last executing test programs: 9.487661337s ago: executing program 3 (id=1334): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001500)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="ef2c030000001ab96ba2d43d64aad1fe38a49c4549d272d55628e4f30485"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000340)={'syz_tun\x00', 0x400}) r6 = socket(0x400000000010, 0x3, 0x0) openat$qrtrtun(0xffffff9c, &(0x7f0000000180), 0x490800) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x8000}}}]}, 0x38}}, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x76, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000e86dd6012000800303a00fe8000400000000000000000000000bbfe8000000000000000000000000000aa0802907800000000600008100000000000000000000000000000ffff00000000fc0200"/102], 0x0) 7.007714728s ago: executing program 1 (id=1346): openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80a80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, 0x0, 0x0) connect$inet6(r6, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9000a10010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 6.816100152s ago: executing program 1 (id=1347): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x2, 0x4000, 0x1000, &(0x7f0000ec4000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r8, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0x80000004, "000000ecffffff00", "20e48560999fd132b6a5426180a8c27af10600000000d36debccd20352346f8f"}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r7, 0x1, 0x0) fchdir(r9) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'\x00', 0x0}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r10, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) madvise(&(0x7f00002b0000/0x4000)=nil, 0x4000, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000003000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf09000000000000550901000000000095000000000000003c9804800000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4003, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000007d40)='net/mcfilter6\x00') read$FUSE(r12, &(0x7f0000000300)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) 6.149002983s ago: executing program 3 (id=1348): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) socket$tipc(0x1e, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) unshare(0x2c020400) syz_io_uring_setup(0x11f, &(0x7f00000003c0)={0x0, 0x0, 0x400, 0x2, 0x31e}, &(0x7f0000000500), &(0x7f0000000340)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.227722521s ago: executing program 3 (id=1350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001800090300000000000000000a870000"], 0x38}}, 0x1000c840) 5.206527156s ago: executing program 1 (id=1352): openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pselect6(0x0, 0x0, &(0x7f0000000240)={0x9, 0x5, 0x9, 0x0, 0x299, 0x2, 0xffffffff80000001, 0x2c362cc3}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x35f48f9e250dba0b, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = socket$pppl2tp(0x18, 0x1, 0x1) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r4) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x160, 0x24, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xc5d585b861534a62, 0x9}, {0x10, 0xd}, {0xffe0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x5, 0x9, 0x0, 0x2, 0x87, 0xa}}, {0x18, 0x2, [0x8, 0xff7f, 0x8142, 0x7, 0x5, 0x99, 0x3, 0xa68d, 0xfffb, 0x6]}}, {{0x1c, 0x1, {0x7, 0x2, 0x7cb, 0x9, 0x1, 0x2, 0x4, 0x9}}, {0x16, 0x2, [0x401, 0x2622, 0x7fff, 0x8, 0x7, 0xf, 0x5, 0xe0, 0x9]}}, {{0x1c, 0x1, {0x1, 0x3, 0xffff, 0x6, 0x1, 0x3, 0x9, 0x4}}, {0xc, 0x2, [0x36, 0xc, 0x8, 0x6]}}, {{0x1c, 0x1, {0x3, 0xa0, 0x8, 0xc1, 0x1, 0x80, 0x0, 0x2}}, {0x8, 0x2, [0x5, 0x9]}}, {{0x1c, 0x1, {0x51, 0x2, 0x1, 0x7fffffff, 0x0, 0x3, 0x3, 0x8}}, {0x14, 0x2, [0xa0, 0x1000, 0x8, 0x3, 0x41, 0x6, 0xe, 0x0]}}, {{0x1c, 0x1, {0x8, 0xb5, 0x5, 0x7ff, 0x0, 0x0, 0x3, 0x9}}, {0x16, 0x2, [0x8, 0x40, 0x0, 0x1, 0xf250, 0xa5a, 0x1b, 0xd5, 0x8b]}}]}, @TCA_EGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b10b5103a09222689b701020301090245"], 0x0) 5.063332322s ago: executing program 3 (id=1354): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000400)={0x7, 0x0, '\x00', 0x0, &(0x7f0000000280)}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000e40), 0x440, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$binfmt_aout(r3, &(0x7f0000000600)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x478, 0x0, 0x1e0, 0xffffffff, 0x0, 0x1e0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@loopback, @ipv6=@mcast2, @gre_key, @gre_key}}}, {{@ipv6={@dev, @loopback, [], [], 'dvmrp0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r5 = openat$dma_heap(0xffffff9c, &(0x7f0000000f80), 0x588c2, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x80000) read$FUSE(r6, &(0x7f0000003f80)={0x2020}, 0x2020) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd6000000000002d9300000c0001800800", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 4.539186437s ago: executing program 0 (id=1359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x48c000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x8000000, 0x405, 0x1fe, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) (async) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETVNETBE(r7, 0x800454df, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r9 = socket$can_j1939(0x1d, 0x2, 0x7) sendfile(r1, r0, &(0x7f00000000c0)=0x7, 0xa) getsockopt(r9, 0x4, 0x2, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) 4.310510479s ago: executing program 4 (id=1360): syz_open_dev$vim2m(0x0, 0x7, 0x2) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) socket$tipc(0x1e, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) unshare(0x2c020400) syz_io_uring_setup(0x11f, &(0x7f00000003c0)={0x0, 0x0, 0x400, 0x2, 0x31e}, &(0x7f0000000500), &(0x7f0000000340)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.076001292s ago: executing program 3 (id=1362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1100) unshare(0x22020400) move_mount(r2, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a00000000000000ff00000000000000000000000000000100000000200002000a"], 0x6c}}, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2, 0x80, 0x6c9}, 0x2}, 0x20, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30cec6db7d54e290783fe7380000000004070000060a010400000000000000000100000008000b4000000000e8060480c00601800e000100696d6d656469617465000000ac060280080001400000001334010280d9000100eacc8759c940812b39f267d0d50d0499c80ced83ec4e58ded054b8c4a69ce3e9988eede7727e27e3dbff7e874cb1b05d587c253d495a053c719492db971f200e5bcf9a3bc095a26b61c9223f919be897ec511a8f508c6a5c8b12302d7734616c27da2316dd53a73312d3b378520796a6e349b06f99806394ad060919c8e6ec0702663f3c0ab0d9ed5f5944b8c19374ca21c2d2af8a899321e4549923584914221e95e35a16e33def4b5fbd5a78387388356f070ebdf992da0d227e98833e7d1ac7b846b257489164571ad67de3a54982f48f6538870000002800028008000180fffffffb080003400000001f08000340000000800900020073797a320000000004000280250001008d8fbb0bd19126e91fa6bb081a555f4f093b22335ea65b5e6443a42bc7772c6275000000080001400000000064050280040001006a000100f04fae3424364745390144ae9195c1d849951647176fbdd72c494fc2c8de4c3944c44516d2102eb25df75495a12cc963f6a65ea08d592069903d9ee593f218fb2d283c99fd01863a445de39926371b52a915a28c9fb94599947edf821d946b401a8b5693727a00002400028008000340000000060900020073797a32000000000900020073797a32000000000400028021000100a1d1361784bb6ca44fd5d07d33e06b7c0400466cd48ee5496c948e573b000000790001007cec8b0057578ebd97c694cb01a31ef11e6f6f569023457553631f08213dcee163ae01b55a7a5fd908b8b74bfb5976c6b37dc1869e7383660478b5ff689033897e8792462855aef9e6222e794a93f8e9e1f6908c646c7b0bc78eb6bfa6fd829658a286d8b211229ec22252f93aa88bb87d05a35cf8000000100002800900020073797a320000000004000280040002800f040100a50dccc20bdba1839e7e75a6bd58dac9063761500001c99a5a3edac0be788c5e3a0bd46472e7f5b6e49c7d9a9bec4b199c37e72b6e37497d9a7ff6911f9e588b3f5973c3bb9d22d90fede8ff634ed65fd5e4c0aa24a8f81e7ffc690221569c425c0e98c4c76a0b2fcc283328eee6e7fbb9348622add94e22229754b31f66b336bf5fa31b7d628a9024383408755f9d90e9050cb637524ca1b83f22b2009944656cec2b6696b528571e10fd82b0526b9dd7c128953863376e0bb9931b085db2572561e67b227763010f1f41dd5eb52b076900354c6c39279e0ee4d9d42f002b923518d13a0e5c092ce532d9f4b74fa8039549eaee57f6db389b0fa08604caa4edadef0cc3825133d26a4db36770cc2384822cb67efcb1fda960bb9b30b43f0f480bb38f9695d244153d411d407180c42f0b7edbc2a67dc0127442be628e5923eb9ede3579666fe9054afae87fc70928a7f65acf020628ef352f0e536a73d0cad686607d8958ffa02caa38305c0d6c5757569479c7d24f2f77828d029c6caf99bd9ebe723187521c9a90860a71bcb2756eda673f05138112c46cf01452d493ca5c7169fdd9b072f249f465e06e98c4e14fe87eebe28712ef7ff84c6501cb708ad2a8a256a2a6996bd449a62e6f08ec4338be46d84c129fb555ffb8857a9662098cb0123f82cb348dff614cb0d5fd9bd88b0052981dae9375edc65939f6a372dd26b9fd6da8e7aa60d2b77870a388477575683e4b071f8df923b38dadafff09eae68dbad4932d70a9a76cff3bb7c2deb3efe1c311ab212380cc51986cd9eacad9ef77b0e3d7212fdacc25707ac72518ee9b9ac136fb3297fb3197ef04e489aef2cdb5c21ddadea7ac8eb4a5b411c24e9ad00de7b07e8b2299fa6b85f8eed59aca91622bf9ebafc8051413ff279e88b8c835f486e9e169d0d0b71a86182a0f153db5c74e2bfba3355b21b155ef77a1aaf39f4031132281a99171455d6801c435073d5d8143b24d9241bba82b7553e7b36c44062fc4047bf4bc8d6c9d594dd6bb220297616256ae9d30d98d33c1fad934f2f392bcc977d417d6463f84feb16f410045772bb92ed2d7eb93fec3dbe9490f10b4e7e293a50c1e196b8c4b9479013b9f9ad74eb96d7e828e0843f56a0c652b1054e7c20740cd540eb78c45d46ab7ee71e908b2fe1f072b5066ff2b8c232992ce6e38629f3acdfc6876dbc6f67e91ca069b8aa785b94d6569667f4a5675b1ad3274f96c411a701478ce4a50d56951d196a5849d7d4651cf38d73b88c66a6e9ac9d6103ded9f686fda7a56d262b5f7aca3661329ff505152d61bb10306e03338bc331096513123926b8b3005bf63486b8179ffbeba6c2122d53caa76ba756e1b8c5dd2d64915017d0ac348aac7e20280700b0379604c57988f4d13760e16ff4c29fd6ad76775d8c1619cc9a286958ea390635c90957aeac7600001800c00010062697477697365001400028008000640000000020800064000000000140000001100010000000000000000515607a8ba4a214a6762a52912c1a41fc216b9f17ea7cb340c42c3f127"], 0x74c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x0, 0x2}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r7, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff8070000001d000000000000", 0x1b) write(r0, &(0x7f0000000880)="7c7809010ec7de3a885773ab1e4f218e01b79e2dc6576d30052a4319b3fd76ba16afb1698e36f957adf0cfb1f4faf8c9cc0b5b0b69e82571060f8c94dc271173bda8961e233b71a3d821aac249362357242db10d04026138bbf863b83034e43324c42d0311ca3ca091923ee1aa80fc44d24993f5aaba397b7e2b0b89d4e489fc7e2fed45a580796e740ca850869344f2b02573a736193f57e6170a15e5e9f881c7cb2461f67be1b7d5c60dd5fbabde41b6ae69f6461d13ae4aa68ba87eca1d9990ce9e8a309d73082819", 0xca) r8 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904"], 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @lookup={{}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xf8}}, 0x0) syz_usb_connect$uac1(0x0, 0xb7, &(0x7f0000001fc0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902a50003010000010904000000010100000a24010000000201020d2406000003000000001a000008240800000000500c2402000000000000000000132406000606000000000900000000000000000924030000000005000924060505010000000904010000010200000904010101010200000905010900000000000725010000000009040200000101"], 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r11 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x20000) ioctl$SG_NEXT_CMD_LEN(r11, 0x2283, &(0x7f0000000080)=0x80020) preadv(r10, &(0x7f0000001b80)=[{&(0x7f0000000a40)=""/65, 0x41}], 0x1, 0x0, 0x0) 4.045642653s ago: executing program 0 (id=1363): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) writev(r0, 0x0, 0x0) 3.711745197s ago: executing program 0 (id=1364): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001800090300000000000000000a87"], 0x38}}, 0x1000c840) 3.497030101s ago: executing program 0 (id=1366): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000006a000000000200000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b04, 0x0) 3.467732705s ago: executing program 4 (id=1367): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x74, r2, {0xfff3}, {0xffe0}, {0x2, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c19ff8e8322e42610cced6e79dc1be79aadd847bb9d030127590c3fc417ecb5b5a7975796588188fbe87b692aa4c6e60b62bb63270e461b489047ed91f1884ac9f9f00e4eb26efb42a31b01e2780eb4cb557297d44f09efc5b0ff6ed0156099e2a9cf75fb2a4277c10c3083b94ec869334a2444a84363a5de050954df8d91214872fc7331e160b92c17426624ef490217177bb8852c4ae88702e25d68b1b15b59bfef6a2d387bbd31d8e1c363d5", 0xae}, {&(0x7f00000001c0)="10aaaac68d88f5cb8f07834416f232905e237fde096b9c211829131069dcd68c6580c7767c51", 0x26}, {&(0x7f0000000280)="6160e30638a2b466149c3cf336019a4ced70c3b8fbded248688bb818a8052b7a1d38b01ec79a03c5edb40904bff70a8cf64bc10033e71f0887226a5f356af531e5562203cbfd22a0d6b64daeca026fc6", 0x50}, {&(0x7f0000000340)="6cb899a4e870569d62894dddf592067e9087e5061bf4c7efff3c56dc81bb72d1b6ec35a94ac4d1a8c7906e441a38dd80948f95ce19895438da783396353e6a5a851d9547304ac48c2dd3b5", 0x4b}, {&(0x7f00000003c0)="9bf8cc2904b356ba0f3c13bcf2756ed362d5db716138679e9c0f5e5e0ea9556049437c8b82c45c2e8961a3228aadd835c30654be749ed928fbd612eb9d03e3c3657f2357be571d78f7ca3158c5b2e04d8ece19d98967149dc9473b8d8fc9919da398ec2e04a0ec7548b3ca10f05b13f0185440abb41055ccd481c9a301ecbf0238d60e78ed919de96141fca11d9fe2ac704527f246de20c3c6ed60951651b89de2b2ed6bb8d2bea24b62f80d1fe3c2d82156403fe537e65585739135ab02efa341cc629dced8de0de908d6dc", 0xcc}, {&(0x7f00000004c0)="bc96de665b27fae320e315eacedbc786c1214bf164484ea8d848f48deda03a3189b1b99b7b2a42a76144f23cdc9f8da3750282473bd33ddf88e11d0eb5ce9d12a1f73fbfb235666ebae21d822e0583bc5c65545d263b5a2976ec4e7e5aa1b2c55743c2523157d836f303d86a92e73aad4606d966eda01d6e4e2425188aaca933677cb4478c8a087c62213b2dd736", 0x8e}], 0x6, &(0x7f0000000600)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x39}, @empty}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @remote}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @loopback, @local}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x10000}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1}}}], 0x80}}], 0x2, 0x0) 3.134660627s ago: executing program 4 (id=1368): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[{0xc, 0x68000, 0x7}], 0xc}}], 0x2, 0x0) 3.011614822s ago: executing program 4 (id=1369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) (async) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) (async) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) unlink(&(0x7f0000000140)='./bus\x00') ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) 2.013165063s ago: executing program 1 (id=1370): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02008000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000380), 0xffffd6c0}, 0x38) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000740)=ANY=[@ANYRESHEX=r1, @ANYBLOB="598e8389f32246438ece71d797372d21e60e7b108b32b52f54b239bc16eda9df27f599cb226335f56cc7c1d7053e243ea91d1299a79f453a6bce524fe5bec9aadd1fb0adcf5e8fe1d303a504659af27f2e0d8b6623090135a515e4c642e82a73a2862abb1ea8", @ANYRESDEC=r5, @ANYRES8=r4, @ANYRES32=r5, @ANYRESOCT=0x0], 0x60) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@dev, 0x0, r4}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r8}) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d0, 0x31c, 0x18c, 0x203, 0x31c, 0x19030000, 0x408, 0x2e0, 0x2e0, 0x408, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x31c, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {0xc}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r9}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a00000000000000000000001400050000000000000000000000000000000002"], 0x30}, 0x1, 0x11}, 0x0) (fail_nth: 13) 1.238893511s ago: executing program 2 (id=1371): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee00000000000000002d0000", 0x58}], 0x1) 1.143667307s ago: executing program 1 (id=1372): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000400)={0x7, 0x0, '\x00', 0x0, &(0x7f0000000280)}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000e40), 0x440, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$binfmt_aout(r3, &(0x7f0000000600)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x478, 0x0, 0x1e0, 0xffffffff, 0x0, 0x1e0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@loopback, @ipv6=@mcast2, @gre_key, @gre_key}}}, {{@ipv6={@dev, @loopback, [], [], 'dvmrp0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r5 = openat$dma_heap(0xffffff9c, &(0x7f0000000f80), 0x588c2, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x80000) read$FUSE(r6, &(0x7f0000003f80)={0x2020}, 0x2020) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd6000000000002d9300000c0001800800", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 908.692681ms ago: executing program 2 (id=1373): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f02b, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) 844.115821ms ago: executing program 3 (id=1374): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="345609b8a6", 0x5}], 0x1) 778.027842ms ago: executing program 0 (id=1375): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5034d564b"]) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x9) io_setup(0x8, &(0x7f0000004200)=0x0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 737.102806ms ago: executing program 2 (id=1376): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001800090300000000000000000a"], 0x38}}, 0x1000c840) 505.08068ms ago: executing program 2 (id=1377): syz_open_dev$vim2m(0x0, 0x7, 0x2) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) socket$tipc(0x1e, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) unshare(0x2c020400) syz_io_uring_setup(0x11f, &(0x7f00000003c0)={0x0, 