last executing test programs: 10.293751364s ago: executing program 2 (id=3192): socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 9.899879645s ago: executing program 2 (id=3194): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x10, 0x0, {0x8000}, {0x30000, 0x1, 0xfffffffe}, {0x0, 0xffff0000}, {0x6}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x286309c33b866cdd}) 9.8038372s ago: executing program 2 (id=3196): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) rt_sigaction(0x1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0x30288000, 0x0, 0x300, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x10, r5) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r6, &(0x7f0000000780)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x8, 0xfffffffe) socket$unix(0x1, 0x1, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@deltclass={0x48, 0x29, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x7, 0x3}, {0x2, 0x4}}, [@tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 7.269789439s ago: executing program 0 (id=3201): syz_emit_ethernet(0x24, &(0x7f0000000100)={@local, @remote, @void, {@llc={0x4, {@snap={0xaa, 0xab, '\x00\x00', "c480a7", 0xd, "09e81e0560dc74d81622cc47b5"}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x2c020400) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40004) setsockopt(r0, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0xffff0001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, {0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x4}, 0x1, {[0x0, 0x5, 0xfffffff7, 0x1, 0x7, 0x6, 0x7, 0x8]}}, 0x5c) sendto$inet6(r0, &(0x7f0000000040)="c6", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 6.731731846s ago: executing program 0 (id=3205): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x12d7}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 6.10778441s ago: executing program 0 (id=3208): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="00000c000000070001", @ANYRES32=r0, @ANYBLOB="022d2441782adbbcada468ac5a97786becde654b34d527f91b71c51287ceb879f877975f66142a9646e59c148efc6497095fa86121ccddaf8be29f1d19b39fb221fb2819bdf603e86de2cc1d712e1731c833b1612caea27b114e35d6a9802abb924dd9fd628e2fe4f8ab34a7f214e58fad6922556af5eacfb4c23f4529eed3251fa7dd8d64bded710f1a878703c427cd5aacc11bbac138de34e6b901af3337a6ac7805437051b8ebb6a2462c7b2b81b423e6bdd143404183d088dab82c60931402439870ab935a6a1fb9c060788daea7bb6b9ec42e7f3d107a65d628632ce363a87b42cc0824f4fda9497963387b"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$isdn(0x22, 0x3, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) socket(0x1d, 0x2, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) socket(0x21, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x6c, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_skbmod={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x1000}, {0x3, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.031546504s ago: executing program 2 (id=3211): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000200)=0x9) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f0000000300)=""/79, 0x4f) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x150a, 0x1201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xff, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x15a}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000180)={0x20, 0x24, 0x7, {0x7, 0x30, "ee797720f3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.247282887s ago: executing program 4 (id=3217): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) openat$audio1(0xffffff9c, &(0x7f0000000100), 0x300, 0x0) (async) r2 = openat$audio1(0xffffff9c, &(0x7f0000000100), 0x300, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x20, 0x12, 0x8, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20, 0x14}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80000c1) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@getlink={0x20, 0x12, 0x8, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20, 0x14}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80000c1) sendmsg$nl_generic(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000006580)={0x14, 0x36, 0x51eb40323bf4c37b, 0x70bd2d, 0x25dfdbfd, {0x3}}, 0x14}}, 0x4000) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r6}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0xffffffff}}, 0x10) (async) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0xffffffff}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x3, r6, 0x20, 0x0, @ib={0x1b, 0x40, 0x96, {"5f05ed5fbd0a522ef484ce65325f514b"}, 0x400, 0x18, 0x1}}}, 0xa0) socket(0x9, 0xa, 0x1000) 4.103831955s ago: executing program 4 (id=3218): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000095ff01000000001c000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe800000000000000000000000000096ff010000000000000200130002"], 0x98}, 0x1, 0x7}, 0x0) 4.000572338s ago: executing program 4 (id=3219): bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, 0x1fe, 0x12) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x50, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xfffffffffffffe8a, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x274}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000042}, 0x890) (async) syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x0, 0x1c, 0x2, 0x8, 0xfa}, 0x142, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x4, [{0x8a, &(0x7f0000000840)=ANY=[]}, {0x72, &(0x7f0000000340)=@string={0x72, 0x3, "21eca945fe744fcc7f505dc45dbd8c4086c50856be3825c278df42d1c99ef2219a1c4df730ad8ff484b6f3cc9fa546a10811c8ee5104ee6215c5b8b18750545ef9c5c32609f2dd32a8dff2a528b849739245eea883416b02930bcf0173af1060e84009b9b77a4e64a702021f58030a4b"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x413}}, {0x94, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]}]}) (async) syz_usb_connect(0x4, 0x66b, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x2, 0x8c, 0x7f, 0x8, 0x3}, 0x28, &(0x7f0000000040)={0x5, 0xf, 0x28, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x6, 0xf0f, 0x1000, [0xc03f, 0xff3f30, 0x30, 0xc0, 0x0]}]}, 0x4, [{0x1a, &(0x7f0000000080)=@string={0x1a, 0x3, "e4834a69dd05258a4480a1325b877dea0d4fda3cbe723523"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x61, &(0x7f0000000140)=@string={0x61, 0x3, "6dbe45a41db259baa990a75ee895ded310442e53e3878009383237f3c2ca2f5bed4b2bd287b63c18588b677a577379ca1247049eeda36c409403859ac3338875494383d6d9ead97697be4c5e2810868c01b4828b98cac4e46f30ceb0893593"}}, {0x6e, &(0x7f0000000200)=@string={0x6e, 0x3, "232105d88392837d6025b03f38844e0a451e68876abc2f7dd16a387bd239453e45e0f949cb651264aea847ec5a36cb54a4daccbb758ac7f34314da909580d9fcb133f690d6b39af47c37f2edeca179bd2b9ac113e831380ba88a871338f8b6b0e52d0b027f38fa8f2ff3942c"}}]}) 3.90763333s ago: executing program 3 (id=3220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000d4feffff00000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x40040) 3.819647147s ago: executing program 3 (id=3221): syz_open_dev$vim2m(&(0x7f0000000000), 0x42, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xf, 0xfffffe0000000001, 0xfa15, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) lseek(r3, 0x1, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) syz_open_dev$video4linux(&(0x7f0000000c80), 0x200007, 0x8482) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0) keyctl$read(0xb, r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, 0xffffffffffffffff, 0x1b4a4000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x40, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006c6f7770616e000004000280c56e71fb5d73ea0574b556867b763dc28d638395650b36a4cb00880569108f245c0c451fcd3cd6fa35f11969f5d9746327176f4308f0359e6d9046700b249b8602d8612257d96643d1062f4a3b7d890e5bbc771a180f9d5d76aaafe7182fde6d28f0c00ba4817ab3d519d02512e2a278"], 0x34}}, 0x0) 3.397042724s ago: executing program 4 (id=3222): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xffffffb6, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3.019850338s ago: executing program 4 (id=3223): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b717"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000000220001062abd7000000000001500000000379183"], 0x28}], 0x1}, 0x0) write$binfmt_script(r2, &(0x7f0000000a40)={'#! ', './file0', [], 0xa, "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"}, 0x1ac) syz_usb_connect(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES16], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) unshare(0x2c020400) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f0000ffc000/0x1000)=nil) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000885}, 0x4000004) r5 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$char_usb(r6, &(0x7f0000006800)="10", 0x1) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(r5) preadv(r2, &(0x7f0000000800)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f0000000680)=""/165, 0xa5}, {&(0x7f0000000580)=""/111, 0x6f}, {&(0x7f00000004c0)=""/183, 0xb7}, {&(0x7f0000000740)=""/172, 0xac}], 0x7, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.852477011s ago: executing program 0 (id=3224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001df00000000000000000000000a20000000000a03000000000300000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c000080080003"], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.735814275s ago: executing program 0 (id=3225): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x128, 0x5c, 0x160, 0x128, 0x3e0, 0x320, 0x228, 0x25a, 0x320, 0x228, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2e}, @dev, [], [], 'macvtap0\x00', 'wg1\x00', {0xff}, {0x222cecdb0fb5a62a}, 0x4}, 0x5002, 0x100, 0x128, 0x52020000, {0x0, 0x6802000000000000}, [@common=@srh={{0x30}, {0x5e, 0x4, 0xfe, 0x8, 0x128, 0x4000}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3, 'system_u:object_r:depmod_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 2.700510082s ago: executing program 1 (id=3226): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000c80)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x90000000) 2.558665882s ago: executing program 0 (id=3227): r0 = socket(0x2, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="20cb000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4, 0x5}}, {0xe, 0x2, [0x6b, 0xfe, 0x1, 0x1, 0xffff]}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000ac0)="ee", 0x1}, {&(0x7f0000002b40)="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", 0x584}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socket$nl_route(0x10, 0x3, 0x0) 2.494678996s ago: executing program 1 (id=3228): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x182) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120012000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000050000000000000001"], 0xfdef) 2.477536935s ago: executing program 3 (id=3229): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffef}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000200000000000000000000001fe80000000000000010000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa0000000000000000000000007f00000100"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.350289004s ago: executing program 3 (id=3230): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[]) (async) syz_clone(0x10010000, &(0x7f0000000180)="9aba692e20c90949fa9388562a8a47b10dba8b112ffa8f88f53ee1a39e472a46d8ba3c27748882aeaebfe4", 0x2b, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000001080)="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") r1 = gettid() getpgid(r1) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) (async) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r2, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) (async) io_uring_setup(0x6c7e, &(0x7f0000000140)={0x0, 0x0, 0x4000}) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010004b04d5512a72000000007a000000935696c99b9e4d58486e4fcebeff", @ANYRES32=0x0, @ANYBLOB="0000000000220000180012800e00010069703665727370616e000000040002800a000100aaaaaaaaaa000000"], 0x44}}, 0x4) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x7ab9, 0x100, 0x40022, 0x352}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) pipe2(&(0x7f00000001c0), 0x80100) 2.203687536s ago: executing program 1 (id=3231): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xffffffffffffff80, r2}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}, 0x1, 0xfcff}, 0x0) 2.161905421s ago: executing program 1 (id=3232): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x10, 0x0, {0x8000}, {0x400000, 0x1, 0xfffffffe}, {0x0, 0xffff0000}, {0x6}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x286309c33b866cdd}) 2.107036204s ago: executing program 1 (id=3233): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000400)) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df30c", 0x20, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x6, 0x0, 0x0, {[@generic={0x3, 0x5, "5eee37"}, @exp_fastopen={0xfe, 0x7, 0xf989, "feff98"}]}}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4040040) close(0x3) 1.846077068s ago: executing program 2 (id=3234): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0xcd0b9642b84fbf7d, 0x40, 0x1000, 0x4, 0xd968d5b908ac0cde, 0x1, {0x0, 0xd96}, {0x350, 0x4000}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x2, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0xffff9a70, 0x0, 0x8, 0x0, 0x9a70, 0x8, 0x4, 0x0, 0xb}) 1.635624699s ago: executing program 2 (id=3235): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') syz_open_procfs(0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xa4}, 0x1, 0x7a00}, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x91, 0x4) sendmmsg$inet6(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="bafe3a52d8944d83c9ca4dc628af54846da317e97fdb02d49cef9823f2e9566ee6ebe7158ac279f052ab124e7214ea4a1e9055584473b98e843461ae5284da37e1d9dbb2c591880aa70da49c267ef07b9c431b749e7aa69725a4b6ec220db7fd03e456d80ec37e3883233080bec0d7c707dcba451e971604", 0x78}, {&(0x7f00000005c0)="4b72383d4cd500240a319cdd60", 0xd}, {&(0x7f00000002c0)="7e947f3b335873cbdd0c28de19732b5aac62620b170affd923616e58a17c9ad01e5e05cd07d5ff5a780165e62657296024921a6f861304e8c812279109cccecc0811cb186690770c96136aa3d956c62b602be3ef6891acedf213a3188c30ffe74e811c60c8922ae46633e7edb555bd86059f480b1cb27e1578a31177340b53a26cde1c0d15838e7ec343af4facdb1374b96f5cbee9c887159b6729f4820db24ae56fa9d18388ab98c75848c621920bce94ab6e75df7dd814ee3ec94698ac2a6897dcf13a8c161baa15a1577f13544219935c81497e462336b2fa5232bbdc732eb553c407883aaab0cb678d4e7a349361", 0xf0}, {0x0}], 0x4}, 0x11}], 0x1, 0x4001c00) 830.907894ms ago: executing program 4 (id=3236): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0xe, 0x0, 0x0, 0x500], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2000, 0x0, 0xffff, 0x0, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4050}, 0x48040) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) poll(0x0, 0x0, 0x7) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x6, 0x4}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) syz_usb_connect(0x6, 0x36, 0x0, 0x0) 379.562527ms ago: executing program 3 (id=3237): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eae, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000000c0)={0x0, 0xc9, 0x7f, 0x20203143, 0x0, [0x2], [0x3ff, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0xfffffff6], [0x0, 0x0, 0x0, 0x3]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014"], 0xd4}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000000000000000001c000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a00)=""/4095, 0x440027}], 0x100000000000011a) 101.344249ms ago: executing program 1 (id=3238): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r1, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x600, 0x9000000}]) 0s ago: executing program 3 (id=3239): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x700}, 0x0) kernel console output (not intermixed with test programs): 32 [ 622.022558][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 622.032793][ T43] usb 1-1: config 0 has no interfaces? [ 622.042915][ T43] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 622.052977][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.061414][ T43] usb 1-1: Product: syz [ 622.066167][ T43] usb 1-1: Manufacturer: syz [ 622.070899][ T43] usb 1-1: SerialNumber: syz [ 622.083041][ T43] usb 1-1: config 0 descriptor?? [ 622.185918][ T1491] tap0: tun_chr_ioctl cmd 1074025675 [ 622.191393][ T1491] tap0: persist enabled [ 622.196284][ T1491] tap0: tun_chr_ioctl cmd 1074025675 [ 622.201629][ T1491] tap0: persist disabled [ 622.452641][ T1496] loop2: detected capacity change from 0 to 7 [ 622.468219][ T1496] Dev loop2: unable to read RDB block 7 [ 622.475963][ T1496] loop2: unable to read partition table [ 622.488621][ T1496] loop2: partition table beyond EOD, truncated [ 622.505067][ T1496] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 622.628662][ T1502] ip6t_srh: unknown srh match flags 4000 [ 622.904868][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 