last executing test programs: 6m43.103441578s ago: executing program 3 (id=44): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0) r0 = io_uring_setup(0x1ff0, &(0x7f0000000000)={0x0, 0xf448, 0x4000, 0x0, 0x21b}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x110, r0, 0x8000000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) (async) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000100)=0x32) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1f0, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7e}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b608975af9fb1eab2ebf4cbf9e1b14123844d20f6567dfda"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "746c708225ca3077cde32aba3a090ecf16e877ca3322a220"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b97ce6d600a2b4c50d03a012caeca89dda783aec438e05e0"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000}, 0xc011) (async) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000480), &(0x7f00000004c0)=0x4) (async) syz_open_dev$sndmidi(&(0x7f0000000500), 0x7fffffff, 0x2) r5 = socket(0x32, 0x1, 0x8ed) (async) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1) sendmsg$TIPC_NL_NET_GET(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x7c, r9, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7a52}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x90ba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) sendmmsg(r5, &(0x7f0000002fc0)=[{{&(0x7f0000000700)=@generic={0x1, "cdec63227b5404856810e0de400611dbd27a0deced768bdccc077efe8abf2d059e21e17a1dd40e8c24b82835eb826a5ab1717e1a7621efe9fcc5e966f18cf90de3055fe190277001b96ad0717dabf15281f11d5aff076274f70925a1bb706ac170b10ee51e740b3ea7f6ebe869b3ba5d80ba90134782d07a175c2b43b929"}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)="5bd49cd12238d8eabda7d3a8957287b3740ba1e8f4dde9eae4cd31d8783d244454240193cb4042de8c1d3c66f8c331d7c2c0b30de0bbf083cf1a25fc0e905e50f94b197285607b958027efabf1612f64dca7bea97a58b1df9e51c3d6a745f561d6515c98471483923124ea0930c42ca9007e452bd4542cb825eecb9beab88ebb95b092dadb1e8a90f77771c5c7050fd5ba9cf1971909135aa7a8ac72786b96a5c27b4303a32a83347a45f8cf3b9b07d316fc70d8cb0c45de64ebfff0e8282108f9ca9a5ce6ac0612556f5d2a6cbdaee6cf4e54c587ddaff60b0695534405813218218da60917", 0xe6}], 0x1, &(0x7f00000008c0)=[{0xd0, 0x110, 0x8, "afcb00ffaaa268a3b45181f0a0a772cff0bde411ef5e361b36bf2a5143f4e99e6348f66c88755d403af160a102b2d4a4689b5626ae95c7c3f62ffbf52b650d8909b988f711b2aa1703430ad2ebe7c37dff9626cbe5bc6868582fb96fce8d34740e1ed876659656bf374a8a7e5d9412567294cbc57fbee56810a42d2475aae2003d781c34eba0cc01f7d3ebb36f49c1a1dc126294385e32aee766b5e1ffaf2ce22ab3ec4d7c22d391297749ba0a63ec334efe3f2b7f477dac3da1cd3d47ef91d6"}, {0x30, 0x3a, 0x8, "06820ad59af7cc5df8cb09e62c7324c0f8e07f5b40db42712a00cf"}], 0x100}}, {{&(0x7f0000000a00)=@can={0x1d, r10}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000a80)="16ca9b222ec2a79c160c4cd48328349624d2fe66c2000b16c862b8ed83cd77e1eb2f291ac48a32d31b599f1cb3c7dd05214e93bce37efb01b93619", 0x3b}, {&(0x7f0000000ac0)="c76a05318567e009da49da18c8b0af73e07a66657583fd9be5336a93f816f3520f9ee6099b7d489fcaa22a069746f7c2340d69fe54aad23df26936fa4a4f7db5a94df0bde14ec871789aab76cc7ebbfac009dd32f9ba05c37630fdcf829703e66453842ebc78c406da4ac99f678b2f82cea3117f828aa7ad96b22196", 0x7c}, {&(0x7f0000000b40)="1ec9d10a535482962e13984b291ec46cee14921d49177c48b083891bc5cc208ab0f0f8b2c85ddd4fb37530ed1ab761fcbaf7463291dd7c072dda6d53ba6be341f36536e38391dbbc64d6e963925094f64510f433e506362a02d9a40cefd85919618d1f9514ba2688cbfad6b0254965f39623e73e169ce6c8ab598028e1e17dcba9d2e49b7493993d15961d8f5f3f300f56d36500893f66945f4bd90a89e4c9af5a15481e1bb6f7749e4258035a51dd", 0xaf}, {&(0x7f0000000c00)="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", 0x1000}], 0x4, &(0x7f0000001c40)=[{0x1010, 0x101, 0x0, "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"}, {0x48, 0x84, 0x7, "5fa5356a97a753a7b6d0220d8f87c42484f3d1e90943d508b7fcf43e6c1615b549094e49ef6b574de3c2fa9708c179d6381813"}], 0x1058}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002cc0)="593afc81a39c082d9375c637d7550bd73fb43d526eed76cdc7eadfa103b6", 0x1e}, {&(0x7f0000002d00)="5e1c5fe423231a85dcb407de60019d64d643772f072d7107f505916a94b7d848b7db5906a81f61dec03ab99b54f59b09b84c05c02ec5d0476965bfc2279a67f8b0ec729959c3b6a385c843ac47633db890ffb6963b4d01f5", 0x58}], 0x2, &(0x7f0000002dc0)=[{0x18, 0x3a, 0x72, "e277e73bc934f743"}, {0x88, 0x0, 0xed, "c748b2f46e22ca2a3374751cef688a2bd1afcda4a5d0fa76edcd795aec74eba0bca6cd66249c53b3b4d0a6ddb27c52a3b0a3503b4bf6ff8243e249673ceedffa03a8b6c50295e0f1a0cee65a5922f21ed5e30dd2ef1096bf1e3bfaae7c115e71eef02f483f2a5fd6f2250b47f9c4903ee4"}, {0xb0, 0x181, 0x23, "8dc2d5ef51cdd19fffbe8a2bb7853a08f6968ce8b4d27c7f942465ded16fffac0c71cda065cb8bd16af3c06a5c027df288e9ad9cb0e41689880d06fea365aa918ce543324ed251f34f4a2be9861bd69de3fc5de34a8f782aebd6b30311c8915b3358566165c68379653f3abd232d6efbb962d8e3355f18d9dc2fa071251ad547999f118ded50dad216e87cef23dc1fddda9dc2192d8563a5978a"}, {0xa8, 0x10e, 0xffff, "5fbe75068f5f81109717c16c5f0556c0ac5e3f9f48df5b037eb0916b48c739a809baf1a3589dd73adf52c3a1b63c88b72e7c7d012b868ec37657b0c4384f349885b7cf9e782a5fb8281cc79c867132b4361ddf5c4618023d048f37f4c0cb016912981379bba242e70e1a2151e75ae223b6dae2d4c74128abc3a71f0b4cd5f1021c6ceaec7149a0cb07086e854705b87881da58"}], 0x1f8}}], 0x3, 0x800) write$P9_RMKDIR(r3, &(0x7f0000003080)={0x14, 0x49, 0x2, {0x8}}, 0x14) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000030c0), 0x2, 0x0) r11 = openat$incfs(r7, &(0x7f0000003100)='.pending_reads\x00', 0x115181, 0xf1) sendmsg$NFT_MSG_GETFLOWTABLE(r11, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x7c, 0x17, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5582}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x85}, 0x4000001) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000003280)={0x1ff, 0x1, 0x9000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async) r12 = msgget$private(0x0, 0x10) msgsnd(r12, &(0x7f00000032c0)={0x0, "affe331ed87f21df7b30c9a1256ff3c04afab3b4274a05e4c02808ffbf71ac8dd418ab0836dc397e05e2ffeefb69bc2039c3f2a7ce648a6b95a45294fbccb9d7d5e270c600a78417c9e5bca69a138885ace81d17c97e8739ead6345787df48f08af9bea42a5a206831d424859150d782b160bd409a94ca3314954324162b2e6622aaa5c37034a47ab6fa033f9636125220666b58b4b65e5ea676538b62874c7eb7b834c07b7d769b143b529b4e3f7ac3d9"}, 0xb9, 0x800) (async) syz_clone(0x200, &(0x7f0000003380)="9a27b1c0cc153c255f6baf361a9655b94dcd828f96c8a54b1cf192c4ede31481a6304cd093a7ba8679c1593c49230c3a19e4e0d6675291c515b6cb74c870039dc25c946316ce866e098327eb168163b6a38b2d59ca26e1fff8596d2044226f6e1b5af5eb671a400bbdc16bee37f5f3b3ae4c81d24db6e58556564ae8f904f3f8a5022c4e73e3488462a8a92c9dc3ce1b590fa46660d11cb63c05609a0d741a50ea8ebd75cd6313c5bbcebe082018567d5103b671f2d2ac0056573e320f5933380f92aba965c6efb162", 0xc9, &(0x7f0000003480), &(0x7f00000034c0), &(0x7f0000003500)="272ca28a92736b585c171142bfcf2e7cd16d82e75516c80523446f21de55f9b54f2c0fd77fe8495ac7984210bc564c921086738558914ae69ff76d28dc9dc1cb562a189dea8625a78357cd9b8335b6016ef4ebfc787efb51177ec86d74c74dcae5902daf7d4ec92e8f6f4a509a410648c5dac1771843c874eec3f1b15f4232f585b91ccef38bc1dfe8d9") (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000035c0)=0xffffffffffffffff, 0x4) (async) ioctl$IMDELTIMER(r8, 0x80044941, &(0x7f0000003600)) 6m42.259745563s ago: executing program 3 (id=47): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0xa8d4}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffff"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0xb, 0x10007a, 0x100000}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000000)=0x4, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6m39.575871464s ago: executing program 3 (id=55): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001680)={r1, 0x38, "b5218f24aa04857f37042e3c3dc219984efcc101fc319b72df73c2d8da29e42208b16f1158e31f8f33c4586c849204532e3eeb95304821ab"}, &(0x7f00000002c0)=0x40) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x5, &(0x7f0000000100)='nolazytime\x00', 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000540)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6e17fd477051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281c8e09a6c1f1e0db5d1e74e1f27a89b2c25c2316fcddc9ff2a71eceb3094ba465389e", 0x7a}, {&(0x7f0000000080)="ce2ede98d4bde439a7931c4e260090a647151bacb721146be7ef4494578b05c18fc56c1571aa57d0f79d3c", 0x2b}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e3d32aa2bf0bd42348d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da241fe082c8f8602308cd2f7dc846c93e62a8d53d22fcabce", 0x5b}], 0x3, 0x0, 0x0, 0x2400c0a0}], 0x1, 0x48800) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local}) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={0x0, 0x3}) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000480)=""/5, 0x5}, {&(0x7f0000000b00)=""/249, 0xf9}, {&(0x7f0000000c00)=""/11, 0xb}], 0x3}, 0x0) (async) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000040)=ANY=[@ANYRESHEX=r6, @ANYRESOCT, @ANYBLOB="129c8a6b4d1507a8d8a099ba3fec9a24b613aff19a1c1a21218426df8858832259bcdc99881b530a26ac05b407cc1f35cd31eaa69119f694bec49b6c330674fedab0119aa7d471a723ba3fe38a8ce12986a2d4bf982cebe954119aedab73f026d1f0ed4deabb8032ca229fbc27f4afb676ff05a4c6d6953a2b85ca1ce4acf0ad5bb51b93f5c90edb91fc7cc7f65b767d0a1070e7fd8ef9ed72c3fb10157156dda17aadb2b1507f77eb2d9fb8189cc056a7cc7fe0e819bb11a93ce0147964e814afb490e8a1846f4d1676b77c9deaaf", @ANYRESHEX=r6, @ANYRESHEX=r6], 0x0) (async) getsockname$packet(r6, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000000710000042cbd7000fcdbdf2507000000", @ANYRES32=r7, @ANYBLOB="0c000191b3000300000000000c000180067fea1c0da20002000f0000000c0001800500060009e206f7dfe3cc80eb6148364937923a3a000000d5f5e5d3e80c910c"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) read$char_usb(r8, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x2) 6m39.331052426s ago: executing program 3 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x40, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x24, 0x3d, 0x0, 0x1, [@nested={0x20, 0x122, 0x0, 0x1, [@generic="d3b34c2914bca58a0af52d7c2bbd0ac1c5a63bcebb01aa63cfd3cb7f"]}]}, @typed={0x6, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x3c, r3, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x27}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000002) 6m38.963993228s ago: executing program 3 (id=58): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x60}}, 0x4890) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) unshare(0xa000400) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/192, 0xc0}, {&(0x7f0000001400)=""/73, 0x49}, {&(0x7f0000001480)=""/167, 0xa7}, {&(0x7f0000001540)=""/186, 0xba}, {&(0x7f0000001600)=""/101, 0x65}, {&(0x7f0000001680)=""/197, 0xc5}, {&(0x7f0000001780)=""/84, 0x54}, {&(0x7f0000001800)=""/164, 0xa4}], 0xa, &(0x7f0000000080)=""/11, 0xb}, 0x7}], 0x1, 0x3001, &(0x7f00000019c0)) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6m38.705621808s ago: executing program 3 (id=59): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x68, r3, 0x1, 0x0, 0x2, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "2c6f7b3aa6c6ddea2118a09c2b550ba928e0d239700cb7a786a0954d1804ef45338d3eb7"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000003c0)=0x6e5, 0x8, 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x814, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x49323159}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = inotify_init() open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000915333737f6bf89aa9e1890f5b06d6e603f516824140edae9e42002001e0ce0000e8fffddbdf250a000008ef0000010a40010052000fa00000010086c0"], 0x24}, 0x1, 0x0, 0x0, 0x60400d1}, 0x40000) readv(r5, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}, {0x0}], 0x2) 6m38.110876906s ago: executing program 32 (id=59): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x68, r3, 0x1, 0x0, 0x2, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "2c6f7b3aa6c6ddea2118a09c2b550ba928e0d239700cb7a786a0954d1804ef45338d3eb7"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000003c0)=0x6e5, 0x8, 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x814, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x49323159}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = inotify_init() open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000915333737f6bf89aa9e1890f5b06d6e603f516824140edae9e42002001e0ce0000e8fffddbdf250a000008ef0000010a40010052000fa00000010086c0"], 0x24}, 0x1, 0x0, 0x0, 0x60400d1}, 0x40000) readv(r5, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}, {0x0}], 0x2) 6m8.678109792s ago: executing program 0 (id=162): r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) unshare(0x22020600) (async, rerun: 64) r1 = socket(0x2b, 0x1, 0x1) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x98, @dev={0xfe, 0x80, '\x00', 0xe}, 0x3c35}}, 0x24) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e000900270970000000002204"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@flushsa={0x70, 0x1c, 0x110, 0x70bd2a, 0x25dfdbfb, {0xff}, [@algo_comp={0x5a, 0x3, {{'lzs\x00'}, 0x90, "2da9e353dc96b355e111f200afd264af531c"}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x20004011) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x40) 6m8.435944516s ago: executing program 0 (id=163): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r1, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_names='batadv0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0', @ANYRES16=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x840) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, &(0x7f0000000100)}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r0, 0x1}, 0xc) syz_pidfd_open(0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000cb000000000039000000080003", @ANYRES32, @ANYBLOB="28005a80040000802000018004000600010000001100010018300b040200480c6c0b180303000000"], 0x44}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x8803, 0x0, 0x0) r3 = socket(0x2b, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000e405000500020000000500010006000600d958495b5b0a1c84afae95645d6247561d01f35199ff22ec120d93fe8ad9710b8671bbd0cf6656296bbea8c56936c0a1947c60f173c2254a4181290ccc5e46b618cd261edaefe2c93b586ab7053e01c1850416a36bf438601808bc0676fc11ce096019d543b0f0d71d8b28086d3bf12bcd63", @ANYRES16=r3, @ANYRES8, @ANYRESHEX=r3, @ANYRESHEX], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 6m8.219370227s ago: executing program 0 (id=164): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r4) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021880000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000005c000380580000800400018050000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c00"], 0x10c}}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f00000000c0)={0x0, 0x240, 0x380, &(0x7f00000005c0)=[0x16, 0xfffffffffffffffd, 0x8, 0x6, 0x3e3c, 0xffff, 0x8d, 0x8001, 0x3f8000, 0x1, 0x80000001, 0x61f, 0x36, 0x1000, 0xffffffffffffffcf, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x80000001, 0x9, 0x4, 0x1000, 0x3, 0x0, 0x0, 0x8, 0x29, 0x335, 0x9, 0x6, 0x3, 0x4c0, 0x0, 0xc, 0x4a17b51d, 0x0, 0xd9d, 0x1, 0x5, 0xfffffffffffffffb, 0x7, 0xe244, 0x373, 0x0, 0x5, 0x4, 0x4, 0x0, 0x0, 0x401, 0x7, 0x3ff, 0x5, 0x5, 0xc, 0x2, 0x8, 0xbe1f938, 0x0, 0x0, 0x5, 0x3, 0x8, 0x4, 0x5, 0x2, 0x3, 0x8, 0x7, 0x4, 0x24, 0x9, 0x7, 0x5, 0x9, 0xf, 0x4, 0x1edb, 0xc4a, 0xed7a, 0x8, 0x3a, 0x200, 0x3, 0x8, 0x1, 0x8, 0x400, 0xa, 0x0, 0x4bb, 0x4, 0x8, 0x7fffffff, 0x3719, 0x401, 0x8, 0x0, 0x7, 0x2, 0x4f38, 0x9, 0x0, 0x0, 0x3, 0x887, 0x2, 0xe2a, 0x2, 0x9, 0x7fffffffffffffff, 0xfffffffffffffff2, 0x9, 0x0, 0x0, 0x3, 0xfffffffffffffff2, 0x2, 0x7, 0x101, 0x80, 0xfffffffffffffffa, 0x8, 0x6, 0x2]}) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 6m5.997847754s ago: executing program 0 (id=173): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0xc469, 0x3}, 0x18, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r3, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x189a80, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r7, 0x80044df9, &(0x7f00000001c0)) read$FUSE(r6, &(0x7f0000003140)={0x2020}, 0x2020) landlock_restrict_self(r0, 0x9) 6m2.730976063s ago: executing program 0 (id=184): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r4) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021880000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000005c000380580000800400018050000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c00"], 0x10c}}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f00000000c0)={0x0, 0x240, 0x380, &(0x7f00000005c0)=[0x16, 0xfffffffffffffffd, 0x8, 0x6, 0x3e3c, 0xffff, 0x8d, 0x8001, 0x3f8000, 0x1, 0x80000001, 0x61f, 0x36, 0x1000, 0xffffffffffffffcf, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x80000001, 0x9, 0x4, 0x1000, 0x3, 0x0, 0x0, 0x8, 0x29, 0x335, 0x9, 0x6, 0x3, 0x4c0, 0x0, 0xc, 0x4a17b51d, 0x0, 0xd9d, 0x1, 0x5, 0xfffffffffffffffb, 0x7, 0xe244, 0x373, 0x0, 0x5, 0x4, 0x4, 0x0, 0x0, 0x401, 0x7, 0x3ff, 0x5, 0x5, 0xc, 0x2, 0x8, 0xbe1f938, 0x0, 0x0, 0x5, 0x3, 0x8, 0x4, 0x5, 0x2, 0x3, 0x8, 0x7, 0x4, 0x24, 0x9, 0x7, 0x5, 0x9, 0xf, 0x4, 0x1edb, 0xc4a, 0xed7a, 0x8, 0x3a, 0x200, 0x3, 0x8, 0x1, 0x8, 0x400, 0xa, 0x0, 0x4bb, 0x4, 0x8, 0x7fffffff, 0x3719, 0x401, 0x8, 0x0, 0x7, 0x2, 0x4f38, 0x9, 0x0, 0x0, 0x3, 0x887, 0x2, 0xe2a, 0x2, 0x9, 0x7fffffffffffffff, 0xfffffffffffffff2, 0x9, 0x0, 0x0, 0x3, 0xfffffffffffffff2, 0x2, 0x7, 0x101, 0x80, 0xfffffffffffffffa, 0x8, 0x6, 0x2]}) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 6m2.488327284s ago: executing program 0 (id=186): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x1ff}) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[], 0xc4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x14}]}]}]}, 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) 6m1.908808915s ago: executing program 33 (id=186): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x1ff}) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[], 0xc4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x14}]}]}]}, 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) 2.198646597s ago: executing program 