0x0, 0x400, 0x2, 0x31e}, &(0x7f0000000500), &(0x7f0000000340)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 238.674895ms ago: executing program 4 (id=1378): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x74, r2, {0xfff3}, {0xffe0}, {0x2, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c19ff8e8322e42610cced6e79dc1be79aadd847bb9d030127590c3fc417ecb5b5a7975796588188fbe87b692aa4c6e60b62bb63270e461b489047ed91f1884ac9f9f00e4eb26efb42a31b01e2780eb4cb557297d44f09efc5b0ff6ed0156099e2a9cf75fb2a4277c10c3083b94ec869334a2444a84363a5de050954df8d91214872fc7331e160b92c17426624ef490217177bb8852c4ae88702e25d68b1b15b59bfef6a2d387bbd31d8e1c363d5", 0xae}, {&(0x7f00000001c0)="10aaaac68d88f5cb8f07834416f232905e237fde096b9c211829131069dcd68c6580c7767c51", 0x26}, {&(0x7f0000000280)="6160e30638a2b466149c3cf336019a4ced70c3b8fbded248688bb818a8052b7a1d38b01ec79a03c5edb40904bff70a8cf64bc10033e71f0887226a5f356af531e5562203cbfd22a0d6b64daeca026fc6", 0x50}, {&(0x7f0000000340)="6cb899a4e870569d62894dddf592067e9087e5061bf4c7efff3c56dc81bb72d1b6ec35a94ac4d1a8c7906e441a38dd80948f95ce19895438da783396353e6a5a851d9547304ac48c2dd3b5", 0x4b}, {&(0x7f00000003c0)="9bf8cc2904b356ba0f3c13bcf2756ed362d5db716138679e9c0f5e5e0ea9556049437c8b82c45c2e8961a3228aadd835c30654be749ed928fbd612eb9d03e3c3657f2357be571d78f7ca3158c5b2e04d8ece19d98967149dc9473b8d8fc9919da398ec2e04a0ec7548b3ca10f05b13f0185440abb41055ccd481c9a301ecbf0238d60e78ed919de96141fca11d9fe2ac704527f246de20c3c6ed60951651b89de2b2ed6bb8d2bea24b62f80d1fe3c2d82156403fe537e65585739135ab02efa341cc629dced8de0de908d6dc", 0xcc}, {&(0x7f00000004c0)="bc96de665b27fae320e315eacedbc786c1214bf164484ea8d848f48deda03a3189b1b99b7b2a42a76144f23cdc9f8da3750282473bd33ddf88e11d0eb5ce9d12a1f73fbfb235666ebae21d822e0583bc5c65545d263b5a2976ec4e7e5aa1b2c55743c2523157d836f303d86a92e73aad4606d966eda01d6e4e2425188aaca933677cb4478c8a087c62213b2dd736", 0x8e}], 0x6, &(0x7f0000000600)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x39}, @empty}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @remote}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @loopback, @local}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x10000}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1}}}], 0x80}}], 0x2, 0x0) 238.372374ms ago: executing program 0 (id=1379): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff000020720501cbc41b010203010902240001000010000904240002607855000905070200020200000905840200020000002609ae26dffcacb1b756e6afc26cc1fe9034b68da5807ecc748134593b26e209c46d4b76582028031f0419a6fb2f01dca2c73226ef9e0f46b69ca75d8b3b8c2507aeb510fc0e3e48d637450a4113adf7da1a7a2dd6b8473b53facd48954b326f8ca42a48559268c05cc9b14b32e7bf49b4294080acfcb64e668cbf91a0ad1b55f323"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x2000027f, &(0x7f0000000380)=[{0xff4c, 0x4, 0x0, 0x7fffffff}]}) unshare(0x22020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) userfaultfd(0x80001) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)='\b\x00\x00\x00', 0x4}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000001c00", @ANYRES16=r0, @ANYBLOB="400000aa"], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd1, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x9, 0x0, 0x0, 0xfffe, {0xa, 0x0, 0x5, @rand_addr=' \x01\x00'}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 222.049093ms ago: executing program 2 (id=1380): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x68, 0x10, 0x503, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0x1d, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x2000000) 132.534758ms ago: executing program 1 (id=1381): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0002, 0x5, 0x36, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x22, 0x8, 0x2, 0x114b6000, 0xfffffffb, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0xa, 0x3, 0x5, 0x2, 0x5, 0xba44, 0x3, 0x60c, 0x80000000, 0x800008, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xfffffff8, 0x5, 0x6, 0x1a0055ee, 0x1, 0x1, 0xffff4226, 0x6, 0x4, 0x5, 0x101, 0x4, 0x1, 0x2, 0x800, 0xf9, 0x9, 0x9, 0x2, 0x8, 0x2f, 0xfffffff8, 0x0, 0x101, 0x9, 0x7, 0x0, 0x5, 0x3ff, 0x0, 0x6, 0x2, 0x5, 0x5, 0x2, 0x9b58, 0x4, 0xb, 0x4be, 0xe, 0xef, 0xa, 0xcaa, 0x9fa7, 0xfffeffff, 0x38, 0x400004, 0x0, 0x9, 0x44d, 0x6, 0x200, 0x8, 0xfffffff5, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x6, 0x19, 0x3, 0x7, 0x4, 0x6, 0x7, 0x8002, 0x7, 0x6, 0x7, 0xc3c, 0x3, 0x28000000, 0x8, 0x9, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xa97, 0x4, 0x422dd3f4, 0x4, 0xa, 0x2, 0x8, 0x10000, 0x8c1, 0x0, 0x45ba, 0x20009, 0x864b, 0x0, 0x7, 0x9, 0x1, 0x0, 0x82, 0x5, 0x800, 0x6, 0xffffff80, 0x41, 0xc22, 0x5, 0x6, 0x9, 0x9, 0x7fffffff, 0x2, 0x1, 0x6, 0xfffffffd, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0xfffffffe, 0x10001, 0x0, 0x6, 0x3, 0x404, 0x101, 0x2, 0x1b, 0xd589, 0xffffff7e, 0xffff0001, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd39, 0x0, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4000001, 0xbc6, 0x2, 0x8, 0x28a6a55, 0x1ff, 0xb, 0x7fff, 0x809, 0x2e4c20b9, 0xb, 0x4, 0x9, 0x7, 0x4, 0x8, 0x1004, 0x2, 0x8, 0x3, 0x7, 0x4, 0x9, 0x2000008, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0xe, 0x6, 0x6, 0x2, 0x6, 0xfffd, 0x9, 0xfffffffd, 0x8000, 0x5d, 0x1000000, 0x7, 0x1, 0x8, 0x7ffffffd, 0x384, 0x6, 0x58a, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0x7, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x6, 0x6, 0x5e1d, 0x8}, 0x3ff, 0x101, 0x99}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) 4.132074ms ago: executing program 2 (id=1382): socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e000000040002800800", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 0s ago: executing program 4 (id=1383): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4009, 0x7, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x8000009, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)="3bd5927ab2c78547c966d29cdd608de016620867458a8349afcce5dc268609b4f330ec8131d83d0cc2c86840e829cc138de451c6910c519e49a0367d90c02b2949fbd282e5bd2e4db46b", 0x4a}, {&(0x7f00000000c0)="896a2f5b150b24d443275d82965854b2b7b530688fbf983b41dea4bd", 0x1c}, {&(0x7f0000000140)="36fb4867f6f0e24762b73f", 0xb}, {&(0x7f0000000380)="f6effae08700719cd36aa7d6bea8e24692e3f71ceb0b21e0fc5aeff4eadd0302d52f0c8bc65e903b683691e962445e50c05a046c213bfc88ea31fd00d83aa978bdddc0f5451f2fb0e36f8646159ee479dce76c3763d86f0e8cb63218e53d235cf83f4d", 0x63}, {&(0x7f00000004c0)="25f468db9568f6cd8d324111165eb299bde52811ee5f2fc77f394f3f534594662c76cbfbc9f353bacb58c38f7138c6e69b160a278743b7c35a5960d7aa17d1590e8e57fbd1794386e063ef3f9a984a5f9d0cc25ff508067dd26b8dd0d2b6ef1c9378bdeed3a84046e3331f8053f182891b542b5d07f815102672169ce54289f82406dfd449546585af38dec0c6467656152105ed0918", 0x96}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000580)="c9641d9ae409dbf37999d78f967d6925b46e3c95799509024679670e4e8da40899b9396c3eaadaaf7338c75b7c23c47debeb977308947920f4d8045358e470a713a6ab919eb59eb4afe82f96a88026f9218176bbd17dd527d311", 0x5a}, {&(0x7f0000000300)="8c253b4640ad682ea2553faceac101516633ff8476e321581c47d3dd978ac9eabc4f5ca2d61586e1e83fb7afa7faaba343fc0670d3a0c03ba6496ecae59d", 0x3e}, {&(0x7f0000000600)="26cb5d78d3b9d5c1ff8faf165a81e86bdf5df58c47e613cc6482ae219d848a40a8a8aa2ea4069cd8df03d197dc5300ff490dcca1cb65de18b5b76f3d94a8b198f94560a7e572d1ce8dbbd72cc5532e2cbdf6458d82e6cfa4437326143114ecd27fcbb9ae50d435953fac728830390db04c13182143e9d98d887b40397b7f164f1f366998aafd11ef7114", 0x8a}], 0x9, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=r3, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x44, 0x55fd66809ddb6f6e}}, {{&(0x7f0000000840)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001e00)=[{&(0x7f00000008c0)="c8bdd54f8633e0940c9d1cb9750891d42a9a38dfe6b31b3b5fc6d37a939a332182c04d9aa4505c40fb8e5ae6788e848cb387d6eea99c69d47ceff05bd90a92ed01337f42624eb5ecc507201d8a8c6e2608fafc57e1c24353b6511b995d85abb0a8546ca92bef65513227d3efd9a70bdf776a8e25b68fc18537f9b89820ba9ff0021766e1af7e9bcb1f8a9d5984c4701d3302890738762c0c2aeacc68404df7630e3ceb893ba555a624437242488c58b500d1d342f172fa37a2341bd1f9b760001e80c624a6100bd59dbea5a998e38d7203ba862a623c7d9e5e82c48f1971c5dbaad0467a9b9d593f95126e7cc2d0e0", 0xef}, {&(0x7f0000001a80)="ef84a54600635b6564bb6d3e3c71666b073bba5d6399cdf733d88c84e9801020813c2456b2f8ee20eb1bffcff1b6c77bdb3784681c64ff193551d7f3979530b576549bbe2e377ed5bc7955a4916016291180a04858142732b00aa7963cb88865124f42ad26d3cded6832600baa30a1bfaed5df4774e3f6de746429a49f7c31", 0x7f}, {&(0x7f0000001b00)="703a6bbc75083fc78d2cff9532d03c647a7b4734634fdfa26c8d805881c25aa6bb15ed24da94d1ab3896f91d7f18df1244cb2b2800dc577afeb0535ef66ef9b7fb149deb3010dbf3261a4cc0da4cd2ef9bcd30da4d4553d2da7518fdfb1246df3194c75270cce0895e5a38efbb3e1f54f64812c5329736d8686a75c51eac79394f28222975c4f291e3d94144cdf1dc7f3d8bda74693ae93627ab647880e37fb02e918b52c9df02e9a3411436c51c47c8b7fb01ce2ab762de6c1d49bc2fe5827bc5ce9e1784e6fe55335a04ee3d0fe600181b713a5cdbef483c4b32c4b33f205143c193577f06fc7153aa8504755eb498", 0xf0}, {&(0x7f0000001c00)="3271e9a7de3af1e0d5cad99e9488fb82d3aaca5907fe5dc6213d7f703b40cd7a664bd0efb75612b9b31c09bee601e350c42353aab9acff7b828b0004bcf47101b32b", 0x42}, {&(0x7f0000001c80)="37a6bd02187c6fc0d5871ee17a1c76b5ffa960fcb3621824a66166cf1204ffb59b32fac42a6872897f5c5368d406dd738d7a651b1562f4f65dcd60e7dd0d26644dce786cf2444558cb22543dafffff762660cd83010936b5dfa4ce46", 0x5c}, {&(0x7f00000009c0)="3a1e3c8f4216", 0x6}, {&(0x7f0000001e80)="f238c37da9850ce2ee88ac82f946072518faccf787c8afe5c5f717a006c13a6728116f899bcc31b418f04c46a905359a5f50ef467b5031f80500755f1d181f0e33aaf362c1261338ba6d2c948c47197fcc9fc0975c8678bc9830bb7adbaea75b5b4eb2df88f63d2a9624f79bd8ee351c30535c04a6ad2ca7a750a61123fda45f82eddf1b30fb20d06fb739f62f686f05f83b0749455be772d0dc2e895f2e59f878f6d35e524fe8b703e79e50476a1b45cfa0942e1268e2d65fc2c6514f07496b15c0ee80a05a9e2692d24952895e121ddcd852cb8de29ac72c94", 0xda}], 0x7, 0x0, 0x0, 0x48090}}], 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="320200007d00000005f100000000000005000000000000000000000000000000000000000000000000001ecbbe4e000000001f00046e6f6465767b6388666f7825ff00000000faffffffffffffff00000000003800704a86cec622007dfa673effeb09b5311f5bde054000000000187b8200b5002fa9595fcb14034354b9fd9ef196a51cd5157adc81010000001200cfb6000000000000000000000000000000005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f70000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d8da60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/550, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = dup(0xffffffffffffffff) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd74) r9 = syz_io_uring_setup(0x497, &(0x7f0000000740)={0x0, 0x139f, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): g dummy_hcd [ 356.072986][ T9196] usb 2-1: config 170 has no interfaces? [ 356.090387][ T9196] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 356.116733][ T9196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.153432][ T9196] usb 2-1: Product: syz [ 356.164304][ T9466] netlink: 'syz.3.938': attribute type 10 has an invalid length. [ 356.249379][ T9458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.258536][ T9196] usb 2-1: Manufacturer: syz [ 356.258986][ T9458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.267665][ T9196] usb 2-1: SerialNumber: syz [ 356.346996][ T9466] syz_tun: entered promiscuous mode [ 356.649635][ T9195] usb 5-1: USB disconnect, device number 38 [ 356.876776][ T5895] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 357.036662][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 357.048089][ T5895] usb 4-1: config index 0 descriptor too short (expected 69, got 36) [ 357.156758][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.371208][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'. [ 357.377047][ T5895] usb 4-1: config 0 has no interfaces? [ 357.604584][ T9479] netlink: 36 bytes leftover after parsing attributes in process `syz.4.944'. [ 357.643723][ T5895] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 357.661899][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.749954][ T5895] usb 4-1: Product: syz [ 357.812062][ T5895] usb 4-1: Manufacturer: syz [ 357.919157][ T5895] usb 4-1: SerialNumber: syz [ 358.076992][ T5895] usb 4-1: config 0 descriptor?? [ 358.266314][ T9187] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 358.403010][ T9196] usb 2-1: can't set config #170, error -71 [ 358.458153][ T9187] usb 1-1: config 0 has no interfaces? [ 358.470690][ T9187] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 358.484644][ T9187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.494238][ T9187] usb 1-1: Product: syz [ 358.502218][ T9187] usb 1-1: Manufacturer: syz [ 358.508927][ T9187] usb 1-1: SerialNumber: syz [ 358.612099][ T9196] usb 2-1: USB disconnect, device number 31 [ 358.753210][ T9187] usb 1-1: config 0 descriptor?? [ 359.431584][ T5895] usb 4-1: USB disconnect, device number 36 [ 359.726955][ T9196] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 359.876741][ T9196] usb 3-1: device descriptor read/64, error -71 [ 359.898455][ T9509] netlink: 200 bytes leftover after parsing attributes in process `syz.4.951'. [ 359.911573][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 360.116578][ T9196] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 360.309599][ T9196] usb 3-1: device descriptor read/64, error -71 [ 360.659281][ T9196] usb usb3-port1: attempt power cycle [ 361.112931][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.955'. [ 361.286728][ T9196] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 361.307375][ T9196] usb 3-1: device descriptor read/8, error -71 [ 361.546645][ T9196] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 361.567397][ T9196] usb 3-1: device descriptor read/8, error -71 [ 361.676645][ T9196] usb usb3-port1: unable to enumerate USB device [ 361.999313][ T9535] netlink: 36 bytes leftover after parsing attributes in process `syz.3.959'. [ 363.033290][ T9195] usb 1-1: USB disconnect, device number 33 [ 363.186233][ T9180] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 363.385003][ T9180] usb 5-1: not running at top speed; connect to a high speed hub [ 363.415381][ T9180] usb 5-1: config 6 has an invalid interface number: 191 but max is 0 [ 363.454603][ T9565] veth1_macvtap: left promiscuous mode [ 363.463450][ T9180] usb 5-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 363.522065][ T9180] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 363.545344][ T9565] macsec0: entered promiscuous mode [ 363.587984][ T9180] usb 5-1: config 6 has no interface number 0 [ 363.610808][ T9180] usb 5-1: config 6 interface 191 altsetting 216 endpoint 0x3 has invalid maxpacket 9225, setting to 64 [ 363.673093][ T9180] usb 5-1: config 6 interface 191 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 363.700276][ T9180] usb 5-1: config 6 interface 191 has no altsetting 0 [ 363.712469][ T9180] usb 5-1: New USB device found, idVendor=0403, idProduct=f9d3, bcdDevice=9d.9b [ 363.725587][ T9180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.733720][ T9180] usb 5-1: Product: Њ [ 363.751947][ T9180] usb 5-1: Manufacturer: 粎䒫攄碫ⵥ隤環⒕⻪몊ꀖ倶嘵ì¼êŽ¥â½¢é¹¦ì¯‹â¡ì“¦é›’癅䆸ጷ芮핀ã¨ä±¾ç³²å†šë¡»â€Œç½Šã¹ä‚›ê´¢ë¤¯ê‹ æµŠè›ç¯¸ä£¼ë…”鷭⺈惴ㄆ쪆굨í¦çŠ®ë°”ᇤ㻖믺ê‰î­»ä¨§ã†¤éº“ç¶ëŠë›¾ä«µåˆ˜àº®éž¿ã‚¾ïƒ¼ë—Ÿï•»é¡£äˆ‘ꦅ㰉èŸè’㭉ᢵ䠂â‹åƒ³â²â˜”èœãš°æ©¹â¾’님콨鄣çï‰à£ì¬«ä’븠渘녮ࠢ娩뎣㲯ﴪ邂 [ 363.882682][ T9180] usb 5-1: SerialNumber: syz [ 363.903765][ T9570] netlink: 36 bytes leftover after parsing attributes in process `syz.2.970'. [ 363.918754][ T9570] netlink: 36 bytes leftover after parsing attributes in process `syz.2.970'. [ 363.929019][ T9570] netlink: 36 bytes leftover after parsing attributes in process `syz.2.970'. [ 364.056687][ T9571] netlink: 36 bytes leftover after parsing attributes in process `syz.2.970'. [ 364.073281][ T9571] netlink: 36 bytes leftover after parsing attributes in process `syz.2.970'. [ 364.095703][ T9571] netlink: 36 bytes leftover after parsing attributes in process `syz.2.970'. [ 364.273006][ T9571] netlink: 36 bytes leftover after parsing attributes in process `syz.2.970'. [ 364.288250][ T9571] netlink: 36 bytes leftover after parsing attributes in process `syz.2.970'. [ 364.319133][ T9571] netlink: 36 bytes leftover after parsing attributes in process `syz.2.970'. [ 364.389366][ T9570] netlink: 36 bytes leftover after parsing attributes in process `syz.2.970'. [ 365.754814][ T9180] ftdi_sio 5-1:6.191: FTDI USB Serial Device converter detected [ 365.843768][ T9180] ftdi_sio ttyUSB0: unknown device type: 0x9d9b [ 365.950066][ T9180] usb 5-1: USB disconnect, device number 39 [ 365.981392][ T9180] ftdi_sio 5-1:6.191: device disconnected [ 367.606811][ T9194] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 367.717011][ T9196] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 367.802985][ T9194] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 367.827785][ T9194] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 367.858870][ T9194] usb 5-1: config 220 has no interface number 2 [ 367.874019][ T9194] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 368.171822][ T9194] usb 5-1: config 220 interface 0 has no altsetting 0 [ 368.429946][ T9642] netlink: zone id is out of range [ 368.469273][ T9642] netlink: zone id is out of range [ 368.474428][ T9642] netlink: zone id is out of range [ 368.496894][ T9194] usb 5-1: config 220 interface 76 has no altsetting 0 [ 368.504721][ T9196] usb 4-1: config 0 has no interfaces? [ 368.517327][ T9194] usb 5-1: config 220 interface 1 has no altsetting 0 [ 368.530412][ T9196] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 368.573931][ T9642] netlink: zone id is out of range [ 368.580486][ T9196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.593180][ T9642] netlink: zone id is out of range [ 368.596218][ T9180] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 368.616638][ T9642] netlink: zone id is out of range [ 368.621857][ T9642] netlink: zone id is out of range [ 368.628104][ T9196] usb 4-1: Product: syz [ 368.634843][ T9642] netlink: get zone limit has 8 unknown bytes [ 368.647651][ T9194] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 368.671659][ T9196] usb 4-1: Manufacturer: syz [ 368.677739][ T9196] usb 4-1: SerialNumber: syz [ 368.688176][ T9194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.698362][ T9196] usb 4-1: config 0 descriptor?? [ 368.703475][ T9194] usb 5-1: Product: syz [ 368.713374][ T9194] usb 5-1: Manufacturer: syz [ 368.719296][ T9194] usb 5-1: SerialNumber: syz [ 368.886864][ T9180] usb 3-1: Invalid ep0 maxpacket: 32 [ 368.918542][ T9630] __nla_validate_parse: 5 callbacks suppressed [ 368.918591][ T9630] netlink: 72 bytes leftover after parsing attributes in process `syz.3.983'. [ 369.026389][ T9180] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 369.085126][ T9646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.095207][ T9646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.160073][ T9647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.170451][ T9647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.226298][ T9180] usb 3-1: Invalid ep0 maxpacket: 32 [ 369.234366][ T9180] usb usb3-port1: attempt power cycle [ 369.606423][ T9180] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 369.648447][ T9180] usb 3-1: Invalid ep0 maxpacket: 32 [ 369.796234][ T9180] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 369.842249][ T9180] usb 3-1: Invalid ep0 maxpacket: 32 [ 369.848866][ T9180] usb usb3-port1: unable to enumerate USB device [ 370.399538][ T9194] usb 5-1: selecting invalid altsetting 0 [ 370.449277][ T9194] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 370.510365][ T9194] usb 5-1: No valid video chain found. [ 370.609404][ T9194] usb 5-1: selecting invalid altsetting 0 [ 370.646766][ T9194] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 370.662570][ T9652] netlink: 36 bytes leftover after parsing attributes in process `syz.4.990'. [ 370.706583][ T30] audit: type=1326 audit(1744420049.554:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9653 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 370.737047][ T9194] usb 5-1: USB disconnect, device number 40 [ 370.852118][ T30] audit: type=1326 audit(1744420049.554:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9653 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 370.897881][ T30] audit: type=1326 audit(1744420049.564:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9653 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 370.923601][ T30] audit: type=1326 audit(1744420049.614:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9653 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 371.081257][ T30] audit: type=1326 audit(1744420049.614:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9653 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 371.181775][ T30] audit: type=1326 audit(1744420049.614:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9653 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 371.211975][ T30] audit: type=1326 audit(1744420049.614:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9653 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 371.233714][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.292910][ T9194] usb 4-1: USB disconnect, device number 37 [ 371.477292][ T30] audit: type=1326 audit(1744420049.614:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9653 comm="syz.1.991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 371.786848][ T9196] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 371.947555][ T9196] usb 3-1: Using ep0 maxpacket: 16 [ 371.958896][ T9196] usb 3-1: unable to get BOS descriptor set [ 371.992289][ T9196] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 372.025453][ T9196] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 72 [ 372.086455][ T9173] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 372.086813][ T9196] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.148961][ T9196] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.162544][ T9196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.202346][ T9196] usb 3-1: Product: syz [ 372.220154][ T9196] usb 3-1: Manufacturer: syz [ 372.233590][ T9196] usb 3-1: SerialNumber: syz [ 372.248387][ T9173] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.251006][ T9664] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 372.260916][ T9173] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.270122][ T9664] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 372.387672][ T9173] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 372.419854][ T9671] syz_tun: left promiscuous mode [ 372.426141][ T9173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.466263][ T9173] usb 1-1: Product: syz [ 372.470495][ T9173] usb 1-1: Manufacturer: syz [ 372.506150][ T9173] usb 1-1: SerialNumber: syz [ 372.747045][ T9668] syz_tun: entered allmulticast mode [ 372.757422][ T9196] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 372.792823][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.850850][ T9196] usb 3-1: USB disconnect, device number 36 [ 372.912262][ T9674] dvmrp1: entered allmulticast mode [ 372.926844][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.894558][ T9173] usb 1-1: cannot find UAC_HEADER [ 374.399277][ T9173] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 374.494792][ T9173] usb 1-1: USB disconnect, device number 34 [ 374.874920][ T9196] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 374.898837][ T7167] udevd[7167]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.278244][ T9196] usb 3-1: config 0 has no interfaces? [ 375.288976][ T9196] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 375.299286][ T9196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.309154][ T9196] usb 3-1: Product: syz [ 375.313359][ T9196] usb 3-1: Manufacturer: syz [ 375.318826][ T9196] usb 3-1: SerialNumber: syz [ 375.328982][ T9196] usb 3-1: config 0 descriptor?? [ 375.386253][ T9173] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 375.426213][ T5978] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 375.584219][ T9701] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1003'. [ 375.649180][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 375.661249][ T5978] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 375.686516][ T5978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.701590][ T5978] usb 5-1: config 0 has no interface number 0 [ 375.716083][ T5978] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 375.725429][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.793147][ T5978] usb 5-1: Product: syz [ 375.887269][ T5978] usb 5-1: Manufacturer: syz [ 375.891930][ T5978] usb 5-1: SerialNumber: syz [ 376.178943][ T5978] usb 5-1: config 0 descriptor?? [ 376.464898][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.485204][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.570526][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.703899][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.761341][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.159841][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.235859][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 377.251341][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.262696][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.273829][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.283669][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.407642][ T9194] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 377.508992][ T5978] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 377.548214][ T5978] usb 5-1: No valid video chain found. [ 377.656674][ T5978] usb 5-1: USB disconnect, device number 41 [ 378.016967][ T9196] usb 3-1: USB disconnect, device number 37 [ 378.093554][ T9194] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 378.142401][ T9194] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 378.196628][ T9194] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 378.248585][ T9194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.330337][ T9718] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 378.431741][ T9194] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.614494][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.621584][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.864805][ T9173] usb 4-1: USB disconnect, device number 38 [ 381.136506][ T9763] FAULT_INJECTION: forcing a failure. [ 381.136506][ T9763] name failslab, interval 1, probability 0, space 0, times 0 [ 381.336723][ T9763] CPU: 1 UID: 0 PID: 9763 Comm: syz.2.1022 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 381.336755][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 381.336768][ T9763] Call Trace: [ 381.336776][ T9763] [ 381.336786][ T9763] dump_stack_lvl+0x241/0x360 [ 381.336826][ T9763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.336857][ T9763] ? __pfx__printk+0x10/0x10 [ 381.336891][ T9763] ? __pfx___might_resched+0x10/0x10 [ 381.336922][ T9763] should_fail_ex+0x424/0x570 [ 381.336950][ T9763] should_failslab+0xac/0x100 [ 381.336982][ T9763] kmem_cache_alloc_noprof+0x78/0x390 [ 381.337029][ T9763] ? security_inode_alloc+0x37/0x310 [ 381.337068][ T9763] security_inode_alloc+0x37/0x310 [ 381.337104][ T9763] inode_init_always_gfp+0xa0f/0xd90 [ 381.337141][ T9763] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 381.337174][ T9763] alloc_inode+0xa3/0x1b0 [ 381.337208][ T9763] new_inode+0x22/0x180 [ 381.337240][ T9763] ? start_creating+0x207/0x310 [ 381.337271][ T9763] __debugfs_create_file+0x14c/0x500 [ 381.337307][ T9763] debugfs_create_file_full+0x40/0x60 [ 381.337340][ T9763] do_blk_trace_setup+0x52a/0x9c0 [ 381.337376][ T9763] blk_trace_ioctl+0x4fc/0x830 [ 381.337399][ T9763] ? tomoyo_path_number_perm+0x215/0x790 [ 381.337431][ T9763] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 381.337492][ T9763] ? file_to_blk_mode+0xcb/0x140 [ 381.337529][ T9763] compat_blkdev_ioctl+0x4a3/0x7e0 [ 381.337556][ T9763] ? __fget_files+0x2a/0x420 [ 381.337582][ T9763] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 381.337607][ T9763] ? __fget_files+0x2a/0x420 [ 381.337638][ T9763] __se_compat_sys_ioctl+0x50e/0xc30 [ 381.337669][ T9763] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 381.337698][ T9763] ? __fget_files+0x2a/0x420 [ 381.337725][ T9763] ? fput+0x9b/0xd0 [ 381.337744][ T9763] ? ksys_write+0x275/0x2d0 [ 381.337778][ T9763] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 381.337806][ T9763] ? lockdep_hardirqs_on+0x9d/0x150 [ 381.337834][ T9763] __do_fast_syscall_32+0xb4/0x110 [ 381.337861][ T9763] ? exc_page_fault+0x5f8/0x920 [ 381.337892][ T9763] do_fast_syscall_32+0x34/0x80 [ 381.337919][ T9763] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.337946][ T9763] RIP: 0023:0xf7f23579 [ 381.337964][ T9763] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 381.337983][ T9763] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 381.338006][ T9763] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0401273 [ 381.338021][ T9763] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.338034][ T9763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.338046][ T9763] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 381.338059][ T9763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.338090][ T9763] [ 381.338128][ T9763] debugfs: out of free dentries, can not create file 'msg' [ 382.437505][ T9196] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 382.447511][ T9194] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 382.606128][ T5978] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 382.616145][ T9196] usb 4-1: Using ep0 maxpacket: 16 [ 382.624263][ T9194] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 7 [ 382.673728][ T9792] netlink: 'syz.2.1031': attribute type 5 has an invalid length. [ 382.708865][ T9196] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.724873][ T9792] ip6erspan0: entered promiscuous mode [ 382.748679][ T9196] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.765373][ T9196] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 382.776694][ T9196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.786157][ T5978] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 382.805524][ T5978] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.927203][ T9194] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 382.962694][ T9196] usb 4-1: config 0 descriptor?? [ 382.970630][ T9194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.985285][ T9194] usb 5-1: Product: syz [ 383.063458][ T9194] usb 5-1: Manufacturer: syz [ 383.065523][ T5978] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 383.072507][ T9194] usb 5-1: SerialNumber: syz [ 383.129558][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.271995][ T9194] usb 5-1: config 0 descriptor?? [ 383.376968][ T5978] usb 1-1: usb_control_msg returned -32 [ 383.399298][ T5978] usbtmc 1-1:16.0: can't read capabilities [ 383.628352][ T9806] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1035'. [ 383.809939][ T5978] usb 5-1: USB disconnect, device number 42 [ 384.138077][ T9196] playstation 0003:054C:05C4.000B: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 384.221962][ T9196] playstation 0003:054C:05C4.000B: Invalid byte count transferred, expected 16 got 0 [ 384.307058][ T5978] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 384.760723][ T9780] netlink: 164072 bytes leftover after parsing attributes in process `syz.3.1026'. [ 384.777348][ T9196] playstation 0003:054C:05C4.000B: Failed to retrieve DualShock4 pairing info: -22 [ 384.802272][ T9780] netlink: zone id is out of range [ 384.823667][ T9196] playstation 0003:054C:05C4.000B: Failed to get MAC address from DualShock4 [ 384.833446][ T9780] netlink: zone id is out of range [ 384.852368][ T9780] netlink: zone id is out of range [ 384.862136][ T9780] netlink: zone id is out of range [ 384.874868][ T9196] playstation 0003:054C:05C4.000B: Failed to create dualshock4. [ 384.887296][ T9780] netlink: zone id is out of range [ 384.895166][ T9780] netlink: zone id is out of range [ 384.903047][ T9780] netlink: zone id is out of range [ 384.911745][ T9780] netlink: zone id is out of range [ 384.919582][ T9780] netlink: zone id is out of range [ 384.930939][ T9780] netlink: zone id is out of range [ 384.940251][ T5978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 384.957816][ T5978] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 384.970980][ T5978] usb 5-1: can't read configurations, error -61 [ 385.030991][ T9196] playstation 0003:054C:05C4.000B: probe with driver playstation failed with error -22 [ 385.116243][ T5978] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 385.232872][ T9196] usb 4-1: USB disconnect, device number 39 [ 385.306906][ T5978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 385.398556][ T5978] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 385.417417][ T5978] usb 5-1: can't read configurations, error -61 [ 385.442354][ T9187] usb 1-1: USB disconnect, device number 35 [ 385.482966][ T5978] usb usb5-port1: attempt power cycle [ 385.747271][ T9196] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 385.861876][ T9831] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1041'. [ 385.876535][ T5978] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 385.896674][ T9196] usb 2-1: device descriptor read/64, error -71 [ 385.911409][ T5978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 385.923829][ T5978] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 385.934127][ T5978] usb 5-1: can't read configurations, error -61 [ 386.086865][ T5978] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 386.120429][ T5978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 386.136850][ T9196] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 386.154636][ T5978] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 386.193215][ T5978] usb 5-1: can't read configurations, error -61 [ 386.208892][ T5978] usb usb5-port1: unable to enumerate USB device [ 386.287186][ T9196] usb 2-1: device descriptor read/64, error -71 [ 386.408583][ T9196] usb usb2-port1: attempt power cycle [ 386.776800][ T9196] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 386.807788][ T9196] usb 2-1: device descriptor read/8, error -71 [ 387.046662][ T9196] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 387.087929][ T9196] usb 2-1: device descriptor read/8, error -71 [ 387.197553][ T9196] usb usb2-port1: unable to enumerate USB device [ 387.954818][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1052'. [ 387.983285][ T9869] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.1052'. [ 388.813789][ T30] audit: type=1326 audit(1744420067.694:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 388.945546][ T30] audit: type=1326 audit(1744420067.694:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 388.976924][ T9187] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 389.077040][ T30] audit: type=1326 audit(1744420067.694:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 389.195939][ T30] audit: type=1326 audit(1744420067.694:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 389.225956][ T9187] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 389.245949][ T9187] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 389.286496][ T9187] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 389.316188][ T30] audit: type=1326 audit(1744420067.704:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 389.343713][ T9187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.395275][ T9874] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 389.421757][ T9187] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 389.443625][ T30] audit: type=1326 audit(1744420067.704:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 389.538997][ T30] audit: type=1326 audit(1744420067.704:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 389.567783][ T30] audit: type=1326 audit(1744420067.704:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 389.593573][ T30] audit: type=1326 audit(1744420067.704:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 389.780783][ T30] audit: type=1326 audit(1744420067.704:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 390.887131][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1066'. [ 390.983308][ T9916] netlink: 'syz.2.1067': attribute type 9 has an invalid length. [ 390.993558][ T9916] netlink: 'syz.2.1067': attribute type 6 has an invalid length. [ 391.083720][ T9918] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1067'. [ 391.120008][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 391.700367][ T9187] usb 2-1: USB disconnect, device number 37 [ 392.833643][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 393.499392][ T9966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1081'. [ 394.792938][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'. [ 394.849786][ T9998] fuse: Bad value for 'group_id' [ 394.854894][ T9998] fuse: Bad value for 'group_id' [ 394.882658][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 394.899335][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'. [ 394.910528][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1090'. [ 394.932100][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1092'. [ 394.967708][T10001] bridge2: port 1(ip6gretap1) entered blocking state [ 394.974893][T10001] bridge2: port 1(ip6gretap1) entered disabled state [ 394.992317][T10001] ip6gretap1: entered allmulticast mode [ 395.014622][T10001] ip6gretap1: entered promiscuous mode [ 395.136277][ T9181] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 395.296202][ T9181] usb 3-1: Using ep0 maxpacket: 8 [ 395.313147][ T9181] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 395.340779][ T9181] usb 3-1: config 179 has no interface number 0 [ 395.363028][ T9181] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 395.366870][ T9196] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 395.402851][ T9181] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 395.444055][ T9181] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 203, changing to 11 [ 395.478550][ T9181] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 42897, setting to 1024 [ 395.504542][ T9181] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 395.535712][ T9181] usb 3-1: config 179 interface 65 has no altsetting 0 [ 395.549453][ T9196] usb 4-1: config 0 has an invalid interface number: 40 but max is 0 [ 395.550665][ T9181] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 395.580132][ T9196] usb 4-1: config 0 has no interface number 0 [ 395.587382][ T9181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.596977][ T9999] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 395.638967][ T9196] usb 4-1: too many endpoints for config 0 interface 40 altsetting 48: 120, using maximum allowed: 30 [ 395.660457][ T9196] usb 4-1: config 0 interface 40 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 395.723987][ T9196] usb 4-1: config 0 interface 40 has no altsetting 0 [ 395.736492][ T9181] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input20 [ 395.755338][ T9196] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 395.801848][ T9196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.826311][ T5197] input input20: unable to receive magic message: -110 [ 395.857731][ T9196] usb 4-1: Product: syz [ 395.881856][ T9196] usb 4-1: Manufacturer: syz [ 395.889863][ T5197] input input20: unable to receive magic message: -32 [ 395.974584][T10014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.984235][ T9196] usb 4-1: SerialNumber: syz [ 396.001057][T10014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.002441][ T9196] usb 4-1: config 0 descriptor?? [ 396.021850][ T5197] input input20: unable to receive magic message: -32 [ 396.249561][ T5197] input input20: unable to receive magic message: -32 [ 396.301623][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 396.301649][ T9196] usb 4-1: USB disconnect, device number 40 [ 396.367504][ T5197] input input20: unable to receive magic message: -32 [ 396.976958][ T9196] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 397.150936][ T9196] usb 5-1: config 0 has an invalid interface number: 20 but max is 1 [ 397.169615][ T9196] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.196556][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 397.210238][ T9196] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 397.236636][ T9196] usb 5-1: config 0 has no interface number 0 [ 397.246461][ T9181] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 397.253685][ T9196] usb 5-1: too many endpoints for config 0 interface 20 altsetting 20: 170, using maximum allowed: 30 [ 397.304349][ T9196] usb 5-1: config 0 interface 20 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 397.359029][ T9196] usb 5-1: config 0 interface 20 has no altsetting 0 [ 397.393034][ T9196] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 397.404283][ T9196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.408418][T10038] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 397.424335][ T9196] usb 5-1: config 0 descriptor?? [ 397.438579][ T9196] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 397.448274][ T9196] dvb-usb: bulk message failed: -22 (3/0) [ 397.463078][ T9196] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 397.483806][ T9181] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 397.489911][ T9196] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 397.511535][ T9181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.515320][ T9196] usb 5-1: media controller created [ 397.531801][ T9181] usb 2-1: config 0 descriptor?? [ 397.583203][ T9196] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.638670][ T9196] dvb-usb: bulk message failed: -22 (6/0) [ 397.704029][ T9196] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 397.751507][ T9193] usb 3-1: USB disconnect, device number 38 [ 397.751624][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 397.766056][ T9193] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 397.791567][ T9196] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 397.953686][ T9196] dvb-usb: schedule remote query interval to 150 msecs. [ 397.972359][ T9196] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 397.990881][ T9181] chicony 0003:04F2:1236.000C: unknown main item tag 0x4 [ 398.042063][ T9196] usb 5-1: USB disconnect, device number 47 [ 398.114171][ T9181] chicony 0003:04F2:1236.000C: item fetching failed at offset 4/5 [ 398.146365][ T9181] chicony 0003:04F2:1236.000C: Chicony hid parse failed: -22 [ 398.153886][ T9181] chicony 0003:04F2:1236.000C: probe with driver chicony failed with error -22 [ 398.211749][ T9196] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 398.221904][T10052] ip6erspan0: entered promiscuous mode [ 398.332597][ T9181] usb 2-1: USB disconnect, device number 38 [ 398.816298][ T9173] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 398.987861][ T9173] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 399.010703][ T9173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.043226][ T9173] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 399.058387][ T9173] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 399.068703][ T9173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.080581][ T9173] usb 3-1: config 0 descriptor?? [ 399.501617][ T9173] holtek_kbd 0003:04D9:A055.000D: unknown main item tag 0x0 [ 399.526387][ T9173] holtek_kbd 0003:04D9:A055.000D: unknown main item tag 0x0 [ 399.533777][ T9173] holtek_kbd 0003:04D9:A055.000D: unknown main item tag 0x0 [ 399.556151][ T9173] holtek_kbd 0003:04D9:A055.000D: unknown main item tag 0x0 [ 399.563537][ T9173] holtek_kbd 0003:04D9:A055.000D: unknown main item tag 0x0 [ 399.572327][ T9173] holtek_kbd 0003:04D9:A055.000D: unknown main item tag 0x0 [ 399.586300][ T9173] holtek_kbd 0003:04D9:A055.000D: unknown main item tag 0x0 [ 399.596367][ T9196] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 399.695060][ T9173] holtek_kbd 0003:04D9:A055.000D: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0 [ 399.704864][T10064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.740101][T10064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.782911][ T9196] usb 5-1: config 3 has an invalid interface number: 7 but max is 0 [ 399.829869][ T9196] usb 5-1: config 3 has no interface number 0 [ 399.849504][ T9193] usb 3-1: USB disconnect, device number 39 [ 399.870360][ T9196] usb 5-1: config 3 interface 7 has no altsetting 0 [ 399.903112][ T9196] usb 5-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=3f.7b [ 399.922484][ T9196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.942296][ T9196] usb 5-1: Product: syz [ 399.947998][ T9196] usb 5-1: Manufacturer: syz [ 399.952754][ T9196] usb 5-1: SerialNumber: syz [ 400.096356][ T9173] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 400.229925][ T9196] radio-si470x 5-1:3.7: si470x_get_report: usb_control_msg returned -71 [ 400.266128][ T9173] usb 2-1: Using ep0 maxpacket: 16 [ 400.276282][ T9173] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 400.281171][ T9196] radio-si470x 5-1:3.7: probe with driver radio-si470x failed with error -5 [ 400.298918][ T9173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 400.326173][ T9173] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 400.336722][ T9173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.344759][ T9173] usb 2-1: Product: syz [ 400.359867][ T9173] usb 2-1: Manufacturer: syz [ 400.365880][ T9173] usb 2-1: SerialNumber: syz [ 400.387449][ T9173] usb 2-1: config 0 descriptor?? [ 400.405049][ T9173] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 400.417409][ T9173] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 400.448913][ T9196] usb 5-1: USB disconnect, device number 48 [ 401.030826][ T9173] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 401.038997][T10095] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1121'. [ 401.052892][ T9173] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 401.126892][T10095] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 401.279938][ T9173] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 401.296530][ T9173] em28xx 2-1:0.0: No AC97 audio processor [ 403.414900][T10152] FAULT_INJECTION: forcing a failure. [ 403.414900][T10152] name failslab, interval 1, probability 0, space 0, times 0 [ 403.463492][T10152] CPU: 1 UID: 0 PID: 10152 Comm: syz.0.1139 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 403.463514][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 403.463523][T10152] Call Trace: [ 403.463528][T10152] [ 403.463534][T10152] dump_stack_lvl+0x241/0x360 [ 403.463564][T10152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.463584][T10152] ? __pfx__printk+0x10/0x10 [ 403.463606][T10152] ? __pfx___might_resched+0x10/0x10 [ 403.463627][T10152] should_fail_ex+0x424/0x570 [ 403.463645][T10152] should_failslab+0xac/0x100 [ 403.463666][T10152] __kmalloc_noprof+0xdf/0x4d0 [ 403.463685][T10152] ? nla_strdup+0x9e/0x140 [ 403.463704][T10152] nla_strdup+0x9e/0x140 [ 403.463722][T10152] nf_tables_newset+0x18c9/0x30e0 [ 403.463758][T10152] ? __pfx_nf_tables_newset+0x10/0x10 [ 403.463796][T10152] ? __nla_parse+0x40/0x60 [ 403.463815][T10152] nfnetlink_rcv+0x12eb/0x28f0 [ 403.463853][T10152] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 403.463901][T10152] ? skb_clone+0x240/0x390 [ 403.463924][T10152] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.463946][T10152] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.463967][T10152] netlink_unicast+0x7f8/0x9a0 [ 403.463990][T10152] ? __pfx_netlink_unicast+0x10/0x10 [ 403.464010][T10152] ? skb_put+0x114/0x1f0 [ 403.464025][T10152] netlink_sendmsg+0x8c3/0xcd0 [ 403.464055][T10152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.464096][T10152] ? __import_iovec+0x585/0x830 [ 403.464116][T10152] ? aa_sock_msg_perm+0x91/0x160 [ 403.464140][T10152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.464160][T10152] __sock_sendmsg+0x221/0x270 [ 403.464182][T10152] ____sys_sendmsg+0x523/0x860 [ 403.464204][T10152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.464231][T10152] __sys_sendmsg+0x271/0x360 [ 403.464250][T10152] ? __pfx___sys_sendmsg+0x10/0x10 [ 403.464307][T10152] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 403.464325][T10152] ? lockdep_hardirqs_on+0x9d/0x150 [ 403.464344][T10152] __do_fast_syscall_32+0xb4/0x110 [ 403.464362][T10152] ? exc_page_fault+0x5f8/0x920 [ 403.464382][T10152] do_fast_syscall_32+0x34/0x80 [ 403.464401][T10152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 403.464419][T10152] RIP: 0023:0xf7f42579 [ 403.464432][T10152] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 403.464444][T10152] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 403.464460][T10152] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 403.464470][T10152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.464478][T10152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 403.464486][T10152] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 403.464495][T10152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 403.464516][T10152] [ 404.271477][T10169] tipc: Started in network mode [ 404.280625][T10169] tipc: Node identity ac14140f, cluster identity 4711 [ 404.288963][T10169] tipc: New replicast peer: 255.255.255.255 [ 404.297055][T10169] tipc: Enabled bearer , priority 10 [ 404.311314][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1144'. [ 404.321408][T10169] tipc: Disabling bearer [ 404.427632][ T9173] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 404.613346][ T9173] usb 5-1: config 0 has no interfaces? [ 404.627915][ T9173] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 404.643939][ T9173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.653808][ T9173] usb 5-1: Product: syz [ 404.658272][ T9173] usb 5-1: Manufacturer: syz [ 404.663006][ T9173] usb 5-1: SerialNumber: syz [ 404.694908][ T9173] usb 5-1: config 0 descriptor?? [ 404.776374][ T5978] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 404.938104][ T5978] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 404.971616][ T5978] usb 3-1: config 0 has no interface number 0 [ 404.980665][ T5978] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 405.007027][ T5978] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 405.036334][ T5978] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 405.075168][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.155120][ T5978] usb 3-1: config 0 descriptor?? [ 405.159890][T10178] IPVS: length: 95 != 24 [ 405.180757][T10172] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 405.220722][ T9196] usb 2-1: USB disconnect, device number 39 [ 405.267721][ T9196] em28xx 2-1:0.0: Disconnecting em28xx [ 405.283716][ T5978] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 405.335379][ T9196] em28xx 2-1:0.0: Freeing device [ 405.507190][ T9195] usb 3-1: USB disconnect, device number 40 [ 405.712187][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 405.712208][ T30] audit: type=1326 audit(1744420084.594:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 405.753148][ T30] audit: type=1326 audit(1744420084.594:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 405.782489][ T30] audit: type=1326 audit(1744420084.664:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 405.813474][ T30] audit: type=1326 audit(1744420084.664:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 405.842741][ T30] audit: type=1326 audit(1744420084.664:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 405.872649][ T30] audit: type=1326 audit(1744420084.694:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 405.904834][ T30] audit: type=1326 audit(1744420084.694:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 405.933177][ T30] audit: type=1326 audit(1744420084.694:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 405.963992][ T30] audit: type=1326 audit(1744420084.724:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 405.989528][ T30] audit: type=1326 audit(1744420084.724:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 407.344933][T10207] netlink: 'syz.3.1156': attribute type 10 has an invalid length. [ 407.840476][ T5978] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 407.999658][ T5978] usb 4-1: Using ep0 maxpacket: 16 [ 408.038423][ T5978] usb 4-1: config index 0 descriptor too short (expected 69, got 36) [ 408.047286][ T5978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.057732][ T5978] usb 4-1: config 0 has no interfaces? [ 408.074850][ T5978] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 408.088841][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.099588][ T5978] usb 4-1: Product: syz [ 408.103802][ T5978] usb 4-1: Manufacturer: syz [ 408.113914][ T5978] usb 