last executing test programs: 5m28.98457207s ago: executing program 0 (id=5145): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40000000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000100000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b"], 0x108}}, 0x0) 5m28.832257581s ago: executing program 0 (id=5147): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x1}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x75, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000000)=0x1) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x129) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008050) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0x44800}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x73, 0x0, r1, 0x80, &(0x7f0000000440)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}}) io_uring_enter(0xffffffffffffffff, 0x52de, 0xf62e, 0x8, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 5m24.257798907s ago: executing program 0 (id=5155): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000000001fff000000000000000000002700", @ANYRESOCT=r1, @ANYBLOB="000000000000002c00128009000100626f6e64000000001c000280050001400400000008001e", @ANYRES16=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) pwrite64(r2, 0x0, 0x5f, 0x800000000000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000001c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x22905a40, 0x0, 0x401, 0x1, 0x8000004, 0x0, 0x0, 0x10, 0xfffffffd}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x400, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}) renameat2(r3, &(0x7f00000000c0)='./cgroup\x00', r3, &(0x7f0000000440)='./cgroup\x00', 0x2) r6 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f00000000c0), 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x242001, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 5m23.388331092s ago: executing program 0 (id=5158): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) inotify_init() syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) statx(r1, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x20, &(0x7f00000000c0)) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x26, 0x0, 0x1000000, 0x40, 0x2, 0x11, 0x4000000000000, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) 5m23.226462557s ago: executing program 0 (id=5160): listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000f671bdcdb997af00000000865d6002000000200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000", @ANYRES32=0x41424344, @ANYBLOB="749a46df8d9c4d52742620ae719f4d982b4c82500d54f0815728514dda11b77e0d99dfd91a80925f00540633ef3bfd999e078a", @ANYBLOB="8002000090780000080a"], 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="6912e897f1b5172e0c411c1b6b0629c2", 0x10}], 0x1}}], 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0xa8) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020}, 0x2020) r2 = socket(0x10, 0x803, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd, 0x0, 0x23db}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x8, 0x40, 0xfffffffe, 0x1, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x66, 0x0, 0x0, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$alg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000002f40), 0x10) recvmsg$unix(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x40000140) r6 = io_uring_setup(0x15ea, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x0, 0x2, 0xffffffff, 0x0, r6}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x2338, &(0x7f0000000500)={0x0, 0x5bea, 0x800, 0x0, 0x227, 0x0, r6}, &(0x7f0000000480)=0x0, &(0x7f0000000580)) syz_io_uring_submit(r10, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}}) io_uring_enter(r7, 0x3516, 0x483, 0x0, 0x0, 0x0) 5m22.96160756s ago: executing program 0 (id=5161): r0 = socket(0x10, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000100)={0x1, 0x4}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x400, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5m7.406470729s ago: executing program 32 (id=5161): r0 = socket(0x10, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000100)={0x1, 0x4}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x400, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 11.361402547s ago: executing program 4 (id=6400): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_usb_connect(0x3, 0x3b9, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a70301ab00000209046d000c3fdae20009050402ff03020eff0725010007050007250101067c08090501"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x15, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "8539fbbf"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x7, 0x8}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x5, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x1, 0x2}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x7, 0x1, 0x0, 0x10, 0xc}, 0x43, &(0x7f0000000140)={0x5, 0xf, 0x43, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0xa9, 0x0, 0xb77, 0xf00, 0x2}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x6771, 0xf00f, 0x2, [0xc030, 0x3f00, 0x0, 0x3f00, 0xc030, 0xffffff]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x1, 0x101}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x7, 0xff80}]}, 0x9, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42f}}, {0xef, &(0x7f0000000340)=@string={0xef, 0x3, "f81ca3cc49bae48065b49b85d6c159560f381c283d6100775a1231a4ab579098455ef652a334cf760cfed790d315811f730bdd1e260694a626ca2bdcd03e0bbe505c1949746c1cc9f9e187191e8eb6d12aad8d73f125dd7dec57e566582872e868562b60bd263b2b9a5751a7b7758893cfd30833f5768f3c35accdccdf8e0c31448139daed0ca852e831963a3a489f49dfb59a39126d20d332c178a3780c79e793efc5a1ca04051e243152e4d95f0f0f46fc29cf3faf79fd36c561de188542953bd3be4b2de7dfa60d23716b444a4d167980f51de0ebb826a6db9683914ce1a9b0e9eea583ff5d141f58291e58"}}, {0xa7, &(0x7f0000000440)=@string={0xa7, 0x3, "21c7bdec3d35d3dd1a87b479a305e59ab7632e616d509ae85dea3e8ac3d34aed49980ce7544e63b7af2023c3196e42f934488bef6dc4d6446d7427e39cd93525cec76eb5538e5fc6966bf426d94ede571221b6aafecb834524abdc1cdd9c90074b39cd7eed5918aa4217db07717f54490a042ab9a6dae2679ac5cbc7fbfadae3316498d728499ea4ec62dac3184250889f7c6299e29247ef10e037a2d632e1201804cbb335"}}, {0x9b, &(0x7f0000000500)=@string={0x9b, 0x3, "a7d0eb657d3c586f491b6ece29d7db6cf998729ba3c06ca93cb316ec30eb0ae3d4d105b951f9b2df148b01b99bae004ab2b4aa872df838ee0857aa53c006093e304524cd26c06877f1299822820f7545e51688acfcede198ebd2b23f5162c0ece68bfa7a89fab4538c35ccf5e4689b4e64bb5ddd62dde044c12b016803b5eb6a403a5104e6177e88bdbe889b56f9ceeb8a575faec266b7f963"}}]}) 10.648470497s ago: executing program 1 (id=6404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.520087131s ago: executing program 1 (id=6407): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x200000000003, 0x87) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x1a, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8a}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x2d, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) timer_create(0x7, &(0x7f0000000180)={0x0, 0x2, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}}, &(0x7f0000000300)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) syz_usb_connect(0x0, 0x33, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xec, 0x13, 0xb2, 0x10, 0x46d, 0x8d3, 0xb28, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5}, @as_header={0x7, 0x24, 0x1, 0x7, 0x9, 0x3}]}]}}]}}]}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) 10.400621333s ago: executing program 2 (id=6408): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0xda13) 9.56612732s ago: executing program 2 (id=6413): r0 = socket$kcm(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002800)='a', 0x1}], 0x1, 0x0, 0x0, 0x20000044}, 0x24040011) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000000c0), &(0x7f0000000100)=0x10) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @remote, 0x31, 0xffffffff}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x10000000000000c8, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) 9.312095301s ago: executing program 4 (id=6414): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0xfffffeff, @loopback, 0x5}, 0x1c, &(0x7f00000000c0)}}], 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001000)=@newsa={0xf0, 0x10, 0x832152701231f605, 0x70bd27, 0x0, {{@in=@loopback, @in=@remote, 0x0, 0x3, 0x2}, {@in6=@remote, 0x0, 0x6c}, @in=@remote, {0x0, 0x8001000000000001, 0x0, 0x0, 0xfffffffffffffff9}, {}, {0x0, 0x0, 0x2}, 0x3, 0x0, 0xa, 0x4}}, 0xf0}}, 0x40080) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x8c, 0x7, 0x8, 0x2, 0x3, 0x1, 0x80, 0x0, 0x4, 0x86, 0x9, 0x9, 0x7}, 0xe) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') read$FUSE(r6, &(0x7f0000000bc0)={0x2020}, 0xfd3) preadv(r6, &(0x7f00000038c0)=[{&(0x7f0000000040)=""/95, 0x5f}], 0x1, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) read$FUSE(r6, &(0x7f0000003900)={0x2020}, 0x2020) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x20, 0x2, 0x0, 0xdffff038}, {0x6, 0x0, 0x99, 0x20009}]}, 0x10) sendmsg$inet6(r5, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)='`', 0x1}], 0x1}, 0x4044801) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) 8.612423661s ago: executing program 2 (id=6419): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x14, 0x300, 0x70bd25, 0x25dfdbff, {0x2b, 0xc}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "a406b656d9"}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES32=r1], 0x0) 8.533600204s ago: executing program 1 (id=6420): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x24, 0x0, 0x0, 0x2}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffff) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) unlink(&(0x7f00000003c0)='./file0\x00') 8.48496693s ago: executing program 4 (id=6421): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0xf, 0x6, '\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x6, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002dd, @void, @value}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x1568, 0xd0, 0x13c8, 0x11d0, 0x11d0, 0x12a0, 0x1498, 0x1498, 0x1498, 0x1498, 0x1498, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'pim6reg\x00', 'sit0\x00', {}, {0xff}}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x40, {0x9faf}}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'wlan1\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff000000, 0xffffff00], 'veth1_to_batadv\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0xe, 0x0, 0xb5, 0x8, 0x280d}}, @common=@ipv6header={{0x28}, {0x30, 0x33}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x15c8) syz_usb_ep_read(r0, 0x8, 0x1000, &(0x7f0000000500)=""/4096) 7.296730093s ago: executing program 3 (id=6424): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000010001fff2cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="63100400000000001800127e08000100736974000c00028005000900c9000000"], 0x38}, 0x1, 0x0, 0x0, 0x1000}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000500)={0x24, &(0x7f0000000340)={0x40, 0x23, 0x95, {0x95, 0xf, "b6ab075295453109c9a9a143eef134d193a4cb08ddc54295d5fb4c2b0de20dc91b8df86986aa274b62cb9e40a468c2c9a4b962e8fcc3125aa20a554e2050dc45c365d4a0353d279af0c08e067787faceb462880f1b84d4786ccfd0d341ddd4a55c1b62a4d8d5d90d14adf31dff9b4d51212bd29e17a82f8a1b8a709422f82c81108439a5f5dc527ceb328b7dd33f92dfc6555e"}}, &(0x7f0000000240)={0x0, 0x3, 0x5d, @string={0x5d, 0x3, "b38914dee1045f0b90f26c552b752f1ce7a401b5e0f582cb4452686e92b96826c505ac592ca63969729b1ae36a9268eed53538fbc99517c8c6fcfcb46e6bd3d6611a5fff31737620ff599c3e2a42839119776af8a531bbf997ee1d"}}, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "10cc4cd5"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x4, 0x1, {0x22, 0xa2b}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000540)={0x20, 0x8, 0x5, "25009dcabe"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xf3}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x36}, &(0x7f0000000600)=ANY=[@ANYBLOB="200197000000b22013ba1903a6990f5593cc20be4f90be40c246f5d0d7b959f01a1fc5b64a9244549d0df93a2799ed06cf26828fbd1f986594dbac2fd4e614d833267aadbeafc7d84934178c59788846547dc8c20e8ae690a63cff194256c6656743c2f7116f3c69dfdc191d04bf9280802f52b86796678c2790bae97fbaa0bde1797299bd12d3162a9189b470e53d00fb891fd1bc5e01b05d6051b0e1"], &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x80}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4a}}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, r0, 0x0, &(0x7f0000000000)='./file0\x00', 0x55, 0x0, 0x1}) socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6, @broadcast}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000180)={r8, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r8, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330022eb"], 0x10da) 7.156133795s ago: executing program 2 (id=6425): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0xc0, 0x0, r1}, 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r6 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x0f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r6) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)='$\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) read(r6, 0x0, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a07000000000000000000020000000900010073797a3000000000040006005c000000030a010200000c0000000000020000000900010073797a30000000003900030091abc12404cf378034f26c43f91f68d8a90767c0bc71f60877974475de3d78ef670e", @ANYRESDEC], 0xbc}}, 0x0) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0x0, r2, 0x23, {0x4, 0x6d4}, 0xf0}, 0x1) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc07}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) write$UHID_INPUT(r0, &(0x7f0000000380)={0x8, {"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", 0x1000}}, 0x1006) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$int_in(r8, 0x5452, &(0x7f0000000100)=0x3ff) ioctl$SNDCTL_DSP_GETOPTR(r8, 0x800c5012, &(0x7f00000000c0)) 7.155551426s ago: executing program 5 (id=6426): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="200103000000c282fe5eef479761c3c19080849040ecb4c26d15147eff6ac14208d19f408b7f37f71fb88677ae2955841ddd16917906a9541d78d364014475544dd5222371f494a2242940dfc05f8d82f6469d2ff4ecedccf4d3f3039430b95d30356b6936d3b1aa99bbcc494d2f315dbab50e76bf416e9c48d9ecab17b40fae2c029c0f34be1b99ae569506c91f30d11ac561dc0ee2b271b69d5eb7cef8d34e2eac206e47a86fdab91c10b1"], 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000140)={0x20, 0xd, 0x20, {0x20, 0x23, "e3bf108858efedc925338e65c0f61644b3510c3db416936a78a3b51d9a0c"}}, &(0x7f0000000240)={0x0, 0x3, 0xac, @string={0xac, 0x3, "66d6459f426b733ca236859c7c5701c9b21f384345202c44b69af19baa60f0772b58903a834cabb4929d1ebbfa45b92d090dd3ba12da1116cc29b46a668cd7d14de7db107a1b2b3991b9c397b35a936bbbdc3f133889c1e0921b14b1259e206610101dab1c45cf525b53fedc3c4105b921cd97afc89074d1ada8933d364ca51ab547b0f6268045f7477d5caf983c2cfc35f798345f4854f444b06b89086182e500"/170}}, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x7, 0x1, {0x22, 0x1}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000340)={0x40, 0x8, 0xaa, "1093873111e6d2a7a0bd18bdac2057bc09721f4536d467705aee70dd2600aeb537035229175434edc652c86d6385324188ba3b45cd214140c50e762770e6d760dce352ee06d2c1f16d305036997e22a1719fa7f416f0f891b121f727099ef93153ae71b452cc6efdd574110d4f7b0770f1a184f8a2fb59a04913c3bb7d8201da31d154bb6bbe7c4d33e67d1067dde1c856e485dc217c91e8eda7e9ed918b2224c61ad355ed39ca75e212"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x1, 0x74, "8671080208b29ad59ef1ffd8ce6287b8acbcb5bdd7faf216ee481b017f6318794b475302972a8cde2a18f8f8c92d465250ce0899957e6c84b817bada73c5b36a398e14025b6ae8ed22f904e1ec5b78ee0b660bf80d445494c5d86e8dfa242d60bb8412cfbce6f18669251e132503e829ef7ef0a2"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000900)=[{0xffff, 0x4001, 0x0, 0x0}], 0x1}) 7.126610598s ago: executing program 1 (id=6427): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x2) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/254, 0xfe}], 0x1, 0x4, 0xffffd195, 0x8) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) fsopen(&(0x7f00000000c0)='bfs\x00', 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x18, 0x0, @fd_index=0x9, 0xd, 0x0, 0x1, 0x4}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) 6.816495421s ago: executing program 2 (id=6428): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x10000000, 0x0, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8f, 0xcc, 0x9, 0x20, 0x4e8, 0xa101, 0x808e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x81, 0x0, 0x1, 0xff, 0xef, 0x98, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}]}}]}}]}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x2, {0x0, 0x0, 0x5}}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r6) 6.636344915s ago: executing program 1 (id=6429): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100001002bbd7000f4dbdf2500000000", @ANYRES32=r3, @ANYBLOB="0000000008000200"], 0x38}}, 0x40) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x200000d0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000001480)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0xfffffeef) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x8695c3813a9bd78d}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x3fb, 0x0, 0xc000, 0xffb, 0x0, 0xee00, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000003e000b01fcfffffffddbdf25047c0000040036800c000180060006008e0a00003947213e5b6ad92cbee8ec9500c114464908d2563797c401f890ecfa6c567f4f0499c89afd76428d30f7d76390d505795bd396f5ba306e31bcf51a8cb4d47ef7efe73cbe601556e39705208028214a"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4004, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0xd, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x103, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x52f, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4, 