last executing test programs: 16.376543582s ago: executing program 1 (id=468): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, &(0x7f00000000c0)) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001600)=""/4103, 0x1007, 0x97) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000007b0000007b00000003000300000f02000000010000000500000002000000010000000600000005000000050000000900000046470000f9040c0000000100000f0100000005000000090000000befff000109000000000002b67a001010000000000000000000000300000000030000000100000009000000060000000000000c02000000"], &(0x7f0000000140)=""/57, 0xfffffffffffffebb, 0x39, 0x1, 0x0, 0xb084bc3c7a3a145b}, 0x28) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, r0, 0x0) 13.457760648s ago: executing program 1 (id=474): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffffc, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x1, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x0, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x1cb, 0x1, 0x4, 0x3, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x20000601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x803, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x55, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000500), 0xb53a, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x1f, 0x1, 0x4}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x52af7000) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000600000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000, 0x3, 0x2}) 12.121574134s ago: executing program 3 (id=477): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) dup(r1) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x8000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000434000/0x4000)=nil) socket(0xa, 0x3, 0x3a) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000100)={0x3, 0x2}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) open_tree(r6, &(0x7f0000000640)='\x00', 0x81101) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000092e59e208c106901b9750102030109022b0001000010000904db00020dfa00030915800000e600fc000705db224370bf09050b02"], 0x0) 10.491518197s ago: executing program 1 (id=480): socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c0001"], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0xffffffffffffff93) write$tun(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) setitimer(0x1, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) 7.344954255s ago: executing program 3 (id=488): connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e20, 0x7fff, @mcast1, 0x8}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x2, 0x48845) syz_open_procfs$namespace(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="71e67a15", 0x4) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='=', 0x11}]) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) nanosleep(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lstat(0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffef0}, 0x24000811) io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) 7.262155763s ago: executing program 4 (id=489): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xc, 0x2, 0xb00020000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffc, 0x2000000009, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 7.127554058s ago: executing program 0 (id=490): syz_usb_connect(0x0, 0xe4, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES8], 0x0) syz_usb_connect$uac1(0x3, 0xa6, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x7f, 0x10, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x9}, [@mixer_unit={0x7, 0x24, 0x4, 0x1, 0x4, "ae88"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x304, 0x4, 0x6, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0x2, 0x2, "26051305bb"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x1, 0x3, {0x7, 0x25, 0x1, 0x2, 0x4, 0xbd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x4, 0x38, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x2, 0x3, "36a66c364b14"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x3, 0x7, {0x7, 0x25, 0x1, 0x1, 0x8, 0x2}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x81, 0x5, 0x1, 0x20, 0x2}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0x34, &(0x7f0000000280)=@string={0x34, 0x3, "ee9611bd4e108f46ebe4e294fde69e259b7faf85f90500f132d26dffb9d2159fd76c388d2c5025e2d4c171a3429d7e57e57f"}}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)='\t', 0x1}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/185, &(0x7f0000000140)=""/92, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x481, 0x0) inotify_init1(0xc00) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r3, 0x0, 0x1, 0x0, 0x0, 0x2586a0, 0x37ab08}) 6.705367172s ago: executing program 3 (id=492): socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x20, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000400)}, {0x0}], 0x2) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="b70b2cbd7000fcdbdf250f0000000e0002"], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x2000c88c) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90) syz_open_procfs(0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) setitimer(0x2, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 6.230286415s ago: executing program 4 (id=493): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@gettaction={0x78, 0x32, 0x1, 0x72bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r6, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009700c0ffffff"], 0x0, 0xf}, 0x94) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000540)={&(0x7f0000000500)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x7, 0x0, [], [0x10, 0x0, 0x0, 0x3]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x12) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={r6, r8, 0x9, 0x7, 0x1}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x60, 0x4a, 0x10, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, [@IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x4885}, 0x40002) 6.203142985s ago: executing program 1 (id=494): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000100", @ANYRES32, @ANYBLOB="14000300000000000000000000f5ffffff00003414000200fe88"], 0x64}}, 0x4008000) 6.009078713s ago: executing program 1 (id=495): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) inotify_init() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000340)="7d55220eb6ac87faee2a398a819140e1c1dab35c9ddf2a8f86f8195e1f26017937315c14c0013c4843862acfae3fc5", 0x2f}, {&(0x7f0000000480)="d98b87038ef11b75e8927c25043d9db4561d2d66ee90452567c69f4891eb955a41205629b7f104cd5a6a4e0a9a907670082eb6fa278568bd09a627a11754addc4559d51e8adb68c6e9f13cf9041f872e6f84338f5dfaf7036dc93b435a", 0x5d}, {&(0x7f0000000500)="c0a20f494d3bfb2899aef6c520a6f63e1d15fa84c6452e883fbf5aa89ad46b5de8dc8263d3fac4fef47fe5df7ea49b8a9783e786d43bb45811c0cdcf53fb5ca3fe450559bc2f87d1776141b4f0f549b1cf36b380ee53613e974ea952af787dbce8874a63a8b78dba1b5e972b56f4f1a44ae3bb87f3a4aed2dfc409c366dff8a92632521a870beb14112be5f6d703324290128e7ea68bf8d24813fa63c7ce710da1903eb82a3ce2d86eedaefd5b7b537bada427944fb559b72ac30eb54921", 0xbe}, {&(0x7f00000005c0)="e081b03463da2a0c9c7775965348eab1ce28eaba0e5e8ec004eb8f6975940316a412bfc31a064465457b03a91604415c710add3145a6e289b72116ed8b45205d848a054d01d86b200ac6dd8c89e97a1b9d8ce95a24cd68c9ae08968304fae4ebedba7896c7326354ae3df6192e36fc8463dd460210d5693ba175b8dd24958e1489363d73060e84e858cbcf9ffd8923b0ca98c388b5cc38c185224d250166afb609f7d6888a0eaa25468701e83f52fc90309c358867c286505ff894a962e39fa3fb8774a9adf7a4c44aacb1481a263039a53a93af62a5c797d6a0d9fb45397c921ead166a01b2ba23233f23", 0xeb}, {&(0x7f00000006c0)="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", 0xff0}, {&(0x7f00000017c0)="3857b50c99c7cc92be076b51673c5b5b7d3cec014fda14c9b2fd6eabaa9446149cd7243bdde89a2a2421cb5a969181951e2c57bf9180b867ec444b59c9fe349de92032123d08690835d750745a3a4ba71b1b7e0bce08a072b6384012d22eab9e", 0x60}], 0x6, &(0x7f0000001700)=ANY=[@ANYBLOB="4c0000001701000002000000005ded0c526c33f66a1f31c856c33fd718122e3861a071fbcb0f2cbbb9e1f3aab45cb89d7d7e57ceb5573fd2e2b0f64b2383a11b2099bc2bd0147d8b0010000000170100000400000006000000000000"], 0x5c, 0x50}, 0x20040000) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect(0x1, 0x15, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x5, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_io_uring_setup(0x495, &(0x7f0000000540)={0x0, 0xe140, 0x0, 0x0, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x100000, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0xa, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xf000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0xe000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x5000, 0x7}, 0x80000031, 0x0, 0xdddd0000, 0x2024, 0x0, 0x1500, 0x3000, [0x6800000000000000, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.482955814s ago: executing program 3 (id=497): syz_usb_connect(0x3, 0x36, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x8000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0xffffffff, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 4.046872453s ago: executing program 2 (id=501): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}, {0x95, 0x0, 0x0, 0x2800}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.921760487s ago: executing program 0 (id=502): connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e20, 0x7fff, @mcast1, 0x8}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x2, 0x48845) syz_open_procfs$namespace(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0", 0x6) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='=', 0x11}]) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) nanosleep(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lstat(0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffef0}, 0x24000811) io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) 3.920028512s ago: executing program 4 (id=503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc0, 0x13, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x84, 0x8, "6b29d747a350a3b9cb57edcee2dd798b8b6c145ea96e51f08b5a60f788fd302bd4489756ec734885c90211d2152d71e37c3e5576a80361018c27dcb1f5faf10a57c0f5ce032b700b898e3a8391152bf5b6527aa7dae48000dd84091a7326e0b287c74f817adef9d3d89d731865432988090d343d09c0a4bfd65f8a2a8b5a9833"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 3.708697778s ago: executing program 3 (id=504): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0x13}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x11, 0x8003, 0x2, 0x5, 0xfff, 0xfffffe0000000001, 0xfa11, 0xdb57}, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = socket(0x200000000000011, 0x2, 0xd) r4 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000180)) write$binfmt_script(r4, &(0x7f0000000540)={'#! ', './file0'}, 0xb) pwrite64(r4, &(0x7f0000000100)="b27cd432", 0x4, 0x1) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getsockopt$packet_int(r3, 0x107, 0xe, 0x0, &(0x7f00000000c0)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x22ac0, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0xfffffffffffffc8f, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0xfffffffd, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 3.708223405s ago: executing program 2 (id=505): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xc, 0x2, 0xd00000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffc, 0x2000000009, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.647506173s ago: executing program 4 (id=506): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4, 0x3, 0x2, 0xfffffffffffffff7, 0x4, 0xff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000000000020000610000000400d14b5767c416c310a85534503ee4c2e4b676291573e40aec2f6523804228d58492c14ac4f2c6ffe3d3ae6bc975bde311d03a15885c4fcff9496f6752dea2467753cb10adfb86f5afead79e822ed34f39cebd3e0000", @ANYRES32=0x0, @ANYBLOB="00a30000440c000010002200b5687662d463809dc5c012b5"], 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d000000000001"], 0x38}}, 0x0) 3.253707121s ago: executing program 0 (id=507): r0 = socket(0x10, 0x2, 0x0) (async) r1 = epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0xa00) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x86c9460748f085ce}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000200)={0xe0000003}) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001740)={@cgroup, 0xffffffffffffffff, 0xf}, 0x20) (async) poll(&(0x7f00000000c0)=[{r4, 0x1009}], 0x1, 0x8000007) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0xfb, 0x53, 0x3, 0x0, @loopback, @mcast2={0xff, 0x5}, 0x8, 0x700, 0x8, 0x3ff}}) 2.866179782s ago: executing program 2 (id=508): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 2.670104488s ago: executing program 4 (id=509): r0 = syz_io_uring_setup(0x5963, &(0x7f0000000000)={0x0, 0x7e19, 0x1000, 0x1, 0x171}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x412d, 0x653a, 0xa7, &(0x7f0000000100)={[0xc04]}, 0x8) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000001240)={&(0x7f0000002000)={[{&(0x7f0000000140)="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", 0xe00}, {&(0x7f0000001140)="9af84450a49aac1e6cfa1d4cd31534619c8bc8d29a3afe922db4972eaece58f0d41e85d9f09d76d4cca51f5f1b1f3b338214b5ad599ff39c237b1c1843c095f8fc6a82a043cdbfe75c7cd0476a5df9b86271d1d3082f44842b1f0394e997855f58b4246168936dd5788627655d2927055a18395613e4d3805012f2dd3201397bab722b12d69ffb0c2f142eeb1b0098c1085b1922c0844071cc39aab3134cc38713a3ac2e60766f65044b94aac51e834be1bae7a43caadfae9bb29b2bccc12cce9660fbe864cc0b9cfdae616779c0229410e1936ca9492c7dd4e5fbf26236671c625b5ef9e9f0dca869de6bbd848fdc27848396516b771a", 0xf7, 0x1}]}, 0x2, 0x2}, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x100, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000012c0)) io_uring_enter(r0, 0x4dfc, 0xac9, 0x2, &(0x7f0000001300)={[0xfff]}, 0x8) pipe2$9p(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001380)=0x0) r4 = getgid() write$P9_RSTATu(r2, &(0x7f00000013c0)={0x6a, 0x7d, 0x1, {{0x0, 0x48, 0xb984, 0x7, {0x1, 0x1, 0x5}, 0x50000000, 0x6, 0x79d, 0x6, 0x6, '.{]{##', 0x1, '\x00', 0xd, '/dev/net/tun\x00', 0x1, '\x00'}, 0xd, '/dev/net/tun\x00', r3, r4, 0xee00}}, 0x6a) r5 = socket$inet_smc(0x2b, 0x1, 0x0) accept$inet(r5, &(0x7f0000001440)={0x2, 0x0, @multicast1}, &(0x7f0000001480)=0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001500), r6) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x78, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0xc}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x78}}, 0x40081) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001680), 0x2) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/key-users\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000001700)={0x0, 0x4, 0x0, [0x7, 0x0, 0x2, 0x6, 0x8], [0xfbb, 0x0, 0x6, 0x10001, 0x8, 0x5, 0x2ca, 0x10001, 0xfffffffffffffffa, 0x0, 0xddf, 0xad, 0xdc5a, 0x2, 0x5, 0xfffffffffffffffe, 0x6, 0xdcb7, 0x3, 0x9, 0x800, 0x4, 0x5, 0x7, 0xfffffffffffffe01, 0x81, 0x100000001, 0x7, 0x5, 0x3f8, 0xc000000000000, 0x7f, 0x80, 0x7, 0x80, 0x9, 0x44f9113f, 0x7, 0x6, 0x800, 0x27336842, 0x9, 0x3, 0xfffffffffffffffe, 0x1, 0x2, 0xa91, 0x7fffffff, 0x9, 0x7f, 0x0, 0x59e, 0x7, 0x7fffffffffffffff, 0x5, 0x3, 0x4, 0x2, 0x4, 0x5116, 0x2, 0x9, 0x9, 0x400, 0x10, 0xe5, 0x6, 0x9, 0x6c0, 0x9, 0x5f1, 0x8, 0x6, 0x22d0, 0x2, 0xbdf5, 0xb79e, 0x198b7a5c, 0x2, 0x40, 0x6, 0x8000000000000001, 0x401, 0x8, 0x3, 0x6, 0x6, 0x0, 0x5, 0x8, 0xb6cc, 0x5, 0x3, 0x5, 0x4, 0x6, 0x7, 0xd, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x800, 0x1, 0x401, 0x6, 0x9, 0x9, 0x5, 0x7bfe, 0x7fffffff, 0x7, 0x0, 0xffffffffffffffff, 0x100, 0xa1, 0x101, 0x8, 0x4, 0x5]}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000001b40)={'ah\x00'}, &(0x7f0000001b80)=0x1e) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r8, 0x21, &(0x7f0000001bc0)={0x0, 0x74f8, 0x8000, 0x0, 0x241}, 0x1) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000001c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x8, 0xf, 0x9, 0x9}, {0x9, 0x5, 0xf, 0x2, 0x10, 0x51, 0x3, 0xa}, {0x9, 0x5, 0x80, 0x3, 0x40, 0x5, 0x6, 0x80}}}}}}]}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000001c80), 0x3) ioctl$SNDCTL_TMR_TIMEBASE(r8, 0xc0045401, &(0x7f0000001cc0)=0x339) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r8, 0xc01064c7, &(0x7f0000001d40)={0x1, 0x0, &(0x7f0000001d00)=[0x0]}) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{r8, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001dc0)=r8}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000030c0)={{r8, 0xffffffffffffffff}, &(0x7f0000003040), &(0x7f0000003080)='%ps \x00'}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003100)={0x1b, 0x0, 0x0, 0x9, 0x0, r9, 0x0, '\x00', 0x0, r8, 0x4, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003240)={0x11, 0x2, &(0x7f0000001e40)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa}], &(0x7f0000001e80)='syzkaller\x00', 0x6, 0xc7, &(0x7f0000001ec0)=""/199, 0x40f00, 0x1, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000001fc0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000003000)={0x2, 0x0, 0xd340, 