T778] usb 4-1: device descriptor read/64, error -71 [ 108.671963][ T5896] usb 2-1: USB disconnect, device number 5 [ 108.726059][ T6064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.736937][ T6064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.782227][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 108.790567][ T43] usb 1-1: can't read configurations, error -61 [ 108.797831][ T43] usb usb1-port1: attempt power cycle [ 108.868860][ T778] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 109.008900][ T778] usb 4-1: device descriptor read/64, error -71 [ 109.029011][ T5865] gspca_topro: reg_w err -110 [ 109.058933][ T5865] gspca_topro: Sensor soi763a [ 109.128907][ T778] usb usb4-port1: attempt power cycle [ 109.143143][ T43] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 109.193174][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 109.202137][ T43] usb 1-1: can't read configurations, error -61 [ 109.283004][ T5865] usb 3-1: USB disconnect, device number 8 [ 109.340214][ T43] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 109.372021][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 109.398897][ T43] usb 1-1: can't read configurations, error -61 [ 109.405803][ T43] usb usb1-port1: unable to enumerate USB device [ 109.478946][ T778] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 109.501045][ T778] usb 4-1: device descriptor read/8, error -71 [ 109.540369][ T6085] Zero length message leads to an empty skb [ 109.599418][ T6086] netlink: 192 bytes leftover after parsing attributes in process `syz.1.54'. [ 109.748913][ T778] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 109.769560][ T778] usb 4-1: device descriptor read/8, error -71 [ 109.788872][ T5865] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 109.889279][ T778] usb usb4-port1: unable to enumerate USB device [ 109.938947][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 109.946342][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.956896][ T5865] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 109.966197][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.978575][ T5865] usb 3-1: config 0 descriptor?? [ 109.992374][ T5865] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 110.688925][ T5897] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.848924][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 110.855900][ T5897] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 110.872040][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.884584][ T5897] usb 2-1: config 0 descriptor?? [ 110.902028][ T5897] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 111.127579][ T30] audit: type=1326 audit(1762589806.915:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.0.57" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1f018f6c9 code=0x0 [ 111.202705][ T5865] gspca_vc032x: reg_w err -71 [ 111.210960][ T5865] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 111.221277][ T5865] usb 3-1: USB disconnect, device number 9 [ 111.238136][ T6094] capability: warning: `syz.0.57' uses 32-bit capabilities (legacy support in use) [ 111.896923][ T6115] erofs (device nbd2): cannot find valid erofs superblock [ 111.909800][ T778] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 111.934214][ T5897] gspca_nw80x: reg_w err -71 [ 111.944428][ T5897] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 111.959933][ T5897] usb 2-1: USB disconnect, device number 6 [ 112.049236][ T778] usb 4-1: device descriptor read/64, error -71 [ 112.060112][ T6120] netlink: 5 bytes leftover after parsing attributes in process `syz.0.65'. [ 112.084519][ T6120] netlink: 5 bytes leftover after parsing attributes in process `syz.0.65'. [ 112.094554][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.65'. [ 112.299377][ T778] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 112.448928][ T778] usb 4-1: device descriptor read/64, error -71 [ 112.499222][ T5865] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.559117][ T778] usb usb4-port1: attempt power cycle [ 112.588867][ T5823] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 112.668862][ T5865] usb 1-1: Using ep0 maxpacket: 32 [ 112.676203][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.691083][ T5865] usb 1-1: New USB device found, idVendor=257a, idProduct=261f, bcdDevice= 8.ee [ 112.700829][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.712580][ T5865] usb 1-1: Product: syz [ 112.716817][ T5865] usb 1-1: Manufacturer: syz [ 112.721994][ T5865] usb 1-1: SerialNumber: syz [ 112.730888][ T5865] usb 1-1: config 0 descriptor?? [ 112.750824][ T5865] hub 1-1:0.0: bad descriptor, ignoring hub [ 112.757213][ T5865] hub 1-1:0.0: probe with driver hub failed with error -5 [ 112.765901][ T5823] usb 3-1: not running at top speed; connect to a high speed hub [ 112.767576][ T5865] option 1-1:0.0: GSM modem (1-port) converter detected [ 112.783636][ T5823] usb 3-1: config 5 has an invalid interface number: 115 but max is 0 [ 112.783667][ T5823] usb 3-1: config 5 has no interface number 0 [ 112.783699][ T5823] usb 3-1: config 5 interface 115 has no altsetting 0 [ 112.785907][ T5823] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01bc, bcdDevice=f4.98 [ 112.785940][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.785962][ T5823] usb 3-1: Product: syz [ 112.785985][ T5823] usb 3-1: Manufacturer: syz [ 112.786002][ T5823] usb 3-1: SerialNumber: syz [ 112.845159][ T1582] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.929230][ T778] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 112.952940][ T778] usb 4-1: device descriptor read/8, error -71 [ 112.963638][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.973036][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.009011][ T1582] usb 2-1: Using ep0 maxpacket: 16 [ 113.017080][ T1582] usb 2-1: config 0 has an invalid interface number: 195 but max is 0 [ 113.026167][ T1582] usb 2-1: config 0 has no interface number 0 [ 113.032782][ T6131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.043497][ T6131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.056324][ T1582] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 113.065809][ T1582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.075688][ T1582] usb 2-1: Product: syz [ 