623.055896][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 623.077068][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.092163][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.103250][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 623.113345][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.126049][ T10] usb 2-1: config 0 descriptor?? [ 623.206006][ T30] kauditd_printk_skb: 582 callbacks suppressed [ 623.206023][ T30] audit: type=1326 audit(1762916517.607:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1508 comm="syz.2.2768" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e6f98f6c9 code=0x0 [ 623.241714][ T1511] FAULT_INJECTION: forcing a failure. [ 623.241714][ T1511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.255242][ T1511] CPU: 0 UID: 0 PID: 1511 Comm: syz.4.2769 Not tainted syzkaller #0 PREEMPT(full) [ 623.255265][ T1511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 623.255276][ T1511] Call Trace: [ 623.255287][ T1511] [ 623.255296][ T1511] dump_stack_lvl+0x189/0x250 [ 623.255323][ T1511] ? __pfx____ratelimit+0x10/0x10 [ 623.255345][ T1511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.255366][ T1511] ? __pfx__printk+0x10/0x10 [ 623.255385][ T1511] ? __might_fault+0xb0/0x130 [ 623.255418][ T1511] should_fail_ex+0x414/0x560 [ 623.255448][ T1511] _copy_from_user+0x2d/0xb0 [ 623.255471][ T1511] ___sys_recvmsg+0x12e/0x510 [ 623.255496][ T1511] ? __pfx____sys_recvmsg+0x10/0x10 [ 623.255537][ T1511] ? __fget_files+0x3a0/0x420 [ 623.255565][ T1511] do_recvmmsg+0x307/0x770 [ 623.255592][ T1511] ? __pfx_do_recvmmsg+0x10/0x10 [ 623.255623][ T1511] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 623.255663][ T1511] __x64_sys_recvmmsg+0x190/0x240 [ 623.255684][ T1511] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 623.255708][ T1511] ? do_syscall_64+0xbe/0xfa0 [ 623.255735][ T1511] do_syscall_64+0xfa/0xfa0 [ 623.255755][ T1511] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.255786][ T1511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.255802][ T1511] ? clear_bhb_loop+0x60/0xb0 [ 623.255822][ T1511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.255837][ T1511] RIP: 0033:0x7f77f198f6c9 [ 623.255853][ T1511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.255867][ T1511] RSP: 002b:00007f77f2902038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 623.255887][ T1511] RAX: ffffffffffffffda RBX: 00007f77f1be5fa0 RCX: 00007f77f198f6c9 [ 623.255900][ T1511] RDX: 040000000000002d RSI: 0000200000000740 RDI: 0000000000000003 [ 623.255912][ T1511] RBP: 00007f77f2902090 R08: 0000000000000000 R09: 0000000000000000 [ 623.255923][ T1511] R10: 0000000000002022 R11: 0000000000000246 R12: 0000000000000001 [ 623.255933][ T1511] R13: 00007f77f1be6038 R14: 00007f77f1be5fa0 R15: 00007f77f1d0fa28 [ 623.255963][ T1511] [ 623.676863][ T1505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.712810][ T1505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.714998][T21504] usbhid 4-1:0.0: can't add hid device: -71 [ 623.747169][ T10] hid-picolcd 0003:04D8:F002.0016: unknown main item tag 0x0 [ 623.759766][T21504] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 623.765793][ T10] hid-picolcd 0003:04D8:F002.0016: unknown main item tag 0x0 [ 623.780816][ T10] hid-picolcd 0003:04D8:F002.0016: unknown main item tag 0x0 [ 623.789281][ T10] hid-picolcd 0003:04D8:F002.0016: unknown main item tag 0x0 [ 623.795015][T21504] usb 4-1: USB disconnect, device number 115 [ 623.809624][ T10] hid-picolcd 0003:04D8:F002.0016: unknown main item tag 0x0 [ 623.885082][ T10] hid-picolcd 0003:04D8:F002.0016: No report with id 0xf3 found [ 623.892967][ T10] hid-picolcd 0003:04D8:F002.0016: No report with id 0xf4 found [ 623.950233][ T10] usb 2-1: USB disconnect, device number 3 [ 624.296957][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.304898][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.396741][ T1638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'. [ 624.611296][ T10] usb 1-1: USB disconnect, device number 82 [ 625.265121][ T2296] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2775'. [ 625.350940][ T2894] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 625.962050][ T3477] syzkaller0: entered promiscuous mode [ 625.995096][ T3477] syzkaller0: entered allmulticast mode [ 626.162224][ T3477] tipc: Started in network mode [ 626.167587][ T3477] tipc: Node identity 32fa85ad9ca6, cluster identity 4711 [ 626.179561][ T3477] tipc: Enabled bearer , priority 0 [ 626.284474][ T3476] tipc: Resetting bearer [ 626.330987][ T3476] tipc: Disabling bearer [ 626.994160][ T30] audit: type=1326 audit(1762916521.397:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3489 comm="syz.1.2784" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f145c78f6c9 code=0x0 [ 628.221602][ T3512] QAT: failed to copy from user. [ 628.295891][ T3514] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2791'. [ 628.485526][ T3517] netlink: 'syz.1.2792': attribute type 1 has an invalid length. [ 628.901016][ T3521] bond1: (slave veth3): Enslaving as an active interface with a down link [ 628.914301][ T3527] ip6t_srh: unknown srh match flags 4000 [ 629.226881][ T3530] loop2: detected capacity change from 0 to 7 [ 629.233600][ T3530] Dev loop2: unable to read RDB block 7 [ 629.287425][ T3530] loop2: unable to read partition table [ 629.335016][ T3530] loop2: partition table beyond EOD, truncated [ 629.354760][ T3530] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 630.122967][ T3544] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2802'. [ 630.151485][ T3546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2802'. [ 630.285515][ T5915] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 630.447062][ T3557] bond_slave_0: entered promiscuous mode [ 630.449242][ T5915] usb 4-1: Invalid ep0 maxpacket: 64 [ 630.452790][ T3557] bond_slave_1: entered promiscuous mode [ 630.495072][ T3557] vlan2: entered promiscuous mode [ 630.504833][ T3557] bond0: entered promiscuous mode [ 630.625190][ T5915] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 630.794587][ T5915] usb 4-1: Invalid ep0 maxpacket: 64 [ 630.807209][ T5915] usb usb4-port1: attempt power cycle [ 631.285335][ T5915] usb 4-1: new low-speed USB device number 118 using dummy_hcd [ 631.305070][ T5915] usb 4-1: Invalid ep0 maxpacket: 64 [ 631.320119][ T3578] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2812'. [ 631.474452][ T5915] usb 4-1: new low-speed USB device number 119 using dummy_hcd [ 631.508683][ T5915] usb 4-1: Invalid ep0 maxpacket: 64 [ 631.538555][ T5915] usb usb4-port1: unable to enumerate USB device [ 631.700549][ T3585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2816'. [ 631.763751][ T30] audit: type=1326 audit(1762916526.167:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3583 comm="syz.0.2815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27d698f6c9 code=0x0 [ 632.058447][ T3589] vlan0: left promiscuous mode [ 632.063585][ T3589] tipc: Resetting bearer [ 632.104327][ T3589] veth3: left promiscuous mode [ 632.109993][ T3589] veth5: left promiscuous mode [ 632.123679][ T3589] veth11: left promiscuous mode [ 632.131022][ T3589] veth15: left promiscuous mode [ 632.137144][ T3589] veth17: left promiscuous mode [ 632.194666][ T3585] netlink: 'syz.4.2816': attribute type 12 has an invalid length. [ 632.210511][ T3585] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2816'. [ 632.220894][T15140] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.232966][T15140] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.236368][ T3597] loop2: detected capacity change from 0 to 7 [ 632.250072][ T3597] Dev loop2: unable to read RDB block 7 [ 632.258938][ T3597] loop2: unable to read partition table [ 632.262738][T15140] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.299426][T15140] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.311159][ T3597] loop2: partition table beyond EOD, truncated [ 632.318625][T15140] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.338151][T15140] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.352957][T15140] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.360177][ T3597] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 632.383326][T15140] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.476285][ T3603] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2822'. [ 632.563280][ T3607] bridge0: port 1(gretap0) entered blocking state [ 632.572715][ T3607] bridge0: port 1(gretap0) entered disabled state [ 632.580928][ T3607] gretap0: entered allmulticast mode [ 632.591505][ T3607] gretap0: entered promiscuous mode [ 632.603380][ T3607] bridge0: port 1(gretap0) entered blocking state [ 632.610293][ T3607] bridge0: port 1(gretap0) entered forwarding state [ 632.637721][ T3613] gretap0: left allmulticast mode [ 632.642869][ T3613] gretap0: left promiscuous mode [ 632.649717][ T3613] bridge0: port 1(gretap0) entered disabled state [ 632.681186][ T3606] geneve2: entered promiscuous mode [ 633.107507][ T3622] vim2m vim2m.0: vidioc_s_fmt queue busy [ 633.109494][ T3618] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.252566][ T30] audit: type=1326 audit(1762916527.657:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3627 comm="syz.1.2825" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f145c78f6c9 code=0x0 [ 633.704608][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'. [ 633.747798][ T3638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2828'. [ 634.080779][ T3618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 635.609456][ T3666] tipc: Enabling of bearer rejected, failed to enable media [ 635.765633][ T5878] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 635.900597][ T3677] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2842'. [ 635.975692][ T5878] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 636.005076][ T5878] usb 4-1: config 0 has no interface number 0 [ 636.021903][ T5878] usb 4-1: too many endpoints for config 0 interface 1 altsetting 48: 48, using maximum allowed: 30 [ 636.053210][ T5878] usb 4-1: config 0 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 636.164822][ T5878] usb 4-1: config 0 interface 1 has no altsetting 0 [ 636.322825][ T5878] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 636.332371][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.340974][ T5878] usb 4-1: Product: syz [ 636.345682][ T5878] usb 4-1: Manufacturer: syz [ 636.350303][ T5878] usb 4-1: SerialNumber: syz [ 636.365470][ T5878] usb 4-1: config 0 descriptor?? [ 638.634803][ T3714] netlink: 'syz.4.2857': attribute type 1 has an invalid length. [ 638.800028][ T3714] bond7: (slave veth19): Enslaving as an active interface with a down link [ 639.159676][ T5878] snd-usb-us122l 4-1:0.1: usb_set_interface error [ 639.167262][ T5878] snd-usb-us122l 4-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 639.188682][ T5878] usb 4-1: USB disconnect, device number 120 [ 639.795119][ T5878] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 639.965004][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 639.971477][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.983016][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.014326][ T5878] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 640.044319][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.089353][ T5878] usb 4-1: config 0 descriptor?? [ 640.150306][ T3741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'. [ 640.185286][ T5878] hub 4-1:0.0: USB hub found [ 640.193561][ T3741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2865'. [ 640.379822][ T5878] hub 4-1:0.0: 1 port detected [ 640.399872][ T30] audit: type=1326 audit(1762916534.807:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3746 comm="syz.4.2867" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77f198f6c9 code=0x0 [ 640.424820][ T5915] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 640.519645][ T3753] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 640.574491][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 640.581823][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 640.606129][ T5915] usb 2-1: config 0 has no interfaces? [ 640.614120][ T5915] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 640.623640][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.644583][ T5915] usb 2-1: Product: syz [ 640.648769][ T5915] usb 2-1: Manufacturer: syz [ 640.653358][ T5915] usb 2-1: SerialNumber: syz [ 640.666926][ T5915] usb 2-1: config 0 descriptor?? [ 641.082587][ T10] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 641.514738][ T5915] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 641.676452][ T5915] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 641.687494][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.698080][ T5915] usb 1-1: config 0 descriptor?? [ 641.707629][ T5915] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 641.714663][ T5915] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 641.784803][ T10] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 641.905247][ T5915] usb 1-1: USB disconnect, device number 83 [ 641.934565][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 641.941236][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 641.952072][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 641.966467][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 641.976006][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.983988][ T10] usb 3-1: Product: syz [ 641.988691][ T10] usb 3-1: Manufacturer: syz [ 641.993291][ T10] usb 3-1: SerialNumber: syz [ 642.001173][ T10] usb 3-1: config 0 descriptor?? [ 642.632873][ T5878] usb 4-1: reset high-speed USB device number 121 using dummy_hcd [ 642.648020][ T5878] usb 4-1: device reset changed ep0 maxpacket size! [ 642.661880][ T5878] usb 4-1: USB disconnect, device number 121 [ 642.859642][ T10] usb 3-1: USB disconnect, device number 102 [ 642.995132][ T5878] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 643.168085][T21504] usb 2-1: USB disconnect, device number 4 [ 643.169908][ T5878] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 643.200846][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.209566][ T5878] usb 4-1: Product: syz [ 643.213856][ T5878] usb 4-1: Manufacturer: syz [ 643.219013][ T5878] usb 4-1: SerialNumber: syz [ 643.228700][ T5878] usb 4-1: config 0 descriptor?? [ 643.229588][ T3778] CUSE: info not properly terminated [ 643.280295][ T30] audit: type=1326 audit(1762916537.687:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3779 comm="syz.1.2877" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f145c78f6c9 code=0x0 [ 643.324463][ T10] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 643.477776][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 643.497852][ T10] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 643.517258][ T10] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 643.541853][ T10] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 643.589156][ T10] usb 3-1: config 129 has no interface number 0 [ 643.609248][ T10] usb 3-1: config 129 has no interface number 1 [ 643.617704][ T10] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 643.633710][ T10] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 643.648365][ T5878] usb 4-1: Firmware version (0.0) predates our first public release. [ 643.657110][ T5878] usb 4-1: Please update to version 0.2 or newer [ 643.667652][ T10] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 643.683054][ T5878] usb 4-1: Firmware: build [ 643.700176][ T10] usb 3-1: config 129 interface 135 has no altsetting 0 [ 643.709218][ T10] usb 3-1: config 129 interface 5 has no altsetting 0 [ 643.727364][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 643.740349][ T10] usb 3-1: New USB device strings: Mfr=1, Product=131, SerialNumber=67 [ 643.749670][ T10] usb 3-1: Product: syz [ 643.753941][ T10] usb 3-1: Manufacturer: 脢ㅰྨ躺ۯ♰ᵗæ„ç±â®’竛潷í§æ´ë«š [ 643.763870][ T10] usb 3-1: SerialNumber: syz [ 643.999074][ T3776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.013464][ T3795] SET target dimension over the limit! [ 644.049926][ T3776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.629167][ T3811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.684895][ T3811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.769552][T26325] team0: Port device syz_tun removed [ 646.051142][ T3814] netlink: 'syz.1.2887': attribute type 40 has an invalid length. [ 646.123192][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 646.162834][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 646.208406][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 646.237160][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 646.245820][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 646.255784][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 646.268816][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 646.396249][ T10] usb 3-1: USB disconnect, device number 103 [ 646.730522][ T3827] loop2: detected capacity change from 0 to 7 [ 646.806215][ T3827] Dev loop2: unable to read RDB block 7 [ 646.834090][ T3827] loop2: AHDI p1 p2 [ 646.852261][ T3827] loop2: partition table partially beyond EOD, truncated [ 646.880138][ T3827] loop2: p1 size 4261412863 extends beyond EOD, truncated [ 646.920736][ T5915] usb 4-1: USB disconnect, device number 122 [ 647.135909][ T6052] udevd[6052]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 647.694816][ T3821] chnl_net:caif_netlink_parms(): no params data found [ 647.868784][T21504] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 647.982816][ T3821] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.991078][ T3821] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.999575][ T3821] bridge_slave_0: entered allmulticast mode [ 648.008089][ T3821] bridge_slave_0: entered promiscuous mode [ 648.022126][ T3821] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.030033][ T3821] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.038876][ T3821] bridge_slave_1: entered allmulticast mode [ 648.048127][ T3821] bridge_slave_1: entered promiscuous mode [ 648.078396][T21504] usb 3-1: config index 0 descriptor too short (expected 1106, got 82) [ 648.086888][T21504] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 136 [ 648.119040][ T3821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.139620][T21504] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.142279][ T3821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.159520][T21504] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 648.186374][ T3857] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2899'. [ 648.216841][T21504] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 648.250404][ T3859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.252944][T21504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.300237][T21504] usb 3-1: Product: syz [ 648.300611][ T3859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.310821][T21504] usb 3-1: Manufacturer: syz [ 648.322718][T21504] usb 3-1: SerialNumber: syz [ 648.325988][ T5831] Bluetooth: hci0: command tx timeout [ 648.344912][T21504] usb 3-1: config 0 descriptor?? [ 648.387930][ T3821] team0: Port device team_slave_0 added [ 648.397117][T21504] usb-storage 3-1:0.0: USB Mass Storage device detected [ 648.397240][ T3821] team0: Port device team_slave_1 added [ 648.415958][ T3861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2901'. [ 648.427589][ T3861] netlink: 'syz.1.2901': attribute type 21 has an invalid length. [ 648.442809][ T3859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.453351][ T3859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.462862][T21504] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 648.475777][ T3861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2901'. [ 648.486695][ T3859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.498367][ T3859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.555011][ T3821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.599579][ T3821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.606577][ T3846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.669177][ T3821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.669447][ T3836] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 648.681376][ T3846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.701285][ T3821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.710306][ T3821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.745973][ T3821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.758173][T21504] usb 3-1: USB disconnect, device number 104 [ 648.795100][ T3871] dummy0: entered promiscuous mode [ 648.800324][ T3871] vlan0: entered promiscuous mode [ 648.899355][ T3821] hsr_slave_0: entered promiscuous mode [ 648.905925][ T3821] hsr_slave_1: entered promiscuous mode [ 648.912087][ T3821] debugfs: 'hsr0' already exists in 'hsr' [ 648.917952][ T3821] Cannot create hsr debugfs directory [ 649.046910][ T3821] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.058079][ T3821] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.149460][ T3821] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.160444][ T3821] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.422979][ T3821] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.450740][ T3821] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.824763][ T3821] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.835843][ T3821] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.361642][ T3821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 650.415052][ T5831] Bluetooth: hci0: command tx timeout [ 650.478561][ T3821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 650.517570][ T3821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 650.564954][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 650.579268][ T3821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 650.733358][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 650.744188][ T10] usb 2-1: config 0 has no interface number 0 [ 650.769516][ T10] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 650.779736][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.788320][ T10] usb 2-1: Product: syz [ 650.802892][ T10] usb 2-1: Manufacturer: syz [ 650.823056][ T10] usb 2-1: SerialNumber: syz [ 650.840587][ T10] usb 2-1: config 0 descriptor?? [ 650.858347][ T10] snd-usb-us122l 2-1:0.1: usb_set_interface error [ 650.865822][ T10] snd-usb-us122l 2-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 651.141493][ T3910] netlink: 'syz.4.2914': attribute type 40 has an invalid length. [ 651.357837][T15140] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 651.815293][T15140] bond0 (unregistering): (slave gretap1): Releasing active interface [ 651.882531][ T3924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2919'. [ 651.932120][ T3927] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 651.955019][ T3925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2919'. [ 652.488046][ T5831] Bluetooth: hci0: command tx timeout [ 652.508242][T15140] bond0 (unregistering): Released all slaves [ 652.559904][T15140] bond1 (unregistering): (slave veth5): Releasing active interface [ 652.581997][T15140] bond1 (unregistering): Released all slaves [ 652.613080][T15140] bond2 (unregistering): Released all slaves [ 652.642673][T15140] bond3 (unregistering): (slave veth7): Releasing backup interface [ 652.698149][T15140] bond3 (unregistering): Released all slaves [ 652.769437][ T3924] bridge7: entered promiscuous mode [ 652.780910][ T3925] bridge8: entered promiscuous mode [ 653.028760][T15140] !: left promiscuous mode [ 653.594869][T15140] tipc: Left network mode [ 653.610755][T15140] IPVS: stopping backup sync thread 6503 ... [ 653.820893][ T3958] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2927'. [ 654.089938][ T3821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.228875][ T10] usb 2-1: USB disconnect, device number 5 [ 654.328496][ T3821] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.415795][ T3965] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2929'. [ 654.476611][T15140] hsr_slave_0: left promiscuous mode [ 654.519272][T15140] hsr_slave_1: left promiscuous mode [ 654.551900][T15140] veth1_macvtap: left promiscuous mode [ 654.574527][ T5831] Bluetooth: hci0: command tx timeout [ 654.803122][ T30] audit: type=1326 audit(1762916549.207:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3979 comm="syz.4.2936" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77f198f6c9 code=0x0 [ 654.854778][T21504] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 654.876989][ T3981] QAT: failed to copy from user. [ 654.984667][T21504] usb 3-1: device descriptor read/64, error -71 [ 655.234543][T21504] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 655.405951][T21504] usb 3-1: device descriptor read/64, error -71 [ 655.515937][T21504] usb usb3-port1: attempt power cycle [ 655.796764][ T3994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.837143][ T3994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.974623][T21504] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 656.021289][T21504] usb 3-1: device descriptor read/8, error -71 [ 656.145979][ T5915] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 656.274801][T21504] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 656.318114][T21504] usb 3-1: device descriptor read/8, error -71 [ 656.348147][ T5915] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 656.356429][ T5915] usb 4-1: config 0 has no interface number 0 [ 656.376739][ T5915] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 656.393708][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.401861][ T5915] usb 4-1: Product: syz [ 656.406049][ T5915] usb 4-1: Manufacturer: syz [ 656.410623][ T5915] usb 4-1: SerialNumber: syz [ 656.435060][T21504] usb usb3-port1: unable to enumerate USB device [ 656.443559][ T5915] usb 4-1: config 0 descriptor?? [ 656.517601][ T5915] snd-usb-us122l 4-1:0.1: usb_set_interface error [ 656.528107][ T5915] snd-usb-us122l 4-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 657.209012][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.216140][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.228516][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.235687][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.266993][ T4003] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 657.410474][ T4005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.478645][ T4005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.561975][ T3821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.650869][T15140] IPVS: stop unused estimator thread 0... [ 657.712268][ T3821] veth0_vlan: entered promiscuous mode [ 657.729468][ T3821] veth1_vlan: entered promiscuous mode [ 657.754576][T21504] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 657.773096][ T3821] veth0_macvtap: entered promiscuous mode [ 657.791735][ T3821] veth1_macvtap: entered promiscuous mode [ 657.819500][ T3821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.838087][ T3821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.935697][T15140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.938413][ T4010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2946'. [ 657.946940][T21504] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 657.955082][ T3608] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.023660][ T3608] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.032896][ T3608] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.034438][T21504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.055402][T21504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.073113][T21504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 658.125717][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.134311][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.170407][T21504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.179632][T21504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.198145][T21504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 658.218217][T21504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.234107][T21504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.248259][T15138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.259954][T15138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.271190][T21504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 658.280988][T21504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.294062][T21504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.310081][T21504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 658.326598][T21504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.342059][T21504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.356611][T21504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 658.365541][T21504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.377770][T21504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.403398][T21504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 658.413779][ T4014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2884'. [ 658.413875][T21504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.441258][T21504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.465344][T21504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 658.473597][T21504] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.482828][T21504] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.502938][T21504] usb 2-1: config 0 interface 0 has no altsetting 0 [ 658.512611][T21504] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 658.527202][T21504] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 658.537308][T21504] usb 2-1: Product: syz [ 658.541563][T21504] usb 2-1: Manufacturer: syz [ 658.546537][T21504] usb 2-1: SerialNumber: syz [ 658.560657][T21504] usb 2-1: config 0 descriptor?? [ 658.577721][T21504] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 658.584968][ T4017] bond_slave_0: entered promiscuous mode [ 658.585008][ T4017] bond_slave_1: entered promiscuous mode [ 658.585102][ T4017] vlan2: entered promiscuous mode [ 658.585116][ T4017] bond0: entered promiscuous mode [ 658.846681][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 658.847219][ T10] usb 2-1: USB disconnect, device number 6 [ 658.901475][ T10] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 659.097129][ T4007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2944'. [ 659.331217][ T43] usb 4-1: USB disconnect, device number 123 [ 659.734704][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 659.781182][ T4032] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 659.866345][ T10] usb 2-1: device descriptor read/64, error -71 [ 659.991771][ T4040] QAT: failed to copy from user. [ 660.184536][ T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 660.294552][ T43] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 660.314458][ T10] usb 2-1: device descriptor read/64, error -71 [ 660.454520][ T10] usb usb2-port1: attempt power cycle [ 660.464464][ T5878] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 660.562713][ T43] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=32.00 [ 660.572026][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.592433][ T43] usb 3-1: Product: syz [ 660.604398][ T43] usb 3-1: Manufacturer: syz [ 660.614934][ T43] usb 3-1: SerialNumber: syz [ 660.617861][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 660.640975][ T43] usb 3-1: config 0 descriptor?? [ 660.668935][ T43] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 660.693309][ T5878] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 660.712695][ T43] usb 3-1: Detected FT233HP [ 660.774805][ T5878] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 660.803226][ T4053] loop2: detected capacity change from 0 to 7 [ 660.825745][ T5878] usb 1-1: config 0 has no interface number 0 [ 660.831890][ T5878] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 660.877321][ T4053] Dev loop2: unable to read RDB block 7 [ 660.882972][ T4053] loop2: unable to read partition table [ 660.889084][ T4053] loop2: partition table beyond EOD, truncated [ 660.982611][ T4053] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 661.010023][ T5878] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 661.028535][ T5199] Dev loop2: unable to read RDB block 7 [ 661.040431][ T5199] loop2: unable to read partition table [ 661.051950][ T5878] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 661.053603][ T5199] loop2: partition table beyond EOD, truncated [ 661.136029][ T5878] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 661.145492][ T5878] usb 1-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 661.179793][ T5878] usb 1-1: Product: syz [ 661.201125][ T5878] usb 1-1: Manufacturer: syz [ 661.267613][ T5878] usb 1-1: config 0 descriptor?? [ 661.292251][ T4044] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 661.652281][T27247] team0: Port device syz_tun removed [ 662.037434][ T5878] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input94 [ 662.422921][ T4097] macsec1: entered promiscuous mode [ 662.442589][ T4097] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 662.515540][ T4097] macsec1: entered allmulticast mode [ 662.523083][ T4097] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 662.566898][ T4097] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 662.624773][ T4097] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 662.870618][ T595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 662.883748][ T595] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 662.935156][ T595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 662.956839][ T595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 662.965438][ T595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 663.328879][ T5915] usb 5-1: USB disconnect, device number 101 [ 663.671582][ T4106] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 663.686278][ T43] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 663.718290][ T43] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 663.734787][ T5915] usb 1-1: USB disconnect, device number 84 [ 663.734842][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 663.845682][ T595] Bluetooth: hci0: command 0x0405 tx timeout [ 663.864655][ T4107] fuse: Unknown parameter 'roOtmode' [ 663.905239][ T43] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 663.994252][ T43] usb 3-1: USB disconnect, device number 109 [ 664.321377][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 664.350408][ T43] ftdi_sio 3-1:0.0: device disconnected [ 664.374438][ T5915] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 664.567860][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 664.590856][ T5915] usb 1-1: unable to get BOS descriptor or descriptor too short [ 664.604238][ T5915] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 664.636896][ T5915] usb 1-1: config 7 has no interface number 0 [ 664.653362][ T5915] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 664.704409][ T5915] usb 1-1: config 7 interface 187 has no altsetting 0 [ 664.724663][ T5915] usb 1-1: string descriptor 0 read error: -22 [ 664.730928][ T5915] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 664.774592][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.990034][ T3608] team0: Port device netdevsim0 removed [ 665.045898][ T5831] Bluetooth: hci4: command tx timeout [ 665.110798][ T4121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 665.143884][ T4121] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2967'. [ 665.188383][ T4121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.201100][ T4121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.396371][ T5915] usb 1-1: Cannot retrieve CPort count: -110 [ 665.405729][ T5915] usb 1-1: Cannot retrieve CPort count: -110 [ 665.424526][ T5915] es2_ap_driver 1-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 665.745771][ T4100] chnl_net:caif_netlink_parms(): no params data found [ 665.824014][ T30] audit: type=1326 audit(1762916560.227:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.1.