0x3, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x104]}}) unlink(&(0x7f00000000c0)='./file0\x00') socket$inet_smc(0x2b, 0x1, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.185329895s ago: executing program 4 (id=6430): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x4006}]}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f00)='/sys/power/pm_print_times', 0x1a1081, 0x0) write$cgroup_int(r2, &(0x7f0000000340)=0x4, 0x12) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 5.492409212s ago: executing program 3 (id=6431): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f00000011"], 0x20) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x72, 0x8000) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) 4.539571586s ago: executing program 5 (id=6432): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e80200000000000029"], 0x2e8}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x8, @loopback, 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000000c0)="f221c827b6f4673cf028e94db1be5adf254cc593d87bed57d8260d0072db185f663a7573f35f59979ee68a3e0bc249067f5866fe1fa884ce4f645dadb55b4fb46519258e10f78daff446b0e368da762f4b7245f9d5bacb9d7bf71dd384f8a4f2dfcdba194c8af72fabd65f6c29cd5916d8aaf909c6dc804dc89ad76c5a148c5346ca014b7283731017734642909404568f52eee288728034345f838c", 0x9c}, {&(0x7f00000001c0)}, {&(0x7f0000000240)="b26007660725d8b4ec10a4adf80d5210da2f31160181372dd308390557de95b5acea7d53b4c378eb3cfa6dd5415fbf16187c35bc3787bff4f7af45f799407637ee18527d918cc5696897d2e7149fca33642c58bcc978086af67b8a29909234aa1b5bd1ee517d30094457c01f6103996c125f7995c49737c52841eb7d9ce5412519ad0a2abda2e55f3b0816182025039749b8f33ec6286d8dd37128cc7c1d61fd1339cc9a3be6b7", 0xa7}], 0x3, &(0x7f0000000380)=[@hopopts={{0x20, 0x29, 0x36, {0x3a, 0x0, '\x00', [@pad1]}}}], 0x20}}], 0x3, 0x0) 4.539014582s ago: executing program 3 (id=6433): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000380)={[{0x0, 0x6, 0x7, 0x9, 0x7, 0x8, 0x4, 0xfb, 0xf4, 0xff, 0x0, 0x36, 0xfffffffffffffffc}, {0x31, 0x4, 0x7, 0x9, 0x6, 0xb, 0x4, 0x6, 0x9, 0x4, 0xe3, 0x10, 0xfffffffffffffffa}, {0x1, 0x8, 0x5a, 0x0, 0x2, 0x3, 0xaf, 0x7, 0xff, 0x6, 0x2, 0x5, 0xe}], 0x3}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xb, 0x6, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x40, 0x4, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_connect(0x5, 0x164, &(0x7f00000007c0)=ANY=[], 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000200), 0x4c0000000000000, 0x800) pread64(r8, 0x0, 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002f40), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) readv(r3, &(0x7f0000000a00), 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) 4.343982831s ago: executing program 5 (id=6434): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xa, 0xd0e0088, 0x0, 0x100, 0x280, 0x1d8, 0x1d8, 0x280, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00', {}, {}, 0x73}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x3202, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x2, 0x2, 0x42fd3a5e50046d73, 0x0, 0x4], 0x2, 0x2}, {0x2, [0x2, 0x6, 0x3, 0x1, 0x2, 0x6], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 3.116493063s ago: executing program 2 (id=6435): pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) memfd_create(0x0, 0xe) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x2b, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0xcc4f, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18001800000000000000009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/138, 0x8a}], 0x1, &(0x7f0000000280)=""/13, 0xd}, 0x20) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005200010a0000000000ba10000a000000"], 0x14}}, 0x0) 3.03643327s ago: executing program 5 (id=6436): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xe, 0x4005, &(0x7f0000006680)=0xfc) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.650023658s ago: executing program 4 (id=6437): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x24, 0x0, 0x0, 0x2}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffff) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) unlink(&(0x7f00000003c0)='./file0\x00') 2.434349114s ago: executing program 1 (id=6438): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x10000, 0x0) clock_gettime(0x0, 0x0) io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={[0xdee]}, 0x8}) io_submit(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x41, &(0x7f0000001000)=ANY=[@ANYBLOB="120110b200000010cf0701108b8f0102030109022f00010803100709"], 0x0) r5 = epoll_create1(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x4}, 0x20) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x10000, 0x80000001, 0x69, 0xc3000000, 0xfffffffa, 0x6}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) syz_usb_connect(0x2, 0x428, &(0x7f0000000000)=ANY=[@ANYBLOB="120100034e158b20450c8c60c82b010203010902160401060480060904"], &(0x7f0000007b40)={0x0, 0x0, 0x0, 0x0}) 1.323425476s ago: executing program 5 (id=6439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x1800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 810.912326ms ago: executing program 3 (id=6440): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4623, 0xfffffffd, @local, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000001780)="9c435a7de4c0ff7c4563074aa91bee4f6e90607e890a47d0be6a17fdc0c6a1796db4fe7dd11538645e1058e812536c926690b1b24c7efd5c00ecfb64781df49eab06e8d9c153ad38a9b439a4db81dc1e36f1e6f032183ebd46c2fd9827fc48c8cdb4f07e93b48410a25fdeded74f2bc99f878a19012e6b7b623763f2b4a717576faa2825abf02e2090bb34084a971ec99e558675a54179a2c8eec2cde79ad3c2f6dd3131a464f396a63c07a34b7e7016b5af1b7d7417c22a72fc036ac41b0ade14bf538417", 0xc5}], 0x1, 0x0, 0x60}}], 0x1, 0x4001c00) 640.576517ms ago: executing program 3 (id=6441): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = epoll_create(0x8) epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040), &(0x7f0000000080), 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x252, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7ef9, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x4c0, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x490, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0xffffffd1, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x0, 0x2, "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"}]}}]}, 0x4c0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x0, 0x4, 0x9, 0x8, 0x4, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = epoll_create(0x3) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x1}, 0x9}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000340)={r9}) getsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x11d, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c000280050001000000000024000180", @ANYRESDEC=r8, @ANYBLOB="932403f2490c97dc9f195b0961e6b01ee94716814c04c7768cade64075ca3bcbe0fd45efc0e9fe14", @ANYRES8=r3], 0x80}, 0x1, 0x0, 0x0, 0x20048884}, 0x48004) 188.252987ms ago: executing program 5 (id=6442): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x23, 0x1a, {0x1a, 0xa, "1348f1d08bad0e66582895f390c96add168bbf951d0e1e16"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x0, 0x10, 0xd4, "0f0b03c70873e584b634b04df128fb86c8d40f9bca1b30e09e9472d32fdbfd478c6588689d2e6e5e82c1ba1869bf73a81a389c6a7fe8c0fea802fb11a3eb7ec743f2d0e4d8e7ae3057196f297b84b97739b7310f7a144b63f4dfa4a9b6019fd29d811f919ab16242a8524472c99d7cde0690ff93a9aa28d6a1db7335115f235226cc8e2d06bcd7e5185afd105e8e98be77412c14143f73bfc34672580c48d628580e5e5a9933902496300f59d66f3f19e14a860c8f193c38b27a63945757be4e4e8993ec4c525f32cac0d1dd2ba080649f2fc793"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1d}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x6b9, 0x3, 0x101, 0x2, 0x5, 0x0, 0x4, 0x3, 0x8, 0x1, 0xb, 0x6}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x8}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000600)=[{0x7, 0x211, 0x0, 0x0}], 0x1}) 146.284145ms ago: executing program 3 (id=6443): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="200103000000c282fe5eef479761c3c19080849040ecb4c26d15147eff6ac14208d19f408b7f37f71fb88677ae2955841ddd16917906a9541d78d364014475544dd5222371f494a2242940dfc05f8d82f6469d2ff4ecedccf4d3f3039430b95d30356b6936d3b1aa99bbcc494d2f315dbab50e76bf416e9c48d9ecab17b40fae2c029c0f34be1b99ae569506c91f30d11ac561dc0ee2b271b69d5eb7cef8d34e2eac206e47a86fdab91c10b1"], 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000140)={0x20, 0xd, 0x20, {0x20, 0x23, "e3bf108858efedc925338e65c0f61644b3510c3db416936a78a3b51d9a0c"}}, &(0x7f0000000240)={0x0, 0x3, 0xac, @string={0xac, 0x3, "66d6459f426b733ca236859c7c5701c9b21f384345202c44b69af19baa60f0772b58903a834cabb4929d1ebbfa45b92d090dd3ba12da1116cc29b46a668cd7d14de7db107a1b2b3991b9c397b35a936bbbdc3f133889c1e0921b14b1259e206610101dab1c45cf525b53fedc3c4105b921cd97afc89074d1ada8933d364ca51ab547b0f6268045f7477d5caf983c2cfc35f798345f4854f444b06b89086182e500"/170}}, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x7, 0x1, {0x22, 0x1}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000340)={0x40, 0x8, 0xaa, "1093873111e6d2a7a0bd18bdac2057bc09721f4536d467705aee70dd2600aeb537035229175434edc652c86d6385324188ba3b45cd214140c50e762770e6d760dce352ee06d2c1f16d305036997e22a1719fa7f416f0f891b121f727099ef93153ae71b452cc6efdd574110d4f7b0770f1a184f8a2fb59a04913c3bb7d8201da31d154bb6bbe7c4d33e67d1067dde1c856e485dc217c91e8eda7e9ed918b2224c61ad355ed39ca75e212"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x1, 0x74, "8671080208b29ad59ef1ffd8ce6287b8acbcb5bdd7faf216ee481b017f6318794b475302972a8cde2a18f8f8c92d465250ce0899957e6c84b817bada73c5b36a398e14025b6ae8ed22f904e1ec5b78ee0b660bf80d445494c5d86e8dfa242d60bb8412cfbce6f18669251e132503e829ef7ef0a2"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000900)=[{0xffff, 0x4001, 0x0, 0x0}], 0x1}) 0s ago: executing program 4 (id=6444): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xe4b, 0x8, 0x8000, 0x4, 0x10, 0x1, 0xe}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x80000001, @empty, 0x2}}, 0xc, 0x3}, 0x90) sendto$inet6(r3, &(0x7f0000000080)="49a5ae34", 0x4, 0xc0, &(0x7f0000000000)={0xa, 0x4e20, 0xd5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ustat(0xbe, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0xb0, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000003280)={'fscrypt:', @desc4}, 0x0, 0x0, 0xfffffffffffffffb) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) unshare(0x28040600) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r6, 0x627, 0xc1040000, 0x43, 0x0, 0x0) kernel console output (not intermixed with test programs): =0 ses=4294967295 subj=unconfined pid=28166 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fd18e929 code=0x7ffc0000 [ 1559.364344][ T30] audit: type=1326 audit(1750539802.569:20085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28166 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fd18e929 code=0x7ffc0000 [ 1559.398289][ T30] audit: type=1326 audit(1750539802.569:20086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28166 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fd18e929 code=0x7ffc0000 [ 1559.435875][ T30] audit: type=1326 audit(1750539802.569:20087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28166 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fd12ab19 code=0x7ffc0000 [ 1559.470030][ T30] audit: type=1326 audit(1750539802.569:20088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28166 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fd12ab19 code=0x7ffc0000 [ 1559.497092][ T30] audit: type=1326 audit(1750539802.569:20089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28166 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fd12ab19 code=0x7ffc0000 [ 1559.530483][ T30] audit: type=1326 audit(1750539802.569:20090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28166 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fd12ab19 code=0x7ffc0000 [ 1559.556129][ T30] audit: type=1326 audit(1750539802.569:20091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28166 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fd12ab19 code=0x7ffc0000 [ 1560.815736][T17970] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1560.936318][T17970] usb 3-1: USB disconnect, device number 3 [ 1561.095883][T28208] fuse: Bad value for 'rootmode' [ 1561.456344][T28216] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1562.454052][T17970] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1562.737938][T17970] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.749847][T17970] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1562.803275][T17970] usb 2-1: config 1 has no interface number 0 [ 1562.830754][T17970] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1562.950780][T17970] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1563.134194][T17970] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1563.153450][T17970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.178253][T17970] usb 2-1: Product: syz [ 1563.186325][T17970] usb 2-1: Manufacturer: syz [ 1563.206518][T17970] usb 2-1: SerialNumber: syz [ 1564.040464][T17970] cdc_ncm 2-1:1.1: bind() failure [ 1564.143991][ T5922] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1564.383978][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 1564.401066][ T5922] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1564.420948][ T5922] usb 4-1: config 0 has no interface number 0 [ 1564.449617][ T5922] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1564.479777][ T5922] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1564.508651][T28231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1564.530020][ T5922] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1564.541383][T28231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.644378][ T5922] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1564.668388][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.683838][ T5922] usb 4-1: Product: syz [ 1564.689927][ T5922] usb 4-1: Manufacturer: syz [ 1564.693841][T26070] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1564.703517][ T5922] usb 4-1: SerialNumber: syz [ 1564.721458][ T5922] usb 4-1: config 0 descriptor?? [ 1564.727901][T28243] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1564.740081][T28243] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1564.856978][T26070] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1564.882050][T26070] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1564.927450][T26070] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1564.949939][T26070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.965409][T28239] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1564.980188][T28239] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1565.008451][T28250] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1565.042987][T26070] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1565.237983][T20354] usb 5-1: USB disconnect, device number 94 [ 1565.535898][ T5922] Error reading MAC address [ 1565.736353][ T5922] sr9700 4-1:0.41: probe with driver sr9700 failed with error -71 [ 1565.752385][ T5922] usb 4-1: USB disconnect, device number 112 [ 1565.848384][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1565.848397][ T30] audit: type=1326 audit(1750539809.779:20150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28258 comm="syz.5.6096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6fd18e929 code=0x0 [ 1566.212157][ T30] audit: type=1326 audit(1750539810.139:20151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28264 comm="syz.4.6097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dc018e929 code=0x0 [ 1566.447433][T28271] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6097'. [ 1566.461838][T20354] usb 2-1: USB disconnect, device number 14 [ 1566.471495][T28249] delete_channel: no stack [ 1566.914136][T28281] FAULT_INJECTION: forcing a failure. [ 1566.914136][T28281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1566.961951][T28281] CPU: 1 UID: 0 PID: 28281 Comm: syz.1.6101 Not tainted 6.16.0-rc2-syzkaller-00308-gf7301f856d35 #0 PREEMPT(full) [ 1566.961980][T28281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1566.961993][T28281] Call Trace: [ 1566.962001][T28281] [ 1566.962011][T28281] dump_stack_lvl+0x189/0x250 [ 1566.962045][T28281] ? __pfx____ratelimit+0x10/0x10 [ 1566.962076][T28281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1566.962106][T28281] ? __pfx__printk+0x10/0x10 [ 1566.962139][T28281] should_fail_ex+0x414/0x560 [ 1566.962170][T28281] _copy_to_user+0x31/0xb0 [ 1566.962193][T28281] simple_read_from_buffer+0xe1/0x170 [ 1566.962219][T28281] proc_fail_nth_read+0x1df/0x250 [ 1566.962246][T28281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1566.962272][T28281] ? rw_verify_area+0x258/0x650 [ 1566.962299][T28281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1566.962323][T28281] vfs_read+0x200/0x980 [ 1566.962358][T28281] ? __pfx___mutex_lock+0x10/0x10 [ 1566.962378][T28281] ? __pfx_vfs_read+0x10/0x10 [ 1566.962410][T28281] ? __fget_files+0x2a/0x420 [ 1566.962436][T28281] ? __fget_files+0x3a0/0x420 [ 1566.962457][T28281] ? __fget_files+0x2a/0x420 [ 1566.962488][T28281] ksys_read+0x145/0x250 [ 1566.962509][T28281] ? __pfx_ksys_read+0x10/0x10 [ 1566.962535][T28281] ? rcu_is_watching+0x15/0xb0 [ 1566.962570][T28281] ? do_syscall_64+0xbe/0x3b0 [ 1566.962594][T28281] do_syscall_64+0xfa/0x3b0 [ 