113.080407][ T1582] usb 2-1: Manufacturer: syz [ 113.085220][ T1582] usb 2-1: SerialNumber: syz [ 113.099892][ T5865] usb 1-1: USB disconnect, device number 8 [ 113.106603][ T1582] usb 2-1: config 0 descriptor?? [ 113.114594][ T5865] option 1-1:0.0: device disconnected [ 113.131992][ T1582] go7007 2-1:0.195: probe with driver go7007 failed with error -12 [ 113.199806][ T778] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 113.229714][ T778] usb 4-1: device descriptor read/8, error -71 [ 113.332816][ T5897] usb 2-1: USB disconnect, device number 7 [ 113.342973][ T778] usb usb4-port1: unable to enumerate USB device [ 113.809050][ T5897] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 113.933069][ T6140] dvmrp0: entered allmulticast mode [ 113.982171][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.011408][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 114.035461][ T5897] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 114.047936][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.061010][ T5897] usb 1-1: config 0 descriptor?? [ 114.494557][ T5897] logitech 0003:046D:CA04.0003: item fetching failed at offset 2/5 [ 114.504167][ T5897] logitech 0003:046D:CA04.0003: parse failed [ 114.512823][ T5897] logitech 0003:046D:CA04.0003: probe with driver logitech failed with error -22 [ 114.523075][ T778] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.688096][ T778] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 114.712733][ T6138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.729433][ T778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.742721][ T6138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.757008][ T778] usb 2-1: Product: syz [ 114.762091][ T778] usb 2-1: Manufacturer: syz [ 114.766784][ T778] usb 2-1: SerialNumber: syz [ 114.775599][ T43] usb 1-1: USB disconnect, device number 9 [ 114.828644][ T778] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 114.896778][ T5897] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 115.060396][ T1582] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 115.118521][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.133906][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.144341][ C1] usb 2-1: ath: unknown panic pattern! [ 115.229319][ T1582] usb 4-1: Using ep0 maxpacket: 8 [ 115.254539][ T1582] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 115.266551][ T1582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.275295][ T1582] usb 4-1: Product: syz [ 115.280530][ T1582] usb 4-1: Manufacturer: syz [ 115.285203][ T1582] usb 4-1: SerialNumber: syz [ 115.305645][ T1582] usb 4-1: config 0 descriptor?? [ 115.321637][ T1582] gspca_main: sq905-2.14.0 probing 2770:9120 [ 115.390178][ T778] usb 2-1: USB disconnect, device number 8 [ 115.579630][ T6154] netlink: 'syz.0.77': attribute type 10 has an invalid length. [ 115.589845][ T6154] macvlan1: entered allmulticast mode [ 115.603325][ T6154] veth1_vlan: entered allmulticast mode [ 115.617375][ T6154] team0: Port device macvlan1 added [ 115.742404][ T1582] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 115.751026][ T1582] sq905 4-1:0.0: probe with driver sq905 failed with error -32 [ 115.959036][ T1582] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 116.009154][ T5897] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 116.016911][ T5897] ath9k_htc: Failed to initialize the device [ 116.027383][ T778] usb 2-1: ath9k_htc: USB layer deinitialized [ 116.087302][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 116.134217][ T1582] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 116.143748][ T1582] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.162407][ T1582] usb 1-1: Product: syz [ 116.169141][ T1582] usb 1-1: Manufacturer: syz [ 116.184098][ T1582] usb 1-1: SerialNumber: syz [ 116.205812][ T1582] usb 1-1: config 0 descriptor?? [ 116.220324][ T1582] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 116.236882][ T5823] ftdi_sio 3-1:5.115: FTDI USB Serial Device converter detected [ 116.262417][ T5823] ftdi_sio ttyUSB0: unknown device type: 0xf498 [ 116.283117][ T5823] usb 3-1: USB disconnect, device number 10 [ 116.305824][ T5823] ftdi_sio 3-1:5.115: device disconnected [ 116.426181][ T6166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.440467][ T6166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.478502][ T1582] gspca_sunplus: reg_r err -71 [ 116.494459][ T1582] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 116.527194][ T1582] usb 1-1: USB disconnect, device number 10 [ 116.621490][ T6173] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 116.639818][ T6173] kvm: pic: non byte read [ 116.653696][ T6179] trusted_key: encrypted_key: keyword 'uew' not recognized [ 116.654305][ T6173] kvm: pic: level sensitive irq not supported [ 116.663518][ T6173] kvm: pic: non byte read [ 116.674782][ T6180] trusted_key: encrypted_key: keyword 'uew' not recognized [ 117.003255][ T6199] warning: `syz.0.90' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.019998][ T778] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 117.069179][ T1582] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 117.088589][ T6204] program syz.0.91 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.189042][ T778] usb 3-1: Using ep0 maxpacket: 16 [ 117.202147][ T778] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.213623][ T778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.225306][ T778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 117.228945][ T1582] usb 2-1: Using ep0 maxpacket: 32 [ 117.236783][ T778] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 117.251772][ T778] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.267944][ T1582] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 117.276519][ T778] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 117.285725][ T1582] usb 2-1: config 0 has no interface number 0 [ 117.288350][ T1582] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 117.303496][ T778] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 117.312049][ T778] usb 3-1: Manufacturer: syz [ 117.317536][ T1582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.327717][ T1582] usb 2-1: Product: syz [ 117.328641][ T778] usb 3-1: config 0 descriptor?? [ 117.341700][ T1582] usb 2-1: Manufacturer: syz [ 117.346377][ T1582] usb 2-1: SerialNumber: syz [ 117.365198][ T1582] usb 2-1: config 0 descriptor?? [ 117.375248][ T1582] smsc95xx v2.0.0 [ 117.538926][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 117.609062][ T778] rc_core: IR keymap rc-hauppauge not found [ 117.615041][ T778] Registered IR keymap rc-empty [ 117.622903][ T778] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 117.649666][ T778] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 117.679022][ T10] usb 1-1: device descriptor read/64, error -71 [ 117.680196][ T778] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 117.699362][ T778] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 117.715705][ T778] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 117.739001][ T778] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 117.765146][ T5896] usb 4-1: USB disconnect, device number 16 [ 117.775217][ T1582] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 117.783066][ T778] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 117.800011][ T1582] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 117.829556][ T778] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 117.859111][ T778] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 117.895712][ T778] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 117.929385][ T778] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 117.938905][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 117.949616][ T778] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 117.968962][ T778] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 118.002856][ T778] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 118.020697][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.035857][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.048005][ T778] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 118.058571][ T778] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 118.069735][ T1582] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 118.098837][ T10] usb 1-1: device descriptor read/64, error -71 [ 118.101392][ T778] usb 3-1: USB disconnect, device number 11 [ 118.130280][ T1582] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 118.155117][ T1582] usb 2-1: USB disconnect, device number 9 [ 118.210306][ T10] usb usb1-port1: attempt power cycle [ 118.338922][ T5897] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 118.468906][ T5897] usb 4-1: device descriptor read/64, error -71 [ 118.569227][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 118.577168][ T1582] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 118.599675][ T10] usb 1-1: device descriptor read/8, error -71 [ 118.728956][ T5897] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 118.739381][ T1582] usb 2-1: Using ep0 maxpacket: 16 [ 118.747042][ T1582] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.758651][ T1582] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.771990][ T1582] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.781676][ T1582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.793235][ T1582] usb 2-1: config 0 descriptor?? [ 118.849170][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 118.859169][ T9] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 118.868853][ T5897] usb 4-1: device descriptor read/64, error -71 [ 118.871302][ T10] usb 1-1: device descriptor read/8, error -71 [ 118.979995][ T5897] usb usb4-port1: attempt power cycle [ 118.989678][ T10] usb usb1-port1: unable to enumerate USB device [ 119.005191][ T6224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.014456][ T6224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.031029][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 119.039897][ T9] usb 3-1: config 0 has no interface number 0 [ 119.046035][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.057206][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 119.068343][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 119.081851][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 119.095117][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 119.106290][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.119917][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 119.129330][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.140968][ T9] usb 3-1: config 0 descriptor?? [ 119.147566][ T6226] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 119.155674][ T6226] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 119.169689][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 119.318859][ T5897] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 119.339604][ T5897] usb 4-1: device descriptor read/8, error -71 [ 119.579105][ T5897] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 119.599970][ T5897] usb 4-1: device descriptor read/8, error -71 [ 119.720000][ T5897] usb usb4-port1: unable to enumerate USB device [ 120.395564][ T6233] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 120.644213][ T6241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.101'. [ 121.171360][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 121.278222][ T1582] usbhid 2-1:0.0: can't add hid device: -71 [ 121.301519][ T5896] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 121.309320][ T1582] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 121.312682][ T1582] usb 2-1: USB disconnect, device number 10 [ 121.443591][ T6258] tmpfs: Bad value for 'mpol' [ 121.451150][ T6258] ======================================================= [ 121.451150][ T6258] WARNING: The mand mount option has been deprecated and [ 121.451150][ T6258] and is ignored by this kernel. Remove the mand [ 121.451150][ T6258] option from the mount to silence this warning. [ 121.451150][ T6258] ======================================================= [ 121.488420][ T6258] tmpfs: Unknown parameter 'indo64' [ 121.504296][ T5896] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 121.513544][ T5896] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 121.522943][ T5896] usb 1-1: config 1 has no interface number 1 [ 121.531123][ T5896] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 121.550676][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.106'. [ 