0x20000}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000003180)=[r10, r11], &(0x7f00000031c0)=[{0x2, 0x4, 0x7, 0x9}, {0x1, 0x2, 0x7, 0xa}, {0x2, 0x4, 0xb}, {0x1, 0x4, 0x10, 0xa}, {0x4, 0x3, 0xd, 0x9}, {0x4, 0x5, 0x7, 0xa}, {0x3, 0x4, 0x2, 0xb}, {0x1, 0x2, 0x10, 0xa}], 0x10, 0x3}, 0x94) 2.53750043s ago: executing program 2 (id=510): r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x9}}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000600014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r4 = socket(0x10, 0x803, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x3e0, 0x228, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1, 0x5}, 0x0, 0x1e0, 0x200, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x40, 0x1ff], 0x9, 0x30, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private0, @remote, @private1, @private2, @remote, @mcast2, @empty, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @private1], 0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x440) sendto(r4, &(0x7f00000000c0)="120000001200ffcab2c97e3375c581010000", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="6d02000000000000000003bdd994e969796c"], 0x18}}, 0x0) 2.379279569s ago: executing program 2 (id=511): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="000000000000ef00140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 2.292127731s ago: executing program 3 (id=512): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x9003, 0x1, 0x286, [0x4000000002c0, 0x4000000002f0], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/646]}, 0x2fe) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000000000180c280"], 0x40}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix={0x5, 0x1ec0000, 0x33565348, 0x5, 0x9, 0xddc8, 0xb, 0x2, 0x0, 0x6, 0x2, 0x3}}) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000001c0)={0x0, 0xc, 0x2, &(0x7f0000000080)={0x11, "497d59b206a5b8c57da372261092c071d7c1486b634a572c55cf75ef98e6068fd3"}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x1c, 0x0, &(0x7f0000000740)={0x0, 0xa, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x9}}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(0xffffffffffffffff, &(0x7f0000000200)='7', 0x1) write$char_usb(r5, &(0x7f0000000080)='V', 0x1) syz_usb_disconnect(r4) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x20001, 0x8) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYRES8=r2, @ANYRES32=r8, @ANYRES64=r1, @ANYBLOB="fc02000000000000000000000000000100000000320000000a0101000000000000000000000000000400000000000003000000000000000000000000000000000400000000004000ffffffddffffffffb39d2ecfaedb4ed79c6791b03a35f6feffffffffffffff7f0000000000000000000000000000000000000000cc000000000000000000000000000000f6000000000000000000000000000000fdffffff0a0001fe5c000000000000005f001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000980000008000000093875f2d67a6a77871001c000400feff4e244e200000ff"], 0x16c}}, 0x804) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{0x80000000, 0x0}, {0x80000000}}]}) pread64(r6, 0x0, 0x0, 0xe) syz_usb_connect(0x0, 0x3d, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022b00010000000009049c0002010351000905031300000000000725010f00000009050f00"], 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000400)={r10, 0x0, &(0x7f0000000100)=[{}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f000000a300)={{0x80000000, 0x0, 0x2, [0x1, 0x8]}, {0x80000000, r9, 0x0, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]}) r12 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f0000000480)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r12, 0xc0347c03, &(0x7f0000000400)={{0x80000000, r11, 0x6, [0x0, 0x80000000]}, {0x80000000, r13, 0x2, [0x4, 0xe4c]}, 0x4, [0xffffffe]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000100)}) 2.145671576s ago: executing program 2 (id=513): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xbc, 0xb7, 0xf6, 0x20, 0xfe9, 0xd501, 0x2350, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x7b, 0xe3, 0x79}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b240201"], 0x0) writev(r0, &(0x7f00000015c0)=[{&(0x7f0000000480)="a7", 0x1}], 0x1) 2.070990368s ago: executing program 0 (id=514): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@gettaction={0x78, 0x32, 0x1, 0x72bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r6, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009700c0ffffff"], 0x0, 0xf}, 0x94) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000540)={&(0x7f0000000500)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x7, 0x0, [], [0x10, 0x0, 0x0, 0x3]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x12) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={r6, r8, 0x9, 0x7, 0x1}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x60, 0x4a, 0x10, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, [@IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x4885}, 0x40002) 1.317750671s ago: executing program 4 (id=515): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f0000000200)=0x6e, 0x80800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) accept(r7, 0x0, 0x0) shutdown(r7, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r8, 0x0, 0x0, 0x40800) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r8, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) 1.294777263s ago: executing program 1 (id=516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r6, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r7, 0x6, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc0, 0x13, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x84, 0x8, "6b29d747a350a3b9cb57edcee2dd798b8b6c145ea96e51f08b5a60f788fd302bd4489756ec734885c90211d2152d71e37c3e5576a80361018c27dcb1f5faf10a57c0f5ce032b700b898e3a8391152bf5b6527aa7dae48000dd84091a7326e0b287c74f817adef9d3d89d731865432988090d343d09c0a4bfd65f8a2a8b5a9833"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 829.762582ms ago: executing program 0 (id=517): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000001300)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x198, 0x0, 0x0, 0x0, 0x9dd6, 0x0, 0x8, 0x2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) keyctl$join(0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=518): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, &(0x7f00000000c0)) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001600)=""/4103, 0x1007, 0x97) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000007b0000007b00000003000300000f02000000010000000500000002000000010000000600000005000000050000000900000046470000f9040c0000000100000f0100000005000000090000000befff000109000000000002b67a001010000000000000000000000300000000030000000100000009000000060000000000000c0200000000"], 0x0, 0xfffffffffffffebb, 0x0, 0x1, 0x0, 0xb084bc3c7a3a145b}, 0x28) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, r0, 0x0) kernel console output (not intermixed with test programs): usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 137.589259][ T9] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.623914][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 137.631773][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 137.641787][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.654875][ T9] usb 4-1: config 0 descriptor?? [ 137.721334][ T6484] input: syz0 as /devices/virtual/input/input7 [ 137.784780][ T5871] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 3 proto 3 vid 0x0525 pid 0xA4A8 [ 137.854427][ T5871] usb 1-1: USB disconnect, device number 14 [ 137.861152][ T5887] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.922269][ T5871] usblp0: removed [ 137.978714][ T5970] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 138.031476][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.042777][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.052724][ T5887] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 138.061941][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.074092][ T5887] usb 2-1: config 0 descriptor?? [ 138.146208][ T5970] usb 5-1: Using ep0 maxpacket: 16 [ 138.153397][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 138.170813][ T5970] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 138.183938][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.199746][ T5970] usb 5-1: Product: syz [ 138.207005][ T5970] usb 5-1: Manufacturer: syz [ 138.217749][ T5970] usb 5-1: SerialNumber: syz [ 138.246680][ T5970] usb 5-1: config 0 descriptor?? [ 138.284263][ T5970] hub 5-1:0.0: bad descriptor, ignoring hub [ 138.294522][ T5970] hub 5-1:0.0: probe with driver hub failed with error -5 [ 138.306931][ T5970] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.704844][ T6486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.716602][ T5970] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 138.792097][ T6486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.823670][ T5887] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 138.838640][ T5970] usb 5-1: USB disconnect, device number 10 [ 138.868088][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.926918][ T5887] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 138.956076][ T5887] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 139.015068][ T5887] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 139.056201][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 139.235890][ T5887] usb 2-1: USB disconnect, device number 6 [ 139.266769][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 139.283043][ T10] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 139.291609][ T6499] fido_id[6499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 139.294678][ T10] usb 3-1: config 0 has no interface number 0 [ 139.353856][ T10] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 139.374257][ T10] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 139.389797][ T10] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 139.412332][ T6503] netlink: 'syz.0.145': attribute type 5 has an invalid length. [ 139.420682][ T6503] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.145'. [ 139.528199][ T10] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 139.601354][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 139.610271][ T10] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 139.630478][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 139.689210][ T10] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 139.708643][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.734448][ T9] usb 4-1: USB disconnect, device number 12 [ 139.758918][ T10] usb 3-1: Product: syz [ 139.782421][ T10] usb 3-1: Manufacturer: syz [ 139.796623][ T10] usb 3-1: SerialNumber: syz [ 139.926209][ T10] usb 3-1: config 0 descriptor?? [ 139.979116][ T6493] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 141.267742][ T5871] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 141.506475][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 141.599617][ T5871] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 141.614073][ T5871] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 141.662597][ T5871] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.677662][ T5871] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 141.694340][ T5871] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 141.750859][ T5871] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 141.768105][ T5871] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 141.798953][ T5871] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.853450][ T5871] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 141.905414][ T5871] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 141.933313][ T5871] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 141.958303][ T5871] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 141.971223][ T5871] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.996863][ T5887] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 142.029260][ T5871] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.029830][ T10] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 142.051979][ T5871] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 142.069656][ T10] etas_es58x 3-1:0.219: could not retrieve the product info string [ 142.117529][ T5871] usb 2-1: string descriptor 0 read error: -22 [ 142.126135][ T5871] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 142.149877][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.235327][ T5887] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 142.245151][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.256050][ T5887] usb 1-1: Product: syz [ 142.268615][ T10] usb 3-1: USB disconnect, device number 11 [ 142.274806][ T5871] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 142.282679][ T5887] usb 1-1: Manufacturer: syz [ 142.288081][ T5887] usb 1-1: SerialNumber: syz [ 142.295633][ T10] etas_es58x 3-1:0.219: Disconnecting syz syz [ 142.582263][ T5887] rtl8150 1-1:1.0: couldn't reset the device [ 142.601625][ T5887] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 142.686162][ T5887] usb 1-1: USB disconnect, device number 15 [ 143.436222][ T5887] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.587902][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 143.599975][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.652180][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.662382][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 143.697145][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.722641][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.731628][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 143.749395][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.773046][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.782544][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 143.794031][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.810336][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.819097][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 143.831042][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.841768][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.852096][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 143.864818][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.881483][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.922302][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 143.941936][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.943299][ T5970] usb 2-1: USB disconnect, device number 7 [ 144.165638][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.197478][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 144.245099][ T5887] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.361217][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.387312][ T5887] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 144.412927][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.441352][ T5887] usb 5-1: config 0 descriptor?? [ 145.577273][ T6593] veth1_to_bond: entered allmulticast mode [ 145.603448][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 146.118359][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 146.309385][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 146.402533][ T43] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 146.447620][ T43] usb 4-1: config 0 has no interface number 0 [ 146.468903][ T43] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 146.546659][ T43] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 146.574521][ T43] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 146.661693][ T43] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 146.837540][ T43] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 146.861857][ T6612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.174'. [ 146.880029][ T43] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 146.896679][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.915266][ T43] usb 4-1: Product: syz [ 146.924236][ T43] usb 4-1: Manufacturer: syz [ 146.936882][ T43] usb 4-1: SerialNumber: syz [ 146.955098][ T6612] xt_l2tp: wrong L2TP version: 0 [ 146.957762][ T43] usb 4-1: config 0 descriptor?? [ 146.971953][ T6592] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.042476][ T6612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.174'. [ 148.035389][ T6620] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.177'. [ 148.073399][ T6620] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 148.136984][ T5887] usbhid 5-1:0.0: can't add hid device: -71 [ 148.146246][ T5887] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 148.263804][ T5887] usb 5-1: USB disconnect, device number 11 [ 148.674442][ T43] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 148.684623][ T43] etas_es58x 4-1:0.219: could not retrieve the product info string [ 148.728750][ T5887] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 148.826333][ T43] usb 4-1: USB disconnect, device number 13 [ 148.848178][ T43] etas_es58x 4-1:0.219: Disconnecting syz syz [ 148.888702][ T6629] netlink: 536 bytes leftover after parsing attributes in process `syz.3.179'. [ 