5 (id=2620): unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x99, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x99, 0x0, @opaque="ee373935ef0f8da10b47000507b0025a9001e6cc070855848340507e8bd26f3ca1d633ec368e2be6a38e100ad79a38fb5c1436b5988215e096f64a843aafad7b82e65587c030411aefc61cb5c51b9788796ac34f4a8e455dd1d07d4684c7b2e91b6fd3fbaeffe77e10e2bd1d0cde2e814806120485b4b6f5c6d14b23c1b00be5fe8ca59610a206c47126484462b109828c"}}}}, 0xc1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) 2.042783859s ago: executing program 2 (id=2623): madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 1.963653875s ago: executing program 5 (id=2626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x4, 0xfd, 0x3}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0x0, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0xfffffffffffffcd2, 0x1, 0x5}}}}]}, 0x38}}, 0x0) 1.848437787s ago: executing program 2 (id=2628): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x0, 0x103, 0x2}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000100)) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1.811023355s ago: executing program 5 (id=2629): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r3, &(0x7f00000002c0)=[{0x1}], 0xdeadbeef, 0x8, 0x2000000000000189}) 1.656078982s ago: executing program 5 (id=2633): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a00000200000000424a0000000000"], 0x10}}, 0x0) 1.487990761s ago: executing program 5 (id=2636): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2718, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) 1.324360175s ago: executing program 5 (id=2640): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.280940215s ago: executing program 1 (id=2641): mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000009, 0x80012, 0xffffffffffffffff, 0x80000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x9, 0x4, 0x1, 0x16, 0x2c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast, {[@generic={0x94, 0xf, "f00c8e76d0966f9a2b2407c08a"}]}}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0xff04) 1.076529069s ago: executing program 4 (id=2644): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r3, &(0x7f00000002c0)=[{0x1}], 0xdeadbeef, 0x8, 0x2000000000000189}) 1.076424227s ago: executing program 6 (id=2645): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000000180)="1216f44c1598f13f022ae1ec77947e", 0xf}], 0x1) 1.029121952s ago: executing program 1 (id=2646): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2020d}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) 978.751168ms ago: executing program 4 (id=2647): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100", 0x14) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_gfeatures}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_wolinfo={0x5, 0x1, 0xdf4, "d3e2ae09a105"}}) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r2) read(r4, 0x0, 0xff40) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="0ca0d5103ecc11ce2bbd46cbab700d4385dcc788a586b36f538b15994bc6ca6ee72f1d41c9f89f9e65decf95ecef3099aab6f02683bd30cd29ccf253123b2d372d55e4bcd7a5f8657a", 0x49}], 0x1, 0x0, 0x0, 0x40000}, 0x4000080) syz_io_uring_setup(0xef5, &(0x7f0000000700)={0x0, 0x2260, 0x8, 0x1, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 856.008413ms ago: executing program 6 (id=2648): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 749.710434ms ago: executing program 4 (id=2649): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000008, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000006c000070fa"], &(0x7f0000003340)=""/5, 0x8c, 0x5, 0x1, 0x6abb}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20050001}, 0x20000004) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 718.599689ms ago: executing program 6 (id=2650): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ff}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 640.429524ms ago: executing program 1 (id=2651): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x65c, 0xec, 0xec, 0x424, 0x0, 0x1cc, 0x594, 0x594, 0x594, 0x594, 0x594, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x80]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xff}}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x2, 0x0, [0x905, 0xfffe, 0x4, 0x4, 0x68e, 0xffff, 0x6, 0x7, 0x6, 0x7, 0xfff7, 0x9, 0xffff, 0x8, 0x2, 0x9], 0xa}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6b8) 599.576677ms ago: executing program 4 (id=2652): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x1, 0x3, 0x2, 0x0, [{0xf, 0x0, 0x0, '\x00', 0xe}, {0x5, 0x0, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x1, '\x00', 0xa0}, {0x1, 0x9}, {0xa, 0x3, 0x5}, {0xb8, 0xda, 0xd, '\x00', 0x59}, {0xb, 0x1, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x4, 0x6, 0x4, '\x00', 0x9}, {0x7, 0x5, 0xd, '\x00', 0xa}, {0x0, 0x4b, 0x45, '\x00', 0xc2}, {0x8, 0xab, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xfe, '\x00', 0x81}, {0x5, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x4, 0x6, '\x00', 0x9}, {0xc2, 0x9, 0x7, '\x00', 0x4}, {0x4, 0x7, 0x4, '\x00', 0x9}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x10, 0x80, '\x00', 0x10}, {0x3, 0x3, 0x2, '\x00', 0x86}, {0x9, 0xb, 0xa, '\x00', 0x8}, {0x86, 0x0, 0x5, '\x00', 0x9}, {0x56, 0x3, 0x4, '\x00', 0x7f}]}}) 589.447379ms ago: executing program 6 (id=2653): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0c0701104d52"], 0xf) 480.528424ms ago: executing program 1 (id=2654): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 480.251117ms ago: executing program 2 (id=2655): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 460.012851ms ago: executing program 6 (id=2656): mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000009, 0x80012, 0xffffffffffffffff, 0x80000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x9, 0x4, 0x1, 0x16, 0x2c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast, {[@generic={0x94, 0xf, "f00c8e76d0966f9a2b2407c08a"}]}}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0xff04) 387.245227ms ago: executing program 2 (id=2657): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r3, &(0x7f00000002c0)=[{0x1}], 0xdeadbeef, 0x8, 0x2000000000000189}) 316.248176ms ago: executing program 1 (id=2658): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000000180)="1216f44c1598f13f022ae1ec77947e", 0xf}], 0x1) 298.108446ms ago: executing program 2 (id=2659): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff0000", 0x1e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_gfeatures}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_wolinfo={0x5, 0x1, 0xdf4, "d3e2ae09a105"}}) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r2) read(r4, 0x0, 0xff40) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="0ca0d5103ecc11ce2bbd46cbab700d4385dcc788a586b36f538b15994bc6ca6ee72f1d41c9f89f9e65decf95ecef3099aab6f02683bd30cd29ccf253123b2d372d55e4bcd7a5f8657a", 0x49}], 0x1, 0x0, 0x0, 0x40000}, 0x4000080) syz_io_uring_setup(0xef5, &(0x7f0000000700)={0x0, 0x2260, 0x8, 0x1, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 266.759584ms ago: executing program 4 (id=2660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x61, 0x7}]}) 216.434886ms ago: executing program 1 (id=2661): syz_open_procfs(0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x6, 0x1, &(0x7f0000000080)={0x11, "cc9efc7ddb01702fa9a7ff7d040b00000000000700"}}) 147.956961ms ago: executing program 6 (id=2662): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 10.289648ms ago: executing program 4 (id=2663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_INDEV={0x14, 0x2, 'syzkaller0\x00'}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 0s ago: executing program 2 (id=2664): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x4004743c, 0x0) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x13}, 0x1, 0x4, 0x88, {}, 0x0, 0x4000ffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) kernel console output (not intermixed with test programs): ttributes in process `syz.4.614'. [ 261.462225][ T8770] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 261.563968][ T8769] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 261.973549][ T8747] tipc: Resetting bearer [ 262.032761][ T8747] tipc: Disabling bearer [ 262.061803][ T8773] loop2: detected capacity change from 0 to 7 [ 262.123368][ T5982] Dev loop2: unable to read RDB block 7 [ 262.129159][ T5982] loop2: unable to read partition table [ 262.139518][ T5982] loop2: partition table beyond EOD, truncated [ 262.154820][ T8773] Dev loop2: unable to read RDB block 7 [ 262.184847][ T8773] loop2: unable to read partition table [ 262.217638][ T8773] loop2: partition table beyond EOD, truncated [ 262.244575][ T8773] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 262.387464][ T8776] loop5: detected capacity change from 0 to 7 [ 262.395581][ T8776] Dev loop5: unable to read RDB block 7 [ 262.414088][ T8776] loop5: unable to read partition table [ 262.475617][ T8776] loop5: partition table beyond EOD, truncated [ 262.509015][ T8776] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 262.685862][ T8785] loop2: detected capacity change from 0 to 7 [ 262.692867][ T8785] Dev loop2: unable to read RDB block 7 [ 262.698507][ T8785] loop2: AHDI p3 [ 262.702280][ T8785] loop2: partition table partially beyond EOD, truncated [ 262.784733][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 262.805909][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.632'. [ 262.893627][ T8788] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 262.960081][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 262.981051][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 263.000576][ T24] usb 3-1: config 4 has an invalid interface number: 127 but max is 0 [ 263.016938][ T24] usb 3-1: config 4 has no interface number 0 [ 263.029150][ T8805] netlink: 'syz.6.635': attribute type 2 has an invalid length. [ 263.049047][ T8805] !: entered promiscuous mode [ 263.058687][ T8805] netlink: 'syz.6.635': attribute type 2 has an invalid length. [ 263.066683][ T8805] !: left promiscuous mode [ 263.126333][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 263.129831][ T24] usb 3-1: config 4 interface 127 has no altsetting 0 [ 263.212020][ T24] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 263.221556][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.232644][ T24] usb 3-1: Product: syz [ 263.237394][ T24] usb 3-1: Manufacturer: syz [ 263.253440][ T8811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.268387][ T24] usb 3-1: SerialNumber: syz [ 263.292621][ T8811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.425719][ T8811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.476565][ T8811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.521670][ T24] usbhid 3-1:4.127: couldn't find an input interrupt endpoint [ 263.535057][ T24] usb 3-1: USB disconnect, device number 57 [ 263.887556][ T8821] loop2: detected capacity change from 0 to 7 [ 263.896019][ T8821] Dev loop2: unable to read RDB block 7 [ 263.902189][ T8821] loop2: unable to read partition table [ 263.910914][ T8821] loop2: partition table beyond EOD, truncated [ 263.918036][ T8821] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 264.075588][ T8802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.634'. [ 264.354191][ T8832] loop5: detected capacity change from 0 to 7 [ 264.370687][ T8832] Dev loop5: unable to read RDB block 7 [ 264.386608][ T8832] loop5: unable to read partition table [ 264.414631][ T8832] loop5: partition table beyond EOD, truncated [ 264.450222][ T8832] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 264.907329][ T8836] fuse: Bad value for 'fd' [ 265.075549][ T8838] loop2: detected capacity change from 0 to 7 [ 265.101082][ T8838] Dev loop2: unable to read RDB block 7 [ 265.117001][ T8838] loop2: AHDI p3 [ 265.132583][ T8838] loop2: partition table partially beyond EOD, truncated [ 265.216165][ T8840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.032559][ T8855] loop2: detected capacity change from 0 to 7 [ 266.082871][ T5831] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 266.224718][ T8855] Dev loop2: unable to read RDB block 7 [ 266.253227][ T8855] loop2: unable to read partition table [ 266.317258][ T8855] loop2: partition table beyond EOD, truncated [ 266.340961][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.351971][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.462131][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 266.475382][ T8863] netlink: 40 bytes leftover after parsing attributes in process `syz.1.650'. [ 266.596354][ T8855] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 266.730896][ T5831] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 266.752279][ T5831] usb 7-1: config 0 interface 0 has no altsetting 0 [ 266.992322][ T5831] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 267.001676][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 267.068584][ T5831] usb 7-1: Product: syz [ 267.091823][ T5831] usb 7-1: Manufacturer: syz [ 267.101533][ T5831] usb 7-1: SerialNumber: syz [ 267.124510][ T5831] usb 7-1: config 0 descriptor?? [ 267.203748][ T5831] usb 7-1: selecting invalid altsetting 0 [ 268.129959][ T29] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 268.331344][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 268.341941][ T8881] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.360415][ T29] usb 5-1: config 164 has an invalid interface number: 7 but max is 0 [ 268.402285][ T29] usb 5-1: config 164 has no interface number 0 [ 268.412414][ T29] usb 5-1: config 164 interface 7 altsetting 5 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 268.447413][ T29] usb 5-1: config 164 interface 7 has no altsetting 0 [ 268.515756][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0c5e, bcdDevice=98.d1 [ 268.540765][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.570298][ T29] usb 5-1: Product: syz [ 268.579135][ T29] usb 5-1: Manufacturer: syz [ 268.654951][ T29] usb 5-1: SerialNumber: syz [ 268.763614][ T29] r8152-cfgselector 5-1: Unknown version 0x0000 [ 268.904455][ T8887] loop2: detected capacity change from 0 to 7 [ 268.927637][ T8887] Dev loop2: unable to read RDB block 7 [ 268.937774][ T8887] loop2: AHDI p3 [ 268.944196][ T8887] loop2: partition table partially beyond EOD, truncated [ 269.100862][ T29] r8152 5-1:164.7: Expected endpoints are not found [ 269.188878][ T5831] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 269.215122][ T29] r8152-cfgselector 5-1: USB disconnect, device number 48 [ 269.254243][ T8894] netlink: 28 bytes leftover after parsing attributes in process `syz.5.658'. [ 269.905408][ T8899] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 269.909834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 269.945091][ T8846] snd-usb-audio 7-1:0.0: Runtime PM usage count underflow! [ 269.984733][ T29] usb 7-1: USB disconnect, device number 29 [ 270.792911][ T8910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.207995][ T8910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.274640][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.663'. [ 271.441943][ T29] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 271.650531][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 271.660324][ T29] usb 5-1: config 255 has an invalid interface number: 202 but max is 0 [ 271.689151][ T29] usb 5-1: config 255 has no interface number 0 [ 271.702080][ T29] usb 5-1: config 255 interface 202 has no altsetting 0 [ 271.714684][ T29] usb 5-1: string descriptor 0 read error: -22 [ 271.721939][ T29] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=33.c7 [ 271.731562][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.761250][ T29] lan78xx 5-1:255.202 (unnamed net_device) (uninitialized): USB bus speed not supported [ 271.788439][ T29] lan78xx 5-1:255.202: probe with driver lan78xx failed with error -5 [ 271.876395][ T8926] loop2: detected capacity change from 0 to 7 [ 271.896044][ T8926] Dev loop2: unable to read RDB block 7 [ 271.904235][ T8926] loop2: AHDI p3 [ 271.907948][ T8926] loop2: partition table partially beyond EOD, truncated [ 271.977480][ T5921] usb 5-1: USB disconnect, device number 49 [ 272.089792][ T29] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 272.109990][ T5831] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 272.255411][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 272.267690][ T29] usb 7-1: not running at top speed; connect to a high speed hub [ 272.286667][ T29] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 272.297432][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 272.314959][ T29] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 272.323749][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.328329][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.345028][ T5831] usb 3-1: New USB device found, idVendor=04f3, idProduct=0001, bcdDevice= 0.00 [ 272.352405][ T29] usb 7-1: Product: syz [ 272.358346][ T29] usb 7-1: Manufacturer: syz [ 272.363330][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.372137][ T29] usb 7-1: SerialNumber: syz [ 272.373763][ T8939] netlink: 'syz.1.674': attribute type 30 has an invalid length. [ 272.391043][ T5831] usb 3-1: config 0 descriptor?? [ 272.499772][ T5921] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 272.750890][ T8949] binder: 8941:8949 ioctl c0306201 2000000004c0 returned -14 [ 272.769774][ T8949] binder: 8941:8949 unknown command 0 [ 272.775223][ T8949] binder: 8941:8949 ioctl c0306201 2000000001c0 returned -22 [ 272.790820][ T29] usb 7-1: BAAD SPEAKERPHONE c_chmask mismatch [ 272.859831][ T5920] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 272.870937][ T8922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.891644][ T5921] usb 6-1: Using ep0 maxpacket: 32 [ 272.933176][ T5921] usb 6-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.947608][ T8922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.970065][ T5921] usb 6-1: config 1 interface 0 has no altsetting 0 [ 272.981248][ T5831] usbhid 3-1:0.0: can't add hid device: -71 [ 272.990966][ T5831] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 273.006672][ T5921] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.40 [ 273.018013][ T29] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 273.029550][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.049295][ T5921] usb 6-1: Product: í‘·á›â…î’德㉊㚮峥鼜櫱棖壛â á¿±à¾»àº®ã¨´ä¼¯ã¿˜á‚˜ç½±à¯ï´¡á‘„å¨‘ãµ ã¡œæ•µá—ºè„ ê§©â½»è™ [ 273.050323][ T5920] usb 5-1: device descriptor read/64, error -71 [ 273.113103][ T5921] usb 6-1: Manufacturer: 罾驕헞鋌ޅᣲὃ칥䜲ೣ芇ä‚é–» [ 273.124331][ T5831] usb 3-1: USB disconnect, device number 59 [ 273.132457][ T5921] usb 6-1: SerialNumber: Ð [ 273.144901][ T29] usb 7-1: USB disconnect, device number 30 [ 273.213668][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.330671][ T5920] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 273.425351][ T5921] usbhid 6-1:1.0: can't add hid device: -71 [ 273.439814][ T5921] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 273.458262][ T5921] usb 6-1: USB disconnect, device number 31 [ 273.539863][ T5920] usb 5-1: device descriptor read/64, error -71 [ 273.653728][ T5920] usb usb5-port1: attempt power cycle [ 274.095792][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 274.129767][ T5920] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 274.170659][ T5920] usb 5-1: device descriptor read/8, error -71 [ 274.478034][ T8969] batman_adv: batadv0: Adding interface: dummy0 [ 274.484450][ T8969] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.534433][ T5920] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 274.547383][ T8970] loop2: detected capacity change from 0 to 7 [ 274.583697][ T5920] usb 5-1: device descriptor read/8, error -71 [ 274.596352][ T8970] Dev loop2: unable to read RDB block 7 [ 274.596582][ T8969] batman_adv: batadv0: Interface activated: dummy0 [ 274.619604][ T8970] loop2: AHDI p3 [ 274.629773][ T8970] loop2: partition table partially beyond EOD, truncated [ 274.799908][ T5920] usb usb5-port1: unable to enumerate USB device [ 275.440052][ T8982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.454669][ T8982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.559851][ T5920] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 275.739948][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 275.755373][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.768808][ T5920] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.783873][ T5920] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 275.793678][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.815124][ T5920] usb 7-1: config 0 descriptor?? [ 275.868611][ T5920] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 276.113352][ T8979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.124072][ T8979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.136660][ T8998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.145824][ T8998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.144800][ T29] usb 7-1: USB disconnect, device number 31 [ 277.430539][ T9011] loop2: detected capacity change from 0 to 7 [ 277.445557][ T9011] Dev loop2: unable to read RDB block 7 [ 277.510181][ T9011] loop2: AHDI p3 [ 277.519962][ T9011] loop2: partition table partially beyond EOD, truncated [ 277.815054][ T9013] loop2: detected capacity change from 0 to 7 [ 277.848041][ T5982] Dev loop2: unable to read RDB block 7 [ 277.855905][ T5982] loop2: unable to read partition table [ 277.870801][ T5982] loop2: partition table beyond EOD, truncated [ 277.889158][ T9013] Dev loop2: unable to read RDB block 7 [ 277.912367][ T9013] loop2: unable to read partition table [ 277.930049][ T9013] loop2: partition table beyond EOD, truncated [ 277.946940][ T9013] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 277.998122][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.6.695'. [ 278.412385][ T9025] netlink: 'syz.1.696': attribute type 2 has an invalid length. [ 278.434721][ T9025] !: entered promiscuous mode [ 278.442366][ T9025] netlink: 'syz.1.696': attribute type 2 has an invalid length. [ 278.450193][ T9025] !: left promiscuous mode [ 278.527259][ T9027] syz.6.697 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 278.851633][ T30] audit: type=1326 audit(1774165923.129:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.6.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297299c799 code=0x7ffc0000 [ 278.944831][ T30] audit: type=1326 audit(1774165923.129:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.6.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297299c799 code=0x7ffc0000 [ 279.016043][ T30] audit: type=1326 audit(1774165923.129:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.6.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297299c799 code=0x7ffc0000 [ 279.051941][ T9035] netlink: 'syz.5.701': attribute type 3 has an invalid length. [ 279.086142][ T9035] netlink: 16 bytes leftover after parsing attributes in process `syz.5.701'. [ 279.095387][ T30] audit: type=1326 audit(1774165923.129:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.6.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f297299c799 code=0x7ffc0000 [ 279.269971][ T30] audit: type=1326 audit(1774165923.139:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.6.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297299c799 code=0x7ffc0000 [ 279.359878][ T30] audit: type=1326 audit(1774165923.149:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.6.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297299c799 code=0x7ffc0000 [ 279.421409][ T30] audit: type=1326 audit(1774165923.149:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.6.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297299c799 code=0x7ffc0000 [ 279.515166][ T30] audit: type=1326 audit(1774165923.149:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.6.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f297295cfce code=0x7ffc0000 [ 279.618045][ T30] audit: type=1326 audit(1774165923.149:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.6.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297299c799 code=0x7ffc0000 [ 279.720341][ T30] audit: type=1326 audit(1774165923.149:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.6.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297299c799 code=0x7ffc0000 [ 279.918047][ T9043] loop2: detected capacity change from 0 to 7 [ 280.061364][ T9041] netlink: 76 bytes leftover after parsing attributes in process `syz.5.705'. [ 280.190582][ T9043] Dev loop2: unable to read RDB block 7 [ 280.235006][ T9043] loop2: AHDI p3 [ 280.238694][ T9043] loop2: partition table partially beyond EOD, truncated [ 280.378211][ T9048] loop2: detected capacity change from 0 to 7 [ 280.392207][ T5982] Dev loop2: unable to read RDB block 7 [ 280.397885][ T5982] loop2: unable to read partition table [ 280.409925][ T5982] loop2: partition table beyond EOD, truncated [ 280.429228][ T9048] Dev loop2: unable to read RDB block 7 [ 280.445603][ T9048] loop2: unable to read partition table [ 280.455728][ T9048] loop2: partition table beyond EOD, truncated [ 280.475838][ T9048] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 281.656590][ T9068] netlink: 'syz.6.712': attribute type 3 has an invalid length. [ 281.674613][ T9068] netlink: 16 bytes leftover after parsing attributes in process `syz.6.712'. [ 281.789990][ T29] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 281.981726][ T29] usb 5-1: config 1 has an invalid interface number: 188 but max is 0 [ 282.008397][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.043675][ T29] usb 5-1: config 1 has no interface number 0 [ 282.060636][ T29] usb 5-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.126521][ T29] usb 5-1: config 1 interface 188 has no altsetting 0 [ 282.167900][ T29] usb 5-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 282.205529][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.246784][ T29] usb 5-1: Product: syz [ 282.263831][ T29] usb 5-1: Manufacturer: syz [ 282.299801][ T29] usb 5-1: SerialNumber: syz [ 282.368355][ T29] usb 5-1: cannot find UAC_HEADER [ 282.406576][ T9082] loop2: detected capacity change from 0 to 7 [ 282.540116][ T9082] Dev loop2: unable to read RDB block 7 [ 282.576336][ T9082] loop2: AHDI p3 [ 282.582553][ T29] snd-usb-audio 5-1:1.188: probe with driver snd-usb-audio failed with error -22 [ 282.586787][ T9082] loop2: partition table partially beyond EOD, truncated [ 282.611549][ T29] usb 5-1: USB disconnect, device number 54 [ 282.622451][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.669908][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.687118][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.775415][ T9085] fuse: Bad value for 'fd' [ 282.976239][ T9092] loop5: detected capacity change from 0 to 7 [ 283.007661][ T9092] Dev loop5: unable to read RDB block 7 [ 283.019800][ T9092] loop5: unable to read partition table [ 283.043526][ T9092] loop5: partition table beyond EOD, truncated [ 283.080090][ T9092] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 283.581191][ T29] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 284.288987][ T9106] netlink: 'syz.6.725': attribute type 3 has an invalid length. [ 284.318178][ T9106] netlink: 16 bytes leftover after parsing attributes in process `syz.6.725'. [ 284.360398][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.397236][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.420055][ T29] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 284.429220][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 284.485636][ T29] usb 3-1: SerialNumber: syz [ 284.839975][ T29] usb 3-1: 0:2 : does not exist [ 285.276243][ T9121] loop2: detected capacity change from 0 to 7 [ 285.294106][ T29] usb 3-1: unit 5 not found! [ 285.315606][ T9121] Dev loop2: unable to read RDB block 7 [ 285.330961][ T9121] loop2: AHDI p3 [ 285.343282][ T9121] loop2: partition table partially beyond EOD, truncated [ 285.425958][ T29] usb 3-1: USB disconnect, device number 60 [ 285.704800][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.119792][ T5831] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 286.273368][ T5831] usb 3-1: device descriptor read/64, error -71 [ 286.292106][ T9138] loop5: detected capacity change from 0 to 7 [ 286.355151][ T9138] Dev loop5: unable to read RDB block 7 [ 286.377030][ T9138] loop5: unable to read partition table [ 286.397566][ T9138] loop5: partition table beyond EOD, truncated [ 286.424946][ T9138] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 286.529999][ T5831] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 286.683651][ T5831] usb 3-1: device descriptor read/64, error -71 [ 286.759969][ T9144] netlink: 'syz.5.737': attribute type 3 has an invalid length. [ 286.794768][ T9144] netlink: 16 bytes leftover after parsing attributes in process `syz.5.737'. [ 286.810157][ T5831] usb usb3-port1: attempt power cycle [ 287.139884][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.269722][ T5831] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 287.297469][ T5831] usb 3-1: device descriptor read/8, error -71 [ 287.650639][ T5831] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 287.732431][ T5831] usb 3-1: device descriptor read/8, error -71 [ 287.850208][ T5831] usb usb3-port1: unable to enumerate USB device [ 288.320051][ T5831] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 288.480853][ T5831] usb 6-1: Using ep0 maxpacket: 16 [ 288.520189][ T5831] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 288.535602][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.560838][ T5831] usb 6-1: Product: syz [ 288.565307][ T5831] usb 6-1: Manufacturer: syz [ 288.572036][ T5831] usb 6-1: SerialNumber: syz [ 288.592220][ T5831] r8152-cfgselector 6-1: Unknown version 0x0000 [ 288.598639][ T5831] r8152-cfgselector 6-1: config 0 descriptor?? [ 288.729673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 288.769676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 289.173492][ T24] r8152-cfgselector 6-1: USB disconnect, device number 32 [ 291.399747][ T797] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 291.550380][ T797] usb 7-1: Using ep0 maxpacket: 32 [ 291.558734][ T797] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 291.587615][ T797] usb 7-1: config 0 has no interface number 0 [ 291.594755][ T797] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 291.623874][ T797] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 291.633076][ T797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.649686][ T797] usb 7-1: Product: syz [ 291.653964][ T797] usb 7-1: Manufacturer: syz [ 291.658599][ T797] usb 7-1: SerialNumber: syz [ 291.678622][ T797] usb 7-1: config 0 descriptor?? [ 291.688690][ T9219] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 291.910213][ T9219] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 293.620735][ T9271] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.628385][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.739436][ T9271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.759427][ T9271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.922006][ T196] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.943065][ T196] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.960132][ T196] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.979848][ T196] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.402506][ T797] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 294.416693][ T797] asix 7-1:0.188: probe with driver asix failed with error -71 [ 294.457753][ T797] usb 7-1: USB disconnect, device number 32 [ 294.769760][ T29] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 294.939770][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 295.028424][ T29] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 295.042237][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.063790][ T29] usb 6-1: Product: syz [ 295.068051][ T29] usb 6-1: Manufacturer: syz [ 295.109712][ T29] usb 6-1: SerialNumber: syz [ 295.137421][ T29] r8152-cfgselector 6-1: Unknown version 0x0000 [ 295.155752][ T29] r8152-cfgselector 6-1: config 0 descriptor?? [ 295.397229][ T29] r8152-cfgselector 6-1: Unknown version 0x0010 [ 295.422617][ T29] r8152-cfgselector 6-1: bad CDC descriptors [ 295.622089][ T29] r8152-cfgselector 6-1: USB disconnect, device number 33 [ 296.198047][ T5832] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 296.909738][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 297.081851][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 297.105347][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 297.134290][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 297.163698][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.203243][ T24] usb 3-1: config 0 descriptor?? [ 297.524815][ T24] ath6kl: Failed to submit usb control message: -71 [ 297.581590][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 297.630262][ T24] ath6kl: Unable to send get target info: -71 [ 297.645846][ T24] ath6kl: Failed to init ath6kl core: -71 [ 297.658547][ T24] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 297.683307][ T24] usb 3-1: USB disconnect, device number 65 [ 300.297392][ T9403] capability: warning: `syz.1.834' uses 32-bit capabilities (legacy support in use) [ 301.036789][ T9411] netlink: 44 bytes leftover after parsing attributes in process `syz.2.838'. [ 301.110107][ T9411] tc_dump_action: action bad kind [ 301.687797][ T9427] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.695592][ T9427] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.749569][ T9427] batman_adv: batadv0: Interface deactivated: dummy0 [ 301.910032][ T9427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.921673][ T9427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.091828][ T5831] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 302.119768][ T65] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.151687][ T65] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.175336][ T65] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.194665][ T65] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.294232][ T65] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.309406][ T65] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.309446][ T65] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.309470][ T65] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.339274][ T5831] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 302.339307][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.534804][ T5831] usb 7-1: config 0 descriptor?? [ 302.539426][ T5831] cp210x 7-1:0.0: cp210x converter detected [ 302.970413][ T5831] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 302.993808][ T5831] usb 7-1: cp210x converter now attached to ttyUSB0 [ 303.009938][ T5893] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 303.080234][ T5920] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 303.161519][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.179938][ T5893] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 303.195855][ T10] usb 7-1: USB disconnect, device number 33 [ 303.209837][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.218325][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 303.249739][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 303.257100][ T5893] usb 6-1: config 0 descriptor?? [ 303.273359][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 303.287970][ T5893] pwc: Askey VC010 type 2 USB webcam detected. [ 303.302119][ T10] cp210x 7-1:0.0: device disconnected [ 303.310056][ T5920] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 303.332286][ T5920] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 303.352877][ T5920] usb 3-1: config 13 has no interface number 0 [ 303.359445][ T5920] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 303.387807][ T5920] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.411202][ T5920] usb 3-1: config 13 interface 50 has no altsetting 0 [ 303.424120][ T5920] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 