last executing test programs: 8.256845004s ago: executing program 3 (id=6507): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0100001900010000000000ffdbdf25fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000003000000000000007d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000004d63300000000000000000000000000000000000000000000000000000000000000000000000000000044000000fe8000000000000000000000000000bb000000003c"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7.880095202s ago: executing program 3 (id=6509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000003f00000000000000001400200000000000000000000000ffffac1414bb06001b004e"], 0x6c}}, 0x0) 7.496235001s ago: executing program 3 (id=6514): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0100001900010000000000ffdbdf25fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000000010000000000007d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000004d63300000000000000000000000000000000000000000000000000000000000000000000000000000044000000fe8000000000000000000000000000bb000000003c00000002000000fe8000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000006c"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7.251466502s ago: executing program 3 (id=6518): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f00000006c0), {[{{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xff, 0xffffffff, 0xff000000], 'bridge_slave_1\x00', 'wg0\x00', {0xff}, {}, 0xcd, 0x1, 0x4, 0xa}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x6, 0x6, 0xfff}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [0xff000000, 0x0, 0x0, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0xffffffff], 'team0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0xa, 0x6, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000002004e237f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 6.764892926s ago: executing program 0 (id=6520): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0100001900010000000000ffdbdf25fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000004000000000000007d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000004d63300000000000000000000000000000000000000000000000000000000000000000000000000000044000000fe8000000000000000000000000000bb000000003c"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6.62634517s ago: executing program 0 (id=6521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 6.115678434s ago: executing program 4 (id=6523): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00003f0000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 5.506842524s ago: executing program 4 (id=6524): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c000280050001000000000047000280050001000100000006"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000007001c005a8018000180140002"], 0x4c}}, 0x0) 5.291772898s ago: executing program 1 (id=6525): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x1, 0x803, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x5, @remote}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x10000, 0x0, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="0f20e035200000000f22e067660f38810ac4e2093c000f78d4c6c100ea0b0000000101c4e17d283c340fc75ac73ef20f06c4c2d9b82d33000000", 0x3a}], 0x1, 0x51, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) (async) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) 5.099930371s ago: executing program 4 (id=6526): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18380000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000480)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 4.898559963s ago: executing program 4 (id=6527): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) memfd_secret(0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x2, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000140)={0x0, 0x0, 0x0}) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="bb5f033a99cc35cb804f59cc46774a284e60a8d25a2a9890549c", 0x1a, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000400000000000000095"], &(0x7f0000001600)='GPL\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x41000}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 4.823147385s ago: executing program 1 (id=6528): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002280)=ANY=[@ANYBLOB="a00200005f00010000000000fcdbdf2508"], 0x2a0}], 0x1}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) (async, rerun: 32) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 32) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe(&(0x7f0000000080)) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES8=r5, @ANYRES16=r1], 0x0) (async) socket(0x8, 0x4, 0xfb) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa5a8, 0x800}, [@IFLA_NUM_RX_QUEUES={0x8}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x34}}, 0x0) (async) write(r6, &(0x7f0000000000)="240000001a00000000f9f407f7080401802020000000000004e83ce9bad85487973768", 0x23) 4.527896746s ago: executing program 4 (id=6529): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000a9b8f1f2"], 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) (async) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x98}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a58000000060a0b160000000000000000020000082c0004802800018008000140000000440c000240000000000000000109000100735a7a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x2000000, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) (async) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) close$fd_v4l2_buffer(r4) (async) close$fd_v4l2_buffer(r4) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x1) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f00000000c0)) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 4.15946211s ago: executing program 1 (id=6531): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0100001900010000000000ffdbdf25fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000005000000000000007d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000004d63300000000000000000000000000000000000000000000000000000000000000000000000000000044000000fe8000000000000000000000000000bb000000003c"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.102595713s ago: executing program 3 (id=6532): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x90) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000400)={@local, 0x800, 0x1, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) keyctl$search(0xa, 0x0, &(0x7f0000000440)='blacklist\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)='NT', 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r4 = socket$inet6(0xa, 0x2, 0xfffffff8) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xef}, 0x7}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@getchain={0x64, 0x66, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x6}, {0xc, 0xa}, {0x0, 0x2}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) socket$kcm(0x2, 0x922000000001, 0x106) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 3.871347916s ago: executing program 1 (id=6534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004050) syz_emit_ethernet(0x46, &(0x7f0000002900)=ANY=[@ANYBLOB="bbbbbbbbbbbbd06fc6a5b57481001500080600c186dd", @ANYRES64=r2, @ANYBLOB="ddc80a8640fdf37db34c0cacbd85847f0fe9246cf6e70d41af0fd044e37fd9219e7f6c6f551b3fb3db90a4a4510ff35b183a99baccbd082abaac27349de03511557080d2d7847a50814b68b1d936f7d9b0db1709a54364736e617c94313cdba5ac28cb357159440a6cd7bc51547e17d736a8cf0c45a28e7be08f7ccf0114f29f3533a33e50cb6195c78386", @ANYRESDEC=r0, @ANYRES64=r3, @ANYRESOCT=r0, @ANYRES16=r3, @ANYBLOB="a62c41d1e4d2a221097557306df96bb9b1128811f11988bb0de6b0ea6746f727182b51aae6ce2141880e515d5bae1df916d851fa4539ef52185aadbc027457a1"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000740)={0x38, 0x5, 0x0, 0x1, 0x0, 0x2, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x170, 0x2b8, 0x25c, 0x0, 0x7, 0x258, 0x3a8, 0x3a8, 0x258, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x170, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000000000010000000900010073797a3100000000080002400000000140000000030a01020000000000000000010000000900000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480140000001100010000000000000000000000000a00"/192], 0xc0}, 0x1, 0x0, 0x0, 0x240400c1}, 0x200000d4) r7 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x3000000000000, 0x0) r8 = fsmount(r7, 0x0, 0x0) fspick(r8, &(0x7f0000000340)='.\x00', 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000800)=""/4096, 0x1000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x472}) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000580)=""/80, 0x50}, {&(0x7f0000000600)=""/171, 0xab}], 0x4) 3.758278319s ago: executing program 0 (id=6535): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f000000a440)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2000000, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0, 0x4a}, {&(0x7f0000000dc0)="a71916", 0x3}], 0x2}}], 0x2, 0x8008801) 3.621510544s ago: executing program 0 (id=6537): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_connect$uac1(0x1, 0xed, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0x0, 0x30, 0xf2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x4}, [@mixer_unit={0x5, 0x24, 0x4, 0x5, 0x8}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x4d8edab1daec5d45, 0x90, "5abd"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x1, 0x5, 0x8}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x5, 0x79, 'Z'}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x2, 0x38, '7'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x5, 0x4, "df429eb4506b4165"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x1, 0x9, 0x1}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x1, 0x1, "8ae2a9"}, @as_header={0x7, 0x24, 0x1, 0xf, 0xa, 0x3}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x200, 0x2, 0x1, "a3b1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x5, 0x6, {0x7, 0x25, 0x1, 0xf17144cc71a305a6, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x2, 0xff, 0x7, 'F', 'B'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x1, 0x5, 0xf5, "b47849", "b541"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x33, 0x4, {0x7, 0x25, 0x1, 0x1, 0x3b, 0x9}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x8, 0x3, 0x3, 0xff, 0x8e}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0xb3, &(0x7f0000000180)=@string={0xb3, 0x3, "3c474c708a2feab61a5cd7101485136e210c2f05cc7bad4ce96a3a8d496b2ee9e57a825c49d2b1d92a2ab7fc52dbc6397c65629c524ece07d977dca62ea2d9c249641f5f5504804917ae392c356fe1d4365389095f35bf3143e156106694c7fdd62eed821b3a985e46a198e35d19540dea11a9ad9446d87103b2e72276a8fef0615608dedf0a17f503e22603c2bfa52d8172d815dc2e5c6f275f41c69aa8b7d7fe6f55cb45219c2ed6246c06ed18bea89a"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x416}}, {0x76, &(0x7f0000000280)=@string={0x76, 0x3, "77acf08626ee4e42170dd8de917cfd04f1337ebc38410d7db333b0f02a4aa49109be7ce3fe8649f86989028cc74995f8a663931ec4e779b897c719b63fae160b7ab3bf914286b70efae5944b859837bc0c2dab4162632ee3ca13e9d6244d516a084b3f2aca2bd287fe45990e541f630bfd80926d"}}, {0x5f, &(0x7f0000000300)=@string={0x5f, 0x3, "c58b26b96dc96c4cbe1d2c489d158ddf85850792e279a6b6a4f94f335fd57639c52019a9120892738d117388583cdcc238e19cbb268bfebcc4246cfbb908df45c447b188d594dca36ace3eec3c26f929a4a418324eebd8653b92859412"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41e}}]}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x2081, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.087945589s ago: executing program 2 (id=6539): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000001880)={{0x2, 0x0, 0x80, {0x6000, 0xd000, 0x2}}, "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", "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"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x200, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x118) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900b80006990300000015001500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000cb69296dcfc379ee1b58adbd36b2cb49dbb625e451222c8ae8990840ebd8063a00190ec06ad02c07907473cb229131a179bf106aa2e4855383421915aba2f8d14372ccac04653ad2e183edb2d12faf020a6f892c5eff025bda6f65b0c1c12fcbd569bf80114b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28, @ANYRES16=r0, @ANYRES16=r5], 0x48) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000023000040"]) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xf, &(0x7f0000000380)=ANY=[@ANYRESOCT=r9], &(0x7f0000000000)='syzkaller\x00', 0xc, 0x0, 0x0, 0x40f00, 0x5c6e14bf4d672326, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @value=r3}, 0x94) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) dup(r10) 1.888077955s ago: executing program 0 (id=6540): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0100001900010000000000ffdbdf25fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000020000000000000000000000000000000007d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440105"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.608605898s ago: executing program 0 (id=6541): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x38, 0xffffffff, 0xfffffffe, 0xb4c, 0x9, 0x9, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x3ff, 0x8, 0x8000000000000000, 0xcc, 0x6, 0x9, 0x1}, 0x0) io_setup(0x8, &(0x7f0000000000)) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000480)) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = getpid() r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x800, 0x4, 0x316}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000001000000040000000800000000000000", @ANYRES32, @ANYBLOB="000000fe000000000000000006000000000000006b298688ac201b4f6ad0a9b632f21d811a5ea6862f5855300b40ef3e7cbbd432486601e3a09bf00aa8338b39a3ce89ac1976070501967de806e49640d5a8743014a2ad76b8b4876da4e428243ed997a1b1e2ba22f212e21fcafb778fff146c5e64716a419b60ea0e2dbb1914e244196d2cedabf32a7ed6783d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_pidfd_open(r3, 0x0) setns(r7, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800}) open$dir(&(0x7f0000000080)='./file0\x00', 0x400000, 0x100) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x418580, 0x0) socket$inet(0x2b, 0x801, 0x0) 1.355800626s ago: executing program 4 (id=6542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) fcntl$setlease(r0, 0x400, 0x1) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="30000000110001002dbd7000000000000800000009"], 0x30}], 0x1, 0x0, 0x0, 0x20000004}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x4, 0x7}, 0x9b, 0x0, 0xa, 0x4, 0x6, 0x9, 0x15, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x20040800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) syz_usb_connect(0x2, 0x98, &(0x7f0000001140)={{0x12, 0x1, 0x110, 0x5e, 0x11, 0xae, 0x8, 0x7ca, 0xb800, 0xbe1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xce, 0x2, 0x3, 0x3, 0x0, 0x0, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x9}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0x10, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x7, 0x80}}]}}, {{0x9, 0x4, 0xf1, 0x1, 0x4, 0x63, 0xab, 0x97, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xd81}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0xb, 0x82, 0xb}}]}}, {{0x9, 0x4, 0x6, 0x4b, 0x0, 0x8a, 0x67, 0x98, 0x7}}]}}]}}, 0x0) 1.354013486s ago: executing program 2 (id=6543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000006000000000000000001400200000000000000000000000ffffac1414bb06001b004e"], 0x6c}}, 0x0) 1.060651711s ago: executing program 2 (id=6544): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0100001900010000000000ffdbdf25fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000020000000000000007d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000004d63300000000000000000000000000000000000000000000000000000000000000000000000000000044000000fe8000000000000000000000000000bb000000003c"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 764.576581ms ago: executing program 1 (id=6545): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file2/file0\x00'}, 0x6e) 676.138116ms ago: executing program 2 (id=6546): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5801000016000100000000000000000000000000000000000000000000000001ffffffff00000000000000000000000000000000000000080000ff0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c00000000000000000000000000ffffac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000002cbd0000000000000000000000000000000000000000000000000000ff"], 0x158}}, 0x0) 300.632765ms ago: executing program 2 (id=6547): r0 = syz_open_procfs(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) (async) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c0c2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200042, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002200)=@generic={&(0x7f00000021c0)='./file0\x00', 0x0, 0x10}, 0x18) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) execve(0x0, 0x0, 0x0) (async) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) r11 = fsmount(r0, 0x1, 0x9) ioctl$PPPIOCSFLAGS1(r11, 0x40047459, &(0x7f00000020c0)=0x80) 291.514852ms ago: executing program 1 (id=6548): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = eventfd(0x5) poll(&(0x7f00000072c0)=[{r2, 0x1110}], 0x1, 0x9) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000007ffd, 0x0, 0xd4}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12010066d5067f102505a8a440000102030109021b000101f0880f0904000901070101108cd730496dc05ab3b22a31a9d20909050102000c"], &(0x7f0000000540)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0xc, 0x7, 0xc, 0xff, 0x6}, 0xfe, &(0x7f0000000880)={0x5, 0xf, 0xfe, 0x5, [@generic={0x6d, 0x10, 0xb, "5c6990d346576559ab906ef6e49463d947b3118cc5e22d8ccf3760ae469b6af493812bcaa91ade4c91844cc2dd277678c77e4a6a7e25af9c48f7f3e51f138e868732198cfcb643954549453eb39aa36d476043d8e591afdbf84452f459201431e1bac409d4a7da898d60"}, @generic={0x5a, 0x10, 