148.928083][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.977242][ T5887] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 149.009560][ T5887] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 149.066039][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.107514][ T6588] veth1_to_bond: left allmulticast mode [ 149.114286][ T5887] usb 5-1: config 0 descriptor?? [ 149.151478][ T5887] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 149.206400][ T5887] dvb-usb: bulk message failed: -22 (3/0) [ 149.326605][ T5887] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 149.359085][ T5887] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 149.384333][ T5887] usb 5-1: media controller created [ 149.407995][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.460963][ T5887] dvb-usb: bulk message failed: -22 (6/0) [ 149.501321][ T5887] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 149.533454][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 149.582276][ T5887] dvb-usb: schedule remote query interval to 150 msecs. [ 149.599440][ T5887] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 149.657052][ T5921] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 149.822448][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 149.841278][ T5887] dvb-usb: error while querying for an remote control event. [ 150.016936][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 150.022920][ T5887] dvb-usb: error while querying for an remote control event. [ 150.414557][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 150.575617][ T5921] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 150.600041][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.632672][ T5921] usb 3-1: config 0 descriptor?? [ 150.687335][ T6658] kvm: pic: non byte read [ 150.692086][ T6658] kvm: pic: non byte read [ 150.697112][ T6658] kvm: pic: non byte read [ 150.701557][ T6658] kvm: pic: non byte read [ 150.710826][ T6658] kvm: pic: non byte read [ 150.716944][ T6658] kvm: pic: non byte read [ 150.723556][ T6658] kvm: pic: non byte read [ 150.728709][ T6658] kvm: pic: non byte read [ 150.746279][ T6658] kvm: pic: non byte read [ 150.751209][ T6658] kvm: pic: non byte read [ 150.768975][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 150.774767][ T5887] dvb-usb: error while querying for an remote control event. [ 150.881162][ T5921] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 150.925278][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.953389][ T5921] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 150.960631][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 150.961097][ T5921] usb 3-1: media controller created [ 150.988611][ T5887] dvb-usb: error while querying for an remote control event. [ 151.060334][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.176528][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 151.182362][ T5887] dvb-usb: error while querying for an remote control event. [ 151.316853][ T983] usb 5-1: USB disconnect, device number 12 [ 151.761717][ T6639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.814730][ T983] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 151.832270][ T6639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.923829][ T5921] az6027: usb out operation failed. (-71) [ 151.930956][ T5921] stb0899_attach: Driver disabled by Kconfig [ 151.935941][ T5887] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 151.957936][ T5921] az6027: no front-end attached [ 151.957936][ T5921] [ 151.978304][ T5921] az6027: usb out operation failed. (-71) [ 151.997052][ T5921] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 152.043983][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 152.120593][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 152.174117][ T5887] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 152.194839][ T5921] dvb-usb: schedule remote query interval to 400 msecs. [ 152.226485][ T5921] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 152.228669][ T5887] usb 2-1: config 0 has no interface number 0 [ 152.263781][ T5887] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 152.286200][ T5887] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 152.301897][ T5921] usb 3-1: USB disconnect, device number 12 [ 152.376470][ T5887] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 152.403285][ T5887] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 152.462424][ T5887] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 152.525017][ T5887] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 152.529472][ T5921] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 152.546401][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.590433][ T5887] usb 2-1: Product: syz [ 152.613935][ T5887] usb 2-1: Manufacturer: syz [ 152.629950][ T5887] usb 2-1: SerialNumber: syz [ 152.949903][ T5887] usb 2-1: config 0 descriptor?? [ 152.960217][ T6671] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 153.101807][ T6686] veth1_to_bond: entered allmulticast mode [ 153.115659][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.193'. [ 153.373628][ T5921] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 153.565615][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 153.600820][ T5921] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 153.610585][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.657733][ T5921] usb 3-1: config 0 descriptor?? [ 153.757252][ T5921] as10x_usb: device has been detected [ 153.763673][ T5921] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 153.857489][ T5921] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 153.906181][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 153.909976][ T5921] as10x_usb: error during firmware upload part1 [ 153.930962][ T5921] Registered device nBox DVB-T Dongle [ 154.096157][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 154.147394][ T6692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.157848][ T6692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.161466][ T10] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 154.203166][ T10] usb 1-1: config 0 has no interface number 0 [ 154.279389][ T10] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 154.326818][ T10] usb 1-1: config 0 interface 89 has no altsetting 0 [ 154.338461][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 154.347916][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.356735][ T10] usb 1-1: Product: syz [ 154.361235][ T10] usb 1-1: Manufacturer: syz [ 154.371081][ T10] usb 1-1: SerialNumber: syz [ 154.384595][ T10] usb 1-1: config 0 descriptor?? [ 154.393429][ T10] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 154.403982][ T10] em28xx 1-1:0.89: Video interface 89 found: [ 154.465802][ T6700] mmap: syz.3.197 (6700) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.629246][ T5887] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 154.671754][ T5887] etas_es58x 2-1:0.219: could not retrieve the product info string [ 154.868059][ T5887] usb 2-1: USB disconnect, device number 8 [ 154.958828][ T5887] etas_es58x 2-1:0.219: Disconnecting syz syz [ 155.025981][ T10] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 155.026817][ T6688] capability: warning: `syz.0.194' uses deprecated v2 capabilities in a way that may be insecure [ 155.573950][ T10] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 155.592757][ T10] em28xx 1-1:0.89: board has no eeprom [ 155.615027][ T5921] usb 3-1: USB disconnect, device number 13 [ 155.657410][ T10] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 155.668022][ T10] em28xx 1-1:0.89: analog set to bulk mode. [ 155.714682][ T5895] em28xx 1-1:0.89: Registering V4L2 extension [ 155.749692][ T10] usb 1-1: USB disconnect, device number 17 [ 155.793297][ T10] em28xx 1-1:0.89: Disconnecting em28xx [ 155.828907][ T5921] Unregistered device nBox DVB-T Dongle [ 155.856303][ T5921] as10x_usb: device has been disconnected [ 155.888105][ T5895] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 155.915337][ T5895] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 156.008954][ T5895] em28xx 1-1:0.89: No AC97 audio processor [ 156.071221][ T5895] usb 1-1: Decoder not found [ 156.105990][ T5895] em28xx 1-1:0.89: failed to create media graph [ 156.136061][ T5895] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 156.187774][ T5895] em28xx 1-1:0.89: Registering snapshot button... [ 156.227519][ T5895] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input10 [ 156.324042][ T6685] veth1_to_bond: left allmulticast mode [ 156.373050][ T5895] em28xx 1-1:0.89: Remote control support is not available for this card. [ 156.424774][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.433848][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.446245][ T10] em28xx 1-1:0.89: Closing input extension [ 156.485048][ T10] em28xx 1-1:0.89: Deregistering snapshot button [ 156.980417][ T10] em28xx 1-1:0.89: Freeing device [ 157.326049][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 157.414734][ T6726] syzkaller1: entered promiscuous mode [ 157.433727][ T6726] syzkaller1: entered allmulticast mode [ 157.499876][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 157.514098][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 157.528674][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 157.556459][ T10] usb 1-1: config 1 has no interface number 1 [ 157.609225][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 157.687686][ T983] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 157.791502][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.879010][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.894905][ T10] usb 1-1: Product: syz [ 157.926810][ T10] usb 1-1: Manufacturer: syz [ 157.931773][ T10] usb 1-1: SerialNumber: syz [ 157.996200][ T983] usb 5-1: Using ep0 maxpacket: 8 [ 158.060748][ T6749] netlink: 'syz.1.207': attribute type 39 has an invalid length. [ 158.134019][ T983] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 158.184385][ T983] usb 5-1: config 0 interface 0 has no altsetting 0 [ 158.206689][ T983] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 158.310988][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.515732][ T983] usb 5-1: Product: syz [ 158.520144][ T983] usb 5-1: Manufacturer: syz [ 158.524850][ T983] usb 5-1: SerialNumber: syz [ 158.535067][ T983] usb 5-1: config 0 descriptor?? [ 158.547461][ T983] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 158.658792][ T10] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 158.808139][ T983] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 158.814820][ T10] usb 1-1: 2:1 : sample bitwidth 65 in over sample bytes 0 [ 158.824828][ T983] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 158.857572][ T983] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 158.902487][ T10] usb 1-1: 2:1 : unsupported sample bitwidth 65 in 0 bytes [ 159.116845][ T10] usb 1-1: USB disconnect, device number 18 [ 159.245288][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 159.733317][ T30] audit: type=1326 audit(1764600848.362:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.0.210" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bb818f749 code=0x0 [ 159.864762][ T6768] veth1_to_bond: entered allmulticast mode [ 159.902740][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 160.199991][ T6773] fuse: Unknown parameter 'uáO¤ˆN¤5Rser_id' [ 160.935606][ T983] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 161.473300][ T983] usb 4-1: Using ep0 maxpacket: 32 [ 161.487976][ T983] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 161.502409][ T983] usb 4-1: config 0 has no interface number 0 [ 161.523562][ T983] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 161.554561][ T983] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 161.567390][ T983] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 161.588270][ T983] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 161.602264][ T983] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 161.615911][ T6781] FAULT_INJECTION: forcing a failure. [ 161.615911][ T6781] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 161.631859][ T6781] CPU: 1 UID: 0 PID: 6781 Comm: syz.0.215 Not tainted syzkaller #0 PREEMPT(full) [ 161.631878][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.631885][ T6781] Call Trace: [ 161.631891][ T6781] [ 161.631903][ T6781] dump_stack_lvl+0x189/0x250 [ 161.631927][ T6781] ? __pfx____ratelimit+0x10/0x10 [ 161.631945][ T6781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.631962][ T6781] ? __pfx__printk+0x10/0x10 [ 161.631982][ T6781] should_fail_ex+0x414/0x560 [ 161.632003][ T6781] _copy_to_user+0x31/0xb0 [ 161.632020][ T6781] simple_read_from_buffer+0xe1/0x170 [ 161.632042][ T6781] proc_fail_nth_read+0x1b3/0x220 [ 161.632059][ T6781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.632076][ T6781] ? rw_verify_area+0x2a6/0x4d0 [ 161.632092][ T6781] ? __lock_acquire+0xab9/0xd20 [ 161.632103][ T6781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.632119][ T6781] vfs_read+0x200/0xa30 [ 161.632135][ T6781] ? fdget_pos+0x247/0x320 [ 161.632150][ T6781] ? __pfx___mutex_lock+0x10/0x10 [ 161.632162][ T6781] ? __pfx_vfs_read+0x10/0x10 [ 161.632179][ T6781] ? __fget_files+0x2a/0x420 [ 161.632194][ T6781] ? __fget_files+0x3a0/0x420 [ 161.632205][ T6781] ? __fget_files+0x2a/0x420 [ 161.632222][ T6781] ksys_read+0x145/0x250 [ 161.632237][ T6781] ? __fget_files+0x2a/0x420 [ 161.632250][ T6781] ? __pfx_ksys_read+0x10/0x10 [ 161.632268][ T6781] ? do_syscall_64+0xbe/0xfa0 [ 161.632288][ T6781] do_syscall_64+0xfa/0xfa0 [ 161.632305][ T6781] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.632321][ T6781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.632333][ T6781] ? clear_bhb_loop+0x60/0xb0 [ 161.632347][ T6781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.632359][ T6781] RIP: 0033:0x7f8bb818e15c [ 161.632371][ T6781] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 161.632381][ T6781] RSP: 002b:00007f8bb8f76030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.632395][ T6781] RAX: ffffffffffffffda RBX: 00007f8bb83e6090 RCX: 00007f8bb818e15c [ 161.632404][ T6781] RDX: 000000000000000f RSI: 00007f8bb8f760a0 RDI: 0000000000000003 [ 161.632411][ T6781] RBP: 00007f8bb8f76090 R08: 0000000000000000 R09: 0000000000000000 [ 161.632419][ T6781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.632426][ T6781] R13: 00007f8bb83e6128 R14: 00007f8bb83e6090 R15: 00007f8bb850fa28 [ 161.632445][ T6781] [ 161.873630][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.969306][ T5970] usb 5-1: USB disconnect, device number 13 [ 162.026263][ T983] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 162.035666][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.043714][ T983] usb 4-1: Product: syz [ 162.047949][ T983] usb 4-1: Manufacturer: syz [ 162.052549][ T983] usb 4-1: SerialNumber: syz [ 162.060639][ T983] usb 4-1: config 0 descriptor?? [ 162.069160][ T6756] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 162.386327][ T6787] netlink: 'syz.0.216': attribute type 5 has an invalid length. [ 162.402007][ T6787] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.216'. [ 162.595609][ T5921] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 162.695709][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 162.812616][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 162.836156][ T5921] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 162.856726][ T5921] usb 5-1: config 0 has no interface number 0 [ 162.878898][ T43] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.890356][ T43] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 162.911476][ T5921] usb 5-1: config 0 interface 106 has no altsetting 0 [ 162.926783][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.952844][ T5921] usb 5-1: New USB device found, idVendor=0421, idProduct=6901, bcdDevice=2d.1d [ 162.966385][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.981846][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.028050][ T983] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 163.039369][ T983] etas_es58x 4-1:0.219: could not retrieve the product info string [ 163.085570][ T5921] usb 5-1: Product: syz [ 163.089831][ T5921] usb 5-1: Manufacturer: syz [ 163.094507][ T5921] usb 5-1: SerialNumber: syz [ 163.103521][ T6787] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 163.182012][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.232481][ T6767] veth1_to_bond: left allmulticast mode [ 163.268110][ T5921] usb 5-1: config 0 descriptor?? [ 163.282804][ T983] usb 4-1: USB disconnect, device number 14 [ 163.317490][ T5921] cdc_phonet 5-1:0.106: probe with driver cdc_phonet failed with error -22 [ 163.443441][ T983] etas_es58x 4-1:0.219: Disconnecting syz syz [ 163.494172][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 163.503718][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 163.597720][ T5921] usb 5-1: USB disconnect, device number 14 [ 165.415748][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 