4-1: SerialNumber: syz [ 408.131974][T10184] vlan2: entered allmulticast mode [ 408.143450][T10184] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 408.157404][ T5978] usb 4-1: config 0 descriptor?? [ 408.553136][ T9173] usb 5-1: USB disconnect, device number 49 [ 408.712540][T10223] Invalid logical block size (33423360) [ 408.826885][ T9195] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 408.989674][ T9195] usb 3-1: Using ep0 maxpacket: 16 [ 409.043688][ T9195] usb 3-1: too many configurations: 119, using maximum allowed: 8 [ 409.097765][ T9195] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 409.118865][ T9195] usb 3-1: can't read configurations, error -61 [ 409.276754][ T9195] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 409.364954][T10243] tipc: Started in network mode [ 409.629125][T10243] tipc: Node identity ac14140f, cluster identity 4711 [ 409.636449][ T9195] usb 3-1: Using ep0 maxpacket: 16 [ 409.647219][T10243] tipc: New replicast peer: 255.255.255.255 [ 409.654342][T10243] tipc: Enabled bearer , priority 10 [ 409.656922][ T9195] usb 3-1: too many configurations: 119, using maximum allowed: 8 [ 409.683232][ T9195] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 409.707238][ T9195] usb 3-1: can't read configurations, error -61 [ 409.712208][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'. [ 409.724532][ T9195] usb usb3-port1: attempt power cycle [ 409.783321][T10245] tipc: Disabling bearer [ 410.076616][ T9195] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 410.107716][ T9195] usb 3-1: Using ep0 maxpacket: 16 [ 410.113920][ T9195] usb 3-1: too many configurations: 119, using maximum allowed: 8 [ 410.141853][ T9195] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 410.150939][ T9195] usb 3-1: can't read configurations, error -61 [ 410.239816][ T5978] usb 4-1: USB disconnect, device number 41 [ 410.337218][ T9195] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 410.396515][ T9173] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 410.414776][ T9195] usb 3-1: Using ep0 maxpacket: 16 [ 410.441247][ T9195] usb 3-1: too many configurations: 119, using maximum allowed: 8 [ 410.539837][ T9195] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 410.564861][ T9195] usb 3-1: can't read configurations, error -61 [ 410.576583][ T9173] usb 5-1: Using ep0 maxpacket: 32 [ 410.599855][ T9173] usb 5-1: unable to get BOS descriptor or descriptor too short [ 410.612738][ T9195] usb usb3-port1: unable to enumerate USB device [ 410.624691][ T9173] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 410.699005][ T9173] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 410.736679][ T9173] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 410.776630][ T9173] usb 5-1: config 128 has no interface number 0 [ 410.791434][ T9173] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 55, changing to 9 [ 410.804669][ T9173] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 8496, setting to 1024 [ 410.829091][ T9173] usb 5-1: config 128 interface 127 has no altsetting 0 [ 410.848653][ T9173] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 410.863878][ T9173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.873606][ T9173] usb 5-1: Product: syz [ 410.886839][ T9173] usb 5-1: Manufacturer: syz [ 410.891496][ T9173] usb 5-1: SerialNumber: syz [ 411.180937][ T9173] usb 5-1: USB disconnect, device number 50 [ 411.299076][ T9195] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 411.372516][ T7167] udevd[7167]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.467284][ T9195] usb 4-1: Using ep0 maxpacket: 8 [ 411.478792][ T9195] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 411.489786][ T9195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.504100][ T9195] usb 4-1: config 0 descriptor?? [ 411.513922][ T9195] hso 4-1:0.0: Not our interface [ 411.636161][ T9194] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 411.713633][ T9195] usb 4-1: USB disconnect, device number 42 [ 411.808503][ T9194] usb 1-1: Using ep0 maxpacket: 8 [ 411.820061][ T9194] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 411.844256][ T9194] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 411.878715][ T9194] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 411.926412][ T9173] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 411.936948][ T9194] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 411.948945][ T9194] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.989972][ T9194] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 412.001840][ T9194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.096332][ T9173] usb 3-1: device descriptor read/64, error -71 [ 412.180437][T10279] netlink: 'syz.4.1180': attribute type 10 has an invalid length. [ 412.269166][ T9194] usb 1-1: usb_control_msg returned -32 [ 412.274840][ T9194] usbtmc 1-1:16.0: can't read capabilities [ 412.346388][ T9173] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 412.356605][ T5978] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 412.498733][ T9173] usb 3-1: device descriptor read/64, error -71 [ 412.536262][ T5978] usb 2-1: Using ep0 maxpacket: 8 [ 412.544064][ T5978] usb 2-1: config 0 has an invalid interface number: 170 but max is 0 [ 412.559629][ T5978] usb 2-1: config 0 has no interface number 0 [ 412.567520][ T5978] usb 2-1: config 0 interface 170 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 412.580555][ T5978] usb 2-1: config 0 interface 170 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 412.593390][ T5978] usb 2-1: config 0 interface 170 altsetting 0 endpoint 0x88 has invalid maxpacket 10453, setting to 1024 [ 412.608943][ T5978] usb 2-1: config 0 interface 170 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 412.620674][ T9173] usb usb3-port1: attempt power cycle [ 412.626922][ T9187] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 412.637338][ T5978] usb 2-1: config 0 interface 170 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 412.650123][ T5978] usb 2-1: config 0 interface 170 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 412.661103][ T5978] usb 2-1: config 0 interface 170 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 412.678821][ T5978] usb 2-1: New USB device found, idVendor=7366, idProduct=f8cb, bcdDevice=3a.11 [ 412.689094][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.712646][T10289] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 412.730802][ T5978] usb 2-1: Product: syz [ 412.743378][ T5978] usb 2-1: Manufacturer: syz [ 412.749962][ T5978] usb 2-1: SerialNumber: syz [ 412.772876][T10291] FAULT_INJECTION: forcing a failure. [ 412.772876][T10291] name failslab, interval 1, probability 0, space 0, times 0 [ 412.773004][ T5978] usb 2-1: config 0 descriptor?? [ 412.793951][T10277] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 412.796804][T10291] CPU: 1 UID: 0 PID: 10291 Comm: syz.3.1184 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 412.796837][T10291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 412.796851][T10291] Call Trace: [ 412.796861][T10291] [ 412.796870][T10291] dump_stack_lvl+0x241/0x360 [ 412.796913][T10291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.796946][T10291] ? __pfx__printk+0x10/0x10 [ 412.796982][T10291] ? __pfx___might_resched+0x10/0x10 [ 412.797016][T10291] should_fail_ex+0x424/0x570 [ 412.797045][T10291] should_failslab+0xac/0x100 [ 412.797079][T10291] kmem_cache_alloc_noprof+0x78/0x390 [ 412.797109][T10291] ? __kernfs_new_node+0xdf/0x890 [ 412.797138][T10291] __kernfs_new_node+0xdf/0x890 [ 412.797162][T10291] ? __lock_acquire+0xad5/0xd80 [ 412.797193][T10291] ? __pfx___kernfs_new_node+0x10/0x10 [ 412.797229][T10291] ? kernfs_root+0x1c/0x230 [ 412.797252][T10291] ? kernfs_root+0x1c/0x230 [ 412.797277][T10291] kernfs_new_node+0x114/0x220 [ 412.797307][T10291] __kernfs_create_file+0x49/0x2e0 [ 412.797340][T10291] sysfs_add_file_mode_ns+0x24a/0x310 [ 412.797390][T10291] internal_create_group+0x7ea/0x1320 [ 412.797425][T10291] ? up_write+0x1ab/0x590 [ 412.797462][T10291] ? __pfx_internal_create_group+0x10/0x10 [ 412.797499][T10291] sysfs_create_groups+0x56/0x120 [ 412.797525][T10291] device_add_attrs+0x14c/0x670 [ 412.797550][T10291] ? kernfs_put+0x3fe/0x460 [ 412.797576][T10291] ? __pfx_device_add_attrs+0x10/0x10 [ 412.797614][T10291] device_add+0x576/0xbf0 [ 412.797647][T10291] input_register_device+0x9ed/0x10c0 [ 412.797692][T10291] uinput_create_device+0x40e/0x630 [ 412.797738][T10291] uinput_ioctl_handler+0x496/0x17f0 [ 412.797770][T10291] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 412.797827][T10291] __se_compat_sys_ioctl+0x50e/0xc30 [ 412.797859][T10291] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 412.797888][T10291] ? __fget_files+0x2a/0x420 [ 412.797915][T10291] ? fput+0x9b/0xd0 [ 412.797935][T10291] ? ksys_write+0x275/0x2d0 [ 412.797969][T10291] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 412.797997][T10291] ? lockdep_hardirqs_on+0x9d/0x150 [ 412.798027][T10291] __do_fast_syscall_32+0xb4/0x110 [ 412.798055][T10291] ? exc_page_fault+0x5f8/0x920 [ 412.798085][T10291] do_fast_syscall_32+0x34/0x80 [ 412.798114][T10291] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 412.798139][T10291] RIP: 0023:0xf7f35579 [ 412.798159][T10291] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 412.798178][T10291] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 412.798202][T10291] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000005501 [ 412.798217][T10291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 412.798231][T10291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 412.798244][T10291] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 412.798257][T10291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 412.798291][T10291] [ 413.119292][ T9196] usb 1-1: USB disconnect, device number 36 [ 413.125947][ T9187] usb 5-1: Using ep0 maxpacket: 16 [ 413.178094][T10277] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 413.186602][ T9173] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 413.237514][ T9187] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 413.247061][ T9173] usb 3-1: device descriptor read/8, error -71 [ 413.253508][ T9187] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.288725][ T9187] usb 5-1: config 0 has no interfaces? [ 413.310495][ T9187] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 413.320830][ T9187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.332186][ T9187] usb 5-1: Product: syz [ 413.354738][ T9187] usb 5-1: Manufacturer: syz [ 413.372068][ T9187] usb 5-1: SerialNumber: syz [ 413.399287][ T9187] usb 5-1: config 0 descriptor?? [ 413.496324][ T9173] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 413.548500][ T9173] usb 3-1: device descriptor read/8, error -71 [ 413.578293][ T5978] usb 2-1: USB disconnect, device number 40 [ 413.687154][ T9173] usb usb3-port1: unable to enumerate USB device [ 413.803180][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 414.656221][ T9173] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 414.813607][T10316] syzkaller1: entered promiscuous mode [ 414.842755][T10316] syzkaller1: entered allmulticast mode [ 414.879256][ T9173] usb 2-1: unable to get BOS descriptor or descriptor too short [ 414.930447][ T9173] usb 2-1: config 3 has an invalid interface number: 19 but max is 0 [ 414.957450][ T9173] usb 2-1: config 3 has an invalid interface number: 4 but max is 0 [ 414.991020][ T9173] usb 2-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 415.018692][ T9173] usb 2-1: config 3 has no interface number 0 [ 415.043264][ T9173] usb 2-1: config 3 has no interface number 1 [ 415.104582][ T9173] usb 2-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 415.146270][ T9173] usb 2-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 415.200930][ T9173] usb 2-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 415.223012][ T9187] usb 5-1: USB disconnect, device number 51 [ 415.252433][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1194'. [ 415.269694][ T9173] usb 2-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 415.284710][ T9173] usb 2-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 415.318965][ T9173] usb 2-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 415.359512][ T9173] usb 2-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 415.410178][ T9173] usb 2-1: config 3 interface 19 has no altsetting 0 [ 415.434537][ T9173] usb 2-1: config 3 interface 4 has no altsetting 0 [ 415.443190][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'. [ 415.474355][ T9173] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 415.486305][T10325] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1196'. [ 415.501143][ T9173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.507030][T10325] net_ratelimit: 9 callbacks suppressed [ 415.507050][T10325] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 415.511271][ T9173] usb 2-1: Product: syz [ 415.537867][ T9173] usb 2-1: Manufacturer: syz [ 415.543789][ T9173] usb 2-1: SerialNumber: syz [ 415.997860][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1198'. [ 416.079458][T10332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.107782][T10333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.124353][T10332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.138386][T10333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.290562][ T9181] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 416.335189][T10335] syzkaller1: entered promiscuous mode [ 416.342008][T10335] syzkaller1: entered allmulticast mode [ 416.506722][ T9173] pl2303 2-1:3.19: required endpoints missing [ 416.548231][ T9181] usb 3-1: config 0 has an invalid interface number: 135 but max is 0 [ 416.583036][ T9173] pl2303 2-1:3.4: required interrupt-in endpoint missing [ 416.600020][ T9181] usb 3-1: config 0 has no interface number 0 [ 416.616516][ T9181] usb 3-1: config 0 interface 135 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32 [ 416.639005][ T9181] usb 3-1: config 0 interface 135 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 416.689754][ T9173] usb 2-1: USB disconnect, device number 41 [ 416.719204][ T9181] usb 3-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=45.65 [ 416.801395][ T9181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.836051][ T9181] usb 3-1: Product: syz [ 416.844840][ T9181] usb 3-1: Manufacturer: syz [ 416.862985][ T9181] usb 3-1: SerialNumber: syz [ 416.881861][ T9181] usb 3-1: config 0 descriptor?? [ 416.893347][T10331] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 416.902941][T10331] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 417.148947][ T9181] asix 3-1:0.135 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 417.186409][ T9181] asix 3-1:0.135: probe with driver asix failed with error -71 [ 417.242332][ T9181] usb 3-1: USB disconnect, device number 49 [ 417.267610][ T9196] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 417.427093][ T9196] usb 5-1: Using ep0 maxpacket: 32 [ 417.434695][ T9196] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 417.460754][ T9196] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 417.473213][ T9196] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 417.491058][ T9196] usb 5-1: config 1 has no interface number 0 [ 417.508611][ T9196] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 417.528671][ T9196] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 417.553855][ T9196] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 417.578383][ T9196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.613457][ T9196] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 417.817534][ T9196] snd_usb_pod 5-1:1.1: invalid control EP [ 417.824996][ T9196] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 417.832893][ T9196] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 417.842190][ T9196] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 418.060889][ T9196] usb 5-1: USB disconnect, device number 52 [ 418.126363][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1209'. [ 419.373658][T10385] netlink: 'syz.1.1218': attribute type 8 has an invalid length. [ 419.373678][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 419.544968][T10392] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 419.601804][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'. [ 419.796919][ T9187] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 419.956545][ T9187] usb 5-1: Using ep0 maxpacket: 32 [ 419.985978][ T9187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.021533][ T9187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.052757][ T9187] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 420.091324][ T9187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.174368][ T9187] usb 5-1: config 0 descriptor?? [ 420.222509][T10406] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1225'. [ 420.318867][T10407] netlink: 'syz.0.1225': attribute type 10 has an invalid length. [ 420.363656][T10407] macvlan0: entered allmulticast mode [ 420.478210][T10407] veth1_vlan: entered allmulticast mode [ 420.599877][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 420.599896][ T30] audit: type=1326 audit(1744420099.484:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.1.1226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 420.603268][T10407] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 420.716997][ T9187] macally 0003:060B:0001.000E: unknown main item tag 0x0 [ 420.756897][ T9187] macally 0003:060B:0001.000E: unknown main item tag 0x0 [ 420.764190][ T9187] macally 0003:060B:0001.000E: unknown main item tag 0x0 [ 420.852300][ T9187] macally 0003:060B:0001.000E: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.4-1/input0 [ 421.019944][ T9187] usb 5-1: USB disconnect, device number 53 [ 421.264097][T10415] xt_CT: No such helper "pptp" [ 421.436488][ T9195] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 421.465970][ T9181] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 421.608823][ T9195] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 421.646719][ T9181] usb 2-1: Using ep0 maxpacket: 16 [ 421.663237][ T9195] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 421.705536][ T9181] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.723076][ T9195] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 421.759522][ T9181] usb 2-1: config 0 has no interfaces? [ 421.769302][ T9195] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 421.804023][ T9181] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 421.806975][ T9195] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 421.851686][ T9195] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 421.864527][ T9181] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 421.887989][ T9181] usb 2-1: Product: syz [ 421.897889][ T9181] usb 2-1: Manufacturer: syz [ 421.906230][ T9195] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 421.919829][ T9181] usb 2-1: SerialNumber: syz [ 421.934695][ T9195] usb 1-1: Product: syz [ 421.954988][ T9195] usb 1-1: Manufacturer: syz [ 421.957770][ T9181] usb 2-1: config 0 descriptor?? [ 421.991065][ T9195] cdc_wdm 1-1:1.0: skipping garbage [ 422.012975][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1232'. [ 422.032214][ T9195] cdc_wdm 1-1:1.0: skipping garbage [ 422.063172][ T9195] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 422.080205][ T9195] cdc_wdm 1-1:1.0: Unknown control protocol [ 422.208563][ T9181] usb 2-1: USB disconnect, device number 42 [ 422.277425][ T9195] usb 1-1: USB disconnect, device number 37 [ 422.310145][T10436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1233'. [ 422.333859][ T30] audit: type=1326 audit(1744420101.194:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 422.389151][ T30] audit: type=1326 audit(1744420101.194:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 422.463168][ T30] audit: type=1326 audit(1744420101.214:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 422.474806][T10441] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1235'. [ 422.512544][ T30] audit: type=1326 audit(1744420101.214:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 422.541228][ T30] audit: type=1326 audit(1744420101.214:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 422.584868][T10444] lo: entered allmulticast mode [ 422.592462][T10444] lo: left allmulticast mode [ 422.622852][ T30] audit: type=1326 audit(1744420101.214:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 422.659278][ T30] audit: type=1326 audit(1744420101.244:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 422.682703][ T30] audit: type=1326 audit(1744420101.244:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 422.709489][ T30] audit: type=1326 audit(1744420101.244:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 422.786861][ T9193] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 422.896846][ T9181] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 422.926818][ T9193] usb 1-1: device descriptor read/64, error -71 [ 423.056569][ T9181] usb 3-1: Using ep0 maxpacket: 16 [ 423.071681][ T9181] usb 3-1: unable to get BOS descriptor or descriptor too short [ 423.101879][ T9181] usb 3-1: config 7 has an invalid interface number: 48 but max is 0 [ 423.122735][ T9181] usb 3-1: config 7 has an invalid descriptor of length 255, skipping remainder of the config [ 423.156101][ T9181] usb 3-1: config 7 has no interface number 0 [ 423.167087][ T9193] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 423.173980][ T9181] usb 3-1: config 7 interface 48 has no altsetting 0 [ 423.208080][ T9181] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 423.227638][ T9181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.244401][ T9181] usb 3-1: Product: syz [ 423.257808][ T9181] usb 3-1: Manufacturer: syz [ 423.268252][ T9181] usb 3-1: SerialNumber: syz [ 423.287949][T10453] netlink: 'syz.4.1240': attribute type 10 has an invalid length. [ 423.306631][ T9193] usb 1-1: device descriptor read/64, error -71 [ 423.416994][ T9193] usb usb1-port1: attempt power cycle [ 423.509131][ T9181] cdc_phonet 3-1:7.48: probe with driver cdc_phonet failed with error -22 [ 423.524857][ T9181] usb 3-1: USB disconnect, device number 50 [ 423.556403][ T9187] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 423.706410][ T9195] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 423.716091][ T9187] usb 4-1: Using ep0 maxpacket: 8 [ 423.727053][ T9187] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 423.736537][ T9187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.744550][ T9187] usb 4-1: Product: syz [ 423.749519][ T9187] usb 4-1: Manufacturer: syz [ 423.754123][ T9187] usb 4-1: SerialNumber: syz [ 423.759391][ T9193] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 423.772409][ T9187] usb 4-1: config 0 descriptor?? [ 423.778952][ T9193] usb 1-1: device descriptor read/8, error -71 [ 423.872056][ T9195] usb 5-1: Using ep0 maxpacket: 16 [ 423.881539][ T9195] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 423.902447][ T9195] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.914757][ T9195] usb 5-1: config 0 has no interfaces? [ 423.947219][ T9195] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 423.963196][ T9195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.974424][ T9195] usb 5-1: Product: syz [ 423.981222][ T9195] usb 5-1: Manufacturer: syz [ 423.988379][ T9195] usb 5-1: SerialNumber: syz [ 423.993559][ T9187] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 424.002781][ T9195] usb 5-1: config 0 descriptor?? [ 424.036758][ T9193] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 424.082854][ T9193] usb 1-1: device descriptor read/8, error -71 [ 424.107981][T10460] batman_adv: batadv0: Adding interface: dummy0 [ 424.114549][T10460] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.149946][T10460] batman_adv: batadv0: Interface activated: dummy0 [ 424.181929][T10461] batadv0: mtu less than device minimum [ 424.190216][T10461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.202578][T10461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.208245][ T9193] usb usb1-port1: unable to enumerate USB device [ 424.214712][T10461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.230833][T10461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.242241][T10461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.253682][T10461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.265081][T10461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.276919][T10461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.288394][T10461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 424.551883][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 424.873508][ T9187] usb write operation failed. (-71) [ 424.890610][ T9187] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 424.910676][ T9187] dvbdev: DVB: registering new adapter (Terratec H7) [ 424.917089][ T9195] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 424.931707][ T9187] usb 4-1: media controller created [ 424.942664][ T9187] usb read operation failed. (-71) [ 424.960456][ T9187] usb write operation failed. (-71) [ 424.973798][ T9187] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 425.026790][ T9187] usb 4-1: USB disconnect, device number 43 [ 425.087454][ T9195] usb 2-1: Using ep0 maxpacket: 16 [ 425.101348][ T9195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 425.127386][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1248'. [ 425.129833][ T9195] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 425.182441][ T9195] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 425.207755][ T9195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.251191][ T9195] usb 2-1: config 0 descriptor?? [ 425.289885][T10481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1249'. [ 425.320572][T10481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1249'. [ 425.402104][T10481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1249'. [ 425.428854][T10481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1249'. [ 425.690661][T10481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1249'. [ 425.709826][ T9195] kovaplus 0003:1E7D:2D50.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 425.882532][ T9195] kovaplus 0003:1E7D:2D50.000F: couldn't init struct kovaplus_device [ 425.900517][ T9195] kovaplus 0003:1E7D:2D50.000F: couldn't install mouse [ 425.915415][ T9195] kovaplus 0003:1E7D:2D50.000F: probe with driver kovaplus failed with error -71 [ 425.934201][ T9195] usb 2-1: USB disconnect, device number 43 [ 426.096208][ T5978] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 426.235319][ T9195] usb 5-1: USB disconnect, device number 54 [ 426.247971][ T5978] usb 1-1: Using ep0 maxpacket: 32 [ 426.271108][ T5978] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 426.314280][ T5978] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 426.356287][ T5978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.381603][ T5978] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.400558][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.434388][ T5978] usb 1-1: Product: syz [ 426.444683][ T5978] usb 1-1: Manufacturer: syz [ 426.472585][ T5978] usb 1-1: SerialNumber: syz [ 426.505176][ T5978] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 426.551490][ T5978] usb 1-1: no configuration chosen from 1 choice [ 426.795075][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 426.795097][ T30] audit: type=1326 audit(1744420105.614:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 426.922180][T10502] batman_adv: batadv0: Adding interface: dummy0 [ 426.992525][ T30] audit: type=1326 audit(1744420105.614:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 427.019067][T10502] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.108915][ T30] audit: type=1326 audit(1744420105.614:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 427.136708][T10502] batman_adv: batadv0: Interface activated: dummy0 [ 427.246629][ T30] audit: type=1326 audit(1744420105.614:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 427.397156][ T30] audit: type=1326 audit(1744420105.624:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 427.510219][ T30] audit: type=1326 audit(1744420105.624:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 427.606503][ T30] audit: type=1326 audit(1744420105.624:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 427.670066][ T30] audit: type=1326 audit(1744420105.624:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 427.695253][ T30] audit: type=1326 audit(1744420105.624:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 427.770674][ T30] audit: type=1326 audit(1744420105.624:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10499 comm="syz.1.1265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 428.320778][T10524] netlink: 'syz.4.1259': attribute type 1 has an invalid length. [ 428.350292][T10524] 8021q: adding VLAN 0 to HW filter on device bond4 [ 428.476130][ T5978] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 428.658250][ T5978] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 428.689335][ T5978] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 428.700324][T10532] netlink: 'syz.1.1263': attribute type 21 has an invalid length. [ 428.710990][T10532] __nla_validate_parse: 2 callbacks suppressed [ 428.711010][T10532] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1263'. [ 428.729225][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.755188][T10520] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 428.797691][T10534] FAULT_INJECTION: forcing a failure. [ 428.797691][T10534] name failslab, interval 1, probability 0, space 0, times 0 [ 428.811766][ T5978] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 428.841869][ T9196] usb 1-1: USB disconnect, device number 42 [ 428.998687][T10534] CPU: 0 UID: 0 PID: 10534 Comm: syz.4.1262 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 428.998718][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 428.998730][T10534] Call Trace: [ 428.998738][T10534] [ 428.998746][T10534] dump_stack_lvl+0x241/0x360 [ 428.998784][T10534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.998820][T10534] ? __pfx__printk+0x10/0x10 [ 428.998847][T10534] ? __lock_acquire+0xad5/0xd80 [ 428.998880][T10534] should_fail_ex+0x424/0x570 [ 428.998905][T10534] should_failslab+0xac/0x100 [ 428.998934][T10534] kmem_cache_alloc_noprof+0x78/0x390 [ 428.998961][T10534] ? skb_clone+0x20c/0x390 [ 428.998988][T10534] skb_clone+0x20c/0x390 [ 428.999014][T10534] __netlink_deliver_tap+0x3c4/0x7f0 [ 428.999056][T10534] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.999083][T10534] netlink_deliver_tap+0x19d/0x1b0 [ 428.999113][T10534] netlink_unicast+0x7c6/0x9a0 [ 428.999148][T10534] ? __pfx_netlink_unicast+0x10/0x10 [ 428.999176][T10534] ? skb_put+0x114/0x1f0 [ 428.999200][T10534] netlink_sendmsg+0x8c3/0xcd0 [ 428.999241][T10534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.999273][T10534] ? __import_iovec+0x585/0x830 [ 428.999300][T10534] ? aa_sock_msg_perm+0x91/0x160 [ 428.999335][T10534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.999363][T10534] __sock_sendmsg+0x221/0x270 [ 428.999394][T10534] ____sys_sendmsg+0x523/0x860 [ 428.999426][T10534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.999465][T10534] __sys_sendmsg+0x271/0x360 [ 428.999511][T10534] ? __pfx___sys_sendmsg+0x10/0x10 [ 428.999590][T10534] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 428.999617][T10534] ? lockdep_hardirqs_on+0x9d/0x150 [ 428.999645][T10534] __do_fast_syscall_32+0xb4/0x110 [ 428.999670][T10534] ? exc_page_fault+0x5f8/0x920 [ 428.999700][T10534] do_fast_syscall_32+0x34/0x80 [ 428.999732][T10534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.999758][T10534] RIP: 0023:0xf7fd6579 [ 428.999775][T10534] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 428.999793][T10534] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 428.999823][T10534] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a80 [ 428.999837][T10534] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.999849][T10534] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.999862][T10534] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 428.999875][T10534] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.999903][T10534] [ 429.268760][T10534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1262'. [ 429.471460][ T5978] usb 3-1: USB disconnect, device number 51 [ 429.692442][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.828166][T10543] netlink: 'syz.4.1269': attribute type 10 has an invalid length. [ 429.890479][T10543] macvlan0: entered promiscuous mode [ 429.897370][T10543] macvlan0: entered allmulticast mode [ 429.918886][T10543] veth1_vlan: entered allmulticast mode [ 429.965205][T10543] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 430.126180][ T5978] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 430.322031][ T5978] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 430.334343][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.493530][ T5978] usb 3-1: config 0 descriptor?? [ 430.517307][ T5978] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 430.727768][ T5978] gp8psk: usb in 128 operation failed. [ 430.834150][T10563] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1275'. [ 430.984979][ T5978] gp8psk: usb in 137 operation failed. [ 430.992892][T10563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1275'. [ 430.995974][ T5978] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 431.102365][ T5978] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 431.154970][T10563] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1275'. [ 431.196690][T10563] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1275'. [ 431.367616][T10570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.377730][T10570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.142898][T10583] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1281'. [ 432.177150][T10583] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1281'. [ 432.190667][T10585] netlink: 'syz.3.1280': attribute type 10 has an invalid length. [ 432.199720][T10583] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1281'. [ 432.907403][ T9193] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 432.992154][ T5978] usb 3-1: USB disconnect, device number 52 [ 433.066850][ T9193] usb 4-1: Using ep0 maxpacket: 16 [ 433.082548][ T9193] usb 4-1: config index 0 descriptor too short (expected 69, got 36) [ 433.112224][ T9193] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.196868][ T9193] usb 4-1: config 0 has no interfaces? [ 433.220168][ T9193] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 433.234484][ T9193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.258960][ T9193] usb 4-1: Product: syz [ 433.277675][ T9193] usb 4-1: Manufacturer: syz [ 433.304406][ T9193] usb 4-1: SerialNumber: syz [ 433.338492][ T9193] usb 4-1: config 0 descriptor?? [ 433.563175][T10599] FAULT_INJECTION: forcing a failure. [ 433.563175][T10599] name failslab, interval 1, probability 0, space 0, times 0 [ 433.655432][T10599] CPU: 1 UID: 0 PID: 10599 Comm: syz.4.1287 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 433.655468][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 433.655482][T10599] Call Trace: [ 433.655491][T10599] [ 433.655499][T10599] dump_stack_lvl+0x241/0x360 [ 433.655538][T10599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.655569][T10599] ? __pfx__printk+0x10/0x10 [ 433.655603][T10599] ? __pfx___might_resched+0x10/0x10 [ 433.655636][T10599] should_fail_ex+0x424/0x570 [ 433.655663][T10599] should_failslab+0xac/0x100 [ 433.655693][T10599] __kmalloc_noprof+0xdf/0x4d0 [ 433.655721][T10599] ? nla_strdup+0x9e/0x140 [ 433.655751][T10599] nla_strdup+0x9e/0x140 [ 433.655779][T10599] nf_tables_newset+0x18c9/0x30e0 [ 433.655837][T10599] ? __pfx_nf_tables_newset+0x10/0x10 [ 433.655898][T10599] ? __nla_parse+0x40/0x60 [ 433.655928][T10599] nfnetlink_rcv+0x12eb/0x28f0 [ 433.655990][T10599] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 433.656067][T10599] ? skb_clone+0x240/0x390 [ 433.656113][T10599] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.656147][T10599] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.656179][T10599] netlink_unicast+0x7f8/0x9a0 [ 433.656216][T10599] ? __pfx_netlink_unicast+0x10/0x10 [ 433.656246][T10599] ? skb_put+0x114/0x1f0 [ 433.656271][T10599] netlink_sendmsg+0x8c3/0xcd0 [ 433.656315][T10599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.656351][T10599] ? __import_iovec+0x585/0x830 [ 433.656378][T10599] ? aa_sock_msg_perm+0x91/0x160 [ 433.656414][T10599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.656442][T10599] __sock_sendmsg+0x221/0x270 [ 433.656474][T10599] ____sys_sendmsg+0x523/0x860 [ 433.656507][T10599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.656545][T10599] __sys_sendmsg+0x271/0x360 [ 433.656574][T10599] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.656650][T10599] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 433.656674][T10599] ? lockdep_hardirqs_on+0x9d/0x150 [ 433.656702][T10599] __do_fast_syscall_32+0xb4/0x110 [ 433.656727][T10599] ? exc_page_fault+0x5f8/0x920 [ 433.656756][T10599] do_fast_syscall_32+0x34/0x80 [ 433.656782][T10599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 433.656806][T10599] RIP: 0023:0xf7fd6579 [ 433.656823][T10599] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 433.656841][T10599] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 433.656865][T10599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 433.656880][T10599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.656891][T10599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.656904][T10599] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 433.656916][T10599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 433.656948][T10599] [ 434.236658][ T9196] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 434.466674][ T9196] usb 3-1: Using ep0 maxpacket: 32 [ 434.498156][ T9196] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 434.546614][ T9196] usb 3-1: config 0 has no interface number 0 [ 434.580764][ T9196] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 434.619735][ T9196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.633565][ T9196] usb 3-1: Product: syz [ 434.641005][ T9196] usb 3-1: Manufacturer: syz [ 434.652915][ T9196] usb 3-1: SerialNumber: syz [ 434.683784][ T9196] usb 3-1: config 0 descriptor?? [ 434.713407][ T9196] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 434.995835][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'. [ 435.049037][ T9196] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 435.150824][ T9196] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 435.269764][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 435.380804][ T5978] usb 4-1: USB disconnect, device number 44 [ 435.418057][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 435.462368][ T9196] usb 3-1: USB disconnect, device number 53 [ 435.969208][ T9196] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 436.032885][ T9196] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 436.059083][T10628] netlink: 'syz.1.1296': attribute type 10 has an invalid length. [ 436.103798][ T9196] quatech2 3-1:0.51: device disconnected [ 436.123438][T10628] macvlan0: entered promiscuous mode [ 436.163707][T10628] macvlan0: entered allmulticast mode [ 436.208425][T10628] veth1_vlan: entered allmulticast mode [ 436.222644][T10628] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 436.238555][ T5959] bond0: (slave macvlan0): interface is now down [ 436.245217][ T5959] bond0: now running without any active interface! [ 436.382055][T10635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1298'. [ 436.465580][T10635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1298'. [ 436.474592][T10635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1298'. [ 436.631786][T10635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1298'. [ 436.956962][ T9196] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 437.164922][ T9196] usb 2-1: Using ep0 maxpacket: 8 [ 437.186804][ T9196] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 437.195349][ T9196] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.241031][ T9196] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.271547][ T9196] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 437.334670][ T9196] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.570360][ T9196] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 437.633580][ T9196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.864172][ T9196] usb 2-1: usb_control_msg returned -32 [ 437.939838][ T9196] usbtmc 2-1:16.0: can't read capabilities [ 438.171855][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1307'. [ 438.646203][ T9181] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 438.828873][ T9181] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 438.839910][ T9181] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 438.864851][ T9181] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.899005][T10661] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 438.913892][ T9181] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 439.047610][T10669] netlink: 'syz.3.1311': attribute type 10 has an invalid length. [ 439.412185][ T5978] usb 1-1: USB disconnect, device number 43 [ 439.496583][ T9181] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 439.690696][ T9181] usb 4-1: Using ep0 maxpacket: 16 [ 439.717856][ T9181] usb 4-1: config index 0 descriptor too short (expected 69, got 36) [ 439.752506][ T9196] usb 2-1: USB disconnect, device number 44 [ 439.824583][ T9181] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.894777][ T9181] usb 4-1: config 0 has no interfaces? [ 439.963628][ T9181] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 439.976226][ T9181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.984315][ T9181] usb 4-1: Product: syz [ 439.989257][ T9181] usb 4-1: Manufacturer: syz [ 439.993871][ T9181] usb 4-1: SerialNumber: syz [ 440.053967][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.060942][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.093710][ T9181] usb 4-1: config 0 descriptor?? [ 441.329199][T10691] vivid-007: disconnect [ 441.344679][T10691] netlink: 'syz.4.1316': attribute type 10 has an invalid length. [ 441.354801][T10691] veth0_macvtap: left promiscuous mode [ 441.384842][T10691] batman_adv: batadv0: Adding interface: macvtap0 [ 441.401907][T10691] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.431432][T10691] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 441.450282][T10690] vivid-007: reconnect [ 441.562005][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1318'. [ 441.722152][T10696] fuse: Unknown parameter 'fä' [ 441.860757][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1320'. [ 442.162609][ T9181] usb 4-1: USB disconnect, device number 45 [ 442.366892][ T9194] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 442.438727][T10707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1321'. [ 442.458383][T10707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1321'. [ 442.471062][T10707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1321'. [ 442.552688][T10707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1321'. [ 442.572724][ T9194] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 442.623404][ T9194] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 442.674214][T10711] FAULT_INJECTION: forcing a failure. [ 442.674214][T10711] name failslab, interval 1, probability 0, space 0, times 0 [ 442.712150][T10711] CPU: 0 UID: 0 PID: 10711 Comm: syz.0.1323 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 442.712184][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 442.712204][T10711] Call Trace: [ 442.712213][T10711] [ 442.712223][T10711] dump_stack_lvl+0x241/0x360 [ 442.712263][T10711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.712295][T10711] ? __pfx__printk+0x10/0x10 [ 442.712327][T10711] ? __lock_acquire+0xad5/0xd80 [ 442.712362][T10711] should_fail_ex+0x424/0x570 [ 442.712391][T10711] should_failslab+0xac/0x100 [ 442.712423][T10711] kmem_cache_alloc_noprof+0x78/0x390 [ 442.712454][T10711] ? skb_clone+0x20c/0x390 [ 442.712484][T10711] skb_clone+0x20c/0x390 [ 442.712513][T10711] __netlink_deliver_tap+0x3c4/0x7f0 [ 442.712558][T10711] ? netlink_deliver_tap+0x2e/0x1b0 [ 442.712587][T10711] netlink_deliver_tap+0x19d/0x1b0 [ 442.712620][T10711] netlink_unicast+0x7c6/0x9a0 [ 442.712657][T10711] ? __pfx_netlink_unicast+0x10/0x10 [ 442.712688][T10711] ? skb_put+0x114/0x1f0 [ 442.712714][T10711] netlink_sendmsg+0x8c3/0xcd0 [ 442.712760][T10711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.712795][T10711] ? __import_iovec+0x585/0x830 [ 442.712825][T10711] ? aa_sock_msg_perm+0x91/0x160 [ 442.712862][T10711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.712891][T10711] __sock_sendmsg+0x221/0x270 [ 442.712924][T10711] ____sys_sendmsg+0x523/0x860 [ 442.712956][T10711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.712999][T10711] __sys_sendmsg+0x271/0x360 [ 442.713028][T10711] ? __pfx___sys_sendmsg+0x10/0x10 [ 442.713107][T10711] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 442.713134][T10711] ? lockdep_hardirqs_on+0x9d/0x150 [ 442.713162][T10711] __do_fast_syscall_32+0xb4/0x110 [ 442.713189][T10711] ? exc_page_fault+0x5f8/0x920 [ 442.713227][T10711] do_fast_syscall_32+0x34/0x80 [ 442.713255][T10711] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 442.713281][T10711] RIP: 0023:0xf7f42579 [ 442.713299][T10711] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 442.713317][T10711] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 442.713340][T10711] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 442.713356][T10711] RDX: 0000000004048010 RSI: 0000000000000000 RDI: 0000000000000000 [ 442.713369][T10711] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.713381][T10711] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 442.713394][T10711] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.713425][T10711] [ 442.998397][ T9194] usb 5-1: config 1 has no interface number 0 [ 443.014254][ T9194] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.066941][ T9181] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 443.377828][ T9181] usb 4-1: Using ep0 maxpacket: 8 [ 443.397373][ T9181] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 443.423213][ T9181] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 443.437116][ T9194] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 443.472531][ T9194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.474755][ T9181] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 443.526513][ T9181] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.537448][ T9194] usb 5-1: Product: syz [ 443.539714][T10718] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1326'. [ 443.551857][ T9181] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.553259][ T9194] usb 5-1: Manufacturer: syz [ 443.615062][T10718] netlink: 'syz.2.1326': attribute type 10 has an invalid length. [ 443.641563][ T9194] usb 5-1: SerialNumber: syz [ 443.659760][ T9181] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 443.671955][ T9194] usb 5-1: selecting invalid altsetting 1 [ 443.747030][ T9196] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 443.826120][ T9181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.929926][ T9196] usb 1-1: Using ep0 maxpacket: 16 [ 443.986343][ T9196] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 444.001960][ T9196] usb 1-1: config 0 has no interface number 0 [ 444.048396][ T9196] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 444.058844][ T9196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.096652][ T9196] usb 1-1: Product: syz [ 444.119309][ T9196] usb 1-1: Manufacturer: syz [ 444.148249][ T9196] usb 1-1: SerialNumber: syz [ 444.181049][ T9196] usb 1-1: config 0 descriptor?? [ 444.199309][ T9196] hub 1-1:0.145: bad descriptor, ignoring hub [ 444.209315][ T9196] hub 1-1:0.145: probe with driver hub failed with error -5 [ 444.222273][ T9181] usb 4-1: usb_control_msg returned -32 [ 444.228205][ T9196] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.145/input/input24 [ 444.253085][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 444.375676][ T9181] usbtmc 4-1:16.0: can't read capabilities [ 444.719817][T10738] netlink: 'syz.1.1332': attribute type 10 has an invalid length. [ 444.728808][T10738] syz_tun: entered promiscuous mode [ 445.146798][ T9195] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 445.306776][ T9195] usb 2-1: Using ep0 maxpacket: 16 [ 445.322400][ T9195] usb 2-1: config index 0 descriptor too short (expected 69, got 36) [ 445.471528][ T9195] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.483037][ T9194] cdc_ncm 5-1:1.1: SET_CRC_MODE failed [ 445.499782][ T9194] cdc_ncm 5-1:1.1: SET_NTB_FORMAT failed [ 445.500312][ T9187] raw-gadget.2 gadget.0: failed to queue suspend event [ 445.508478][ T9195] usb 2-1: config 0 has no interfaces? [ 445.526223][ T9194] usb 5-1: selecting invalid altsetting 1 [ 445.532619][ T9194] cdc_ncm 5-1:1.1: bind() failure [ 445.560672][ T9194] usb 5-1: USB disconnect, device number 55 [ 445.582567][ T9195] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 445.593669][ T9195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.603802][ T9195] usb 2-1: Product: syz [ 445.609606][ T9195] usb 2-1: Manufacturer: syz [ 445.615161][ T9195] usb 2-1: SerialNumber: syz [ 445.632477][ T9195] usb 2-1: config 0 descriptor?? [ 445.734313][ T9195] usb 4-1: USB disconnect, device number 46 [ 446.227372][ T9195] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 446.410860][ T9195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.441258][ T9195] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 446.460811][ T9195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.484391][ T9195] usb 4-1: config 0 descriptor?? [ 446.534482][T10735] raw-gadget.2 gadget.0: failed to queue disconnect event [ 446.636604][ T9194] usb 1-1: USB disconnect, device number 44 [ 447.030554][ T9195] cypress 0003:04B4:BCA1.0010: hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.3-1/input0 [ 447.213371][T10763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.222885][T10763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.235001][T10762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1339'. [ 447.441884][T10765] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1340'. [ 447.454255][T10765] netlink: 'syz.2.1340': attribute type 10 has an invalid length. [ 447.602607][ T9196] usb 2-1: USB disconnect, device number 45 [ 447.680562][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 447.680583][ T30] audit: type=1326 audit(1744420126.564:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 447.810062][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'. [ 447.850154][ T30] audit: type=1326 audit(1744420126.564:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 448.029920][ T30] audit: type=1326 audit(1744420126.564:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=220 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 448.064268][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'. [ 448.232707][ T30] audit: type=1326 audit(1744420126.564:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 448.327596][ T30] audit: type=1326 audit(1744420126.564:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=301 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 448.357146][ T30] audit: type=1326 audit(1744420126.564:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 448.385116][ T30] audit: type=1326 audit(1744420126.564:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 448.416266][ T9181] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 448.424241][ T9187] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 448.465194][ T30] audit: type=1326 audit(1744420126.564:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 448.554016][ T30] audit: type=1326 audit(1744420126.564:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 448.582629][ T30] audit: type=1326 audit(1744420126.564:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 448.608235][ T9181] usb 1-1: Using ep0 maxpacket: 8 [ 448.617809][ T9187] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 448.628519][ T9187] usb 3-1: config 0 has no interface number 0 [ 448.636186][ T9181] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 448.646798][ T9181] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.657581][ T9187] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 448.677151][ T9181] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 