last executing test programs: 2m39.718471946s ago: executing program 4 (id=758): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c015}, 0x20044040) r0 = socket$igmp(0x2, 0x3, 0x2) shutdown(r0, 0x1) socket$inet6(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40010) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xf, 0xffffffffffffff93, {0x5, 0xf, 0xffffffffffffff1d, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x3, 0x7, 0x440, 0x7}]}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2m38.948951935s ago: executing program 4 (id=764): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$radio(&(0x7f00000001c0), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000380)='map_files\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x6a2, 0x3, 0x9}) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='gre0\x00', 0x10) bind$l2tp6(r6, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) 2m38.704130535s ago: executing program 4 (id=766): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{0x0}, {&(0x7f0000000d00)=""/103, 0x67}, {&(0x7f0000000540)=""/137, 0x89}, {&(0x7f0000001b00)=""/4074, 0xfea}, {&(0x7f0000000400)=""/212, 0xd4}], 0x5}, 0xd}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x40000000, 0x0) listen(r0, 0x4000000) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/210, 0xd2}], 0x6, 0x6, 0x2) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x697dc0f2, @dev={0xfe, 0x80, '\x00', 0x29}, 0x5}, 0x1c) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000680), &(0x7f00000006c0)=0x30) syz_usb_connect$uac1(0x2, 0x8e, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x3, 0x1, 0xe, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0xcd8, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x62}]}, {{0x9, 0x5, 0x1, 0x9, 0x21f, 0xa, 0x2, 0x1, {0x7, 0x25, 0x1, 0x82, 0x6, 0x74a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0x47}, @as_header={0x7, 0x24, 0x1, 0x9, 0x9, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xe, 0x3, {0x7, 0x25, 0x1, 0x0, 0x3, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x1}}], 0x18) bind$can_raw(r2, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x5, &(0x7f0000006680)) inotify_init() writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000400)={0x4, 0x0, 0x3, "48cece2c2c81d56e3c49bfc056d099c9c55fadeab54b93d6c8de3b0ea481bc1c", 0x2036315a}) 2m36.652777999s ago: executing program 4 (id=773): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0xac, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x8, 0x2, 0x6, 0x3, 0x6, 0x6, 0x1, 0xa, 0x0, 0xe, 0xf, 0xa, 0x2, 0x6, 0xd, 0x2], 0x1, [0x8, 0x800, 0xd09, 0x5, 0xff62, 0x2, 0x1, 0x2, 0x3, 0x6, 0x2, 0x3, 0x4, 0x4, 0xfff, 0xfff8], [0x1, 0x41e, 0x2, 0x7, 0x1, 0x9, 0x2, 0x0, 0x9921, 0x1, 0x1ff, 0x4, 0x7, 0xeb11, 0x4, 0x401]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}, {0x4}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x3}, 0x20004004) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x1ff) r5 = openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r11, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000001000040"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r12, 0x5411, 0x1000000000000) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 2m35.06779217s ago: executing program 4 (id=774): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c015}, 0x20044040) r0 = socket$igmp(0x2, 0x3, 0x2) shutdown(r0, 0x1) socket$inet6(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f00000004c0)={0x2c, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xf, 0xffffffffffffff93, {0x5, 0xf, 0xffffffffffffff1d, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x3, 0x7, 0x440, 0x7}]}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2m34.691216428s ago: executing program 4 (id=779): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 2m34.090941216s ago: executing program 32 (id=779): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 4.124840147s ago: executing program 3 (id=1693): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r0, 0x0, 0x46) close(r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.055291751s ago: executing program 0 (id=1694): set_mempolicy(0x6005, &(0x7f0000000080)=0xffffbffffffffffd, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_mr_cache\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x4, 0x8, 0x7f}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000200)={0x1, 0x0, {0x18, 0x27, 0x0, 0x16, 0x1, 0x3, 0x3, 0x161, 0xffffffffffffffff}}) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup_procs(r3, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e8, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x9) 3.947744635s ago: executing program 3 (id=1697): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010128bd7000fcdbdf2501000000000000ad32e3a4ac9c"], 0x68}, 0x1, 0x0, 0x0, 0x8880}, 0x880) 3.842260745s ago: executing program 3 (id=1699): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="310300000400000000000800000008000300", @ANYRES32=r1], 0x24}}, 0x0) 3.752834979s ago: executing program 0 (id=1701): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@local, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) 3.663877361s ago: executing program 0 (id=1706): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.661406005s ago: executing program 3 (id=1707): socket$l2tp6(0xa, 0x2, 0x73) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x90000004}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x20008850) 2.556839303s ago: executing program 0 (id=1724): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe0900000000000000000000000000bbfe8000000000"], 0x0) 2.494686801s ago: executing program 0 (id=1726): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010128bd7000fcdbdf2501000000000000ad32e3a4ac9c"], 0x68}, 0x1, 0x0, 0x0, 0x8880}, 0x880) 2.36219777s ago: executing program 0 (id=1729): r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123400, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x17902, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x24004065}, 0x48000) 1.037018887s ago: executing program 5 (id=1745): memfd_secret(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd\x00') r1 = memfd_create(&(0x7f0000000d80)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000021c0)=""/102400, 0x19000) 1.022489349s ago: executing program 1 (id=1747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) keyctl$link(0x8, r3, r2) 904.529349ms ago: executing program 2 (id=1748): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe0900000000000000000000000000bbfe8000"/51], 0x0) 903.881696ms ago: executing program 5 (id=1749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000500"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) 844.822456ms ago: executing program 1 (id=1750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioprio_get$pid(0x3, 0x0) 801.390383ms ago: executing program 1 (id=1751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010128bd7000fcdbdf2501000000000000ad32e3a4ac9c"], 0x68}, 0x1, 0x0, 0x0, 0x8880}, 0x880) 776.47721ms ago: executing program 5 (id=1752): r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) ptrace$pokeuser(0x6, r0, 0x358, 0x0) 748.489143ms ago: executing program 2 (id=1753): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@local, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[], 0x0) 665.007629ms ago: executing program 1 (id=1754): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 654.594811ms ago: executing program 2 (id=1755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listen(0xffffffffffffffff, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000008400"], 0x18}}], 0x2, 0x0) 542.706363ms ago: executing program 5 (id=1756): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{}, {0x0}], 0x2}}], 0x1, 0x0) 496.776897ms ago: executing program 3 (id=1757): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) 496.258837ms ago: executing program 2 (id=1758): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r4], 0x20}}, 0x0) 379.673178ms ago: executing program 1 (id=1759): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) 354.498185ms ago: executing program 3 (id=1760): socket$packet(0x11, 0x2, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) r3 = socket(0x11, 0x80a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xff1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 284.811484ms ago: executing program 5 (id=1761): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 164.60606ms ago: executing program 5 (id=1762): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYBLOB="000000000012a520bd"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 145.248352ms ago: executing program 1 (id=1763): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe0900000000000000000000000000bbfe8000"/51], 0x0) 130.798775ms ago: executing program 2 (id=1764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010128bd7000fcdbdf2501000000000000ad32e3a4ac9c"], 0x68}, 0x1, 0x0, 0x0, 0x8880}, 0x880) 0s ago: executing program 2 (id=1765): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) kernel console output (not intermixed with test programs): 5][ T5881] usb 6-1: config 4 has no interface number 0 [ 343.496922][ T5881] usb 6-1: config 4 has no interface number 1 [ 343.503057][ T5881] usb 6-1: config 4 has no interface number 2 [ 343.512773][ T5881] usb 6-1: config 4 has no interface number 3 [ 343.519582][ T5881] usb 6-1: config 4 interface 9 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 343.536325][ T5881] usb 6-1: config 4 interface 9 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 343.537076][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.547092][ T5881] usb 6-1: config 4 interface 9 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 343.547121][ T5881] usb 6-1: config 4 interface 9 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 343.547150][ T5881] usb 6-1: config 4 interface 9 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 343.547187][ T5881] usb 6-1: config 4 interface 60 altsetting 64 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 343.612578][ T5881] usb 6-1: config 4 interface 60 altsetting 64 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 343.625121][ T5881] usb 6-1: config 4 interface 60 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 343.636827][ T5881] usb 6-1: config 4 interface 48 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 343.666676][ T5881] usb 6-1: too many endpoints for config 4 interface 4 altsetting 4: 245, using maximum allowed: 30 [ 343.681739][ T5881] usb 6-1: config 4 interface 4 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 343.694028][ T5881] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 343.711980][ T5881] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 343.752712][ T5881] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 343.821336][ T5881] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 343.870001][ T5881] usb 6-1: config 4 interface 4 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 343.888725][ T5881] usb 6-1: config 4 interface 4 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 343.896987][ T919] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.910491][ T5881] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 343.940455][ T5881] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 343.952964][ T5881] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 343.967637][ T5881] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 343.981771][ T5881] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 344.025078][ T5881] usb 6-1: config 4 interface 4 altsetting 4 has 12 endpoint descriptors, different from the interface descriptor's value: 245 [ 344.043135][ T5881] usb 6-1: too many endpoints for config 4 interface 240 altsetting 73: 38, using maximum allowed: 30 [ 344.059654][ T5881] usb 6-1: config 4 interface 240 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 344.093966][ T5881] usb 6-1: config 4 interface 9 has no altsetting 0 [ 344.111000][ T5881] usb 6-1: config 4 interface 60 has no altsetting 0 [ 344.131130][ T5881] usb 6-1: config 4 interface 48 has no altsetting 0 [ 344.168837][ T5881] usb 6-1: config 4 interface 4 has no altsetting 0 [ 344.199492][ T5881] usb 6-1: config 4 interface 240 has no altsetting 0 [ 344.213616][ T5881] usb 6-1: string descriptor 0 read error: -22 [ 344.220445][ T5831] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 344.227308][ T5831] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 344.245486][ T5881] usb 6-1: Dual-Role OTG device on HNP port [ 344.254272][ T5831] usb 1-1: USB disconnect, device number 66 [ 344.269847][ T5881] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2710, bcdDevice=75.d7 [ 344.290029][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.420364][ T5881] usb 4-1: USB disconnect, device number 63 [ 344.435753][ T5882] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 344.555176][ T9098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.564546][ T9098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.574956][ T9098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.589901][ T919] usb 6-1: USB disconnect, device number 11 [ 344.610982][ T5882] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 344.623158][ T5882] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 344.639171][ T5882] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 344.651411][ T5882] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 344.660563][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.671999][ T9113] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 345.005815][ T5881] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 345.012535][ T9118] FAULT_INJECTION: forcing a failure. [ 345.012535][ T9118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.028195][ T9118] CPU: 1 UID: 0 PID: 9118 Comm: syz.3.933 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 345.028217][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.028226][ T9118] Call Trace: [ 345.028232][ T9118] [ 345.028240][ T9118] dump_stack_lvl+0x189/0x250 [ 345.028275][ T9118] ? __lock_acquire+0xaac/0xd20 [ 345.028306][ T9118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.028334][ T9118] ? __pfx__printk+0x10/0x10 [ 345.028352][ T9118] ? __might_fault+0xb0/0x130 [ 345.028379][ T9118] should_fail_ex+0x414/0x560 [ 345.028399][ T9118] _copy_from_user+0x2d/0xb0 [ 345.028431][ T9118] kstrtouint_from_user+0xc4/0x170 [ 345.028456][ T9118] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 345.028496][ T9118] proc_fail_nth_write+0x88/0x240 [ 345.028527][ T9118] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 345.028562][ T9118] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 345.028593][ T9118] vfs_write+0x27b/0xa90 [ 345.028623][ T9118] ? __pfx_vfs_write+0x10/0x10 [ 345.028647][ T9118] ? __fget_files+0x2a/0x420 [ 345.028668][ T9118] ? __fget_files+0x3a0/0x420 [ 345.028685][ T9118] ? __fget_files+0x2a/0x420 [ 345.028719][ T9118] ksys_write+0x145/0x250 [ 345.028746][ T9118] ? __pfx_ksys_write+0x10/0x10 [ 345.028772][ T9118] ? do_syscall_64+0xba/0x210 [ 345.028820][ T9118] do_syscall_64+0xf6/0x210 [ 345.028850][ T9118] ? clear_bhb_loop+0x45/0xa0 [ 345.028875][ T9118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.028893][ T9118] RIP: 0033:0x7f35edd8d41f [ 345.028910][ T9118] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 345.028924][ T9118] RSP: 002b:00007f35eeb54030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 345.028945][ T9118] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f35edd8d41f [ 345.028954][ T9118] RDX: 0000000000000001 RSI: 00007f35eeb540a0 RDI: 0000000000000004 [ 345.028962][ T9118] RBP: 00007f35eeb54090 R08: 0000000000000000 R09: 0000000000000000 [ 345.028970][ T9118] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 345.028977][ T9118] R13: 0000000000000000 R14: 00007f35edfb5fa0 R15: 00007f35ee0dfa28 [ 345.028997][ T9118] [ 345.135985][ T5881] usb 1-1: device descriptor read/64, error -71 [ 345.271403][ T9120] netlink: 'syz.3.934': attribute type 1 has an invalid length. [ 345.354192][ T9120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 345.363394][ T9120] bond1: (slave bond2): making interface the new active one [ 345.372246][ T9120] bond1: (slave bond2): Enslaving as an active interface with an up link [ 345.397840][ T9120] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 345.411030][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.934'. [ 345.436507][ T9120] netlink: 324 bytes leftover after parsing attributes in process `syz.3.934'. [ 345.535892][ T5881] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 345.596215][ T919] usb 3-1: USB disconnect, device number 73 [ 345.677052][ T5881] usb 1-1: device descriptor read/64, error -71 [ 345.702980][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.937'. [ 345.765933][ T5831] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 345.799406][ T5881] usb usb1-port1: attempt power cycle [ 345.881175][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.935'. [ 345.891253][ T9130] bridge0: port 2(bridge_slave_1) entered learning state [ 345.905899][ T5882] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 345.915360][ T5882] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input36 [ 345.933075][ T9130] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.953518][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.964694][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.976817][ T5831] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 345.994939][ T5831] usb 4-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 346.040083][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.056009][ T5882] usb 2-1: USB disconnect, device number 69 [ 346.062012][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 346.112691][ T5831] usb 4-1: config 0 descriptor?? [ 346.155884][ T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 346.197249][ T5881] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 346.230783][ T5881] usb 1-1: device descriptor read/8, error -71 [ 346.305976][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 346.313776][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 346.323742][ T24] usb 3-1: config 2 has an invalid interface number: 9 but max is 0 [ 346.335763][ T24] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 346.352771][ T9129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.361743][ T9129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.417064][ T24] usb 3-1: config 2 has no interface number 0 [ 346.467356][ T24] usb 3-1: config 2 interface 9 altsetting 10 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 346.479271][ T24] usb 3-1: config 2 interface 9 altsetting 10 bulk endpoint 0x8E has invalid maxpacket 32 [ 346.481068][ T5881] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 346.505894][ T24] usb 3-1: config 2 interface 9 altsetting 10 endpoint 0xA has invalid wMaxPacketSize 0 [ 346.525737][ T24] usb 3-1: config 2 interface 9 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 346.566379][ T5881] usb 1-1: device descriptor read/8, error -71 [ 346.589078][ T24] usb 3-1: config 2 interface 9 has no altsetting 0 [ 346.610579][ T5831] usbhid 4-1:0.0: can't add hid device: -71 [ 346.620165][ T5831] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 346.639893][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=6f.97 [ 346.647886][ T5831] usb 4-1: USB disconnect, device number 64 [ 346.655260][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.674336][ T24] usb 3-1: Product: syz [ 346.676830][ T5881] usb usb1-port1: unable to enumerate USB device [ 346.693820][ T24] usb 3-1: Manufacturer: syz [ 346.713119][ T24] usb 3-1: SerialNumber: syz [ 346.741565][ T9136] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 346.837858][ T9139] sctp: [Deprecated]: syz.1.939 (pid 9139) Use of int in maxseg socket option. [ 346.837858][ T9139] Use struct sctp_assoc_value instead [ 346.971876][ T24] pn533_usb 3-1:2.9: NFC: Could not find bulk-in or bulk-out endpoint [ 347.009951][ T24] usb 3-1: USB disconnect, device number 74 [ 347.831088][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 348.001255][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 348.021776][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.041765][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.078193][ T9162] netlink: 16 bytes leftover after parsing attributes in process `syz.5.946'. [ 348.099074][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.129822][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.150581][ T24] usb 3-1: Product: syz [ 348.154890][ T24] usb 3-1: Manufacturer: syz [ 348.174455][ T24] usb 3-1: SerialNumber: syz [ 348.182113][ T9162] netlink: 56 bytes leftover after parsing attributes in process `syz.5.946'. [ 348.239038][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.948'. [ 348.365861][ T5831] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 348.420596][ T24] usb 3-1: 0:2 : does not exist [ 348.429774][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 348.454791][ T24] usb 3-1: USB disconnect, device number 75 [ 348.487456][ T9110] udevd[9110]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.516485][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 348.529651][ T5831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 348.542178][ T5831] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 348.553574][ T5881] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 348.562317][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.572991][ T5831] usb 1-1: Product: syz [ 348.578067][ T5831] usb 1-1: Manufacturer: syz [ 348.582709][ T5831] usb 1-1: SerialNumber: syz [ 348.591470][ T5831] usb 1-1: config 0 descriptor?? [ 348.600867][ T5831] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 348.706040][ T5881] usb 6-1: device descriptor read/64, error -71 [ 348.945837][ T5881] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 349.090260][ T5881] usb 6-1: device descriptor read/64, error -71 [ 349.216108][ T5881] usb usb6-port1: attempt power cycle [ 349.325846][ T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 349.452937][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 349.507569][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.612894][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.624041][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 349.637814][ T24] usb 2-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 349.647251][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.655943][ T5881] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 349.666927][ T24] usb 2-1: config 0 descriptor?? [ 349.686606][ T5881] usb 6-1: device descriptor read/8, error -71 [ 349.881720][ T9175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.890627][ T9175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.925960][ T5881] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 349.980938][ T5881] usb 6-1: device descriptor read/8, error -71 [ 350.096223][ T5881] usb usb6-port1: unable to enumerate USB device [ 350.158048][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 350.164179][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 350.205702][ T24] usb 2-1: USB disconnect, device number 70 [ 351.213570][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 351.285817][ T5882] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 351.482978][ T5882] usb 3-1: config 0 has no interfaces? [ 351.499390][ T5882] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 351.521839][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.582824][ T5882] usb 3-1: Product: syz [ 351.674396][ T5831] gspca_zc3xx: reg_r err -71 [ 351.700986][ T5882] usb 3-1: Manufacturer: syz [ 351.706251][ T5831] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 351.731594][ T5882] usb 3-1: SerialNumber: syz [ 351.799800][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 351.799816][ T30] audit: type=1326 audit(1746960510.273:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.5.960" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba36d8e969 code=0x0 [ 351.838643][ T5882] usb 3-1: config 0 descriptor?? [ 351.843833][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.961'. [ 351.844017][ T5831] usb 1-1: USB disconnect, device number 71 [ 352.137289][ T9197] xt_TCPMSS: Only works on TCP SYN packets [ 352.624933][ T9222] macsec1: entered promiscuous mode [ 352.625804][ T5831] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 352.668515][ T9222] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 352.755497][ T9222] macsec1: entered allmulticast mode [ 352.765859][ T5831] usb 1-1: device descriptor read/64, error -71 [ 352.835732][ T9222] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 353.016681][ T5831] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 353.155763][ T5831] usb 1-1: device descriptor read/64, error -71 [ 353.266363][ T5831] usb usb1-port1: attempt power cycle [ 353.626667][ T5831] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 353.656449][ T5831] usb 1-1: device descriptor read/8, error -71 [ 353.796134][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 353.844510][ T9239] xt_TPROXY: Can be used only with -p tcp or -p udp [ 353.925891][ T5831] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 353.984106][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.997937][ T5831] usb 1-1: device descriptor read/8, error -71 [ 354.004441][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.052615][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 354.063220][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 354.080722][ T24] usb 6-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 354.090748][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.106117][ T5831] usb usb1-port1: unable to enumerate USB device [ 354.120568][ T24] usb 6-1: config 0 descriptor?? [ 354.350181][ T5877] usb 3-1: USB disconnect, device number 76 [ 354.378180][ T9237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.388243][ T9237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.813859][ T5903] IPVS: starting estimator thread 0... [ 354.826573][ T9243] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.850292][ T9242] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.946880][ T9244] IPVS: using max 27 ests per chain, 64800 per kthread [ 355.041454][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 355.059560][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 355.098557][ T24] usb 6-1: USB disconnect, device number 16 [ 355.274928][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.975'. [ 355.306040][ T5831] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 355.454306][ T9265] netlink: 60 bytes leftover after parsing attributes in process `syz.2.977'. [ 355.487844][ T5831] usb 4-1: config 4 has an invalid interface number: 9 but max is 2 [ 355.496645][ T5831] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 355.527155][ T5831] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 355.537925][ T5831] usb 4-1: config 4 has an invalid interface number: 60 but max is 2 [ 355.555990][ T5831] usb 4-1: config 4 has an invalid interface number: 48 but max is 2 [ 355.564185][ T5831] usb 4-1: config 4 has an invalid interface number: 4 but max is 2 [ 355.580913][ T5831] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 355.606142][ T5831] usb 4-1: config 4 has an invalid interface number: 240 but max is 2 [ 355.635225][ T5831] usb 4-1: config 4 has 5 interfaces, different from the descriptor's value: 3 [ 355.695450][ T5831] usb 4-1: config 4 has no interface number 0 [ 355.728731][ T5831] usb 4-1: config 4 has no interface number 1 [ 355.735226][ T5831] usb 4-1: config 4 has no interface number 2 [ 355.754087][ T5831] usb 4-1: config 4 has no interface number 3 [ 355.792258][ T5831] usb 4-1: config 4 interface 9 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 355.854034][ T5831] usb 4-1: config 4 interface 9 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 355.877431][ T9274] FAULT_INJECTION: forcing a failure. [ 355.877431][ T9274] name failslab, interval 1, probability 0, space 0, times 0 [ 355.891871][ T9274] CPU: 1 UID: 0 PID: 9274 Comm: syz.5.981 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 355.891899][ T9274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.891912][ T9274] Call Trace: [ 355.891919][ T9274] [ 355.891927][ T9274] dump_stack_lvl+0x189/0x250 [ 355.891963][ T9274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.891991][ T9274] ? __pfx__printk+0x10/0x10 [ 355.892015][ T9274] ? __pfx___might_resched+0x10/0x10 [ 355.892037][ T9274] should_fail_ex+0x414/0x560 [ 355.892060][ T9274] should_failslab+0xa8/0x100 [ 355.892087][ T9274] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 355.892111][ T9274] ? __sys_sendto+0x3bd/0x520 [ 355.892133][ T9274] ? __alloc_skb+0x112/0x2d0 [ 355.892152][ T9274] ? do_syscall_64+0xf6/0x210 [ 355.892181][ T9274] __alloc_skb+0x112/0x2d0 [ 355.892208][ T9274] __ip6_append_data+0x2b5a/0x3dc0 [ 355.892260][ T9274] ? __lock_acquire+0xaac/0xd20 [ 355.892287][ T9274] ? __pfx_raw6_getfrag+0x10/0x10 [ 355.892330][ T9274] ? __pfx___ip6_append_data+0x10/0x10 [ 355.892362][ T9274] ip6_append_data+0x1c4/0x380 [ 355.892388][ T9274] ? __pfx_raw6_getfrag+0x10/0x10 [ 355.892415][ T9274] rawv6_sendmsg+0x1245/0x17f0 [ 355.892451][ T9274] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 355.892484][ T9274] ? __lock_acquire+0xaac/0xd20 [ 355.892520][ T9274] ? __pfx_aa_sk_perm+0x10/0x10 [ 355.892540][ T9274] ? __fget_files+0x2a/0x420 [ 355.892562][ T9274] ? sock_rps_record_flow+0x19/0x400 [ 355.892591][ T9274] ? inet_sendmsg+0x2f4/0x370 [ 355.892615][ T9274] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.892638][ T9274] __sock_sendmsg+0x19c/0x270 [ 355.892659][ T9274] __sys_sendto+0x3bd/0x520 [ 355.892683][ T9274] ? __pfx___sys_sendto+0x10/0x10 [ 355.892702][ T9274] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 355.892738][ T9274] ? __fget_files+0x3a0/0x420 [ 355.892773][ T9274] ? ksys_write+0x1f0/0x250 [ 355.892817][ T9274] ? rcu_is_watching+0x15/0xb0 [ 355.892879][ T9274] __x64_sys_sendto+0xde/0x100 [ 355.892908][ T9274] do_syscall_64+0xf6/0x210 [ 355.892932][ T9274] ? clear_bhb_loop+0x45/0xa0 [ 355.892956][ T9274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.892975][ T9274] RIP: 0033:0x7fba36d8e969 [ 355.892992][ T9274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.893009][ T9274] RSP: 002b:00007fba37be3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 355.893031][ T9274] RAX: ffffffffffffffda RBX: 00007fba36fb5fa0 RCX: 