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c78f6c9 code=0x7ffc0000 [ 665.862037][ T4132] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2973'. [ 665.893942][ T30] audit: type=1326 audit(1762916560.227:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.1.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c78f6c9 code=0x7ffc0000 [ 665.979462][ T30] audit: type=1326 audit(1762916560.257:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.1.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f145c78f6c9 code=0x7ffc0000 [ 666.003075][ T30] audit: type=1326 audit(1762916560.267:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.1.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c78f6c9 code=0x7ffc0000 [ 666.031293][ T30] audit: type=1326 audit(1762916560.267:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.1.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f145c78f6c9 code=0x7ffc0000 [ 666.054721][ T30] audit: type=1326 audit(1762916560.267:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.1.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c78f6c9 code=0x7ffc0000 [ 666.081068][ T30] audit: type=1326 audit(1762916560.267:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.1.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f145c78f6c9 code=0x7ffc0000 [ 666.107425][ T30] audit: type=1326 audit(1762916560.267:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.1.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c78f6c9 code=0x7ffc0000 [ 666.166741][ T30] audit: type=1326 audit(1762916560.267:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.1.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c78f6c9 code=0x7ffc0000 [ 666.196910][ T30] audit: type=1326 audit(1762916560.267:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.1.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f145c78f6c9 code=0x7ffc0000 [ 666.250194][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.262329][ T4100] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.289398][ T4100] bridge_slave_0: entered allmulticast mode [ 666.318520][ T4100] bridge_slave_0: entered promiscuous mode [ 666.473899][ T3608] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 666.483123][ T3608] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 56:9e:9c:c9:f8:f4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 666.532071][ T4144] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2976'. [ 666.654449][T21504] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 666.711480][ T4148] fuse: Unknown parameter 'grou00000000000000000000' [ 666.750115][ T43] usb 1-1: USB disconnect, device number 85 [ 666.814433][T21504] usb 2-1: Using ep0 maxpacket: 32 [ 666.826666][T21504] usb 2-1: config 2 has an invalid interface number: 157 but max is 0 [ 666.844641][T21504] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 666.865459][T21504] usb 2-1: config 2 has no interface number 1 [ 666.871593][T21504] usb 2-1: too many endpoints for config 2 interface 0 altsetting 5: 142, using maximum allowed: 30 [ 666.891249][T21504] usb 2-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 666.905411][T21504] usb 2-1: config 2 interface 0 has no altsetting 0 [ 666.914184][T21504] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 666.923939][T21504] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.932226][T21504] usb 2-1: Product: syz [ 666.943876][T21504] usb 2-1: Manufacturer: syz [ 666.948975][T21504] usb 2-1: SerialNumber: syz [ 666.960070][ T4158] hub 9-0:1.0: USB hub found [ 666.970249][T21504] imon 2-1:2.157: inconsistent driver matching [ 666.981137][T21504] imon 2-1:2.157: unable to register, err -22 [ 666.988138][ T4158] hub 9-0:1.0: 1 port detected [ 666.993824][T21504] imon 2-1:2.157: probe with driver imon failed with error -22 [ 667.127884][ T5831] Bluetooth: hci4: command tx timeout [ 667.520797][ T3608] bond1 (unregistering): (slave veth3): Releasing backup interface [ 667.530494][ T3608] bond1 (unregistering): Released all slaves [ 667.546185][ T3608] bond2 (unregistering): (slave veth5): Releasing backup interface [ 667.556112][ T3608] bond2 (unregistering): Released all slaves [ 667.681188][ T3608] bond0 (unregistering): Released all slaves [ 667.698201][ T3608] bond3 (unregistering): (slave veth11): Releasing backup interface [ 667.707792][ T3608] bond3 (unregistering): Released all slaves [ 667.723527][T21504] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 667.737777][T21504] imon 2-1:2.0: unable to initialize intf0, err -19 [ 667.767797][ T3608] bond4 (unregistering): (slave veth13): Releasing active interface [ 667.776136][T21504] imon:imon_probe: failed to initialize context! [ 667.794748][T21504] imon 2-1:2.0: unable to register, err -19 [ 667.819493][T21504] usb 2-1: USB disconnect, device number 10 [ 667.837172][ T3608] bond4 (unregistering): Released all slaves [ 667.885839][ T3608] bond5 (unregistering): (slave veth15): Releasing backup interface [ 667.911238][ T3608] bond5 (unregistering): Released all slaves [ 667.957977][ T3608] bond6 (unregistering): (slave veth17): Releasing backup interface [ 667.994644][ T3608] bond6 (unregistering): Released all slaves [ 668.212488][ T3608] bond7 (unregistering): (slave veth19): Releasing active interface [ 668.250270][ T3608] bond7 (unregistering): Released all slaves [ 668.299679][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.309590][ T4100] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.323591][ T4100] bridge_slave_1: entered allmulticast mode [ 668.370307][ T4100] bridge_slave_1: entered promiscuous mode [ 668.553517][ T4100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.568942][ T3608] tipc: Disabling bearer [ 668.647749][ T3608] tipc: Left network mode [ 668.698761][ T4100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.767559][ T3608] IPVS: stopping backup sync thread 10215 ... [ 668.824491][ T4217] netlink: 'syz.3.2987': attribute type 40 has an invalid length. [ 669.050162][ T4100] team0: Port device team_slave_0 added [ 669.212517][ T5831] Bluetooth: hci4: command tx timeout [ 669.496253][ T4100] team0: Port device team_slave_1 added [ 670.249782][ T4240] input: syz0 as /devices/virtual/input/input95 [ 670.361041][ T4245] netlink: 'syz.0.2993': attribute type 1 has an invalid length. [ 670.413985][ T4247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2993'. [ 670.449520][ T4100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.476665][ T4100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.533729][ T4100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.602433][ T4249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2994'. [ 670.608391][ T4100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.618747][ T4100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.644646][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.655651][ T4100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.729277][ T4100] hsr_slave_0: entered promiscuous mode [ 670.741190][ T4100] hsr_slave_1: entered promiscuous mode [ 670.748283][ T4100] debugfs: 'hsr0' already exists in 'hsr' [ 670.754103][ T4100] Cannot create hsr debugfs directory [ 671.295629][ T5831] Bluetooth: hci4: command tx timeout [ 671.490488][ T4263] loop2: detected capacity change from 0 to 7 [ 671.503395][ T6052] Dev loop2: unable to read RDB block 7 [ 671.522145][ T6052] loop2: unable to read partition table [ 671.619755][ T6052] loop2: partition table beyond EOD, truncated [ 671.653133][ T4263] Dev loop2: unable to read RDB block 7 [ 671.772533][ T4263] loop2: unable to read partition table [ 671.784724][ T4263] loop2: partition table beyond EOD, truncated [ 671.817483][ T4263] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 672.137318][ T4277] ip6t_srh: unknown srh match flags 4000 [ 672.331942][ T4282] bridge0: port 3(gretap0) entered blocking state [ 672.338671][ T4282] bridge0: port 3(gretap0) entered disabled state [ 672.345355][ T4282] gretap0: entered allmulticast mode [ 672.365831][ T4282] gretap0: entered promiscuous mode [ 672.371632][ T4282] bridge0: port 3(gretap0) entered blocking state [ 672.378193][ T4282] bridge0: port 3(gretap0) entered forwarding state [ 672.404576][ T5915] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 672.562936][ T4293] QAT: failed to copy from user. [ 672.574927][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 673.406024][ T5878] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 673.620617][ T5878] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 673.632653][ T5878] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 673.642956][ T5878] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 673.681826][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.726016][ T4300] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 673.755733][ T5878] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 674.018858][ T4100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 674.193432][ T4100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 674.228318][ T4100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 674.244011][ T4100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 674.463791][ T3608] hsr_slave_0: left promiscuous mode [ 674.494221][ T3608] hsr_slave_1: left promiscuous mode [ 674.692732][ T4312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'. [ 675.238021][ T4317] loop4: detected capacity change from 0 to 7 [ 675.261877][ T4317] Dev loop4: unable to read RDB block 7 [ 675.282626][ T4317] loop4: AHDI p1 p2 p3 [ 675.295503][ T4317] loop4: partition table partially beyond EOD, truncated [ 675.303387][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 675.312568][ T5915] usb 2-1: no configurations [ 675.328987][ T5915] usb 2-1: can't read configurations, error -22 [ 675.344134][ T4317] loop4: p1 start 1601398130 is beyond EOD, truncated [ 675.363645][ T4317] loop4: p2 start 1702059890 is beyond EOD, truncated [ 675.594211][ T4329] fuse: Unknown parameter 'group^id' [ 676.050373][ T4339] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3012'. [ 676.127860][ T5926] usb 3-1: USB disconnect, device number 110 [ 677.433033][ T4309] veth0: entered promiscuous mode [ 677.439750][ T4309] veth0: left promiscuous mode [ 677.457123][ T4311] veth0: entered promiscuous mode [ 677.462431][ T4311] veth0: left promiscuous mode [ 677.820342][ T4100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.852837][ T4100] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.859696][T21504] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 677.893051][T15142] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.900356][T15142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.969007][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.976230][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.038400][T21504] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 678.049045][T21504] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 678.071472][ T3608] IPVS: stop unused estimator thread 0... [ 678.084624][T21504] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 678.093634][T21504] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 678.125426][T21504] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 678.165432][T21504] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 678.175940][ T4100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.184514][T21504] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 678.207516][T21504] usb 3-1: Product: syz [ 678.211703][T21504] usb 3-1: Manufacturer: syz [ 678.251024][T21504] cdc_wdm 3-1:1.0: skipping garbage [ 678.275292][T21504] cdc_wdm 3-1:1.0: skipping garbage [ 678.296177][T21504] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 678.312451][ T4100] veth0_vlan: entered promiscuous mode [ 678.320309][T21504] cdc_wdm 3-1:1.0: Unknown control protocol [ 678.345089][ T4100] veth1_vlan: entered promiscuous mode [ 678.411802][ T4100] veth0_macvtap: entered promiscuous mode [ 678.428634][ T4100] veth1_macvtap: entered promiscuous mode [ 678.511474][ C1] wdm_int_callback: 172 callbacks suppressed [ 678.511498][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 678.512668][ T5878] usb 3-1: USB disconnect, device number 111 [ 678.517508][ C1] wdm_int_callback: 172 callbacks suppressed [ 678.517529][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 678.517546][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 678.525679][ T4100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.599713][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3028'. [ 678.612233][ T4100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.624542][ T4444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3028'. [ 678.638830][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.649110][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.668830][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.677702][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.714543][ T10] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 678.785904][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.804060][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.854741][ T10] usb 4-1: device descriptor read/64, error -71 [ 678.874366][ T4760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.886558][ T4760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.094517][ T10] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 679.157810][T21504] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 679.184682][ T43] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 679.274532][ T10] usb 4-1: device descriptor read/64, error -71 [ 679.313802][ T4461] loop6: detected capacity change from 0 to 524288000 [ 679.394221][T21504] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 679.420310][T21504] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 679.424478][ T4462] support for the xor transformation has been removed. [ 679.636405][ T10] usb usb4-port1: attempt power cycle [ 679.637928][T21504] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 679.698975][ T5915] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 679.709631][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 679.727406][ T43] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 679.743737][T21504] usb 1-1: Product: syz [ 679.750015][ T43] usb 2-1: config 0 has no interface number 0 [ 679.756644][T21504] usb 1-1: Manufacturer: syz [ 679.773081][ T43] usb 2-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 679.788647][T21504] usb 1-1: SerialNumber: syz [ 679.814217][ T43] usb 2-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 679.824538][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.832649][ T43] usb 2-1: Product: syz [ 679.838457][ T43] usb 2-1: Manufacturer: syz [ 679.847620][ T43] usb 2-1: SerialNumber: syz [ 679.861794][ T43] usb 2-1: config 0 descriptor?? [ 679.870137][ T4448] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 679.885018][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 679.903916][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 679.917447][ T43] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 679.942353][ T5915] usb 3-1: config 0 has no interfaces? [ 679.958573][ T5915] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 679.993234][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.994552][ T10] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 680.002402][ T5915] usb 3-1: Product: syz [ 680.054181][ T5915] usb 3-1: Manufacturer: syz [ 680.055583][ T10] usb 4-1: device descriptor read/8, error -71 [ 680.059138][ T5915] usb 3-1: SerialNumber: syz [ 680.102155][ T43] usb 2-1: USB disconnect, device number 13 [ 680.134748][ T4464] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3031'. [ 680.275344][T21504] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 680.300216][ T5915] usb 3-1: config 0 descriptor?? [ 680.385751][ T10] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 680.407391][ T10] usb 4-1: device descriptor read/8, error -71 [ 680.515851][ T10] usb usb4-port1: unable to enumerate USB device [ 681.008874][ T4471] sctp: [Deprecated]: syz.3.3037 (pid 4471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 681.008874][ T4471] Use struct sctp_sack_info instead [ 681.124743][T27084] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 681.274453][T27084] usb 2-1: Using ep0 maxpacket: 8 [ 681.283065][T27084] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 681.292665][T27084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.302348][T27084] usb 2-1: Product: syz [ 681.307941][T27084] usb 2-1: Manufacturer: syz [ 681.312558][T27084] usb 2-1: SerialNumber: syz [ 681.320668][T27084] usb 2-1: config 0 descriptor?? [ 681.533615][T27084] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 682.055535][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 682.055547][ T30] audit: type=1326 audit(1762916576.467:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.3.