165.595561][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 165.974667][ T24] usb 5-1: config 179 has an invalid interface number: 97 but max is 0 [ 165.986352][ T24] usb 5-1: config 179 has no interface number 0 [ 165.992718][ T24] usb 5-1: config 179 interface 97 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 166.075494][ T24] usb 5-1: config 179 interface 97 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 166.108245][ T24] usb 5-1: config 179 interface 97 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 166.175508][ T24] usb 5-1: config 179 interface 97 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.219621][ T43] usb 1-1: USB disconnect, device number 19 [ 166.268670][ T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.ce [ 166.304982][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.393745][ T6809] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.482133][ T6824] fuse: Unknown parameter '€' [ 166.889916][ T6833] fuse: blksize only supported for fuseblk [ 167.090140][ T5921] usb 5-1: USB disconnect, device number 15 [ 168.015706][ T5921] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 168.195792][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 168.372186][ T6868] tipc: Invalid UDP bearer configuration [ 168.372227][ T6868] tipc: Enabling of bearer rejected, failed to enable media [ 168.387761][ T5921] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.449391][ T5921] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 168.556690][ T5921] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.769034][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.813981][ T6850] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.840231][ T5921] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.162778][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 169.468109][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 169.479342][ T10] usb 4-1: config 3 has an invalid interface number: 177 but max is 3 [ 169.490522][ T10] usb 4-1: config 3 has an invalid interface number: 126 but max is 3 [ 169.642665][ T10] usb 4-1: config 3 has an invalid interface number: 223 but max is 3 [ 169.734381][ T10] usb 4-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 169.922063][ T10] usb 4-1: config 3 has an invalid interface number: 241 but max is 3 [ 169.960732][ T10] usb 4-1: config 3 has an invalid interface number: 146 but max is 3 [ 170.021879][ T10] usb 4-1: config 3 has an invalid interface descriptor of length 2, skipping [ 170.090080][ T10] usb 4-1: config 3 has an invalid descriptor of length 209, skipping remainder of the config [ 170.242616][ T10] usb 4-1: config 3 has 5 interfaces, different from the descriptor's value: 4 [ 170.321540][ T10] usb 4-1: config 3 has no interface number 0 [ 170.389216][ T10] usb 4-1: config 3 has no interface number 1 [ 170.417867][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'. [ 170.436050][ T10] usb 4-1: config 3 has no interface number 2 [ 170.442183][ T10] usb 4-1: config 3 has no interface number 3 [ 170.502289][ T10] usb 4-1: config 3 has no interface number 4 [ 170.535022][ T10] usb 4-1: config 3 interface 177 altsetting 0 endpoint 0xA has an invalid bInterval 247, changing to 11 [ 170.593740][ T10] usb 4-1: config 3 interface 177 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 170.645992][ T10] usb 4-1: config 3 interface 177 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 170.718434][ T10] usb 4-1: config 3 interface 177 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.865959][ T10] usb 4-1: config 3 interface 177 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 170.902177][ T10] usb 4-1: too many endpoints for config 3 interface 126 altsetting 168: 146, using maximum allowed: 30 [ 171.006776][ T10] usb 4-1: config 3 interface 126 altsetting 168 has 1 endpoint descriptor, different from the interface descriptor's value: 146 [ 171.047837][ T10] usb 4-1: config 3 interface 223 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 171.101186][ T10] usb 4-1: config 3 interface 241 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 171.136047][ T10] usb 4-1: config 3 interface 146 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 171.182310][ T10] usb 4-1: config 3 interface 126 has no altsetting 0 [ 171.232601][ T6894] netlink: 'syz.1.235': attribute type 27 has an invalid length. [ 171.256081][ T10] usb 4-1: config 3 interface 223 has no altsetting 0 [ 171.263770][ T10] usb 4-1: config 3 interface 241 has no altsetting 0 [ 171.271739][ T6894] netlink: 152 bytes leftover after parsing attributes in process `syz.1.235'. [ 171.316883][ T10] usb 4-1: config 3 interface 146 has no altsetting 0 [ 171.343598][ T6894] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 171.378040][ T6897] netlink: 14 bytes leftover after parsing attributes in process `syz.0.236'. [ 171.417743][ T10] usb 4-1: string descriptor 0 read error: -71 [ 171.424071][ T10] usb 4-1: New USB device found, idVendor=12d1, idProduct=d279, bcdDevice=f7.4f [ 171.460673][ T24] usb 5-1: USB disconnect, device number 16 [ 171.468184][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.490538][ T10] usb 4-1: can't set config #3, error -71 [ 171.508657][ T10] usb 4-1: USB disconnect, device number 15 [ 171.706788][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.736389][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.872185][ T6897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.892667][ T6897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.906162][ T5871] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 171.920763][ T6897] bond0 (unregistering): Released all slaves [ 172.011091][ T6907] loop6: detected capacity change from 0 to 524287487 [ 172.025304][ T5982] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.039692][ T5982] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.048323][ T5982] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.065986][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 172.070726][ T5982] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.131848][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.141860][ T5982] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.162992][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.164264][ T5982] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.193736][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.224673][ T5982] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.226110][ T5871] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.251353][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.268552][ T5871] usb 1-1: config 0 descriptor?? [ 172.280660][ T5982] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.285971][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 172.303301][ T10] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 172.306113][ T5982] ldm_validate_partition_table(): Disk read failed. [ 172.317732][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.328963][ T10] usb 4-1: Product: syz [ 172.361873][ T5982] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.370967][ T5982] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.380965][ T5982] Dev loop6: unable to read RDB block 0 [ 172.388379][ T5982] loop6: unable to read partition table [ 172.390211][ T10] usb 4-1: Manufacturer: syz [ 172.403537][ T6907] ldm_validate_partition_table(): Disk read failed. [ 172.412063][ T6907] Dev loop6: unable to read RDB block 0 [ 172.419725][ T6907] loop6: unable to read partition table [ 172.425810][ T6907] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 172.447776][ T10] usb 4-1: SerialNumber: syz [ 172.487680][ T10] usb 4-1: config 0 descriptor?? [ 172.489631][ T6913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 172.498729][ T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 172.522993][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 172.603247][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 172.692835][ T6916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 172.710765][ T10] gspca_topro: reg_w err -71 [ 172.741038][ T5871] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 172.756886][ T10] gspca_topro: Sensor soi763a [ 172.870068][ T10] usb 4-1: USB disconnect, device number 16 [ 173.102190][ T6925] netlink: 108 bytes leftover after parsing attributes in process `syz.0.236'. [ 173.337760][ T6929] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 173.578096][ T6934] netlink: 'syz.3.246': attribute type 1 has an invalid length. [ 173.677865][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 173.740280][ T6938] netlink: 104 bytes leftover after parsing attributes in process `syz.3.246'. [ 173.764966][ T6934] bond1: entered promiscuous mode [ 173.772392][ T6934] bond1: entered allmulticast mode [ 173.798865][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 173.863121][ T6934] bond1: left promiscuous mode [ 173.895111][ T6934] bond1: left allmulticast mode [ 173.901666][ T6934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.942011][ T5921] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 174.168542][ T5921] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 174.195919][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.337782][ T5921] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 174.347165][ T5921] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 174.400504][ T5921] usb 3-1: Manufacturer: syz [ 174.428551][ T5921] usb 3-1: config 0 descriptor?? [ 174.626454][ T5921] rc_core: IR keymap rc-hauppauge not found [ 174.632551][ T5921] Registered IR keymap rc-empty [ 174.656851][ T5921] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 174.679382][ T6945] syz_tun: entered allmulticast mode [ 174.775210][ T5921] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 174.908213][ T24] usb 1-1: USB disconnect, device number 20 [ 174.944185][ T5921] usb 3-1: USB disconnect, device number 14 [ 175.056142][ T5871] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 175.368058][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 175.375377][ T5871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.386635][ T5871] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 175.421581][ T5871] usb 4-1: config 1 has no interface number 1 [ 175.429290][ T5871] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.483864][ T5871] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.493975][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.999558][ T5871] usb 4-1: Product: syz [ 176.023128][ T5871] usb 4-1: Manufacturer: syz [ 176.131417][ T5871] usb 4-1: SerialNumber: syz [ 176.561309][ T6944] syz_tun: left allmulticast mode [ 176.575255][ T5871] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 176.591390][ T5871] usb 4-1: 2:1 : format type 6 is not supported yet [ 176.766669][ T5871] usb 4-1: USB disconnect, device number 17 [ 176.936212][ T5887] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 177.140737][ T5887] usb 3-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 177.186107][ T5887] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 177.195128][ T5887] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 177.308092][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.341087][ T5887] usb 3-1: config 0 descriptor?? [ 177.390062][ T6974] netlink: 276 bytes leftover after parsing attributes in process `syz.4.257'. [ 177.456040][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.257'. [ 177.525136][ T6974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.257'. [ 177.554235][ T983] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 177.627041][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.635547][ T6967] bridge0: port 1() entered disabled state [ 177.651788][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 177.775830][ T983] usb 2-1: Using ep0 maxpacket: 32 [ 178.050159][ T983] usb 2-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 178.127579][ T983] usb 2-1: too many endpoints for config 0 interface 0 altsetting 253: 53, using maximum allowed: 30 [ 178.200938][ T983] usb 2-1: config 0 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 178.311273][ T983] usb 2-1: config 0 interface 0 has no altsetting 0 [ 178.326583][ T983] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 178.341068][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.403334][ T983] usb 2-1: config 0 descriptor?? [ 178.933278][ T6967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.992248][ T6967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.156254][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 179.322188][ T10] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 179.332481][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.384132][ T10] usb 1-1: Product: syz [ 179.394485][ T10] usb 1-1: Manufacturer: syz [ 179.412292][ T10] usb 1-1: SerialNumber: syz [ 179.499434][ T10] usb 1-1: config 0 descriptor?? [ 179.660795][ T5921] usb 3-1: USB disconnect, device number 15 [ 179.752150][ T10] int51x1 1-1:0.0: probe with driver int51x1 failed with error -22 [ 179.940596][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.983306][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.068452][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.124382][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.436343][ T5871] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 180.596377][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 180.604781][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.645974][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.670146][ T5871] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 180.691333][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.724127][ T5871] usb 4-1: config 0 descriptor?? [ 181.102990][ T983] usb 2-1: string descriptor 0 read error: -71 [ 181.177080][ T983] usb 2-1: USB disconnect, device number 9 [ 181.177518][ T5871] gt683r_led 0003:1770:FF00.0005: ignoring exceeding usage max [ 181.284944][ T5871] gt683r_led 0003:1770:FF00.0005: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 181.368318][ T7006] binder: 7005:7006 ioctl 4018620d 0 returned -22 [ 181.492832][ T5871] usb 4-1: USB disconnect, device number 18 [ 181.545052][ T30] audit: type=1326 audit(1764600870.182:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f55cf98f749 code=0x7ffc0000 [ 181.577273][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 181.595289][ T5895] gt683r_led 0003:1770:FF00.0005: failed to send set report request: -19 [ 181.620315][ T30] audit: type=1326 audit(1764600870.182:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f55cf98f749 code=0x7ffc0000 [ 181.646117][ T30] audit: type=1326 audit(1764600870.182:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f55cf98f749 code=0x7ffc0000 [ 181.680597][ T10] gt683r_led 0003:1770:FF00.0005: failed to send set report request: -19 [ 181.680808][ T30] audit: type=1326 audit(1764600870.182:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f55cf98f749 code=0x7ffc0000 [ 181.712983][ T30] audit: type=1326 audit(1764600870.182:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f55cf98f749 code=0x7ffc0000 [ 181.737750][ T30] audit: type=1326 audit(1764600870.182:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f55cf98f749 code=0x7ffc0000 [ 181.761145][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 181.775585][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 181.792305][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.818799][ T30] audit: type=1326 audit(1764600870.182:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f55cf98f749 code=0x7ffc0000 [ 181.844329][ T30] audit: type=1326 audit(1764600870.182:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f55cf98f749 code=0x7ffc0000 [ 181.867131][ T983] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 181.877983][ T24] usb 5-1: config 0 descriptor?? [ 181.890533][ T30] audit: type=1326 audit(1764600870.182:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f55cf98f749 code=0x7ffc0000 [ 181.941779][ T5921] usb 1-1: USB disconnect, device number 21 [ 181.967970][ T30] audit: type=1326 audit(1764600870.182:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f55cf98f749 code=0x7ffc0000 [ 181.990511][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.048023][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.072103][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.085955][ T983] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.103237][ T24] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 182.113690][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.143418][ T983] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.164642][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 182.174388][ T24] usb 5-1: media controller created [ 182.180081][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.203768][ T983] usb 3-1: config 0 descriptor?? [ 182.261732][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.413200][ T24] DVB: Unable to find symbol dib7000p_attach() [ 182.423815][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 