303.434361][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.443750][ T5920] usb 3-1: Product: syz [ 303.448283][ T5920] usb 3-1: Manufacturer: syz [ 303.453443][ T5920] usb 3-1: SerialNumber: syz [ 303.464107][ T9448] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 303.698956][ T5893] pwc: recv_control_msg error -32 req 02 val 2b00 [ 303.709122][ T5920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 303.720499][ T5920] usb 3-1: MIDIStreaming interface descriptor not found [ 303.728189][ T5893] pwc: recv_control_msg error -32 req 02 val 2700 [ 303.752403][ T5893] pwc: recv_control_msg error -32 req 02 val 2c00 [ 303.786040][ T5893] pwc: recv_control_msg error -32 req 04 val 1000 [ 303.807400][ T5893] pwc: recv_control_msg error -32 req 04 val 1300 [ 303.831742][ T5893] pwc: recv_control_msg error -32 req 04 val 1400 [ 303.859940][ T5893] pwc: recv_control_msg error -32 req 02 val 2000 [ 303.868917][ T5893] pwc: recv_control_msg error -32 req 02 val 2100 [ 303.908368][ T5920] usb 3-1: USB disconnect, device number 66 [ 304.041144][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.108479][ T5893] pwc: recv_control_msg error -71 req 02 val 2500 [ 304.124855][ T5893] pwc: recv_control_msg error -71 req 02 val 2400 [ 304.143258][ T5893] pwc: recv_control_msg error -71 req 02 val 2600 [ 304.157463][ T5893] pwc: recv_control_msg error -71 req 02 val 2900 [ 304.165622][ T5893] pwc: recv_control_msg error -71 req 02 val 2800 [ 304.180256][ T5893] pwc: recv_control_msg error -71 req 04 val 1100 [ 304.192295][ T5893] pwc: recv_control_msg error -71 req 04 val 1200 [ 304.209563][ T5893] pwc: Registered as video103. [ 304.242991][ T5893] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 304.305309][ T5893] usb 6-1: USB disconnect, device number 34 [ 304.711583][ T9472] dummy0: left allmulticast mode [ 305.135285][ T9486] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.864'. [ 306.879801][ T5920] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 307.071638][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.099810][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.129718][ T5920] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.152298][ T5920] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.170076][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.232528][ T5920] usb 7-1: config 0 descriptor?? [ 307.665930][ T5920] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 307.714303][ T5920] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 307.922457][ T5921] usb 7-1: USB disconnect, device number 34 [ 308.199297][ T9522] bridge0: port 3(bond0) entered disabled state [ 308.206105][ T9522] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.355162][ T9522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.384186][ T9522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.679057][ T9522] vlan2: left promiscuous mode [ 308.696508][ T9522] bond1: left promiscuous mode [ 308.717257][ T9522] bridge1: left promiscuous mode [ 308.727360][ T9522] vlan2: left allmulticast mode [ 308.745743][ T9522] bond1: left allmulticast mode [ 308.757870][ T9522] bridge1: left allmulticast mode [ 308.772330][ T9522] ip6gre1: left allmulticast mode [ 308.793099][ T196] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.822058][ T196] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.850817][ T196] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.868820][ T196] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.052237][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'. [ 310.631179][ T9559] netlink: 20 bytes leftover after parsing attributes in process `syz.5.881'. [ 311.571699][ T9582] syz_tun: entered allmulticast mode [ 311.597926][ T9581] syz_tun: left allmulticast mode [ 312.325148][ T9606] netlink: 24 bytes leftover after parsing attributes in process `syz.6.908'. [ 312.979194][ T9633] netlink: 'syz.1.920': attribute type 15 has an invalid length. [ 313.415443][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 313.415463][ T30] audit: type=1800 audit(1774165958.019:199): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.915" name="file0" dev="tmpfs" ino=389 res=0 errno=0 [ 313.761441][ T9656] loop6: detected capacity change from 0 to 2560 [ 313.780792][ T9656] Buffer I/O error on dev loop6, logical block 0, async page read [ 313.788708][ T9656] Buffer I/O error on dev loop6, logical block 0, async page read [ 313.828036][ T9656] Buffer I/O error on dev loop6, logical block 0, async page read [ 313.896983][ T9656] Buffer I/O error on dev loop6, logical block 0, async page read [ 313.935507][ T9656] Buffer I/O error on dev loop6, logical block 0, async page read [ 313.998404][ T9656] Buffer I/O error on dev loop6, logical block 0, async page read [ 314.037378][ T9656] Buffer I/O error on dev loop6, logical block 0, async page read [ 314.069934][ T9656] Buffer I/O error on dev loop6, logical block 0, async page read [ 314.126538][ T9656] ldm_validate_partition_table(): Disk read failed. [ 314.167110][ T9656] Buffer I/O error on dev loop6, logical block 0, async page read [ 314.185640][ T9656] Buffer I/O error on dev loop6, logical block 0, async page read [ 314.209827][ T9656] Dev loop6: unable to read RDB block 0 [ 314.220429][ T9656] loop6: unable to read partition table [ 314.259277][ T9656] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 316.410147][ T30] audit: type=1326 audit(1774165960.989:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.2.938" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5088d9c799 code=0x0 [ 316.930044][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 317.141789][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.176083][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.216487][ T10] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 317.235714][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.242383][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.274293][ T10] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 317.290180][ T10] usb 6-1: Manufacturer: syz [ 317.358197][ T10] usb 6-1: config 0 descriptor?? [ 317.384580][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 317.632363][ T9723] kvm: pic: non byte read [ 317.641710][ T9723] kvm: pic: non byte read [ 317.651743][ T9723] kvm: pic: non byte read [ 317.660865][ T9723] kvm: pic: single mode not supported [ 317.660970][ T9723] kvm: pic: non byte read [ 317.683411][ T9723] kvm: pic: level sensitive irq not supported [ 317.683500][ T9723] kvm: pic: non byte read [ 317.706889][ T9723] kvm: pic: single mode not supported [ 317.706913][ T9723] kvm: pic: level sensitive irq not supported [ 317.719555][ T9723] kvm: pic: non byte read [ 317.752206][ T9723] kvm: pic: level sensitive irq not supported [ 317.752282][ T9723] kvm: pic: non byte read [ 317.775672][ T9723] kvm: pic: non byte read [ 317.789049][ T9723] kvm: pic: single mode not supported [ 317.789132][ T9723] kvm: pic: non byte read [ 317.810283][ T9723] kvm: pic: level sensitive irq not supported [ 317.810360][ T9723] kvm: pic: non byte read [ 317.834425][ T9723] kvm: pic: single mode not supported [ 317.834620][ T9723] kvm: pic: single mode not supported [ 317.840125][ T9723] kvm: pic: level sensitive irq not supported [ 317.861458][ T9723] kvm: pic: level sensitive irq not supported [ 317.874802][ T9723] kvm: pic: single mode not supported [ 317.882691][ T9723] kvm: pic: single mode not supported [ 317.888151][ T9723] kvm: pic: level sensitive irq not supported [ 317.896119][ T9723] kvm: pic: single mode not supported [ 317.902819][ T9723] kvm: pic: level sensitive irq not supported [ 317.909317][ T9723] kvm: pic: single mode not supported [ 317.915579][ T9723] kvm: pic: level sensitive irq not supported [ 317.922925][ T9723] kvm: pic: single mode not supported [ 317.929108][ T9723] kvm: pic: level sensitive irq not supported [ 318.155704][ T5920] usb 6-1: USB disconnect, device number 35 [ 319.292297][ T9782] netlink: 164 bytes leftover after parsing attributes in process `syz.6.976'. [ 320.730282][ T9809] netlink: 4556 bytes leftover after parsing attributes in process `syz.4.986'. [ 321.868405][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 321.877648][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 321.894298][ T9842] netlink: 76 bytes leftover after parsing attributes in process `syz.2.988'. [ 321.914230][ T9842] IPVS: Error connecting to the multicast addr [ 321.924010][ T9842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.988'. [ 321.933027][ T9842] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 322.343850][ T9855] binder: BINDER_SET_CONTEXT_MGR already set [ 322.351859][ T9855] binder: 9854:9855 ioctl 4018620d 200000004a80 returned -16 [ 322.639901][ T5920] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 322.857421][ T5920] usb 6-1: unable to get BOS descriptor or descriptor too short [ 322.868753][ T5920] usb 6-1: not running at top speed; connect to a high speed hub [ 322.923540][ T5920] usb 6-1: config 0 has no interfaces? [ 322.941453][ T5920] usb 6-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=6c.ff [ 322.963601][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.025606][ T5920] usb 6-1: Product: syz [ 323.047542][ T5920] usb 6-1: Manufacturer: syz [ 323.111819][ T5920] usb 6-1: SerialNumber: syz [ 323.135880][ T5920] usb 6-1: config 0 descriptor?? [ 323.391375][ T24] usb 6-1: USB disconnect, device number 36 [ 324.455016][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1017'. [ 324.507114][ T9892] lo: entered allmulticast mode [ 324.529100][ T9891] lo: left allmulticast mode [ 325.380506][ T5920] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 325.674924][ T5920] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 325.719690][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 325.760652][ T5920] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 325.799756][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 325.807991][ T5920] usb 3-1: Product: syz [ 325.840173][ T5920] usb 3-1: Manufacturer: syz [ 325.861307][ T5920] usb 3-1: SerialNumber: syz [ 325.878952][ T5920] usb 3-1: config 0 descriptor?? [ 325.899216][ T5920] usb 3-1: selecting invalid altsetting 0 [ 329.107568][ T24] usb 3-1: USB disconnect, device number 67 [ 329.611567][ T9979] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.619372][ T9979] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.022052][ T9979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.053727][ T9979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.143936][ T9979] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 330.196493][ T148] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.244212][ T148] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.442119][ T148] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.479863][ T148] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.943417][T10028] netlink: 'syz.2.1068': attribute type 15 has an invalid length. [ 331.010006][T10003] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 331.169745][T10003] usb 5-1: Using ep0 maxpacket: 16 [ 331.186543][T10003] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 331.208403][T10003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 331.242355][T10003] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 331.254749][T10003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.280589][T10003] usb 5-1: Product: syz [ 331.285054][T10003] usb 5-1: Manufacturer: syz [ 331.295570][T10003] usb 5-1: SerialNumber: syz [ 331.315270][T10003] usb 5-1: config 0 descriptor?? [ 331.334459][T10003] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 331.347179][T10003] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 331.517717][T10050] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1077'. [ 331.855502][T10054] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1079'. [ 331.945265][T10003] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 331.963078][T10003] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 332.036814][T10059] netlink: 'syz.1.1081': attribute type 12 has an invalid length. [ 332.052011][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'. [ 332.079965][T10059] bond0: option primary_reselect: invalid value (172) [ 332.603746][T10003] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 332.639525][T10003] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 332.690337][T10003] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 332.702289][T10003] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 332.713027][T10003] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 332.725420][T10003] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 332.839943][T10080] netlink: 'syz.6.1090': attribute type 15 has an invalid length. [ 332.937974][T10003] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 332.953170][T10003] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 332.961281][T10003] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 332.967769][T10003] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 332.976014][T10003] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 332.992313][T10003] usb 5-1: USB disconnect, device number 55 [ 333.002184][T10002] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 333.174018][T10002] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 333.183619][T10002] usb 3-1: config 0 has no interface number 0 [ 333.190967][T10002] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.203127][T10002] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 333.214773][T10002] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 333.227279][T10002] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 333.236987][T10002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.249218][T10002] usb 3-1: config 0 descriptor?? [ 333.255210][T10078] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 333.270384][T10002] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input19 [ 333.483093][T10002] usb 3-1: USB disconnect, device number 68 [ 334.519863][T10113] netlink: 'syz.5.1103': attribute type 4 has an invalid length. [ 334.723495][T10119] netlink: 'syz.2.1105': attribute type 15 has an invalid length. [ 334.837040][T10126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.939929][ T796] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 335.099742][ T796] usb 6-1: Using ep0 maxpacket: 32 [ 335.110216][ T796] usb 6-1: unable to get BOS descriptor or descriptor too short [ 335.127471][ T796] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 335.135606][ T796] usb 6-1: can't read configurations, error -71 [ 336.329427][T10157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.502249][T10162] netlink: 'syz.1.1122': attribute type 15 has an invalid length. [ 338.703623][T10212] netlink: 'syz.5.1141': attribute type 15 has an invalid length. [ 339.333561][ T796] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 339.503965][ T796] usb 5-1: config 0 has no interfaces? [ 339.545217][ T796] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 339.565684][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.580506][ T796] usb 5-1: Product: syz [ 339.592464][ T796] usb 5-1: Manufacturer: syz [ 339.606557][ T796] usb 5-1: SerialNumber: syz [ 339.730853][ T796] usb 5-1: config 0 descriptor?? [ 340.238891][T10002] usb 5-1: USB disconnect, device number 56 [ 341.043516][T10267] netlink: 'syz.6.1161': attribute type 15 has an invalid length. [ 341.142048][T10271] tipc: Failed to remove unknown binding: 66,1,1/0:4252788089/4252788091 [ 341.485625][T10285] geneve2: entered promiscuous mode [ 341.501085][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.529968][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.551076][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.579467][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.905840][T10303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.525823][T10335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.319730][ T5936] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 343.479716][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 343.485130][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1210'. [ 343.510270][ T5936] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 343.532997][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1210'. [ 343.537359][ T5936] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 343.562953][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.582999][ T5936] usb 3-1: Product: syz [ 343.587604][ T5936] usb 3-1: Manufacturer: syz [ 343.593355][ T5936] usb 3-1: SerialNumber: syz [ 343.605159][ T5936] usb 3-1: config 0 descriptor?? [ 343.621663][ T5936] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 343.642673][ T5936] usb 3-1: setting power ON [ 343.659172][ T5936] dvb-usb: bulk message failed: -22 (2/0) [ 343.683422][ T5936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 343.705763][ T5936] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 343.726978][ T5936] usb 3-1: media controller created [ 343.764377][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.809075][ T5936] usb 3-1: selecting invalid altsetting 6 [ 343.820553][ T5936] usb 3-1: digital interface selection failed (-22) [ 343.827405][T10360] dvb-usb: bulk message failed: -22 (3/0) [ 343.835205][ T5936] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 343.843927][T10360] cxusb: i2c wr: len=81 is too big! [ 343.843927][T10360] [ 343.853335][ T5936] usb 3-1: setting power OFF [ 343.859220][ T5936] dvb-usb: bulk message failed: -22 (2/0) [ 343.878379][ T5936] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 343.889044][ T5936] (NULL device *): no alternate interface [ 344.035090][ T5936] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 344.091141][ T5936] usb 3-1: USB disconnect, device number 69 [ 344.163400][ T30] audit: type=1326 audit(1774165988.769:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.5.1219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe48fd9c799 code=0x0 [ 