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa238f6c9 code=0x7ffc0000 [ 682.072625][ T5915] usb 1-1: USB disconnect, device number 86 [ 682.117746][ T4480] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3040'. [ 682.142605][ T5915] usblp0: removed [ 682.186178][ T30] audit: type=1326 audit(1762916576.507:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.3.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa238f6c9 code=0x7ffc0000 [ 682.289896][ T30] audit: type=1326 audit(1762916576.507:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.3.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f8fa238f6c9 code=0x7ffc0000 [ 682.339801][ T30] audit: type=1326 audit(1762916576.517:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.3.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa238f6c9 code=0x7ffc0000 [ 682.352994][ T4484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3041'. [ 682.382613][ T10] usb 3-1: USB disconnect, device number 112 [ 682.423112][ T4484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3041'. [ 682.423314][ T30] audit: type=1326 audit(1762916576.517:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.3.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fa238f6c9 code=0x7ffc0000 [ 682.459591][T27084] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 682.479949][ T30] audit: type=1326 audit(1762916576.517:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.3.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa238f6c9 code=0x7ffc0000 [ 682.513283][ T4488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3044'. [ 682.519238][ T30] audit: type=1326 audit(1762916576.517:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.3.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8fa238f6c9 code=0x7ffc0000 [ 682.566417][T27084] usb 2-1: USB disconnect, device number 14 [ 682.597393][ T30] audit: type=1326 audit(1762916576.517:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.3.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa238f6c9 code=0x7ffc0000 [ 682.629266][ T30] audit: type=1326 audit(1762916576.517:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.3.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8fa238f6c9 code=0x7ffc0000 [ 682.695013][ T4496] syzkaller0: entered promiscuous mode [ 682.700907][ T30] audit: type=1326 audit(1762916576.517:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.3.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa238f6c9 code=0x7ffc0000 [ 682.712147][ T4496] syzkaller0: entered allmulticast mode [ 682.736239][ T4499] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3046'. [ 682.745679][ T4499] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3046'. [ 682.789076][ T4496] tipc: Started in network mode [ 682.802408][ T4496] tipc: Node identity e65f8f6968fc, cluster identity 4711 [ 682.832620][ T4496] tipc: Enabled bearer , priority 0 [ 682.851016][ T4495] tipc: Resetting bearer [ 682.869493][ T4495] tipc: Disabling bearer [ 682.888956][ T4504] bond_slave_0: entered promiscuous mode [ 682.894746][ T4504] bond_slave_1: entered promiscuous mode [ 682.901159][ T4504] vlan2: entered promiscuous mode [ 682.923279][ T4504] bond0: entered promiscuous mode [ 683.424512][ T5915] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 683.599984][ T5915] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 683.610663][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.620088][ T5915] usb 2-1: Product: syz [ 683.636198][ T5915] usb 2-1: Manufacturer: syz [ 683.654444][ T5915] usb 2-1: SerialNumber: syz [ 683.670677][ T5915] usb 2-1: config 0 descriptor?? [ 683.701151][ T5915] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 683.747446][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3054'. [ 683.760543][ T4526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3054'. [ 684.313410][ T4539] loop2: detected capacity change from 0 to 7 [ 684.332729][ T6052] Dev loop2: unable to read RDB block 7 [ 684.339259][ T6052] loop2: AHDI p1 p2 [ 684.343190][ T6052] loop2: partition table partially beyond EOD, truncated [ 684.357050][ T6052] loop2: p1 size 4261412863 extends beyond EOD, truncated [ 684.374278][ T4539] Dev loop2: unable to read RDB block 7 [ 684.396636][ T4539] loop2: AHDI p1 p2 [ 684.402535][ T4539] loop2: partition table partially beyond EOD, truncated [ 684.412775][ T4539] loop2: p1 size 4261412863 extends beyond EOD, truncated [ 684.463466][ T6052] udevd[6052]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 684.526549][ T6052] udevd[6052]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 684.634433][ T5926] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 684.774637][ T5926] usb 5-1: device descriptor read/64, error -71 [ 685.024449][ T5926] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 685.164566][ T5926] usb 5-1: device descriptor read/64, error -71 [ 685.275201][ T5926] usb usb5-port1: attempt power cycle [ 685.403924][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.430232][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.451728][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.490140][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.654479][ T5926] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 685.687857][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.694793][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.694901][ T5926] usb 5-1: device descriptor read/8, error -71 [ 686.272764][T27084] usb 2-1: USB disconnect, device number 15 [ 686.285888][ T5926] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 686.395785][ T5926] usb 5-1: device descriptor read/8, error -71 [ 686.534799][ T5926] usb usb5-port1: unable to enumerate USB device [ 687.257440][ T4599] QAT: failed to copy from user. [ 687.565168][ T595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 687.583434][ T595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 687.591645][ T595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 687.600080][ T595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 687.609170][ T595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 687.899413][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.086379][T27084] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 688.127778][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.252240][T27084] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 688.263513][T27084] usb 3-1: config 0 has no interface number 0 [ 688.318647][T27084] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 688.328212][T27084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.356735][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.370041][T27084] usb 3-1: Product: syz [ 688.374251][T27084] usb 3-1: Manufacturer: syz [ 688.466523][T27084] usb 3-1: SerialNumber: syz [ 688.509766][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.541772][T27084] usb 3-1: config 0 descriptor?? [ 688.689025][T27084] snd-usb-us122l 3-1:0.1: usb_set_interface error [ 688.726548][T27084] snd-usb-us122l 3-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 688.893891][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.911072][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.630831][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.646972][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.768105][ T595] Bluetooth: hci1: command tx timeout [ 689.814639][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 690.017148][ T10] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 690.038442][ T10] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 690.141346][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 690.165892][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.203934][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 690.247935][ T4608] chnl_net:caif_netlink_parms(): no params data found [ 690.278407][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 690.313655][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 690.396507][T27085] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 690.504692][ T12] gretap0: left allmulticast mode [ 690.509772][ T12] gretap0: left promiscuous mode [ 690.541116][ T12] bridge0: port 3(gretap0) entered disabled state [ 690.550067][T27085] usb 1-1: device descriptor read/64, error -71 [ 690.567068][ T12] bridge_slave_1: left allmulticast mode [ 690.576983][ T12] bridge_slave_1: left promiscuous mode [ 690.582774][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.609582][ T5878] usb 3-1: USB disconnect, device number 113 [ 690.642427][ T12] bridge_slave_0: left allmulticast mode [ 690.660457][ T12] bridge_slave_0: left promiscuous mode [ 690.676665][T27084] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 690.692624][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.743358][ T4646] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3089'. [ 690.795561][T27085] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 690.815175][T27084] usb 5-1: device descriptor read/64, error -71 [ 690.937278][T27085] usb 1-1: device descriptor read/64, error -71 [ 691.124689][T27084] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 691.132819][T27085] usb usb1-port1: attempt power cycle [ 691.277087][T27084] usb 5-1: device descriptor read/64, error -71 [ 691.398166][T27084] usb usb5-port1: attempt power cycle [ 691.484690][T27085] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 691.515091][T27085] usb 1-1: device descriptor read/8, error -71 [ 691.739060][ T12] tipc: Left network mode [ 691.774507][T27085] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 691.783274][T27084] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 691.818489][T27084] usb 5-1: device descriptor read/8, error -71 [ 691.824945][T27085] usb 1-1: device descriptor read/8, error -71 [ 691.825636][ T12] IPVS: stopping master sync thread 4032 ... [ 691.850112][ T595] Bluetooth: hci1: command tx timeout [ 691.945667][T27085] usb usb1-port1: unable to enumerate USB device [ 691.956561][ T4608] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.983896][ T4608] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.009963][ T4608] bridge_slave_0: entered allmulticast mode [ 692.027273][ T4608] bridge_slave_0: entered promiscuous mode [ 692.059076][ T4608] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.075800][T21504] usb 2-1: USB disconnect, device number 16 [ 692.094437][T27084] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 692.112177][ T4608] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.128175][ T4608] bridge_slave_1: entered allmulticast mode [ 692.138704][ T4608] bridge_slave_1: entered promiscuous mode [ 692.158357][T27084] usb 5-1: device descriptor read/8, error -71 [ 692.318771][T27084] usb usb5-port1: unable to enumerate USB device [ 692.369619][ T4608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.499075][ T4608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.659563][ T4608] team0: Port device team_slave_0 added [ 692.701814][ T4608] team0: Port device team_slave_1 added [ 692.884031][ T4608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.895727][ T4608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.930996][ T4608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.005487][ T4694] loop2: detected capacity change from 0 to 7 [ 693.015530][ T4694] Dev loop2: unable to read RDB block 7 [ 693.022695][ T4608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.023051][ T4694] loop2: unable to read partition table [ 693.040524][ T4608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.091734][ T4694] loop2: partition table beyond EOD, truncated [ 693.100277][ T4608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.119304][ T4694] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà – ) failed (rc=-5) [ 693.357289][ T4608] hsr_slave_0: entered promiscuous mode [ 693.367215][ T4608] hsr_slave_1: entered promiscuous mode [ 693.373914][ T4608] debugfs: 'hsr0' already exists in 'hsr' [ 693.381475][ T4608] Cannot create hsr debugfs directory [ 693.554248][ T12] hsr_slave_0: left promiscuous mode [ 693.594163][ T12] hsr_slave_1: left promiscuous mode [ 693.618163][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.679207][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.746826][ T4713] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 693.834574][ T5926] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 693.924498][ T595] Bluetooth: hci1: command tx timeout [ 694.088191][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 694.150358][ T5926] usb 5-1: config 0 has an invalid interface number: 209 but max is 0 [ 694.309435][ T5926] usb 5-1: config 0 has no interface number 0 [ 694.321379][ T5926] usb 5-1: config 0 interface 209 has no altsetting 0 [ 694.545181][ T5926] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 694.555280][ T12] team0 (unregistering): Port device batadv1 removed [ 694.556365][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.578752][ T5926] usb 5-1: Product: syz [ 694.588753][ T5926] usb 5-1: Manufacturer: syz [ 694.593447][ T5926] usb 5-1: SerialNumber: syz [ 694.610692][ T5926] usb 5-1: config 0 descriptor?? [ 695.362330][ T12] team0 (unregistering): Port device team_slave_1 removed [ 695.697952][ T12] team0 (unregistering): Port device team_slave_0 removed [ 695.894502][T27084] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 696.015645][ T595] Bluetooth: hci1: command tx timeout [ 696.048813][T27084] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 696.057008][T27084] usb 1-1: config 0 has no interface number 0 [ 696.092697][T27084] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 696.125620][T27084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.154422][T27084] usb 1-1: Product: syz [ 696.199728][T27084] usb 1-1: Manufacturer: syz [ 696.214657][T27084] usb 1-1: SerialNumber: syz [ 696.301360][T27084] usb 1-1: config 0 descriptor?? [ 696.337094][T27084] snd-usb-us122l 1-1:0.1: usb_set_interface error [ 696.343969][T27084] snd-usb-us122l 1-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 697.763524][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3102'. [ 697.774652][ T4741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 698.047086][ T12] IPVS: stop unused estimator thread 0... [ 698.382283][ T5926] usb 5-1: USB disconnect, device number 110 [ 698.807519][ T4608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 698.841853][ T4608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 698.877439][ T4608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 698.922365][ T4608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 699.031534][ T4774] ip6t_srh: unknown srh match flags 4000 [ 699.056450][ T43] usb 1-1: USB disconnect, device number 91 [ 699.313877][ T4608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.332530][ T4608] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.365529][T15138] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.372622][T15138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.425261][T15138] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.432416][T15138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.586036][ T4608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 699.596615][ T43] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 699.903149][ T4608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.148741][ T4808] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3115'. [ 700.233877][ T4608] veth0_vlan: entered promiscuous mode [ 700.370803][ T4608] veth1_vlan: entered promiscuous mode [ 700.450321][ T4817] tipc: Enabling of bearer rejected, failed to enable media [ 700.568078][ T4608] veth0_macvtap: entered promiscuous mode [ 700.598031][ T4608] veth1_macvtap: entered promiscuous mode [ 700.791244][ T4608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.817262][ T10] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 700.986479][ T4608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.036069][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 701.070170][ T10] usb 5-1: config 0 has no interface number 0 [ 701.147161][ T10] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 701.161375][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.206217][ T4760] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.235629][ T10] usb 5-1: Product: syz [ 701.254428][ T4760] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.273794][ T10] usb 5-1: Manufacturer: syz [ 701.283964][ T10] usb 5-1: SerialNumber: syz [ 701.323564][ T10] usb 5-1: config 0 descriptor?? [ 701.343588][ T10] snd-usb-us122l 5-1:0.1: usb_set_interface error [ 701.352761][ T10] snd-usb-us122l 5-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 701.439624][ T4760] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.468945][ T4760] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.792803][ T4760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.837652][ T4760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.864411][ T43] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 701.917049][ T4839] vlan0: entered promiscuous mode [ 702.010396][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.042444][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 702.051035][ T43] usb 3-1: config 0 has no interface number 0 [ 702.073459][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.096880][ T43] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 702.106154][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.114958][ T43] usb 3-1: Product: syz [ 702.122550][ T43] usb 3-1: Manufacturer: syz [ 702.127615][ T43] usb 3-1: SerialNumber: syz [ 702.143295][ T43] usb 3-1: config 0 descriptor?? [ 702.157193][ T43] snd-usb-us122l 3-1:0.1: usb_set_interface error [ 702.164162][ T43] snd-usb-us122l 3-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 702.256780][ T4846] netlink: 'syz.3.3072': attribute type 46 has an invalid length. [ 702.264869][ T4846] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3072'. [ 702.305017][ T5926] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 702.486698][ T5926] usb 1-1: config 0 has no interfaces? [ 702.498643][ T5926] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 702.515748][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 702.568702][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.607754][ T5926] usb 1-1: Product: syz [ 702.619017][ T5926] usb 1-1: Manufacturer: syz [ 702.674595][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 702.812666][ T5926] usb 1-1: SerialNumber: syz [ 702.823159][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.853155][ T5926] usb 1-1: config 0 descriptor?? [ 702.868061][ T43] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 702.882261][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.901078][ T43] usb 4-1: Product: syz [ 702.916559][ T43] usb 4-1: Manufacturer: syz [ 702.937889][ T43] usb 4-1: SerialNumber: syz [ 702.965564][ T43] usb 4-1: config 0 descriptor?? [ 703.012477][ T43] usb 4-1: bad CDC descriptors [ 703.025510][ T43] usb 4-1: unsupported MDLM descriptors [ 703.211666][ T10] usb 4-1: USB disconnect, device number 2 [ 703.227599][ T4843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3121'. [ 703.356615][ T4843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3121'. [ 703.402603][T27084] usb 1-1: USB disconnect, device number 92 [ 703.625270][T27084] usb 5-1: USB disconnect, device number 111 [ 704.380191][ T4890] loop6: detected capacity change from 0 to 524288000 [ 704.519817][ T4890] support for the xor transformation has been removed. [ 705.695094][T27084] usb 3-1: USB disconnect, device number 114 [ 706.022830][ T6587] netlink: 'syz.3.3129': attribute type 5 has an invalid length. [ 706.314612][T27084] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 706.475721][T27084] usb 4-1: device descriptor read/64, error -71 [ 706.659290][ T7032] syzkaller1: entered promiscuous mode [ 706.704879][ T7032] syzkaller1: entered allmulticast mode [ 706.784528][T27084] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 706.954804][T27084] usb 4-1: device descriptor read/64, error -71 [ 707.018734][ T595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 707.045216][ T595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 707.053851][ T595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 707.065331][ T595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 707.078934][ T595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 707.097059][T27084] usb usb4-port1: attempt power cycle [ 707.522779][ T3608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.544473][T27084] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 707.583852][T27084] usb 4-1: device descriptor read/8, error -71 [ 707.625158][ T3608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.647506][ T5926] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 707.826954][ T5926] usb 5-1: device descriptor read/64, error -71 [ 707.873285][ T3608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.883976][T27084] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 707.925500][T27084] usb 4-1: device descriptor read/8, error -71 [ 707.937940][ T3608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.047613][T27084] usb usb4-port1: unable to enumerate USB device [ 708.095398][ T5926] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 708.168500][ T3608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.193646][ T3608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.235975][ T5926] usb 5-1: device descriptor read/64, error -71 [ 708.294498][T21504] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 708.404986][ T5926] usb usb5-port1: attempt power cycle [ 708.464431][T21504] usb 2-1: Using ep0 maxpacket: 16 [ 708.492719][ T3608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.540018][T21504] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.605023][ T3608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.625020][T21504] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 708.687695][T21504] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 708.704597][T21504] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.722822][T21504] usb 2-1: Product: syz [ 708.754447][ T5926] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 708.782450][T21504] usb 2-1: Manufacturer: syz [ 708.803038][T21504] usb 2-1: SerialNumber: syz [ 708.816261][ T5926] usb 5-1: device descriptor read/8, error -71 [ 709.049537][T21504] usb 2-1: 0:2 : does not exist [ 709.059673][ T5926] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 709.072285][ T7379] chnl_net:caif_netlink_parms(): no params data found [ 709.088550][T21504] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 709.114987][ T5926] usb 5-1: device descriptor read/8, error -71 [ 709.124758][ T5831] Bluetooth: hci3: command tx timeout [ 709.193242][T21504] usb 2-1: USB disconnect, device number 18 [ 709.245499][ T5926] usb usb5-port1: unable to enumerate USB device [ 709.277150][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.379620][ T3608] bridge_slave_1: left allmulticast mode [ 709.390201][ T3608] bridge_slave_1: left promiscuous mode [ 709.435149][ T3608] ªªªªªª: port 2(bridge_slave_1) entered disabled state [ 709.558649][ T3608] bridge_slave_0: left allmulticast mode [ 709.594456][ T3608] bridge_slave_0: left promiscuous mode [ 709.600255][ T3608] ªªªªªª: port 1(bridge_slave_0) entered disabled state [ 709.627949][ T3608] tipc: Resetting bearer [ 710.036531][ T3608] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 710.075573][ T7441] netlink: 'syz.0.3139': attribute type 40 has an invalid length. [ 710.287581][ T3608] tipc: Disabling bearer [ 710.644457][ T5955] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 710.844593][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 710.855673][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 710.931141][ T3608] bond0 (unregistering): Released all slaves [ 710.948998][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 255, setting to 64 [ 710.987234][ T3608] bond1 (unregistering): (slave veth5): Releasing backup interface [ 710.989819][ T5955] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 711.017435][ T3608] bond1 (unregistering): Released all slaves [ 711.072141][ T3608] bond2 (unregistering): (slave veth7): Releasing active interface [ 711.091990][ T3608] bond2 (unregistering): Released all slaves [ 711.103673][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.143896][ T5955] usb 1-1: config 0 descriptor?? [ 711.162775][ T7447] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 711.204548][ T595] Bluetooth: hci3: command tx timeout [ 711.783283][ T7454] geneve2: entered promiscuous mode [ 711.809168][ T7454] geneve2: entered allmulticast mode [ 712.006376][ T3608] tipc: Left network mode [ 712.085604][ T3608] IPVS: stopping backup sync thread 10894 ... [ 712.149819][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.158963][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.167089][ T7379] bridge_slave_0: entered allmulticast mode [ 712.177744][ T7379] bridge_slave_0: entered promiscuous mode [ 712.230731][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.239049][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.247639][ T7379] bridge_slave_1: entered allmulticast mode [ 712.262395][ T7379] bridge_slave_1: entered promiscuous mode [ 712.326974][ T5955] ath6kl: Failed to submit usb control message: -110 [ 712.333908][ T5955] ath6kl: unable to send the bmi data to the device: -110 [ 712.370707][ T5955] ath6kl: Unable to send get target info: -110 [ 712.400795][ T5955] ath6kl: Failed to init ath6kl core: -110 [ 712.426320][ T5955] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 712.836308][ T7379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.840395][ T7379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.064678][ T5926] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 713.214410][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 713.264614][ T7379] team0: Port device team_slave_0 added [ 713.284763][ T595] Bluetooth: hci3: command 0x040f tx timeout [ 713.295493][ T5926] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 713.295521][ T5926] usb 5-1: config 8 has no interface number 0 [ 713.295561][ T5926] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 713.295585][ T5926] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 713.295627][ T5926] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 713.295649][ T5926] usb 5-1: config 8 interface 39 has no altsetting 0 [ 713.303159][ T5926] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 713.303188][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.303208][ T5926] usb 5-1: Product: syz [ 713.303221][ T5926] usb 5-1: Manufacturer: syz [ 713.303236][ T5926] usb 5-1: SerialNumber: syz [ 713.303449][ T7379] team0: Port device team_slave_1 added [ 713.324123][ T5915] usb 1-1: USB disconnect, device number 93 [ 713.573777][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.573796][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.573820][ T7379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.613148][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.613167][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.613192][ T7379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.814891][ T5915] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 714.002730][ T7492] netlink: 'syz.3.3149': attribute type 27 has an invalid length. [ 714.059034][ T7379] hsr_slave_0: entered promiscuous mode [ 714.060257][ T7379] hsr_slave_1: entered promiscuous mode [ 714.061084][ T7379] debugfs: 'hsr0' already exists in 'hsr' [ 714.061105][ T7379] Cannot create hsr debugfs directory [ 714.100904][ T5915] usb 1-1: device descriptor read/64, error -71 [ 714.133854][ T7494] vim2m vim2m.0: vidioc_s_fmt queue busy [ 714.374440][ T5915] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 714.444838][ T5926] ipheth 5-1:8.39: ipheth_enable_ncm: usb_control_msg: -110 [ 714.504560][ T5915] usb 1-1: device descriptor read/64, error -71 [ 714.616461][ T5915] usb usb1-port1: attempt power cycle [ 715.374398][ T5831] Bluetooth: hci3: command 0x040f tx timeout [ 715.446955][ T5926] ipheth 5-1:8.39: Apple iPhone USB Ethernet device attached [ 715.724885][ T5915] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 715.773241][ T3608] hsr_slave_0: left promiscuous mode [ 715.786266][ T5915] usb 1-1: device descriptor read/8, error -71 [ 715.818617][ T5926] usb 5-1: USB disconnect, device number 116 [ 716.068394][ T3608] veth1_macvtap: left promiscuous mode [ 716.073986][ T3608] veth0_macvtap: left promiscuous mode [ 716.095592][ T5915] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 716.117415][ T3608] veth1_vlan: left promiscuous mode [ 716.164152][ T5915] usb 1-1: device descriptor read/8, error -71 [ 716.288275][ T5915] usb usb1-port1: unable to enumerate USB device [ 716.558695][ T3608] team0 (unregistering): Port device batadv1 removed [ 716.799673][ T7554] QAT: failed to copy from user. [ 717.446906][ T5831] Bluetooth: hci3: command 0x040f tx timeout [ 717.904777][ T5955] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 717.964188][ T3608] team0 (unregistering): Port device team_slave_1 removed [ 718.019472][ T3608] team0 (unregistering): Port device team_slave_0 removed [ 718.064455][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 718.071674][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.091472][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.103233][ T5955] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 718.112502][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.123933][ T5955] usb 4-1: config 0 descriptor?? [ 718.137969][ T5955] hub 4-1:0.0: USB hub found [ 718.359158][ T5955] hub 4-1:0.0: 1 port detected [ 718.603116][ T5926] ipheth 5-1:8.39: Apple iPhone USB Ethernet now disconnected [ 718.937531][ T7575] geneve2: entered promiscuous mode [ 718.942822][ T7575] geneve2: entered allmulticast mode [ 719.023654][ T5926] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 719.226025][ T5926] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 719.235513][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.263623][ T5926] usb 5-1: config 0 descriptor?? [ 719.310200][ T5926] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 719.712006][ T7566] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3155'. [ 719.723438][ T5926] gspca_sunplus: reg_w_riv err -71 [ 719.730834][ T5926] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 719.753277][ T5926] usb 5-1: USB disconnect, device number 117 [ 719.861164][ T3608] IPVS: stop unused estimator thread 0... [ 720.090175][ T5955] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 720.457822][ T7379] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 720.497994][ T7379] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 720.604449][ T7379] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 720.637244][ T7379] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 720.976402][ T7379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.142738][ T7379] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.178923][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.186158][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.239795][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.246940][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.255899][ T5955] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 721.284028][ T5955] usb 4-1: device reset changed ep0 maxpacket size! [ 721.328281][ T5955] usb 4-1: USB disconnect, device number 7 [ 721.337552][ T7379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.433949][ T7379] veth0_vlan: entered promiscuous mode [ 721.480141][ T7379] veth1_vlan: entered