0xa, "9b1ff72e2b89d94f9d37b4a0ed04067609cb63c7368606fafa49ecea2f99c26d595b3e15c11332be5029322fe31a88ec4f36936c8ac7fcfe20d31c048d3f469c808f3bd7af50e14d053e3e74376cdb954b392a0358cafa"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x6, 0xf, 0x4, [0x603f, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "e6bf7137f350214d2e5e891fa93c382e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x2, 0x7}]}, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x444}}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') read$rfkill(r4, 0x0, 0x300) syz_usb_ep_write(r3, 0x8, 0x4, &(0x7f00000005c0)="ff810df6") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fchown(r7, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 224.346372ms ago: executing program 3 (id=6549): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xb9, 0xcb, 0xa7, 0x40, 0x7f55, 0x2fc, 0x20c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x6, 0x6, 0xd0, 0x6, [{{0x9, 0x4, 0x90, 0x1, 0x2, 0x1, 0x3, 0x7e, 0x40, [], [{{0x9, 0x5, 0x3, 0x3, 0x400, 0x71, 0x81, 0x2}}, {{0x9, 0x5, 0xa, 0x4, 0x8, 0xb, 0x4, 0x4}}]}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 0s ago: executing program 2 (id=6550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000ec030100c0"]) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000300)=0x8) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={r6, 0x8, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x8000, @remote, 0x1}]}, &(0x7f0000000080)=0x19) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={r7, @in={{0x2, 0x4e21, @empty}}, 0x4e, 0x6, 0x0, 0x3, 0x414d6714bf78e135, 0x80000001, 0x3}, 0x9c) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) (async) r10 = dup(r8) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) ioctl$TUNSETSNDBUF(r11, 0x400454d4, &(0x7f0000000040)=0x2) (async, rerun: 64) write$tun(r11, &(0x7f0000000440)=ANY=[@ANYBLOB="0800080001030300ffff140005004510002800000000002f9078ac1e0001ac1414aa00004e20e32d454bf77b559cc124edced3a08701f8cd7f41d4", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000590780000"], 0x36) (async) r12 = getpid() syz_pidfd_open(r12, 0x0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x0, 0x3, 0x707, 0x3, 0x2, r12}) (async) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000098000040"]) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async, rerun: 64) r14 = socket$inet(0x2, 0x4000000000000001, 0x0) (async, rerun: 64) r15 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r16, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r16, r17, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r14, 0x0, 0x0, 0x0, 0x80000, 0x1}) (async) io_uring_enter(r15, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={0x1d, r13, 0x1, {0x1, 0x0, 0x3}, 0xfe}, 0x18) kernel console output (not intermixed with test programs): etwork mode [ 1819.541220][T27875] tipc: Node identity e20efff4c26e, cluster identity 4711 [ 1819.900596][T27875] tipc: Enabled bearer , priority 0 [ 1820.039738][T27871] tipc: Resetting bearer [ 1820.682313][T27869] tipc: Disabling bearer [ 1822.373632][T27891] loop2: detected capacity change from 0 to 7 [ 1822.429144][T27891] loop2: [POWERTEC] p1 p2 [ 1822.439695][T27891] loop2: p1 start 2883584 is beyond EOD, truncated [ 1822.489809][T13829] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1822.499285][T27891] loop2: p2 start 983040 is beyond EOD, truncated [ 1822.711183][T13829] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.745752][T13829] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1822.842134][T13829] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1822.852627][T13829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.076829][T27898] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6148'. [ 1823.548040][T27907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1823.554487][T27912] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.6149'. [ 1823.571433][T27912] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.6149'. [ 1823.581120][T27912] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6149'. [ 1823.849639][T13835] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 1823.995901][T24009] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1824.014061][T24009] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 1824.024149][T24009] usb 2-1: chopping to 0 config(s) [ 1824.047210][T24009] usb 2-1: can't read configurations, error -32 [ 1824.070746][T13835] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1583, setting to 64 [ 1824.096804][T13835] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1824.160110][T13835] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x3 has invalid maxpacket 43817, setting to 64 [ 1824.219497][T24009] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1824.307088][T13835] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1824.398920][T13835] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1824.419246][T24009] usb 2-1: device descriptor read/64, error -32 [ 1824.461874][T13835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.516187][T13835] usb 4-1: Product: ь [ 1824.529553][T24009] usb usb2-port1: attempt power cycle [ 1824.557998][T13835] usb 4-1: Manufacturer: ࠧ [ 1824.587105][T13835] usb 4-1: SerialNumber: syz [ 1824.624722][T27911] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1824.655506][T27911] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1824.712117][T27911] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1825.017980][T13835] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1825.034085][T13835] usb 4-1: USB disconnect, device number 116 [ 1825.212950][T27305] usb 5-1: USB disconnect, device number 25 [ 1825.869278][T24009] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1826.062922][T24009] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 1826.080720][T24009] usb 2-1: config 0 has no interface number 0 [ 1826.095969][T24009] usb 2-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64 [ 1826.148924][T24009] usb 2-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1826.199299][T24009] usb 2-1: config 0 interface 84 has no altsetting 0 [ 1826.229205][T24009] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 1826.292690][T24009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.333889][T24009] usb 2-1: config 0 descriptor?? [ 1826.361235][T27917] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1826.371174][T24009] option 2-1:0.84: GSM modem (1-port) converter detected [ 1826.880626][T27916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6151'. [ 1826.971919][T27305] usb 2-1: USB disconnect, device number 112 [ 1826.984725][T27305] option 2-1:0.84: device disconnected [ 1828.319659][ T5854] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1828.405012][T24009] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1828.626331][ T5854] usb 4-1: Using ep0 maxpacket: 16 [ 1828.675693][ T5854] usb 4-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 1828.690559][T24009] usb 2-1: Using ep0 maxpacket: 16 [ 1828.739479][ T5854] usb 4-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1828.793083][ T5854] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1828.826060][ T5854] usb 4-1: string descriptor 0 read error: -22 [ 1828.868216][ T5906] usb 1-1: USB disconnect, device number 125 [ 1828.920476][ T5854] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1829.030319][ T5906] usblp0: removed [ 1829.030477][ T5166] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1829.046246][ T5166] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1829.054775][ T5166] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1829.063222][ T5166] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1829.073201][ T5166] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1829.201086][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.713548][T17190] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1829.939171][T13829] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1830.123565][T17190] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1830.166858][T13829] usb 5-1: config 0 has no interfaces? [ 1830.190039][T13829] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1830.241547][T13829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.277068][T13829] usb 5-1: Product: syz [ 1830.389339][T13829] usb 5-1: Manufacturer: syz [ 1830.451472][T13829] usb 5-1: SerialNumber: syz [ 1830.477573][T13829] usb 5-1: config 0 descriptor?? [ 1830.830499][T27963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1830.840925][T27963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.072642][T17190] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1831.110599][T17190] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.199219][T24021] Bluetooth: hci1: command tx timeout [ 1831.357312][T27965] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6165'. [ 1831.426095][T27965] netlink: 51 bytes leftover after parsing attributes in process `syz.2.6165'. [ 1831.583819][T27965] netlink: 51 bytes leftover after parsing attributes in process `syz.2.6165'. [ 1831.757769][T17190] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1831.779428][T17190] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.894395][ T5906] usb 4-1: USB disconnect, device number 117 [ 1831.951888][T24009] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1831.990871][T24009] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1832.026255][T24009] usb 2-1: can't read configurations, error -71 [ 1832.102617][T27974] loop2: detected capacity change from 0 to 7 [ 1832.158192][T27974] Dev loop2: unable to read RDB block 7 [ 1832.164114][T17190] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1832.164176][T17190] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.194023][T27974] loop2: unable to read partition table [ 1832.209389][T27974] loop2: partition table beyond EOD, truncated [ 1832.222362][T27974] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1832.384280][T27957] chnl_net:caif_netlink_parms(): no params data found [ 1832.556800][T27980] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1832.753815][T27993] loop2: detected capacity change from 0 to 7 [ 1832.765890][ T6135] Dev loop2: unable to read RDB block 7 [ 1832.773521][ T6135] loop2: AHDI p1 p2 [ 1832.777579][ T6135] loop2: partition table partially beyond EOD, truncated [ 1832.823932][T27993] Dev loop2: unable to read RDB block 7 [ 1832.842412][T27993] loop2: AHDI p1 p2 [ 1832.876236][T27993] loop2: partition table partially beyond EOD, truncated [ 1832.902916][T27957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.939273][T27957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1832.962712][T27957] bridge_slave_0: entered allmulticast mode [ 1832.988787][T27957] bridge_slave_0: entered promiscuous mode [ 1833.099844][ T5854] usb 5-1: USB disconnect, device number 26 [ 1833.113624][T27957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.144738][T27957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.167081][T27957] bridge_slave_1: entered allmulticast mode [ 1833.179132][T27957] bridge_slave_1: entered promiscuous mode [ 1833.202839][T17190] bridge_slave_1: left allmulticast mode [ 1833.239173][T17190] bridge_slave_1: left promiscuous mode [ 1833.257233][T17190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.279922][T24021] Bluetooth: hci1: command tx timeout [ 1833.481307][T17190] bridge_slave_0: left allmulticast mode [ 1833.499344][T17190] bridge_slave_0: left promiscuous mode [ 1833.559689][T17190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1833.849288][T28015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1833.882650][T28015] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.6177'. [ 1833.893689][T28015] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.6177'. [ 1833.903281][ T5854] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1833.911266][T28015] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6177'. [ 1834.094838][ T5854] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.115070][ T5854] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1834.155355][ T5854] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1834.196259][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.461509][T28007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6175'. [ 1835.359247][T24021] Bluetooth: hci1: command tx timeout [ 1835.539262][T17190] team0: Port device geneve0 removed [ 1835.645301][T17190] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1835.788140][T17190] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1835.905881][T28029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6178'. [ 1835.920520][T28029] netlink: 'syz.2.6178': attribute type 9 has an invalid length. [ 1836.437195][ T5906] usb 4-1: USB disconnect, device number 118 [ 1836.742042][T28038] loop2: detected capacity change from 0 to 7 [ 1836.753311][T28038] Dev loop2: unable to read RDB block 7 [ 1836.765038][T28038] loop2: unable to read partition table [ 1836.780564][T28038] loop2: partition table beyond EOD, truncated [ 1836.786919][T28038] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1836.968160][T17190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1836.980738][T17190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1836.991006][T17190] bond0 (unregistering): Released all slaves [ 1837.217250][T28047] syz.3.6184: attempt to access beyond end of device [ 1837.217250][T28047] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1837.429964][T17190] bond1 (unregistering): Released all slaves [ 1837.439535][T24021] Bluetooth: hci1: command tx timeout [ 1837.712019][T17190] bond2 (unregistering): Released all slaves [ 1837.875150][T17190] bond3 (unregistering): Released all slaves [ 1838.010859][T17190] bond4 (unregistering): Released all slaves [ 1838.152827][T17190] bond5 (unregistering): Released all slaves [ 1838.291270][T17190] bond6 (unregistering): Released all slaves [ 1838.337631][T28036] FAULT_INJECTION: forcing a failure. [ 1838.337631][T28036] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.358402][T28036] CPU: 1 UID: 0 PID: 28036 Comm: syz.2.6180 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1838.358433][T28036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1838.358446][T28036] Call Trace: [ 1838.358455][T28036] [ 1838.358465][T28036] dump_stack_lvl+0x189/0x250 [ 1838.358495][T28036] ? __pfx____ratelimit+0x10/0x10 [ 1838.358519][T28036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1838.358545][T28036] ? __pfx__printk+0x10/0x10 [ 1838.358579][T28036] ? __pfx___might_resched+0x10/0x10 [ 1838.358601][T28036] ? fs_reclaim_acquire+0x7d/0x100 [ 1838.358628][T28036] should_fail_ex+0x414/0x560 [ 1838.358656][T28036] should_failslab+0xa8/0x100 [ 1838.358689][T28036] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1838.358721][T28036] ? kobject_set_name_vargs+0x61/0x110 [ 1838.358752][T28036] kstrdup+0x42/0x100 [ 1838.358800][T28036] kobject_set_name_vargs+0x61/0x110 [ 1838.358836][T28036] dev_set_name+0xd4/0x120 [ 1838.358870][T28036] ? __pfx_dev_set_name+0x10/0x10 [ 1838.358904][T28036] ? device_initialize+0x24b/0x440 [ 1838.358938][T28036] netdev_register_kobject+0xb7/0x2f0 [ 1838.358967][T28036] register_netdevice+0x126c/0x1ae0 [ 1838.358995][T28036] ? __pfx_css_rstat_updated+0x10/0x10 [ 1838.359032][T28036] ? __pfx_register_netdevice+0x10/0x10 [ 1838.359052][T28036] ? __sock_sendmsg+0x219/0x270 [ 1838.359075][T28036] ? ____sys_sendmsg+0x505/0x830 [ 1838.359091][T28036] ? ___sys_sendmsg+0x21f/0x2a0 [ 1838.359108][T28036] ? __x64_sys_sendmsg+0x19b/0x260 [ 1838.359125][T28036] ? do_syscall_64+0xfa/0x3b0 [ 1838.359146][T28036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.359181][T28036] macsec_newlink+0x6be/0x11b0 [ 1838.359231][T28036] ? __pfx_macsec_newlink+0x10/0x10 [ 1838.359259][T28036] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 1838.359282][T28036] ? rcu_is_watching+0x15/0xb0 [ 1838.359305][T28036] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 1838.359327][T28036] ? trace_kmalloc+0x1f/0xd0 [ 1838.359352][T28036] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 1838.359382][T28036] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 1838.359411][T28036] ? validate_linkmsg+0x765/0x950 [ 1838.359447][T28036] ? __pfx_macsec_newlink+0x10/0x10 [ 1838.359477][T28036] rtnl_newlink_create+0x30d/0xb00 [ 1838.359514][T28036] ? __mutex_lock+0x51b/0xe80 [ 1838.359543][T28036] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1838.359573][T28036] ? rtnl_newlink+0x8db/0x1c70 [ 1838.359604][T28036] ? __pfx___mutex_lock+0x10/0x10 [ 1838.359638][T28036] ? ns_capable+0x8a/0xf0 [ 1838.359666][T28036] rtnl_newlink+0x16d6/0x1c70 [ 1838.359696][T28036] ? netlink_sendmsg+0x805/0xb30 [ 1838.359739][T28036] ? __pfx_rtnl_newlink+0x10/0x10 [ 1838.359793][T28036] ? kasan_quarantine_put+0xdd/0x220 [ 1838.359828][T28036] ? lockdep_hardirqs_on+0x9c/0x150 [ 1838.359858][T28036] ? nlmon_xmit+0xb0/0x100 [ 1838.359883][T28036] ? kmem_cache_free+0x18f/0x400 [ 1838.359920][T28036] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1838.359944][T28036] ? lockdep_hardirqs_on+0x9c/0x150 [ 1838.359968][T28036] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1838.359992][T28036] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1838.360020][T28036] ? __dev_queue_xmit+0x27e/0x3a70 [ 1838.360057][T28036] ? __lock_acquire+0xab9/0xd20 [ 1838.360106][T28036] ? __pfx_rtnl_newlink+0x10/0x10 [ 1838.360135][T28036] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1838.360167][T28036] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1838.360195][T28036] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1838.360221][T28036] ? ref_tracker_free+0x63a/0x7d0 [ 1838.360244][T28036] ? __copy_skb_header+0xa7/0x550 [ 1838.360267][T28036] ? __pfx_ref_tracker_free+0x10/0x10 [ 1838.360291][T28036] ? __skb_clone+0x63/0x7a0 [ 1838.360320][T28036] netlink_rcv_skb+0x205/0x470 [ 1838.360351][T28036] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1838.360382][T28036] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1838.360426][T28036] ? netlink_deliver_tap+0x2e/0x1b0 [ 1838.360455][T28036] ? netlink_deliver_tap+0x2e/0x1b0 [ 1838.360491][T28036] netlink_unicast+0x759/0x8e0 [ 1838.360531][T28036] netlink_sendmsg+0x805/0xb30 [ 1838.360572][T28036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1838.360606][T28036] ? aa_sock_msg_perm+0x94/0x160 [ 1838.360631][T28036] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1838.360654][T28036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1838.360686][T28036] __sock_sendmsg+0x219/0x270 [ 1838.360715][T28036] ____sys_sendmsg+0x505/0x830 [ 1838.360742][T28036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1838.360772][T28036] ? import_iovec+0x74/0xa0 [ 1838.360806][T28036] ___sys_sendmsg+0x21f/0x2a0 [ 1838.360857][T28036] ? __pfx____sys_sendmsg+0x10/0x10 [ 1838.360916][T28036] ? __fget_files+0x2a/0x420 [ 1838.360934][T28036] ? __fget_files+0x3a0/0x420 [ 1838.360966][T28036] __x64_sys_sendmsg+0x19b/0x260 [ 1838.360989][T28036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1838.361020][T28036] ? __pfx_ksys_write+0x10/0x10 [ 1838.361047][T28036] ? rcu_is_watching+0x15/0xb0 [ 1838.361078][T28036] ? do_syscall_64+0xbe/0x3b0 [ 1838.361107][T28036] do_syscall_64+0xfa/0x3b0 [ 1838.361128][T28036] ? lockdep_hardirqs_on+0x9c/0x150 [ 1838.361149][T28036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.361171][T28036] ? clear_bhb_loop+0x60/0xb0 [ 1838.361197][T28036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.361217][T28036] RIP: 0033:0x7fa78e78e9a9 [ 1838.361236][T28036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1838.361253][T28036] RSP: 002b:00007fa78f618038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1838.361276][T28036] RAX: ffffffffffffffda RBX: 00007fa78e9b5fa0 RCX: 00007fa78e78e9a9 [ 1838.361291][T28036] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1838.361304][T28036] RBP: 00007fa78f618090 R08: 0000000000000000 R09: 0000000000000000 [ 1838.361317][T28036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1838.361328][T28036] R13: 0000000000000000 R14: 00007fa78e9b5fa0 R15: 00007fa78eadfa28 [ 1838.361360][T28036] [ 1838.397038][T28049] loop2: detected capacity change from 0 to 7 [ 1838.956539][T27290] Dev loop2: unable to read RDB block 7 [ 1838.993311][T27290] loop2: AHDI p1 p2 [ 1839.009883][T27290] loop2: partition table partially beyond EOD, truncated [ 1839.030688][T28049] Dev loop2: unable to read RDB block 7 [ 1839.045493][T28049] loop2: AHDI p1 p2 [ 1839.054750][T28055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6188'. [ 1839.083472][T28049] loop2: partition table partially beyond EOD, truncated [ 1839.118365][T27957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1839.136544][T28055] netlink: 'syz.1.6188': attribute type 9 has an invalid length. [ 1839.157539][T28057] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6187'. [ 1839.183754][ T5216] Dev loop2: unable to read RDB block 7 [ 1839.193100][ T5216] loop2: AHDI p1 p2 [ 1839.197089][ T5216] loop2: partition table partially beyond EOD, truncated [ 1839.209239][T24009] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1839.213432][T27957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1839.480290][T24009] usb 4-1: config 0 has no interfaces? [ 1839.506359][T24009] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1839.515529][T24009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.529053][T24009] usb 4-1: Product: syz [ 1839.533267][T24009] usb 4-1: Manufacturer: syz [ 1839.553854][T24009] usb 4-1: SerialNumber: syz [ 1839.636694][T24009] usb 4-1: config 0 descriptor?? [ 1839.864804][T27957] team0: Port device team_slave_0 added [ 1839.945186][T27305] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1840.006700][T27957] team0: Port device team_slave_1 added [ 1840.063337][T28072] tipc: Cannot configure node identity twice [ 1840.253096][T27305] usb 3-1: config 0 has no interfaces? [ 1840.264161][T28076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.404890][T27305] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1840.436739][T27305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.471935][T27305] usb 3-1: Product: syz [ 1840.476644][T28076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.495010][T27305] usb 3-1: Manufacturer: syz [ 1840.505791][T27957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1840.554751][T27305] usb 3-1: SerialNumber: syz [ 1840.568958][T27957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1840.609137][T28081] loop2: detected capacity change from 0 to 7 [ 1840.616751][T28081] Dev loop2: unable to read RDB block 7 [ 1840.618750][T27305] usb 3-1: config 0 descriptor?? [ 1840.628075][T28081] loop2: unable to read partition table [ 1840.648280][T28081] loop2: partition table beyond EOD, truncated [ 1840.685383][T28081] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1840.754995][T27957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1840.898896][T17190] tipc: Left network mode [ 1840.957614][T27957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1841.003721][T27957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1841.056802][T27957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1841.169557][T28085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6194'. [ 1841.346325][T28085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1841.454938][T27957] hsr_slave_0: entered promiscuous mode [ 1841.491036][T27957] hsr_slave_1: entered promiscuous mode [ 1841.533078][T27957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1841.558615][T27957] Cannot create hsr debugfs directory [ 1842.264391][T17190] mac80211_hwsim hwsim23 wlan0 (unregistering): left allmulticast mode [ 1842.653976][T17190] hsr_slave_0: left promiscuous mode [ 1842.673667][T17190] hsr_slave_1: left promiscuous mode [ 1842.689989][T17190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1842.717171][T17190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1842.754591][T17190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1842.787066][T17190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1842.830808][T17190] batman_adv: batadv0: Removing interface: vlan0 [ 1842.950217][T17190] batadv0: left allmulticast mode [ 1842.970287][T17190] batadv0: left promiscuous mode [ 1842.976047][T17190] veth1_macvtap: left allmulticast mode [ 1843.042785][T17190] veth0_macvtap: left promiscuous mode [ 1843.048419][T17190] veth1_vlan: left promiscuous mode [ 1843.057451][T26117] usb 4-1: USB disconnect, device number 119 [ 1843.100724][T17190] veth0_vlan: left promiscuous mode [ 1843.240276][T28098] loop2: detected capacity change from 0 to 7 [ 1843.298253][ T6135] Dev loop2: unable to read RDB block 7 [ 1843.317696][T13829] usb 3-1: USB disconnect, device number 96 [ 1843.339127][ T6135] loop2: AHDI p2 p3 [ 1843.343129][ T6135] loop2: partition table partially beyond EOD, truncated [ 1843.424020][ T6135] loop2: p3 start 335544320 is beyond EOD, truncated [ 1843.468160][T28098] Dev loop2: unable to read RDB block 7 [ 1843.496435][T28098] loop2: AHDI p2 p3 [ 1843.539274][T28098] loop2: partition table partially beyond EOD, truncated [ 1843.547331][T28098] loop2: p3 start 335544320 is beyond EOD, truncated [ 1843.742242][T28106] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1843.754175][T28106] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.6197'. [ 1843.764025][T28106] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.6197'. [ 1843.773965][T28106] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6197'. [ 1844.114065][T28112] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6200'. [ 1844.212554][T28113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1844.231420][T28113] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.6199'. [ 1844.242510][T28113] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.6199'. [ 1844.253970][T28113] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6199'. [ 1844.634810][T28116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6201'. [ 1844.712868][T28116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6201'. [ 1844.769183][T28116] netlink: 'syz.2.6201': attribute type 11 has an invalid length. [ 1845.617070][T28127] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6206'. [ 1846.020862][ T5854] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1846.187792][ T5854] usb 2-1: config 0 has no interfaces? [ 1846.234244][T17190] team0 (unregistering): Port device team_slave_1 removed [ 1846.242475][ T5854] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1846.254211][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.279826][ T5854] usb 2-1: Product: syz [ 1846.284129][ T5854] usb 2-1: Manufacturer: syz [ 1846.310568][ T5854] usb 2-1: SerialNumber: syz [ 1846.388560][ T5854] usb 2-1: config 0 descriptor?? [ 1846.475081][T17190] team0 (unregistering): Port device team_slave_0 removed [ 1846.744363][T28138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1846.754568][T28138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.227816][ T5906] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1848.250985][T26117] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1848.482537][T26117] usb 5-1: Using ep0 maxpacket: 16 [ 1848.489610][ T5906] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1494, setting to 1024 [ 1848.711062][ T5906] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 1849.003619][ T5906] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1849.125797][ T5906] usb 3-1: New USB device found, idVendor=046d, idProduct=b309, bcdDevice= 0.40 [ 1849.135155][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.176149][ T5906] usb 3-1: Product: syz [ 1849.200399][ T5906] usb 3-1: Manufacturer: syz [ 1849.339480][ T5906] usb 3-1: SerialNumber: syz [ 1849.404835][T28146] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1849.513588][T13829] usb 2-1: USB disconnect, device number 115 [ 1850.248290][T27957] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1850.326931][T27957] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1850.427215][T27957] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1850.506105][T27957] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1851.007922][ T5906] usbhid 3-1:1.0: can't add hid device: -71 [ 1851.038354][ T5906] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1851.149381][ T5906] usb 3-1: USB disconnect, device number 97 [ 1851.419895][T27957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1851.721873][T13835] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1851.733335][T27957] 8021q: adding VLAN 0 to HW filter on device team0 [ 1851.785496][T26788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.792839][T26788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1851.874399][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.881670][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1851.909194][T13835] usb 3-1: Using ep0 maxpacket: 8 [ 1851.924118][T13835] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1851.968374][T13835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.003892][T13835] usb 3-1: Product: syz [ 1852.014500][T13835] usb 3-1: Manufacturer: syz [ 1852.033544][T13835] usb 3-1: SerialNumber: syz [ 1852.075446][T13835] usb 3-1: config 0 descriptor?? [ 1852.172892][T26117] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1852.218081][T26117] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1852.245582][T26117] usb 5-1: can't read configurations, error -71 [ 1852.301222][T13835] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1852.303117][T27957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1852.383357][T28198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6220'. [ 1852.488307][T28198] bond2: entered promiscuous mode [ 1852.498364][T28198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1852.571151][T28202] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1852.598921][T28202] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1852.614926][T28202] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 1852.707018][T27957] veth0_vlan: entered promiscuous mode [ 1852.775251][T27957] veth1_vlan: entered promiscuous mode [ 1852.867757][T27957] veth0_macvtap: entered promiscuous mode [ 1852.923400][T27957] veth1_macvtap: entered promiscuous mode [ 1852.993260][T27957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1853.032086][T27957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1853.125240][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.132085][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.152702][T27957] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.155901][T13835] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1853.171673][T27957] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.181914][T27957] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.192280][T27957] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.228910][T13835] usb 3-1: USB disconnect, device number 98 [ 1853.409202][T26117] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1853.586315][T26117] usb 5-1: Using ep0 maxpacket: 16 [ 1853.652103][T26117] usb 5-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 1853.723966][T17190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1853.748442][T26117] usb 5-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1853.801785][T17190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1853.811731][T26117] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1853.850110][T26117] usb 5-1: string descriptor 0 read error: -22 [ 1853.856665][T26117] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1853.866436][T26117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.946342][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1854.017379][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1855.010424][T28236] syzkaller1: entered promiscuous mode [ 1855.023178][T28236] syzkaller1: entered allmulticast mode [ 1855.064927][T28241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1855.910419][T28253] pimreg: entered allmulticast mode [ 1856.088381][T28253] nvme_fabrics: missing parameter 'transport=%s' [ 1856.097244][T28253] nvme_fabrics: missing parameter 'nqn=%s' [ 1856.638204][ T5166] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1856.651650][ T5166] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1856.667007][ T5166] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1856.682528][ T5166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1856.690423][ T5166] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1857.075429][T13829] usb 5-1: USB disconnect, device number 29 [ 1858.127051][T17190] bridge_slave_1: left allmulticast mode [ 1858.139565][T17190] bridge_slave_1: left promiscuous mode [ 1858.145520][T17190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.208097][T17190] bridge_slave_0: left allmulticast mode [ 1858.226683][T17190] bridge_slave_0: left promiscuous mode [ 1858.233624][T17190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.737136][T28287] netlink: 'syz.3.6230': attribute type 4 has an invalid length. [ 1858.826668][T24021] Bluetooth: hci4: command tx timeout [ 1858.960268][ T5906] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1859.112278][T28288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1859.143863][ T5906] usb 3-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1859.157180][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1859.169050][ T5906] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1859.204589][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.273134][ T5906] usb 3-1: config 0 descriptor?? [ 1859.429173][T26117] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1859.623205][T28293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.671874][T28293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.751902][T26117] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1859.792184][T26117] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1859.869122][T28293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.879323][T26117] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1859.924227][T28293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.957005][T26117] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1860.009161][T26117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.291285][T28293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6232'. [ 1860.304537][T26117] usb 1-1: Product: syz [ 1860.308785][T26117] usb 1-1: Manufacturer: syz [ 1860.336730][T26117] usb 1-1: SerialNumber: syz [ 1860.362923][T26117] hub 1-1:1.0: bad descriptor, ignoring hub [ 1860.372842][T28293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6232'. [ 1860.389369][T26117] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1860.496995][T28315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6232'. [ 1860.946876][T24021] Bluetooth: hci4: command tx timeout [ 1860.964774][T26117] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 126 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1862.689908][T17190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1862.753751][T17190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1862.776868][T17190] bond0 (unregistering): Released all slaves [ 1862.810849][T28337] nvme_fabrics: missing parameter 'transport=%s' [ 1862.818156][T28337] nvme_fabrics: missing parameter 'nqn=%s' [ 1862.971406][T24021] Bluetooth: hci4: command tx timeout [ 1863.799411][T17190] bond1 (unregistering): Released all slaves [ 1864.334398][ T5906] usbhid 3-1:0.0: can't add hid device: -32 [ 1864.340664][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1864.509474][T17190] bond2 (unregistering): Released all slaves [ 1865.053347][T24021] Bluetooth: hci4: command tx timeout [ 1865.069615][T17190] bond3 (unregistering): Released all slaves [ 1865.408688][T17190] bond4 (unregistering): Released all slaves [ 1865.625614][T17190] bond5 (unregistering): Released all slaves [ 1865.800693][T26117] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1865.811536][T17190] bond6 (unregistering): Released all slaves [ 1865.969162][T26117] usb 5-1: Using ep0 maxpacket: 32 [ 1865.975132][T26117] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 1866.008201][T26117] usb 5-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=85.bd [ 1866.017414][T26117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=254 [ 1866.019946][T17190] bond7 (unregistering): Released all slaves [ 1866.026486][T26117] usb 5-1: Product: syz [ 1866.036278][T26117] usb 5-1: Manufacturer: syz [ 1866.041402][T26117] usb 5-1: SerialNumber: syz [ 1866.050636][T26117] usb 5-1: config 0 descriptor?? [ 1866.215328][T17190] bond8 (unregistering): Released all slaves [ 1866.272078][T24009] usb 5-1: USB disconnect, device number 30 [ 1866.428356][T17190] bond9 (unregistering): Released all slaves [ 1866.445267][T17190] bond10 (unregistering): Released all slaves [ 1866.692976][T26117] usb 3-1: USB disconnect, device number 99 [ 1866.703073][T17190] tipc: Left network mode [ 1866.902117][T28258] chnl_net:caif_netlink_parms(): no params data found [ 1867.093889][T24009] usb 4-1: new low-speed USB device number 120 using dummy_hcd [ 1867.381243][T24009] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1867.395684][T28386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6246'. [ 1867.409983][T28386] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6246'. [ 1867.427304][T24009] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1867.494205][T24009] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1867.628267][T24009] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1867.642817][T24009] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1867.682544][T24009] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1867.712012][ T5906] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1867.749093][T24009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.782792][T28375] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1867.841833][T24009] hub 4-1:1.0: bad descriptor, ignoring hub [ 1867.908315][T24009] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1867.926951][T24009] cdc_wdm 4-1:1.0: skipping garbage [ 1867.975652][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1868.004858][T24009] cdc_wdm 4-1:1.0: skipping garbage [ 1868.086172][ T5854] usb 1-1: USB disconnect, device number 126 [ 1868.093681][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1868.095754][T28375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.113687][T24009] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1868.139846][ T5854] usblp0: removed [ 1868.156098][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1868.186759][T24009] cdc_wdm 4-1:1.0: Unknown control protocol [ 1868.207115][T28375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1868.229076][ T5906] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1868.257433][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.327868][ T5906] usb 5-1: config 0 descriptor?? [ 1868.559149][T24009] usb 4-1: USB disconnect, device number 120 [ 1868.800966][T28386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.815370][T28386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1869.144321][T28407] nvme_fabrics: missing parameter 'transport=%s' [ 1869.151713][T28407] nvme_fabrics: missing parameter 'nqn=%s' [ 1869.766256][T28406] pimreg3: entered allmulticast mode [ 1870.138744][T28258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.169377][T28258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.239642][T28258] bridge_slave_0: entered allmulticast mode [ 1870.288441][T28258] bridge_slave_0: entered promiscuous mode [ 1870.454630][T28258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.482426][T28258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1870.526940][T28258] bridge_slave_1: entered allmulticast mode [ 1870.584638][T28258] bridge_slave_1: entered promiscuous mode [ 1870.879344][T17190] hsr_slave_0: left promiscuous mode [ 1870.925883][T17190] hsr_slave_1: left promiscuous mode [ 1870.959545][T17190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1871.008593][T17190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1871.289200][T24009] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1871.475317][T24009] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 1871.499938][T24009] usb 3-1: config 0 has no interface number 0 [ 1871.539640][ T5906] usbhid 5-1:0.0: can't add hid device: -71 [ 1871.548058][T24009] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 1871.567889][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1871.583696][T24009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.618811][T24009] usb 3-1: Product: syz [ 1871.625115][ T5906] usb 5-1: USB disconnect, device number 31 [ 1871.659682][T24009] usb 3-1: Manufacturer: syz [ 1871.664367][T24009] usb 3-1: SerialNumber: syz [ 1871.735865][T24009] usb 3-1: config 0 descriptor?? [ 1871.780974][T24009] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1871.799418][T24009] ems_usb 3-1:0.204: probe with driver ems_usb failed with error -22 [ 1872.159363][T13835] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1872.329518][T13835] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1872.346606][T13835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1872.392125][T13835] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1872.401897][T13835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.427323][T13835] usb 5-1: config 0 descriptor?? [ 1872.658349][T28429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1872.667570][T28429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1872.689629][T28429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1872.701487][T28429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1872.729206][T28429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6254'. [ 1872.738318][T28429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6254'. [ 1872.783231][T28438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6254'. [ 1873.122728][T17190] team_slave_1 (unregistering): left promiscuous mode [ 1873.166786][T17190] team0 (unregistering): Port device team_slave_1 removed [ 1873.293815][T17190] team_slave_0 (unregistering): left promiscuous mode [ 1873.313856][T17190] team0 (unregistering): Port device team_slave_0 removed [ 1874.096760][T28258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1874.125241][T28258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1874.285676][T13829] usb 3-1: USB disconnect, device number 100 [ 1874.381574][T13835] usbhid 5-1:0.0: can't add hid device: -71 [ 1874.395254][T13835] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1874.419361][T13835] usb 5-1: USB disconnect, device number 32 [ 1874.500752][T28258] team0: Port device team_slave_0 added [ 1874.536706][T28258] team0: Port device team_slave_1 added [ 1874.653686][T28445] tipc: Enabling of bearer rejected, failed to enable media [ 1874.814424][T28258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1874.848461][T28258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1874.874469][ C1] vkms_vblank_simulate: vblank timer overrun [ 1875.159133][T28258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1875.191385][T28258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1875.223393][T28461] netlink: 'syz.0.6259': attribute type 9 has an invalid length. [ 1875.278148][T28258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1875.304220][ C1] vkms_vblank_simulate: vblank timer overrun [ 1875.316370][T28258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1876.134782][T28478] pimreg3: entered allmulticast mode [ 1876.155790][T28474] nvme_fabrics: missing parameter 'transport=%s' [ 1876.164117][T28474] nvme_fabrics: missing parameter 'nqn=%s' [ 1876.299675][T28482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6263'. [ 1876.308831][T28482] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6263'. [ 1876.533318][T28258] hsr_slave_0: entered promiscuous mode [ 1876.561031][T28258] hsr_slave_1: entered promiscuous mode [ 1876.609204][T13829] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1876.802566][T13829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1876.829400][T13829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1876.909520][T13829] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1876.969067][T13829] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1877.039136][T13829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.110250][T13829] usb 4-1: config 0 descriptor?? [ 1877.520409][T28489] loop2: detected capacity change from 0 to 7 [ 1877.540424][T28482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1877.551073][T28482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.611261][T28489] Dev loop2: unable to read RDB block 7 [ 1877.623357][T28489] loop2: AHDI p1 p2 [ 1877.665221][T28489] loop2: partition table partially beyond EOD, truncated [ 1878.749098][ T5837] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1879.166720][ T5837] usb 3-1: config 0 has no interfaces? [ 1879.230348][ T5837] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1879.251752][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.261884][ T5837] usb 3-1: Product: syz [ 1879.266086][ T5837] usb 3-1: Manufacturer: syz [ 1879.316471][ T5837] usb 3-1: SerialNumber: syz [ 1879.347581][ T5837] usb 3-1: config 0 descriptor?? [ 1879.370154][T13827] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1879.542953][T13827] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1879.567194][T13827] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1879.597780][T13827] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1879.636950][T13827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.639900][T28501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6267'. [ 1879.718721][T13827] usb 5-1: config 0 descriptor?? [ 1879.764415][T28258] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1879.792263][T28513] fuse: Bad value for 'fd' [ 1879.831750][T28258] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1879.878384][T28258] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1879.947514][T28258] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1879.960421][T28512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1880.020591][T28512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.088806][T28512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1880.102030][T13829] usbhid 4-1:0.0: can't add hid device: -71 [ 1880.108393][T13829] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1880.153519][T13829] usb 4-1: USB disconnect, device number 121 [ 1880.162780][T28512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.248540][T28512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6270'. [ 1880.286745][T28512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6270'. [ 1880.334597][T28523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6270'. [ 1880.464374][T28258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1880.496638][T28258] 8021q: adding VLAN 0 to HW filter on device team0 [ 1880.539408][T13827] usbhid 5-1:0.0: can't add hid device: -71 [ 1880.547035][T13827] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1880.561770][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1880.569047][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1880.580820][T13827] usb 5-1: USB disconnect, device number 33 [ 1880.609569][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1880.616762][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1880.699171][T13829] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1880.873996][T13829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1880.918247][T13829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1880.960670][T13829] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1880.985147][T13829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.007634][T28258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1881.027844][T13829] usb 4-1: config 0 descriptor?? [ 1881.234674][T28258] veth0_vlan: entered promiscuous mode [ 1881.299997][T28258] veth1_vlan: entered promiscuous mode [ 1881.510509][T13829] cp2112 0003:10C4:EA90.0041: unknown main item tag 0x0 [ 1881.546727][T28258] veth0_macvtap: entered promiscuous mode [ 1881.591318][T13829] cp2112 0003:10C4:EA90.0041: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1881.615128][T28538] loop2: detected capacity change from 0 to 7 [ 1881.635772][T28258] veth1_macvtap: entered promiscuous mode [ 1881.649965][T28538] Dev loop2: unable to read RDB block 7 [ 1881.659605][T28538] loop2: unable to read partition table [ 1881.665556][T28538] loop2: partition table beyond EOD, truncated [ 1881.707271][T28524] sock: sock_timestamping_bind_phc: sock not bind to device [ 1881.719275][T28538] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1881.741248][T13829] cp2112 0003:10C4:EA90.0041: Part Number: 0x82 Device Version: 0xFE [ 1881.784265][T28258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1881.853497][T28258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1881.867383][T13829] cp2112 0003:10C4:EA90.0041: error requesting SMBus config [ 1881.916557][T13829] cp2112 0003:10C4:EA90.0041: probe with driver cp2112 failed with error -71 [ 1881.965794][T28258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1882.016277][T28258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1882.029197][T13829] usb 4-1: USB disconnect, device number 122 [ 1882.067352][T28258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1882.116165][T28258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1882.216070][ T5854] usb 3-1: USB disconnect, device number 101 [ 1882.425803][T13829] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 1882.618691][T13829] usb 4-1: config 4 has an invalid interface number: 231 but max is 0 [ 1882.676844][T13829] usb 4-1: config 4 has no interface number 0 [ 1882.718204][T13829] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1882.765539][T17190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1882.784666][T13829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.888151][T13829] usb 4-1: Product: syz [ 1882.902517][T13829] usb 4-1: Manufacturer: syz [ 1882.935456][T13829] usb 4-1: SerialNumber: syz [ 1882.940811][T17190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1882.977890][T13829] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1883.123755][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1883.149101][T26117] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1883.153481][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1883.186167][T13829] vp7045: USB control message 'out' went wrong. [ 1883.216065][T28566] nvme_fabrics: missing parameter 'transport=%s' [ 1883.236684][T13829] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1883.245026][T28566] nvme_fabrics: missing parameter 'nqn=%s' [ 1883.299117][T13829] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1883.344139][T26117] usb 3-1: Using ep0 maxpacket: 32 [ 1883.353154][T13829] usb 4-1: USB disconnect, device number 123 [ 1883.398475][T26117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1883.429239][T26117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1883.469123][T26117] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1883.545052][T26117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.675044][T26117] usb 3-1: config 0 descriptor?? [ 1883.917776][T28579] input: syz1 as /devices/virtual/input/input130 [ 1884.104005][T26117] usbhid 3-1:0.0: can't add hid device: -71 [ 1884.210218][T26117] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1884.289698][T26117] usb 3-1: USB disconnect, device number 102 [ 1884.329134][T13829] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1884.479406][T28592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6280'. [ 1884.503712][T28592] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6280'. [ 1884.522608][T13829] usb 4-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1884.612290][T13829] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1884.619479][T13829] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1884.637388][T13829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.675265][T13829] usb 4-1: config 0 descriptor?? [ 1884.839083][ T5854] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1884.904596][T28583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1884.949937][T28583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1885.015397][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.033858][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1885.085110][ T5854] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1885.169096][ T5854] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1885.210038][T28583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1885.259834][T28583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1885.277070][T28583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6281'. [ 1885.287588][T28583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6281'. [ 1885.310939][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.376265][T28599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6281'. [ 1885.440532][ T5854] usb 2-1: config 0 descriptor?? [ 1885.807093][T13829] usbhid 4-1:0.0: can't add hid device: -71 [ 1885.827287][T13829] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1885.856199][T13829] usb 4-1: USB disconnect, device number 124 [ 1885.890427][T28591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1885.901945][T28591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.619761][T28610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6284'. [ 1887.239912][T28615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1887.568363][ T5854] usbhid 2-1:0.0: can't add hid device: -71 [ 1887.630398][ T5854] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1887.686889][ T5854] usb 2-1: USB disconnect, device number 116 [ 1887.946675][T28625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6287'. [ 1888.062585][T28610] team0 (unregistering): Port device team_slave_0 removed [ 1888.105986][T28610] team0 (unregistering): Port device team_slave_1 removed [ 1888.233445][T13829] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1888.240803][T24009] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1888.399601][T13829] usb 3-1: Using ep0 maxpacket: 32 [ 1888.411596][T13829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1888.414468][T24009] usb 2-1: config 0 has an invalid interface number: 178 but max is 0 [ 1888.441516][T13829] usb 3-1: New USB device found, idVendor=f003, idProduct=6095, bcdDevice= 0.00 [ 1888.454158][T24009] usb 2-1: config 0 has no interface number 0 [ 1888.454215][T24009] usb 2-1: config 0 interface 178 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1888.454249][T24009] usb 2-1: config 0 interface 178 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 1888.460199][T24009] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1888.536349][T24009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.537051][T13829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.578150][T24009] usb 2-1: Product: syz [ 1888.582776][T24009] usb 2-1: Manufacturer: syz [ 1888.597834][T24009] usb 2-1: SerialNumber: syz [ 1888.632009][T13829] usb 3-1: config 0 descriptor?? [ 1888.634103][T24009] usb 2-1: config 0 descriptor?? [ 1888.675203][T24009] redrat3 2-1:0.178: Couldn't find all endpoints [ 1888.779282][T13827] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1888.907585][T24009] usb 2-1: USB disconnect, device number 117 [ 1889.001387][T13827] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 1889.020812][T28638] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6290'. [ 1889.035875][T13827] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1889.071475][T13827] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1889.100790][T28638] ip6gretap0: entered promiscuous mode [ 1889.112502][T13827] usb 4-1: config 1 has no interface number 0 [ 1889.123927][T13827] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1889.149557][T13827] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1889.163523][T28638] ip6gretap0: left promiscuous mode [ 1889.174215][T13827] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1889.193913][T13827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.215338][T13827] usb 4-1: Product: syz [ 1889.229173][T28641] tipc: Cannot configure node identity twice [ 1889.245041][T13827] usb 4-1: Manufacturer: syz [ 1889.254638][T28641] tipc: Cannot configure node identity twice [ 1889.259029][T13827] usb 4-1: SerialNumber: syz [ 1889.279957][T13827] cdc_wdm 4-1:1.128: skipping garbage [ 1889.309490][T13827] cdc_wdm 4-1:1.128: cdc-wdm0: USB WDM device [ 1889.325667][T13827] cdc_wdm 4-1:1.128: Unknown control protocol [ 1889.816657][T28661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6295'. [ 1889.829839][T28661] fuse: Bad value for 'fd' [ 1889.892904][T13829] usbhid 3-1:0.0: can't add hid device: -71 [ 1889.932891][T13829] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1890.027153][T13829] usb 3-1: USB disconnect, device number 103 [ 1890.255897][T28658] nvme_fabrics: missing parameter 'transport=%s' [ 1890.269100][T28658] nvme_fabrics: missing parameter 'nqn=%s' [ 1891.039390][ T5166] Bluetooth: hci0: command 0x0406 tx timeout [ 1891.516245][T24009] usb 4-1: USB disconnect, device number 125 [ 1892.369234][ T5837] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1892.559899][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1892.580797][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1892.594297][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1892.611940][ T5837] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1892.687101][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.707204][ T5837] usb 4-1: config 0 descriptor?? [ 1892.748379][T28689] tipc: Cannot configure node identity twice [ 1892.757482][T28689] tipc: Cannot configure node identity twice [ 1892.887279][T28693] fuse: Bad value for 'fd' [ 1893.151385][T28676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1893.191002][T28676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1893.542770][T28700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6305'. [ 1894.219137][ T5854] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1894.492592][ T5854] usb 3-1: config 0 has an invalid interface number: 178 but max is 0 [ 1894.501029][ T5854] usb 3-1: config 0 has no interface number 0 [ 1894.525219][ T5854] usb 3-1: config 0 interface 178 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1894.535857][ T5854] usb 3-1: config 0 interface 178 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 1894.690870][T28710] pimreg3: entered allmulticast mode [ 1894.717656][ T5854] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1894.786408][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.795935][ T5854] usb 3-1: Product: syz [ 1894.806073][ T5854] usb 3-1: Manufacturer: syz [ 1894.825301][ T5854] usb 3-1: SerialNumber: syz [ 1894.855131][ T5854] usb 3-1: config 0 descriptor?? [ 1894.896565][ T5854] redrat3 3-1:0.178: Couldn't find all endpoints [ 1894.974139][T28710] nvme_fabrics: missing parameter 'transport=%s' [ 1895.010436][T28710] nvme_fabrics: missing parameter 'nqn=%s' [ 1895.097684][T13829] usb 3-1: USB disconnect, device number 104 [ 1895.625022][T28715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6309'. [ 1895.636875][T28715] fuse: Bad value for 'fd' [ 1895.685363][ T5837] usbhid 4-1:0.0: can't add hid device: -71 [ 1895.691793][ T5837] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1895.862936][ T5837] usb 4-1: USB disconnect, device number 126 [ 1896.004938][T28720] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6312'. [ 1896.404487][T28727] netlink: 'syz.3.6310': attribute type 10 has an invalid length. [ 1896.516604][T28727] macvlan0: entered promiscuous mode [ 1896.620918][T28727] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1897.016931][T28733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6316'. [ 1897.145186][T28737] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1897.184947][T28733] bond2: entered promiscuous mode [ 1897.232282][T28733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1897.446493][T28741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1897.462693][T28736] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1897.470167][T28736] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1897.490801][T28736] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 1898.524784][T28759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6320'. [ 1898.652233][T28759] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6320'. [ 1899.002484][T13829] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1899.159932][T28762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6322'. [ 1899.351370][T13829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1899.362787][T13829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1899.373034][T13829] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1899.469110][T13835] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1899.589169][T13829] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1899.662571][T13835] usb 3-1: config 0 has an invalid interface number: 178 but max is 0 [ 1899.681322][T13835] usb 3-1: config 0 has no interface number 0 [ 1899.689658][T13829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.718139][T13835] usb 3-1: config 0 interface 178 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1899.742624][T13829] usb 2-1: config 0 descriptor?? [ 1899.772715][T13835] usb 3-1: config 0 interface 178 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 1899.826462][T13835] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1899.858085][T13835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.875487][T13835] usb 3-1: Product: syz [ 1899.905922][T13835] usb 3-1: Manufacturer: syz [ 1899.929313][T13835] usb 3-1: SerialNumber: syz [ 1899.957659][T13835] usb 3-1: config 0 descriptor?? [ 1900.002456][T13835] redrat3 3-1:0.178: Couldn't find all endpoints [ 1900.176007][T28758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1900.187725][T28758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1900.283882][T13835] usb 3-1: USB disconnect, device number 105 [ 1901.296475][T28785] binder: 28776:28785 ioctl c0306201 200000000640 returned -22 [ 1901.332861][T28788] tipc: Enabled bearer , priority 0 [ 1901.358422][T28788] syzkaller0: entered promiscuous mode [ 1901.381827][T28788] syzkaller0: entered allmulticast mode [ 1901.614445][T28792] loop2: detected capacity change from 0 to 7 [ 1901.621935][T28792] Dev loop2: unable to read RDB block 7 [ 1901.637449][T28792] loop2: AHDI p1 p2 [ 1901.666517][T28792] loop2: partition table partially beyond EOD, truncated [ 1901.753369][T28787] tipc: Resetting bearer [ 1901.955059][T28787] tipc: Disabling bearer [ 1902.238435][T13829] usbhid 2-1:0.0: can't add hid device: -71 [ 1902.247418][T13829] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1902.298003][T13829] usb 2-1: USB disconnect, device number 118 [ 1904.030754][T28825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6340'. [ 1904.320579][ T5837] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1904.369172][T13835] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1904.479232][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 1904.490485][ T5837] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1904.499424][ T5837] usb 2-1: config 0 has no interface number 0 [ 1904.525001][ T5837] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1904.534533][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.541692][T13835] usb 1-1: config 0 has an invalid interface number: 178 but max is 0 [ 1904.562280][T13835] usb 1-1: config 0 has no interface number 0 [ 1904.573664][ T5837] usb 2-1: Product: syz [ 1904.578707][T13835] usb 1-1: config 0 interface 178 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1904.581781][ T5837] usb 2-1: Manufacturer: syz [ 1904.595757][ T5837] usb 2-1: SerialNumber: syz [ 1904.603204][T28834] tipc: Enabled bearer , priority 0 [ 1904.610855][ T5837] usb 2-1: config 0 descriptor?? [ 1904.619190][T13835] usb 1-1: config 0 interface 178 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 1904.619892][ T5837] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1904.642079][T28834] syzkaller0: entered promiscuous mode [ 1904.647625][T28834] syzkaller0: entered allmulticast mode [ 1904.648733][T13835] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1904.669100][T13835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.687699][T13835] usb 1-1: Product: syz [ 1904.692291][T28833] tipc: Resetting bearer [ 1904.696410][T13835] usb 1-1: Manufacturer: syz [ 1904.703306][T13835] usb 1-1: SerialNumber: syz [ 1904.718912][T13835] usb 1-1: config 0 descriptor?? [ 1904.731632][T13835] redrat3 1-1:0.178: Couldn't find all endpoints [ 1904.734110][T28833] tipc: Disabling bearer [ 1904.940817][T13829] usb 1-1: USB disconnect, device number 127 [ 1905.239791][ T5837] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1905.315339][T28846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6346'. [ 1905.330681][T28846] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6346'. [ 1905.366110][ T5837] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1905.433974][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1905.435741][ T5906] usb 2-1: USB disconnect, device number 119 [ 1905.470501][ T5906] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1905.560744][ T5906] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1905.601956][ T5906] quatech2 2-1:0.51: device disconnected [ 1905.609156][T13835] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1905.794310][T13835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1905.811657][T13835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1905.854390][T13835] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1905.885934][T13835] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1905.899666][T13835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.961919][T13835] usb 5-1: config 0 descriptor?? [ 1906.064123][ T30] audit: type=1800 audit(1753328175.746:11504): pid=28854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6350" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1906.160259][T28854] binder: 28853:28854 ioctl c0306201 2000000003c0 returned -14 [ 1906.359220][T24009] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1906.395592][T28844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1906.407946][T28844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.514223][T24009] usb 1-1: Using ep0 maxpacket: 32 [ 1906.524673][T24009] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1906.537026][T24009] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1906.571340][T24009] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1906.582503][T24009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.613248][T24009] usb 1-1: config 0 descriptor?? [ 1906.624117][T28864] bridge1: entered promiscuous mode [ 1906.706956][T24009] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1908.496593][T28877] tipc: Enabled bearer , priority 0 [ 1908.537906][T28877] syzkaller0: entered promiscuous mode [ 1908.547651][T28877] syzkaller0: entered allmulticast mode [ 1908.600978][T28876] tipc: Resetting bearer [ 1908.902052][T28876] tipc: Disabling bearer [ 1908.980490][T13835] usbhid 5-1:0.0: can't add hid device: -71 [ 1909.007029][T13835] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1909.042187][T13835] usb 5-1: USB disconnect, device number 34 [ 1909.227562][ T5837] usb 1-1: USB disconnect, device number 2 [ 1909.499147][T13835] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1909.658047][T28884] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6358'. [ 1909.667230][T28884] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6358'. [ 1909.679293][T28884] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6358'. [ 1909.724009][T13835] usb 5-1: Using ep0 maxpacket: 8 [ 1910.259423][T28898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6362'. [ 1910.306418][T28898] xt_ipcomp: unknown flags 12 [ 1911.189414][ T5837] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1911.360154][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 1911.366963][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1911.382641][ T5837] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1911.407274][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 1911.474193][ T5837] usb 4-1: Product: syz [ 1911.494070][ T5837] usb 4-1: Manufacturer: syz [ 1911.508824][ T5837] usb 4-1: SerialNumber: syz [ 1911.612020][ T5837] usb 4-1: config 0 descriptor?? [ 1911.662743][T28916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6367'. [ 1911.671967][T28916] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6367'. [ 1911.797743][ T5837] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1911.998191][ T5837] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1912.013099][T24009] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1912.014501][ T5837] usb 4-1: USB disconnect, device number 127 [ 1912.027063][T13829] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1912.081844][ T6135] udevd[6135]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1912.332056][T24009] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1912.344528][T24009] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1912.355327][T13835] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1912.377159][T13829] usb 3-1: Using ep0 maxpacket: 16 [ 1912.386047][T13835] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1912.417123][T13835] usb 5-1: can't read configurations, error -71 [ 1912.425842][T24009] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1912.525815][T24009] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1912.538751][T24009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.558245][T24009] usb 1-1: config 0 descriptor?? [ 1912.939291][T13835] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1912.971689][T28916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.981536][T28916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.099060][T13835] usb 5-1: Using ep0 maxpacket: 16 [ 1913.135859][T13835] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1913.163754][T13835] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1913.274749][T13835] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1913.289356][T13835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.409166][T26203] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1913.417022][ T30] audit: type=1326 audit(1753328183.086:11505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28932 comm="syz.3.6374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76d9d8e9a9 code=0x0 [ 1913.458039][T13835] usb 5-1: Product: syz [ 1913.465374][T13835] usb 5-1: Manufacturer: syz [ 1913.492481][T13835] usb 5-1: SerialNumber: syz [ 1913.614469][T26203] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1913.628069][T26203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.681565][T26203] usb 2-1: config 0 descriptor?? [ 1913.709637][T26203] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1913.792490][T13835] usb 5-1: 0:2 : does not exist [ 1913.833801][T13835] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1913.874850][T13835] usb 5-1: USB disconnect, device number 36 [ 1913.917900][T26203] gspca_cpia1: usb_control_msg 05, error -71 [ 1913.956717][T26203] gspca_cpia1: usb_control_msg 01, error -71 [ 1914.012226][T26203] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1914.056675][T26203] usb 2-1: USB disconnect, device number 120 [ 