344.509766][T10002] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 344.671519][T10002] usb 6-1: Using ep0 maxpacket: 8 [ 344.681621][T10002] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 344.702697][T10002] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 344.728959][T10002] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 344.752441][T10002] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.788877][T10002] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 344.814199][T10002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.900387][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 345.054950][T10002] usb 6-1: GET_CAPABILITIES returned 0 [ 345.064124][T10002] usbtmc 6-1:16.0: can't read capabilities [ 345.259499][T10002] usb 6-1: USB disconnect, device number 39 [ 345.657820][T10426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.705183][T10426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.436057][T10439] geneve2: left promiscuous mode [ 346.446667][ T1155] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.469964][ T1155] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.483722][ T1155] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.495786][ T1155] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.406075][T10468] netlink: 'syz.5.1246': attribute type 7 has an invalid length. [ 347.447669][T10468] netlink: 'syz.5.1246': attribute type 8 has an invalid length. [ 349.065791][T10510] xt_policy: neither incoming nor outgoing policy selected [ 349.220868][ T5936] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 349.459780][ T5936] usb 7-1: Using ep0 maxpacket: 16 [ 349.469204][ T5936] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 349.487756][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 349.519207][ T5936] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 349.532866][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.549720][ T5936] usb 7-1: Product: syz [ 349.553944][ T5936] usb 7-1: Manufacturer: syz [ 349.558655][ T5936] usb 7-1: SerialNumber: syz [ 349.567885][ T5936] usb 7-1: config 0 descriptor?? [ 349.579361][ T5936] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 349.589183][ T5936] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 349.981444][T10517] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1264'. [ 350.327014][ T5936] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 350.359828][ T5936] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 350.609860][ T5936] em28xx 7-1:0.0: AC97 command still being executed: not handled properly! [ 350.622496][ T5936] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 350.641424][ T5936] em28xx 7-1:0.0: No AC97 audio processor [ 350.816242][ T5936] usb 7-1: USB disconnect, device number 35 [ 350.848503][ T5936] em28xx 7-1:0.0: Disconnecting em28xx [ 350.911714][ T5936] em28xx 7-1:0.0: Freeing device [ 351.428310][T10548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.447571][T10548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.833173][T10561] netlink: 'syz.2.1281': attribute type 10 has an invalid length. [ 351.960070][ T5936] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 352.149709][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 352.181201][ T5936] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 352.198903][ T5936] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 352.229731][ T5936] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 352.260985][ T5936] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.311049][ T5936] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.352641][ T5936] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 352.396283][ T5936] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 352.429530][ T5936] usb 5-1: config 168 interface 0 has no altsetting 0 [ 352.452314][ T5936] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 352.479682][ T5936] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 352.500928][ T5936] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 352.530116][ T5936] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.570697][ T5936] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.592771][ T5936] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 352.610369][ T5936] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 352.625552][ T5936] usb 5-1: config 168 interface 0 has no altsetting 0 [ 352.637144][ T5936] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 352.645144][ T5936] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 352.686005][ T5936] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 352.750000][ T5936] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.778730][ T5936] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.803444][ T5936] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 352.824481][ T5936] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 352.879063][ T5936] usb 5-1: config 168 interface 0 has no altsetting 0 [ 352.924959][ T5936] usb 5-1: string descriptor 0 read error: -22 [ 352.939780][ T5936] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 352.948886][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.002121][T10595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.032000][T10595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.049049][ T5936] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 353.235277][T10003] usb 5-1: USB disconnect, device number 57 [ 354.355559][T10623] input: syz1 as /devices/virtual/input/input21 [ 354.936292][T10633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.686310][T10645] kvm: user requested TSC rate below hardware speed [ 356.121289][T10651] netlink: 'syz.6.1318': attribute type 15 has an invalid length. [ 357.116132][T10684] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 357.475273][T10704] netlink: 'syz.4.1341': attribute type 15 has an invalid length. [ 357.551622][T10006] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 357.719877][T10006] usb 6-1: Using ep0 maxpacket: 8 [ 357.736853][T10006] usb 6-1: unable to get BOS descriptor or descriptor too short [ 357.750369][T10006] usb 6-1: config 86 has an invalid interface number: 68 but max is 0 [ 357.758599][T10006] usb 6-1: config 86 has no interface number 0 [ 357.766899][T10006] usb 6-1: config 86 interface 68 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 357.778835][T10006] usb 6-1: config 86 interface 68 has no altsetting 0 [ 357.788352][T10006] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0010, bcdDevice=91.11 [ 357.797795][T10006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.806035][T10006] usb 6-1: Product: syz [ 357.810469][T10006] usb 6-1: Manufacturer: syz [ 357.815195][T10006] usb 6-1: SerialNumber: syz [ 358.035488][T10006] kvaser_usb 6-1:86.68: error -ENODEV: Cannot get usb endpoint(s) [ 358.058405][T10006] usb 6-1: USB disconnect, device number 40 [ 358.439704][T10006] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 358.622643][T10006] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.639942][T10006] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 358.651396][T10006] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 358.661944][T10006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 358.685983][T10006] usb 7-1: SerialNumber: syz [ 358.729849][ T5936] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 358.889712][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 358.911933][ T5936] usb 5-1: unable to get BOS descriptor or descriptor too short [ 358.921309][T10006] usb 7-1: 0:2 : does not exist [ 358.921428][ T5936] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 358.962379][ T5936] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 358.975189][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.984093][ T5936] usb 5-1: Product: syz [ 358.988314][ T5936] usb 5-1: Manufacturer: syz [ 358.995178][ T5936] usb 5-1: SerialNumber: syz [ 359.035418][T10006] usb 7-1: USB disconnect, device number 36 [ 359.072798][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.142972][T10745] netlink: 'syz.5.1359': attribute type 15 has an invalid length. [ 359.213972][ T5936] usb 5-1: Cannot retrieve CPort count: -32 [ 359.220511][ T5936] usb 5-1: Cannot retrieve CPort count: -32 [ 359.227013][ T5936] es2_ap_driver 5-1:7.0: probe with driver es2_ap_driver failed with error -32 [ 359.237254][T10729] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 359.255337][ T5936] usb 5-1: USB disconnect, device number 58 [ 360.684506][T10775] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1369'. [ 360.981813][T10789] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 361.269990][ T5936] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 361.595785][T10806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1380'. [ 362.563358][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1388'. [ 363.409940][T10006] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 363.439742][T10003] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 363.559735][T10006] usb 5-1: Using ep0 maxpacket: 8 [ 363.566686][T10006] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 363.574504][T10006] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 363.586156][T10006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 363.597725][T10006] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 363.609887][T10006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 363.621374][T10006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 363.633320][T10006] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 363.647028][T10006] usb 5-1: config 168 interface 0 has no altsetting 0 [ 363.655041][T10003] usb 7-1: unable to get BOS descriptor or descriptor too short [ 363.663761][T10006] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 363.671486][T10006] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 363.682874][T10006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 363.694796][T10006] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 363.706879][T10003] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.717102][T10006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 363.728443][T10003] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.737423][T10006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 363.749209][T10006] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 363.762824][T10006] usb 5-1: config 168 interface 0 has no altsetting 0 [ 363.772362][T10006] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 363.780276][T10006] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 363.792102][T10006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 363.804209][T10003] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=e1.40 [ 363.813604][T10003] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.821799][T10006] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 363.833780][T10003] usb 7-1: Product: syz [ 363.837983][T10003] usb 7-1: Manufacturer: syz [ 363.842943][T10006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 363.854307][T10003] usb 7-1: SerialNumber: syz [ 363.862770][T10006] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 363.875768][T10006] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 363.895986][T10003] usb 7-1: selecting invalid altsetting 1 [ 363.910444][T10006] usb 5-1: config 168 interface 0 has no altsetting 0 [ 363.925497][T10006] usb 5-1: string descriptor 0 read error: -22 [ 363.940166][T10006] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 363.949263][T10006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.993930][T10006] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 364.020471][T10003] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 364.122156][ T5936] usb 7-1: USB disconnect, device number 37 [ 364.131490][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.210117][ T796] usb 5-1: USB disconnect, device number 59 [ 364.421890][T10848] adutux: No device or device unplugged -19 [ 364.781605][T10899] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 366.681888][T10956] hub 9-0:1.0: USB hub found [ 366.698692][T10956] hub 9-0:1.0: 1 port detected [ 367.023624][T10003] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 367.314690][T10003] usb 6-1: Using ep0 maxpacket: 32 [ 367.332532][T10003] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.343585][T10003] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.361052][T10003] usb 6-1: config 0 has no interface number 0 [ 367.372160][T10003] usb 6-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.395993][T10003] usb 6-1: config 0 interface 1 has no altsetting 0 [ 367.412749][T10003] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 367.442705][T10003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.450999][T10003] usb 6-1: Product: syz [ 367.455349][T10003] usb 6-1: Manufacturer: syz [ 367.460082][T10003] usb 6-1: SerialNumber: syz [ 367.467825][T10003] usb 6-1: config 0 descriptor?? [ 367.477729][T10003] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 367.487346][T10003] cx231xx 6-1:0.1: Not found matching IAD interface [ 367.687660][T10003] usb 6-1: USB disconnect, device number 42 [ 367.797652][T10973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1446'. [ 368.236286][T10983] vivid-007: ================= START STATUS ================= [ 368.251331][T10983] vivid-007: Enable Output Cropping: true grabbed [ 368.259251][T10983] vivid-007: Enable Output Composing: true grabbed [ 368.266517][T10983] vivid-007: Enable Output Scaler: true grabbed [ 368.298031][T10983] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 368.305604][T10983] vivid-007: Transmit Mode: HDMI grabbed [ 368.331645][T10983] vivid-007: Hotplug Present: 0x00000000 [ 368.337913][T10983] vivid-007: RxSense Present: 0x00000000 [ 368.402140][T10983] vivid-007: EDID Present: 0x00000000 [ 368.464919][T10983] vivid-007: ================== END STATUS ================== [ 369.090640][T11007] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1458'. [ 369.680582][ T796] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 370.196954][ T796] usb 7-1: Using ep0 maxpacket: 32 [ 370.388763][ T796] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 370.405063][ T796] usb 7-1: config 0 has no interface number 0 [ 370.425414][ T796] usb 7-1: config 0 interface 12 has no altsetting 0 [ 370.485213][ T796] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 370.498291][ T796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.511552][ T796] usb 7-1: Product: syz [ 370.515783][ T796] usb 7-1: Manufacturer: syz [ 370.520809][ T796] usb 7-1: SerialNumber: syz [ 370.533818][ T796] usb 7-1: config 0 descriptor?? [ 370.861349][T11040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.874356][T11040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.883199][T11038] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1469'. [ 371.286644][T11045] batadv0: entered promiscuous mode [ 371.295806][T11045] bond0: entered promiscuous mode [ 371.302860][T11045] bond_slave_0: entered promiscuous mode [ 371.311130][T11045] bond_slave_1: entered promiscuous mode [ 371.321705][T11045] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 371.362924][T11045] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 371.377755][T11045] hsr1: entered allmulticast mode [ 371.383989][ T796] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 371.390336][T11045] batadv0: entered allmulticast mode [ 371.398321][ T796] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 371.408503][ T796] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 371.416346][ T796] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 371.437177][ T796] usb 7-1: USB disconnect, device number 38 [ 371.440231][T11045] bond0: entered allmulticast mode [ 371.468046][T11045] bond_slave_0: entered allmulticast mode [ 371.479473][T11045] bond_slave_1: entered allmulticast mode [ 371.487691][T11045] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 371.515679][T11045] batadv0: left promiscuous mode [ 371.544155][T11045] bond0: left promiscuous mode [ 371.554678][T11045] bond_slave_0: left promiscuous mode [ 371.568627][T11045] bond_slave_1: left promiscuous mode [ 371.683313][T11058] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1478'. [ 371.699816][ T5936] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 371.916217][ T5936] usb 5-1: unable to get BOS descriptor or descriptor too short [ 371.936074][ T5936] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 371.942758][T11066] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1482'. [ 371.946306][ T5936] usb 5-1: config 0 has no interface number 0 [ 371.966899][ T5936] usb 5-1: config 0 interface 146 has no altsetting 0 [ 371.997886][ T5936] usb 5-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice=8f.7d [ 372.012440][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.027943][ T5936] usb 5-1: Product: syz [ 372.032421][ T5936] usb 5-1: Manufacturer: syz [ 372.037283][ T5936] usb 5-1: SerialNumber: syz [ 372.048064][ T5936] usb 5-1: config 0 descriptor?? [ 372.089490][T11073] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1485'. [ 372.295175][ T5936] snd-usb-caiaq 5-1:0.146: can't set alt interface. [ 372.320180][ T5936] usb 5-1: unable to init card! (ret=-5) [ 372.333635][ T5936] snd-usb-caiaq 5-1:0.146: probe with driver snd-usb-caiaq failed with error -5 [ 372.367110][ T5936] usb 5-1: USB disconnect, device number 60 [ 372.649757][T10003] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 372.845858][T10003] usb 6-1: config 0 has no interfaces? [ 372.859372][T10003] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 372.883606][T10003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.975639][T10003] usb 6-1: config 0 descriptor?? [ 373.255886][T10003] usb 6-1: USB disconnect, device number 43 [ 374.167091][T11126] tipc: Started in network mode [ 374.178927][T11126] tipc: Node identity 84e, cluster identity 4711 [ 374.186099][T11126] tipc: Node number set to 2126 [ 374.690640][T11139] fuse: Unknown parameter 