promiscuous mode [ 721.551631][ T7379] veth0_macvtap: entered promiscuous mode [ 721.587898][ T7379] veth1_macvtap: entered promiscuous mode [ 721.623286][ T7379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.645355][ T7379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.681834][T15138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.701546][ T5955] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 721.717136][T15138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.747153][T15138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.766908][ T3608] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.880858][ T5955] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 721.910688][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0 [ 721.932165][ T5955] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 721.952765][ T3608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.961801][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 721.990686][ T3608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.000970][ T5955] usb 4-1: Product: syz [ 722.008376][ T5955] usb 4-1: Manufacturer: syz [ 722.026996][ T5955] usb 4-1: SerialNumber: syz [ 722.062417][ T5955] usb 4-1: config 0 descriptor?? [ 722.075947][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.091269][ T5955] usb 4-1: selecting invalid altsetting 0 [ 722.102082][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.356976][ T7633] loop2: detected capacity change from 0 to 7 [ 722.393569][ T7633] Dev loop2: unable to read RDB block 7 [ 722.418966][ T7633] loop2: AHDI p1 p2 [ 722.422909][ T7633] loop2: partition table partially beyond EOD, truncated [ 722.469028][ T7633] loop2: p1 size 4261412863 extends beyond EOD, truncated [ 722.677572][ T6052] udevd[6052]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 722.720820][T27084] usb 4-1: USB disconnect, device number 8 [ 723.567337][ T7662] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 723.662268][ T7662] fuse: Unknown parameter 'roOtmode' [ 723.734464][ T5915] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 723.742246][T21504] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 723.995321][T21504] usb 2-1: Using ep0 maxpacket: 32 [ 724.005393][T21504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.016745][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 724.025573][ T5915] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 724.054375][T21504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.068255][ T5915] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 724.145051][T21504] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 724.154422][ T5915] usb 1-1: config 0 has no interface number 0 [ 724.195141][ T5915] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 724.208201][T21504] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.217702][ T5915] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 724.230500][ T5915] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 724.244044][T21504] usb 2-1: config 0 descriptor?? [ 724.296544][T21504] hub 2-1:0.0: USB hub found [ 724.384556][ T5915] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 724.452967][ T5915] usb 1-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 724.469752][ T5915] usb 1-1: Product: syz [ 724.474935][T21504] hub 2-1:0.0: 1 port detected [ 724.481282][ T5915] usb 1-1: Manufacturer: syz [ 724.558227][ T5915] usb 1-1: config 0 descriptor?? [ 724.636476][ T7654] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 725.056983][T21504] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 725.216694][T21504] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 725.225785][T21504] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 725.251417][T21504] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 725.313960][T21504] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 725.315812][T21504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 725.315843][T21504] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 725.316896][T21504] usb 3-1: language id specifier not provided by device, defaulting to English [ 725.323411][T21504] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 725.323447][T21504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.323458][T21504] usb 3-1: Manufacturer: 躔煟祚肂濬즰 [ 725.326496][T21504] usb 3-1: config 0 descriptor?? [ 725.327311][ T7679] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 725.331436][T21504] hub 3-1:0.0: bad descriptor, ignoring hub [ 725.331453][T21504] hub 3-1:0.0: probe with driver hub failed with error -5 [ 725.334005][T21504] input: 躔煟祚肂濬즰 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input97 [ 725.345464][ T5915] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input96 [ 726.007116][ T43] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 726.019033][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3174'. [ 726.019096][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3174'. [ 726.324917][ T43] usb 2-1: USB disconnect, device number 19 [ 726.338833][ T7704] netlink: 'syz.1.3175': attribute type 1 has an invalid length. [ 726.434817][ T7707] loop9: detected capacity change from 0 to 7 [ 726.443253][ T7707] Dev loop9: unable to read RDB block 7 [ 726.449355][ T7707] loop9: unable to read partition table [ 726.455531][ T7707] loop9: partition table beyond EOD, truncated [ 726.461920][ T7707] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 726.550680][ T7714] QAT: failed to copy from user. [ 726.840926][ T7708] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 727.011226][ T7712] veth5: entered promiscuous mode [ 727.029911][ T7712] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 727.299115][ T5955] usb 1-1: USB disconnect, device number 98 [ 727.299241][ C1] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 727.838897][T27084] usb 3-1: USB disconnect, device number 115 [ 728.117819][ T7752] loop2: detected capacity change from 0 to 7 [ 728.135072][ T5955] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 728.198608][ T7752] Dev loop2: unable to read RDB block 7 [ 728.224572][ T7752] loop2: AHDI p1 p2 [ 728.238739][ T7752] loop2: partition table partially beyond EOD, truncated [ 728.315719][ T7752] loop2: p1 size 4261412863 extends beyond EOD, truncated [ 728.358207][ T5955] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 728.401172][ T5955] usb 4-1: config 0 has no interface number 0 [ 728.442355][ T5955] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 728.505415][ T5955] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 728.523866][ T6052] udevd[6052]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 728.559678][ T5955] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0 [ 728.628923][ T5955] usb 4-1: config 0 interface 200 has no altsetting 0 [ 728.667953][ T5955] usb 4-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 728.685559][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.723565][ T5955] usb 4-1: Product: syz [ 728.731606][ T5955] usb 4-1: Manufacturer: syz [ 728.735446][T21504] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 728.745537][ T5955] usb 4-1: SerialNumber: syz [ 728.791372][ T5955] usb 4-1: config 0 descriptor?? [ 728.936469][T21504] usb 2-1: Using ep0 maxpacket: 32 [ 728.954931][T21504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.955723][T27084] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 728.971103][T21504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.003601][T21504] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 729.013692][T21504] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.081416][T21504] usb 2-1: config 0 descriptor?? [ 729.112218][T21504] hub 2-1:0.0: USB hub found [ 729.154418][T27084] usb 3-1: Using ep0 maxpacket: 16 [ 729.191634][T27084] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.226679][ T5955] usb 4-1: USB disconnect, device number 9 [ 729.245964][T27084] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.301215][T21504] hub 2-1:0.0: 1 port detected [ 729.314458][T27084] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 729.391790][T27084] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 729.412385][T27084] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.442274][T27084] usb 3-1: config 0 descriptor?? [ 729.740067][T27084] usbhid 3-1:0.0: can't add hid device: -71 [ 729.748983][T27084] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 729.812396][T27084] usb 3-1: USB disconnect, device number 116 [ 729.892320][ T7789] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3190'. [ 730.022336][ T7792] loop6: detected capacity change from 0 to 524288000 [ 730.195536][ T7795] support for the xor transformation has been removed. [ 730.668311][ T7809] loop2: detected capacity change from 0 to 7 [ 730.686840][ T7809] Dev loop2: unable to read RDB block 7 [ 730.696254][ T7809] loop2: unable to read partition table [ 730.727040][ T7809] loop2: partition table beyond EOD, truncated [ 730.752301][ T7809] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 731.033281][T21504] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 731.244518][ T43] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 731.404413][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 731.412015][ T43] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 731.420762][ T43] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 731.487319][ T43] usb 3-1: config 0 has no interface number 0 [ 731.637153][ T7830] dummy0: entered promiscuous mode [ 731.642492][ T7830] vlan3: entered promiscuous mode [ 731.681888][ T43] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 731.686783][T27084] usb 2-1: USB disconnect, device number 20 [ 731.715430][ T43] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 731.732698][ T43] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 731.747685][ T43] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 731.759236][ T43] usb 3-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 731.777084][ T43] usb 3-1: Product: syz [ 731.781473][ T43] usb 3-1: Manufacturer: syz [ 731.797348][ T7832] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3198'. [ 731.838925][ T43] usb 3-1: config 0 descriptor?? [ 731.906050][ T7819] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 731.939817][ T7832] bridge2: entered promiscuous mode [ 731.988290][ T7832] bridge2: entered allmulticast mode [ 732.092904][ T7832] team0: Port device bridge2 added [ 732.103073][ T7833] bridge0: port 3(team0) entered blocking state [ 732.168569][ T7833] bridge0: port 3(team0) entered disabled state [ 732.191842][ T7833] team0: entered allmulticast mode [ 732.200872][ T7833] team_slave_0: entered allmulticast mode [ 732.208883][ T7833] team_slave_1: entered allmulticast mode [ 732.232456][ T7833] team0: entered promiscuous mode [ 732.238159][ T7833] team_slave_0: entered promiscuous mode [ 732.245431][ T7833] team_slave_1: entered promiscuous mode [ 732.253932][ T7833] bridge0: port 3(team0) entered blocking state [ 732.260438][ T7833] bridge0: port 3(team0) entered forwarding state [ 732.728619][ T43] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input99 [ 732.939851][ T7839] syzkaller0: entered promiscuous mode [ 733.194587][ T7839] syzkaller0: entered allmulticast mode [ 733.347158][ T7841] tipc: Started in network mode [ 733.353193][ T7841] tipc: Node identity 7e426899ede2, cluster identity 4711 [ 733.440424][ T7841] tipc: Enabled bearer , priority 0 [ 733.536663][ T7838] tipc: Resetting bearer [ 733.645799][ T7838] tipc: Disabling bearer [ 734.072661][ T7855] loop2: detected capacity change from 0 to 7 [ 734.091305][ T6052] Dev loop2: unable to read RDB block 7 [ 734.097418][ T6052] loop2: AHDI p1 p2 [ 734.101636][ T6052] loop2: partition table partially beyond EOD, truncated [ 734.116903][ T6052] loop2: p1 size 4261412863 extends beyond EOD, truncated [ 734.142679][ T7855] Dev loop2: unable to read RDB block 7 [ 734.149511][ T7855] loop2: AHDI p1 p2 [ 734.153536][ T7855] loop2: partition table partially beyond EOD, truncated [ 734.194880][ T7855] loop2: p1 size 4261412863 extends beyond EOD, truncated [ 734.475878][ T6052] udevd[6052]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 734.593708][ T6052] udevd[6052]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 734.773493][ T7868] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 735.075885][ T5926] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 735.563701][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 735.572413][T27084] usb 3-1: USB disconnect, device number 117 [ 735.572459][ C1] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 735.595962][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.632824][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.684454][ T5926] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 735.693529][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.749256][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 735.749273][ T30] audit: type=1326 audit(1762916630.157:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.2.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c97f8f6c9 code=0x7ffc0000 [ 735.804005][ T5926] usb 1-1: config 0 descriptor?? [ 735.820574][ T30] audit: type=1326 audit(1762916630.217:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.2.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c97f8f6c9 code=0x7ffc0000 [ 735.826916][ T5926] hub 1-1:0.0: USB hub found [ 735.875062][ T7877] loop2: detected capacity change from 0 to 7 [ 735.918690][ T7877] Dev loop2: unable to read RDB block 7 [ 735.934474][ T7877] loop2: unable to read partition table [ 735.934542][ T30] audit: type=1326 audit(1762916630.227:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.2.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c97f8df10 code=0x7ffc0000 [ 735.944702][ T7877] loop2: partition table beyond EOD, truncated [ 735.999422][ T7877] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 736.031235][ T30] audit: type=1326 audit(1762916630.227:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.2.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c97f8f6c9 code=0x7ffc0000 [ 736.044514][ T5926] hub 1-1:0.0: 1 port detected [ 736.054165][ T30] audit: type=1326 audit(1762916630.227:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.2.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c97f8f6c9 code=0x7ffc0000 [ 736.154529][T21504] usb 3-1: new low-speed USB device number 118 using dummy_hcd [ 736.176922][ T30] audit: type=1326 audit(1762916630.227:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.2.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2c97f8f6c9 code=0x7ffc0000 [ 736.203587][ T30] audit: type=1326 audit(1762916630.227:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.2.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c97f8f6c9 code=0x7ffc0000 [ 736.228959][ T30] audit: type=1326 audit(1762916630.227:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.2.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c97f8f6c9 code=0x7ffc0000 [ 736.260917][ T30] audit: type=1326 audit(1762916630.227:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.2.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c97f8f6c9 code=0x7ffc0000 [ 736.301975][ T30] audit: type=1326 audit(1762916630.257:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.2.