121.562003][ T6258] process 'syz.3.106' launched '/dev/fd/3' with NULL argv: empty string added [ 121.574252][ T5896] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.591492][ T5896] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.601165][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.609689][ T5896] usb 1-1: Product: syz [ 121.614098][ T5896] usb 1-1: Manufacturer: syz [ 121.621428][ T5896] usb 1-1: SerialNumber: syz [ 121.768097][ T9] usb 3-1: USB disconnect, device number 12 [ 121.806083][ T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 121.905810][ T5896] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 121.993434][ T5896] usb 1-1: USB disconnect, device number 15 [ 122.016580][ T6271] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.112' resets device [ 122.057395][ T6271] pim6reg: entered allmulticast mode [ 122.062419][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.099165][ T778] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 122.234537][ T43] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 122.259164][ T778] usb 2-1: Using ep0 maxpacket: 16 [ 122.268887][ T778] usb 2-1: too many configurations: 72, using maximum allowed: 8 [ 122.279092][ T778] usb 2-1: config 0 has no interfaces? [ 122.286517][ T778] usb 2-1: config 0 has no interfaces? [ 122.294142][ T778] usb 2-1: config 0 has no interfaces? [ 122.302698][ T778] usb 2-1: config 0 has no interfaces? [ 122.313644][ T778] usb 2-1: config 0 has no interfaces? [ 122.321081][ T778] usb 2-1: config 0 has no interfaces? [ 122.328115][ T778] usb 2-1: config 0 has no interfaces? [ 122.337150][ T778] usb 2-1: config 0 has no interfaces? [ 122.351246][ T6265] input: syz1 as /devices/virtual/input/input10 [ 122.401957][ T43] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 122.418154][ T5896] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 122.429836][ T778] usb 2-1: string descriptor 0 read error: -71 [ 122.436288][ T778] usb 2-1: New USB device found, idVendor=1708, idProduct=000e, bcdDevice=ad.b1 [ 122.449470][ T43] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 122.460953][ T778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=70 [ 122.472792][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 122.485270][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.503507][ T778] usb 2-1: config 0 descriptor?? [ 122.516017][ T778] usb 2-1: can't set config #0, error -71 [ 122.532844][ T6269] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 122.553704][ T778] usb 2-1: USB disconnect, device number 11 [ 122.589616][ T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.626119][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.656567][ T5896] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 122.687708][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.718704][ T5896] usb 3-1: config 0 descriptor?? [ 122.888326][ T778] usb 4-1: USB disconnect, device number 21 [ 122.932259][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.985623][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.175882][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.185371][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.204876][ T6289] loop3: detected capacity change from 0 to 7 [ 123.232809][ T5838] Dev loop3: unable to read RDB block 7 [ 123.243322][ T5896] elecom 0003:056E:011C.0004: global environment stack underflow [ 123.259318][ T5838] loop3: unable to read partition table [ 123.265196][ T5896] elecom 0003:056E:011C.0004: item 0 4 1 11 parsing failed [ 123.276823][ T5838] loop3: partition table beyond EOD, truncated [ 123.296926][ T5896] elecom 0003:056E:011C.0004: probe with driver elecom failed with error -22 [ 123.331101][ T6289] Dev loop3: unable to read RDB block 7 [ 123.350163][ T6289] loop3: unable to read partition table [ 123.357270][ T6289] loop3: partition table beyond EOD, truncated [ 123.372835][ T6289] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 123.455651][ T9] usb 3-1: USB disconnect, device number 13 [ 123.568417][ T5194] Dev loop3: unable to read RDB block 7 [ 123.597954][ T5194] loop3: unable to read partition table [ 123.609062][ T5194] loop3: partition table beyond EOD, truncated [ 123.673328][ T6296] tipc: Can't bind to reserved service type 1 [ 123.691317][ T6296] netlink: 'syz.0.119': attribute type 2 has an invalid length. [ 123.709663][ T6296] netlink: 132 bytes leftover after parsing attributes in process `syz.0.119'. [ 123.742165][ T6296] netlink: 'syz.0.119': attribute type 2 has an invalid length. [ 123.761530][ T6296] netlink: 132 bytes leftover after parsing attributes in process `syz.0.119'. [ 123.921223][ T6303] xt_l2tp: missing protocol rule (udp|l2tpip) [ 124.385030][ T6318] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 124.398916][ T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 124.399704][ T6318] overlayfs: failed to set xattr on upper [ 124.423678][ T6318] overlayfs: ...falling back to redirect_dir=nofollow. [ 124.440126][ T6318] overlayfs: ...falling back to index=off. [ 124.450075][ T5897] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 124.583612][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 124.599458][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.608064][ T9] usb 3-1: Product: syz [ 124.615563][ T9] usb 3-1: Manufacturer: syz [ 124.628952][ T9] usb 3-1: SerialNumber: syz [ 124.629390][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 124.640699][ T9] usb 3-1: config 0 descriptor?? [ 124.646403][ T5897] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 124.655529][ T5897] usb 1-1: can't read configurations, error -22 [ 124.739445][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.128'. [ 124.761186][ T6326] netlink: 60 bytes leftover after parsing attributes in process `syz.1.128'. [ 124.808862][ T5897] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 124.866698][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 124.979203][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 124.998093][ T5897] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 125.006931][ T5897] usb 1-1: can't read configurations, error -22 [ 125.013945][ T5897] usb usb1-port1: attempt power cycle [ 125.182045][ T6341] syzkaller1: entered promiscuous mode [ 125.188233][ T6341] syzkaller1: entered allmulticast mode [ 125.368961][ T5897] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 125.399642][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 125.407123][ T5897] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 125.420037][ T5897] usb 1-1: can't read configurations, error -22 [ 125.587011][ T5897] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 125.599170][ T1582] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 125.610663][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 125.618199][ T5897] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 125.626756][ T5897] usb 1-1: can't read configurations, error -22 [ 125.634049][ T5897] usb usb1-port1: unable to enumerate USB device [ 125.752561][ T1582] usb 2-1: Using ep0 maxpacket: 16 [ 125.770968][ T1582] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 125.785303][ T1582] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.798011][ T1582] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 129 [ 125.813174][ T1582] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 125.824501][ T1582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.839138][ T1582] usb 2-1: config 0 descriptor?? [ 126.262723][ T1582] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0005/input/input11 [ 126.306762][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 126.347655][ T1582] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0005/input/input12 [ 126.441646][ T1582] kye 0003:0458:5013.0005: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 126.908864][ T5897] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 127.068857][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 127.076359][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.089256][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.101585][ T5897] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 127.111194][ T5897] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 127.119761][ T5897] usb 4-1: Manufacturer: syz [ 127.127128][ T5897] usb 4-1: config 0 descriptor?? [ 127.171716][ T778] usb 3-1: USB disconnect, device number 14 [ 127.195634][ T1582] usb 2-1: USB disconnect, device number 12 [ 127.558886][ T778] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 127.623947][ T5897] usbhid 4-1:0.0: can't add hid device: -71 [ 127.633956][ T5897] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 127.650915][ T5897] usb 4-1: USB disconnect, device number 22 [ 127.680466][ T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 127.739617][ T778] usb 3-1: Using ep0 maxpacket: 16 [ 127.755345][ T778] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.773077][ T778] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.786734][ T778] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.796956][ T778] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 127.806826][ T778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.831121][ T778] usb 3-1: config 0 descriptor?? [ 127.872294][ T43] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 127.900630][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.931358][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.942586][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 127.956340][ T43] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 127.965967][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.980206][ T43] usb 1-1: config 0 descriptor?? [ 128.254924][ T778] waltop 0003:172F:0034.0006: unknown main item tag 0x0 [ 128.262153][ T778] waltop 0003:172F:0034.0006: unknown main item tag 0x0 [ 128.270868][ T778] waltop 0003:172F:0034.0006: unknown main item tag 0x0 [ 128.278024][ T778] waltop 0003:172F:0034.0006: unknown main item tag 0x0 [ 128.285724][ T778] waltop 0003:172F:0034.0006: unknown main item tag 0x0 [ 128.296110][ T778] waltop 0003:172F:0034.0006: hidraw0: USB HID v0.05 Device [HID 172f:0034] on usb-dummy_hcd.2-1/input0 [ 128.388850][ T1582] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 128.456374][ T6375] program syz.2.140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.468467][ T9] usb 3-1: USB disconnect, device number 15 [ 128.541040][ T1582] usb 4-1: config 0 has an invalid descriptor of length 80, skipping remainder of the config [ 128.552810][ T1582] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 128.564311][ T1582] usb 4-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 128.574047][ T1582] usb 4-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 128.582876][ T1582] usb 4-1: Product: syz [ 128.590682][ T1582] usb 4-1: config 0 descriptor?? [ 128.815265][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 128.824985][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 128.836376][ T43] usb 1-1: USB disconnect, device number 20 [ 129.185285][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 129.328877][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 129.439246][ T43] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 129.460279][ T9] usb 2-1: device descriptor read/64, error -71 [ 129.507894][ T6426] Unsupported ieee802154 address type: 0 [ 129.578994][ T43] usb 3-1: device descriptor read/64, error -71 [ 129.708922][ T1582] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 129.718909][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 129.820372][ T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 129.848870][ T9] usb 2-1: device descriptor read/64, error -71 [ 129.861231][ T1582] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.872468][ T1582] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.882441][ T1582] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.895435][ T1582] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.904652][ T1582] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.914994][ T1582] usb 1-1: config 0 descriptor?? [ 129.958869][ T43] usb 3-1: device descriptor read/64, error -71 [ 129.959325][ T9] usb usb2-port1: attempt power cycle [ 130.069388][ T43] usb usb3-port1: attempt power cycle [ 130.318862][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 130.330800][ T1582] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 130.345226][ T1582] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 130.359915][ T9] usb 2-1: device descriptor