00007fba36d8e969 [ 355.893046][ T9274] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000003 [ 355.893058][ T9274] RBP: 00007fba37be3090 R08: 0000000000000000 R09: fffffffffffffdfd [ 355.893071][ T9274] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 355.893083][ T9274] R13: 0000000000000000 R14: 00007fba36fb5fa0 R15: 00007fba370dfa28 [ 355.893113][ T9274] [ 355.931254][ T5831] usb 4-1: config 4 interface 9 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 355.985887][ T24] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 356.156038][ T5831] usb 4-1: config 4 interface 9 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 356.229565][ T5831] usb 4-1: config 4 interface 9 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 356.242232][ T5831] usb 4-1: config 4 interface 60 altsetting 64 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 356.275972][ T5831] usb 4-1: config 4 interface 60 altsetting 64 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 356.357501][ T5831] usb 4-1: config 4 interface 60 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 356.395810][ T5831] usb 4-1: config 4 interface 48 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 356.422697][ T9276] kvm: pic: non byte read [ 356.428927][ T9276] kvm: pic: level sensitive irq not supported [ 356.428995][ T9276] kvm: pic: non byte read [ 356.456199][ T9276] kvm: pic: level sensitive irq not supported [ 356.456271][ T9276] kvm: pic: non byte read [ 356.456866][ T5831] usb 4-1: too many endpoints for config 4 interface 4 altsetting 4: 245, using maximum allowed: 30 [ 356.507585][ T5831] usb 4-1: config 4 interface 4 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 356.518874][ T9276] kvm: pic: level sensitive irq not supported [ 356.518939][ T9276] kvm: pic: non byte read [ 356.530106][ T5831] usb 4-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 356.548015][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.571234][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 356.585870][ T5831] usb 4-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 356.620343][ T5831] usb 4-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 356.639475][ T5831] usb 4-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 356.646749][ T24] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 356.666184][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=86a1, bcdDevice= 0.40 [ 356.675587][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.683744][ T24] usb 3-1: Product: syz [ 356.689116][ T24] usb 3-1: Manufacturer: syz [ 356.693750][ T24] usb 3-1: SerialNumber: syz [ 356.709448][ T5831] usb 4-1: config 4 interface 4 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 356.741727][ T5831] usb 4-1: config 4 interface 4 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 356.796482][ T5831] usb 4-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 356.820077][ T5831] usb 4-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 356.850374][ T5831] usb 4-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 356.895756][ T5831] usb 4-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 356.958204][ T5831] usb 4-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 356.976234][ T5831] usb 4-1: config 4 interface 4 altsetting 4 has 12 endpoint descriptors, different from the interface descriptor's value: 245 [ 357.012502][ T5831] usb 4-1: too many endpoints for config 4 interface 240 altsetting 73: 38, using maximum allowed: 30 [ 357.046295][ T5831] usb 4-1: config 4 interface 240 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 357.064244][ T5831] usb 4-1: config 4 interface 9 has no altsetting 0 [ 357.071741][ T5831] usb 4-1: config 4 interface 60 has no altsetting 0 [ 357.090128][ T5831] usb 4-1: config 4 interface 48 has no altsetting 0 [ 357.098598][ T5831] usb 4-1: config 4 interface 4 has no altsetting 0 [ 357.105261][ T5831] usb 4-1: config 4 interface 240 has no altsetting 0 [ 357.144935][ T5831] usb 4-1: string descriptor 0 read error: -22 [ 357.151992][ T5831] usb 4-1: Dual-Role OTG device on HNP port [ 357.167897][ T5831] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2710, bcdDevice=75.d7 [ 357.186616][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.205306][ T9294] netlink: 'syz.0.988': attribute type 3 has an invalid length. [ 357.305986][ T5877] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 357.456127][ T5877] usb 6-1: Using ep0 maxpacket: 32 [ 357.466569][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.473545][ T5877] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.477694][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.497313][ T9248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.514461][ T5831] usb 4-1: USB disconnect, device number 65 [ 357.593562][ T5877] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.606908][ T5877] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 357.620685][ T5877] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 357.629194][ T5877] usb 6-1: Product: syz [ 357.633507][ T5877] usb 6-1: Manufacturer: syz [ 357.651946][ T5877] hub 6-1:4.0: USB hub found [ 357.746376][ T24] cdc_ncm 3-1:1.0: bind() failure [ 357.764028][ T24] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 357.773207][ T24] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 357.788670][ T24] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 357.822906][ T24] usb 3-1: USB disconnect, device number 77 [ 357.850343][ T5877] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 358.166684][ T5882] usb 6-1: USB disconnect, device number 17 [ 358.195774][ T5831] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 358.378911][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.396931][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.414758][ T5831] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 358.428796][ T5831] usb 2-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 358.455952][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.465867][ T5882] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 358.490315][ T5831] usb 2-1: config 0 descriptor?? [ 358.645719][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 358.658562][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 358.669714][ T5882] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 358.696254][ T5882] usb 4-1: config 0 has no interface number 0 [ 358.715002][ T5882] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= a.3c [ 358.735329][ T9299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.744637][ T9299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.763744][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.776774][ T5882] usb 4-1: Product: syz [ 358.781053][ T5882] usb 4-1: Manufacturer: syz [ 358.796547][ T5882] usb 4-1: SerialNumber: syz [ 358.807217][ T5882] usb 4-1: config 0 descriptor?? [ 358.825869][ T5882] ftdi_sio 4-1:0.29: FTDI USB Serial Device converter detected [ 358.857018][ T5882] ftdi_sio ttyUSB0: unknown device type: 0xa3c [ 358.888901][ T9320] netlink: 'syz.0.999': attribute type 3 has an invalid length. [ 358.967482][ T5831] usbhid 2-1:0.0: can't add hid device: -71 [ 358.973618][ T5831] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 359.000920][ T5831] usb 2-1: USB disconnect, device number 71 [ 359.019587][ T5882] usb 4-1: USB disconnect, device number 66 [ 359.029226][ T5882] ftdi_sio 4-1:0.29: device disconnected [ 359.036553][ T5880] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 359.205734][ T5880] usb 6-1: Using ep0 maxpacket: 16 [ 359.213278][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 359.224616][ T5880] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 359.235145][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 359.244963][ T5880] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 359.258293][ T5880] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 359.268371][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.276527][ T5880] usb 6-1: Product: syz [ 359.280861][ T5880] usb 6-1: Manufacturer: syz [ 359.285467][ T5880] usb 6-1: SerialNumber: syz [ 359.292524][ T5880] usb 6-1: config 0 descriptor?? [ 359.298478][ T9317] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 359.310937][ T5880] port100 6-1:0.0: NFC: Could not get supported command types [ 359.522844][ T9317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.552828][ T5882] usb 6-1: USB disconnect, device number 18 [ 359.676364][ T919] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 359.806177][ T5880] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 359.858547][ T919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.889476][ T919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.909749][ T919] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 359.927470][ T919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.958475][ T919] usb 3-1: config 0 descriptor?? [ 360.004399][ T5880] usb 2-1: config 4 has an invalid interface number: 9 but max is 2 [ 360.013463][ T5880] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 360.022570][ T5880] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 360.032342][ T5880] usb 2-1: config 4 has an invalid interface number: 60 but max is 2 [ 360.040550][ T5880] usb 2-1: config 4 has an invalid interface number: 48 but max is 2 [ 360.050802][ T5880] usb 2-1: config 4 has an invalid interface number: 4 but max is 2 [ 360.059121][ T5880] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 360.069951][ T5880] usb 2-1: config 4 has an invalid interface number: 240 but max is 2 [ 360.078859][ T5880] usb 2-1: config 4 has 5 interfaces, different from the descriptor's value: 3 [ 360.088327][ T5880] usb 2-1: config 4 has no interface number 0 [ 360.094458][ T5880] usb 2-1: config 4 has no interface number 1 [ 360.101481][ T5880] usb 2-1: config 4 has no interface number 2 [ 360.107866][ T5880] usb 2-1: config 4 has no interface number 3 [ 360.114207][ T5880] usb 2-1: config 4 interface 9 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 360.125547][ T5880] usb 2-1: config 4 interface 9 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 360.183665][ T5880] usb 2-1: config 4 interface 9 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 360.201890][ T5880] usb 2-1: config 4 interface 9 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 360.212944][ T5880] usb 2-1: config 4 interface 9 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 360.224656][ T5880] usb 2-1: config 4 interface 60 altsetting 64 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 360.252759][ T5880] usb 2-1: config 4 interface 60 altsetting 64 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 360.264380][ T5880] usb 2-1: config 4 interface 60 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 360.276057][ T5880] usb 2-1: config 4 interface 48 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 360.290426][ T5880] usb 2-1: too many endpoints for config 4 interface 4 altsetting 4: 245, using maximum allowed: 30 [ 360.305293][ T5877] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 360.326708][ T5880] usb 2-1: config 4 interface 4 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 360.341626][ T5880] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 360.353826][ T5880] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 360.375080][ T5880] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 360.390024][ T5880] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 360.413978][ T919] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 360.441742][ T5880] usb 2-1: config 4 interface 4 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 360.462050][ T5880] usb 2-1: config 4 interface 4 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 360.466203][ T919] hid-thrustmaster 0003:044F:B65D.0022: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 360.475777][ T5882] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 360.513325][ T919] hid-thrustmaster 0003:044F:B65D.0022: Wrong number of endpoints? [ 360.539562][ T5880] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 360.549059][ T5877] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 360.568751][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.587173][ T5880] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 360.595943][ T5877] usb 4-1: Product: syz [ 360.612412][ T5877] usb 4-1: Manufacturer: syz [ 360.624742][ C1] hid-thrustmaster 0003:044F:B65D.0022: URB to get model id failed with error -71 [ 360.625200][ T5831] usb 3-1: USB disconnect, device number 78 [ 360.653132][ T5877] usb 4-1: SerialNumber: syz [ 360.670435][ T5877] usb 4-1: config 0 descriptor?? [ 360.671510][ T5880] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 360.695814][ T5882] usb 6-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 360.736956][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.765292][ T5880] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 360.786522][ T5882] usb 6-1: config 0 descriptor?? [ 360.799202][ T5882] pwc: Creative Labs Webcam Pro Ex detected. [ 360.811012][ T9346] fido_id[9346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 360.831223][ T5880] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 360.848640][ T5880] usb 2-1: config 4 interface 4 altsetting 4 has 12 endpoint descriptors, different from the interface descriptor's value: 245 [ 360.874881][ T5880] usb 2-1: too many endpoints for config 4 interface 240 altsetting 73: 38, using maximum allowed: 30 [ 360.909282][ T5877] hso 4-1:0.0: Failed to find INT IN ep [ 360.915973][ T5880] usb 2-1: config 4 interface 240 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 360.929763][ T5877] usb-storage 4-1:0.0: USB Mass Storage device detected [ 360.958748][ T5880] usb 2-1: config 4 interface 9 has no altsetting 0 [ 360.979697][ T5880] usb 2-1: config 4 interface 60 has no altsetting 0 [ 360.995706][ T5880] usb 2-1: config 4 interface 48 has no altsetting 0 [ 361.011091][ T5880] usb 2-1: config 4 interface 4 has no altsetting 0 [ 361.035853][ T5880] usb 2-1: config 4 interface 240 has no altsetting 0 [ 361.053893][ T5880] usb 2-1: string descriptor 0 read error: -22 [ 361.066298][ T5880] usb 2-1: Dual-Role OTG device on HNP port [ 361.072666][ T5880] usb 2-1: New USB device found, idVendor=eb1a, idProduct=2710, bcdDevice=75.d7 [ 361.081944][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.122392][ T9338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.156227][ T9338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.217853][ T5877] usb 4-1: USB disconnect, device number 67 [ 361.562599][ T9354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.608529][ T5882] pwc: Failed to set LED on/off time (-71) [ 361.615035][ T5882] pwc: send_video_command error -71 [ 361.615302][ T9354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.636104][ T5882] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 361.679135][ T5882] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 361.708385][ T9328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.737591][ T5882] usb 6-1: USB disconnect, device number 19 [ 361.747796][ T5877] usb 2-1: USB disconnect, device number 72 [ 362.086047][ T5882] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 362.185947][ T919] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 