182.467825][ T5871] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 182.472010][ T983] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 182.565567][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 182.583577][ T24] Registered IR keymap rc-empty [ 182.596434][ T24] dvb-usb: could not initialize remote control. [ 182.613680][ T24] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 182.666921][ T24] usb 5-1: USB disconnect, device number 17 [ 182.676037][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 182.696227][ T5871] usb 4-1: config 0 has an invalid interface number: 53 but max is 0 [ 182.737166][ T5871] usb 4-1: config 0 has no interface number 0 [ 182.743336][ T5871] usb 4-1: config 0 interface 53 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 16 [ 182.769612][ T24] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 182.784391][ T5871] usb 4-1: config 0 interface 53 has no altsetting 0 [ 182.818356][ T5871] usb 4-1: New USB device found, idVendor=07c0, idProduct=158a, bcdDevice=dd.2e [ 182.837969][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.928856][ T5871] usb 4-1: Product: syz [ 182.936779][ T5871] usb 4-1: Manufacturer: syz [ 182.946608][ T5871] usb 4-1: SerialNumber: syz [ 182.991367][ T5871] usb 4-1: config 0 descriptor?? [ 183.008702][ T7027] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 183.023416][ T5871] iowarrior 4-1:0.53: no interrupt-in endpoint found [ 183.228609][ T5871] usb 4-1: USB disconnect, device number 19 [ 183.256199][ T5921] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 183.442540][ T5921] usb 1-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 183.453177][ T5921] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 183.464153][ T5921] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 183.542645][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.558893][ T5921] usb 1-1: config 0 descriptor?? [ 183.675607][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 183.686934][ C1] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 183.841706][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'. [ 183.852576][ T24] usb 5-1: config 1 has an invalid descriptor of length 151, skipping remainder of the config [ 183.864351][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.876810][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 183.886256][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 183.894757][ T24] usb 5-1: SerialNumber: syz [ 184.216144][ T24] usb 5-1: 0:2 : does not exist [ 184.244451][ T24] usb 5-1: unit 5 not found! [ 184.471009][ T24] usb 5-1: USB disconnect, device number 18 [ 184.483189][ T983] usb 3-1: USB disconnect, device number 16 [ 184.683644][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.128653][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'. [ 185.284526][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 185.305659][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 186.414349][ T7083] input: syz0 as /devices/virtual/input/input14 [ 186.435911][ T983] usb 1-1: USB disconnect, device number 22 [ 186.446323][ T7080] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:19491 [ 186.498514][ T7081] netlink: 52 bytes leftover after parsing attributes in process `syz.2.280'. [ 186.932112][ T7103] sctp: [Deprecated]: syz.1.286 (pid 7103) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.932112][ T7103] Use struct sctp_sack_info instead [ 186.995895][ T983] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 187.167457][ T983] usb 1-1: Using ep0 maxpacket: 16 [ 187.191744][ T983] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.211994][ T983] usb 1-1: config 0 has no interface number 0 [ 187.235906][ T983] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.263977][ T7115] tipc: Started in network mode [ 187.289665][ T7115] tipc: Node identity 4246, cluster identity 4711 [ 187.299602][ T983] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.329875][ T7115] tipc: Node number set to 16966 [ 187.342616][ T983] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 187.585751][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.624288][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 187.636685][ T983] usb 1-1: config 0 descriptor?? [ 187.751113][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 188.065795][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 188.166172][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 188.441179][ T983] uclogic 0003:28BD:0071.0007: pen parameters not found [ 188.486288][ T983] uclogic 0003:28BD:0071.0007: interface is invalid, ignoring [ 188.646655][ T5871] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 188.657079][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 188.657102][ T30] audit: type=1326 audit(1764600877.302:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7130 comm="syz.3.294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0022b8f749 code=0x0 [ 188.662189][ T983] usb 1-1: USB disconnect, device number 23 [ 188.819134][ T5871] usb 3-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 188.834153][ T5871] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 188.864510][ T5871] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 188.890606][ T7136] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2107136741 (134856751424 ns) > initial count (31747348608 ns). Using initial count to start timer. [ 188.915963][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.217399][ T5871] usb 3-1: config 0 descriptor?? [ 189.433398][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 189.766934][ T7144] syzkaller0: entered promiscuous mode [ 189.772528][ T7144] syzkaller0: entered allmulticast mode [ 189.816150][ T7146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.296'. [ 189.831736][ T7144] tipc: Started in network mode [ 189.838107][ T7146] netlink: 52 bytes leftover after parsing attributes in process `syz.0.296'. [ 189.848454][ T7144] tipc: Node identity 6ec90c69b179, cluster identity 4711 [ 189.857605][ T7144] tipc: Enabled bearer , priority 0 [ 189.877738][ T7144] tipc: Resetting bearer [ 189.884865][ T7144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.964128][ T7142] tipc: Resetting bearer [ 190.006510][ T7142] tipc: Disabling bearer [ 190.887481][ T7156] ip6t_srh: unknown srh invflags 4000 [ 191.141963][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.166745][ T7156] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.223774][ T7156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.480887][ T24] usb 3-1: USB disconnect, device number 17 [ 192.034935][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 192.080479][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 192.454050][ T7171] binder: BINDER_SET_CONTEXT_MGR already set [ 192.525769][ T7171] binder: 7168:7171 ioctl 4018620d 200000000040 returned -16 [ 192.588595][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 192.605180][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 192.824615][ T5871] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 192.885920][ T5921] IPVS: starting estimator thread 0... [ 193.028292][ T7184] IPVS: using max 46 ests per chain, 110400 per kthread [ 193.039284][ T5871] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 193.053476][ T5871] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.127437][ T5871] usb 3-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 193.139690][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.158206][ T5871] usb 3-1: Product: syz [ 193.174658][ T5871] usb 3-1: Manufacturer: syz [ 193.188943][ T5871] usb 3-1: SerialNumber: syz [ 193.298877][ T5871] usb 3-1: config 0 descriptor?? [ 193.336523][ T5895] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 193.355556][ T983] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 193.517769][ T983] usb 2-1: config 7 has an invalid interface number: 252 but max is 0 [ 193.530412][ T983] usb 2-1: config 7 has no interface number 0 [ 193.530675][ T5895] usb 1-1: too many configurations: 13, using maximum allowed: 8 [ 193.536698][ T983] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 193.536731][ T983] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 193.536768][ T983] usb 2-1: config 7 interface 252 has no altsetting 0 [ 193.569314][ T983] usb 2-1: string descriptor 0 read error: -22 [ 193.582157][ T983] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 193.656502][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.686801][ T983] idmouse 2-1:7.252: Unable to find bulk-in endpoint. [ 193.704380][ T10] usb 3-1: USB disconnect, device number 18 [ 193.757900][ T5895] usb 1-1: config 0 has no interfaces? [ 193.764439][ T5895] usb 1-1: config 0 has no interfaces? [ 193.797305][ T5895] usb 1-1: config 0 has no interfaces? [ 193.804864][ T5895] usb 1-1: config 0 has no interfaces? [ 193.821960][ T5895] usb 1-1: config 0 has no interfaces? [ 193.858276][ T5895] usb 1-1: config 0 has no interfaces? [ 193.887365][ T5895] usb 1-1: config 0 has no interfaces? [ 193.895001][ T5895] usb 1-1: config 0 has no interfaces? [ 193.914262][ T5895] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.926169][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.936518][ T5895] usb 1-1: Product: syz [ 193.943734][ T5895] usb 1-1: Manufacturer: syz [ 193.953845][ T5895] usb 1-1: SerialNumber: syz [ 193.978320][ T5895] usb 1-1: config 0 descriptor?? [ 194.014616][ T7194] fuse: Unknown parameter 'vb' [ 194.189872][ T5895] usb 1-1: USB disconnect, device number 24 [ 194.309121][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.316268][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.527120][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 194.675959][ T7205] syzkaller1: entered promiscuous mode [ 194.687042][ T7205] syzkaller1: entered allmulticast mode [ 194.699965][ T10] usb 3-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 194.723910][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.744151][ T10] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 194.763697][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.774657][ T10] usb 3-1: config 0 descriptor?? [ 194.865863][ T5887] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 194.956072][ T5895] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 194.995304][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 195.026327][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 195.034014][ T5887] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 195.055389][ T5887] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 195.067663][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 195.077276][ T5887] usb 1-1: Product: syz [ 195.081980][ T5887] usb 1-1: Manufacturer: syz [ 195.087112][ T5887] usb 1-1: SerialNumber: syz [ 195.128112][ T5887] usb 1-1: config 0 descriptor?? [ 195.136240][ T7188] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 195.493652][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.506275][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.531205][ T5895] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 195.540829][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.555065][ T5895] usb 4-1: config 0 descriptor?? [ 195.721463][ T5887] usb 1-1: USB disconnect, device number 25 [ 195.892197][ T10] usb 2-1: USB disconnect, device number 10 [ 195.990410][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 195.999387][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 196.167074][ T5895] usbhid 4-1:0.0: can't add hid device: -71 [ 196.176020][ T5895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 196.191754][ T5895] usb 4-1: USB disconnect, device number 20 [ 196.316523][ T7217] netlink: 48 bytes leftover after parsing attributes in process `syz.0.316'. [ 196.577423][ T7221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.186931][ T7229] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 197.193796][ T7229] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 197.219631][ T7229] vhci_hcd vhci_hcd.0: Device attached [ 197.454134][ T5895] usb 3-1: USB disconnect, device number 19 [ 197.593358][ T5921] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 197.657520][ T7230] vhci_hcd: connection reset by peer [ 197.699294][ T12] vhci_hcd: stop threads [ 197.704204][ T12] vhci_hcd: release socket [ 197.737523][ T12] vhci_hcd: disconnect device [ 198.184863][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 198.197123][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 198.377258][ T983] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 198.618717][ T983] usb 4-1: Using ep0 maxpacket: 32 [ 198.636275][ T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 198.702233][ T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 198.778908][ T7252] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 198.913938][ T983] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 198.923633][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.950597][ T983] usb 4-1: Product: syz [ 198.990198][ T983] usb 4-1: Manufacturer: syz [ 199.041325][ T983] usb 4-1: SerialNumber: syz [ 199.076619][ T983] usb 4-1: config 0 descriptor?? [ 199.402451][ T983] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 199.405100][ T13] usb 4-1: Failed to submit usb control message: -71 [ 199.458268][ T983] usb 4-1: USB disconnect, device number 21 [ 199.482622][ T13] usb 4-1: unable to send the bmi data to the device: -71 [ 199.607911][ T13] usb 4-1: unable to get target info from device [ 199.614303][ T13] usb 4-1: could not get target info (-71) [ 199.671110][ T13] usb 4-1: could not probe fw (-71) [ 200.076416][ T7257] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.435632][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 200.799588][ T43] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 200.806226][ T5887] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 200.819710][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.900346][ T43] usb 2-1: Product: syz [ 200.904582][ T43] usb 2-1: Manufacturer: syz [ 200.962524][ T5894] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 201.003758][ T43] usb 2-1: SerialNumber: syz [ 201.025047][ T43] usb 2-1: config 0 descriptor?? [ 201.095785][ T5887] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.176844][ T5887] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 201.188891][ T43] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 201.245406][ T5887] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.288316][ T5894] usb 1-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 201.496096][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.504265][ T5894] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.560709][ T7267] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.568380][ T5894] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 201.569061][ T43] sonixb 2-1:0.0: Error writing register 01: -71 [ 201.598096][ T5887] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.611418][ T43] sonixb 2-1:0.0: probe with driver sonixb failed with error -71 [ 201.635661][ T43] usb 2-1: USB disconnect, device number 11 [ 201.679743][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.872785][ T5894] usb 1-1: config 0 descriptor?? [ 202.102689][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'. [ 202.685627][ T5921] vhci_hcd: vhci_device speed not set [ 202.748827][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 202.757941][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 202.875691][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 203.026424][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 203.039015][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.051548][ T43] usb 2-1: config 0 has no interface number 0 [ 203.061379][ T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.073245][ T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.083285][ T43] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 203.092425][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.105698][ T43] usb 2-1: config 0 descriptor?? [ 203.591921][ T7293] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 203.611964][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 203.673124][ T5887] usb 5-1: USB disconnect, device number 19 [ 203.825815][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 203.834180][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.865184][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.895505][ T24] usb 3-1: too many endpoints for config 1 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 203.916234][ T24] usb 3-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 203.933953][ T5895] usb 1-1: USB disconnect, device number 26 [ 204.058717][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 204.110511][ T43] usbhid 2-1:0.1: can't add hid device: -71 [ 204.141121][ T43] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 204.167055][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 204.251856][ T24] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.265535][ T43] usb 