read/8, error -71 [ 130.428891][ T43] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 130.449954][ T43] usb 3-1: device descriptor read/8, error -71 [ 130.591338][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.600291][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 130.600799][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.619997][ T9] usb 2-1: device descriptor read/8, error -71 [ 130.621909][ T778] usb 1-1: USB disconnect, device number 21 [ 130.688962][ T43] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 130.710335][ T43] usb 3-1: device descriptor read/8, error -71 [ 130.739821][ T9] usb usb2-port1: unable to enumerate USB device [ 130.819337][ T43] usb usb3-port1: unable to enumerate USB device [ 131.180749][ T778] usb 4-1: USB disconnect, device number 23 [ 131.441125][ T6435] overlayfs: missing 'lowerdir' [ 131.458923][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 131.618928][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 131.626333][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 131.635760][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.646814][ T9] usb 1-1: config 0 descriptor?? [ 131.656371][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 132.143471][ T6437] program syz.1.158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.484522][ T6449] input: syz1 as /devices/virtual/input/input14 [ 132.592959][ T6454] netlink: 168 bytes leftover after parsing attributes in process `syz.1.166'. [ 132.673404][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.683163][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.693117][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.702853][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.733721][ T9] gspca_sonixj: reg_w1 err -71 [ 132.759114][ T9] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 132.787851][ T6433] usb 1-1: USB disconnect, device number 22 [ 132.858953][ T1582] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 133.031083][ T1582] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.040599][ T1582] usb 2-1: not running at top speed; connect to a high speed hub [ 133.049721][ T1582] usb 2-1: config 13 has an invalid interface number: 120 but max is 0 [ 133.058183][ T1582] usb 2-1: config 13 has no interface number 0 [ 133.065806][ T1582] usb 2-1: config 13 interface 120 has no altsetting 0 [ 133.076563][ T1582] usb 2-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=a1.c9 [ 133.085871][ T1582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.094090][ T1582] usb 2-1: Product: syz [ 133.098270][ T1582] usb 2-1: Manufacturer: syz [ 133.103080][ T1582] usb 2-1: SerialNumber: syz [ 133.199183][ T778] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 133.213950][ T30] audit: type=1400 audit(1762589829.005:3): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6465 comm="syz.2.170" [ 133.321603][ T6467] usb usb8: usbfs: process 6467 (syz.2.170) did not claim interface 0 before use [ 133.347927][ T1582] usb 2-1: USB disconnect, device number 17 [ 133.359005][ T778] usb 4-1: Using ep0 maxpacket: 8 [ 133.372023][ T778] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 133.382577][ T778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.391284][ T778] usb 4-1: Product: syz [ 133.395926][ T778] usb 4-1: Manufacturer: syz [ 133.401185][ T778] usb 4-1: SerialNumber: syz [ 133.404265][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.625386][ T778] mxuport 4-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 133.638631][ T778] mxuport 4-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 133.647930][ T778] mxuport 4-1:254.0: probe with driver mxuport failed with error -71 [ 133.663679][ T778] usb 4-1: USB disconnect, device number 24 [ 134.159172][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 134.328878][ T1582] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 134.339666][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 134.348201][ T9] usb 2-1: can't read configurations, error -61 [ 134.469298][ T1582] usb 3-1: device descriptor read/64, error -71 [ 134.478935][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 134.631340][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 134.639112][ T9] usb 2-1: can't read configurations, error -61 [ 134.645906][ T9] usb usb2-port1: attempt power cycle [ 134.708848][ T1582] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 134.838946][ T1582] usb 3-1: device descriptor read/64, error -71 [ 134.950115][ T1582] usb usb3-port1: attempt power cycle [ 134.989073][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 135.011952][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 135.020768][ T9] usb 2-1: can't read configurations, error -61 [ 135.158931][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 135.183815][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 135.191851][ T9] usb 2-1: can't read configurations, error -61 [ 135.198884][ T9] usb usb2-port1: unable to enumerate USB device [ 135.288914][ T1582] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 135.309514][ T1582] usb 3-1: device descriptor read/8, error -71 [ 135.378865][ T43] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 135.538906][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 135.547943][ T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 135.557150][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.558944][ T1582] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 135.566544][ T43] usb 4-1: Product: syz [ 135.579171][ T43] usb 4-1: Manufacturer: syz [ 135.583811][ T43] usb 4-1: SerialNumber: syz [ 135.589708][ T1582] usb 3-1: device descriptor read/8, error -71 [ 135.592908][ T43] usb 4-1: config 0 descriptor?? [ 135.699263][ T1582] usb usb3-port1: unable to enumerate USB device [ 135.803288][ T43] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 135.856963][ T6486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.867427][ T6486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.235533][ T43] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 136.261846][ T43] usb 4-1: USB disconnect, device number 25 [ 136.618971][ T43] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 136.748915][ T43] usb 4-1: device descriptor read/64, error -71 [ 