362.267677][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.284796][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.306141][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 362.326035][ T5882] usb 6-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 362.335238][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.348774][ T919] usb 4-1: Using ep0 maxpacket: 32 [ 362.366378][ T919] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 362.395796][ T5882] usb 6-1: config 0 descriptor?? [ 362.401949][ T919] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 362.407216][ T9364] netlink: 'syz.1.1014': attribute type 3 has an invalid length. [ 362.419960][ T919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.445058][ T919] usb 4-1: Product: syz [ 362.454325][ T919] usb 4-1: Manufacturer: syz [ 362.466005][ T919] usb 4-1: SerialNumber: syz [ 362.488912][ T919] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input37 [ 362.672682][ T9357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.684096][ T9357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.956237][ T5882] usbhid 6-1:0.0: can't add hid device: -71 [ 362.962819][ T5882] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 362.994134][ T5882] usb 6-1: USB disconnect, device number 20 [ 363.076007][ T9372] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 363.086877][ T9372] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 363.585920][ T5882] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 363.705952][ T5878] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 363.806634][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 363.833825][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 363.857660][ T5882] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 363.897387][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 363.905752][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 363.924055][ T5878] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 363.949011][ T5882] usb 2-1: Manufacturer: syz [ 363.961396][ T5878] usb 3-1: config 0 has no interface number 0 [ 363.971389][ T5882] usb 2-1: SerialNumber: syz [ 363.991818][ T5878] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 364.008312][ T5882] usb 2-1: config 0 descriptor?? [ 364.020433][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.031248][ T5878] usb 3-1: Product: syz [ 364.039941][ T5882] em28xx 2-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 364.049392][ T5878] usb 3-1: Manufacturer: syz [ 364.055196][ T5882] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 364.063848][ T5878] usb 3-1: SerialNumber: syz [ 364.084870][ T5878] usb 3-1: config 0 descriptor?? [ 364.260770][ T9376] fuse: Unknown parameter 'fd0x0000000000000002' [ 364.296590][ T5882] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 364.335878][ T5831] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 364.352475][ T5878] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 364.364569][ T5878] usb 3-1: No streaming interface found for terminal 6. [ 364.379096][ T5882] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 364.416113][ T5878] usb 3-1: USB disconnect, device number 79 [ 364.429454][ T5882] em28xx 2-1:0.0: board has no eeprom [ 364.508106][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.518359][ T5882] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 364.542732][ T5882] em28xx 2-1:0.0: dvb set to bulk mode. [ 364.549353][ T5831] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.563672][ T5881] em28xx 2-1:0.0: Binding DVB extension [ 364.575411][ T5882] usb 2-1: USB disconnect, device number 73 [ 364.595786][ T5831] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 364.604890][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.627954][ T5882] em28xx 2-1:0.0: Disconnecting em28xx [ 364.649950][ T5831] usb 6-1: config 0 descriptor?? [ 364.673147][ T5881] em28xx 2-1:0.0: Registering input extension [ 364.681618][ T5882] em28xx 2-1:0.0: Closing input extension [ 364.719009][ T5882] em28xx 2-1:0.0: Freeing device [ 364.755848][ T5903] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 364.914971][ T5186] bcm5974 4-1:1.0: could not read from device [ 364.922069][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 364.938065][ T5903] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 364.947864][ T5903] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 364.961707][ T919] usb 4-1: USB disconnect, device number 68 [ 364.968788][ T5186] bcm5974 4-1:1.0: could not read from device [ 364.985393][ T5903] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.016505][ T5903] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 365.026943][ T5882] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 365.037382][ T5903] usb 1-1: config 1 has no interface number 0 [ 365.044222][ T5903] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 365.074660][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.110376][ T5831] megaworld 0003:07B5:0312.0023: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.5-1/input0 [ 365.145907][ T5831] megaworld 0003:07B5:0312.0023: no inputs found [ 365.148505][ T5903] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 365.225875][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 365.248876][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 365.292962][ T5831] usb 6-1: USB disconnect, device number 21 [ 365.311397][ T5882] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 365.394701][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 365.402203][ T5903] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 365.415134][ T9397] fido_id[9397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 365.429759][ T5882] usb 2-1: Manufacturer: 倊 [ 365.431797][ T5903] snd_usb_pod 1-1:1.1: invalid control EP [ 365.434365][ T5882] usb 2-1: SerialNumber: 鏸ޗ풥鷅䝚ⅆ쇀궓㖱칼㷣퓴컼臖瘏ᒽᚣ⃇☊얛調꽞葥냃۲ⱆ뫳坡됓ﲐᎵO薏ф롃ᇥ崲⊏ᄷ斄霫曋헩犛拡ꡥ䆙ꛣﾉ쯵䏯訆팣ぢ饯ꄹ鳺鄑学ὢԝꝇ눛褷鵅彣╁㱂⵷䮞힪鹔鏴쒬㭚뜶⟡ྌ驎隹吹겜䘤扼劉⢉ [ 365.471072][ T5903] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 365.732579][ T5903] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 365.747012][ T5903] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 365.765770][ T5882] usb 2-1: config 0 descriptor?? [ 365.775899][ T5903] usb 1-1: USB disconnect, device number 76 [ 365.791601][ T5882] em28xx 2-1:0.0: New device 倊 @ 480 Mbps (2040:0264, interface 0, class 0) [ 365.832724][ T919] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 365.869307][ T5882] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 366.034995][ T919] usb 4-1: Using ep0 maxpacket: 32 [ 366.048802][ T9408] netlink: 'syz.5.1029': attribute type 3 has an invalid length. [ 366.072022][ T919] usb 4-1: config 0 has no interfaces? [ 366.079033][ T5882] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 366.088781][ T919] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 366.101651][ T919] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 366.109968][ T919] usb 4-1: Product: syz [ 366.114359][ T919] usb 4-1: Manufacturer: syz [ 366.130408][ T919] usb 4-1: config 0 descriptor?? [ 366.150517][ T5882] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 366.165980][ T5882] em28xx 2-1:0.0: board has no eeprom [ 366.265797][ T5882] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 366.273823][ T5882] em28xx 2-1:0.0: dvb set to bulk mode. [ 366.280337][ T5831] em28xx 2-1:0.0: Binding DVB extension [ 366.299088][ T5882] usb 2-1: USB disconnect, device number 74 [ 366.306693][ T5882] em28xx 2-1:0.0: Disconnecting em28xx [ 366.621344][ T5831] em28xx 2-1:0.0: Registering input extension [ 366.661817][ T5882] em28xx 2-1:0.0: Closing input extension [ 366.723228][ T5882] em28xx 2-1:0.0: Freeing device [ 366.736139][ T919] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 366.750472][ T9421] syz.1.1034 (9421): /proc/9419/oom_adj is deprecated, please use /proc/9419/oom_score_adj instead. [ 366.897732][ T919] usb 1-1: config 0 has no interfaces? [ 366.908680][ T9421] input: syz0 as /devices/virtual/input/input40 [ 366.955187][ T919] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 366.995694][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.027464][ T919] usb 1-1: Product: syz [ 367.035265][ T919] usb 1-1: Manufacturer: syz [ 367.044721][ T919] usb 1-1: SerialNumber: syz [ 367.163482][ T919] usb 1-1: config 0 descriptor?? [ 367.215727][ T5882] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 367.376645][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 367.386032][ T5903] usb 1-1: USB disconnect, device number 77 [ 367.399146][ T5882] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 367.418296][ T5882] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 367.454983][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.463359][ T5882] usb 2-1: Product: syz [ 367.468032][ T5882] usb 2-1: Manufacturer: syz [ 367.473088][ T5882] usb 2-1: SerialNumber: syz [ 367.481384][ T5882] usb 2-1: config 0 descriptor?? [ 367.486520][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 367.500898][ T9422] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 367.510515][ T5882] hub 2-1:0.0: bad descriptor, ignoring hub [ 367.522736][ T5882] hub 2-1:0.0: probe with driver hub failed with error -5 [ 367.535955][ T919] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 367.547787][ T5882] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input41 [ 367.643553][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 367.652517][ T24] usb 6-1: can't read configurations, error -61 [ 367.686011][ T919] usb 3-1: Using ep0 maxpacket: 32 [ 367.719363][ T919] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 367.765503][ T919] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 367.775362][ T919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.794445][ T919] usb 3-1: Product: syz [ 367.804125][ T919] usb 3-1: Manufacturer: syz [ 367.809782][ T919] usb 3-1: SerialNumber: syz [ 367.830760][ T5903] usb 2-1: USB disconnect, device number 75 [ 367.830751][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 367.849820][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 367.894160][ T919] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input42 [ 368.010188][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 368.018399][ T24] usb 6-1: can't read configurations, error -61 [ 368.025270][ T24] usb usb6-port1: attempt power cycle [ 368.376385][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 368.421401][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 368.429329][ T24] usb 6-1: can't read configurations, error -61 [ 368.565822][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 368.588428][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 368.596413][ T24] usb 6-1: can't read configurations, error -61 [ 368.603126][ T24] usb usb6-port1: unable to enumerate USB device [ 368.924072][ T5903] usb 4-1: USB disconnect, device number 69 [ 369.115796][ T24] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 369.276755][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 369.284137][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 369.298377][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 369.307731][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.316079][ T24] usb 2-1: Product: syz [ 369.320317][ T24] usb 2-1: Manufacturer: syz [ 369.324958][ T24] usb 2-1: SerialNumber: syz [ 369.332973][ T24] usb 2-1: config 0 descriptor?? [ 369.342579][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 370.198813][ T5186] bcm5974 3-1:1.0: could not read from device [ 370.211080][ T5186] bcm5974 3-1:1.0: could not read from device [ 370.229588][ T919] usb 3-1: USB disconnect, device number 80 [ 370.242511][ T5186] bcm5974 3-1:1.0: could not read from device [ 371.662715][ T9455] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1046'. [ 372.035453][ T9462] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 372.054032][ T9462] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 372.206604][ T5903] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 372.383930][ T24] gspca_zc3xx: reg_r err -71 [ 372.398415][ T24] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 372.417325][ T24] usb 2-1: USB disconnect, device number 76 [ 372.455817][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 372.809162][ T9476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.865306][ T9476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.285407][ T9478] syz.1.1050 (9478): drop_caches: 2 [ 374.376123][ T24] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 374.506479][ T9484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.546065][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 374.557886][ T24] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 374.567641][ T9484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.578663][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.595464][ T24] usb 1-1: Product: syz [ 374.601990][ T24] usb 1-1: Manufacturer: syz [ 374.607177][ T9484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.617361][ T24] usb 1-1: SerialNumber: syz [ 374.633128][ T24] usb 1-1: config 0 descriptor?? [ 374.644692][ T9484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.659831][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 374.756200][ T47] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 374.912085][ T5903] usb 6-1: unable to get BOS descriptor or descriptor too short [ 374.928646][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 374.946002][ T5903] usb 6-1: no configurations [ 374.954289][ T5903] usb 6-1: can't read configurations, error -22 [ 374.966618][ T47] usb 4-1: config 0 has an invalid interface number: 194 but max is 0 [ 374.991528][ T47] usb 4-1: config 0 has no interface number 0 [ 375.001211][ T47] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 375.013256][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.022209][ T5877] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 375.042489][ T47] usb 4-1: Product: syz [ 375.046943][ T47] usb 4-1: Manufacturer: syz [ 375.051622][ T47] usb 4-1: SerialNumber: syz [ 375.066608][ T47] usb 4-1: config 0 descriptor?? [ 375.076826][ T47] cypress_cy7c63 4-1:0.194: Cypress CY7C63xxx device now attached [ 375.197880][ T5877] usb 2-1: config 4 has an invalid interface number: 9 but max is 2 [ 375.206383][ T5877] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 375.215162][ T5877] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 375.245740][ T5877] usb 2-1: config 4 has an invalid interface number: 60 but max is 2 [ 375.253916][ T5877] usb 2-1: config 4 has an invalid interface number: 48 but max is 2 [ 375.285892][ T5877] usb 2-1: config 4 has an invalid interface number: 4 but max is 2 [ 375.293977][ T5877] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 375.295922][ T5882] usb 4-1: USB disconnect, device number 70 [ 375.310975][ T5877] usb 2-1: config 4 has an invalid interface number: 240 but max is 2 [ 375.322722][ T5877] usb 2-1: config 4 has 5 interfaces, different from the descriptor's value: 3 [ 375.326201][ T5882] cypress_cy7c63 4-1:0.194: Cypress CY7C63xxx device now disconnected [ 375.333284][ T5877] usb 2-1: config 4 has no interface number 0 [ 375.350688][ T5877] usb 2-1: config 4 has no interface number 1 [ 375.358347][ T5877] usb 2-1: config 4 has no interface number 2 [ 375.364906][ T5877] usb 2-1: config 4 has no interface number 3 [ 375.371558][ T9497] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1057'. [ 375.383600][ T5877] usb 2-1: config 4 interface 9 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 375.394879][ T5877] usb 2-1: config 4 interface 9 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 375.422568][ T5877] usb 2-1: config 4 interface 9 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 375.437932][ T5877] usb 2-1: config 4 interface 9 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 375.450584][ T5877] usb 2-1: config 4 interface 9 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 375.469631][ T5877] usb 2-1: config 4 interface 60 altsetting 64 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 375.481936][ T5877] usb 2-1: config 4 interface 60 altsetting 64 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 375.494914][ T5877] usb 2-1: config 4 interface 60 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 375.511092][ T5877] usb 2-1: config 4 interface 48 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 375.524379][ T24] gspca_ov534_9: reg_w failed -71 [ 375.530126][ T5877] usb 2-1: too many endpoints for config 4 interface 4 altsetting 4: 245, using maximum allowed: 30 [ 375.541095][ T5877] usb 2-1: config 4 interface 4 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 375.552020][ T5877] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 375.563292][ T5877] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 375.574305][ T5877] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 375.585010][ T5877] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 375.596584][ T5877] usb 2-1: config 4 interface 4 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 375.607732][ T5877] usb 2-1: config 4 interface 4 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 375.618639][ T5877] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 375.630534][ T5877] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 375.641564][ T5877] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 375.652599][ T5877] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 375.663418][ T5877] usb 2-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 375.674266][ T5877] usb 2-1: config 4 interface 4 altsetting 4 has 12 endpoint descriptors, different from the interface descriptor's value: 245 [ 375.688055][ T5877] usb 2-1: too many endpoints for config 4 interface 240 altsetting 73: 38, using maximum allowed: 30 [ 375.699353][ T5877] usb 2-1: config 4 interface 240 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 375.712874][ T5877] usb 2-1: config 4 interface 9 has no altsetting 0 [ 375.719554][ T5877] usb 2-1: config 4 interface 60 has no altsetting 0 [ 375.726698][ T5877] usb 2-1: config 4 interface 48 has no altsetting 0 [ 375.733411][ T5877] usb 2-1: config 4 interface 4 has no altsetting 0 [ 375.740279][ T5877] usb 2-1: config 4 interface 240 has no altsetting 0 [ 375.747894][ T5877] usb 2-1: string descriptor 0 read error: -22 [ 375.755787][ T5877] usb 2-1: Dual-Role OTG device on HNP port [ 375.766543][ T5877] usb 2-1: New USB device found, idVendor=eb1a, idProduct=2710, bcdDevice=75.d7 [ 375.775730][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.826417][ T5903] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 375.834860][ T24] gspca_ov534_9: Unknown sensor 0000 [ 375.834962][ T24] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 375.886999][ T24] usb 1-1: USB disconnect, device number 78 [ 376.003205][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 376.035943][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.051361][ T9508] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1062'. [ 376.066516][ T5903] usb 6-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 376.086546][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.107644][ T5903] usb 6-1: config 0 descriptor?? [ 376.154200][ T9488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.192437][ T9488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.200053][ T9512] netlink: 'syz.0.1063': attribute type 4 has an invalid length. [ 376.212185][ T9488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.235069][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1054'. [ 376.260218][ T24] usb 2-1: USB disconnect, device number 77 [ 376.673384][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1058'. [ 377.045558][ T5903] hid-generic 0003:1E5E:0313.0024: hidraw0: USB HID v0.00 Device [HID 1e5e:0313] on usb-dummy_hcd.5-1/input0 [ 377.415906][ T5882] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 377.575858][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 377.586654][ T5882] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 377.597289][ T5882] usb 3-1: config 0 has no interface number 0 [ 377.609145][ T5882] usb 3-1: config 0 interface 12 has no altsetting 0 [ 377.630739][ T5882] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 377.643350][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.667763][ T5882] usb 3-1: Product: syz [ 377.680027][ T5882] usb 3-1: Manufacturer: syz [ 377.690447][ T5882] usb 3-1: SerialNumber: syz [ 377.710865][ T5882] usb 3-1: config 0 descriptor?? [ 377.869383][ T9531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1068'. [ 378.168168][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1070'. [ 378.416158][ T5877] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 378.560501][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.580696][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.758497][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 378.777104][ T5877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 378.795902][ T5877] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 378.850341][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.876826][ T5877] usb 4-1: config 0 descriptor?? [ 378.937523][ T5878] usb 6-1: USB disconnect, device number 27 [ 379.123242][ T9548] ======================================================= [ 379.123242][ T9548] WARNING: The mand mount option has been deprecated and [ 379.123242][ T9548] and is ignored by this kernel. Remove the mand [ 379.123242][ T9548] option from the mount to silence this warning. [ 379.123242][ T9548] ======================================================= [ 379.158127][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.196160][ T5882] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 379.209814][ T5882] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 379.224704][ T5882] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 379.243564][ T5882] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 379.279318][ T5882] usb 3-1: USB disconnect, device number 81 [ 379.393967][ T9551] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1074'. [ 379.509497][ T5877] usb 4-1: USB disconnect, device number 71 [ 379.885279][ T30] audit: type=1326 audit(1746960538.353:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.5.1078" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba36d8e969 code=0x0 [ 380.035756][ T24] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 380.245765][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 380.302376][ T24] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 380.310923][ T24] usb 1-1: config 0 has no interface number 0 [ 380.324787][ T24] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 380.336336][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.372235][ T24] usb 1-1: Product: syz [ 380.378684][ T24] usb 1-1: Manufacturer: syz [ 380.384147][ T24] usb 1-1: SerialNumber: syz [ 380.495448][ T24] usb 1-1: config 0 descriptor?? [ 381.799096][ T9588] input: syz0 as /devices/virtual/input/input43 [ 381.865945][ T5877] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 382.026574][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 382.057517][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 382.069415][ T5877] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 382.104339][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 382.117333][ T5903] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 382.157575][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 382.177912][ T5877] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 382.205840][ T24] usb 1-1: USB disconnect, device number 79 [ 382.227029][ T5877] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 382.252021][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.296293][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 382.346313][ T5877] usb 2-1: Product: syz [ 382.350555][ T5877] usb 2-1: Manufacturer: syz [ 382.351724][ T9592] netlink: 424 bytes leftover after parsing attributes in process `syz.2.1086'. [ 382.390149][ T5903] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 382.406457][ T5877] usb 2-1: SerialNumber: syz [ 382.429688][ T5903] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 382.440735][ T5877] usb 2-1: config 0 descriptor?? [ 382.447396][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.459556][ T9586] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 382.475867][ T5903] usb 6-1: Product: syz [ 382.482374][ T5903] usb 6-1: Manufacturer: syz [ 382.487464][ T5877] port100 2-1:0.0: NFC: Could not get supported command types [ 382.495802][ T5903] usb 6-1: SerialNumber: syz [ 382.506301][ T5903] usb 6-1: config 0 descriptor?? [ 382.516175][ T9588] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 382.525180][ T5903] hub 6-1:0.0: bad descriptor, ignoring hub [ 382.546834][ T5903] hub 6-1:0.0: probe with driver hub failed with error -5 [ 382.582376][ T5903] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input44 [ 382.728216][ T5878] usb 2-1: USB disconnect, device number 78 [ 382.820576][ T5903] usb 6-1: USB disconnect, device number 28 [ 382.826673][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 382.957733][ T9603] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1090'. [ 383.010027][ T9603] netlink: zone id is out of range [ 383.015237][ T9603] netlink: get zone limit has 8 unknown bytes [ 383.785086][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1094'. [ 384.725906][ T5903] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 384.887454][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.916275][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.955966][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 384.969293][ T5903] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.980248][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.994143][ T5903] usb 4-1: config 0 descriptor?? [ 385.426885][ T5903] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 385.507887][ T5903] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 385.609594][ T5903] usb 4-1: USB disconnect, device number 72 [ 385.827034][ T9633] fido_id[9633]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 386.083064][ T9648] netlink: 432 bytes leftover after parsing attributes in process `syz.5.1103'. [ 386.176071][ T24] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 386.396615][ T24] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 386.404850][ T24] usb 2-1: config 0 has no interface number 0 [ 386.424884][ T24] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=c6.7f [ 386.444513][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.453437][ T24] usb 2-1: Product: syz [ 386.463031][ T24] usb 2-1: Manufacturer: syz [ 386.473164][ T24] usb 2-1: SerialNumber: syz [ 386.556880][ T24] usb 2-1: config 0 descriptor?? [ 386.565373][ T24] esd_usb 2-1:0.120: sending version message failed [ 386.585024][ T24] esd_usb 2-1:0.120: probe with driver esd_usb failed with error -8 [ 386.635327][ T9663] xt_TPROXY: Can be used only with -p tcp or -p udp [ 386.799551][ T9641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.810348][ T9641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.850877][ T5878] usb 2-1: USB disconnect, device number 79 [ 386.857017][ T5881] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 387.133678][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'. [ 387.329760][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 387.371290][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.415906][ T5881] usb 3-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 387.465878][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.488832][ T5881] usb 3-1: config 0 descriptor?? [ 387.889431][ T5881] usbhid 3-1:0.0: can't add hid device: -71 [ 387.895961][ T5881] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 387.906770][ T5881] usb 3-1: USB disconnect, device number 82 [ 388.145848][ T5878] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 388.312396][ T5878] usb 1-1: config 4 has an invalid interface number: 9 but max is 2 [ 388.347160][ T5878] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 388.356735][ T5878] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 388.365493][ T5878] usb 1-1: config 4 has an invalid interface number: 60 but max is 2 [ 388.377809][ T5878] usb 1-1: config 4 has an invalid interface number: 48 but max is 2 [ 388.387905][ T5878] usb 1-1: config 4 has an invalid interface number: 4 but max is 2 [ 388.398699][ T5878] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 388.410025][ T5878] usb 1-1: config 4 has an invalid interface number: 240 but max is 2 [ 388.420676][ T5878] usb 1-1: config 4 has 5 interfaces, different from the descriptor's value: 3 [ 388.433879][ T5878] usb 1-1: config 4 has no interface number 0 [ 388.505767][ T5878] usb 1-1: config 4 has no interface number 1 [ 388.515813][ T5878] usb 1-1: config 4 has no interface number 2 [ 388.527507][ T5878] usb 1-1: config 4 has no interface number 3 [ 388.535108][ T5878] usb 1-1: config 4 interface 9 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 388.550707][ T5878] usb 1-1: config 4 interface 9 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 388.561767][ T5878] usb 1-1: config 4 interface 9 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 388.578352][ T5878] usb 1-1: config 4 interface 9 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 388.589067][ T5878] usb 1-1: config 4 interface 9 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 388.600169][ T5878] usb 1-1: config 4 interface 60 altsetting 64 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 388.636752][ T5878] usb 1-1: config 4 interface 60 altsetting 64 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 388.715676][ T5878] usb 1-1: config 4 interface 60 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 388.735960][ T5878] usb 1-1: config 4 interface 48 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 388.755008][ T5878] usb 1-1: too many endpoints for config 4 interface 4 altsetting 4: 245, using maximum allowed: 30 [ 388.781560][ T5878] usb 1-1: config 4 interface 4 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 388.804551][ T5878] usb 1-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 388.829475][ T5878] usb 1-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 388.860917][ T5878] usb 1-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 388.895457][ T5878] usb 1-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 388.931618][ T5878] usb 1-1: config 4 interface 4 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 388.975496][ T5878] usb 1-1: config 4 interface 4 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 389.020840][ T5878] usb 1-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 389.053731][ T5878] usb 1-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 389.090266][ T5878] usb 1-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 389.115027][ T5878] usb 1-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 389.141878][ T5878] usb 1-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 389.170753][ T5878] usb 1-1: config 4 interface 4 altsetting 4 has 12 endpoint descriptors, different from the interface descriptor's value: 245 [ 389.203214][ T5878] usb 1-1: too many endpoints for config 4 interface 240 altsetting 73: 38, using maximum allowed: 30 [ 389.255770][ T5878] usb 1-1: config 4 interface 240 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 389.627174][ T5878] usb 1-1: config 4 interface 9 has no altsetting 0 [ 389.698961][ T5878] usb 1-1: config 4 interface 60 has no altsetting 0 [ 389.715774][ T5878] usb 1-1: config 4 interface 48 has no altsetting 0 [ 389.734550][ T5878] usb 1-1: config 4 interface 4 has no altsetting 0 [ 389.754142][ T5878] usb 1-1: config 4 interface 240 has no altsetting 0 [ 389.772405][ T5878] usb 1-1: string descriptor 0 read error: -22 [ 389.794478][ T5878] usb 1-1: Dual-Role OTG device on HNP port [ 389.807886][ T5878] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2710, bcdDevice=75.d7 [ 389.833135][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.875776][ T24] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 390.055768][ T24] usb 3-1: device descriptor read/64, error -71 [ 390.180368][ T9701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.196479][ T9701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.213107][ T9676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.224302][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 390.237607][ T5881] usb 1-1: USB disconnect, device number 80 [ 390.295754][ T24] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 390.425784][ T5878] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 390.425863][ T24] usb 3-1: device descriptor read/64, error -71 [ 390.556179][ T24] usb usb3-port1: attempt power cycle [ 390.586002][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 390.599854][ T5878] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 390.622939][ T5878] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 390.636836][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.649271][ T5878] usb 2-1: Product: syz [ 390.653516][ T5878] usb 2-1: Manufacturer: syz [ 390.665213][ T5878] usb 2-1: SerialNumber: syz [ 390.679469][ T5878] usb 2-1: config 0 descriptor?? [ 390.694796][ T5878] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 390.905744][ T24] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 390.942295][ T24] usb 3-1: device descriptor read/8, error -71 [ 390.987569][ T9706] input: syz0 as /devices/virtual/input/input45 [ 391.053076][ T9708] program syz.5.1122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.205964][ T24] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 391.237092][ T24] usb 3-1: device descriptor read/8, error -71 [ 391.255917][ T5903] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 391.295846][ T5877] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 391.347033][ T24] usb usb3-port1: unable to enumerate USB device [ 391.406035][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 391.415106][ T5903] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 391.425834][ T5877] usb 6-1: device descriptor read/64, error -71 [ 391.434509][ T5903] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 391.443933][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.452445][ T5903] usb 1-1: Product: syz [ 391.456768][ T5903] usb 1-1: Manufacturer: syz [ 391.461406][ T5903] usb 1-1: SerialNumber: syz [ 391.471194][ T5903] usb 1-1: config 0 descriptor?? [ 391.479888][ T9706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 391.493139][ T5903] hub 1-1:0.0: bad descriptor, ignoring hub [ 391.500148][ T5903] hub 1-1:0.0: probe with driver hub failed with error -5 [ 391.516089][ T5903] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input46 [ 391.665960][ T5877] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 391.707078][ T919] usb 1-1: USB disconnect, device number 81 [ 391.713068][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 391.805893][ T5877] usb 6-1: device descriptor read/64, error -71 [ 391.916574][ T5877] usb usb6-port1: attempt power cycle [ 392.141890][ T9711] binder: 9710:9711 ioctl c018480b 200000000340 returned -22 [ 392.255949][ T5877] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 392.295351][ T5877] usb 6-1: device descriptor read/8, error -71 [ 392.555904][ T5877] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 392.576512][ T5877] usb 6-1: device descriptor read/8, error -71 [ 392.599267][ T9718] netlink: 'syz.0.1126': attribute type 4 has an invalid length. [ 392.695925][ T5877] usb usb6-port1: unable to enumerate USB device [ 393.175937][ T5831] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 393.394026][ T5831] usb 1-1: config 0 has no interfaces? [ 393.525855][ T5831] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 393.535644][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.562711][ T5831] usb 1-1: Product: syz [ 393.567894][ T5878] gspca_zc3xx: reg_r err -71 [ 393.573426][ T5831] usb 1-1: Manufacturer: syz [ 393.581646][ T5831] usb 1-1: SerialNumber: syz [ 393.591688][ T5831] usb 1-1: config 0 descriptor?? [ 393.876096][ T9728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.893139][ T9728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.176551][ T5878] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 394.183080][ T5878] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 394.228319][ T5878] usb 2-1: USB disconnect, device number 80 [ 394.729668][ T9744] xt_TCPMSS: Only works on TCP SYN packets [ 394.735964][ T24] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 394.765871][ T5878] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 394.945926][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 394.954608][ T5878] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.011718][ T24] usb 6-1: config 4 has an invalid interface number: 9 but max is 2 [ 395.024348][ T24] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 395.070264][ T24] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 395.093403][ T24] usb 6-1: config 4 has an invalid interface number: 60 but max is 2 [ 395.115378][ T24] usb 6-1: config 4 has an invalid interface number: 48 but max is 2 [ 395.128675][ T24] usb 6-1: config 4 has an invalid interface number: 4 but max is 2 [ 395.137585][ T24] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 395.152754][ T24] usb 6-1: config 4 has an invalid interface number: 240 but max is 2 [ 395.161956][ T24] usb 6-1: config 4 has 5 interfaces, different from the descriptor's value: 3 [ 395.173872][ T24] usb 6-1: config 4 has no interface number 0 [ 395.180956][ T24] usb 6-1: config 4 has no interface number 1 [ 395.189925][ T24] usb 6-1: config 4 has no interface number 2 [ 395.196914][ T24] usb 6-1: config 4 has no interface number 3 [ 395.203272][ T24] usb 6-1: config 4 interface 9 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 395.247737][ T24] usb 6-1: config 4 interface 9 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 395.280347][ T24] usb 6-1: config 4 interface 9 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 395.296153][ T5878] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.328508][ T5878] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 395.363796][ T24] usb 6-1: config 4 interface 9 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 395.385030][ T24] usb 6-1: config 4 interface 9 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 395.394885][ T5878] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 395.402430][ T24] usb 6-1: config 4 interface 60 altsetting 64 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 395.420655][ T24] usb 6-1: config 4 interface 60 altsetting 64 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 395.432023][ T5878] usb 2-1: Product: syz [ 395.432545][ T24] usb 6-1: config 4 interface 60 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 395.452422][ T24] usb 6-1: config 4 interface 48 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 395.472681][ T24] usb 6-1: too many endpoints for config 4 interface 4 altsetting 4: 245, using maximum allowed: 30 [ 395.490793][ T24] usb 6-1: config 4 interface 4 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 395.511211][ T24] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 395.521777][ T5878] usb 2-1: Manufacturer: syz [ 395.531615][ T24] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 395.544723][ T24] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 395.546633][ T5878] hub 2-1:4.0: USB hub found [ 395.562398][ T24] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 395.580994][ T24] usb 6-1: config 4 interface 4 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 395.601317][ T24] usb 6-1: config 4 interface 4 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 395.615066][ T24] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 395.630543][ T24] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 395.642033][ T24] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 395.657708][ T24] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 395.671941][ T24] usb 6-1: config 4 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 395.691529][ T24] usb 6-1: config 4 interface 4 altsetting 4 has 12 endpoint descriptors, different from the interface descriptor's value: 245 [ 395.711753][ T24] usb 6-1: too many endpoints for config 4 interface 240 altsetting 73: 38, using maximum allowed: 30 [ 395.750679][ T5878] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 395.758915][ T24] usb 6-1: config 4 interface 240 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 395.791572][ T24] usb 6-1: config 4 interface 9 has no altsetting 0 [ 395.800669][ T24] usb 6-1: config 4 interface 60 has no altsetting 0 [ 395.808039][ T24] usb 6-1: config 4 interface 48 has no altsetting 0 [ 395.814943][ T24] usb 6-1: config 4 interface 4 has no altsetting 0 [ 395.845080][ T24] usb 6-1: config 4 interface 240 has no altsetting 0 [ 395.854461][ T24] usb 6-1: string descriptor 0 read error: -22 [ 395.864290][ T24] usb 6-1: Dual-Role OTG device on HNP port [ 395.871126][ T9753] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1137'. [ 395.884419][ T24] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2710, bcdDevice=75.d7 [ 395.894630][ T9753] netlink: zone id is out of range [ 395.903713][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.913401][ T9753] netlink: get zone limit has 8 unknown bytes [ 396.056613][ T9755] netlink: 492 bytes leftover after parsing attributes in process `syz.2.1138'. [ 396.079730][ T5878] usb 2-1: USB disconnect, device number 81 [ 396.275875][ T9758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.291943][ T9758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.333451][ T5878] usb 6-1: USB disconnect, device number 33 [ 396.855979][ T5878] usb 1-1: USB disconnect, device number 82 [ 396.898830][ T5877] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 397.081892][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 397.094138][ T5877] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 397.118210][ T5877] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 397.130619][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.485688][ T5877] usb 2-1: Product: syz [ 397.494033][ T5877] usb 2-1: Manufacturer: syz [ 397.503222][ T5877] usb 2-1: SerialNumber: syz [ 397.520008][ T5877] usb 2-1: config 0 descriptor?? [ 397.530358][ T5877] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 397.595750][ T5878] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 397.755796][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 397.774778][ T5878] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 397.787279][ T5878] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 397.809938][ T5878] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 397.835524][ T5878] usb 1-1: config 1 has no interface number 0 [ 397.845723][ T5878] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 397.876397][ T5878] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 397.904638][ T5878] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 397.916331][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.941436][ T5878] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 398.162520][ T5878] snd_usb_pod 1-1:1.1: invalid control EP [ 398.195796][ T5878] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 398.202577][ T5878] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 398.236266][ T5878] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 398.367189][ T24] usb 1-1: USB disconnect, device number 83 [ 399.146361][ T9824] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1166'. [ 399.158965][ T9824] (unnamed net_device) (uninitialized): option mode: invalid value (191) [ 399.480250][ T30] audit: type=1326 audit(1746960557.953:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35edd8e969 code=0x7ffc0000 [ 399.502609][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.551461][ T30] audit: type=1326 audit(1746960557.953:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35edd8e969 code=0x7ffc0000 [ 399.573748][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.621051][ T30] audit: type=1326 audit(1746960557.983:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f35edd8e969 code=0x7ffc0000 [ 399.644269][ T30] audit: type=1326 audit(1746960557.983:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35edd8e969 code=0x7ffc0000 [ 399.676348][ T30] audit: type=1326 audit(1746960557.983:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35edd8e969 code=0x7ffc0000 [ 400.098623][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1182'. [ 400.345200][ T5877] gspca_zc3xx: reg_r err -71 [ 400.956199][ T5877] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 400.957814][ T9894] wg2: entered promiscuous mode [ 400.962884][ T5877] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 401.015201][ T5877] usb 2-1: USB disconnect, device number 82 [ 401.406684][ T9906] program syz.1.1202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.666504][ T9914] xt_hashlimit: max too large, truncated to 1048576 [ 401.673595][ T9914] xt_limit: Overflow, try lower: 0/0 [ 402.070141][ T9934] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 402.075937][ T30] audit: type=1326 audit(1746960560.543:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 402.076787][ T9934] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 402.124033][ T9939] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1215'. [ 402.153918][ T30] audit: type=1326 audit(1746960560.543:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 402.174803][ T9934] vhci_hcd vhci_hcd.0: Device attached [ 402.180903][ T9933] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 402.208579][ T9941] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 402.212172][ T30] audit: type=1326 audit(1746960560.573:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 402.215221][ T9941] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 402.281063][ T30] audit: type=1326 audit(1746960560.573:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 402.297468][ T9941] vhci_hcd vhci_hcd.0: Device attached [ 402.317286][ T30] audit: type=1326 audit(1746960560.573:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9935 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 402.344641][ T9934] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 402.349639][ T5903] vhci_hcd: vhci_device speed not set [ 402.374673][ T9934] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 402.381337][ T9934] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 402.403751][ T9934] vhci_hcd vhci_hcd.0: Device attached [ 402.452518][ T9934] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18) [ 402.459194][ T9934] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 402.493926][ T5903] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 402.502645][ T9941] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 402.536914][ T9941] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 402.551164][ T9934] vhci_hcd vhci_hcd.0: Device attached [ 402.564887][ T9941] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 402.604156][ T9941] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(28) [ 402.610835][ T9941] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 402.625560][ T9964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1224'. [ 402.626309][ T9941] vhci_hcd vhci_hcd.0: Device attached [ 402.643174][ T9964] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 402.682135][ T9964] macsec1: entered promiscuous mode [ 402.722138][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 402.749941][ T9967] vhci_hcd: connection closed [ 402.751523][ T9958] vhci_hcd: connection closed [ 402.756712][ T12] vhci_hcd: stop threads [ 402.767015][ T9943] vhci_hcd: connection closed [ 402.767673][ T9937] vhci_hcd: connection reset by peer [ 402.768305][ T9949] vhci_hcd: connection closed [ 402.780072][ T12] vhci_hcd: release socket [ 402.800605][ T12] vhci_hcd: disconnect device [ 402.819273][ T12] vhci_hcd: stop threads [ 402.823805][ T12] vhci_hcd: release socket [ 402.828504][ T12] vhci_hcd: disconnect device [ 402.855301][ T12] vhci_hcd: stop threads [ 402.874569][ T12] vhci_hcd: release socket [ 402.898095][ T12] vhci_hcd: disconnect device [ 402.953095][ T12] vhci_hcd: stop threads [ 402.963119][ T12] vhci_hcd: release socket [ 402.991231][ T12] vhci_hcd: disconnect device [ 402.999944][ T12] vhci_hcd: stop threads [ 403.013353][ T12] vhci_hcd: release socket [ 403.030511][ T12] vhci_hcd: disconnect device [ 403.456965][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'. [ 403.475862][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'. [ 404.342943][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f07d000: rx timeout, send abort [ 404.353583][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f07d000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 404.493053][T10003] netlink: 'syz.2.1240': attribute type 1 has an invalid length. [ 405.271601][ T9998] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1238'. [ 405.302942][ T9998] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1238'. [ 405.320865][T10023] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 405.351218][ T9998] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1238'. [ 405.475302][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.666588][ T9998] wg2: left promiscuous mode [ 405.759637][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.926635][ T9998] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.935871][ T9998] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.944807][ T9998] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.953833][ T9998] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.006705][T10000] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 406.013716][T10001] vlan2: entered allmulticast mode [ 406.036181][T10001] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 406.063984][T10009] netem: change failed [ 406.958989][T10087] syzkaller0: entered promiscuous mode [ 406.964614][T10087] syzkaller0: entered allmulticast mode [ 407.666365][ T5903] vhci_hcd: vhci_device speed not set [ 408.152953][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 408.152973][ T30] audit: type=1326 audit(1746960566.623:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4eb8e969 code=0x7ffc0000 [ 408.185417][ T30] audit: type=1326 audit(1746960566.633:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4eb8e969 code=0x7ffc0000 [ 408.213666][ T30] audit: type=1326 audit(1746960566.633:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf4eb8e969 code=0x7ffc0000 [ 408.245856][ T30] audit: type=1326 audit(1746960566.633:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4eb8e969 code=0x7ffc0000 [ 408.268933][ T30] audit: type=1326 audit(1746960566.633:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4eb8e969 code=0x7ffc0000 [ 408.295857][ T30] audit: type=1326 audit(1746960566.633:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7faf4eb8e969 code=0x7ffc0000 [ 408.318898][ T30] audit: type=1326 audit(1746960566.633:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4eb8e969 code=0x7ffc0000 [ 408.347438][ T30] audit: type=1326 audit(1746960566.633:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4eb8e969 code=0x7ffc0000 [ 408.553051][ T30] audit: type=1326 audit(1746960567.023:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4eb8e969 code=0x7ffc0000 [ 408.576084][ T30] audit: type=1326 audit(1746960567.023:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4eb8e969 code=0x7ffc0000 [ 408.949473][ T24] usb usb36-port1: attempt power cycle [ 409.114847][T10135] __nla_validate_parse: 73 callbacks suppressed [ 409.114887][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'. [ 409.414506][T10104] macvtap0: refused to change device tx_queue_len [ 409.523310][T10140] veth0_macvtap: left promiscuous mode [ 409.540192][ T24] usb usb36-port1: unable to enumerate USB device [ 409.548758][T10140] macvtap0: refused to change device tx_queue_len [ 409.784577][T10151] loop4: detected capacity change from 0 to 7 [ 409.821148][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 409.831308][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 409.845804][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 409.855048][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 409.864208][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 409.873443][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 409.881923][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 409.891216][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 409.900821][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 409.910095][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 409.922889][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 409.932218][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 409.966897][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 409.976390][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 409.984318][T10151] ldm_validate_partition_table(): Disk read failed. [ 410.027494][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.036759][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 410.045108][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.054351][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 410.063970][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.073266][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 410.088260][T10151] Dev loop4: unable to read RDB block 0 [ 410.098075][T10151] loop4: unable to read partition table [ 410.117289][T10151] loop4: partition table beyond EOD, truncated [ 410.145940][T10151] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 411.262862][T10218] syz.2.1331: attempt to access beyond end of device [ 411.262862][T10218] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 412.303239][T10259] netlink: 'syz.5.1345': attribute type 10 has an invalid length. [ 412.584488][T10259] team0 (unregistering): Port device team_slave_0 removed [ 412.598613][T10259] team0 (unregistering): Failed to send options change via netlink (err -105) [ 412.612664][T10259] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 412.643979][T10259] team0 (unregistering): Port device team_slave_1 removed [ 412.752092][T10267] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 413.344119][T10302] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1364'. [ 413.364899][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 413.364919][ T30] audit: type=1326 audit(1746960571.833:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 413.383336][T10299] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1364'. [ 413.449907][ T30] audit: type=1326 audit(1746960571.883:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 413.512612][ T30] audit: type=1326 audit(1746960571.883:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 413.586654][ T30] audit: type=1326 audit(1746960571.883:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 413.643904][ T30] audit: type=1326 audit(1746960571.883:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 413.689521][T10314] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 413.731010][ T30] audit: type=1326 audit(1746960571.883:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 413.815816][ T30] audit: type=1326 audit(1746960571.883:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 413.878843][ T30] audit: type=1326 audit(1746960571.883:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 413.955896][ T30] audit: type=1326 audit(1746960571.883:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 414.011738][ T30] audit: type=1326 audit(1746960571.883:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 414.229186][T10328] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1377'. [ 414.666373][T10348] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1386'. [ 414.742789][T10348] (unnamed net_device) (uninitialized): option mode: invalid value (191) [ 415.920013][T10387] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1401'. [ 416.402524][T10398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1406'. [ 416.431270][T10398] (unnamed net_device) (uninitialized): option mode: invalid value (191) [ 416.719774][T10411] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1411'. [ 416.737731][T10411] unsupported nla_type 65024 [ 416.894533][T10415] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1414'. [ 417.271117][T10429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1419'. [ 417.284930][T10429] (unnamed net_device) (uninitialized): option mode: invalid value (191) [ 418.294163][T10467] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1434'. [ 418.294398][T10467] (unnamed net_device) (uninitialized): option mode: invalid value (191) [ 418.499843][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 418.499864][ T30] audit: type=1326 audit(1746960576.973:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.3.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35edd8e969 code=0x7ffc0000 [ 418.503246][ T30] audit: type=1326 audit(1746960576.973:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.3.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35edd8e969 code=0x7ffc0000 [ 418.504035][ T30] audit: type=1326 audit(1746960576.973:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.3.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35edd8e969 code=0x7ffc0000 [ 418.505086][ T30] audit: type=1326 audit(1746960576.973:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.3.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f35edd8e969 code=0x7ffc0000 [ 418.508877][ T30] audit: type=1326 audit(1746960576.983:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.3.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35edd8e969 code=0x7ffc0000 [ 418.785235][T10482] openvswitch: netlink: Message has 8 unknown bytes. [ 419.231951][T10506] netlink: 'syz.3.1447': attribute type 1 has an invalid length. [ 419.307079][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1447'. [ 419.336097][T10505] bridge_slave_1: left promiscuous mode [ 419.342000][T10505] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.410019][T10505] bridge_slave_0: left allmulticast mode [ 419.425952][T10505] bridge_slave_0: left promiscuous mode [ 419.431911][T10505] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.570737][T10511] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 419.587069][ T30] audit: type=1326 audit(1746960578.063:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz.2.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 419.606350][T10511] bond3: (slave batadv1): Enslaving as a backup interface with an up link [ 419.639462][ T30] audit: type=1326 audit(1746960578.083:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz.2.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 419.713682][ T30] audit: type=1326 audit(1746960578.083:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz.2.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 419.745227][ T30] audit: type=1326 audit(1746960578.083:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz.2.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 419.772775][ T30] audit: type=1326 audit(1746960578.083:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10522 comm="syz.2.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9d8e969 code=0x7ffc0000 [ 419.786801][T10506] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 419.859079][T10506] bond3 (unregistering): Released all slaves [ 420.199140][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1469'. [ 420.346320][T10557] ip6t_rpfilter: unknown options [ 420.745433][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 422.067164][T10619] IPv4: Oversized IP packet from 127.202.26.0 [ 422.151374][T10623] netlink: 'syz.3.1502': attribute type 7 has an invalid length. [ 422.181298][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1502'. [ 422.298237][T10627] bridge0: entered promiscuous mode [ 422.322830][T10627] macvlan2: entered promiscuous mode [ 422.349493][T10627] bridge0: port 3(macvlan2) entered blocking state [ 422.391662][T10627] bridge0: port 3(macvlan2) entered disabled state [ 422.402803][T10627] macvlan2: entered allmulticast mode [ 422.411346][T10627] bridge0: entered allmulticast mode [ 422.468430][T10627] macvlan2: left allmulticast mode [ 422.499614][T10627] bridge0: left allmulticast mode [ 422.524960][T10627] bridge0: left promiscuous mode [ 423.449536][T10658] xt_connbytes: Forcing CT accounting to be enabled [ 423.461791][T10658] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 423.482627][T10660] x_tables: duplicate underflow at hook 1 [ 424.086201][T10687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1531'. [ 424.120595][T10687] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 424.144909][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 424.250164][T10687] bond0: (slave bond_slave_0): Releasing backup interface [ 424.299644][T10694] macsec2: entered promiscuous mode [ 424.525469][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1540'. [ 424.845483][T10723] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1547'. [ 424.878155][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 424.878173][ T30] audit: type=1326 audit(1746960583.343:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.5.