2-1: USB disconnect, device number 12 [ 204.280351][ T24] usb 3-1: config 1 interface 0 has no altsetting 1 [ 204.313238][ T24] usb 3-1: config 1 interface 1 has no altsetting 0 [ 204.345898][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.378738][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.388666][ T24] usb 3-1: Product: syz [ 204.393279][ T24] usb 3-1: Manufacturer: syz [ 204.398297][ T24] usb 3-1: SerialNumber: syz [ 204.649922][ T24] usb 3-1: selecting invalid altsetting 0 [ 204.662075][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 204.686643][ T24] usb 3-1: selecting invalid altsetting 0 [ 204.694255][ T24] cdc_ncm 3-1:1.0: bind() failure [ 204.733940][ T7314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.753398][ T24] usb 3-1: selecting invalid altsetting 0 [ 204.767450][ T24] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -22 [ 204.805910][ T24] usb 3-1: selecting invalid altsetting 0 [ 204.813571][ T24] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -22 [ 204.855283][ T24] usb 3-1: selecting invalid altsetting 0 [ 204.888178][ T24] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 204.929232][ T24] usb 3-1: USB disconnect, device number 20 [ 205.476131][ T5895] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 205.577557][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 205.632384][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 205.795642][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 206.109227][ T5895] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.120735][ T5895] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 206.131447][ T5895] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.177249][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.217741][ T24] usb 3-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 206.229789][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 206.248836][ T7326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.260961][ T5895] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.276985][ T24] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 206.293970][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.581053][ T24] usb 3-1: config 0 descriptor?? [ 206.620430][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 206.620992][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 206.626647][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 206.626694][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 206.626748][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 206.842641][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 207.795582][ T43] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 207.951141][ T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.963035][ T43] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 207.981850][ T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.005317][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.065881][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 208.112510][ T7350] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 208.160128][ T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 208.238886][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.250215][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 208.278488][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.596265][ T43] usb 3-1: USB disconnect, device number 21 [ 208.631712][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.024969][ T7349] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 209.114089][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.797557][ T5895] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 210.816991][ T5894] usb 4-1: USB disconnect, device number 22 [ 210.998424][ T5895] usb 2-1: too many configurations: 15, using maximum allowed: 8 [ 211.048804][ T5895] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 211.065479][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.118102][ T5895] usb 2-1: config 0 descriptor?? [ 211.146392][ T5887] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 211.156763][ T5895] hub 2-1:0.0: Invalid hub with more than one config or interface [ 211.164625][ T5895] hub 2-1:0.0: probe with driver hub failed with error -22 [ 211.216616][ T5895] sierra 2-1:0.0: Sierra USB modem converter detected [ 211.316056][ T5887] usb 3-1: device descriptor read/64, error -71 [ 211.432168][ T5895] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 211.489809][ T5895] usb 2-1: USB disconnect, device number 13 [ 211.553949][ T5895] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 211.566475][ T5887] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 211.568750][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.361'. [ 211.624928][ T5895] sierra 2-1:0.0: device disconnected [ 211.736930][ T5887] usb 3-1: device descriptor read/64, error -71 [ 211.777194][ T7380] binder: 7377:7380 ioctl 40044591 0 returned -22 [ 211.841330][ T24] usb 1-1: USB disconnect, device number 27 [ 211.857858][ T5887] usb usb3-port1: attempt power cycle [ 211.870647][ T7379] binder: 7377:7379 ioctl c0306201 200000000040 returned -14 [ 212.198686][ T5895] usb 5-1: USB disconnect, device number 20 [ 212.219752][ T5887] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 212.257255][ T5887] usb 3-1: device descriptor read/8, error -71 [ 212.288180][ T7386] x_tables: duplicate entry at hook 2 [ 212.472978][ T7395] netlink: 'syz.1.364': attribute type 39 has an invalid length. [ 212.514347][ T7394] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 212.536355][ T5887] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 212.546532][ T7394] team0: Port device batadv1 added [ 212.574983][ T5887] usb 3-1: device descriptor read/8, error -71 [ 212.716127][ T7403] : renamed from bridge_slave_0 (while UP) [ 212.727961][ T5887] usb usb3-port1: unable to enumerate USB device [ 213.725563][ T983] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 213.925528][ T983] usb 4-1: Using ep0 maxpacket: 32 [ 213.941385][ T983] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 213.956305][ T983] usb 4-1: config 0 has no interface number 0 [ 213.975563][ T983] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 214.028758][ T983] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 214.132305][ T983] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 214.162834][ T983] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 214.173332][ T983] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 214.232141][ T983] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 214.242273][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.260951][ T983] usb 4-1: Product: syz [ 214.265390][ T983] usb 4-1: Manufacturer: syz [ 214.275722][ T5887] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 214.283591][ T983] usb 4-1: SerialNumber: syz [ 214.304217][ T983] usb 4-1: config 0 descriptor?? [ 214.315889][ T7413] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 214.428697][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 214.440562][ T5894] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 214.459720][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.470216][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.479624][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 214.494638][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.605896][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 214.615381][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.624871][ T5894] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 214.644649][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.655737][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 214.677445][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.689231][ T5894] usb 3-1: config 0 descriptor?? [ 214.699902][ T5894] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 214.713505][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.726914][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 214.744580][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.775048][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.793005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.857152][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 214.874954][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.894613][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.915021][ T5894] gspca_vc032x: reg_r err -32 [ 214.920233][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.928372][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.933731][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.944130][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.971079][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.998705][ T5871] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 215.016840][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.027341][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.040113][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 215.058613][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.109630][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.141306][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 215.149386][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.161112][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.167331][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 215.193663][ T5871] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.216282][ T5871] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 215.226932][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.232267][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.243334][ T5871] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.252740][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.258882][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 215.268133][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.274487][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.287180][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.299388][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 215.313456][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.328191][ T7434] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 215.344371][ T5871] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.373143][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.396384][ T5887] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.429500][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.447114][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.452525][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 215.500082][ T5894] gspca_vc032x: Unknown sensor... [ 215.505316][ T5894] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 215.591565][ T5887] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 215.655805][ T7436] Invalid logical block size (-1) [ 215.689149][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.796047][ T5887] usb 2-1: config 0 descriptor?? [ 216.007218][ T43] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 216.181366][ T983] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 216.201288][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.224817][ T43] usb 1-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df [ 216.238163][ T983] etas_es58x 4-1:0.219: could not retrieve the product info string [ 216.257454][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.319068][ T43] usb 1-1: config 0 descriptor?? [ 216.344417][ T983] usb 4-1: USB disconnect, device number 23 [ 216.364367][ T43] pwc: Philips PCA646VC USB webcam detected. [ 216.378572][ T983] etas_es58x 4-1:0.219: Disconnecting syz syz [ 216.569125][ T43] pwc: send_video_command error -71 [ 216.574471][ T43] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 216.598179][ T43] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 216.664934][ T7441] netlink: 'syz.3.378': attribute type 39 has an invalid length. [ 216.690217][ T43] usb 1-1: USB disconnect, device number 28 [ 216.743156][ T24] usb 3-1: USB disconnect, device number 26 [ 217.788562][ T7453] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 218.036016][ T24] usb 5-1: USB disconnect, device number 21 [ 218.663595][ T7463] veth1_to_bond: entered allmulticast mode [ 218.682240][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'. [ 219.068121][ T5887] usbhid 2-1:0.0: can't add hid device: -71 [ 219.074196][ T5887] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 219.174936][ T7466] openvswitch: netlink: Flow key attr not present in new flow. [ 219.176535][ T5887] usb 2-1: USB disconnect, device number 14 [ 220.290060][ T7486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.185761][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 221.355560][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 221.387337][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 221.494600][ T7462] veth1_to_bond: left allmulticast mode [ 221.505119][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 221.566886][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.610796][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 221.633673][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 221.646532][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.663381][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 221.672227][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 221.685816][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.703740][ T24] usb 4-1: string descriptor 0 read error: -22 [ 221.718515][ T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 221.730311][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.779101][ T24] adutux 4-1:168.0: interrupt endpoints not found [ 221.805556][ T5966] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 221.845962][ T43] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 221.967898][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 221.986103][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.009092][ T5966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 222.017657][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 222.036355][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.046394][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 222.063091][ T5966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 222.066695][ T7508] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.073943][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 222.100307][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 222.111704][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 222.123774][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.134389][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 222.144197][ T5966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 222.151294][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.162153][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 222.175865][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.187457][ T43] usb 1-1: config 0 descriptor?? [ 222.192685][ T5966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 222.212590][ T43] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 222.221869][ T43] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 222.231447][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 222.255599][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.275775][ T5966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 222.286784][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 222.305497][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.325483][ T5966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 222.342600][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 222.363290][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.373560][ T5966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 222.386640][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 222.398100][ T5966] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.408636][ T7517] netlink: 'syz.2.401': attribute type 1 has an invalid length. [ 222.432718][ T5966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 222.440314][ T7517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.440679][ T43] usb 1-1: USB disconnect, device number 29 [ 222.453599][ T5966] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 222.465879][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.474770][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.401'. [ 222.482793][ T5966] usb 5-1: config 0 descriptor?? [ 222.776945][ T7527] veth1_to_bond: entered allmulticast mode [ 222.793282][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 223.901596][ T43] usb 4-1: USB disconnect, device number 24 [ 223.928210][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 224.065722][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 224.405930][ T43] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 225.022288][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 225.054821][ T43] usb 4-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 