136.961856][ T6494] netlink: 132 bytes leftover after parsing attributes in process `syz.1.179'. [ 136.990302][ T43] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 137.128856][ T43] usb 4-1: device descriptor read/64, error -71 [ 137.239161][ T43] usb usb4-port1: attempt power cycle [ 137.329024][ T778] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 137.478861][ T778] usb 2-1: Using ep0 maxpacket: 32 [ 137.485727][ T778] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 137.493907][ T778] usb 2-1: config 0 has no interface number 0 [ 137.500238][ T5897] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 137.508373][ T778] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 137.520769][ T778] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 137.535733][ T778] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 137.545104][ T778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.553205][ T778] usb 2-1: Product: syz [ 137.557389][ T778] usb 2-1: Manufacturer: syz [ 137.562221][ T778] usb 2-1: SerialNumber: syz [ 137.569169][ T778] usb 2-1: config 0 descriptor?? [ 137.578918][ T43] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 137.599511][ T43] usb 4-1: device descriptor read/8, error -71 [ 137.678981][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 137.686619][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.697321][ T5897] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 137.706600][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.715035][ T5897] usb 3-1: Product: syz [ 137.720113][ T5897] usb 3-1: Manufacturer: syz [ 137.724768][ T5897] usb 3-1: SerialNumber: syz [ 137.733980][ T5897] usb 3-1: config 0 descriptor?? [ 137.781015][ T6494] overlayfs: failed to resolve '/%ÌÊž': -2 [ 137.788992][ T6494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.799469][ T6494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.811373][ T778] radio-si470x 2-1:0.35: this is not a si470x device. [ 137.858953][ T43] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 137.881260][ T43] usb 4-1: device descriptor read/8, error -71 [ 137.989175][ T43] usb usb4-port1: unable to enumerate USB device [ 138.012159][ T778] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 138.151514][ T5897] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 138.229937][ T778] usb 2-1: USB disconnect, device number 22 [ 138.383929][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.390660][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.615448][ T5897] usb 3-1: USB disconnect, device number 24 [ 138.812643][ T6498] netlink: 48 bytes leftover after parsing attributes in process `syz.1.181'. [ 138.823324][ T6498] netlink: 48 bytes leftover after parsing attributes in process `syz.1.181'. [ 139.240069][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 139.404505][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 139.413895][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.419271][ T5897] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 139.429740][ T9] usb 2-1: Product: syz [ 139.433956][ T9] usb 2-1: Manufacturer: syz [ 139.439224][ T9] usb 2-1: SerialNumber: syz [ 139.580827][ T5897] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 139.591673][ T5897] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 139.601097][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.621723][ T5897] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 139.768878][ T5896] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 139.854755][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 139.867084][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 139.931245][ T5896] usb 4-1: config 1 has an invalid descriptor of length 222, skipping remainder of the config [ 139.941945][ T5896] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.955063][ T5896] usb 4-1: config 1 interface 0 has no altsetting 0 [ 139.963968][ T5896] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 139.973133][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.983379][ T5896] usb 4-1: Product: syz [ 139.988064][ T5896] usb 4-1: Manufacturer: syz [ 139.992955][ T5896] usb 4-1: SerialNumber: syz [ 140.171126][ T6517] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 140.207656][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.216823][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.229410][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.238854][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.249834][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.259455][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.283010][ T5896] pxrc 4-1:1.0: Could not find endpoint [ 140.292588][ T5896] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 140.304038][ T5896] usb 4-1: USB disconnect, device number 30 [ 140.700246][ T5897] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 140.708910][ T5897] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 140.716010][ T5897] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 140.925240][ T5865] usb 3-1: USB disconnect, device number 25 [ 141.099014][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 141.170489][ T6524] xt_HMARK: spi-set and port-set can't be combined [ 141.505704][ T6528] netlink: 42496 bytes leftover after parsing attributes in process `syz.2.192'. [ 141.582912][ T6530] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.193'. [ 141.596511][ T6530] batadv_slave_0: entered promiscuous mode [ 141.721252][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 141.735295][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 141.748137][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 141.760219][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 141.771923][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 141.785935][ T9] usb 2-1: USB disconnect, device number 23 [ 142.000414][ T6534] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 142.417728][ T6529] batadv_slave_0: left promiscuous mode [ 142.430185][ T778] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 142.544603][ T5819] ------------[ cut here ]------------ [ 142.550710][ T5819] WARNING: ./include/linux/ns_common.h:255 at free_nsproxy+0x415/0x560, CPU#0: syz-executor/5819 [ 142.562025][ T5819] Modules linked