1914.071893][ T6135] udevd[6135]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1914.619082][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.625484][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.683815][T24009] usbhid 1-1:0.0: can't add hid device: -71 [ 1914.718791][T24009] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1914.789408][T24009] usb 1-1: USB disconnect, device number 3 [ 1915.351796][T13829] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1915.362031][T13829] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1915.379269][T13827] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1915.567780][T13829] usb 3-1: can't read configurations, error -71 [ 1915.679364][T24009] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1915.822540][T13827] usb 1-1: config 0 has no interfaces? [ 1915.832503][T13827] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1915.842606][T13827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.850842][T13827] usb 1-1: Product: syz [ 1915.869265][T24009] usb 4-1: not running at top speed; connect to a high speed hub [ 1915.879083][T13827] usb 1-1: Manufacturer: syz [ 1915.888237][T24009] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.909201][T13827] usb 1-1: SerialNumber: syz [ 1915.916722][T24009] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1915.939952][T13827] usb 1-1: config 0 descriptor?? [ 1915.956832][T24009] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1916.051442][T24009] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1916.070464][T24009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.089412][T28964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6382'. [ 1916.118850][T24009] usb 4-1: Product: 뼯픀檖䒨뢄ꥆ중婾⚬ఋ瓷좘囨㙑栻 [ 1916.142037][T24009] usb 4-1: Manufacturer: ᠉ [ 1916.146709][T24009] usb 4-1: SerialNumber: ࡠ [ 1916.432339][ T5837] IPVS: starting estimator thread 0... [ 1916.489304][T13827] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1916.539224][T28966] IPVS: using max 27 ests per chain, 64800 per kthread [ 1916.668883][T24009] usb 4-1: 0:2 : does not exist [ 1916.672157][T13827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1916.694401][T13827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1916.719454][T24009] usb 4-1: USB disconnect, device number 2 [ 1916.752972][T13827] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1916.783022][T13827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.934628][T13827] usb 2-1: config 0 descriptor?? [ 1917.146870][T28964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1917.157129][T28964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1917.385717][T28964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6382'. [ 1917.556208][T13827] isku 0003:1E7D:319C.0042: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 1917.742966][T13827] isku 0003:1E7D:319C.0042: couldn't init struct isku_device [ 1917.757242][T13827] isku 0003:1E7D:319C.0042: couldn't install keyboard [ 1917.812899][T13827] isku 0003:1E7D:319C.0042: probe with driver isku failed with error -71 [ 1917.946485][T13827] usb 2-1: USB disconnect, device number 121 [ 1918.269549][T26203] usb 1-1: USB disconnect, device number 4 [ 1918.417804][T28997] tipc: Started in network mode [ 1918.430119][T28997] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1918.449919][ T5906] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1918.467481][T28997] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 1918.495925][T28997] tipc: Enabled bearer , priority 10 [ 1918.779394][T26203] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1918.835405][T29008] use of bytesused == 0 is deprecated and will be removed in the future, [ 1918.844574][T29008] use the actual size instead. [ 1918.947106][ T5906] usb 4-1: config 0 has no interfaces? [ 1918.986554][ T5906] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1919.008160][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.018007][ T5906] usb 4-1: Product: syz [ 1919.022557][ T5906] usb 4-1: Manufacturer: syz [ 1919.090430][ T5906] usb 4-1: SerialNumber: syz [ 1919.099362][T26203] usb 5-1: Using ep0 maxpacket: 16 [ 1919.142954][ T5906] usb 4-1: config 0 descriptor?? [ 1919.259116][T13827] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1919.483360][T13827] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1919.497305][T13827] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1919.525326][T13827] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1919.538272][T13827] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1919.548406][T13827] usb 2-1: Product: syz [ 1919.556067][T13827] usb 2-1: Manufacturer: syz [ 1919.563480][T13827] usb 2-1: SerialNumber: syz [ 1919.598050][T13827] usb 2-1: config 0 descriptor?? [ 1919.609424][T13829] tipc: Node number set to 1 [ 1919.621715][T13827] usb 2-1: selecting invalid altsetting 0 [ 1920.816663][ T9] usb 4-1: USB disconnect, device number 3 [ 1921.692962][T26203] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1921.719786][T26203] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1921.752955][T29029] binder: 29028:29029 ioctl 40445637 200000000440 returned -22 [ 1921.764687][T29029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6399'. [ 1921.802102][T29029] bond3: entered promiscuous mode [ 1921.807774][T29029] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1921.860830][T26203] usb 5-1: can't read configurations, error -71 [ 1921.876106][T29034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1921.884342][T29034] IPv6: NLM_F_CREATE should be set when creating new route [ 1921.891601][T29034] IPv6: NLM_F_CREATE should be set when creating new route [ 1921.906265][T29034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1921.918313][T29029] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1921.928183][T29029] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1921.940347][T29029] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 1921.968068][T29032] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1922.077269][T29034] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1922.100460][T29034] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 1922.757742][T29052] netlink: 'syz.0.6403': attribute type 2 has an invalid length. [ 1923.175261][T13829] usb 2-1: USB disconnect, device number 122 [ 1923.370521][T27305] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1923.573618][T27305] usb 1-1: config 0 has no interfaces? [ 1923.586055][T27305] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1923.605043][T27305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.659345][T29063] nvme_fabrics: missing parameter 'transport=%s' [ 1923.737336][T29063] nvme_fabrics: missing parameter 'nqn=%s' [ 1923.924771][T27305] usb 1-1: Product: syz [ 1924.088617][T27305] usb 1-1: Manufacturer: syz [ 1924.098791][T27305] usb 1-1: SerialNumber: syz [ 1924.120243][T27305] usb 1-1: config 0 descriptor?? [ 1924.609400][T29058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6406'. [ 1924.674195][T29058] fuse: Bad value for 'fd' [ 1925.049305][T26203] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1925.269238][T26203] usb 2-1: Using ep0 maxpacket: 16 [ 1926.128784][T29085] random: crng reseeded on system resumption [ 1926.384041][T27305] usb 1-1: USB disconnect, device number 5 [ 1926.550325][T29090] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6415'. [ 1926.571941][T29090] xt_cluster: node mask cannot exceed total number of nodes [ 1926.694653][ T30] audit: type=1326 audit(1753328196.366:11506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29089 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1926.767220][ T30] audit: type=1326 audit(1753328196.366:11507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29089 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1927.099609][T13829] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 1927.151576][ T30] audit: type=1326 audit(1753328196.376:11508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29089 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1927.218285][T29098] tipc: Enabling of bearer rejected, failed to enable media [ 1927.370443][T13829] usb 1-1: device descriptor read/64, error -71 [ 1927.385828][ T30] audit: type=1326 audit(1753328196.376:11509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29089 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1927.539271][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1927.547072][ T30] audit: type=1326 audit(1753328196.376:11510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29089 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1927.585010][ T30] audit: type=1326 audit(1753328196.376:11511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29089 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1927.615584][ T30] audit: type=1326 audit(1753328196.376:11512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29089 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1927.646326][ T30] audit: type=1326 audit(1753328196.396:11513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29089 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1927.673537][ T30] audit: type=1326 audit(1753328196.396:11514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29089 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1927.716931][ T30] audit: type=1326 audit(1753328196.456:11515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29089 comm="syz.0.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1927.740307][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1927.747677][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1927.764330][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1927.775847][ T9] usb 5-1: config 0 has no interface number 0 [ 1927.779083][T13829] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 1927.788835][ T9] usb 5-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1927.806364][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1927.827460][ T9] usb 5-1: config 0 interface 1 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 1927.913115][ T9] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1927.934269][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1927.949451][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.959308][T13829] usb 1-1: device descriptor read/64, error -71 [ 1927.982873][ T9] usb 5-1: config 0 descriptor?? [ 1928.007120][ T9] hso 5-1:0.1: Failed to find BULK OUT ep [ 1928.017640][T29102] tipc: Enabled bearer , priority 0 [ 1928.064517][T29102] syzkaller0: entered promiscuous mode [ 1928.070780][T13829] usb usb1-port1: attempt power cycle [ 1928.089525][T29102] syzkaller0: entered allmulticast mode [ 1928.147819][T29102] tipc: Resetting bearer [ 1928.174256][T29101] tipc: Resetting bearer [ 1928.189745][T26203] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1928.238817][T26203] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1928.255182][T26203] usb 2-1: can't read configurations, error -71 [ 1928.286671][T29101] tipc: Disabling bearer [ 1928.352608][ T5906] usb 5-1: USB disconnect, device number 39 [ 1928.429373][T13829] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 1928.450857][T13829] usb 1-1: device descriptor read/8, error -71 [ 1928.646420][T29110] loop2: detected capacity change from 0 to 7 [ 1928.659787][ T6135] Dev loop2: unable to read RDB block 7 [ 1928.666474][ T6135] loop2: unable to read partition table [ 1928.673997][ T6135] loop2: partition table beyond EOD, truncated [ 1928.679220][T26203] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1928.700919][T13829] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 1928.712228][T29110] Dev loop2: unable to read RDB block 7 [ 1928.717863][T29110] loop2: unable to read partition table [ 1928.724239][T29110] loop2: partition table beyond EOD, truncated [ 1928.732090][T29110] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1928.742457][T13829] usb 1-1: device descriptor read/8, error -71 [ 1928.843717][T29115] netlink: 'syz.2.6421': attribute type 11 has an invalid length. [ 1928.852591][T26203] usb 2-1: Using ep0 maxpacket: 32 [ 1928.880040][T13829] usb usb1-port1: unable to enumerate USB device [ 1928.920774][T26203] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1928.934493][T26203] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1928.944621][T26203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.960423][T26203] usb 2-1: Product: syz [ 1929.026940][T26203] usb 2-1: Manufacturer: syz [ 1929.032793][T26203] usb 2-1: SerialNumber: syz [ 1929.080307][T26203] usb 2-1: config 0 descriptor?? [ 1930.005186][T26203] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 1930.055668][T26203] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 1930.558265][T29132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.810973][T29132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1930.906312][T26203] usb 2-1: USB disconnect, device number 124 [ 1931.199199][T27305] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1931.863184][T27305] usb 3-1: config 0 has no interfaces? [ 1931.874790][T27305] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1931.889057][T27305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.901805][T27305] usb 3-1: Product: syz [ 1931.907472][T27305] usb 3-1: Manufacturer: syz [ 1931.912359][T27305] usb 3-1: SerialNumber: syz [ 1931.920224][T27305] usb 3-1: config 0 descriptor?? [ 1932.173632][T29130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6425'. [ 1932.249084][T27305] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1932.271712][T29130] fuse: Bad value for 'fd' [ 1932.463735][T29155] loop2: detected capacity change from 0 to 7 [ 1932.494991][T29155] Dev loop2: unable to read RDB block 7 [ 1932.504410][T29155] loop2: unable to read partition table [ 1932.517290][T29155] loop2: partition table beyond EOD, truncated [ 1932.531013][T29157] tipc: Enabled bearer , priority 0 [ 1932.536237][T29155] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1932.574826][T27305] usb 2-1: Using ep0 maxpacket: 16 [ 1932.614088][T29159] syzkaller0: entered promiscuous mode [ 1932.639486][T29159] syzkaller0: entered allmulticast mode [ 1932.701143][T29157] FAULT_INJECTION: forcing a failure. [ 1932.701143][T29157] name failslab, interval 1, probability 0, space 0, times 0 [ 1932.714897][T29157] CPU: 1 UID: 0 PID: 29157 Comm: syz.4.6431 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1932.714926][T29157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1932.714941][T29157] Call Trace: [ 1932.714950][T29157] [ 1932.714960][T29157] dump_stack_lvl+0x189/0x250 [ 1932.714993][T29157] ? __pfx____ratelimit+0x10/0x10 [ 1932.715018][T29157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1932.715044][T29157] ? __pfx__printk+0x10/0x10 [ 1932.715088][T29157] should_fail_ex+0x414/0x560 [ 1932.715119][T29157] should_failslab+0xa8/0x100 [ 1932.715154][T29157] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1932.715185][T29157] ? __alloc_skb+0x112/0x2d0 [ 1932.715213][T29157] ? __pfx_rt6_nlmsg_size+0x10/0x10 [ 1932.715239][T29157] __alloc_skb+0x112/0x2d0 [ 1932.715270][T29157] ? inet6_rt_notify+0xab/0x430 [ 1932.715291][T29157] inet6_rt_notify+0x165/0x430 [ 1932.715319][T29157] fib6_del+0x1094/0x1550 [ 1932.715373][T29157] ? __pfx_fib6_del+0x10/0x10 [ 1932.715401][T29157] ? __pfx_fib6_ifdown+0x10/0x10 [ 1932.715439][T29157] ? fib6_ifdown+0x98/0x4c0 [ 1932.715490][T29157] fib6_clean_node+0x29f/0x590 [ 1932.715525][T29157] ? __pfx_fib6_clean_node+0x10/0x10 [ 1932.715554][T29157] ? __lock_acquire+0xab9/0xd20 [ 1932.715584][T29157] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1932.715614][T29157] fib6_walk_continue+0x67b/0x910 [ 1932.715661][T29157] fib6_walk+0x149/0x290 [ 1932.715695][T29157] __fib6_clean_all+0x234/0x380 [ 1932.715724][T29157] ? __fib6_clean_all+0x9b/0x380 [ 1932.715754][T29157] ? __pfx_fib6_ifdown+0x10/0x10 [ 1932.715787][T29157] ? __pfx___fib6_clean_all+0x10/0x10 [ 1932.715822][T29157] ? __pfx_fib6_clean_node+0x10/0x10 [ 1932.715853][T29157] ? __pfx_fib6_ifdown+0x10/0x10 [ 1932.715900][T29157] rt6_disable_ip+0x120/0x720 [ 1932.715941][T29157] ? rcu_is_watching+0x15/0xb0 [ 1932.715966][T29157] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1932.716011][T29157] addrconf_ifdown+0x15d/0x1880 [ 1932.716039][T29157] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1932.716069][T29157] ? __pfx___mutex_lock+0x10/0x10 [ 1932.716095][T29157] ? tls_dev_event+0x717/0xec0 [ 1932.716119][T29157] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1932.716164][T29157] addrconf_notify+0x1bc/0x1010 [ 1932.716202][T29157] notifier_call_chain+0x1b3/0x3e0 [ 1932.716238][T29157] netif_set_mtu_ext+0x438/0x620 [ 1932.716270][T29157] ? __lock_acquire+0xab9/0xd20 [ 1932.716297][T29157] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 1932.716329][T29157] ? __mutex_trylock_common+0x153/0x260 [ 1932.716375][T29157] ? rcu_is_watching+0x15/0xb0 [ 1932.716408][T29157] netif_set_mtu+0xa4/0x150 [ 1932.716438][T29157] ? __pfx_netif_set_mtu+0x10/0x10 [ 1932.716473][T29157] ? __lock_acquire+0xab9/0xd20 [ 1932.716510][T29157] ? netdev_name_node_lookup+0xdf/0x120 [ 1932.716545][T29157] dev_set_mtu+0x126/0x260 [ 1932.716580][T29157] dev_ioctl+0x7b4/0x1150 [ 1932.716614][T29157] sock_do_ioctl+0x22c/0x300 [ 1932.716642][T29157] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1932.716664][T29157] ? __lock_acquire+0xab9/0xd20 [ 1932.716704][T29157] sock_ioctl+0x576/0x790 [ 1932.716731][T29157] ? __pfx_sock_ioctl+0x10/0x10 [ 1932.716755][T29157] ? __fget_files+0x2a/0x420 [ 1932.716774][T29157] ? __fget_files+0x3a0/0x420 [ 1932.716791][T29157] ? __fget_files+0x2a/0x420 [ 1932.716815][T29157] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1932.716841][T29157] ? __pfx_sock_ioctl+0x10/0x10 [ 1932.716864][T29157] __se_sys_ioctl+0xfc/0x170 [ 1932.716895][T29157] do_syscall_64+0xfa/0x3b0 [ 