'euid<00000000000000000000' [ 375.158427][T11146] loop5: detected capacity change from 0 to 7 [ 375.174110][ T5982] Dev loop5: unable to read RDB block 7 [ 375.185263][ T5982] loop5: AHDI p2 [ 375.194040][ T5982] loop5: partition table partially beyond EOD, truncated [ 375.231711][T11146] Dev loop5: unable to read RDB block 7 [ 375.237548][T11146] loop5: AHDI p2 [ 375.242964][T11146] loop5: partition table partially beyond EOD, truncated [ 375.793949][T11152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1519'. [ 376.154792][T11168] binder_alloc: 11163: binder_alloc_buf, no vma [ 376.689463][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1535'. [ 376.859524][T11188] kvm: kvm [11187]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb400000023 [ 376.918629][T11188] kvm: kvm [11187]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb400000023 [ 376.966519][T11188] kvm: kvm [11187]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb400000023 [ 376.993049][T11188] kvm: kvm [11187]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100000000 [ 377.002854][T11188] kvm: kvm [11187]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 377.421264][T11211] batadv0: entered promiscuous mode [ 377.426771][T11211] batadv0: left promiscuous mode [ 377.717378][T11218] binder_alloc: 11216: binder_alloc_buf, no vma [ 378.692252][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.698576][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.860366][T11270] binder_alloc: 11269: binder_alloc_buf, no vma [ 383.000513][ T5936] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 383.182401][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.201929][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 383.220327][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 383.236222][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 383.247427][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 383.263618][ T5936] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 383.273605][ T796] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 383.283963][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 383.293713][ T5936] usb 3-1: Product: syz [ 383.297946][ T5936] usb 3-1: Manufacturer: syz [ 383.303877][ T5936] usb 3-1: SerialNumber: syz [ 383.312436][ T5936] usb 3-1: config 0 descriptor?? [ 383.349708][T10003] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 383.397921][T11378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.412978][T11378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.442514][ T796] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.453877][ T796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.466006][ T796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.476816][ T796] usb 7-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 383.486961][ T796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.500452][ T796] usb 7-1: config 0 descriptor?? [ 383.519659][T10003] usb 6-1: Using ep0 maxpacket: 32 [ 383.543218][T10003] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 383.555780][ T5936] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 383.560254][T10003] usb 6-1: config 0 has no interface number 0 [ 383.569090][T10003] usb 6-1: config 0 interface 12 has no altsetting 0 [ 383.574157][ T5936] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 383.585487][T10003] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 383.608107][T10003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.625909][T10003] usb 6-1: Product: syz [ 383.631513][T11378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.639936][T10003] usb 6-1: Manufacturer: syz [ 383.644563][T10003] usb 6-1: SerialNumber: syz [ 383.660081][T11378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.671553][T10003] usb 6-1: config 0 descriptor?? [ 383.756742][ T5936] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 383.768180][ T5936] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 383.785124][ T5936] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 383.802611][ T5936] usb 3-1: USB disconnect, device number 70 [ 383.931949][ T796] hid-rmi 0003:0461:4E72.0006: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.6-1/input0 [ 384.123458][ T5936] usb 7-1: USB disconnect, device number 39 [ 384.294265][T10003] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 384.302724][T10003] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 384.329896][T10003] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 384.348772][T10003] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 384.379323][T10003] usb 6-1: USB disconnect, device number 44 [ 384.811530][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 384.934861][T11410] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 385.252875][T11419] binder: BINDER_SET_CONTEXT_MGR already set [ 385.259144][T11419] binder: 11418:11419 ioctl 4018620d 200000004a80 returned -16 [ 386.096407][T11443] binder: BINDER_SET_CONTEXT_MGR already set [ 386.168433][T11443] binder: 11442:11443 ioctl 4018620d 200000004a80 returned -16 [ 386.210993][T11449] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1637'. [ 386.368238][T11453] tipc: Cannot configure node identity twice [ 387.885443][T11491] binder: BINDER_SET_CONTEXT_MGR already set [ 387.920366][T11491] binder: 11489:11491 ioctl 4018620d 200000004a80 returned -16 [ 393.450503][ T796] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 393.613623][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 393.662615][ T796] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 393.691909][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.744617][ T796] usb 5-1: config 0 descriptor?? [ 393.770442][T11658] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 393.904483][ T5147] Bluetooth: hci4: unexpected event for opcode 0x200c [ 393.960894][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 394.095124][T11679] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1730'. [ 394.205396][ T796] hid_parser_main: 28 callbacks suppressed [ 394.205452][ T796] cherry 0003:046A:0027.0007: unknown main item tag 0x0 [ 394.308017][ T796] cherry 0003:046A:0027.0007: unknown main item tag 0x0 [ 394.449356][ T796] cherry 0003:046A:0027.0007: unknown main item tag 0x0 [ 394.480483][ T796] cherry 0003:046A:0027.0007: unknown main item tag 0x0 [ 394.487521][ T796] cherry 0003:046A:0027.0007: unknown main item tag 0x0 [ 394.510778][ T796] cherry 0003:046A:0027.0007: unknown main item tag 0x0 [ 394.517827][ T796] cherry 0003:046A:0027.0007: unknown main item tag 0x0 [ 394.540339][ T796] cherry 0003:046A:0027.0007: unknown main item tag 0x0 [ 394.547366][ T796] cherry 0003:046A:0027.0007: unknown main item tag 0x0 [ 394.579858][ T796] cherry 0003:046A:0027.0007: unknown main item tag 0x0 [ 394.605552][ T796] cherry 0003:046A:0027.0007: hidraw0: USB HID v7b.fd Device [HID 046a:0027] on usb-dummy_hcd.4-1/input0 [ 394.638150][ T796] usb 5-1: USB disconnect, device number 61 [ 394.715651][T11693] fido_id[11693]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 396.710474][T11764] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1764'. [ 397.080390][ T796] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 397.240423][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 397.689035][ T796] usb 3-1: config 0 has no interfaces? [ 397.695412][ T796] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 397.748101][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.778132][ T796] usb 3-1: config 0 descriptor?? [ 398.330672][ T796] usb 3-1: USB disconnect, device number 71 [ 399.290390][ T796] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 399.492115][ T796] usb 6-1: Using ep0 maxpacket: 32 [ 399.551624][ T796] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 399.570899][ T796] usb 6-1: config 0 has no interface number 0 [ 399.586115][ T796] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 399.766702][ T796] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 399.776649][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.802507][ T796] usb 6-1: Product: syz [ 399.806780][ T796] usb 6-1: Manufacturer: syz [ 399.884635][ T796] usb 6-1: SerialNumber: syz [ 399.914638][ T796] usb 6-1: config 0 descriptor?? [ 400.024335][ T796] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 400.053445][ T796] em28xx 6-1:0.132: Video interface 132 found: [ 400.426543][ T796] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 400.866008][ T796] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 400.886284][ T796] em28xx 6-1:0.132: board has no eeprom [ 400.955770][ T796] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 400.992419][ T796] em28xx 6-1:0.132: analog set to bulk mode. [ 400.998516][ T5936] em28xx 6-1:0.132: Registering V4L2 extension [ 401.040818][ T796] usb 6-1: USB disconnect, device number 45 [ 401.080171][ T796] em28xx 6-1:0.132: Disconnecting em28xx [ 401.319001][ T5936] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 401.331379][ T5936] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 401.338584][ T5936] em28xx 6-1:0.132: No AC97 audio processor [ 401.367862][ T5936] usb 6-1: Decoder not found [ 401.380242][ T5936] em28xx 6-1:0.132: failed to create media graph [ 401.399794][ T5936] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 401.421874][ T5936] em28xx 6-1:0.132: Remote control support is not available for this card. [ 401.450824][ T796] em28xx 6-1:0.132: Closing input extension [ 401.493977][ T796] em28xx 6-1:0.132: Freeing device [ 402.294427][T11918] input: syz1 as /devices/virtual/input/input22 [ 402.777455][T11933] tipc: Started in network mode [ 402.792486][T11933] tipc: Node identity 84e, cluster identity 4711 [ 402.813936][T11933] tipc: Node number set to 2126 [ 405.088252][ T5147] Bluetooth: hci0: unexpected event for opcode 0x203d [ 405.866882][T12014] warning: `syz.2.1865' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 406.578121][T12022] macvtap1: entered promiscuous mode [ 406.722888][T12022] macvtap1: entered allmulticast mode [ 406.864646][T12022] dummy0: entered allmulticast mode [ 406.976777][T12022] dummy0: entered promiscuous mode [ 407.011705][T12022] team0: Device macvtap1 failed to register rx_handler [ 407.041929][T12022] dummy0: left allmulticast mode [ 407.047001][T12022] dummy0: left promiscuous mode [ 407.430498][T12039] openvswitch: netlink: IP tunnel dst address not specified [ 408.060329][ T5936] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 408.226290][ T5936] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 408.248167][ T5936] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 408.258367][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.275464][ T5936] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 408.528480][T12064] binder: 12063:12064 ioctl 4018620d 0 returned -22 [ 409.251059][ T5147] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 409.261103][ T5147] Bluetooth: hci0: Injecting HCI hardware error event [ 409.279834][ T5147] Bluetooth: hci0: hardware error 0x00 [ 409.309011][ T5936] stv0680 6-1:4.0: Could not get descriptor 0200 [ 409.679171][ T5936] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 409.699304][ T5936] stv0680 6-1:4.0: last error: 53, command = 0x2 [ 409.755184][ T5936] usb 6-1: USB disconnect, device number 46 [ 409.829354][T12078] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1888'. [ 409.850525][T12078] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1888'. [ 410.349042][T12090] tipc: Cannot configure node identity twice [ 410.410207][T12096] binder: 12095:12096 ioctl 4018620d 0 returned -22 [ 410.946285][T12115] netlink: 'syz.4.1904': attribute type 10 has an invalid length. [ 410.955874][T12115] bridge_slave_1: left allmulticast mode [ 410.962401][T12115] bridge_slave_1: left promiscuous mode [ 410.968674][T12115] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.994632][T12115] bridge_slave_1: entered promiscuous mode [ 411.019365][T12115] bridge_slave_1: entered allmulticast mode [ 411.027386][T12115] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 411.306871][ T5147] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 411.524239][T12126] binder: 12125:12126 ioctl 4018620d 0 returned -22 [ 412.497532][T12134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1909'. [ 412.694114][T12143] tipc: Cannot configure node identity twice [ 413.498546][T12167] binder: BINDER_SET_CONTEXT_MGR already set [ 413.880105][T12167] binder: 12166:12167 ioctl 4018620d 200000004a80 returned -16 [ 415.686520][T12206] binder: BINDER_SET_CONTEXT_MGR already set [ 415.703548][T12206] binder: 12205:12206 ioctl 4018620d 200000004a80 returned -16 [ 418.156248][T12275] tipc: Started in network mode [ 418.163119][T12275] tipc: Node identity 84e, cluster identity 4711 [ 418.185844][T12275] tipc: Node number set to 2126 [ 418.437169][T12288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1973'. [ 419.997711][T12333] tipc: Cannot configure node identity twice [ 420.793415][T12354] binder: 12353:12354 ioctl c0306201 0 returned -14 [ 421.975879][T12364] batadv0: entered promiscuous mode [ 421.997002][T12364] batadv0: left promiscuous mode [ 422.401952][T12378] tipc: Cannot configure node identity twice [ 422.989753][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2015'. [ 423.596320][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2017'. [ 423.631236][T12400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2017'. [ 423.697870][ T1105] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.706933][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2017'. [ 423.730417][ T1105] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.739407][T12400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2017'. [ 423.771922][T12402] batadv0: entered promiscuous mode [ 423.818176][T12402] batadv0: left promiscuous mode [ 423.840046][ T1105] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.869934][ T1105] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.352870][T12418] kvm_intel: kvm [12417]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x29 [ 425.930444][ T5936] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 426.094982][ T5936] usb 7-1: unable to get BOS descriptor or descriptor too short [ 426.114999][ T5936] usb 7-1: not running at top speed; connect to a high speed hub [ 426.136343][ T5936] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.155900][ T5936] usb 7-1: config 1 interface 0 has no altsetting 0 [ 426.180985][ T5936] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 426.190522][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.198568][ T5936] usb 7-1: Product: syz [ 426.204338][ T5936] usb 7-1: Manufacturer: syz [ 426.208982][ T5936] usb 7-1: SerialNumber: syz [ 426.443387][ T5936] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input23 [ 426.467536][ T5181] bcm5974 7-1:1.0: could not read from device [ 426.551876][ T5181] bcm5974 7-1:1.0: could not read from device [ 426.562809][ T5181] bcm5974 7-1:1.0: could not read from device [ 426.576941][ T5936] usb 7-1: USB disconnect, device number 40 [ 426.604374][ T5181] bcm5974 7-1:1.0: could not read from device [ 427.578364][T12484] tipc: Cannot configure node identity twice [ 429.281894][ T5936] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 429.469071][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 429.485805][ T5936] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 429.510758][ T5936] usb 5-1: config 179 has no interface number 0 [ 429.527620][ T5936] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 429.560479][ T5936] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 429.603973][ T5936] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 429.634555][ T5936] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 429.677894][ T5936] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 429.697284][ T5936] usb 5-1: config 179 interface 65 has no altsetting 0 [ 429.708521][ T5936] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 429.718797][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.774492][ T5936] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input24 [ 429.814191][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2067'. [ 429.860193][ T5831] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 429.985900][ T5936] usb 5-1: USB disconnect, device number 62 [ 429.992515][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 430.022160][ T5831] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 430.035818][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 430.051587][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 430.062923][ T5831] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 430.085958][ T5831] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.096701][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.148519][ T5831] usb 6-1: config 0 descriptor?? [ 430.631154][ T5831] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 430.929379][T12545] netlink: 'syz.6.2077': attribute type 10 has an invalid length. [ 431.382776][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2086'. [ 431.424305][T10006] usb 6-1: USB disconnect, device number 47 [ 432.705762][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2099'. [ 432.818738][T12597] netlink: 752 bytes leftover after parsing attributes in process `syz.6.2100'. [ 434.189745][T10006] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 434.354329][T10006] usb 6-1: Using ep0 maxpacket: 8 [ 434.381677][T10006] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.409634][T10006] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 434.439152][T10006] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 434.471557][T10006] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 434.500702][T10006] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 434.519643][T10006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.583773][T10006] hub 6-1:1.0: bad descriptor, ignoring hub [ 434.601972][T10006] hub 6-1:1.0: probe with driver hub failed with error -5 [ 434.633136][T10006] cdc_wdm 