in: [ 142.566172][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 142.575826][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.586176][ T5819] RIP: 0010:free_nsproxy+0x415/0x560 [ 142.591582][ T5819] Code: 85 ed 0f 8e be 00 00 00 e8 48 4d 33 00 48 8b 3d 71 71 32 11 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 01 77 8e 00 e8 2c 4d 33 00 90 <0f> 0b 90 e9 ba fc ff ff e8 1e 4d 33 00 4c 89 ff be 03 00 00 00 e8 [ 142.612213][ T5819] RSP: 0018:ffffc90003f9fcf0 EFLAGS: 00010293 [ 142.618709][ T5819] RAX: ffffffff818e8304 RBX: ffff888065649270 RCX: ffff88807c849e80 [ 142.627062][ T5819] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 142.628884][ T778] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 142.635329][ T5819] RBP: 00000000ffffffff R08: ffff888027b4c253 R09: 1ffff11004f6984a [ 142.653143][ T778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.654173][ T5819] R10: dffffc0000000000 R11: ffffed1004f6984b R12: dffffc0000000000 [ 142.663294][ T778] usb 4-1: Product: syz [ 142.670151][ T5819] R13: 0000000000000100 R14: ffff888027b4c000 R15: ffff888027b4c250 [ 142.674798][ T778] usb 4-1: Manufacturer: syz [ 142.682973][ T5819] FS: 0000000000000000(0000) GS:ffff888125a79000(0000) knlGS:0000000000000000 [ 142.683001][ T5819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.683017][ T5819] CR2: 00007f5ca32c4207 CR3: 0000000078982000 CR4: 00000000003526f0 [ 142.683037][ T5819] Call Trace: [ 142.683048][ T5819] [ 142.689417][ T778] usb 4-1: SerialNumber: syz [ 142.698000][ T5819] do_exit+0x6b8/0x2300 [ 142.727921][ T5819] ? __pfx_do_exit+0x10/0x10 [ 142.732761][ T5819] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.746533][ T5819] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.752505][ T5819] do_group_exit+0x21c/0x2d0 [ 142.759696][ T5819] __x64_sys_exit_group+0x3f/0x40 [ 142.765870][ T5819] x64_sys_call+0x2210/0x2210 [ 142.771353][ T5819] do_syscall_64+0xfa/0xfa0 [ 142.776572][ T5819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.777311][ T6549] ------------[ cut here ]------------ [ 142.783545][ T5819] ? clear_bhb_loop+0x60/0xb0 [ 142.783587][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.783610][ T5819] RIP: 0033:0x7f9e8698f6c9 [ 142.783629][ T5819] Code: Unable to access opcode bytes at 0x7f9e8698f69f. [ 142.783642][ T5819] RSP: 002b:00007ffc379a1ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 142.783669][ T5819] RAX: ffffffffffffffda RBX: 00007f9e86a11def RCX: 00007f9e8698f6c9 [ 142.783686][ T5819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 142.783700][ T5819] RBP: 0000000000000010 R08: 00007ffc3799fa46 R09: 00007ffc379a2f60 [ 142.783715][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc379a2f60 [ 142.783729][ T5819] R13: 00007f9e86a11d7d R14: 000055558a0e84a8 R15: 00007ffc379a4030 [ 142.783763][ T5819] [ 142.789920][ T6549] WARNING: ./include/linux/ns_common.h:255 at put_mnt_ns+0x152/0x190, CPU#1: syz.2.199/6549 [ 142.789969][ T6549] Modules linked in: [ 142.795155][ T5819] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 142.795177][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 142.795208][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.795225][ T5819] Call Trace: [ 142.795242][ T5819] [ 142.795256][ T5819] dump_stack_lvl+0x99/0x250 [ 142.795296][ T5819] ? __asan_memcpy+0x40/0x70 [ 142.795326][ T5819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.795360][ T5819] ? __pfx__printk+0x10/0x10 [ 142.795483][ T5819] vpanic+0x237/0x6d0 [ 142.795509][ T5819] ? __pfx_vpanic+0x10/0x10 [ 142.795532][ T5819] ? is_bpf_text_address+0x26/0x2b0 [ 142.795581][ T5819] panic+0xb9/0xc0 [ 142.795602][ T5819] ? __pfx_panic+0x10/0x10 [ 142.795645][ T5819] __warn+0x334/0x4c0 [ 142.795667][ T5819] ? free_nsproxy+0x415/0x560 [ 142.795696][ T5819] ? free_nsproxy+0x415/0x560 [ 142.795722][ T5819] report_bug+0x2be/0x4f0 [ 142.795755][ T5819] ? free_nsproxy+0x415/0x560 [ 142.795780][ T5819] ? free_nsproxy+0x415/0x560 [ 142.795803][ T5819] ? free_nsproxy+0x417/0x560 [ 142.795982][ T5819] handle_bug+0x84/0x160 [ 142.796015][ T5819] exc_invalid_op+0x1a/0x50 [ 142.796042][ T5819] asm_exc_invalid_op+0x1a/0x20 [ 142.796068][ T5819] RIP: 0010:free_nsproxy+0x415/0x560 [ 142.796094][ T5819] Code: 85 ed 0f 8e be 00 00 00 e8 48 4d 33 00 48 8b 3d 71 71 32 11 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 01 77 8e 00 e8 2c 4d 33 00 90 <0f> 0b 90 e9 ba fc ff ff e8 1e 4d 33 00 4c 89 ff be 03 00 00 00 e8 [ 142.796118][ T5819] RSP: 0018:ffffc90003f9fcf0 EFLAGS: 00010293 [ 142.796139][ T5819] RAX: ffffffff818e8304 RBX: ffff888065649270 RCX: ffff88807c849e80 [ 142.796190][ T5819] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 142.796208][ T5819] RBP: 00000000ffffffff R08: ffff888027b4c253 R09: 1ffff11004f6984a [ 142.796228][ T5819] R10: dffffc0000000000 R11: ffffed1004f6984b R12: dffffc0000000000 [ 142.796247][ T5819] R13: 0000000000000100 R14: ffff888027b4c000 R15: ffff888027b4c250 [ 142.796276][ T5819] ? free_nsproxy+0x414/0x560 [ 142.796316][ T5819] do_exit+0x6b8/0x2300 [ 142.796370][ T5819] ? __pfx_do_exit+0x10/0x10 [ 142.796417][ T5819] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.796450][ T5819] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.796491][ T5819] do_group_exit+0x21c/0x2d0 [ 142.796537][ T5819] __x64_sys_exit_group+0x3f/0x40 [ 142.796573][ T5819] x64_sys_call+0x2210/0x2210 [ 142.796612][ T5819] do_syscall_64+0xfa/0xfa0 [ 142.796652][ T5819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.796679][ T5819] ? clear_bhb_loop+0x60/0xb0 [ 142.796712][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.796739][ T5819] RIP: 0033:0x7f9e8698f6c9 [ 142.796762][ T5819] Code: Unable to access opcode bytes at 0x7f9e8698f69f. [ 142.796777][ T5819] RSP: 002b:00007ffc379a1ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 142.796803][ T5819] RAX: ffffffffffffffda RBX: 00007f9e86a11def RCX: 00007f9e8698f6c9 [ 142.796822][ T5819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 142.796839][ T5819] RBP: 0000000000000010 R08: 00007ffc3799fa46 R09: 00007ffc379a2f60 [ 142.796857][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc379a2f60 [ 142.796977][ T5819] R13: 00007f9e86a11d7d R14: 000055558a0e84a8 R15: 00007ffc379a4030 [ 142.797025][ T5819] [ 142.803352][ T5819] Kernel Offset: disabled