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba36d8e969 code=0x7ffc0000 [ 424.967024][ T30] audit: type=1326 audit(1746960583.343:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.5.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba36d8e969 code=0x7ffc0000 [ 425.005704][ T30] audit: type=1326 audit(1746960583.353:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.5.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fba36d8e969 code=0x7ffc0000 [ 425.092886][ T30] audit: type=1326 audit(1746960583.353:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.5.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba36d8e969 code=0x7ffc0000 [ 425.374554][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1558'. [ 425.553963][T10753] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1560'. [ 426.938615][T10784] rdma_op ffff8880276221f0 conn xmit_rdma 0000000000000000 [ 427.126067][T10790] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 427.135296][T10790] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 427.449898][T10804] netlink: 'syz.0.1582': attribute type 7 has an invalid length. [ 427.471792][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'. [ 427.827910][T10818] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 428.747627][T10842] loop9: detected capacity change from 0 to 7 [ 428.777633][T10842] buffer_io_error: 10 callbacks suppressed [ 428.777652][T10842] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.812526][T10842] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.837651][T10842] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.858015][T10842] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.890665][T10842] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.906380][T10842] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.924716][T10842] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.948116][T10842] ldm_validate_partition_table(): Disk read failed. [ 428.973301][T10842] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.982443][T10842] Buffer I/O error on dev loop9, logical block 0, async page read [ 428.998494][T10842] Buffer I/O error on dev loop9, logical block 0, async page read [ 429.016400][T10842] Dev loop9: unable to read RDB block 0 [ 429.040844][T10842] loop9: unable to read partition table [ 429.041080][T10842] loop9: partition table beyond EOD, truncated [ 429.053688][T10842] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 429.053688][T10842] U) failed (rc=-5) [ 429.289832][ T30] audit: type=1326 audit(1746960587.763:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.3.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35edd8e969 code=0x7ffc0000 [ 429.341799][ T30] audit: type=1326 audit(1746960587.793:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.3.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35edd8e969 code=0x7ffc0000 [ 429.389797][ T30] audit: type=1326 audit(1746960587.813:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.3.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f35edd8e969 code=0x7ffc0000 [ 429.418482][ T30] audit: type=1326 audit(1746960587.813:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.3.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35edd8e969 code=0x7ffc0000 [ 429.496126][ T30] audit: type=1326 audit(1746960587.813:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.3.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35edd8e969 code=0x7ffc0000 [ 430.291713][T10898] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1620'. [ 430.320477][T10902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1624'. [ 430.331981][T10891] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1620'. [ 430.798864][T10922] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1634'. [ 430.868660][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'. [ 431.022643][T10937] netlink: 'syz.1.1641': attribute type 25 has an invalid length. [ 431.036127][T10937] netlink: 'syz.1.1641': attribute type 1 has an invalid length. [ 431.622860][T10953] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1648'. [ 431.765803][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1649'. [ 432.194355][T10966] netlink: 'syz.0.1655': attribute type 4 has an invalid length. [ 432.581126][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1662'. [ 433.372659][T11008] futex_wake_op: syz.5.1673 tries to shift op by -1; fix this program [ 433.952757][T11027] random: crng reseeded on system resumption [ 434.174795][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'. [ 434.489584][ T30] audit: type=1326 audit(1746960592.953:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.1.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119018e969 code=0x7ffc0000 [ 434.576051][ T30] audit: type=1326 audit(1746960592.953:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.1.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119018e969 code=0x7ffc0000 [ 434.599393][ T30] audit: type=1326 audit(1746960593.013:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.1.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f119018e969 code=0x7ffc0000 [ 434.624399][ T30] audit: type=1326 audit(1746960593.013:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.1.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119018e969 code=0x7ffc0000 [ 434.647812][ T30] audit: type=1326 audit(1746960593.013:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.1.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119018e969 code=0x7ffc0000 [ 434.708116][ T30] audit: type=1326 audit(1746960593.013:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.1.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f119018e969 code=0x7ffc0000 [ 434.822949][ T30] audit: type=1326 audit(1746960593.013:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.1.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119018e969 code=0x7ffc0000 [ 434.873589][ T30] audit: type=1326 audit(1746960593.013:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.1.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f119018e969 code=0x7ffc0000 [ 434.945813][ T30] audit: type=1326 audit(1746960593.013:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.1.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119018e969 code=0x7ffc0000 [ 435.602367][ T30] audit: type=1326 audit(1746960594.073:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119018e969 code=0x7ffc0000 [ 435.765894][ T5831] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 435.899107][ T5831] usb 4-1: device descriptor read/64, error -71 [ 436.146493][ T5831] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 436.295838][ T5831] usb 4-1: device descriptor read/64, error -71 [ 436.416337][ T5831] usb usb4-port1: attempt power cycle [ 436.624922][T11127] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 436.700988][T11127] bond2 (unregistering): Released all slaves [ 436.768937][ T5831] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 436.817975][ T5831] usb 4-1: device descriptor read/8, error -71 [ 437.076179][ T5831] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 437.117921][ T5831] usb 4-1: device descriptor read/8, error -71 [ 437.246201][ T5831] usb usb4-port1: unable to enumerate USB device [ 437.317379][T11159] syz.2.1737: attempt to access beyond end of device [ 437.317379][T11159] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 437.797702][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'. [ 437.865235][T11173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.676661][T11208] netlink: 'syz.2.1758': attribute type 1 has an invalid length. [ 438.792619][T11208] bond1 (unregistering): Released all slaves [ 438.858728][T11216] netlink: 'syz.3.1760': attribute type 10 has an invalid length. [ 438.898235][T11216] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.977631][T11216] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.984945][T11216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.041191][T11216] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 439.068918][ T991] ------------[ cut here ]------------ [ 439.074779][ T991] RTNL: assertion failed at ./include/net/netdev_lock.h (56) [ 439.104981][ T991] WARNING: CPU: 1 PID: 991 at ./include/net/netdev_lock.h:56 __linkwatch_sync_dev+0x303/0x350 [ 439.115638][ T991] Modules linked in: [ 439.120300][ T991] CPU: 1 UID: 0 PID: 991 Comm: kworker/u8:5 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 439.132569][ T991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.142696][ T991] Workqueue: bond0 bond_mii_monitor [ 439.148012][ T991] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 439.154056][ T991] Code: 7c fe ff ff e8 de d6 76 f8 c6 05 ce e3 1f 06 01 90 48 c7 c7 40 bb 70 8c 48 c7 c6 aa 24 79 8d ba 38 00 00 00 e8 ee 32 3b f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 439.173885][ T991] RSP: 0018:ffffc900039a7710 EFLAGS: 00010246 [ 439.180271][ T991] RAX: a7aef5e3a23e2f00 RBX: ffff88805fba8000 RCX: ffff888025931e00 [ 439.188509][ T991] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 439.196537][ T991] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 439.204533][ T991] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 1ffff1100bf7505d [ 439.212684][ T991] R13: dffffc0000000000 R14: ffffffff8bfa9a08 R15: 0000000000000000 [ 439.220768][ T991] FS: 0000000000000000(0000) GS:ffff8881261cb000(0000) knlGS:0000000000000000 [ 439.229769][ T991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.236472][ T991] CR2: 0000200000936030 CR3: 0000000061286000 CR4: 00000000003526f0 [ 439.244739][ T991] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 439.252799][ T991] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 439.260852][ T991] Call Trace: [ 439.264176][ T991] [ 439.267275][ T991] ? ethtool_op_get_link+0xd/0x70 [ 439.272348][ T991] ethtool_op_get_link+0x15/0x70 [ 439.277379][ T991] bond_check_dev_link+0x444/0x6c0 [ 439.282536][ T991] ? __pfx_bond_check_dev_link+0x10/0x10 [ 439.288281][ T991] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 439.294731][ T991] bond_mii_monitor+0x428/0x2e00 [ 439.299758][ T991] ? bond_mii_monitor+0x153/0x2e00 [ 439.304941][ T991] ? __pfx_bond_mii_monitor+0x10/0x10 [ 439.310422][ T991] ? register_lock_class+0x51/0x320 [ 439.315703][ T991] ? __lock_acquire+0xaac/0xd20 [ 439.320595][ T991] ? process_scheduled_works+0x9ec/0x17a0 [ 439.326456][ T991] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.331694][ T991] ? process_scheduled_works+0x9ec/0x17a0 [ 439.337509][ T991] ? process_scheduled_works+0x9ec/0x17a0 [ 439.343283][ T991] process_scheduled_works+0xadb/0x17a0 [ 439.349005][ T991] ? __pfx_process_scheduled_works+0x10/0x10 [ 439.355059][ T991] worker_thread+0x8a0/0xda0 [ 439.359745][ T991] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 439.366160][ T991] ? __kthread_parkme+0x7b/0x200 [ 439.371138][ T991] kthread+0x70e/0x8a0 [ 439.375246][ T991] ? __pfx_worker_thread+0x10/0x10 [ 439.380446][ T991] ? __pfx_kthread+0x10/0x10 [ 439.385091][ T991] ? __pfx_kthread+0x10/0x10 [ 439.389806][ T991] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.395034][ T991] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.400350][ T991] ? __pfx_kthread+0x10/0x10 [ 439.404981][ T991] ret_from_fork+0x4b/0x80 [ 439.409495][ T991] ? __pfx_kthread+0x10/0x10 [ 439.414121][ T991] ret_from_fork_asm+0x1a/0x30 [ 439.418979][ T991] [ 439.422034][ T991] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 439.429340][ T991] CPU: 1 UID: 0 PID: 991 Comm: kworker/u8:5 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 439.441434][ T991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.451525][ T991] Workqueue: bond0 bond_mii_monitor [ 439.456770][ T991] Call Trace: [ 439.460081][ T991] [ 439.463039][ T991] dump_stack_lvl+0x99/0x250 [ 439.467676][ T991] ? __asan_memcpy+0x40/0x70 [ 439.472292][ T991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.477527][ T991] ? __pfx__printk+0x10/0x10 [ 439.482166][ T991] panic+0x2db/0x790 [ 439.486126][ T991] ? __pfx_panic+0x10/0x10 [ 439.490584][ T991] ? ret_from_fork_asm+0x1a/0x30 [ 439.495559][ T991] __warn+0x31b/0x4b0 [ 439.499580][ T991] ? __linkwatch_sync_dev+0x303/0x350 [ 439.504995][ T991] ? __linkwatch_sync_dev+0x303/0x350 [ 439.510411][ T991] report_bug+0x2be/0x4f0 [ 439.514788][ T991] ? __linkwatch_sync_dev+0x303/0x350 [ 439.520196][ T991] ? __linkwatch_sync_dev+0x303/0x350 [ 439.525595][ T991] ? __linkwatch_sync_dev+0x305/0x350 [ 439.530991][ T991] handle_bug+0x84/0x160 [ 439.535251][ T991] exc_invalid_op+0x1a/0x50 [ 439.539771][ T991] asm_exc_invalid_op+0x1a/0x20 [ 439.544633][ T991] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 439.550629][ T991] Code: 7c fe ff ff e8 de d6 76 f8 c6 05 ce e3 1f 06 01 90 48 c7 c7 40 bb 70 8c 48 c7 c6 aa 24 79 8d ba 38 00 00 00 e8 ee 32 3b f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 439.570251][ T991] RSP: 0018:ffffc900039a7710 EFLAGS: 00010246 [ 439.576330][ T991] RAX: a7aef5e3a23e2f00 RBX: ffff88805fba8000 RCX: ffff888025931e00 [ 439.584315][ T991] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 439.592294][ T991] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 439.600276][ T991] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 1ffff1100bf7505d [ 439.608271][ T991] R13: dffffc0000000000 R14: ffffffff8bfa9a08 R15: 0000000000000000 [ 439.616263][ T991] ? ethtool_op_get_link+0xd/0x70 [ 439.621738][ T991] ethtool_op_get_link+0x15/0x70 [ 439.626708][ T991] bond_check_dev_link+0x444/0x6c0 [ 439.631850][ T991] ? __pfx_bond_check_dev_link+0x10/0x10 [ 439.637528][ T991] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 439.643969][ T991] bond_mii_monitor+0x428/0x2e00 [ 439.648931][ T991] ? bond_mii_monitor+0x153/0x2e00 [ 439.654074][ T991] ? __pfx_bond_mii_monitor+0x10/0x10 [ 439.659462][ T991] ? register_lock_class+0x51/0x320 [ 439.664684][ T991] ? __lock_acquire+0xaac/0xd20 [ 439.669559][ T991] ? process_scheduled_works+0x9ec/0x17a0 [ 439.675312][ T991] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.680520][ T991] ? process_scheduled_works+0x9ec/0x17a0 [ 439.686270][ T991] ? process_scheduled_works+0x9ec/0x17a0 [ 439.692021][ T991] process_scheduled_works+0xadb/0x17a0 [ 439.697606][ T991] ? __pfx_process_scheduled_works+0x10/0x10 [ 439.703616][ T991] worker_thread+0x8a0/0xda0 [ 439.708215][ T991] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 439.714553][ T991] ? __kthread_parkme+0x7b/0x200 [ 439.719505][ T991] kthread+0x70e/0x8a0 [ 439.723590][ T991] ? __pfx_worker_thread+0x10/0x10 [ 439.728709][ T991] ? __pfx_kthread+0x10/0x10 [ 439.733305][ T991] ? __pfx_kthread+0x10/0x10 [ 439.737917][ T991] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.743123][ T991] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.748330][ T991] ? __pfx_kthread+0x10/0x10 [ 439.752935][ T991] ret_from_fork+0x4b/0x80 [ 439.757363][ T991] ? __pfx_kthread+0x10/0x10 [ 439.761976][ T991] ret_from_fork_asm+0x1a/0x30 [ 439.766757][ T991] [ 439.770117][ T991] Kernel Offset: disabled [ 439.774449][ T991] Rebooting in 86400 seconds..