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c97f8f6c9 code=0x7ffc0000 [ 736.358085][T21504] usb 3-1: Invalid ep0 maxpacket: 64 [ 736.547326][T21504] usb 3-1: new low-speed USB device number 119 using dummy_hcd [ 736.567628][ T7891] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 736.717991][T21504] usb 3-1: Invalid ep0 maxpacket: 64 [ 736.725378][T21504] usb usb3-port1: attempt power cycle [ 736.771611][ T7905] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3220'. [ 736.899535][ T7891] fuse: Unknown parameter 'roOtmode' [ 737.074470][T21504] usb 3-1: new low-speed USB device number 120 using dummy_hcd [ 737.097161][T21504] usb 3-1: Invalid ep0 maxpacket: 64 [ 737.284426][T21504] usb 3-1: new low-speed USB device number 121 using dummy_hcd [ 737.310202][T21504] usb 3-1: Invalid ep0 maxpacket: 64 [ 737.317735][T21504] usb usb3-port1: unable to enumerate USB device [ 737.465214][ T7911] loop2: detected capacity change from 0 to 7 [ 737.477258][ T6052] Dev loop2: unable to read RDB block 7 [ 737.483245][ T6052] loop2: unable to read partition table [ 737.497250][ T6052] loop2: partition table beyond EOD, truncated [ 737.508062][ T7911] Dev loop2: unable to read RDB block 7 [ 737.515182][ T7911] loop2: unable to read partition table [ 737.554753][ T7911] loop2: partition table beyond EOD, truncated [ 737.561158][ T7911] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 737.605877][ T5926] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 737.945902][ T10] usb 1-1: USB disconnect, device number 99 [ 738.044414][ T5926] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 738.204441][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 738.211746][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 738.223570][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 738.233554][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 738.261320][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 738.288292][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 738.316187][ T5926] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 738.344493][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.356768][ T5926] usb 5-1: Product: syz [ 738.361033][ T5926] usb 5-1: Manufacturer: syz [ 738.368561][ T5926] usb 5-1: SerialNumber: syz [ 738.385146][ T5926] usb 5-1: config 0 descriptor?? [ 738.401408][ T5926] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input100 [ 738.564804][T27084] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 738.594418][ T5915] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 738.613545][ T7913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.623270][ T7913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.636951][ T7913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.647334][ T7913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.724636][T27084] usb 1-1: Using ep0 maxpacket: 32 [ 738.731668][T27084] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 738.740652][T27084] usb 1-1: config 0 has no interface number 0 [ 738.747345][T27084] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 738.760287][T27084] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 738.770461][T27084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.781543][T27084] usb 1-1: Product: syz [ 738.781894][ T5915] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 738.786344][T27084] usb 1-1: Manufacturer: syz [ 738.799293][T27084] usb 1-1: SerialNumber: syz [ 738.809419][ T5915] usb 4-1: config 179 has no interface number 0 [ 738.814419][ T5955] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 738.824270][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 738.825233][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 738.825261][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 738.825284][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 738.825307][ T5915] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 738.825344][ T5915] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 738.825365][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.826278][T27084] usb 1-1: config 0 descriptor?? [ 738.836973][T27084] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 738.837004][T27084] em28xx 1-1:0.132: Video interface 132 found: [ 738.839122][ T7932] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 738.839226][ T7932] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 739.006725][ T5955] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 739.015540][ T5955] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 739.027537][ T5955] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 739.046054][ T5955] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 739.060093][ T5955] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 739.111005][ T5955] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 739.121876][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 739.144742][ T5955] usb 2-1: Product: syz [ 739.148968][ T5955] usb 2-1: Manufacturer: syz [ 739.168804][ T5955] cdc_wdm 2-1:1.0: skipping garbage [ 739.175298][ T5955] cdc_wdm 2-1:1.0: skipping garbage [ 739.190318][ T5955] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 739.204550][ T5955] cdc_wdm 2-1:1.0: Unknown control protocol [ 739.304576][T27084] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 739.673143][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 739.674676][ T5955] usb 2-1: USB disconnect, device number 21 [ 739.679773][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 739.679794][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 739.732292][ T10] usb 5-1: USB disconnect, device number 118 [ 739.858344][T27084] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 739.994491][T27084] em28xx 1-1:0.132: board has no eeprom [ 740.034117][T27085] usb 4-1: USB disconnect, device number 10 [ 740.034192][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 740.048847][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 740.117545][ T7928] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3227'. [ 740.254397][T27084] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 740.262919][T27084] em28xx 1-1:0.132: analog set to bulk mode. [ 740.274669][ T5955] em28xx 1-1:0.132: Registering V4L2 extension [ 740.302834][T27084] usb 1-1: USB disconnect, device number 100 [ 740.378080][T27084] em28xx 1-1:0.132: Disconnecting em28xx [ 740.602878][ T5955] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 740.633265][ T5955] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 740.665985][ T5955] em28xx 1-1:0.132: No AC97 audio processor [ 740.683235][ T5955] usb 1-1: Decoder not found [ 740.759146][ T5955] em28xx 1-1:0.132: failed to create media graph [ 740.794376][ T5955] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 740.813912][ T7963] ================================================================== [ 740.822161][ T7963] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 740.829716][ T7963] Read of size 8 at addr ffff888054e38740 by task v4l_id/7963 [ 740.837181][ T7963] [ 740.839489][ T7963] CPU: 1 UID: 0 PID: 7963 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 740.839503][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 740.839510][ T7963] Call Trace: [ 740.839516][ T7963] [ 740.839521][ T7963] dump_stack_lvl+0x189/0x250 [ 740.839538][ T7963] ? __virt_addr_valid+0x1c8/0x5c0 [ 740.839552][ T7963] ? rcu_is_watching+0x15/0xb0 [ 740.839570][ T7963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.839590][ T7963] ? rcu_is_watching+0x15/0xb0 [ 740.839615][ T7963] ? lock_release+0x4b/0x3e0 [ 740.839631][ T7963] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 740.839644][ T7963] ? __virt_addr_valid+0x1c8/0x5c0 [ 740.839656][ T7963] ? __virt_addr_valid+0x4a5/0x5c0 [ 740.839668][ T7963] print_report+0xca/0x240 [ 740.839680][ T7963] ? v4l2_fh_open+0xac/0x420 [ 740.839689][ T7963] kasan_report+0x118/0x150 [ 740.839700][ T7963] ? v4l2_fh_open+0xac/0x420 [ 740.839711][ T7963] v4l2_fh_open+0xac/0x420 [ 740.839720][ T7963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 740.839735][ T7963] em28xx_v4l2_open+0x157/0x9a0 [ 740.839750][ T7963] v4l2_open+0x1bf/0x3a0 [ 740.839762][ T7963] chrdev_open+0x4cc/0x5e0 [ 740.839771][ T7963] ? __pfx_chrdev_open+0x10/0x10 [ 740.839781][ T7963] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 740.839793][ T7963] ? __pfx_chrdev_open+0x10/0x10 [ 740.839801][ T7963] do_dentry_open+0x953/0x13f0 [ 740.839814][ T7963] vfs_open+0x3b/0x340 [ 740.839823][ T7963] ? path_openat+0x2ecd/0x3830 [ 740.839835][ T7963] path_openat+0x2ee5/0x3830 [ 740.839853][ T7963] ? __pfx_path_openat+0x10/0x10 [ 740.839867][ T7963] do_filp_open+0x1fa/0x410 [ 740.839878][ T7963] ? __lock_acquire+0xab9/0xd20 [ 740.839887][ T7963] ? __pfx_do_filp_open+0x10/0x10 [ 740.839903][ T7963] ? _raw_spin_unlock+0x28/0x50 [ 740.839913][ T7963] ? alloc_fd+0x64c/0x6c0 [ 740.839929][ T7963] do_sys_openat2+0x121/0x1c0 [ 740.839940][ T7963] ? __pfx_do_sys_openat2+0x10/0x10 [ 740.839951][ T7963] ? exc_page_fault+0x82/0x100 [ 740.839964][ T7963] ? do_user_addr_fault+0xc85/0x1380 [ 740.839974][ T7963] __x64_sys_openat+0x138/0x170 [ 740.839985][ T7963] do_syscall_64+0xfa/0xfa0 [ 740.839998][ T7963] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.840010][ T7963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.840020][ T7963] ? clear_bhb_loop+0x60/0xb0 [ 740.840030][ T7963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.840041][ T7963] RIP: 0033:0x7f428b6a7407 [ 740.840052][ T7963] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 740.840061][ T7963] RSP: 002b:00007fffca32f570 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 740.840072][ T7963] RAX: ffffffffffffffda RBX: 00007f428bea4880 RCX: 00007f428b6a7407 [ 740.840080][ T7963] RDX: 0000000000000000 RSI: 00007fffca330f1c RDI: ffffffffffffff9c [ 740.840087][ T7963] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 740.840093][ T7963] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 740.840099][ T7963] R13: 00007fffca32f7c0 R14: 00007f428c00b000 R15: 00005639bfd434d8 [ 740.840110][ T7963] [ 740.840113][ T7963] [ 741.142031][ T7963] Allocated by task 5955: [ 741.146341][ T7963] kasan_save_track+0x3e/0x80 [ 741.151004][ T7963] __kasan_kmalloc+0x93/0xb0 [ 741.155584][ T7963] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 741.160938][ T7963] em28xx_v4l2_init+0x10b/0x2e70 [ 741.165857][ T7963] em28xx_init_extension+0x120/0x1c0 [ 741.171122][ T7963] process_scheduled_works+0xae1/0x17b0 [ 741.176647][ T7963] worker_thread+0x8a0/0xda0 [ 741.181221][ T7963] kthread+0x711/0x8a0 [ 741.185273][ T7963] ret_from_fork+0x4bc/0x870 [ 741.189840][ T7963] ret_from_fork_asm+0x1a/0x30 [ 741.194580][ T7963] [ 741.196883][ T7963] Freed by task 5955: [ 741.200837][ T7963] kasan_save_track+0x3e/0x80 [ 741.205497][ T7963] __kasan_save_free_info+0x46/0x50 [ 741.210684][ T7963] __kasan_slab_free+0x5c/0x80 [ 741.215432][ T7963] kfree+0x19a/0x6d0 [ 741.219328][ T7963] em28xx_v4l2_init+0x1683/0x2e70 [ 741.224333][ T7963] em28xx_init_extension+0x120/0x1c0 [ 741.229605][ T7963] process_scheduled_works+0xae1/0x17b0 [ 741.235146][ T7963] worker_thread+0x8a0/0xda0 [ 741.239729][ T7963] kthread+0x711/0x8a0 [ 741.243782][ T7963] ret_from_fork+0x4bc/0x870 [ 741.248358][ T7963] ret_from_fork_asm+0x1a/0x30 [ 741.253104][ T7963] [ 741.255408][ T7963] The buggy address belongs to the object at ffff888054e38000 [ 741.255408][ T7963] which belongs to the cache kmalloc-8k of size 8192 [ 741.269444][ T7963] The buggy address is located 1856 bytes inside of [ 741.269444][ T7963] freed 8192-byte region [ffff888054e38000, ffff888054e3a000) [ 741.283403][ T7963] [ 741.285720][ T7963] The buggy address belongs to the physical page: [ 741.292127][ T7963] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54e38 [ 741.300865][ T7963] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 741.309340][ T7963] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 741.317209][ T7963] page_type: f5(slab) [ 741.321174][ T7963] raw: 00fff00000000040 ffff88801a027280 ffffea0001f18800 dead000000000003 [ 741.329736][ T7963] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 741.338373][ T7963] head: 00fff00000000040 ffff88801a027280 ffffea0001f18800 dead000000000003 [ 741.347032][ T7963] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 741.355694][ T7963] head: 00fff00000000003 ffffea0001538e01 00000000ffffffff 00000000ffffffff [ 741.364353][ T7963] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 741.373009][ T7963] page dumped because: kasan: bad access detected [ 741.379425][ T7963] page_owner tracks the page as allocated [ 741.385119][ T7963] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 15122, tgid 15121 (syz.4.1202), ts 321650505601, free_ts 321622527951 [ 741.404989][ T7963] post_alloc_hook+0x240/0x2a0 [ 741.409744][ T7963] get_page_from_freelist+0x2365/0x2440 [ 741.415270][ T7963] __alloc_frozen_pages_noprof+0x181/0x370 [ 741.421057][ T7963] alloc_pages_mpol+0x232/0x4a0 [ 741.425885][ T7963] allocate_slab+0x96/0x350 [ 741.430456][ T7963] ___slab_alloc+0xf56/0x1990 [ 741.435122][ T7963] __slab_alloc+0x65/0x100 [ 741.439528][ T7963] __kvmalloc_node_noprof+0x6ba/0x910 [ 741.444884][ T7963] tun_attach+0x895/0x1590 [ 741.449378][ T7963] tun_net_init+0x309/0x3d0 [ 741.453861][ T7963] register_netdevice+0x6bf/0x1ae0 [ 741.458952][ T7963] tun_set_iff+0x844/0xf00 [ 741.463346][ T7963] __tun_chr_ioctl+0x788/0x1df0 [ 741.468271][ T7963] __se_sys_ioctl+0xfc/0x170 [ 741.472935][ T7963] do_syscall_64+0xfa/0xfa0 [ 741.477428][ T7963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.483298][ T7963] page last free pid 5844 tgid 5844 stack trace: [ 741.489601][ T7963] __free_frozen_pages+0xbc4/0xd30 [ 741.494697][ T7963] __put_partials+0x146/0x170 [ 741.499356][ T7963] put_cpu_partial+0x1f2/0x2e0 [ 741.504099][ T7963] __slab_free+0x2b9/0x390 [ 741.508498][ T7963] qlist_free_all+0x97/0x140 [ 741.513073][ T7963] kasan_quarantine_reduce+0x148/0x160 [ 741.518522][ T7963] __kasan_slab_alloc+0x22/0x80 [ 741.523357][ T7963] kmem_cache_alloc_noprof+0x367/0x6e0 [ 741.528798][ T7963] ptlock_alloc+0x20/0x70 [ 741.533112][ T7963] pte_alloc_one+0x7a/0x310 [ 741.537601][ T7963] __pte_alloc+0x25/0x1a0 [ 741.541926][ T7963] copy_pmd_range+0x7805/0x7f00 [ 741.546777][ T7963] copy_page_range+0xc14/0x1270 [ 741.551606][ T7963] dup_mmap+0xf4c/0x1b10 [ 741.555834][ T7963] copy_mm+0x13c/0x4b0 [ 741.559884][ T7963] copy_process+0x1706/0x3c00 [ 741.564551][ T7963] [ 741.566858][ T7963] Memory state around the buggy address: [ 741.572463][ T7963] ffff888054e38600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 741.580501][ T7963] ffff888054e38680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 741.588542][ T7963] >ffff888054e38700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 741.596584][ T7963] ^ [ 741.602713][ T7963] ffff888054e38780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 741.610751][ T7963] ffff888054e38800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 741.618788][ T7963] ================================================================== [ 741.634401][ T5955] em28xx 1-1:0.132: Remote control support is not available for this card. [ 741.674162][T27084] em28xx 1-1:0.132: Closing input extension [ 741.773746][ T7963] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 741.780976][ T7963] CPU: 1 UID: 0 PID: 7963 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 741.789910][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 741.799969][ T7963] Call Trace: [ 741.803249][ T7963] [ 741.806183][ T7963] dump_stack_lvl+0x99/0x250 [ 741.810787][ T7963] ? __asan_memcpy+0x40/0x70 [ 741.815372][ T7963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 741.820572][ T7963] ? __pfx__printk+0x10/0x10 [ 741.825152][ T7963] vpanic+0x237/0x6d0 [ 741.829128][ T7963] ? __pfx_vpanic+0x10/0x10 [ 741.833615][ T7963] ? preempt_schedule+0xae/0xc0 [ 741.838457][ T7963] ? __pfx_preempt_schedule+0x10/0x10 [ 741.843815][ T7963] panic+0xb9/0xc0 [ 741.847533][ T7963] ? __pfx_panic+0x10/0x10 [ 741.851940][ T7963] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 741.857819][ T7963] ? is_module_address+0x17/0xf0 [ 741.862748][ T7963] ? v4l2_fh_open+0xac/0x420 [ 741.867320][ T7963] check_panic_on_warn+0x89/0xb0 [ 741.872246][ T7963] ? v4l2_fh_open+0xac/0x420 [ 741.876817][ T7963] end_report+0x78/0x160 [ 741.881047][ T7963] kasan_report+0x129/0x150 [ 741.885541][ T7963] ? v4l2_fh_open+0xac/0x420 [ 741.890117][ T7963] v4l2_fh_open+0xac/0x420 [ 741.894516][ T7963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 741.900498][ T7963] em28xx_v4l2_open+0x157/0x9a0 [ 741.905366][ T7963] v4l2_open+0x1bf/0x3a0 [ 741.909600][ T7963] chrdev_open+0x4cc/0x5e0 [ 741.914022][ T7963] ? __pfx_chrdev_open+0x10/0x10 [ 741.918948][ T7963] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 741.925264][ T7963] ? __pfx_chrdev_open+0x10/0x10 [ 741.930187][ T7963] do_dentry_open+0x953/0x13f0 [ 741.934940][ T7963] vfs_open+0x3b/0x340 [ 741.938992][ T7963] ? path_openat+0x2ecd/0x3830 [ 741.943741][ T7963] path_openat+0x2ee5/0x3830 [ 741.948331][ T7963] ? __pfx_path_openat+0x10/0x10 [ 741.953276][ T7963] do_filp_open+0x1fa/0x410 [ 741.957788][ T7963] ? __lock_acquire+0xab9/0xd20 [ 741.962634][ T7963] ? __pfx_do_filp_open+0x10/0x10 [ 741.967739][ T7963] ? _raw_spin_unlock+0x28/0x50 [ 741.972577][ T7963] ? alloc_fd+0x64c/0x6c0 [ 741.976897][ T7963] do_sys_openat2+0x121/0x1c0 [ 741.981559][ T7963] ? __pfx_do_sys_openat2+0x10/0x10 [ 741.986742][ T7963] ? exc_page_fault+0x82/0x100 [ 741.991493][ T7963] ? do_user_addr_fault+0xc85/0x1380 [ 741.996760][ T7963] __x64_sys_openat+0x138/0x170 [ 742.001594][ T7963] do_syscall_64+0xfa/0xfa0 [ 742.006080][ T7963] ? lockdep_hardirqs_on+0x9c/0x150 [ 742.011270][ T7963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.017315][ T7963] ? clear_bhb_loop+0x60/0xb0 [ 742.021974][ T7963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.027852][ T7963] RIP: 0033:0x7f428b6a7407 [ 742.032275][ T7963] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 742.051875][ T7963] RSP: 002b:00007fffca32f570 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 742.060276][ T7963] RAX: ffffffffffffffda RBX: 00007f428bea4880 RCX: 00007f428b6a7407 [ 742.068231][ T7963] RDX: 0000000000000000 RSI: 00007fffca330f1c RDI: ffffffffffffff9c [ 742.076230][ T7963] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 742.084181][ T7963] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 742.092136][ T7963] R13: 00007fffca32f7c0 R14: 00007f428c00b000 R15: 00005639bfd434d8 [ 742.100109][ T7963] [ 742.103365][ T7963] Kernel Offset: disabled [ 742.107666][ T7963] Rebooting in 86400 seconds..