6-1:1.0: skipping garbage [ 434.647911][T10006] cdc_wdm 6-1:1.0: skipping garbage [ 434.677039][T10006] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 434.695229][T10006] cdc_wdm 6-1:1.0: Unknown control protocol [ 435.154094][T12631] ucma_write: process 1224 (syz.1.2111) changed security contexts after opening file descriptor, this is not allowed. [ 435.201593][T10006] usb 6-1: USB disconnect, device number 48 [ 435.578136][T12641] tipc: Cannot configure node identity twice [ 438.143427][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2139'. [ 439.010038][T10006] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 439.169996][T10006] usb 5-1: Using ep0 maxpacket: 32 [ 439.198398][T10006] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 439.231486][T10006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.268645][T10006] usb 5-1: Product: syz [ 439.279025][T10006] usb 5-1: Manufacturer: syz [ 439.348843][T10006] usb 5-1: SerialNumber: syz [ 439.391637][T10006] usb 5-1: config 0 descriptor?? [ 439.466262][T10006] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 439.597499][T10006] dvb-usb: bulk message failed: -22 (4/0) [ 439.626825][T10006] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 439.658416][T10006] dvb-usb: bulk message failed: -22 (5/0) [ 439.852672][T10006] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 439.900931][T10006] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 439.915331][T12733] ªªªªªª: renamed from vlan0 [ 439.964003][T10006] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 440.008243][T10006] usb 5-1: media controller created [ 440.080760][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2157'. [ 440.104201][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.111198][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.150518][T10006] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.202977][T10006] usb 5-1: selecting invalid altsetting 3 [ 440.220341][T10006] ttusb2: set interface to alts=3 failed [ 440.371472][T10006] DVB: Unable to find symbol tda10086_attach() [ 440.398820][T10006] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 440.461682][T10006] dvb-usb: bulk message failed: -22 (4/0) [ 440.467508][T10006] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 440.529284][T10006] dvb-usb: bulk message failed: -22 (5/0) [ 440.539406][T10006] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 440.569724][T10006] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 440.654711][T10006] usb 5-1: USB disconnect, device number 63 [ 440.849786][T10006] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 443.146585][T12788] tipc: Enabled bearer , priority 0 [ 443.158457][T12788] syzkaller0: entered promiscuous mode [ 443.165315][T12788] syzkaller0: entered allmulticast mode [ 443.280451][T12788] tipc: Resetting bearer [ 443.326237][T12787] tipc: Resetting bearer [ 443.383458][T12787] tipc: Disabling bearer [ 444.899494][T12816] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2180'. [ 446.724102][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.742805][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.047727][T12880] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 448.091682][T12880] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 454.291821][T12889] loop5: detected capacity change from 0 to 7 [ 454.300614][T12889] loop5: [ 454.303626][T12889] loop5: partition table partially beyond EOD, truncated [ 455.532412][T12926] netlink: 'syz.4.2223': attribute type 11 has an invalid length. [ 456.980543][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 457.242466][ T9] usb 5-1: config index 0 descriptor too short (expected 1572, got 36) [ 457.259783][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.285060][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 457.299926][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.311448][ T9] usb 5-1: Product: syz [ 457.315677][ T9] usb 5-1: Manufacturer: syz [ 457.321093][ T9] usb 5-1: SerialNumber: syz [ 457.335532][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input26 [ 457.532524][ T5181] bcm5974 5-1:1.0: could not read from device [ 457.542298][ T5181] bcm5974 5-1:1.0: could not read from device [ 457.556547][ T9] bcm5974 5-1:1.0: could not read from device [ 457.587832][T12960] kvm: kvm [12959]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000b110 [ 457.616240][ T9] input: failed to attach handler mousedev to device input26, error: -5 [ 457.626828][T12960] kvm: kvm [12959]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7000 [ 457.641130][ T9] usb 5-1: USB disconnect, device number 64 [ 457.650600][ T5181] bcm5974 5-1:1.0: could not read from device [ 457.668671][T12960] kvm: kvm [12959]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100 [ 457.687562][T12960] kvm: kvm [12959]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100 [ 457.708946][T12960] kvm: kvm [12959]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100 [ 457.725708][T12960] kvm: kvm [12959]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100 [ 457.747716][T12960] kvm: kvm [12959]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100 [ 457.762680][T12960] kvm: kvm [12959]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100 [ 457.775562][T12960] kvm: kvm [12959]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100 [ 457.806984][T12960] kvm: kvm [12959]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100 [ 459.103522][T13000] input: syz1 as /devices/virtual/input/input27 [ 460.902480][T13032] syz_tun: entered allmulticast mode [ 460.990560][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2254'. [ 461.152487][T13032] syz_tun: left allmulticast mode [ 461.546971][T13046] team0 (unregistering): Port device team_slave_0 removed [ 461.562413][T13046] team0 (unregistering): Port device team_slave_1 removed [ 462.850998][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2277'. [ 463.182614][ T5147] Bluetooth: hci1: unexpected cc 0x0402 length: 61 > 1 [ 463.190328][ T5147] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 465.511050][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 466.341135][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 466.358684][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.370259][ T9] usb 5-1: Product: syz [ 466.374476][ T9] usb 5-1: Manufacturer: syz [ 466.389331][ T9] usb 5-1: SerialNumber: syz [ 466.422152][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 466.440700][ T5831] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 466.537412][T13113] kvm_pr_unimpl_wrmsr: 18 callbacks suppressed [ 466.537429][T13113] kvm: kvm [13112]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffffffbe000068d0 [ 466.601517][T13113] kvm_intel: kvm [13112]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xffffff6b000030c1 [ 466.728725][ T9] usb 5-1: USB disconnect, device number 65 [ 466.813935][T13113] kvm: kvm [13112]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffffff2c0000f0e2 [ 466.863329][T13113] kvm: kvm [13112]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfffffff80000b085 [ 466.918899][T13113] kvm: kvm [13112]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 467.462431][ T5831] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 467.493701][ T5831] ath9k_htc: Failed to initialize the device [ 467.529064][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 469.099828][T13183] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 471.585673][T13256] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 471.891876][T13269] binder_alloc: 13267: binder_alloc_buf, no vma [ 471.985136][T13273] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2360'. [ 472.178543][T13281] kvm: pic: non byte write [ 472.652264][T13294] dvmrp1: entered allmulticast mode [ 473.950099][T10006] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 473.988310][T13321] usb usb8: usbfs: process 13321 (syz.4.2377) did not claim interface 0 before use [ 474.118188][T10006] usb 7-1: Using ep0 maxpacket: 16 [ 474.132691][T10006] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 474.149628][T10006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.157683][T10006] usb 7-1: Product: syz [ 474.179876][T10006] usb 7-1: Manufacturer: syz [ 474.184550][T10006] usb 7-1: SerialNumber: syz [ 474.231664][T10006] r8152-cfgselector 7-1: Unknown version 0x0000 [ 474.237991][T10006] r8152-cfgselector 7-1: config 0 descriptor?? [ 474.397344][T13334] IPv6: Can't replace route, no match found [ 474.604973][ T196] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.616420][ T196] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.619885][ T5831] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 474.627172][ T196] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.644878][ T196] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.707356][T10006] r8152-cfgselector 7-1: USB disconnect, device number 41 [ 474.891492][ T5831] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 474.903969][ T5831] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 474.922439][ T5831] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 474.939708][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.972741][T13335] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 474.997928][ T5831] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 476.026085][T10006] usb 5-1: USB disconnect, device number 66 [ 476.246558][T13368] binder: 13366:13368 ioctl c0306201 0 returned -14 [ 476.396344][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2390'. [ 476.464077][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2390'. [ 476.512855][T13375] loop6: detected capacity change from 0 to 2560 [ 476.522317][T13375] buffer_io_error: 11 callbacks suppressed [ 476.522361][T13375] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.536853][T13375] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.554469][T13375] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.581246][T13375] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.676848][T13375] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.725804][T13375] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.766058][T13380] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2401'. [ 476.812927][T13375] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.882919][T13375] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.959649][T13375] ldm_validate_partition_table(): Disk read failed. [ 476.966351][T13375] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.079035][T13375] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.136432][T13375] Dev loop6: unable to read RDB block 0 [ 477.172897][T13375] loop6: unable to read partition table [ 477.209866][T13375] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 479.455752][T13412] binder: 13410:13412 ioctl c0306201 0 returned -14 [ 479.714256][T13420] bridge2: entered allmulticast mode [ 479.912012][T13424] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.059777][T10003] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 480.274181][T10003] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.307308][T10003] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 480.340613][T10003] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.363876][T10003] usb 7-1: config 0 descriptor?? [ 480.383383][T10003] pwc: Askey VC010 type 2 USB webcam detected. [ 480.797798][T10003] pwc: recv_control_msg error -32 req 02 val 2b00 [ 480.810416][T10003] pwc: recv_control_msg error -32 req 02 val 2700 [ 480.827067][T13444] loop6: detected capacity change from 0 to 2560 [ 480.834170][T10003] pwc: recv_control_msg error -32 req 02 val 2c00 [ 480.846645][T13400] ldm_validate_partition_table(): Disk read failed. [ 480.859715][T10003] pwc: recv_control_msg error -32 req 04 val 1000 [ 480.867980][T10003] pwc: recv_control_msg error -32 req 04 val 1300 [ 480.883562][T10003] pwc: recv_control_msg error -32 req 04 val 1400 [ 480.920607][T10003] pwc: recv_control_msg error -32 req 02 val 2000 [ 480.934731][T10003] pwc: recv_control_msg error -32 req 02 val 2100 [ 480.951828][T10003] pwc: recv_control_msg error -32 req 04 val 1500 [ 480.969676][T10003] pwc: recv_control_msg error -32 req 02 val 2500 [ 480.984856][T10003] pwc: recv_control_msg error -32 req 02 val 2400 [ 480.994352][T13447] binder: 13446:13447 ioctl c0306201 0 returned -14 [ 481.001897][T10003] pwc: recv_control_msg error -32 req 02 val 2600 [ 481.010320][T13400] Dev loop6: unable to read RDB block 0 [ 481.016198][T13400] loop6: unable to read partition table [ 481.021957][T10003] pwc: recv_control_msg error -32 req 02 val 2900 [ 481.023785][T10003] pwc: recv_control_msg error -32 req 02 val 2800 [ 481.115717][T13444] ldm_validate_partition_table(): Disk read failed. [ 481.220569][T13444] Dev loop6: unable to read RDB block 0 [ 481.226401][T13444] loop6: unable to read partition table [ 481.284866][T10003] pwc: recv_control_msg error -71 req 04 val 1200 [ 481.295822][T13444] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 481.325521][T10003] pwc: Registered as video103. [ 481.332872][T10003] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input28 [ 481.408072][T10003] usb 7-1: USB disconnect, device number 42 [ 481.456273][ T5196] ldm_validate_partition_table(): Disk read failed. [ 481.490305][ T5196] Dev loop6: unable to read RDB block 0 [ 481.496200][ T5196] loop6: unable to read partition table [ 483.000333][T10003] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 483.008983][T13484] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 483.015539][T13484] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 483.044803][T13484] vhci_hcd vhci_hcd.0: Device attached [ 483.185128][T10003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.209699][T10006] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 483.225884][T10003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.260523][T10003] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 483.279752][T10002] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 483.299977][T10003] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.309078][T10003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.329637][ T5907] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 483.338675][T10003] usb 6-1: config 0 descriptor?? [ 483.401634][T10006] usb 7-1: Using ep0 maxpacket: 16 [ 483.422205][T10006] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 483.439652][T10006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.459108][T10006] usb 7-1: Product: syz [ 483.479391][T10006] usb 7-1: Manufacturer: syz [ 483.484661][T10006] usb 7-1: SerialNumber: syz [ 483.493850][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.517690][T10006] usb 7-1: config 0 descriptor?? [ 483.525416][ T5907] usb 3-1: config 0 has no interfaces? [ 483.537036][ T5907] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 483.551639][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.575237][ T5907] usb 3-1: config 0 descriptor?? [ 483.782380][T10003] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 483.805497][T13485] usb 37-1: recv xbuf, 0 [ 483.815542][ T1105] vhci_hcd vhci_hcd.2: stop threads [ 483.817842][ T5907] usb 3-1: USB disconnect, device number 72 [ 483.831826][ T1105] vhci_hcd vhci_hcd.2: release socket [ 483.858977][ T1105] vhci_hcd vhci_hcd.2: disconnect device [ 483.952967][T10006] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 483.971154][T10006] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 483.991784][T10006] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 484.012903][T10006] usb 7-1: media controller created [ 484.020274][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 484.036039][T10006] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 484.051033][T13501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 484.154030][T10006] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 484.162689][T10006] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 484.368159][T10006] usb 7-1: USB disconnect, device number 43 [ 484.445047][T10006] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 485.105354][ C0] plantronics 0003:047F:FFFF.0009: usb_submit_urb(ctrl) failed: -1 [ 485.910056][T10002] usb 6-1: USB disconnect, device number 49 [ 486.503518][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 489.417313][T13642] can: request_module (can-proto-0) failed. [ 490.850111][ T5831] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 491.031558][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.114007][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.130620][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 491.154590][ T5831] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 491.170232][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.207586][ T5831] usb 5-1: config 0 descriptor?? [ 491.716148][ T5831] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 491.875924][ T5831] usb 5-1: USB disconnect, device number 67 [ 492.688235][T13692] syzkaller0: entered promiscuous mode [ 492.700512][T13692] syzkaller0: entered allmulticast mode [ 492.960323][ T9] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 493.112347][ T9] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 493.132855][ T9] usb 6-1: config 0 has no interface number 0 [ 493.148854][ T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 493.178273][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.320257][ T9] usb 6-1: Product: syz [ 493.360157][ T9] usb 6-1: Manufacturer: syz [ 493.369334][ T9] usb 6-1: SerialNumber: syz [ 493.391101][ T9] usb 6-1: config 0 descriptor?? [ 493.631977][ T9] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 493.671183][ T9] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 493.679186][ T9] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 493.720324][ T9] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 493.803704][ T9] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 493.840163][ T5831] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 