225.158256][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.192520][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.205995][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.265194][ T5966] usbhid 5-1:0.0: can't add hid device: -71 [ 225.299818][ T43] usb 4-1: Product: syz [ 225.386118][ T5966] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 225.394059][ T43] usb 4-1: Manufacturer: syz [ 225.406922][ T43] usb 4-1: SerialNumber: syz [ 225.444083][ T5966] usb 5-1: USB disconnect, device number 22 [ 225.846046][ T43] usb 4-1: 0:2 : does not exist [ 225.889908][ T43] usb 4-1: USB disconnect, device number 25 [ 226.078013][ T7525] veth1_to_bond: left allmulticast mode [ 226.537643][ T5871] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 226.576094][ T5894] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 226.585914][ T43] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 226.775834][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 226.783580][ T43] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 226.790866][ T5871] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 226.792224][ T43] usb 3-1: config 0 has no interface number 0 [ 226.818807][ T5871] usb 2-1: config 0 has no interface number 0 [ 226.845503][ T43] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.845519][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 226.845542][ T43] usb 3-1: config 0 interface 85 has no altsetting 0 [ 226.877658][ T5871] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 226.890354][ T5894] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 226.926864][ T5871] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 226.944009][ T5894] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 226.945032][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 226.975099][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.993844][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.002090][ T43] usb 3-1: Product: syz [ 227.002113][ T43] usb 3-1: Manufacturer: syz [ 227.002128][ T43] usb 3-1: SerialNumber: syz [ 227.034687][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.036365][ T43] usb 3-1: config 0 descriptor?? [ 227.133927][ T5894] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 227.143439][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.154134][ T5894] usb 5-1: Product: syz [ 227.159888][ T5894] usb 5-1: Manufacturer: syz [ 227.164518][ T5894] usb 5-1: SerialNumber: syz [ 227.172986][ T5871] usb 2-1: config 0 descriptor?? [ 227.188426][ T5871] ttusbir 2-1:0.83: cannot find expected altsetting [ 227.202503][ T5894] usb 5-1: config 0 descriptor?? [ 227.406055][ T7561] netlink: 60 bytes leftover after parsing attributes in process `syz.1.413'. [ 227.435711][ T5894] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 227.509549][ T7577] syzkaller1: entered promiscuous mode [ 227.515057][ T7577] syzkaller1: entered allmulticast mode [ 227.551784][ T43] appletouch 3-1:0.85: Failed to request geyser raw mode [ 227.584638][ T43] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 227.586993][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 227.705648][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 227.792138][ T5894] usb 2-1: USB disconnect, device number 15 [ 227.801077][ T43] usb 3-1: USB disconnect, device number 27 [ 228.296168][ T43] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 228.450463][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 228.463496][ T5894] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 228.472166][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.511224][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.540551][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 228.583799][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.610011][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.622503][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 228.645062][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.658151][ T5894] usb 1-1: config 0 has an invalid interface number: 114 but max is 0 [ 228.660463][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.687053][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 228.826467][ T7597] veth1_to_bond: entered allmulticast mode [ 228.843382][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.423'. [ 228.865074][ T5894] usb 1-1: config 0 has no interface number 0 [ 228.865167][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.886789][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.894997][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 228.926141][ T5894] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=13.67 [ 228.942625][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.961484][ T5894] usb 1-1: Product: syz [ 228.972033][ T5894] usb 1-1: Manufacturer: syz [ 229.069226][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.117122][ T7598] netlink: 'syz.1.422': attribute type 5 has an invalid length. [ 229.131813][ T7598] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.422'. [ 229.141619][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 229.146348][ T5894] usb 1-1: SerialNumber: syz [ 229.154456][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 229.168672][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.187213][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 229.228272][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 229.239813][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.279024][ T5894] usb 1-1: config 0 descriptor?? [ 229.286127][ T1211] usb 5-1: USB disconnect, device number 23 [ 229.300131][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 229.310997][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 229.330739][ T43] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.403311][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 229.444255][ T43] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 229.480652][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.501838][ T5894] cdc_subset 1-1:0.114: probe with driver cdc_subset failed with error -71 [ 229.551104][ T5894] usb 1-1: USB disconnect, device number 30 [ 229.565842][ T5887] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 229.732168][ T43] usb 3-1: config 0 descriptor?? [ 229.768273][ T5887] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 229.862460][ T5887] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 229.866556][ T7604] netlink: 'syz.4.424': attribute type 5 has an invalid length. [ 229.880757][ T7604] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.424'. [ 229.901017][ T5887] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 229.925069][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.002724][ T7598] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 230.019735][ T5887] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.495674][ T5966] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 230.669957][ T5966] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.682121][ T5966] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 230.695291][ T5966] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 231.244683][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.349095][ T7612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.468061][ T7604] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 231.663545][ T5966] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.194267][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 232.206315][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 232.276446][ T7596] veth1_to_bond: left allmulticast mode [ 232.316073][ T43] usb 3-1: USB disconnect, device number 28 [ 232.907992][ T7632] x_tables: unsorted underflow at hook 2 [ 233.822034][ T1211] usb 2-1: USB disconnect, device number 16 [ 234.587887][ T7641] syzkaller0: entered promiscuous mode [ 234.593577][ T7641] syzkaller0: entered allmulticast mode [ 234.855056][ T7641] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 235.129078][ T5887] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 235.311850][ T5887] usb 1-1: device descriptor read/64, error -71 [ 235.676096][ T5966] usb 5-1: USB disconnect, device number 24 [ 235.716023][ T5887] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 235.885943][ T5887] usb 1-1: device descriptor read/64, error -71 [ 236.014488][ T5887] usb usb1-port1: attempt power cycle [ 236.327625][ T7673] netlink: 'syz.4.432': attribute type 5 has an invalid length. [ 236.336104][ T7673] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.432'. [ 236.471573][ T5887] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 236.506452][ T5887] usb 1-1: device descriptor read/8, error -71 [ 236.615642][ T5895] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 236.756081][ T5887] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 236.880364][ T5895] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.902895][ T5887] usb 1-1: device descriptor read/8, error -71 [ 236.911396][ T5895] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 236.941619][ T5895] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.973629][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.994653][ T7673] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 237.006615][ T5895] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 237.036565][ T5887] usb usb1-port1: unable to enumerate USB device [ 237.043067][ T5894] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 237.056771][ T7691] veth1_to_bond: entered allmulticast mode [ 237.073401][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 237.240104][ T7689] : renamed from bridge_slave_0 (while UP) [ 237.265132][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 237.299318][ T5894] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 237.383973][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.424421][ T5894] usb 2-1: config 0 has no interface number 0 [ 237.463317][ T5894] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 237.603936][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.626534][ T5894] usb 2-1: Product: syz [ 237.631057][ T5894] usb 2-1: Manufacturer: syz [ 237.641021][ T5894] usb 2-1: SerialNumber: syz [ 237.738823][ T5894] usb 2-1: config 0 descriptor?? [ 237.975494][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.011005][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.061562][ T7700] netlink: 'syz.0.439': attribute type 5 has an invalid length. [ 238.094476][ T5894] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 238.112216][ T5894] uvcvideo 2-1:0.105: No valid video chain found. [ 238.145641][ T7700] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.439'. [ 238.300055][ T5894] usb 2-1: USB disconnect, device number 17 [ 238.477231][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 238.651243][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.836187][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 238.962339][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 239.062295][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.134372][ T7700] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 239.161183][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 239.186358][ T7713] netlink: 'syz.2.441': attribute type 63 has an invalid length. [ 239.301551][ T7713] netlink: 5 bytes leftover after parsing attributes in process `syz.2.441'. [ 239.462263][ T7713] gretap0: entered allmulticast mode [ 239.491748][ T7713] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 239.957398][ T5887] IPVS: starting estimator thread 0... [ 240.066014][ T7721] IPVS: using max 32 ests per chain, 76800 per kthread [ 240.393023][ T5887] usb 5-1: USB disconnect, device number 25 [ 240.651914][ T7687] veth1_to_bond: left allmulticast mode [ 241.036122][ T5887] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 241.329243][ T5966] usb 1-1: USB disconnect, device number 35 [ 241.386179][ T5887] usb 4-1: device descriptor read/64, error -71 [ 241.496750][ T5894] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 241.635965][ T5887] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 241.675850][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 241.716012][ T1211] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 241.738829][ T5894] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 241.777991][ T5887] usb 4-1: device descriptor read/64, error -71 [ 241.793332][ T5894] usb 5-1: config 0 has no interface number 0 [ 241.855996][ T5894] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 241.956187][ T1211] usb 2-1: Using ep0 maxpacket: 16 [ 241.964030][ T5887] usb usb4-port1: attempt power cycle [ 242.008725][ T5894] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 242.008768][ T5894] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 242.008795][ T5894] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 242.008818][ T5894] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 242.014575][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.067908][ T5894] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 242.163738][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.182405][ T5894] usb 5-1: Product: syz [ 242.214739][ T5894] usb 5-1: Manufacturer: syz [ 242.240662][ T5894] usb 5-1: SerialNumber: syz [ 242.279217][ T5894] usb 5-1: config 0 descriptor?? [ 242.310182][ T7744] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 242.321477][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.426025][ T5887] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 242.446574][ T5887] usb 4-1: device descriptor read/8, error -71 [ 242.462674][ T1211] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 242.642898][ T1211] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 242.711361][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.731743][ T1211] usb 2-1: config 0 descriptor?? [ 242.786280][ T5887] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 242.808545][ T5887] usb 4-1: device descriptor read/8, error -71 [ 242.965335][ T5887] usb usb4-port1: unable to enumerate USB device [ 243.164716][ T7748] random: crng reseeded on system resumption [ 243.196738][ T5871] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 243.293591][ T1211] usbhid 2-1:0.0: can't add hid device: -71 [ 243.306254][ T1211] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 243.385023][ T5871] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 243.455201][ T1211] usb 2-1: USB disconnect, device number 18 [ 243.473283][ T5871] usb 3-1: can't read configurations, error -71 [ 244.641873][ T7790] netlink: 'syz.2.454': attribute type 5 has an invalid length. [ 244.650364][ T7790] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.454'. [ 244.776761][ T7791] veth1_to_bond: entered allmulticast mode [ 244.794442][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'. [ 245.006435][ T1211] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 245.047129][ T5894] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 245.089276][ T7796] PKCS7: Unknown OID: [4] 0.0 [ 245.094592][ T7796] PKCS7: Only support pkcs7_signedData type [ 245.243792][ T1211] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.266611][ T5894] etas_es58x 5-1:0.219: could not retrieve the product info string [ 245.410941][ T1211] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 245.474659][ T1211] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.501163][ T5894] usb 5-1: USB disconnect, device number 26 [ 245.515674][ T1211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.528508][ T5894] etas_es58x 5-1:0.219: Disconnecting syz syz [ 245.554065][ T7790] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.611130][ T1211] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.816962][ T7808] netlink: 'syz.0.459': attribute type 39 has an invalid length. [ 246.110146][ T7814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.402509][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 247.514099][ T7827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.530545][ T7789] veth1_to_bond: left allmulticast mode [ 248.720241][ T5966] usb 3-1: USB disconnect, device number 31 [ 248.823092][ T7849] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 248.878944][ T43] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 249.227609][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 249.263632][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 249.336630][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.643624][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 249.694442][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.734247][ T43] usb 5-1: Product: syz [ 249.739090][ T43] usb 5-1: Manufacturer: syz [ 249.743760][ T43] usb 5-1: SerialNumber: syz [ 249.774294][ T43] usb 5-1: config 0 descriptor?? [ 249.788653][ T43] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 249.815546][ T43] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 250.006309][ T5966] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 250.153916][ T7868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.247289][ T5966] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 