1566.962611][T28281] ? lockdep_hardirqs_on+0x9c/0x150 [ 1566.962638][T28281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.962657][T28281] ? clear_bhb_loop+0x60/0xb0 [ 1566.962681][T28281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.962701][T28281] RIP: 0033:0x7f1c21f8d33c [ 1566.962725][T28281] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1566.962743][T28281] RSP: 002b:00007f1c22eb5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1566.962764][T28281] RAX: ffffffffffffffda RBX: 00007f1c221b5fa0 RCX: 00007f1c21f8d33c [ 1566.962779][T28281] RDX: 000000000000000f RSI: 00007f1c22eb50a0 RDI: 0000000000000004 [ 1566.962792][T28281] RBP: 00007f1c22eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 1566.962804][T28281] R10: 0000000000040804 R11: 0000000000000246 R12: 0000000000000001 [ 1566.962817][T28281] R13: 0000000000000000 R14: 00007f1c221b5fa0 R15: 00007f1c222dfa28 [ 1566.962848][T28281] [ 1567.875136][T20354] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1568.036607][T20354] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1568.050075][T20354] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1568.105533][T20354] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1568.140800][T20354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.196229][T20354] usb 6-1: config 0 descriptor?? [ 1568.653926][T20354] isku 0003:1E7D:319C.003E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 1569.199245][T20354] isku 0003:1E7D:319C.003E: couldn't init struct isku_device [ 1569.227141][T20354] isku 0003:1E7D:319C.003E: couldn't install keyboard [ 1569.245718][T20354] isku 0003:1E7D:319C.003E: probe with driver isku failed with error -32 [ 1569.330037][T26070] usb 6-1: USB disconnect, device number 41 [ 1569.448503][T28320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6108'. [ 1569.684256][T28327] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1569.944824][T26070] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 1570.093911][T26070] usb 4-1: device descriptor read/64, error -71 [ 1570.154467][T28338] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6115'. [ 1570.327642][T28342] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6114'. [ 1570.355864][ T30] audit: type=1326 audit(1750539814.289:20152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28332 comm="syz.4.6114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dc018e929 code=0x0 [ 1570.390875][T26070] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1570.524033][T26070] usb 4-1: device descriptor read/64, error -71 [ 1570.696594][T26070] usb usb4-port1: attempt power cycle [ 1571.144039][T26070] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 1571.231520][T26070] usb 4-1: device descriptor read/8, error -71 [ 1571.494046][T26070] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 1571.542903][T26070] usb 4-1: device descriptor read/8, error -71 [ 1571.680554][T26070] usb usb4-port1: unable to enumerate USB device [ 1572.804332][T28383] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 1573.078321][ T30] audit: type=1326 audit(1750539817.009:20153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28387 comm="syz.3.6130" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f033cf8e929 code=0x0 [ 1573.484393][T20354] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1573.513036][T28396] netlink: 'syz.4.6132': attribute type 29 has an invalid length. [ 1573.537590][T28396] netlink: 'syz.4.6132': attribute type 29 has an invalid length. [ 1573.549939][T28396] netlink: 500 bytes leftover after parsing attributes in process `syz.4.6132'. [ 1573.623834][T17970] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1573.745055][T28397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1573.813958][T20354] usb 2-1: config 0 has no interfaces? [ 1573.831334][T28397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1573.975404][T20354] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1574.144129][T20354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.466300][T20354] usb 2-1: Product: syz [ 1574.470570][T20354] usb 2-1: Manufacturer: syz [ 1574.544310][T20354] usb 2-1: SerialNumber: syz [ 1574.649822][T20354] usb 2-1: config 0 descriptor?? [ 1575.263968][T17970] usb 5-1: device descriptor read/64, error -71 [ 1575.447053][T28433] input: syz1 as /devices/virtual/input/input98 [ 1575.529178][ T30] audit: type=1326 audit(1750539819.459:20154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033cf8e929 code=0x7ffc0000 [ 1575.555011][T17970] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1575.638603][T28434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.661315][ T30] audit: type=1326 audit(1750539819.489:20155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033cf8e929 code=0x7ffc0000 [ 1575.661359][ T30] audit: type=1326 audit(1750539819.509:20156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f033cf2ab19 code=0x7ffc0000 [ 1575.661384][ T30] audit: type=1326 audit(1750539819.559:20157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f033cf2ab19 code=0x7ffc0000 [ 1575.661409][ T30] audit: type=1326 audit(1750539819.559:20158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f033cf2ab19 code=0x7ffc0000 [ 1575.661432][ T30] audit: type=1326 audit(1750539819.559:20159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033cf8e929 code=0x7ffc0000 [ 1575.661455][ T30] audit: type=1326 audit(1750539819.559:20160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f033cf8d290 code=0x7ffc0000 [ 1575.661478][ T30] audit: type=1326 audit(1750539819.559:20161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f033cf2ab19 code=0x7ffc0000 [ 1575.661501][ T30] audit: type=1326 audit(1750539819.559:20162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.3.6140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f033cf2ab19 code=0x7ffc0000 [ 1575.685752][T28434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.870613][T17970] usb 5-1: Using ep0 maxpacket: 32 [ 1575.898349][T17970] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1575.898371][T17970] usb 5-1: config 0 has no interface number 0 [ 1575.898419][T17970] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1575.898435][T17970] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1575.903532][T17970] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1575.903552][T17970] usb 5-1: New USB device strings: Mfr=1, Product=9, SerialNumber=0 [ 1575.903563][T17970] usb 5-1: Product: syz [ 1575.903571][T17970] usb 5-1: Manufacturer: syz [ 1575.907589][T17970] usb 5-1: config 0 descriptor?? [ 1576.007946][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.075928][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.522601][T17970] appletouch 5-1:0.85: Geyser mode initialized. [ 1576.533969][T28444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6147'. [ 1576.542188][T17970] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input99 [ 1576.577375][T20360] usb 2-1: USB disconnect, device number 15 [ 1576.849214][T28454] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6149'. [ 1576.874171][T20359] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1577.044642][T20359] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 1577.064469][T20359] usb 6-1: config 0 has no interfaces? [ 1577.080753][T20359] usb 6-1: config 0 has no interfaces? [ 1577.104389][T20359] usb 6-1: config 0 has no interfaces? [ 1577.132523][T20359] usb 6-1: config 0 has no interfaces? [ 1577.164984][T20359] usb 6-1: config 0 has no interfaces? [ 1577.171780][T20359] usb 6-1: config 0 has no interfaces? [ 1577.184559][T20359] usb 6-1: config 0 has no interfaces? [ 1577.198582][T20359] usb 6-1: config 0 has no interfaces? [ 1577.240365][T20359] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1577.265326][T20359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.325395][T20359] usb 6-1: Product: syz [ 1577.360742][T20359] usb 6-1: Manufacturer: syz [ 1577.393724][T20359] usb 6-1: SerialNumber: syz [ 1577.437433][T20359] usb 6-1: config 0 descriptor?? [ 1577.735523][T20359] usb 6-1: USB disconnect, device number 42 [ 1578.106939][T27041] bond0: (slave syz_tun): Releasing backup interface [ 1578.298952][T24917] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1578.312691][T24917] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1578.321201][T24917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1578.331109][T24917] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1578.361123][T24917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1578.434051][T26070] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1578.451857][T16256] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1578.475183][T16256] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1578.482584][T16256] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1578.503898][T16256] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1578.512370][T16256] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1578.631248][T28465] netlink: 'syz.1.6152': attribute type 3 has an invalid length. [ 1578.671424][T28465] netlink: 'syz.1.6152': attribute type 1 has an invalid length. [ 1578.714472][T26070] usb 6-1: Using ep0 maxpacket: 32 [ 1578.827049][T26070] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1578.882441][T26070] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1578.919409][T26070] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1578.929881][T20359] usb 5-1: USB disconnect, device number 96 [ 1578.993315][T26070] usb 6-1: Product: syz [ 1579.000289][T26070] usb 6-1: Manufacturer: syz [ 1579.015658][T26070] usb 6-1: SerialNumber: syz [ 1579.050288][T20359] appletouch 5-1:0.85: input: appletouch disconnected [ 1579.077262][T26070] usb 6-1: config 0 descriptor?? [ 1579.095986][T28446] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1579.315957][T28482] loop6: detected capacity change from 0 to 7 [ 1579.351349][T28482] Dev loop6: unable to read RDB block 7 [ 1579.367720][T28482] loop6: unable to read partition table [ 1579.374896][T28482] loop6: partition table beyond EOD, truncated [ 1579.399196][T28482] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1579.414224][T20359] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1579.539469][T28466] chnl_net:caif_netlink_parms(): no params data found [ 1579.626373][T20359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1579.644794][T20359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1579.659145][T20359] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1579.713545][T20359] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1579.738939][T20359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.774935][T20359] usb 5-1: config 0 descriptor?? [ 1579.869715][T14822] bridge_slave_1: left allmulticast mode [ 1579.919202][T14822] bridge_slave_1: left promiscuous mode [ 1579.974218][T14822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.020059][T28473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.112921][T28473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.135078][T28473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.144314][T28473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.152958][T28473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.197139][T14822] bridge_slave_0: left allmulticast mode [ 1580.234270][T14822] bridge_slave_0: left promiscuous mode [ 1580.234533][T28473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.260510][T14822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.408072][T28473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.471579][T28505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6160'. [ 1580.497431][T28473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.546239][T24917] Bluetooth: hci0: command tx timeout [ 1580.620104][T28473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.699894][T20354] usb 6-1: USB disconnect, device number 43 [ 1580.756825][T28473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.946471][T20359] usbhid 5-1:0.0: can't add hid device: -71 [ 1580.946591][T20359] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1580.984296][T20359] usb 5-1: USB disconnect, device number 97 [ 1581.183470][T28510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1581.232638][T28510] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1581.787981][ T30] kauditd_printk_skb: 155 callbacks suppressed [ 1581.787998][ T30] audit: type=1326 audit(1750539825.719:20318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28491 comm="syz.1.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c21f8e929 code=0x7ffc0000 [ 1581.824689][ T30] audit: type=1326 audit(1750539825.759:20319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28491 comm="syz.1.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c21f8e929 code=0x7ffc0000 [ 1581.903943][T26070] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1582.116591][T26070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1582.174042][T26070] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1582.220811][T26070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.275371][T26070] usb 5-1: config 0 descriptor?? [ 1582.513973][T26070] usb 5-1: string descriptor 0 read error: -32 [ 1582.627754][T24917] Bluetooth: hci0: command tx timeout [ 1582.941282][T26070] usb 5-1: USB disconnect, device number 98 [ 1582.967818][T14822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.993145][T14822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1583.006935][T14822] bond0 (unregistering): Released all slaves [ 1583.026497][T14822] bond1 (unregistering): Released all slaves [ 1583.127781][T28466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.185826][T28466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.193176][T28466] bridge_slave_0: entered allmulticast mode [ 1583.215369][T28466] bridge_slave_0: entered promiscuous mode [ 1583.251557][T14822] : left promiscuous mode [ 1583.338858][T28466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.379506][T28466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.412704][T28466] bridge_slave_1: entered allmulticast mode [ 1583.432650][T28466] bridge_slave_1: entered promiscuous mode [ 1583.647523][T14822] tipc: Left network mode [ 1583.652039][T28543] FAULT_INJECTION: forcing a failure. [ 1583.652039][T28543] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.665176][T28543] CPU: 0 UID: 0 PID: 28543 Comm: syz.1.6172 Not tainted 6.16.0-rc2-syzkaller-00308-gf7301f856d35 #0 PREEMPT(full) [ 1583.665202][T28543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1583.665214][T28543] Call Trace: [ 1583.665223][T28543] [ 1583.665230][T28543] dump_stack_lvl+0x189/0x250 [ 1583.665259][T28543] ? __pfx____ratelimit+0x10/0x10 [ 1583.665287][T28543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1583.665313][T28543] ? __pfx__printk+0x10/0x10 [ 1583.665343][T28543] should_fail_ex+0x414/0x560 [ 1583.665371][T28543] should_failslab+0xa8/0x100 [ 1583.665390][T28543] __kmalloc_cache_noprof+0x70/0x3d0 [ 1583.665408][T28543] ? __ipv6_dev_ac_inc+0x3b0/0xb30 [ 1583.665433][T28543] __ipv6_dev_ac_inc+0x3b0/0xb30 [ 1583.665452][T28543] ? ipv6_chk_prefix+0x485/0x510 [ 1583.665479][T28543] ? ipv6_chk_prefix+0x2b/0x510 [ 1583.665523][T28543] ipv6_sock_ac_join+0x4a8/0x6c0 [ 1583.665552][T28543] do_ipv6_setsockopt+0x1f8c/0x2fb0 [ 1583.665588][T28543] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1583.665616][T28543] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1583.665658][T28543] ? __pfx___might_resched+0x10/0x10 [ 1583.665689][T28543] ? rcu_read_lock_any_held+0xb3/0x120 [ 1583.665709][T28543] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1583.665731][T28543] ? vfs_write+0x8d8/0xa90 [ 1583.665764][T28543] ? aa_sk_perm+0x81e/0x950 [ 1583.665790][T28543] ? __pfx_aa_sk_perm+0x10/0x10 [ 1583.665810][T28543] ? __lock_acquire+0xab9/0xd20 [ 1583.665849][T28543] ipv6_setsockopt+0x59/0x170 [ 1583.665876][T28543] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1583.665899][T28543] do_sock_setsockopt+0x25a/0x3e0 [ 1583.665927][T28543] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1583.665956][T28543] ? __fget_files+0x2a/0x420 [ 1583.665985][T28543] __x64_sys_setsockopt+0x18b/0x220 [ 1583.666015][T28543] do_syscall_64+0xfa/0x3b0 [ 1583.666032][T28543] ? lockdep_hardirqs_on+0x9c/0x150 [ 1583.666060][T28543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.666078][T28543] ? clear_bhb_loop+0x60/0xb0 [ 1583.666102][T28543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.666120][T28543] RIP: 0033:0x7f1c21f8e929 [ 1583.666138][T28543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1583.666156][T28543] RSP: 002b:00007f1c22e94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1583.666176][T28543] RAX: ffffffffffffffda RBX: 00007f1c221b6080 RCX: 00007f1c21f8e929 [ 1583.666191][T28543] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 1583.666203][T28543] RBP: 00007f1c22e94090 R08: 0000000000000014 R09: 0000000000000000 [ 1583.666215][T28543] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1583.666228][T28543] R13: 0000000000000000 R14: 00007f1c221b6080 R15: 00007f1c222dfa28 [ 1583.666258][T28543] [ 1583.943940][ T5922] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1583.975241][T28466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.988890][T28466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.080046][T28466] team0: Port device team_slave_0 added [ 1584.093370][T28466] team0: Port device team_slave_1 added [ 1584.093987][T20354] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1584.123872][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 1584.131413][ T5922] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1584.141322][ T5922] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1584.203466][ T5922] usb 3-1: string descriptor 0 read error: -22 [ 1584.210075][ T5922] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1584.242907][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.276215][T20354] usb 6-1: Using ep0 maxpacket: 8 [ 1584.295772][ T5922] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1584.304335][T20354] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1584.312611][T20354] usb 6-1: config 179 has no interface number 0 [ 1584.329936][ T5922] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1584.340475][T28466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.340492][T28466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1584.340543][T28466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.394060][T20354] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1584.405772][T20354] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1584.418716][T20354] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1584.436347][T20354] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1584.450974][T20354] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1584.475267][T28466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.476574][ T5922] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1584.497567][T20354] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1584.502241][T28466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1584.515685][ T5922] usb 3-1: media controller created [ 1584.547435][T20354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.579136][T28466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1584.585599][T28546] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1584.705862][T24917] Bluetooth: hci0: command tx timeout [ 1584.813333][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1584.920308][ T5922] zl10353_read_register: readreg error (reg=127, ret==0) [ 1584.968300][T28466] hsr_slave_0: entered promiscuous mode [ 1584.991763][T28466] hsr_slave_1: entered promiscuous mode [ 1585.012790][T28466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1585.039583][T28466] Cannot create hsr debugfs directory [ 1585.151810][T20354] usb 6-1: USB disconnect, device number 44 [ 1585.151882][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1585.151932][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1585.197337][T14822] hsr_slave_0: left promiscuous mode [ 1585.228956][T14822] hsr_slave_1: left promiscuous mode [ 1585.234593][ T5922] usb 3-1: USB disconnect, device number 4 [ 1585.242148][T14822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.312185][T14822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1585.337680][T28570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6180'. [ 1585.461778][ T30] audit: type=1326 audit(1750539829.389:20320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28575 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc018e929 code=0x7ffc0000 [ 1585.527085][ T30] audit: type=1326 audit(1750539829.389:20321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28575 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f1dc018e929 code=0x7ffc0000 [ 1585.551063][ T30] audit: type=1326 audit(1750539829.389:20322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28575 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc018e929 code=0x7ffc0000 [ 1585.585779][ T30] audit: type=1326 audit(1750539829.389:20323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28575 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc018e929 code=0x7ffc0000 [ 1585.632054][ T30] audit: type=1326 audit(1750539829.389:20324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28575 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dc018d290 code=0x7ffc0000 [ 1585.671602][ T30] audit: type=1326 audit(1750539829.389:20325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28575 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc018e929 code=0x7ffc0000 [ 1585.776060][ T30] audit: type=1326 audit(1750539829.389:20326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28575 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc018e929 code=0x7ffc0000 [ 1585.862550][ T30] audit: type=1326 audit(1750539829.389:20327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28575 comm="syz.4.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dc018e929 code=0x7ffc0000 [ 1585.964411][T20360] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1586.123890][T20360] usb 5-1: device descriptor read/64, error -71 [ 1586.378536][T20354] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1586.379985][T20360] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1586.547274][T20354] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.563849][T20360] usb 5-1: device descriptor read/64, error -71 [ 1586.569302][T20354] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1586.581763][T20354] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1586.593180][T20354] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1586.603007][T20354] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1586.630816][T20354] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1586.640068][T20354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.653915][T20354] usb 6-1: Product: syz [ 1586.658118][T20354] usb 6-1: Manufacturer: syz [ 1586.662798][T20354] usb 6-1: SerialNumber: syz [ 1586.678204][T20360] usb usb5-port1: attempt power cycle [ 1586.678727][T20354] usb 6-1: config 0 descriptor?? [ 1586.698579][T20354] xbox_remote_probe: endpoint_in message size==0? [ 1586.787808][T24917] Bluetooth: hci0: command tx timeout [ 1586.974225][T28595] FAULT_INJECTION: forcing a failure. [ 1586.974225][T28595] name failslab, interval 1, probability 0, space 0, times 0 [ 1586.992515][T28595] CPU: 0 UID: 0 PID: 28595 Comm: syz.2.6188 Not tainted 6.16.0-rc2-syzkaller-00308-gf7301f856d35 #0 PREEMPT(full) [ 1586.992550][T28595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1586.992563][T28595] Call Trace: [ 1586.992572][T28595] [ 1586.992581][T28595] dump_stack_lvl+0x189/0x250 [ 1586.992616][T28595] ? __pfx____ratelimit+0x10/0x10 [ 1586.992646][T28595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1586.992677][T28595] ? __pfx__printk+0x10/0x10 [ 1586.992705][T28595] ? __pfx___might_resched+0x10/0x10 [ 1586.992733][T28595] ? fs_reclaim_acquire+0x7d/0x100 [ 1586.992762][T28595] should_fail_ex+0x414/0x560 [ 1586.992794][T28595] should_failslab+0xa8/0x100 [ 1586.992816][T28595] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1586.992848][T28595] ? vm_area_dup+0x2b/0x680 [ 1586.992874][T28595] vm_area_dup+0x2b/0x680 [ 1586.992900][T28595] __split_vma+0x1a9/0xa00 [ 1586.992938][T28595] ? __pfx___split_vma+0x10/0x10 [ 1586.992975][T28595] ? can_vma_merge_right+0x1b9/0x720 [ 1586.993011][T28595] vma_modify+0x12c3/0x1970 [ 1586.993040][T28595] ? vma_modify+0xa0/0x1970 [ 1586.993080][T28595] vma_modify_policy+0x1e8/0x230 [ 1586.993110][T28595] ? __pfx_vma_modify_policy+0x10/0x10 [ 1586.993162][T28595] mbind_range+0x2bb/0x800 [ 1586.993184][T28595] ? mas_find+0x9e7/0xc10 [ 1586.993218][T28595] __se_sys_mbind+0x730/0xc30 [ 1586.993247][T28595] ? __pfx_vfs_write+0x10/0x10 [ 1586.993281][T28595] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1586.993302][T28595] ? __pfx___se_sys_mbind+0x10/0x10 [ 1586.993352][T28595] ? rcu_is_watching+0x15/0xb0 [ 1586.993388][T28595] ? __x64_sys_mbind+0x21/0xf0 [ 1586.993421][T28595] do_syscall_64+0xfa/0x3b0 [ 1586.993438][T28595] ? lockdep_hardirqs_on+0x9c/0x150 [ 1586.993467][T28595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.993487][T28595] ? clear_bhb_loop+0x60/0xb0 [ 1586.993511][T28595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.993530][T28595] RIP: 0033:0x7f319118e929 [ 1586.993552][T28595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1586.993570][T28595] RSP: 002b:00007f318eff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1586.993590][T28595] RAX: ffffffffffffffda RBX: 00007f31913b5fa0 RCX: 00007f319118e929 [ 1586.993605][T28595] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 1586.993619][T28595] RBP: 00007f318eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1586.993631][T28595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1586.993644][T28595] R13: 0000000000000000 R14: 00007f31913b5fa0 R15: 00007f31914dfa28 [ 1586.993674][T28595] [ 1586.996854][T20354] usb 6-1: USB disconnect, device number 45 [ 1587.023759][T20360] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1587.259927][T28599] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1587.273335][T28599] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1587.294406][ T5922] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1587.295364][T20360] usb 5-1: device descriptor read/8, error -71 [ 1587.317636][T28599] vhci_hcd vhci_hcd.0: Device attached [ 1587.367954][T28602] vhci_hcd vhci_hcd.0: port 0 already used [ 1587.454122][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 1587.462582][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1587.573978][T20360] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1587.574193][ T5922] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1587.591017][T20354] usb 38-1: SetAddress Request (2) to port 0 [ 1587.623635][T20360] usb 5-1: device descriptor read/8, error -71 [ 1587.732564][T20354] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1587.744224][T20360] usb usb5-port1: unable to enumerate USB device [ 1587.839390][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.895588][ T5922] usb 2-1: Product: syz [ 1587.921226][ T5922] usb 2-1: Manufacturer: syz [ 1587.953962][ T5922] usb 2-1: SerialNumber: syz [ 1587.985893][ T5922] usb 2-1: config 0 descriptor?? [ 1588.324407][T28600] vhci_hcd: connection reset by peer [ 1588.399019][T26743] vhci_hcd: stop threads [ 1588.420460][T26743] vhci_hcd: release socket [ 1588.437538][T26743] vhci_hcd: disconnect device [ 1588.570033][T28627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.672096][T28627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.754355][T17970] usb 2-1: USB disconnect, device number 16 [ 1589.027517][T28635] delete_channel: no stack [ 1589.312682][T28466] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1589.438190][T28466] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1589.468076][T28466] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1589.531860][T28466] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1589.832180][T28466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1589.873866][T20359] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1589.941409][T28466] 8021q: adding VLAN 0 to HW filter on device team0 [ 1590.074444][T14822] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.081566][T14822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.100330][T20359] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.133195][T20359] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1590.164017][T26070] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1590.245720][T20359] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1590.260082][T20359] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1590.270452][T20359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.293441][T20359] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1590.351016][T26749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.358281][T26749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.415545][T20359] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1590.515515][T26070] usb 6-1: config 0 has no interfaces? [ 1590.627126][T28635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.660634][T28635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.772057][T26070] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1591.157793][T28466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1591.277346][T26070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.368019][T28466] veth0_vlan: entered promiscuous mode [ 1591.415699][T26070] usb 6-1: Product: syz [ 1591.423855][T26070] usb 6-1: Manufacturer: syz [ 1591.430296][T26070] usb 6-1: SerialNumber: syz [ 1591.459611][T26070] usb 6-1: config 0 descriptor?? [ 1591.620221][T28466] veth1_vlan: entered promiscuous mode [ 1591.799611][T28466] veth0_macvtap: entered promiscuous mode [ 1591.901489][T28466] veth1_macvtap: entered promiscuous mode [ 1592.074591][T28466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1592.137968][T28466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1592.304500][T28466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.343887][T28466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.374302][T28466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.493065][T28466] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.699477][T26070] usb 5-1: USB disconnect, device number 103 [ 1592.900993][T20354] usb 38-1: device descriptor read/8, error -110 [ 1592.928181][T28703] netlink: 'syz.2.6201': attribute type 30 has an invalid length. [ 1593.094418][T28704] FAULT_INJECTION: forcing a failure. [ 1593.094418][T28704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1593.179601][T28704] CPU: 1 UID: 0 PID: 28704 Comm: syz.4.6200 Not tainted 6.16.0-rc2-syzkaller-00308-gf7301f856d35 #0 PREEMPT(full) [ 1593.179630][T28704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1593.179643][T28704] Call Trace: [ 1593.179651][T28704] [ 1593.179661][T28704] dump_stack_lvl+0x189/0x250 [ 1593.179695][T28704] ? __pfx____ratelimit+0x10/0x10 [ 1593.179725][T28704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1593.179754][T28704] ? __pfx__printk+0x10/0x10 [ 1593.179824][T28704] should_fail_ex+0x414/0x560 [ 1593.179855][T28704] _copy_to_user+0x31/0xb0 [ 1593.179878][T28704] simple_read_from_buffer+0xe1/0x170 [ 1593.179904][T28704] proc_fail_nth_read+0x1df/0x250 [ 1593.179930][T28704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1593.179957][T28704] ? rw_verify_area+0x258/0x650 [ 1593.179984][T28704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1593.180009][T28704] vfs_read+0x200/0x980 [ 1593.180043][T28704] ? __pfx___mutex_lock+0x10/0x10 [ 1593.180063][T28704] ? __pfx_vfs_read+0x10/0x10 [ 1593.180094][T28704] ? __fget_files+0x2a/0x420 [ 1593.180120][T28704] ? __fget_files+0x3a0/0x420 [ 1593.180140][T28704] ? __fget_files+0x2a/0x420 [ 1593.180170][T28704] ksys_read+0x145/0x250 [ 1593.180187][T28704] ? __fget_files+0x3a0/0x420 [ 1593.180210][T28704] ? __pfx_ksys_read+0x10/0x10 [ 1593.180245][T28704] ? do_syscall_64+0xbe/0x3b0 [ 1593.180268][T28704] do_syscall_64+0xfa/0x3b0 [ 1593.180285][T28704] ? lockdep_hardirqs_on+0x9c/0x150 [ 1593.180314][T28704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.180333][T28704] ? clear_bhb_loop+0x60/0xb0 [ 1593.180357][T28704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.180376][T28704] RIP: 0033:0x7f1dc018d33c [ 1593.180394][T28704] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1593.180411][T28704] RSP: 002b:00007f1dbdfd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1593.180431][T28704] RAX: ffffffffffffffda RBX: 00007f1dc03b6080 RCX: 00007f1dc018d33c [ 1593.180445][T28704] RDX: 000000000000000f RSI: 00007f1dbdfd50a0 RDI: 0000000000000004 [ 1593.180458][T28704] RBP: 00007f1dbdfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1593.180470][T28704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1593.180482][T28704] R13: 0000000000000001 R14: 00007f1dc03b6080 R15: 00007f1dc04dfa28 [ 1593.180513][T28704] [ 1593.442714][T14822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1593.459603][T14822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.498174][T26745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1593.514692][T26745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.884010][T20354] usb usb38-port1: attempt power cycle [ 1594.196942][T28737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6208'. [ 1594.284461][T20360] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1594.313983][T20353] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1594.356320][T26070] usb 6-1: USB disconnect, device number 46 [ 1594.445087][T20354] usb usb38-port1: unable to enumerate USB device [ 1594.470297][T20360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1594.502897][T20360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1594.514108][T20353] usb 5-1: config index 0 descriptor too short (expected 65187, got 12) [ 1594.526194][T20360] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1594.527640][T20353] usb 5-1: config 138 has too many interfaces: 76, using maximum allowed: 32 [ 1594.539124][T20360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.566925][T20353] usb 5-1: config 138 has an invalid descriptor of length 123, skipping remainder of the config [ 1594.581928][T20360] usb 4-1: config 0 descriptor?? [ 1594.595491][T20353] usb 5-1: config 138 has 0 interfaces, different from the descriptor's value: 76 [ 1594.631939][T20353] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 1594.652019][T20353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.669777][T20353] usb 5-1: Product: syz [ 1594.676986][T20353] usb 5-1: Manufacturer: syz [ 1594.690242][T20353] usb 5-1: SerialNumber: syz [ 1594.732239][T16256] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1594.748114][T16256] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1594.756893][T16256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1594.770206][T16256] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1594.779466][T16256] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1594.847374][T28737] vlan3: entered promiscuous mode [ 1594.852478][T28737] hsr0: entered promiscuous mode [ 1594.903950][T26070] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1594.955763][T20353] usb 5-1: USB disconnect, device number 104 [ 1595.030521][T20360] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 1595.056555][T26070] usb 6-1: Using ep0 maxpacket: 32 [ 1595.072562][T20360] cp2112 0003:10C4:EA90.003F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1595.104868][T26070] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1595.113189][T26070] usb 6-1: config 0 has no interface number 0 [ 1595.121280][T26070] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1595.133628][T26070] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1595.153384][T26070] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1595.174369][T26070] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1595.190458][T26070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.211567][T20360] cp2112 0003:10C4:EA90.003F: Part Number: 0x82 Device Version: 0xFE [ 1595.239584][T26070] usb 6-1: Product: syz [ 1595.246863][T26070] usb 6-1: Manufacturer: syz [ 1595.253408][T26070] usb 6-1: SerialNumber: syz [ 1595.270509][T26735] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.274314][T26070] usb 6-1: config 0 descriptor?? [ 1595.281450][T17970] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1595.380890][T26735] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.445146][T17970] usb 3-1: Using ep0 maxpacket: 8 [ 1595.484640][T17970] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1595.502456][T17970] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1595.518650][T26070] appletouch 6-1:0.85: Failed to read mode from device. [ 1595.528149][T26735] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.534061][T26070] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 1595.553375][T17970] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1595.574777][T17970] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1595.594521][T26070] usb 6-1: USB disconnect, device number 47 [ 1595.599453][T28745] chnl_net:caif_netlink_parms(): no params data found [ 1595.607919][T17970] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1595.623534][T17970] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1595.646900][T17970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.710202][T26735] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.906700][T28745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.919552][T28745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.927407][T28745] bridge_slave_0: entered allmulticast mode [ 1595.938877][T28757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6214'. [ 1595.942394][T28745] bridge_slave_0: entered promiscuous mode [ 1595.948112][T28757] netlink: 208 bytes leftover after parsing attributes in process `syz.4.6214'. [ 1595.966075][T28745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.973619][T28745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.014223][T28745] bridge_slave_1: entered allmulticast mode [ 1596.022543][T28745] bridge_slave_1: entered promiscuous mode [ 1596.291489][T20360] cp2112 0003:10C4:EA90.003F: error setting SMBus config [ 1596.335652][T20360] cp2112 0003:10C4:EA90.003F: probe with driver cp2112 failed with error -71 [ 1596.368774][T20360] usb 4-1: USB disconnect, device number 118 [ 1596.428391][T28745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1596.512710][T28745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1596.720269][T28745] team0: Port device team_slave_0 added [ 1596.731702][T28745] team0: Port device team_slave_1 added [ 1596.865536][T16256] Bluetooth: hci3: command tx timeout [ 1596.956370][T20360] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1596.982945][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1597.133816][T20360] usb 6-1: device descriptor read/64, error -32 [ 1597.393880][T20360] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1597.401885][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1597.554960][T20360] usb 6-1: device descriptor read/64, error -32 [ 1597.674580][T20360] usb usb6-port1: attempt power cycle [ 1597.869920][T26735] bond0 (unregistering): Released all slaves [ 1597.892589][T26735] bond1 (unregistering): Released all slaves [ 1597.913484][T26735] bond2 (unregistering): Released all slaves [ 1597.932703][T26735] bond3 (unregistering): Released all slaves [ 1597.953243][T26735] bond4 (unregistering): Released all slaves [ 1598.123602][T28745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1598.131235][T28745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1598.169804][T20360] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1598.186147][T17970] usb 3-1: usb_control_msg returned -71 [ 1598.191768][T17970] usbtmc 3-1:16.0: can't read capabilities [ 1598.226502][T28745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1598.266692][T17970] usb 3-1: USB disconnect, device number 5 [ 1598.278584][T26735] tipc: Disabling bearer [ 1598.285701][T26735] tipc: Left network mode [ 1598.302203][T28745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1598.321646][T28745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1598.357116][T28745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1598.399207][T20360] usb 6-1: config 0 has no interfaces? [ 1598.480142][T28745] hsr_slave_0: entered promiscuous mode [ 1598.487346][T28745] hsr_slave_1: entered promiscuous mode [ 1598.494564][T28745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1598.504650][T28745] Cannot create hsr debugfs directory [ 1598.673410][T20360] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1598.685397][T20360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.730610][T28789] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1598.736961][T20360] usb 6-1: Product: syz [ 1598.742280][T28789] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1598.754463][T20360] usb 6-1: Manufacturer: syz [ 1598.759246][T20360] usb 6-1: SerialNumber: syz [ 1598.774761][T20360] usb 6-1: config 0 descriptor?? [ 1598.816946][T28789] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1598.873291][T28789] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1598.885844][T28789] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1598.906964][T28789] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1598.975104][T26735] hsr_slave_0: left promiscuous mode [ 1598.991827][T26735] hsr_slave_1: left promiscuous mode [ 1599.072125][T26735] vlan1: left promiscuous mode [ 1599.084464][T26735] veth1_macvtap: left promiscuous mode [ 1599.104672][T26735] veth0_macvtap: left promiscuous mode [ 1599.110315][T26735] veth1_vlan: left promiscuous mode [ 1599.147866][T26735] veth0_vlan: left promiscuous mode [ 1599.194093][T17970] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1599.359361][T17970] usb 4-1: Using ep0 maxpacket: 8 [ 1599.371302][T17970] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1599.379636][T20353] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1599.404026][T17970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.423813][T17970] usb 4-1: config 0 has no interface number 0 [ 1599.442100][T26735] pimreg (unregistering): left allmulticast mode [ 1599.450607][T17970] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1599.497872][T17970] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1599.524748][T17970] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1599.563464][T17970] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1599.579576][T20353] usb 5-1: config 0 has an invalid interface number: 194 but max is 0 [ 1599.799778][T20353] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.814232][T17970] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1599.859932][T20353] usb 5-1: config 0 has no interface number 0 [ 1599.866318][T17970] usb 4-1: Manufacturer: syz [ 1599.875693][T20353] usb 5-1: config 0 interface 194 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1599.890123][T17970] usb 4-1: config 0 descriptor?? [ 1599.973167][T20353] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.d2 [ 1599.989822][T20353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.004255][T20353] usb 5-1: Product: syz [ 1600.008731][T20353] usb 5-1: Manufacturer: syz [ 1600.013407][T20353] usb 5-1: SerialNumber: syz [ 1600.103838][T20351] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1600.127232][T20353] usb 5-1: config 0 descriptor?? [ 1600.154573][T16256] Bluetooth: hci0: command 0x0c1a tx timeout [ 1600.164680][T17970] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input102 [ 1600.263927][T20351] usb 3-1: device descriptor read/64, error -71 [ 1600.357024][T28792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6225'. [ 1600.368273][T28792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6225'. [ 1600.396939][T28816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6232'. [ 1600.514314][T20351] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1600.653926][T20351] usb 3-1: device descriptor read/64, error -71 [ 1600.765498][T20351] usb usb3-port1: attempt power cycle [ 1600.946693][T16256] Bluetooth: hci3: command 0x040f tx timeout [ 1601.133916][T20351] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1601.168536][T20351] usb 3-1: device descriptor read/8, error -71 [ 1601.464475][T20351] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1601.506062][T20360] usb 6-1: USB disconnect, device number 50 [ 1601.520968][T20351] usb 3-1: device descriptor read/8, error -71 [ 1601.644121][T20351] usb usb3-port1: unable to enumerate USB device [ 1601.752980][T20351] usb 5-1: USB disconnect, device number 105 [ 1601.762253][T20351] f81534a_ctrl 5-1:0.194: failed to set register 0x116: -19 [ 1601.781871][T20351] f81534a_ctrl 5-1:0.194: failed to enable ports: -19 [ 1601.918698][T20360] usb 4-1: USB disconnect, device number 119 [ 1601.918717][ C1] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1602.234313][T16256] Bluetooth: hci0: command 0x0c1a tx timeout [ 1602.737987][T26735] IPVS: stop unused estimator thread 0... [ 1603.025577][T16256] Bluetooth: hci3: command 0x040f tx timeout [ 1604.173829][T20360] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1604.315004][T16256] Bluetooth: hci0: command 0x0c1a tx timeout [ 1604.372880][T20360] usb 3-1: Using ep0 maxpacket: 8 [ 1604.399008][T20360] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1604.418491][T20360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.429428][T20360] usb 3-1: Product: syz [ 1604.434347][T20360] usb 3-1: Manufacturer: syz [ 1604.439112][T20360] usb 3-1: SerialNumber: syz [ 1604.486915][T20360] usb 3-1: config 0 descriptor?? [ 1604.522263][T20360] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1604.657049][T28745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1604.669394][T28745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1604.681644][T28745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1604.696787][T28745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1604.744143][T17970] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1604.894725][T28745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.904104][T17970] usb 6-1: Using ep0 maxpacket: 16 [ 1604.918137][T17970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1604.944216][T20360] gspca_sq930x: ucbus_write failed -71 [ 1604.945527][T17970] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1604.961110][T17970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.963672][T28745] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.975771][T17970] usb 6-1: Product: syz [ 1604.981494][T17970] usb 6-1: Manufacturer: syz [ 1604.987218][T17970] usb 6-1: SerialNumber: syz [ 1605.001556][T17970] usb 6-1: config 0 descriptor?? [ 1605.011037][T17970] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1605.011561][T26745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.027504][T26745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1605.040885][T17970] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1605.067129][T26745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.074349][T26745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1605.116704][T16256] Bluetooth: hci3: command 0x040f tx timeout [ 1605.185726][T20360] gspca_sq930x: Sensor ov9630 not yet treated [ 1605.191977][T20360] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 1605.206481][T28745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1605.217585][T20360] usb 3-1: USB disconnect, device number 10 [ 1605.284988][T17970] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1605.399330][T17970] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1605.408292][T28745] veth0_vlan: entered promiscuous mode [ 1605.425348][T17970] em28xx 6-1:0.0: board has no eeprom [ 1605.468684][T28745] veth1_vlan: entered promiscuous mode [ 1605.557793][T17970] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1605.626183][T17970] em28xx 6-1:0.0: dvb set to bulk mode. [ 1605.631830][ T5922] em28xx 6-1:0.0: Binding DVB extension [ 1605.643548][T28745] veth0_macvtap: entered promiscuous mode [ 1605.688089][T17970] usb 6-1: USB disconnect, device number 51 [ 1605.731360][T28745] veth1_macvtap: entered promiscuous mode [ 1605.739693][T17970] em28xx 6-1:0.0: Disconnecting em28xx [ 1605.819757][ T5922] em28xx 6-1:0.0: Registering input extension [ 1605.828699][T28745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1605.879091][T17970] em28xx 6-1:0.0: Closing input extension [ 1605.982979][T28745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1606.012361][T28940] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1606.057724][T17970] em28xx 6-1:0.0: Freeing device [ 1606.303616][T28745] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.374221][T28745] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.406514][T28745] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.464074][T17970] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1606.472376][T28745] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.620063][T17970] usb 6-1: device descriptor read/64, error -71 [ 1606.894115][T17970] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1606.927900][T26749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.949430][T26749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.014648][ T5922] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1607.034548][T17970] usb 6-1: device descriptor read/64, error -71 [ 1607.047572][T26745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.079614][T26745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.154849][T17970] usb usb6-port1: attempt power cycle [ 1607.174969][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 1607.184023][T16256] Bluetooth: hci3: command 0x040f tx timeout [ 1607.197496][ T5922] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1607.230908][ T5922] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1607.267812][ T5922] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1607.297401][ T5922] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1607.310853][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1607.327015][ T5922] usb 3-1: Product: syz [ 1607.331425][ T5922] usb 3-1: Manufacturer: syz [ 1607.338783][ T5922] usb 3-1: SerialNumber: syz [ 1607.353059][ T5922] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input104 [ 1607.354697][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.376881][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.485416][T28975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1607.523834][T17970] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1607.567457][T17970] usb 6-1: device descriptor read/8, error -71 [ 1607.585475][ T5922] usb 3-1: USB disconnect, device number 11 [ 1607.611500][ T5922] appletouch 3-1:1.0: input: appletouch disconnected [ 1607.714169][T20360] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1607.754048][T20357] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1607.843983][T17970] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 1607.875086][T20360] usb 2-1: Using ep0 maxpacket: 8 [ 1607.888241][T17970] usb 6-1: device descriptor read/8, error -71 [ 1607.901935][T20360] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1607.931366][T20360] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1607.964523][T20360] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1607.990213][T20357] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.014660][T17970] usb usb6-port1: unable to enumerate USB device [ 1608.016190][T20357] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1608.034118][T20360] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1608.064090][T20360] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1608.088140][T20357] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1608.103850][T20357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1608.112032][T20360] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1608.133762][T20357] usb 4-1: SerialNumber: syz [ 1608.138483][T20360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.390198][T20357] usb 4-1: 0:2 : does not exist [ 1608.494244][T20357] usb 4-1: USB disconnect, device number 120 [ 1608.595421][T24917] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1608.610176][T24917] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1608.625559][T24917] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1608.637711][ T6193] udevd[6193]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1608.687226][T18260] bond0: (slave syz_tun): Releasing backup interface [ 1608.697193][T24917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1608.705265][T24917] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1609.273887][T24917] Bluetooth: hci3: command 0x040f tx timeout [ 1609.490945][T28996] chnl_net:caif_netlink_parms(): no params data found [ 1609.938367][T28996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.949639][T28996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.957037][T28996] bridge_slave_0: entered allmulticast mode [ 1609.965155][T28996] bridge_slave_0: entered promiscuous mode [ 1609.973367][T28996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.985902][T28996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.993217][T28996] bridge_slave_1: entered allmulticast mode [ 1610.005103][T28996] bridge_slave_1: entered promiscuous mode [ 1610.023825][T17970] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1610.068911][T28996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1610.085880][T28996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1610.170594][T28996] team0: Port device team_slave_0 added [ 1610.196145][T28996] team0: Port device team_slave_1 added [ 1610.248144][T28996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1610.256340][T28996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.284686][T17970] usb 4-1: Using ep0 maxpacket: 16 [ 1610.294460][T28996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.306726][T17970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1610.318152][T17970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1610.329940][T28996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.337126][T17970] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1610.346575][T28996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.372652][T17970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.383277][T17970] usb 4-1: config 0 descriptor?? [ 1610.388580][T28996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1610.501885][T28996] hsr_slave_0: entered promiscuous mode [ 1610.509122][T28996] hsr_slave_1: entered promiscuous mode [ 1610.520032][T28996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1610.531862][T28996] Cannot create hsr debugfs directory [ 1610.784191][T24917] Bluetooth: hci2: command tx timeout [ 1610.842369][T28996] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1610.865099][T28996] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.899485][T17970] elecom 0003:056E:00FE.0040: hidraw0: USB HID v0.02 Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0 [ 1610.955290][T20360] usb 2-1: usb_control_msg returned -71 [ 1610.960957][T20360] usbtmc 2-1:16.0: can't read capabilities [ 1611.088871][T17970] usb 4-1: USB disconnect, device number 121 [ 1611.353598][T20360] usb 2-1: USB disconnect, device number 17 [ 1611.481936][T29040] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1611.552586][T28996] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1611.591913][T28996] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.614228][T29044] hub 9-0:1.0: USB hub found [ 1611.627230][T29044] hub 9-0:1.0: 1 port detected [ 1611.809734][T28996] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1611.843562][T28996] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.027496][T28996] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1612.068475][T28996] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.301039][T28996] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1612.314569][T28996] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1612.330724][T28996] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1612.346226][T28996] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1612.602517][T28996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.688396][T28996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1612.751763][T14822] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.759013][T14822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.811357][T29070] xt_TCPMSS: Only works on TCP SYN packets [ 1612.877822][T29071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6281'. [ 1612.910242][T24917] Bluetooth: hci2: command tx timeout [ 1612.935267][ T5922] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1613.113809][ T5922] usb 4-1: Using ep0 maxpacket: 8 [ 1613.129532][ T5922] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1613.156948][ T5922] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1613.179550][ T5922] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1613.213841][T20357] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1613.219554][ T5922] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1613.243303][ T5922] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1613.363864][T20357] usb 6-1: Using ep0 maxpacket: 8 [ 1613.381228][T20357] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.392375][T20357] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1613.402378][ T5922] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1613.402439][T20357] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 80 [ 1613.441897][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.464257][T20357] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1613.483784][T20357] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.496194][T26745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.503410][T26745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1613.513838][T20357] usb 6-1: Product: 烦紷㘱㚬඙꾎坔䕞儶Ⱞ賃滢禽㾳븠竗鵂⦯䪐Ɑ镺苫橹㿎悼労㭂䇻⮙ߎ囒압㶅䔶暜脐늹◚╕瘰ⴡ檘⍓ [ 1613.603052][T20357] usb 6-1: Manufacturer: й [ 1613.629570][T20357] usb 6-1: SerialNumber: 龧騼 [ 1613.664346][T29078] fuse: Bad value for 'rootmode' [ 1613.890963][T28996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1613.898193][T29074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.948122][T29083] FAULT_INJECTION: forcing a failure. [ 1613.948122][T29083] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.987423][T29074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.005315][T29082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.068569][T29083] CPU: 1 UID: 0 PID: 29083 Comm: syz.2.6284 Not tainted 6.16.0-rc2-syzkaller-00308-gf7301f856d35 #0 PREEMPT(full) [ 1614.068597][T29083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1614.068610][T29083] Call Trace: [ 1614.068618][T29083] [ 1614.068627][T29083] dump_stack_lvl+0x189/0x250 [ 1614.068662][T29083] ? __pfx____ratelimit+0x10/0x10 [ 1614.068695][T29083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1614.068725][T29083] ? __pfx__printk+0x10/0x10 [ 1614.068748][T29083] ? __pfx___might_resched+0x10/0x10 [ 1614.068778][T29083] ? fs_reclaim_acquire+0x7d/0x100 [ 1614.068805][T29083] should_fail_ex+0x414/0x560 [ 1614.068834][T29083] should_failslab+0xa8/0x100 [ 1614.068857][T29083] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1614.068878][T29083] ? __kernfs_new_node+0x9c/0x7e0 [ 1614.068908][T29083] kstrdup+0x42/0x100 [ 1614.068934][T29083] __kernfs_new_node+0x9c/0x7e0 [ 1614.068956][T29083] ? __lock_acquire+0xab9/0xd20 [ 1614.068991][T29083] ? __pfx___kernfs_new_node+0x10/0x10 [ 1614.069015][T29083] ? kernfs_root+0x1c/0x230 [ 1614.069044][T29083] ? kernfs_root+0x1c/0x230 [ 1614.069066][T29083] ? kernfs_root+0x1c/0x230 [ 1614.069093][T29083] kernfs_new_node+0x102/0x210 [ 1614.069123][T29083] kernfs_create_link+0xa7/0x200 [ 1614.069145][T29083] sysfs_do_create_link_sd+0x83/0x110 [ 1614.069170][T29083] driver_sysfs_add+0x89/0x210 [ 1614.069196][T29083] really_probe+0x151/0x9a0 [ 1614.069227][T29083] __driver_probe_device+0x18c/0x2f0 [ 1614.069253][T29083] driver_probe_device+0x4f/0x430 [ 1614.069280][T29083] __driver_attach+0x452/0x700 [ 1614.069306][T29083] bus_for_each_dev+0x230/0x2b0 [ 1614.069341][T29083] ? __pfx___driver_attach+0x10/0x10 [ 1614.069363][T29083] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1614.069394][T29083] ? do_raw_spin_unlock+0x122/0x240 [ 1614.069421][T29083] bus_add_driver+0x345/0x640 [ 1614.069458][T29083] driver_register+0x23a/0x320 [ 1614.069487][T29083] usb_gadget_register_driver_owner+0xf9/0x270 [ 1614.069516][T29083] raw_ioctl+0x149a/0x3c90 [ 1614.069540][T29083] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1614.069565][T29083] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1614.069588][T29083] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1614.069609][T29083] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1614.069633][T29083] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1614.069657][T29083] ? __pfx_raw_ioctl+0x10/0x10 [ 1614.069718][T29083] ? exc_page_fault+0x76/0xf0 [ 1614.069753][T29083] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1614.069781][T29083] ? __pfx_raw_ioctl+0x10/0x10 [ 1614.069800][T29083] __se_sys_ioctl+0xfc/0x170 [ 1614.069832][T29083] do_syscall_64+0xfa/0x3b0 [ 1614.069849][T29083] ? lockdep_hardirqs_on+0x9c/0x150 [ 1614.069877][T29083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.069896][T29083] ? clear_bhb_loop+0x60/0xb0 [ 1614.069920][T29083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.069940][T29083] RIP: 0033:0x7f319118e52b [ 1614.069958][T29083] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1614.069976][T29083] RSP: 002b:00007f318eff3f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1614.069996][T29083] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f319118e52b [ 1614.070010][T29083] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 1614.070022][T29083] RBP: 00007f318eff4fe0 R08: 0000000000000000 R09: 00322e6364755f79 [ 1614.070036][T29083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1614.070047][T29083] R13: 00007f318eff3fb0 R14: 0000200000000080 R15: 00007f31914e0320 [ 1614.070078][T29083] [ 1614.421728][T29082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.429729][T29083] raw-gadget.4 gadget.2: really_probe: driver_sysfs_add failed [ 1614.440178][T29083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.451940][T29083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.485993][T28996] veth0_vlan: entered promiscuous mode [ 1614.499021][T28996] veth1_vlan: entered promiscuous mode [ 1614.525109][T28996] veth0_macvtap: entered promiscuous mode [ 1614.535154][T28996] veth1_macvtap: entered promiscuous mode [ 1614.580755][T20357] cdc_ncm 6-1:1.0: bind() failure [ 1614.597027][T28996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1614.615027][T28996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1614.625615][T28996] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.634382][T28996] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.643075][T28996] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.651859][T28996] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.702314][T20357] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1614.789356][T26749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.798341][T14822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.833779][T20357] cdc_ncm 6-1:1.1: bind() failure [ 1614.838911][T26749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.850648][T14822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.889358][T20357] usb 6-1: USB disconnect, device number 56 [ 1614.945211][T24917] Bluetooth: hci2: command tx timeout [ 1615.041752][T29088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6285'. [ 1615.326019][T17970] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1615.517652][T17970] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1615.550801][T17970] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1615.597284][T17970] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1615.641292][T17970] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1615.713954][T17970] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1615.831007][ T5922] usb 4-1: usb_control_msg returned -71 [ 1615.859177][ T5922] usbtmc 4-1:16.0: can't read capabilities [ 1615.868423][T17970] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1615.905694][T17970] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1615.917232][ T5922] usb 4-1: USB disconnect, device number 122 [ 1615.930396][T17970] usb 5-1: Product: syz [ 1615.957626][T17970] usb 5-1: Manufacturer: syz [ 1615.998896][T17970] cdc_wdm 5-1:1.0: skipping garbage [ 1616.013328][T17970] cdc_wdm 5-1:1.0: skipping garbage [ 1616.030721][T17970] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1616.038976][T17970] cdc_wdm 5-1:1.0: Unknown control protocol [ 1616.113004][T16256] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1616.125481][T20353] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1616.144615][T16256] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1616.159092][T16256] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1616.173075][T16256] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1616.184061][T16256] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1616.304457][T20353] usb 2-1: Using ep0 maxpacket: 8 [ 1616.379729][T20353] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1616.430957][T20353] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1616.492567][T20353] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1616.547795][T20353] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1616.585010][T20353] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1616.688072][T20353] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1616.739071][T20353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.034930][T16256] Bluetooth: hci2: command tx timeout [ 1617.126916][T29109] chnl_net:caif_netlink_parms(): no params data found [ 1617.559586][T29109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.568375][T29109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.576357][T29109] bridge_slave_0: entered allmulticast mode [ 1617.595857][T29109] bridge_slave_0: entered promiscuous mode [ 1617.624600][T29109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.643550][T29109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.661349][T29109] bridge_slave_1: entered allmulticast mode [ 1617.682362][T29109] bridge_slave_1: entered promiscuous mode [ 1617.823327][T29109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1617.878275][T29109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.019504][T20357] usb 5-1: USB disconnect, device number 106 [ 1618.070712][T29109] team0: Port device team_slave_0 added [ 1618.117148][T29109] team0: Port device team_slave_1 added [ 1618.232451][T24917] Bluetooth: hci5: command tx timeout [ 1618.319886][T29109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1618.327681][T29109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1618.355353][T29109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1618.357581][T29109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1618.357596][T29109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1618.357641][T29109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1618.602380][T29109] hsr_slave_0: entered promiscuous mode [ 1618.643470][T29109] hsr_slave_1: entered promiscuous mode [ 1618.670328][T29109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1618.700935][T29109] Cannot create hsr debugfs directory [ 1619.011727][T20353] usb 2-1: usb_control_msg returned -71 [ 1619.086434][T20353] usbtmc 2-1:16.0: can't read capabilities [ 1619.175213][T20353] usb 2-1: USB disconnect, device number 18 [ 1619.213788][T20360] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1619.353948][T20360] usb 5-1: device descriptor read/64, error -71 [ 1619.401384][T29109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.642963][T29109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.653886][T20360] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1619.815346][T20360] usb 5-1: device descriptor read/64, error -71 [ 1619.852113][T29109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.894004][ T5963] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1619.941280][T20360] usb usb5-port1: attempt power cycle [ 1620.003753][T29109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.053924][ T5963] usb 2-1: Using ep0 maxpacket: 16 [ 1620.203857][ T5922] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1620.242606][T29140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.255647][T29140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.314339][T16256] Bluetooth: hci5: command tx timeout [ 1620.354189][T20360] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1620.384718][T20360] usb 5-1: device descriptor read/8, error -71 [ 1620.418569][T29109] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1620.445924][T29109] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1620.454251][ T5922] usb 6-1: Using ep0 maxpacket: 8 [ 1620.457349][T29109] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1620.461446][ T5922] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1620.479694][T29109] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1620.487946][ T5922] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1620.506458][ T5922] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1620.519241][ T5922] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1620.538435][ T5922] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1620.561296][ T5922] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1620.571577][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.654015][T20360] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1620.694718][T20360] usb 5-1: device descriptor read/8, error -71 [ 1620.824920][T20360] usb usb5-port1: unable to enumerate USB device [ 1620.944554][T29109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1621.058728][T29109] 