494.022268][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.050265][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.065072][T10002] usb 6-1: USB disconnect, device number 50 [ 494.092097][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 494.098833][T10002] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 494.150500][ T5831] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.163370][T10002] keyspan 6-1:0.133: device disconnected [ 494.191341][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.232114][ T5831] usb 5-1: config 0 descriptor?? [ 494.382011][T13726] syzkaller0: entered promiscuous mode [ 494.387783][T13726] syzkaller0: entered allmulticast mode [ 494.693603][ T5831] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 494.888259][T10002] usb 5-1: USB disconnect, device number 68 [ 495.038782][T13741] fido_id[13741]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 495.117809][T13747] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 495.130893][T13747] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 495.150437][T13747] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 495.180904][T13747] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 495.205175][T13750] can: request_module (can-proto-0) failed. [ 495.881985][ T5831] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 496.051162][ T5831] usb 5-1: Using ep0 maxpacket: 16 [ 496.062347][ T5831] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 496.098702][ T5831] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 496.119250][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.135247][ T5831] usb 5-1: Product: syz [ 496.146561][ T5831] usb 5-1: Manufacturer: syz [ 496.160408][ T5831] usb 5-1: SerialNumber: syz [ 496.186314][ T5831] r8152-cfgselector 5-1: Unknown version 0x0000 [ 496.200361][ T5831] r8152-cfgselector 5-1: config 0 descriptor?? [ 496.206872][T13779] use of bytesused == 0 is deprecated and will be removed in the future, [ 496.221665][T13779] use the actual size instead. [ 496.647313][T10002] r8152-cfgselector 5-1: USB disconnect, device number 69 [ 497.140117][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 497.141729][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 497.223278][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 497.223292][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 497.590276][ T5831] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 497.775711][ T5831] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 497.796044][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.816284][ T5831] usb 5-1: Product: syz [ 497.821169][ T5831] usb 5-1: Manufacturer: syz [ 497.825849][ T5831] usb 5-1: SerialNumber: syz [ 497.853391][ T5831] usb 5-1: config 0 descriptor?? [ 497.865998][ T5831] hub 5-1:0.0: bad descriptor, ignoring hub [ 497.879685][ T5831] hub 5-1:0.0: probe with driver hub failed with error -5 [ 498.132172][ T5831] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 498.171351][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 498.203670][ T5831] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 498.220277][ T5831] usb 5-1: media controller created [ 498.262375][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.383821][ T5831] DVB: Unable to find symbol dib7000p_attach() [ 498.392896][ T5831] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 498.470242][ T5831] rc_core: IR keymap rc-dib0700-rc5 not found [ 498.476468][ T5831] Registered IR keymap rc-empty [ 498.487056][ T5831] dvb-usb: could not initialize remote control. [ 498.503246][ T5831] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 498.598974][T13839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.645455][T13839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.383621][T13853] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2589'. [ 500.170359][ T5831] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 500.330365][ T5831] usb 6-1: Using ep0 maxpacket: 16 [ 500.343995][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.367414][ T5831] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 500.390463][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.441165][ T5831] usb 6-1: config 0 descriptor?? [ 500.496477][T13872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.878276][ T5831] hid_parser_main: 470 callbacks suppressed [ 500.878303][ T5831] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 500.913367][ T5831] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 500.929247][ T5831] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 500.947408][ T5831] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 500.963751][ T5831] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 500.982528][ T5831] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 501.276938][ T5831] usb 6-1: USB disconnect, device number 51 [ 501.544260][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.552091][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.792262][T10002] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 502.962119][T10002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 502.985241][T10002] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 503.007476][T10002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.070655][T10002] usb 3-1: config 0 descriptor?? [ 503.289511][T10002] ath6kl: Failed to submit usb control message: -71 [ 503.296314][T10002] ath6kl: unable to send the bmi data to the device: -71 [ 503.303946][T10002] ath6kl: Unable to send get target info: -71 [ 503.316404][T10002] ath6kl: Failed to init ath6kl core: -71 [ 503.331887][T10002] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 503.373646][T10002] usb 3-1: USB disconnect, device number 73 [ 503.665269][T10002] usb 5-1: USB disconnect, device number 70 [ 503.745623][T10002] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 504.065872][T13937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2626'. [ 504.079993][T13934] syzkaller0: entered promiscuous mode [ 504.085814][T13934] syzkaller0: entered allmulticast mode [ 504.351307][ T5831] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 504.512416][ T5831] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.544434][ T5831] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.571905][ T5831] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 504.588806][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 504.620304][ T5831] usb 3-1: SerialNumber: syz [ 504.872210][ T5831] usb 3-1: 0:2 : does not exist [ 504.900904][ T5831] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 504.955285][ T9] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 504.992037][ T5831] usb 3-1: USB disconnect, device number 74 [ 505.018396][T13980] veth4: entered allmulticast mode [ 505.044037][T13400] udevd[13400]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.131906][ T30] audit: type=1804 audit(1774166149.729:202): pid=13984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2648" name="/newroot/503/file0" dev="tmpfs" ino=2593 res=1 errno=0 [ 505.148284][ T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 505.180247][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.211164][ T9] usb 6-1: config 0 descriptor?? [ 505.267828][T13986] syz_tun: entered allmulticast mode [ 505.277161][T13985] syz_tun: left allmulticast mode [ 505.426082][ T9] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 505.635097][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 505.690429][ T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 505.716565][ T9] [drm] Initialized udl on minor 2 [ 505.741710][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 505.768101][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 505.788773][ T5831] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 505.801607][T14010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.816846][ T9] usb 6-1: USB disconnect, device number 52 [ 505.827892][ T5831] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 505.850397][T14010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.895959][T14012] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2662'. [ 505.930651][T14012] ------------[ cut here ]------------ [ 505.936173][T14012] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 505.948669][T14012] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1da0/0x2720, CPU#1: syz.6.2662/14012 [ 505.958673][T14012] Modules linked in: [ 505.963016][T14012] CPU: 1 UID: 0 PID: 14012 Comm: syz.6.2662 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.974128][T14012] Tainted: [L]=SOFTLOCKUP [ 505.978487][T14012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.988716][T14012] RIP: 0010:u32_change+0x1daf/0x2720 [ 505.994183][T14012] Code: 3d 5a 52 43 06 01 75 33 e8 ae 69 0d f8 eb 50 e8 a7 69 0d f8 48 8d 3d 40 83 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 00 8b e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 82 69 0d f8 eb 24 e8 7b 69 0d f8 [ 506.014262][T14012] RSP: 0018:ffffc90004076fc0 EFLAGS: 00010283 [ 506.020682][T14012] RAX: ffffffff89b83759 RBX: ffff888058740400 RCX: 0000000000000010 [ 506.028701][T14012] RDX: ffffffff8ce18b00 RSI: 0000000000000020 RDI: ffffffff9020baa0 [ 506.036829][T14012] RBP: ffffc90004077178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 506.045538][T14012] R10: dffffc0000000000 R11: fffffbfff20234f7 R12: ffff888058741ce8 [ 506.054147][T14012] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 506.062802][T14012] FS: 00007f29739066c0(0000) GS:ffff88812555d000(0000) knlGS:0000000000000000 [ 506.072355][T14012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 506.079002][T14012] CR2: 00007f6ddc3456b8 CR3: 000000004a210000 CR4: 00000000003526f0 [ 506.087442][T14012] Call Trace: [ 506.091098][T14012] [ 506.094145][T14012] ? __pfx_u32_change+0x10/0x10 [ 506.099067][T14012] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 506.104972][T14012] tc_new_tfilter+0xff8/0x1780 [ 506.109971][T14012] ? __pfx_tc_new_tfilter+0x10/0x10 [ 506.115228][T14012] ? is_bpf_text_address+0x26/0x2b0 [ 506.120633][T14012] ? __pfx_tc_new_tfilter+0x10/0x10 [ 506.125884][T14012] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 506.131050][T14012] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 506.136325][T14012] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 506.141998][T14012] ? __lock_acquire+0x6b5/0x2cf0 [ 506.147036][T14012] netlink_rcv_skb+0x232/0x4b0 [ 506.152046][T14012] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 506.157559][T14012] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 506.162948][T14012] ? netlink_deliver_tap+0x2e/0x1b0 [ 506.168212][T14012] netlink_unicast+0x80f/0x9b0 [ 506.173099][T14012] ? __pfx_netlink_unicast+0x10/0x10 [ 506.178431][T14012] ? netlink_sendmsg+0x650/0xb40 [ 506.183556][T14012] ? skb_put+0x11b/0x210 [ 506.188080][T14012] netlink_sendmsg+0x813/0xb40 [ 506.192906][T14012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.198228][T14012] ? aa_sock_msg_perm+0xf1/0x1b0 [ 506.203312][T14012] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 506.208637][T14012] ____sys_sendmsg+0x972/0x9f0 [ 506.213548][T14012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.218864][T14012] ? import_iovec+0x73/0xa0 [ 506.223510][T14012] ___sys_sendmsg+0x2a5/0x360 [ 506.228210][T14012] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.233460][T14012] ? preempt_schedule_common+0x82/0xd0 [ 506.238944][T14012] ? preempt_schedule_thunk+0x16/0x30 [ 506.244439][T14012] ? __fget_files+0x2a/0x420 [ 506.249108][T14012] ? __fget_files+0x3a0/0x420 [ 506.253862][T14012] __sys_sendmmsg+0x27c/0x4e0 [ 506.258578][T14012] ? __pfx___sys_sendmmsg+0x10/0x10 [ 506.263920][T14012] ? do_futex+0x395/0x420 [ 506.268368][T14012] ? rcu_is_watching+0x15/0xb0 [ 506.273249][T14012] __x64_sys_sendmmsg+0xa0/0xc0 [ 506.278141][T14012] do_syscall_64+0x14d/0xf80 [ 506.282848][T14012] ? trace_irq_disable+0x3b/0x150 [ 506.287897][T14012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.294030][T14012] ? clear_bhb_loop+0x40/0x90 [ 506.298736][T14012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.304687][T14012] RIP: 0033:0x7f297299c799 [ 506.309309][T14012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.329137][T14012] RSP: 002b:00007f2973906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 506.337691][T14012] RAX: ffffffffffffffda RBX: 00007f2972c15fa0 RCX: 00007f297299c799 [ 506.345762][T14012] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 506.353843][T14012] RBP: 00007f2972a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 506.361864][T14012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.369881][T14012] R13: 00007f2972c16038 R14: 00007f2972c15fa0 R15: 00007f2972d3fa48 [ 506.377899][T14012] [ 506.380987][T14012] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 506.388294][T14012] CPU: 1 UID: 0 PID: 14012 Comm: syz.6.2662 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.399444][T14012] Tainted: [L]=SOFTLOCKUP [ 506.403778][T14012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.413934][T14012] Call Trace: [ 506.417218][T14012] [ 506.420162][T14012] vpanic+0x56c/0xa60 [ 506.424217][T14012] ? __pfx__printk+0x10/0x10 [ 506.428814][T14012] ? __pfx_vpanic+0x10/0x10 [ 506.433325][T14012] ? is_bpf_text_address+0x292/0x2b0 [ 506.438794][T14012] ? is_bpf_text_address+0x26/0x2b0 [ 506.444012][T14012] panic+0xc5/0xd0 [ 506.447774][T14012] ? __pfx_panic+0x10/0x10 [ 506.452282][T14012] __warn+0x315/0x4f0 [ 506.456301][T14012] ? u32_change+0x1da0/0x2720 [ 506.461014][T14012] ? u32_change+0x1da0/0x2720 [ 506.465735][T14012] __report_bug+0x29a/0x540 [ 506.470354][T14012] ? ___sys_sendmsg+0x2a5/0x360 [ 506.475294][T14012] ? __sys_sendmmsg+0x27c/0x4e0 [ 506.480181][T14012] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 506.485249][T14012] ? u32_change+0x1da0/0x2720 [ 506.489954][T14012] ? __pfx___report_bug+0x10/0x10 [ 506.495048][T14012] report_bug_entry+0x19a/0x290 [ 506.499944][T14012] ? u32_change+0x1daf/0x2720 [ 506.504655][T14012] ? u32_change+0x1db4/0x2720 [ 506.509363][T14012] handle_bug+0xce/0x200 [ 506.513649][T14012] exc_invalid_op+0x1a/0x50 [ 506.518202][T14012] asm_exc_invalid_op+0x1a/0x20 [ 506.523074][T14012] RIP: 0010:u32_change+0x1daf/0x2720 [ 506.528386][T14012] Code: 3d 5a 52 43 06 01 75 33 e8 ae 69 0d f8 eb 50 e8 a7 69 0d f8 48 8d 3d 40 83 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 00 8b e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 82 69 0d f8 eb 24 e8 7b 69 0d f8 [ 506.548022][T14012] RSP: 0018:ffffc90004076fc0 EFLAGS: 00010283 [ 506.554127][T14012] RAX: ffffffff89b83759 RBX: ffff888058740400 RCX: 0000000000000010 [ 506.562216][T14012] RDX: ffffffff8ce18b00 RSI: 0000000000000020 RDI: ffffffff9020baa0 [ 506.570296][T14012] RBP: ffffc90004077178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 506.578293][T14012] R10: dffffc0000000000 R11: fffffbfff20234f7 R12: ffff888058741ce8 [ 506.586291][T14012] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 506.594297][T14012] ? u32_change+0x1d99/0x2720 [ 506.599030][T14012] ? __pfx_u32_change+0x10/0x10 [ 506.603909][T14012] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 506.609590][T14012] tc_new_tfilter+0xff8/0x1780 [ 506.614417][T14012] ? __pfx_tc_new_tfilter+0x10/0x10 [ 506.619638][T14012] ? is_bpf_text_address+0x26/0x2b0 [ 506.625066][T14012] ? __pfx_tc_new_tfilter+0x10/0x10 [ 506.630314][T14012] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 506.635308][T14012] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 506.640467][T14012] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 506.645981][T14012] ? __lock_acquire+0x6b5/0x2cf0 [ 506.650968][T14012] netlink_rcv_skb+0x232/0x4b0 [ 506.655778][T14012] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 506.661295][T14012] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 506.666633][T14012] ? netlink_deliver_tap+0x2e/0x1b0 [ 506.671874][T14012] netlink_unicast+0x80f/0x9b0 [ 506.676685][T14012] ? __pfx_netlink_unicast+0x10/0x10 [ 506.682002][T14012] ? netlink_sendmsg+0x650/0xb40 [ 506.686970][T14012] ? skb_put+0x11b/0x210 [ 506.691246][T14012] netlink_sendmsg+0x813/0xb40 [ 506.696051][T14012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.701377][T14012] ? aa_sock_msg_perm+0xf1/0x1b0 [ 506.706359][T14012] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 506.711673][T14012] ____sys_sendmsg+0x972/0x9f0 [ 506.716477][T14012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.721794][T14012] ? import_iovec+0x73/0xa0 [ 506.726329][T14012] ___sys_sendmsg+0x2a5/0x360 [ 506.731042][T14012] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.736279][T14012] ? preempt_schedule_common+0x82/0xd0 [ 506.741764][T14012] ? preempt_schedule_thunk+0x16/0x30 [ 506.747211][T14012] ? __fget_files+0x2a/0x420 [ 506.751840][T14012] ? __fget_files+0x3a0/0x420 [ 506.756562][T14012] __sys_sendmmsg+0x27c/0x4e0 [ 506.761274][T14012] ? __pfx___sys_sendmmsg+0x10/0x10 [ 506.766495][T14012] ? do_futex+0x395/0x420 [ 506.770887][T14012] ? rcu_is_watching+0x15/0xb0 [ 506.775692][T14012] __x64_sys_sendmmsg+0xa0/0xc0 [ 506.780578][T14012] do_syscall_64+0x14d/0xf80 [ 506.785203][T14012] ? trace_irq_disable+0x3b/0x150 [ 506.790259][T14012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.796353][T14012] ? clear_bhb_loop+0x40/0x90 [ 506.801141][T14012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.807056][T14012] RIP: 0033:0x7f297299c799 [ 506.811494][T14012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.831125][T14012] RSP: 002b:00007f2973906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 506.839571][T14012] RAX: ffffffffffffffda RBX: 00007f2972c15fa0 RCX: 00007f297299c799 [ 506.847580][T14012] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 506.855591][T14012] RBP: 00007f2972a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 506.863589][T14012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.871755][T14012] R13: 00007f2972c16038 R14: 00007f2972c15fa0 R15: 00007f2972d3fa48 [ 506.879776][T14012] [ 506.883429][T14012] Kernel Offset: disabled [ 506.887771][T14012] Rebooting in 86400 seconds..