250.256971][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.272275][ T5966] usb 4-1: config 0 descriptor?? [ 250.428268][ T43] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 250.440864][ T43] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 251.746175][ T43] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 251.753351][ T43] em28xx 5-1:0.0: No AC97 audio processor [ 252.260155][ T24] usb 5-1: USB disconnect, device number 27 [ 252.267490][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 252.471620][ T24] em28xx 5-1:0.0: Freeing device [ 252.796401][ T5966] ath6kl: Failed to read usb control message: -71 [ 252.819814][ T5966] ath6kl: Unable to read the bmi data from the device: -71 [ 252.831075][ T5966] ath6kl: Unable to recv target info: -71 [ 252.847437][ T5966] ath6kl: Failed to init ath6kl core: -71 [ 252.892057][ T5966] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 252.954196][ T7892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.976489][ T5966] usb 4-1: USB disconnect, device number 30 [ 253.936678][ T5894] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 254.136146][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 254.158736][ T5894] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 254.177874][ T5894] usb 4-1: config 0 has no interface number 0 [ 254.255580][ T5894] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 254.348079][ T7903] loop6: detected capacity change from 0 to 524288000 [ 254.422480][ T5894] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 254.440566][ T5894] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 254.451480][ T5894] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 254.483858][ T5894] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 254.546010][ T5894] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 254.558652][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.570455][ T7908] netlink: 388 bytes leftover after parsing attributes in process `syz.4.479'. [ 254.595924][ T5894] usb 4-1: Product: syz [ 254.600107][ T5894] usb 4-1: Manufacturer: syz [ 254.650774][ T7904] bond1: option ad_user_port_key: invalid value (58322) [ 254.717793][ T5894] usb 4-1: SerialNumber: syz [ 254.731069][ T7904] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 254.751776][ T5894] usb 4-1: config 0 descriptor?? [ 254.771070][ T7899] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 254.877407][ T7914] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 254.909996][ T7904] bond1 (unregistering): Released all slaves [ 255.010973][ T7916] netlink: 'syz.1.480': attribute type 5 has an invalid length. [ 255.019480][ T7916] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.480'. [ 255.325521][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 255.674565][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 255.695650][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 255.752128][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.796264][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.805557][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.839412][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.868453][ T7916] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 255.894551][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.535009][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 256.560530][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 257.583192][ T5894] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 257.638613][ T5894] etas_es58x 4-1:0.219: could not retrieve the product info string [ 257.741072][ T5894] usb 4-1: USB disconnect, device number 31 [ 257.800570][ T5894] etas_es58x 4-1:0.219: Disconnecting syz syz [ 258.235581][ T5966] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 258.375599][ T43] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 258.383430][ T5966] usb 1-1: device descriptor read/64, error -71 [ 258.454655][ T24] usb 2-1: USB disconnect, device number 19 [ 258.535660][ T7945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.608739][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.636722][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.646880][ T5966] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 258.675578][ T43] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 258.691158][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.706313][ T43] usb 3-1: config 0 descriptor?? [ 258.815667][ T5966] usb 1-1: device descriptor read/64, error -71 [ 258.867596][ T7950] ip6tnl1: entered allmulticast mode [ 258.877868][ T4497] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 258.926247][ T5966] usb usb1-port1: attempt power cycle [ 258.973194][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 258.982184][ T4497] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 259.301593][ T43] saitek 0003:06A3:0CFA.0008: unknown main item tag 0x0 [ 259.316027][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 259.357457][ T5966] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 259.402769][ T5966] usb 1-1: device descriptor read/8, error -71 [ 259.432965][ T43] saitek 0003:06A3:0CFA.0008: hidraw0: USB HID v0.00 Device [HID 06a3:0cfa] on usb-dummy_hcd.2-1/input0 [ 259.448523][ T7941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.458184][ T7941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.501491][ T5894] usb 3-1: USB disconnect, device number 32 [ 259.712435][ T5966] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 259.788914][ T5966] usb 1-1: device descriptor read/8, error -71 [ 259.896469][ T5966] usb usb1-port1: unable to enumerate USB device [ 259.904970][ T5966] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 260.722819][ T7972] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 260.732986][ T7972] team0: Port device batadv3 added [ 262.508562][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 262.701857][ T8007] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 262.728719][ T8007] team0: Port device batadv4 added [ 262.765620][ T5966] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 262.935673][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 262.953439][ T5966] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 262.961726][ T5966] usb 5-1: can't read configurations, error -71 [ 262.996385][ T5894] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 263.066040][ T5895] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 263.318381][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 263.396442][ T5894] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 263.520890][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.572918][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 263.619287][ T5895] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 263.635583][ T5894] usb 4-1: Product: syz [ 263.639983][ T5895] usb 3-1: config 0 has no interface number 0 [ 263.678405][ T5894] usb 4-1: Manufacturer: syz [ 263.695934][ T5894] usb 4-1: SerialNumber: syz [ 263.710176][ T5895] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 263.730079][ T5894] usb 4-1: config 0 descriptor?? [ 263.743746][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.995616][ T5895] usb 3-1: Product: syz [ 264.010301][ T5895] usb 3-1: Manufacturer: syz [ 264.086063][ T5895] usb 3-1: SerialNumber: syz [ 264.127114][ T5895] usb 3-1: config 0 descriptor?? [ 264.226247][ T5894] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 264.254368][ T5895] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 264.544448][ T8011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.557687][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 264.596288][ T5895] dvb-usb: bulk message failed: -22 (2/0) [ 264.611851][ T8011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.623266][ T5894] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 264.797540][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.830789][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.878013][ T8011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.907909][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 264.918372][ T5894] usb 4-1: media controller created [ 264.976163][ T5895] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 264.988080][ T5895] usb 3-1: media controller created [ 265.000350][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.015949][ T8011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.056072][ T8011] ------------[ cut here ]------------ [ 265.062005][ T8011] usb 4-1: BOGUS control dir, pipe 80002080 doesn't match bRequestType c0 [ 265.081047][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.123401][ T5895] cxusb: set interface failed [ 265.134615][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 265.140118][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.149787][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.165918][ T8011] WARNING: CPU: 1 PID: 8011 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 265.175842][ T8011] Modules linked in: [ 265.180035][ T8011] CPU: 1 UID: 0 PID: 8011 Comm: syz.2.513 Not tainted syzkaller #0 PREEMPT(full) [ 265.189576][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.199891][ T8011] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 265.206039][ T8011] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 c0 18 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 c4 d0 8f fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 265.228082][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.234574][ T8011] RSP: 0018:ffffc9000465f5e0 EFLAGS: 00010246 [ 265.241004][ T8011] RAX: 42b5d7a3dd999900 RBX: ffff888077ad1b00 RCX: 0000000000080000 [ 265.249150][ T8011] RDX: ffffc9000bf6b000 RSI: 000000000000369d RDI: 000000000000369e [ 265.257428][ T8011] RBP: 1ffff1100f18b8f8 R08: 0000000000000003 R09: 0000000000000004 [ 265.265768][ T8011] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff8880786b2100 [ 265.273787][ T8011] R13: ffff888078c5c7c0 R14: 0000000080002080 R15: ffff888011440d80 [ 265.281969][ T8011] FS: 00007f55d084d6c0(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 265.291228][ T8011] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.298011][ T8011] CR2: 0000200000214030 CR3: 0000000031cc4000 CR4: 00000000003526f0 [ 265.306400][ T8011] Call Trace: [ 265.309795][ T8011] [ 265.312757][ T8011] usb_start_wait_urb+0x114/0x4c0 [ 265.317972][ T8011] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 265.323965][ T8011] usb_control_msg+0x232/0x3e0 [ 265.329090][ T8011] dtv5100_i2c_msg+0x250/0x330 [ 265.333909][ T8011] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 265.339153][ T8011] __i2c_transfer+0x874/0x2170 [ 265.343974][ T8011] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.349374][ T8011] ? __pfx___i2c_transfer+0x10/0x10 [ 265.354605][ T8011] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 265.360107][ T8011] ? i2c_transfer+0x120/0x3a0 [ 265.364892][ T8011] i2c_transfer+0x25b/0x3a0 [ 265.369667][ T8011] ? __pfx_i2c_transfer+0x10/0x10 [ 265.374896][ T8011] ? __might_fault+0xb0/0x130 [ 265.379989][ T8011] i2c_transfer_buffer_flags+0x105/0x190 [ 265.385786][ T8011] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 265.392334][ T8011] ? _copy_from_user+0x94/0xb0 [ 265.397583][ T8011] i2cdev_write+0x112/0x1b0 [ 265.402329][ T8011] vfs_writev+0x4b6/0x960 [ 265.406754][ T8011] ? __pfx_i2cdev_write+0x10/0x10 [ 265.411827][ T8011] ? __pfx_vfs_writev+0x10/0x10 [ 265.416796][ T8011] ? __fget_files+0x2a/0x420 [ 265.421422][ T8011] ? __fget_files+0x3a0/0x420 [ 265.426384][ T8011] ? __fget_files+0x2a/0x420 [ 265.430995][ T8011] do_writev+0x14d/0x2d0 [ 265.435247][ T8011] ? __pfx_do_writev+0x10/0x10 [ 265.440070][ T8011] ? do_syscall_64+0xbe/0xfa0 [ 265.444860][ T8011] do_syscall_64+0xfa/0xfa0 [ 265.449652][ T8011] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.454881][ T8011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.461119][ T8011] ? clear_bhb_loop+0x60/0xb0 [ 265.465877][ T8011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.471883][ T8011] RIP: 0033:0x7f55cf98f749 [ 265.476379][ T8011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.497695][ T8011] RSP: 002b:00007f55d084d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 265.506345][ T8011] RAX: ffffffffffffffda RBX: 00007f55cfbe5fa0 RCX: 00007f55cf98f749 [ 265.514505][ T8011] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000004 [ 265.522925][ T8011] RBP: 00007f55cfa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 265.531084][ T8011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.540256][ T8011] R13: 00007f55cfbe6038 R14: 00007f55cfbe5fa0 R15: 00007f55cfd0fa28 [ 265.548355][ T8011] [ 265.551387][ T8011] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 265.558773][ T8011] CPU: 1 UID: 0 PID: 8011 Comm: syz.2.513 Not tainted syzkaller #0 PREEMPT(full) [ 265.568067][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.579269][ T8011] Call Trace: [ 265.582566][ T8011] [ 265.585503][ T8011] dump_stack_lvl+0x99/0x250 [ 265.590107][ T8011] ? __asan_memcpy+0x40/0x70 [ 265.594711][ T8011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.599941][ T8011] ? __pfx__printk+0x10/0x10 [ 265.604610][ T8011] vpanic+0x237/0x6d0 [ 265.608603][ T8011] ? __pfx_vpanic+0x10/0x10 [ 265.613125][ T8011] panic+0xb9/0xc0 [ 265.616845][ T8011] ? __pfx_panic+0x10/0x10 [ 265.621296][ T8011] __warn+0x31b/0x4b0 [ 265.625296][ T8011] ? usb_submit_urb+0x114d/0x18b0 [ 265.630618][ T8011] ? usb_submit_urb+0x114d/0x18b0 [ 265.635709][ T8011] report_bug+0x2be/0x4f0 [ 265.640249][ T8011] ? usb_submit_urb+0x114d/0x18b0 [ 265.645752][ T8011] ? usb_submit_urb+0x114d/0x18b0 [ 265.651154][ T8011] ? usb_submit_urb+0x114f/0x18b0 [ 265.656284][ T8011] handle_bug+0x84/0x160 [ 265.660626][ T8011] exc_invalid_op+0x1a/0x50 [ 265.665351][ T8011] asm_exc_invalid_op+0x1a/0x20 [ 265.671974][ T8011] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 265.677908][ T8011] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 c0 18 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 c4 d0 8f fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 265.698817][ T8011] RSP: 0018:ffffc9000465f5e0 EFLAGS: 00010246 [ 265.704980][ T8011] RAX: 42b5d7a3dd999900 RBX: ffff888077ad1b00 RCX: 0000000000080000 [ 265.712949][ T8011] RDX: ffffc9000bf6b000 RSI: 000000000000369d RDI: 000000000000369e [ 265.721315][ T8011] RBP: 1ffff1100f18b8f8 R08: 0000000000000003 R09: 0000000000000004 [ 265.729492][ T8011] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff8880786b2100 [ 265.738016][ T8011] R13: ffff888078c5c7c0 R14: 0000000080002080 R15: ffff888011440d80 [ 265.746222][ T8011] usb_start_wait_urb+0x114/0x4c0 [ 265.751623][ T8011] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 265.757335][ T8011] usb_control_msg+0x232/0x3e0 [ 265.762306][ T8011] dtv5100_i2c_msg+0x250/0x330 [ 265.767271][ T8011] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 265.772333][ T8011] __i2c_transfer+0x874/0x2170 [ 265.777125][ T8011] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.782723][ T8011] ? __pfx___i2c_transfer+0x10/0x10 [ 265.788038][ T8011] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 265.793541][ T8011] ? i2c_transfer+0x120/0x3a0 [ 265.798928][ T8011] i2c_transfer+0x25b/0x3a0 [ 265.803500][ T8011] ? __pfx_i2c_transfer+0x10/0x10 [ 265.808619][ T8011] ? __might_fault+0xb0/0x130 [ 265.813316][ T8011] i2c_transfer_buffer_flags+0x105/0x190 [ 265.818962][ T8011] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 265.825397][ T8011] ? _copy_from_user+0x94/0xb0 [ 265.830582][ T8011] i2cdev_write+0x112/0x1b0 [ 265.835322][ T8011] vfs_writev+0x4b6/0x960 [ 265.842023][ T8011] ? __pfx_i2cdev_write+0x10/0x10 [ 265.847171][ T8011] ? __pfx_vfs_writev+0x10/0x10 [ 265.852666][ T8011] ? __fget_files+0x2a/0x420 [ 265.857273][ T8011] ? __fget_files+0x3a0/0x420 [ 265.862039][ T8011] ? __fget_files+0x2a/0x420 [ 265.867080][ T8011] do_writev+0x14d/0x2d0 [ 265.871320][ T8011] ? __pfx_do_writev+0x10/0x10 [ 265.876082][ T8011] ? do_syscall_64+0xbe/0xfa0 [ 265.880793][ T8011] do_syscall_64+0xfa/0xfa0 [ 265.885499][ T8011] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.891194][ T8011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.897725][ T8011] ? clear_bhb_loop+0x60/0xb0 [ 265.902643][ T8011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.908744][ T8011] RIP: 0033:0x7f55cf98f749 [ 265.913269][ T8011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.932896][ T8011] RSP: 002b:00007f55d084d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 265.941408][ T8011] RAX: ffffffffffffffda RBX: 00007f55cfbe5fa0 RCX: 00007f55cf98f749 [ 265.949378][ T8011] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000004 [ 265.957419][ T8011] RBP: 00007f55cfa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 265.965682][ T8011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.973846][ T8011] R13: 00007f55cfbe6038 R14: 00007f55cfbe5fa0 R15: 00007f55cfd0fa28 [ 265.981851][ T8011] [ 265.985072][ T8011] Kernel Offset: disabled [ 265.989486][ T8011] Rebooting in 86400 seconds..