448.690562][ T9187] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 448.733498][ T9181] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.803996][ T9187] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0 [ 448.858433][ T9181] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.874359][ T9187] usb 3-1: config 0 interface 200 has no altsetting 0 [ 448.884604][ T9181] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 448.901824][ T9181] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.913468][ T9187] usb 3-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 448.923851][ T9187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.947249][ T9187] usb 3-1: Product: syz [ 448.952166][ T9187] usb 3-1: Manufacturer: syz [ 448.958594][ T9187] usb 3-1: SerialNumber: syz [ 448.968991][ T9187] usb 3-1: config 0 descriptor?? [ 449.046855][ T9173] usb 4-1: USB disconnect, device number 47 [ 449.281764][ T9181] usb 1-1: usb_control_msg returned -32 [ 449.288437][ T9181] usbtmc 1-1:16.0: can't read capabilities [ 449.312342][ T9187] usb 3-1: USB disconnect, device number 54 [ 449.639392][T10788] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 449.849953][ T9173] usb 1-1: USB disconnect, device number 45 [ 450.119401][T10793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1350'. [ 450.172172][T10794] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1351'. [ 450.198023][T10794] netlink: 'syz.2.1351': attribute type 10 has an invalid length. [ 450.309536][T10801] netlink: 'syz.1.1352': attribute type 10 has an invalid length. [ 450.377101][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 450.746601][ T9196] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 450.906874][ T9196] usb 2-1: Using ep0 maxpacket: 16 [ 450.919931][ T9196] usb 2-1: config index 0 descriptor too short (expected 69, got 36) [ 450.939479][ T9196] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.958871][ T9196] usb 2-1: config 0 has no interfaces? [ 450.989791][ T9196] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 451.023169][ T9196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.040443][ T9196] usb 2-1: Product: syz [ 451.044647][ T9196] usb 2-1: Manufacturer: syz [ 451.052290][ T9196] usb 2-1: SerialNumber: syz [ 451.064461][ T9196] usb 2-1: config 0 descriptor?? [ 451.417397][T10826] tipc: Enabling of bearer rejected, failed to enable media [ 451.672251][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1364'. [ 452.027295][ T9196] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 452.047609][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1367'. [ 452.188983][ T9196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.210108][ T9196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.244324][ T9196] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 452.246425][ T9173] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 452.283720][ T9196] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 452.311642][ T9196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.341994][ T9196] usb 3-1: config 0 descriptor?? [ 452.436368][ T9173] usb 1-1: Using ep0 maxpacket: 8 [ 452.445217][ T9173] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 452.466213][ T9173] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 452.490109][ T9173] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 452.522401][ T9173] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.537328][ T9194] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 452.546468][ T9173] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.580692][ T9173] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 452.601933][ T9173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.706388][ T9194] usb 5-1: Using ep0 maxpacket: 8 [ 452.724153][ T9194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 452.747040][ T9194] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 452.771438][ T9194] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 452.789955][ T9194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.803769][ T9194] usb 5-1: Product: syz [ 452.813857][ T9194] usb 5-1: Manufacturer: syz [ 452.823302][ T9194] usb 5-1: SerialNumber: syz [ 452.833061][ T9173] usb 1-1: usb_control_msg returned -32 [ 452.847474][ T9173] usbtmc 1-1:16.0: can't read capabilities [ 452.848595][ T9194] usb 5-1: config 0 descriptor?? [ 452.969434][ T9196] usbhid 3-1:0.0: can't add hid device: -71 [ 452.987794][ T9196] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 453.015081][ T9196] usb 3-1: USB disconnect, device number 55 [ 453.073989][T10839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.088556][T10839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.201806][T10840] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 453.242132][ T9196] usb 2-1: USB disconnect, device number 46 [ 453.403847][ T9195] usb 1-1: USB disconnect, device number 46 [ 453.438423][T10842] FAULT_INJECTION: forcing a failure. [ 453.438423][T10842] name failslab, interval 1, probability 0, space 0, times 0 [ 453.451602][T10842] CPU: 1 UID: 0 PID: 10842 Comm: syz.1.1370 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 453.451629][T10842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 453.451642][T10842] Call Trace: [ 453.451649][T10842] [ 453.451657][T10842] dump_stack_lvl+0x241/0x360 [ 453.451694][T10842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.451722][T10842] ? __pfx__printk+0x10/0x10 [ 453.451763][T10842] should_fail_ex+0x424/0x570 [ 453.451790][T10842] should_failslab+0xac/0x100 [ 453.451819][T10842] kmem_cache_alloc_noprof+0x78/0x390 [ 453.451846][T10842] ? skb_clone+0x20c/0x390 [ 453.451873][T10842] skb_clone+0x20c/0x390 [ 453.451893][T10842] ? dev_queue_xmit_nit+0x28c/0xcf0 [ 453.451926][T10842] dev_queue_xmit_nit+0x361/0xcf0 [ 453.451960][T10842] ? dev_queue_xmit_nit+0x2b/0xcf0 [ 453.451999][T10842] dev_hard_start_xmit+0x1b5/0x840 [ 453.452036][T10842] __dev_queue_xmit+0x1b80/0x3f60 [ 453.452057][T10842] ? kasan_save_track+0x51/0x80 [ 453.452086][T10842] ? fib6_add+0x21ac/0x4420 [ 453.452111][T10842] ? netlink_sendmsg+0x8c3/0xcd0 [ 453.452139][T10842] ? __sys_sendmsg+0x271/0x360 [ 453.452157][T10842] ? __dev_queue_xmit+0x2f9/0x3f60 [ 453.452177][T10842] ? do_fast_syscall_32+0x34/0x80 [ 453.452201][T10842] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 453.452228][T10842] ? __pfx___dev_queue_xmit+0x10/0x10 [ 453.452269][T10842] ? __copy_skb_header+0xa7/0x5a0 [ 453.452292][T10842] ? __asan_memcpy+0x40/0x70 [ 453.452312][T10842] ? __skb_clone+0x5c/0x6d0 [ 453.452339][T10842] ? __skb_clone+0x457/0x6d0 [ 453.452369][T10842] ? skb_clone+0x240/0x390 [ 453.452393][T10842] __netlink_deliver_tap+0x561/0x7f0 [ 453.452440][T10842] ? netlink_deliver_tap+0x2e/0x1b0 [ 453.452466][T10842] netlink_deliver_tap+0x19d/0x1b0 [ 453.452495][T10842] netlink_sendskb+0x68/0x140 [ 453.452522][T10842] netlink_unicast+0x39f/0x9a0 [ 453.452544][T10842] ? netlink_broadcast_filtered+0x1269/0x12a0 [ 453.452579][T10842] ? __pfx_netlink_unicast+0x10/0x10 [ 453.452615][T10842] nlmsg_notify+0x13b/0x1c0 [ 453.452646][T10842] fib6_add+0x21ac/0x4420 [ 453.452720][T10842] ? __pfx_fib6_add+0x10/0x10 [ 453.452748][T10842] ? do_raw_spin_lock+0x151/0x370 [ 453.452785][T10842] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 453.452819][T10842] ? ip6_route_add+0x76/0x160 [ 453.452852][T10842] ip6_route_add+0x8b/0x160 [ 453.452883][T10842] inet6_rtm_newroute+0x2a8/0x2100 [ 453.452926][T10842] ? __lock_acquire+0xad5/0xd80 [ 453.452952][T10842] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 453.452973][T10842] ? __mutex_trylock_common+0x184/0x2e0 [ 453.453008][T10842] ? __pfx___mutex_trylock_common+0x10/0x10 [ 453.453041][T10842] ? rcu_is_watching+0x15/0xb0 [ 453.453069][T10842] ? trace_contention_end+0x3c/0x120 [ 453.453096][T10842] ? __mutex_lock+0x380/0x10c0 [ 453.453122][T10842] ? aa_get_newest_label+0x101/0x6f0 [ 453.453186][T10842] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 453.453213][T10842] rtnetlink_rcv_msg+0x7c2/0xd70 [ 453.453240][T10842] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 453.453275][T10842] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 453.453313][T10842] ? ref_tracker_free+0x63e/0x7e0 [ 453.453344][T10842] netlink_rcv_skb+0x208/0x480 [ 453.453375][T10842] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 453.453407][T10842] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.453462][T10842] ? netlink_deliver_tap+0x2e/0x1b0 [ 453.453494][T10842] ? netlink_deliver_tap+0x2e/0x1b0 [ 453.453526][T10842] netlink_unicast+0x7f8/0x9a0 [ 453.453562][T10842] ? __pfx_netlink_unicast+0x10/0x10 [ 453.453592][T10842] ? skb_put+0x114/0x1f0 [ 453.453617][T10842] netlink_sendmsg+0x8c3/0xcd0 [ 453.453661][T10842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.453696][T10842] ? __import_iovec+0x585/0x830 [ 453.453723][T10842] ? aa_sock_msg_perm+0x91/0x160 [ 453.453759][T10842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.453786][T10842] __sock_sendmsg+0x221/0x270 [ 453.453819][T10842] ____sys_sendmsg+0x523/0x860 [ 453.453851][T10842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.453892][T10842] __sys_sendmsg+0x271/0x360 [ 453.453921][T10842] ? __pfx___sys_sendmsg+0x10/0x10 [ 453.454000][T10842] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 453.454037][T10842] ? lockdep_hardirqs_on+0x9d/0x150 [ 453.454064][T10842] __do_fast_syscall_32+0xb4/0x110 [ 453.454088][T10842] ? exc_page_fault+0x5f8/0x920 [ 453.454116][T10842] do_fast_syscall_32+0x34/0x80 [ 453.454141][T10842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 453.454164][T10842] RIP: 0023:0xf747d579 [ 453.454182][T10842] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 453.454198][T10842] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 453.454219][T10842] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000140 [ 453.454232][T10842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.454243][T10842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 453.454254][T10842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 453.454265][T10842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.454293][T10842] [ 454.114107][ T9194] usb 5-1: USB disconnect, device number 56 [ 454.682652][T10852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1376'. [ 455.178578][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1378'. [ 455.240197][T10864] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 455.350975][ T9194] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 455.390254][T10867] netlink: 'syz.2.1382': attribute type 16 has an invalid length. [ 455.399832][T10867] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000055: 0000 [#1] SMP KASAN PTI [ 455.411756][T10867] KASAN: null-ptr-deref in range [0x00000000000002a8-0x00000000000002af] [ 455.420176][T10867] CPU: 1 UID: 0 PID: 10867 Comm: syz.2.1382 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 455.432244][T10867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 455.442312][T10867] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 455.447977][T10867] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 da 09 3b f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 b2 09 3b f8 45 31 e4 48 83 7d 00 [ 455.467602][T10867] RSP: 0018:ffffc9000ff8ee50 EFLAGS: 00010206 [ 455.473679][T10867] RAX: 0000000000000055 RBX: ffff88802f0b8008 RCX: 0000000000080000 [ 455.481655][T10867] RDX: ffffc9000cd79000 RSI: 00000000000026ce RDI: 00000000000026cf [ 455.489629][T10867] RBP: 00000000000002a8 R08: ffffffff89f27279 R09: 1ffff92001ff1df6 [ 455.497605][T10867] R10: dffffc0000000000 R11: fffff52001ff1df7 R12: ffff8880212c9080 [ 455.505588][T10867] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802f0b8000 [ 455.513613][T10867] FS: 0000000000000000(0000) GS:ffff888125096000(0063) knlGS:00000000f5046b40 [ 455.522557][T10867] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 455.529163][T10867] CR2: 00000000800000c0 CR3: 000000003486e000 CR4: 00000000003526f0 [ 455.537141][T10867] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 455.545112][T10867] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 455.553084][T10867] Call Trace: [ 455.556371][T10867] [ 455.559345][T10867] rtnl_newlink_create+0x2f2/0xcb0 [ 455.564465][T10867] ? __mutex_lock+0x380/0x10c0 [ 455.569238][T10867] ? __pfx_aa_get_newest_label+0x10/0x10 [ 455.574885][T10867] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 455.580521][T10867] ? __pfx___mutex_lock+0x10/0x10 [ 455.585558][T10867] ? ns_capable+0x8a/0xf0 [ 455.589893][T10867] rtnl_newlink+0x18b0/0x1fe0 [ 455.594589][T10867] ? __pfx_rtnl_newlink+0x10/0x10 [ 455.599623][T10867] ? unwind_next_frame+0xb8/0x23b0 [ 455.604742][T10867] ? unwind_next_frame+0x1aa4/0x23b0 [ 455.610055][T10867] ? __lock_acquire+0xad5/0xd80 [ 455.614918][T10867] ? __lock_acquire+0xad5/0xd80 [ 455.619792][T10867] ? __lock_acquire+0xad5/0xd80 [ 455.624668][T10867] ? is_bpf_text_address+0x26/0x2a0 [ 455.629884][T10867] ? is_bpf_text_address+0x288/0x2a0 [ 455.635209][T10867] ? is_bpf_text_address+0x26/0x2a0 [ 455.640423][T10867] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 455.646592][T10867] ? kernel_text_address+0xa7/0xe0 [ 455.651714][T10867] ? __kernel_text_address+0xd/0x40 [ 455.656924][T10867] ? aa_get_newest_label+0x101/0x6f0 [ 455.662228][T10867] ? __lock_acquire+0xad5/0xd80 [ 455.667095][T10867] ? __pfx_rtnl_newlink+0x10/0x10 [ 455.672131][T10867] rtnetlink_rcv_msg+0x80f/0xd70 [ 455.677082][T10867] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 455.682206][T10867] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 455.687696][T10867] ? __lock_acquire+0xad5/0xd80 [ 455.692553][T10867] netlink_rcv_skb+0x208/0x480 [ 455.697417][T10867] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 455.702976][T10867] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 455.708285][T10867] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.713500][T10867] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.718709][T10867] netlink_unicast+0x7f8/0x9a0 [ 455.723485][T10867] ? __pfx_netlink_unicast+0x10/0x10 [ 455.728778][T10867] ? skb_put+0x114/0x1f0 [ 455.733030][T10867] netlink_sendmsg+0x8c3/0xcd0 [ 455.737808][T10867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.743101][T10867] ? __import_iovec+0x585/0x830 [ 455.747969][T10867] ? aa_sock_msg_perm+0x91/0x160 [ 455.752913][T10867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.758216][T10867] __sock_sendmsg+0x221/0x270 [ 455.762908][T10867] ____sys_sendmsg+0x523/0x860 [ 455.767771][T10867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.773070][T10867] __sys_sendmsg+0x271/0x360 [ 455.777680][T10867] ? __pfx_futex_wake+0x10/0x10 [ 455.782532][T10867] ? __pfx___sys_sendmsg+0x10/0x10 [ 455.787665][T10867] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 455.794259][T10867] ? lockdep_hardirqs_on+0x9d/0x150 [ 455.799463][T10867] __do_fast_syscall_32+0xb4/0x110 [ 455.804584][T10867] ? exc_page_fault+0x5f8/0x920 [ 455.809444][T10867] do_fast_syscall_32+0x34/0x80 [ 455.814305][T10867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.820643][T10867] RIP: 0023:0xf7f23579 [ 455.824716][T10867] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 455.844342][T10867] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 455.852760][T10867] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000800000c0 [ 455.860738][T10867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.868714][T10867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.876686][T10867] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 455.884745][T10867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.892724][T10867] [ 455.895757][T10867] Modules linked in: [ 455.901612][T10867] ---[ end trace 0000000000000000 ]--- [ 455.922333][T10867] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 455.929264][T10867] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 da 09 3b f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 b2 09 3b f8 45 31 e4 48 83 7d 00 [ 455.974424][T10867] RSP: 0018:ffffc9000ff8ee50 EFLAGS: 00010206 [ 455.987417][T10867] RAX: 0000000000000055 RBX: ffff88802f0b8008 RCX: 0000000000080000 [ 456.001706][T10867] RDX: ffffc9000cd79000 RSI: 00000000000026ce RDI: 00000000000026cf [ 456.012374][T10867] RBP: 00000000000002a8 R08: ffffffff89f27279 R09: 1ffff92001ff1df6 [ 456.028388][T10867] R10: dffffc0000000000 R11: fffff52001ff1df7 R12: ffff8880212c9080 [ 456.037732][ T9194] usb 1-1: Using ep0 maxpacket: 32 [ 456.044218][T10867] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802f0b8000 [ 456.059790][ T9194] usb 1-1: config 0 has an invalid interface number: 36 but max is 0 [ 456.070766][ T9194] usb 1-1: config 0 has no interface number 0 [ 456.081316][T10867] FS: 0000000000000000(0000) GS:ffff888125096000(0063) knlGS:00000000f5046b40 [ 456.093797][ T9194] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=1b.c4 [ 456.104289][ T9194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.108072][T10867] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 456.119162][ T9194] usb 1-1: Product: syz [ 456.119185][ T9194] usb 1-1: Manufacturer: syz [ 456.119202][ T9194] usb 1-1: SerialNumber: syz [ 456.121210][ T9194] usb 1-1: config 0 descriptor?? [ 456.134941][T10867] CR2: 0000000080000000 CR3: 000000003486e000 CR4: 00000000003526f0 [ 456.149675][T10867] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 456.158562][T10867] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 456.167433][T10867] Kernel panic - not syncing: Fatal exception [ 456.173868][T10867] Kernel Offset: disabled [ 456.178202][T10867] Rebooting in 86400 seconds..