1932.716922][T29157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1932.716943][T29157] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1932.716965][T29157] ? clear_bhb_loop+0x60/0xb0 [ 1932.716991][T29157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1932.717012][T29157] RIP: 0033:0x7fa16698e9a9 [ 1932.717032][T29157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1932.717051][T29157] RSP: 002b:00007fa16779e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1932.717074][T29157] RAX: ffffffffffffffda RBX: 00007fa166bb5fa0 RCX: 00007fa16698e9a9 [ 1932.717089][T29157] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 1932.717103][T29157] RBP: 00007fa16779e090 R08: 0000000000000000 R09: 0000000000000000 [ 1932.717115][T29157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1932.717128][T29157] R13: 0000000000000000 R14: 00007fa166bb5fa0 R15: 00007fa166cdfa28 [ 1932.717159][T29157] [ 1933.642962][ T5837] tipc: Node number set to 3736301388 [ 1933.653863][T29157] tipc: Resetting bearer [ 1933.923528][T29164] netlink: 'syz.3.6433': attribute type 1 has an invalid length. [ 1933.993386][T29156] tipc: Resetting bearer [ 1934.134864][T29156] tipc: Disabling bearer [ 1934.444009][ T5906] usb 3-1: USB disconnect, device number 108 [ 1934.791127][T29181] loop2: detected capacity change from 0 to 7 [ 1934.806729][T29181] Dev loop2: unable to read RDB block 7 [ 1934.825929][T29181] loop2: AHDI p1 p2 [ 1934.833216][T29181] loop2: partition table partially beyond EOD, truncated [ 1934.939180][ T5906] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1935.105660][ T5906] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1935.137638][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1935.165213][ T5906] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1935.186401][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1935.209077][ T5906] usb 3-1: Product: syz [ 1935.223427][ T5906] usb 3-1: Manufacturer: syz [ 1935.234878][ T5906] usb 3-1: SerialNumber: syz [ 1935.251805][T29186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1935.268828][T29186] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.6438'. [ 1935.278898][T29186] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.6438'. [ 1935.289126][T29186] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6438'. [ 1935.367609][ T5906] usb 3-1: config 0 descriptor?? [ 1935.450566][ T5906] usb 3-1: selecting invalid altsetting 0 [ 1935.692993][T29187] sock: sock_set_timeout: `syz.2.6434' (pid 29187) tries to set negative timeout [ 1935.719463][T27305] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1935.817563][T27305] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1935.851168][T27305] usb 2-1: can't read configurations, error -71 [ 1935.961226][T13827] usb 3-1: USB disconnect, device number 109 [ 1936.979100][T13827] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1937.260949][T13827] usb 5-1: Using ep0 maxpacket: 16 [ 1937.334795][T13827] usb 5-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 1937.350645][T13827] usb 5-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1937.369111][T13827] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1937.402519][T13827] usb 5-1: string descriptor 0 read error: -22 [ 1937.409326][T13827] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1937.421909][T13827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.769141][T13835] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1939.942715][T13835] usb 1-1: config 0 has no interfaces? [ 1939.957004][T13835] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1939.976598][T13835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.024593][T13835] usb 1-1: Product: syz [ 1940.041297][T13835] usb 1-1: Manufacturer: syz [ 1940.126277][T13835] usb 1-1: SerialNumber: syz [ 1940.178508][T13835] usb 1-1: config 0 descriptor?? [ 1940.411078][T29212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6445'. [ 1940.440284][T29212] fuse: Bad value for 'fd' [ 1940.521708][T13827] usb 5-1: USB disconnect, device number 40 [ 1940.526233][T29222] loop2: detected capacity change from 0 to 7 [ 1940.536361][T29222] Dev loop2: unable to read RDB block 7 [ 1940.542773][T29222] loop2: AHDI p1 p2 [ 1940.546816][T29222] loop2: partition table partially beyond EOD, truncated [ 1941.099187][T13827] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1941.279225][T13827] usb 5-1: Using ep0 maxpacket: 16 [ 1941.766247][T13829] usb 1-1: USB disconnect, device number 10 [ 1941.979235][ T5837] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1942.139628][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 1942.152040][ T5837] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1942.196832][ T5837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1942.261750][ T5837] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1942.275837][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.297624][ T5837] usb 2-1: Product: syz [ 1942.304887][ T5837] usb 2-1: Manufacturer: syz [ 1942.313781][ T5837] usb 2-1: SerialNumber: syz [ 1942.547616][ T5837] usb 2-1: 0:2 : does not exist [ 1942.577818][ T5837] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1942.600861][ T5837] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1942.625374][ T5837] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1942.658277][ T5837] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1942.706752][ T5837] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1942.732869][ T5837] usb 2-1: USB disconnect, device number 127 [ 1942.838144][ T5852] udevd[5852]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1943.599263][ T9] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1943.759639][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1943.809484][ T9] usb 3-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 1943.824907][ T9] usb 3-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1943.883224][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1943.934003][ T9] usb 3-1: string descriptor 0 read error: -22 [ 1943.940594][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1943.950258][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.336362][T13827] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1945.345584][T13827] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1945.363908][T13827] usb 5-1: can't read configurations, error -71 [ 1945.557511][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1945.557532][ T30] audit: type=1326 audit(1753328215.236:11579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29266 comm="syz.0.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1945.664527][ T30] audit: type=1326 audit(1753328215.236:11580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29266 comm="syz.0.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1945.879740][ T30] audit: type=1326 audit(1753328215.236:11581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29266 comm="syz.0.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1945.958766][ T30] audit: type=1326 audit(1753328215.236:11582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29266 comm="syz.0.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1946.279827][ T30] audit: type=1326 audit(1753328215.236:11583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29266 comm="syz.0.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1946.439099][ T30] audit: type=1326 audit(1753328215.286:11584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29266 comm="syz.0.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1946.449316][T27305] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1946.519212][ T30] audit: type=1326 audit(1753328215.286:11585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29266 comm="syz.0.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1946.561499][T29283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6468'. [ 1946.570979][ T30] audit: type=1326 audit(1753328215.336:11586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29266 comm="syz.0.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1946.594091][T29283] netlink: 'syz.1.6468': attribute type 9 has an invalid length. [ 1946.665354][ T30] audit: type=1326 audit(1753328215.346:11587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29266 comm="syz.0.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1946.730690][ T30] audit: type=1326 audit(1753328215.346:11588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29266 comm="syz.0.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8966d8e9a9 code=0x7ffc0000 [ 1946.790487][T27305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1946.874081][T27305] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1946.888389][T27305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1946.908427][T27305] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1946.939066][ T9] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1946.947107][T27305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.956361][T27305] usb 4-1: Product: syz [ 1946.968143][T27305] usb 4-1: Manufacturer: syz [ 1946.977235][T27305] usb 4-1: SerialNumber: syz [ 1946.995633][T27305] usb 4-1: config 0 descriptor?? [ 1947.009531][T29281] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1947.018314][T29281] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1947.040860][T27305] usb 4-1: ucan: probing device on interface #0 [ 1947.105854][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 1947.115319][ T9] usb 5-1: config 1 has an invalid interface number: 42 but max is 0 [ 1947.125219][ T9] usb 5-1: config 1 has no interface number 0 [ 1947.152991][ T9] usb 5-1: config 1 interface 42 has no altsetting 0 [ 1947.185959][ T9] usb 5-1: New USB device found, idVendor=148f, idProduct=2570, bcdDevice=65.a6 [ 1947.201464][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.219110][ T9] usb 5-1: Product: 榧ₓ [ 1947.229136][ T9] usb 5-1: Manufacturer: ࠐ [ 1947.233837][ T9] usb 5-1: SerialNumber: Ћ [ 1947.247902][T13835] usb 3-1: USB disconnect, device number 110 [ 1947.506253][ T9] usb 5-1: USB disconnect, device number 43 [ 1947.816470][T27305] ucan 4-1:0.0: probe with driver ucan failed with error -71 [ 1947.848777][T27305] usb 4-1: USB disconnect, device number 4 [ 1948.310396][T26203] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1948.480124][T26203] usb 2-1: Using ep0 maxpacket: 16 [ 1948.490014][T27305] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1948.721288][T27305] usb 5-1: device descriptor read/64, error -71 [ 1948.755379][T29322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6480'. [ 1948.776658][T29322] netlink: 'syz.0.6480': attribute type 9 has an invalid length. [ 1948.878652][T29323] ptrace attach of "./syz-executor exec"[25950] was attempted by "./syz-executor exec"[29323] [ 1948.893655][T29323] xt_cgroup: invalid path, errno=-2 [ 1948.959342][T27305] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1949.099140][T27305] usb 5-1: device descriptor read/64, error -71 [ 1949.210390][T27305] usb usb5-port1: attempt power cycle [ 1949.401355][ T5837] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1949.539114][ T5837] usb 1-1: device descriptor read/64, error -71 [ 1949.549231][T27305] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1949.570002][T27305] usb 5-1: device descriptor read/8, error -71 [ 1949.779138][ T5837] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1949.809134][T27305] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1949.859807][T27305] usb 5-1: device descriptor read/8, error -71 [ 1949.969048][ T5837] usb 1-1: device descriptor read/64, error -71 [ 1949.977382][T27305] usb usb5-port1: unable to enumerate USB device [ 1950.091793][ T5837] usb usb1-port1: attempt power cycle [ 1950.429277][ T5837] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1950.449891][ T5837] usb 1-1: device descriptor read/8, error -71 [ 1950.506266][T29331] loop2: detected capacity change from 0 to 7 [ 1950.516395][T29331] Dev loop2: unable to read RDB block 7 [ 1950.519780][T13827] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1950.522790][T29331] loop2: AHDI p1 p2 [ 1950.534734][T29331] loop2: partition table partially beyond EOD, truncated [ 1950.689209][T13827] usb 4-1: Using ep0 maxpacket: 16 [ 1950.705107][T13827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1950.736429][T13827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1950.750956][ T5837] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1950.762002][T13827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1950.774713][T13827] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1950.788205][T13827] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1950.807122][ T5837] usb 1-1: device descriptor read/8, error -71 [ 1950.817869][T13827] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1950.836929][T13827] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1950.847493][T13827] usb 4-1: Manufacturer: syz [ 1950.856930][T29333] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6485'. [ 1950.868287][T29333] netlink: 51 bytes leftover after parsing attributes in process `syz.2.6485'. [ 1950.885008][T13827] usb 4-1: config 0 descriptor?? [ 1950.892128][T29333] netlink: 51 bytes leftover after parsing attributes in process `syz.2.6485'. [ 1950.919925][ T5837] usb usb1-port1: unable to enumerate USB device [ 1951.281419][T29340] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1951.316483][T29340] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.6486'. [ 1951.328594][T29329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1951.339498][T29340] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.6486'. [ 1951.350310][T29340] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6486'. [ 1951.359630][T29329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1951.401608][T13827] rc_core: IR keymap rc-hauppauge not found [ 1951.415531][T13827] Registered IR keymap rc-empty [ 1951.416208][T26203] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1951.422300][T13827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1951.458151][T26203] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1951.463316][T13827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1951.504851][T13827] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1951.519522][T26203] usb 2-1: can't read configurations, error -71 [ 1951.526169][T13827] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input132 [ 1951.582858][T13827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1951.689209][T13827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1951.718133][T13827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1951.769269][T13827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1951.802862][T13827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1951.829175][T13827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1951.849654][T13827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1951.890161][T13827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1951.919154][T13827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1951.949127][T26203] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 1951.949143][T13827] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1951.971506][T13827] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1951.981321][T13827] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1952.066561][T13827] usb 4-1: USB disconnect, device number 5 [ 1952.109208][T26203] usb 2-1: device descriptor read/64, error -71 [ 1952.219444][T26203] usb usb2-port1: attempt power cycle [ 1952.279362][T29354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6490'. [ 1952.412176][T29356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6491'. [ 1952.449300][T29356] netlink: 'syz.0.6491': attribute type 9 has an invalid length. [ 1952.479347][ T5166] Bluetooth: hci1: command 0x0406 tx timeout [ 1952.559710][T26203] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 1952.589887][T26203] usb 2-1: device descriptor read/8, error -71 [ 1952.726896][T29365] loop2: detected capacity change from 0 to 7 [ 1952.736816][ T6135] Dev loop2: unable to read RDB block 7 [ 1952.747048][ T6135] loop2: AHDI p1 p2 [ 1952.751376][ T6135] loop2: partition table partially beyond EOD, truncated [ 1952.765776][T29365] Dev loop2: unable to read RDB block 7 [ 1952.777518][T29365] loop2: AHDI p1 p2 [ 1952.779556][ T9] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 1952.786711][T29365] loop2: partition table partially beyond EOD, truncated [ 1952.797668][T29367] af_packet: tpacket_rcv: packet too big, clamped from 41123 to 4294967272. macoff=96 [ 1952.829167][T26203] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 1952.860622][T26203] usb 2-1: device descriptor read/8, error -71 [ 1952.941537][ T9] usb 4-1: config 2 has an invalid interface number: 190 but max is 0 [ 1952.952902][ T9] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1952.964458][ T9] usb 4-1: config 2 has no interface number 0 [ 1952.977977][ T9] usb 4-1: config 2 interface 190 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1952.997944][T26203] usb usb2-port1: unable to enumerate USB device [ 1953.020001][ T9] usb 4-1: string descriptor 0 read error: -22 [ 1953.026376][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 1953.146349][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.173036][T29377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1953.379125][T26203] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1953.389432][ T9] (null): keene_cmd_main failed (-71) [ 1953.410010][ T9] video4linux radio48: keene_cmd_main failed (-71) [ 1953.422483][ T9] radio-keene 4-1:2.190: V4L2 device registered as radio48 [ 1953.434791][ T9] usb 4-1: USB disconnect, device number 6 [ 1953.549152][T26203] usb 5-1: Using ep0 maxpacket: 16 [ 1955.110190][T29404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6505'. [ 1955.121170][T29404] netlink: 'syz.2.6505': attribute type 9 has an invalid length. [ 1955.744230][T29415] loop2: detected capacity change from 0 to 7 [ 1955.766827][T29415] Dev loop2: unable to read RDB block 7 [ 1955.829056][T29415] loop2: AHDI p1 p2 [ 1955.834356][T29415] loop2: partition table partially beyond EOD, truncated [ 1955.930163][T29417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6509'. [ 1956.434595][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1956.434615][ T30] audit: type=1326 audit(1753328226.116:11605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29431 comm="syz.2.6515" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa78e78e9a9 code=0x0 [ 1956.611701][T26203] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1956.624100][T26203] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1956.632356][T26203] usb 5-1: can't read configurations, error -71 [ 1956.769510][ T5837] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1956.822703][T29446] sctp: [Deprecated]: syz.0.6519 (pid 29446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1956.822703][T29446] Use struct sctp_sack_info instead [ 1956.919247][ T5837] usb 3-1: Using ep0 maxpacket: 16 [ 1956.934955][ T5837] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 1956.945143][ T5837] usb 3-1: config 0 has no interface number 0 [ 1956.953732][ T5837] usb 3-1: config 0 interface 119 has no altsetting 0 [ 1956.968606][ T5837] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35 [ 1956.996505][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.024317][ T5837] usb 3-1: Product: syz [ 1957.038548][ T5837] usb 3-1: Manufacturer: syz [ 1957.071862][ T5837] usb 3-1: SerialNumber: syz [ 1957.093970][ T5837] usb 3-1: config 0 descriptor?? [ 1957.563809][T29457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6523'. [ 1957.728763][T29457] bond4: entered promiscuous mode [ 1957.770229][T29457] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1957.837256][T29459] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1957.853472][T29459] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1957.873125][T29459] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 1958.357156][T29465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6524'. [ 1958.406283][T29465] netlink: 51 bytes leftover after parsing attributes in process `syz.4.6524'. [ 1958.423224][T29465] netlink: 51 bytes leftover after parsing attributes in process `syz.4.6524'. [ 1958.469721][T29468] batadv_slave_1: entered promiscuous mode [ 1958.793898][T29468] batadv_slave_1: left promiscuous mode [ 1958.818536][T29477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6527'. [ 1958.844318][T29477] tc_dump_action: action bad kind [ 1958.977583][T29479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6528'. [ 1959.257878][T29485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.288517][T29485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1959.405925][ T5837] usb 3-1: USB disconnect, device number 111 [ 1959.479198][T13835] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1959.651886][T13835] usb 5-1: device descriptor read/64, error -71 [ 1959.772720][T29497] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6533'. [ 1959.919179][T13835] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1960.069051][T13835] usb 5-1: device descriptor read/64, error -71 [ 1960.079091][T26203] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1960.179477][T13835] usb usb5-port1: attempt power cycle [ 1960.221610][T29510] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1960.234890][T29510] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.6534'. [ 1960.244483][T29510] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.6534'. [ 1960.253881][T29510] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6534'. [ 1960.289569][T26203] usb 4-1: Using ep0 maxpacket: 16 [ 1960.425481][T24009] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1960.631760][T24009] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1960.685998][T24009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.694561][T13835] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1960.750290][T13835] usb 5-1: device descriptor read/8, error -71 [ 1960.769224][T24009] usb 1-1: config 0 descriptor?? [ 1960.992583][T29508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1961.001877][T29508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1961.044463][T13835] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1961.090721][T13835] usb 5-1: device descriptor read/8, error -71 [ 1961.199562][T13835] usb usb5-port1: unable to enumerate USB device [ 1961.208024][T24009] ath6kl: Failed to read usb control message: -71 [ 1961.215887][T24009] ath6kl: Unable to read the bmi data from the device: -71 [ 1961.247907][T24009] ath6kl: Unable to recv target info: -71 [ 1961.298800][T24009] ath6kl: Failed to init ath6kl core: -71 [ 1961.335970][T24009] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1961.378621][T24009] usb 1-1: USB disconnect, device number 15 [ 1962.839086][T13827] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1963.093676][T13827] usb 5-1: config 162 has an invalid interface number: 206 but max is 2 [ 1963.109345][T13827] usb 5-1: config 162 has an invalid interface number: 241 but max is 2 [ 1963.130030][T13827] usb 5-1: config 162 has an invalid interface number: 6 but max is 2 [ 1963.175275][T13827] usb 5-1: config 162 has no interface number 0 [ 1963.209007][T13827] usb 5-1: config 162 has no interface number 1 [ 1963.250997][T29537] __nla_validate_parse: 1 callbacks suppressed [ 1963.251015][T29537] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6546'. [ 1963.266533][T13827] usb 5-1: config 162 has no interface number 2 [ 1963.319222][T13827] usb 5-1: config 162 interface 206 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1963.375749][T13827] usb 5-1: config 162 interface 241 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1963.380925][T26203] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1963.421886][T26203] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1963.450971][T13827] usb 5-1: config 162 interface 241 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1963.472369][T26203] usb 4-1: can't read configurations, error -71 [ 1963.486422][T13827] usb 5-1: config 162 interface 241 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1963.534014][T13827] usb 5-1: config 162 interface 206 has no altsetting 0 [ 1963.557023][T13827] usb 5-1: config 162 interface 241 has no altsetting 0 [ 1963.579797][T13827] usb 5-1: config 162 interface 6 has no altsetting 0 [ 1963.625003][T13827] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=be.1d [ 1963.634564][T13827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.669032][T13827] usb 5-1: Product: syz [ 1963.673323][T13827] usb 5-1: Manufacturer: syz [ 1963.703890][T13827] usb 5-1: SerialNumber: syz [ 1963.829171][T26203] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1963.899274][T27305] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1963.944648][T13827] ------------[ cut here ]------------ [ 1963.950256][T13827] usb 5-1: BOGUS urb xfer, pipe 1 != type 3 [ 1963.968017][T13827] WARNING: CPU: 1 PID: 13827 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc82/0x1890 [ 1963.978372][T13827] Modules linked in: [ 1963.984916][T13827] CPU: 1 UID: 0 PID: 13827 Comm: kworker/1:12 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1963.992362][T26203] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1963.998473][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1964.017087][T13827] Workqueue: usb_hub_wq hub_event [ 1964.022677][T13827] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 1964.028244][T13827] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 c0 31 34 8c 4c 89 f6 4c 89 fa e8 df 41 64 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 d0 18 de 8e e8 d5 [ 1964.048601][T13827] RSP: 0018:ffffc90004a3ea70 EFLAGS: 00010246 [ 1964.055520][T13827] RAX: da2fb5b3ee190200 RBX: ffff8880772a9500 RCX: 0000000000100000 [ 1964.063620][T13827] RDX: ffffc9001f498000 RSI: 0000000000035d5e RDI: 0000000000035d5f [ 1964.071744][T13827] RBP: 0000000000000001 R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 1964.079818][T13827] R10: dffffc0000000000 R11: ffffed10170e4853 R12: ffffffff8c342fa8 [ 1964.088127][T13827] R13: dffffc0000000000 R14: ffffffff8c349aa0 R15: ffff88801163a960 [ 1964.096523][T13827] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 1964.105720][T13827] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1964.112453][T13827] CR2: 000000110c3a6051 CR3: 0000000032ad4000 CR4: 00000000003526f0 [ 1964.119166][T26203] usb 4-1: config 6 has an invalid interface number: 144 but max is 0 [ 1964.120544][T13827] Call Trace: [ 1964.132072][T13827] [ 1964.132283][T26203] usb 4-1: config 6 has no interface number 0 [ 1964.135068][T13827] usb_start_wait_urb+0x114/0x4c0 [ 1964.146365][T13827] ? rcu_is_watching+0x15/0xb0 [ 1964.151238][T13827] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1964.156827][T13827] ? __kmalloc_noprof+0x29b/0x4f0 [ 1964.162433][T13827] amradio_send_cmd+0x216/0x660 [ 1964.167357][T13827] ? __pfx_amradio_send_cmd+0x10/0x10 [ 1964.172947][T13827] usb_amradio_probe+0x4b5/0x900 [ 1964.177945][T13827] ? __pfx_usb_amradio_probe+0x10/0x10 [ 1964.183552][T13827] ? __pm_runtime_set_status+0x785/0xa50 [ 1964.189321][T13827] usb_probe_interface+0x644/0xbc0 [ 1964.194745][T13827] ? __pfx_usb_probe_interface+0x10/0x10 [ 1964.200878][T13827] really_probe+0x26a/0x9a0 [ 1964.205472][T13827] __driver_probe_device+0x18c/0x2f0 [ 1964.210922][T13827] driver_probe_device+0x4f/0x430 [ 1964.216057][T13827] __device_attach_driver+0x2ce/0x530 [ 1964.221621][T13827] bus_for_each_drv+0x251/0x2e0 [ 1964.226556][T13827] ? __pfx___device_attach_driver+0x10/0x10 [ 1964.232594][T13827] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1964.238059][T13827] __device_attach+0x2b8/0x400 [ 1964.242947][T13827] ? __pfx___device_attach+0x10/0x10 [ 1964.248296][T13827] ? do_raw_spin_unlock+0x122/0x240 [ 1964.253740][T13827] bus_probe_device+0x185/0x260 [ 1964.258655][T13827] device_add+0x7b6/0xb50 [ 1964.263091][T13827] usb_set_configuration+0x1a87/0x20e0 [ 1964.268613][T13827] usb_generic_driver_probe+0x8d/0x150 [ 1964.274190][T13827] usb_probe_device+0x1c4/0x390 [ 1964.279377][T13827] ? __pfx_usb_probe_device+0x10/0x10 [ 1964.284795][T13827] really_probe+0x26a/0x9a0 [ 1964.289408][T13827] __driver_probe_device+0x18c/0x2f0 [ 1964.294935][T13827] driver_probe_device+0x4f/0x430 [ 1964.300210][T13827] __device_attach_driver+0x2ce/0x530 [ 1964.305618][T13827] bus_for_each_drv+0x251/0x2e0 [ 1964.310545][T13827] ? __pfx___device_attach_driver+0x10/0x10 [ 1964.316468][T13827] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1964.322437][T13827] __device_attach+0x2b8/0x400 [ 1964.327232][T13827] ? __pfx___device_attach+0x10/0x10 [ 1964.332577][T13827] ? do_raw_spin_unlock+0x122/0x240 [ 1964.337826][T13827] bus_probe_device+0x185/0x260 [ 1964.342850][T13827] device_add+0x7b6/0xb50 [ 1964.347218][T13827] usb_new_device+0xa39/0x16c0 [ 1964.352073][T13827] ? __pfx_usb_new_device+0x10/0x10 [ 1964.357301][T13827] ? _raw_spin_unlock_irq+0x23/0x50 [ 1964.362609][T13827] ? lockdep_hardirqs_on+0x9c/0x150 [ 1964.367835][T13827] hub_event+0x2958/0x4a20 [ 1964.372393][T13827] ? __pfx_hub_event+0x10/0x10 [ 1964.377189][T13827] ? process_scheduled_works+0x9ef/0x17b0 [ 1964.383019][T13827] ? _raw_spin_unlock_irq+0x23/0x50 [ 1964.388232][T13827] ? process_scheduled_works+0x9ef/0x17b0 [ 1964.394017][T13827] ? process_scheduled_works+0x9ef/0x17b0 [ 1964.400056][T13827] process_scheduled_works+0xae1/0x17b0 [ 1964.405646][T13827] ? __pfx_process_scheduled_works+0x10/0x10 [ 1964.411921][T13827] worker_thread+0x8a0/0xda0 [ 1964.416563][T13827] kthread+0x70e/0x8a0 [ 1964.420754][T13827] ? __pfx_worker_thread+0x10/0x10 [ 1964.425981][T13827] ? __pfx_kthread+0x10/0x10 [ 1964.430663][T13827] ? _raw_spin_unlock_irq+0x23/0x50 [ 1964.435885][T13827] ? lockdep_hardirqs_on+0x9c/0x150 [ 1964.441159][T13827] ? __pfx_kthread+0x10/0x10 [ 1964.445778][T13827] ret_from_fork+0x3fc/0x770 [ 1964.450462][T13827] ? __pfx_ret_from_fork+0x10/0x10 [ 1964.455613][T13827] ? __switch_to_asm+0x39/0x70 [ 1964.460486][T13827] ? __switch_to_asm+0x33/0x70 [ 1964.465267][T13827] ? __pfx_kthread+0x10/0x10 [ 1964.469911][T13827] ret_from_fork_asm+0x1a/0x30 [ 1964.474713][T13827] [ 1964.477758][T13827] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1964.485055][T13827] CPU: 1 UID: 0 PID: 13827 Comm: kworker/1:12 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1964.497316][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1964.507406][T13827] Workqueue: usb_hub_wq hub_event [ 1964.512484][T13827] Call Trace: [ 1964.515793][T13827] [ 1964.518815][T13827] dump_stack_lvl+0x99/0x250 [ 1964.523455][T13827] ? __asan_memcpy+0x40/0x70 [ 1964.528081][T13827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1964.533494][T13827] ? __pfx__printk+0x10/0x10 [ 1964.538162][T13827] panic+0x2db/0x790 [ 1964.542086][T13827] ? __pfx_panic+0x10/0x10 [ 1964.546537][T13827] ? ret_from_fork_asm+0x1a/0x30 [ 1964.551527][T13827] __warn+0x31b/0x4b0 [ 1964.555569][T13827] ? usb_submit_urb+0xc82/0x1890 [ 1964.560559][T13827] ? usb_submit_urb+0xc82/0x1890 [ 1964.565568][T13827] report_bug+0x2be/0x4f0 [ 1964.569938][T13827] ? usb_submit_urb+0xc82/0x1890 [ 1964.574904][T13827] ? usb_submit_urb+0xc82/0x1890 [ 1964.579867][T13827] ? usb_submit_urb+0xc84/0x1890 [ 1964.584910][T13827] handle_bug+0x84/0x160 [ 1964.589168][T13827] exc_invalid_op+0x1a/0x50 [ 1964.593686][T13827] asm_exc_invalid_op+0x1a/0x20 [ 1964.598550][T13827] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 1964.604122][T13827] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 c0 31 34 8c 4c 89 f6 4c 89 fa e8 df 41 64 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 d0 18 de 8e e8 d5 [ 1964.623752][T13827] RSP: 0018:ffffc90004a3ea70 EFLAGS: 00010246 [ 1964.629844][T13827] RAX: da2fb5b3ee190200 RBX: ffff8880772a9500 RCX: 0000000000100000 [ 1964.637828][T13827] RDX: ffffc9001f498000 RSI: 0000000000035d5e RDI: 0000000000035d5f [ 1964.645828][T13827] RBP: 0000000000000001 R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 1964.653813][T13827] R10: dffffc0000000000 R11: ffffed10170e4853 R12: ffffffff8c342fa8 [ 1964.661799][T13827] R13: dffffc0000000000 R14: ffffffff8c349aa0 R15: ffff88801163a960 [ 1964.669817][T13827] usb_start_wait_urb+0x114/0x4c0 [ 1964.674891][T13827] ? rcu_is_watching+0x15/0xb0 [ 1964.679677][T13827] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1964.685237][T13827] ? __kmalloc_noprof+0x29b/0x4f0 [ 1964.690318][T13827] amradio_send_cmd+0x216/0x660 [ 1964.695192][T13827] ? __pfx_amradio_send_cmd+0x10/0x10 [ 1964.700590][T13827] usb_amradio_probe+0x4b5/0x900 [ 1964.705555][T13827] ? __pfx_usb_amradio_probe+0x10/0x10 [ 1964.711056][T13827] ? __pm_runtime_set_status+0x785/0xa50 [ 1964.716717][T13827] usb_probe_interface+0x644/0xbc0 [ 1964.721909][T13827] ? __pfx_usb_probe_interface+0x10/0x10 [ 1964.727600][T13827] really_probe+0x26a/0x9a0 [ 1964.732163][T13827] __driver_probe_device+0x18c/0x2f0 [ 1964.737487][T13827] driver_probe_device+0x4f/0x430 [ 1964.742556][T13827] __device_attach_driver+0x2ce/0x530 [ 1964.747972][T13827] bus_for_each_drv+0x251/0x2e0 [ 1964.752852][T13827] ? __pfx___device_attach_driver+0x10/0x10 [ 1964.758778][T13827] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1964.764191][T13827] __device_attach+0x2b8/0x400 [ 1964.768986][T13827] ? __pfx___device_attach+0x10/0x10 [ 1964.774296][T13827] ? do_raw_spin_unlock+0x122/0x240 [ 1964.779927][T13827] bus_probe_device+0x185/0x260 [ 1964.784829][T13827] device_add+0x7b6/0xb50 [ 1964.789203][T13827] usb_set_configuration+0x1a87/0x20e0 [ 1964.794811][T13827] usb_generic_driver_probe+0x8d/0x150 [ 1964.800303][T13827] usb_probe_device+0x1c4/0x390 [ 1964.805196][T13827] ? __pfx_usb_probe_device+0x10/0x10 [ 1964.810635][T13827] really_probe+0x26a/0x9a0 [ 1964.815180][T13827] __driver_probe_device+0x18c/0x2f0 [ 1964.820478][T13827] driver_probe_device+0x4f/0x430 [ 1964.825513][T13827] __device_attach_driver+0x2ce/0x530 [ 1964.830904][T13827] bus_for_each_drv+0x251/0x2e0 [ 1964.835773][T13827] ? __pfx___device_attach_driver+0x10/0x10 [ 1964.841673][T13827] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1964.847081][T13827] __device_attach+0x2b8/0x400 [ 1964.851854][T13827] ? __pfx___device_attach+0x10/0x10 [ 1964.857148][T13827] ? do_raw_spin_unlock+0x122/0x240 [ 1964.862380][T13827] bus_probe_device+0x185/0x260 [ 1964.867266][T13827] device_add+0x7b6/0xb50 [ 1964.871618][T13827] usb_new_device+0xa39/0x16c0 [ 1964.876401][T13827] ? __pfx_usb_new_device+0x10/0x10 [ 1964.881619][T13827] ? _raw_spin_unlock_irq+0x23/0x50 [ 1964.886822][T13827] ? lockdep_hardirqs_on+0x9c/0x150 [ 1964.892028][T13827] hub_event+0x2958/0x4a20 [ 1964.896499][T13827] ? __pfx_hub_event+0x10/0x10 [ 1964.901283][T13827] ? process_scheduled_works+0x9ef/0x17b0 [ 1964.907037][T13827] ? _raw_spin_unlock_irq+0x23/0x50 [ 1964.912283][T13827] ? process_scheduled_works+0x9ef/0x17b0 [ 1964.918012][T13827] ? process_scheduled_works+0x9ef/0x17b0 [ 1964.923746][T13827] process_scheduled_works+0xae1/0x17b0 [ 1964.929348][T13827] ? __pfx_process_scheduled_works+0x10/0x10 [ 1964.935368][T13827] worker_thread+0x8a0/0xda0 [ 1964.939989][T13827] kthread+0x70e/0x8a0 [ 1964.944096][T13827] ? __pfx_worker_thread+0x10/0x10 [ 1964.949239][T13827] ? __pfx_kthread+0x10/0x10 [ 1964.953929][T13827] ? _raw_spin_unlock_irq+0x23/0x50 [ 1964.959136][T13827] ? lockdep_hardirqs_on+0x9c/0x150 [ 1964.964427][T13827] ? __pfx_kthread+0x10/0x10 [ 1964.969032][T13827] ret_from_fork+0x3fc/0x770 [ 1964.973647][T13827] ? __pfx_ret_from_fork+0x10/0x10 [ 1964.978780][T13827] ? __switch_to_asm+0x39/0x70 [ 1964.983562][T13827] ? __switch_to_asm+0x33/0x70 [ 1964.988353][T13827] ? __pfx_kthread+0x10/0x10 [ 1964.992971][T13827] ret_from_fork_asm+0x1a/0x30 [ 1964.997772][T13827] [ 1965.001142][T13827] Kernel Offset: disabled [ 1965.005490][T13827] Rebooting in 86400 seconds..