8021q: adding VLAN 0 to HW filter on device team0 [ 1621.080195][T26743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.087367][T26743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1621.142540][T26743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.149716][T26743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1621.415819][T29109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1621.613637][T29109] veth0_vlan: entered promiscuous mode [ 1621.670379][T29109] veth1_vlan: entered promiscuous mode [ 1621.852743][T29109] veth0_macvtap: entered promiscuous mode [ 1621.896038][T29109] veth1_macvtap: entered promiscuous mode [ 1622.075383][T29109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1622.161531][T29109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1622.209622][T29109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.246198][T29109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.270971][T29109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.303158][T29109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.385210][T16256] Bluetooth: hci5: command tx timeout [ 1622.607968][T26749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1622.641697][T26749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1622.704437][T20353] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 1622.752116][T14822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1622.773462][T14822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1622.853895][T20353] usb 4-1: device descriptor read/64, error -71 [ 1623.042961][ T5922] usb 6-1: usb_control_msg returned -71 [ 1623.100010][ T5922] usbtmc 6-1:16.0: can't read capabilities [ 1623.111033][T20353] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1623.204693][ T5922] usb 6-1: USB disconnect, device number 57 [ 1623.250755][T29164] loop6: detected capacity change from 0 to 8 [ 1623.294324][T20353] usb 4-1: device descriptor read/64, error -71 [ 1623.308281][T29164] Dev loop6: unable to read RDB block 8 [ 1623.313241][ T5963] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1623.337101][T29164] loop6: unable to read partition table [ 1623.362859][T29164] loop6: partition table beyond EOD, truncated [ 1623.373041][ T5963] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1623.389696][T29164] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1623.444263][T20353] usb usb4-port1: attempt power cycle [ 1623.454420][ T5963] usb 2-1: can't read configurations, error -71 [ 1623.843823][T20353] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1623.894863][T20353] usb 4-1: device descriptor read/8, error -71 [ 1624.133815][T20353] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 1624.185331][T29182] fuse: Unknown parameter ' ' [ 1624.214767][T20353] usb 4-1: device descriptor read/8, error -71 [ 1624.454094][T20353] usb usb4-port1: unable to enumerate USB device [ 1624.474107][T16256] Bluetooth: hci5: command tx timeout [ 1624.973847][T20351] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1625.346432][T20351] usb 3-1: Using ep0 maxpacket: 32 [ 1625.365516][T20351] usb 3-1: too many endpoints for config 64 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 1625.443840][T20351] usb 3-1: config 64 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.504197][T20351] usb 3-1: config 64 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.523620][T20351] usb 3-1: config 64 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1625.614302][T29213] netlink: 'syz.3.6316': attribute type 7 has an invalid length. [ 1625.666364][T20351] usb 3-1: config 64 interface 0 has no altsetting 0 [ 1625.723933][T20351] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1625.763796][T20351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.101159][T29226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6320'. [ 1626.253280][T20351] usbhid 3-1:64.0: can't add hid device: -71 [ 1626.273077][T29220] netlink: 'syz.1.6318': attribute type 10 has an invalid length. [ 1626.296763][T20351] usbhid 3-1:64.0: probe with driver usbhid failed with error -71 [ 1626.303163][T29220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6318'. [ 1626.389197][T20351] usb 3-1: USB disconnect, device number 12 [ 1626.614071][T29235] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1626.623029][T29235] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1626.632220][T29235] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1626.641335][T29235] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1626.712970][T29238] fuse: Unknown parameter '000000000000000000030x00000000000000030000000000000000007200000000000000000000' [ 1627.723827][T20351] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1627.887173][T26070] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1627.899407][T20351] usb 3-1: Using ep0 maxpacket: 16 [ 1627.921212][T20351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1627.965605][T20351] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1627.996674][T20351] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1628.044444][T20351] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1628.064064][T26070] usb 5-1: Using ep0 maxpacket: 8 [ 1628.066899][T20351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.077516][T20351] usb 3-1: Product: syz [ 1628.079848][T26070] usb 5-1: config 98 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1628.095779][T20351] usb 3-1: Manufacturer: syz [ 1628.135852][T20351] usb 3-1: SerialNumber: syz [ 1628.157715][T26070] usb 5-1: config 98 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1628.183268][T20351] usb 3-1: config 0 descriptor?? [ 1628.196593][T29288] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1628.258779][T26070] usb 5-1: config 98 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1628.282351][T20351] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 1628.288633][T20351] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 1628.295402][T20351] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 1628.301401][T20351] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 1628.311455][T20351] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 1628.385783][T26070] usb 5-1: config 98 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1628.434730][T26070] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 1628.453920][T26070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.471665][T26070] usb 5-1: Product: syz [ 1628.477867][T29288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1628.507097][T29288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1628.527349][T26070] usb 5-1: Manufacturer: syz [ 1628.556364][T26070] usb 5-1: SerialNumber: syz [ 1628.575864][T20354] usb 3-1: USB disconnect, device number 13 [ 1628.583783][T20360] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1628.616994][T26070] kvaser_usb 5-1:98.0: error -ENODEV: Cannot get usb endpoint(s) [ 1628.626817][T20354] mcba_usb 3-1:0.0 can0: device disconnected [ 1628.799156][T20360] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1628.827721][T20360] usb 2-1: config 0 has no interface number 0 [ 1628.854079][ T5922] usb 5-1: USB disconnect, device number 111 [ 1628.866088][T20360] usb 2-1: config 0 interface 251 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1628.898507][T20360] usb 2-1: config 0 interface 251 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.921066][T20360] usb 2-1: config 0 interface 251 has no altsetting 0 [ 1628.954809][T20360] usb 2-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 1628.970741][T20360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.988858][T20360] usb 2-1: config 0 descriptor?? [ 1629.258593][T29324] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6340'. [ 1629.417740][T20360] uclogic 0003:28BD:1903.0041: interface is invalid, ignoring [ 1629.513843][ T5922] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1629.603413][T26070] usb 2-1: USB disconnect, device number 21 [ 1629.726785][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 1630.278506][ T5922] usb 6-1: config 1 interface 0 altsetting 160 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1630.290968][ T5922] usb 6-1: config 1 interface 0 altsetting 160 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1630.306624][ T5922] usb 6-1: config 1 interface 0 altsetting 160 bulk endpoint 0x3 has invalid maxpacket 32 [ 1630.384148][ T5922] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1630.496574][ T5922] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1630.505860][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.560524][ T5922] usb 6-1: Product: syz [ 1630.583770][ T5922] usb 6-1: Manufacturer: Й [ 1630.588329][ T5922] usb 6-1: SerialNumber: syz [ 1630.710300][T29322] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1630.718031][T29322] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1630.993810][T20360] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1631.027772][ T5922] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1631.086823][ T5922] usb 6-1: USB disconnect, device number 58 [ 1631.490108][T20360] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.565465][T20360] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1631.989221][T20360] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1632.035516][T20360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1632.069018][T20360] usb 4-1: SerialNumber: syz [ 1632.525066][T20359] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1632.914716][T20359] usb 6-1: Using ep0 maxpacket: 16 [ 1632.977265][T20359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1633.077630][T20359] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1633.210391][T29399] syz.2.6352 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1633.242498][T20359] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1633.467998][T20359] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1633.583973][T20359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.592078][T20359] usb 6-1: Product: syz [ 1633.724208][T20359] usb 6-1: Manufacturer: syz [ 1633.759988][T20359] usb 6-1: SerialNumber: syz [ 1633.801617][T20359] usb 6-1: config 0 descriptor?? [ 1633.845110][T29393] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1633.892943][T20354] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1633.919620][T20359] mcba_usb 6-1:0.0 can0: failed tx_urb -90 [ 1633.944285][T20359] mcba_usb 6-1:0.0 can0: Failed to send cmd (169) [ 1633.988064][T20359] mcba_usb 6-1:0.0 can0: failed tx_urb -90 [ 1634.016620][T20359] mcba_usb 6-1:0.0 can0: Failed to send cmd (169) [ 1634.023221][T20359] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 1634.114105][T20354] usb 5-1: Using ep0 maxpacket: 8 [ 1634.120347][T29393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1634.193654][T29393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1634.202504][T20354] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1634.230705][T20354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.251337][T29399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1634.292673][T20359] usb 6-1: USB disconnect, device number 59 [ 1634.299369][T20354] usb 5-1: Product: syz [ 1634.335755][T20359] mcba_usb 6-1:0.0 can0: device disconnected [ 1634.343015][T20354] usb 5-1: Manufacturer: syz [ 1634.385924][T20354] usb 5-1: SerialNumber: syz [ 1634.475234][T20354] usb 5-1: config 0 descriptor?? [ 1634.527878][T20354] gspca_main: se401-2.14.0 probing 047d:5003 [ 1634.970508][T20354] gspca_se401: Too many frame sizes [ 1635.140773][T20360] usb 4-1: cannot find UAC_HEADER [ 1635.301716][T20360] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1635.434198][T20360] usb 4-1: USB disconnect, device number 127 [ 1635.547966][T29431] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6359'. [ 1635.562378][ T6193] udevd[6193]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1635.634760][T29433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6360'. [ 1635.661132][T29433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6360'. [ 1635.808083][T29435] netlink: 'syz.2.6360': attribute type 6 has an invalid length. [ 1635.859471][T29435] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6360'. [ 1636.008973][T29448] binder: 29447:29448 ioctl 4018620d 0 returned -22 [ 1636.022179][T29448] binder: 29447:29448 ioctl c0306201 2000000007c0 returned -11 [ 1636.067077][T29444] ip6tnl1: entered promiscuous mode [ 1636.274747][T20360] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1636.458476][T20360] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1636.499289][T20360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.519655][T20360] usb 4-1: Product: syz [ 1636.532057][T20360] usb 4-1: Manufacturer: syz [ 1636.544244][T20360] usb 4-1: SerialNumber: syz [ 1636.560824][T20360] usb 4-1: config 0 descriptor?? [ 1636.583788][ T5963] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1636.594222][T20360] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1636.633255][T20359] usb 5-1: USB disconnect, device number 112 [ 1636.808224][ T5963] usb 2-1: Using ep0 maxpacket: 16 [ 1636.840549][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1636.861815][ T5963] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1636.874319][ T5963] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1636.899186][ T5963] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1636.916889][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.927358][ T5963] usb 2-1: Product: syz [ 1636.931563][ T5963] usb 2-1: Manufacturer: syz [ 1636.938862][ T5963] usb 2-1: SerialNumber: syz [ 1636.949835][ T5963] usb 2-1: config 0 descriptor?? [ 1636.958379][T16256] Bluetooth: hci2: Unknown advertising packet type: 0x76 [ 1636.958442][T16256] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1636.977289][T29458] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1636.994896][ T5963] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 1637.000879][ T5963] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 1637.012277][ T5963] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 1637.019327][ T5963] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 1637.026336][ T5963] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 1637.124327][T20360] gspca_sunplus: reg_r err -110 [ 1637.130007][T20360] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 1637.223588][T29458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.258595][T29458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.295474][T20360] usb 2-1: USB disconnect, device number 22 [ 1637.311391][T20360] mcba_usb 2-1:0.0 can0: device disconnected [ 1637.723966][T29493] program syz.4.6374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1637.915124][T29499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6375'. [ 1638.023862][T20360] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1638.042602][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1638.222035][T20360] usb 6-1: device descriptor read/64, error -32 [ 1638.504044][T20360] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1638.515673][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1638.704476][T20360] usb 6-1: device descriptor read/64, error -32 [ 1638.824140][T20360] usb usb6-port1: attempt power cycle [ 1639.116092][ T5963] usb 4-1: USB disconnect, device number 2 [ 1639.184615][T20360] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1639.211693][T20360] usb 6-1: config 0 has no interfaces? [ 1639.309471][T20360] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1639.414580][T20360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.433395][T29521] netlink: 'syz.2.6379': attribute type 1 has an invalid length. [ 1639.501846][T20360] usb 6-1: Product: syz [ 1639.539525][T20360] usb 6-1: Manufacturer: syz [ 1639.539561][T20360] usb 6-1: SerialNumber: syz [ 1639.589661][T20360] usb 6-1: config 0 descriptor?? [ 1639.752077][T29525] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1639.752096][T29525] bond0: (slave lo): Error: Device can not be enslaved while up [ 1639.752361][T29525] netlink: 'syz.1.6381': attribute type 4 has an invalid length. [ 1640.021012][T29494] pimreg: entered allmulticast mode [ 1640.193900][T20360] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 1640.426415][T20360] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1640.456106][T20360] usb 2-1: config 0 has no interface number 0 [ 1640.485858][T20360] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1640.541292][T20360] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1640.569906][T20360] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1640.581828][T20360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.619895][T20360] usb 2-1: config 0 descriptor?? [ 1640.638246][T20360] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1640.724516][ T5922] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1640.744210][ T5963] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1640.903851][ T5963] usb 3-1: Using ep0 maxpacket: 32 [ 1640.913516][T29542] binder: 29541:29542 ioctl 4018620d 0 returned -22 [ 1640.922061][ T5963] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1640.923847][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 1640.939411][T29542] binder: 29541:29542 ioctl c0306201 2000000007c0 returned -11 [ 1640.939608][T29527] iowarrior 2-1:0.1: Error -90 while submitting URB [ 1640.948506][ T5963] usb 3-1: config 0 has no interface number 0 [ 1640.972983][ T5963] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1640.987385][ T5963] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1641.006061][ T5963] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1641.020349][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=9, SerialNumber=0 [ 1641.020634][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1641.039491][ T5963] usb 3-1: Product: syz [ 1641.044772][ T5963] usb 3-1: Manufacturer: syz [ 1641.052223][T20354] usb 2-1: USB disconnect, device number 23 [ 1641.062567][ T5963] usb 3-1: config 0 descriptor?? [ 1641.103633][ T5922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1641.139373][ T5922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1641.170260][ T5922] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1641.193792][T20360] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1641.201596][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.228343][ T5922] usb 4-1: Product: syz [ 1641.232550][ T5922] usb 4-1: Manufacturer: syz [ 1641.251142][ T5922] usb 4-1: SerialNumber: syz [ 1641.266723][ T5922] usb 4-1: config 0 descriptor?? [ 1641.273440][T29535] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1641.323958][ T5922] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 1641.329941][ T5922] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 1641.358845][T20360] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1641.372600][T20360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.381102][T20360] usb 5-1: Product: syz [ 1641.389485][T20360] usb 5-1: Manufacturer: syz [ 1641.394406][ T5922] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 1641.394663][T20360] usb 5-1: SerialNumber: syz [ 1641.400261][ T5922] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 1641.430990][T20360] usb 5-1: config 0 descriptor?? [ 1641.444759][T20360] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1641.451587][ T5922] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 1641.513135][T29535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1641.540746][T29535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1641.586755][T20357] usb 4-1: USB disconnect, device number 3 [ 1641.600961][T20357] mcba_usb 4-1:0.0 can0: device disconnected [ 1641.700310][ T5963] appletouch 3-1:0.85: Geyser mode initialized. [ 1641.719379][ T5963] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input105 [ 1641.955222][T20360] gspca_sunplus: reg_r err -110 [ 1641.966374][T20360] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 1642.358435][T29557] netlink: 'syz.2.6384': attribute type 1 has an invalid length. [ 1642.442475][T29557] bond1: entered promiscuous mode [ 1642.451668][T29557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1642.989829][T20353] usb 6-1: USB disconnect, device number 62 [ 1643.997344][T20354] usb 5-1: USB disconnect, device number 113 [ 1644.773818][T20354] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1644.819043][ T5922] usb 3-1: USB disconnect, device number 14 [ 1644.941975][ T5922] appletouch 3-1:0.85: input: appletouch disconnected [ 1644.959832][T29616] QAT: Stopping all acceleration devices. [ 1645.018223][T20354] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 1645.078013][T20354] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.136790][T20354] usb 5-1: config 171 has no interface number 0 [ 1645.154831][T20354] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1645.183341][T20354] usb 5-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 768, setting to 64 [ 1645.219354][T20354] usb 5-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1645.298043][T20354] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1645.329971][T20354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.358480][T20354] usb 5-1: Product: syz [ 1645.372295][T20354] usb 5-1: Manufacturer: syz [ 1645.387716][T20354] usb 5-1: SerialNumber: syz [ 1645.412689][T29604] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1645.648643][T29636] program syz.5.6410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1645.655258][T29604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1645.668543][T29604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.679235][T20354] ath6kl: Failed to submit usb control message: -71 [ 1645.687684][T20354] ath6kl: unable to send the bmi data to the device: -71 [ 1645.697091][T20354] ath6kl: Unable to send get target info: -71 [ 1645.726242][T20354] ath6kl: Failed to init ath6kl core: -71 [ 1645.752654][T20354] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1645.798752][T20354] usb 5-1: USB disconnect, device number 114 [ 1645.893810][ T5922] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1645.904635][T29645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1645.923610][T29646] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6412'. [ 1646.063890][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 1646.072019][ T5922] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1646.080711][ T5922] usb 2-1: config 0 has no interface number 0 [ 1646.090640][ T5922] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1646.100268][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.108525][ T5922] usb 2-1: Product: syz [ 1646.112928][ T5922] usb 2-1: Manufacturer: syz [ 1646.117725][ T5922] usb 2-1: SerialNumber: syz [ 1646.127954][ T5922] usb 2-1: config 0 descriptor?? [ 1646.340950][T29625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6407'. [ 1646.356700][T20357] usb 2-1: USB disconnect, device number 24 [ 1647.193797][ T5922] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1647.223968][T20353] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1647.303821][T20354] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1647.344127][ T5922] usb 4-1: Using ep0 maxpacket: 8 [ 1647.353830][T20351] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1647.373641][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.388556][T29673] netlink: 'syz.5.6422': attribute type 1 has an invalid length. [ 1647.393234][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1647.409283][T20353] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.419773][T20353] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1647.428856][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1647.441963][ T5922] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1647.451984][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.460231][T20353] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1647.470964][T20354] usb 2-1: Using ep0 maxpacket: 16 [ 1647.479301][ T5922] usb 4-1: config 0 descriptor?? [ 1647.485047][T20353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1647.493053][T20353] usb 3-1: SerialNumber: syz [ 1647.505191][T20354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1647.520613][T20354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1647.530954][T20354] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1647.550511][T20351] usb 5-1: Using ep0 maxpacket: 16 [ 1647.557992][T20354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.568078][T20351] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1647.576277][T20351] usb 5-1: config 0 has no interface number 0 [ 1647.582388][T20351] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1647.593648][T20351] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1647.608587][T20354] usb 2-1: config 0 descriptor?? [ 1647.613909][T20351] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1647.628262][T20351] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1647.637490][T20351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.645573][T20351] usb 5-1: Product: syz [ 1647.649776][T20351] usb 5-1: Manufacturer: syz [ 1647.654461][T20351] usb 5-1: SerialNumber: syz [ 1647.661639][T20351] usb 5-1: config 0 descriptor?? [ 1647.670452][T29671] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1647.679754][T29671] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1647.764561][T20353] usb 3-1: 0:2 : does not exist [ 1647.782532][T20353] usb 3-1: USB disconnect, device number 15 [ 1647.835022][T20354] usbhid 2-1:0.0: can't add hid device: -71 [ 1647.841066][T20354] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1647.863388][T20354] usb 2-1: USB disconnect, device number 25 [ 1647.892542][T29671] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1647.910415][T29671] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1648.276939][T20354] usb 4-1: USB disconnect, device number 4 [ 1648.326083][T20351] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1648.407406][T29678] veth0: entered promiscuous mode [ 1648.420393][T29678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6424'. [ 1648.528982][T20351] dm9601 5-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 1648.552579][ T5963] hid-generic 0000:0003:0000.0042: unknown main item tag 0x0 [ 1648.563504][ T5963] hid-generic 0000:0003:0000.0042: unknown main item tag 0x0 [ 1648.565583][T20351] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71 [ 1648.595914][ T5963] hid-generic 0000:0003:0000.0042: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1648.636822][T20351] usb 5-1: USB disconnect, device number 115 [ 1648.727646][T20353] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1648.778257][T29687] fido_id[29687]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1648.916070][T20353] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.048966][T20353] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1649.107532][T20353] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1649.194274][ T5963] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1649.275853][T20353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.287533][T20353] usb 6-1: config 0 descriptor?? [ 1649.393079][T29695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6429'. [ 1649.545937][ T5963] usb 3-1: config 0 has an invalid interface number: 129 but max is 0 [ 1649.580514][ T5963] usb 3-1: config 0 has no interface number 0 [ 1649.593526][ T5963] usb 3-1: config 0 interface 129 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1649.622036][ T5963] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 1649.649806][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.717226][ T5963] usb 3-1: Product: syz [ 1649.721434][ T5963] usb 3-1: Manufacturer: syz [ 1649.762687][ T5963] usb 3-1: SerialNumber: syz [ 1649.842056][ T5963] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1649.873497][ T5963] r8152-cfgselector 3-1: config 0 descriptor?? [ 1649.923448][T29691] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1649.951447][ T5963] r8152 3-1:0.129: Expected endpoints are not found [ 1650.031329][T20353] usbhid 6-1:0.0: can't add hid device: -71 [ 1650.156940][T20353] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1650.554254][T20353] usb 6-1: USB disconnect, device number 63 [ 1652.333505][T20353] r8152-cfgselector 3-1: USB disconnect, device number 16 [ 1652.483944][T20351] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1652.664140][T20351] usb 4-1: device descriptor read/64, error -71 [ 1653.013847][T20351] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1653.255158][T20351] usb 4-1: device descriptor read/64, error -71 [ 1653.363968][ T5922] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1653.371830][T20351] usb usb4-port1: attempt power cycle [ 1653.382200][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 1653.533849][ T5922] usb 3-1: device descriptor read/64, error -32 [ 1653.753804][T20351] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1653.773901][ T5922] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1653.781648][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 1653.924774][ T5922] usb 3-1: device descriptor read/64, error -32 [ 1653.943098][T20351] usb 4-1: device descriptor read/8, error -71 [ 1654.034167][ T5922] usb usb3-port1: attempt power cycle [ 1654.184318][T20351] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1654.244031][T20360] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1654.413863][ T5922] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1654.444114][T20360] usb 5-1: Using ep0 maxpacket: 16 [ 1654.470161][T20360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1654.504987][T20360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1654.534578][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 1654.564321][T20360] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1654.601974][T20360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.632043][T20360] usb 5-1: config 0 descriptor?? [ 1654.764446][ T5963] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1654.825768][T20351] usb 4-1: device descriptor read/8, error -71 [ 1654.972986][T20360] usbhid 5-1:0.0: can't add hid device: -71 [ 1654.979672][T20351] usb usb4-port1: unable to enumerate USB device [ 1654.983836][ T5963] usb 2-1: Using ep0 maxpacket: 16 [ 1655.010489][T20360] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1655.052558][T20360] usb 5-1: USB disconnect, device number 116 [ 1655.065203][T29733] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6441'. [ 1655.224874][T29734] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6441'. [ 1655.282478][T29727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.300919][ T5922] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1655.313798][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.331012][ T5922] usb 3-1: Product: syz [ 1655.338350][ T5922] usb 3-1: Manufacturer: syz [ 1655.343386][ T5922] usb 3-1: SerialNumber: syz [ 1655.417918][T29727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.439463][ T5922] usb 3-1: config 0 descriptor?? [ 1655.682738][ T5922] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 019 [ 1655.704043][T20351] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1655.704064][T20359] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1655.873892][T20351] usb 6-1: Using ep0 maxpacket: 32 [ 1655.876205][T20359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1655.901364][T29719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.915888][T20351] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1655.933112][T20359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1655.950157][T20359] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1655.959671][T20351] usb 6-1: config 0 has no interface number 0 [ 1655.979204][T20359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.986879][T20351] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1656.013794][T20351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.022787][T20359] usb 4-1: config 0 descriptor?? [ 1656.072193][T20351] usb 6-1: Product: syz [ 1656.097046][T20351] usb 6-1: Manufacturer: syz [ 1656.127941][T20351] usb 6-1: SerialNumber: syz [ 1656.144464][T20351] usb 6-1: config 0 descriptor?? [ 1656.171232][T20351] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1656.196535][T20351] usb 6-1: selecting invalid altsetting 1 [ 1656.219185][T20351] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1656.247822][T20351] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1656.287983][T20351] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1656.319605][T20351] usb 6-1: media controller created [ 1656.365727][T20351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1656.677805][T29738] ------------[ cut here ]------------ [ 1656.683912][T29738] usb 3-1: BOGUS control dir, pipe 80001380 doesn't match bRequestType c1 [ 1656.730034][T29738] WARNING: CPU: 1 PID: 29738 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 1656.740478][T29738] Modules linked in: [ 1656.744996][T29738] CPU: 1 UID: 0 PID: 29738 Comm: syz.5.6442 Not tainted 6.16.0-rc2-syzkaller-00308-gf7301f856d35 #0 PREEMPT(full) [ 1656.757412][T29738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1656.767557][T29738] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 1656.773237][T29738] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 29 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 24 26 63 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 1656.793927][T29738] RSP: 0018:ffffc9000c427870 EFLAGS: 00010246 [ 1656.800035][T29738] RAX: 02e84d62dee8cf00 RBX: ffff8880630c8a00 RCX: 0000000000080000 [ 1656.808774][T29738] RDX: ffffc9000f84a000 RSI: 00000000000059d4 RDI: 00000000000059d5 [ 1656.816821][T29738] RBP: 1ffff11008dfccdc R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 1656.824876][T29738] R10: dffffc0000000000 R11: ffffed10170e4853 R12: ffff888046fe66e0 [ 1656.832885][T29738] R13: dffffc0000000000 R14: 0000000080001380 R15: ffff8880273f2c60 [ 1656.840920][T29738] FS: 00007fc6fe0566c0(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 1656.849936][T29738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1656.856576][T29738] CR2: 00002000001dc030 CR3: 000000008336e000 CR4: 00000000003526f0 [ 1656.864627][T29738] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1656.872652][T29738] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1656.880815][T29738] Call Trace: [ 1656.884941][T29738] [ 1656.887904][T29738] usb_start_wait_urb+0x114/0x4c0 [ 1656.892963][T29738] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1656.899226][T29738] ? __kmalloc_noprof+0x29b/0x4f0 [ 1656.904394][T29738] usb_control_msg+0x232/0x3e0 [ 1656.909216][T29738] osif_xfer+0x21a/0x5e0 [ 1656.913522][T29738] __i2c_transfer+0x874/0x2170 [ 1656.918341][T29738] ? lockdep_hardirqs_on+0x9c/0x150 [ 1656.923585][T29738] ? __pfx___i2c_transfer+0x10/0x10 [ 1656.928825][T29738] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1656.934287][T29738] ? i2c_transfer+0x11d/0x3a0 [ 1656.938983][T29738] i2c_transfer+0x25b/0x3a0 [ 1656.943510][T29738] ? __pfx_i2c_transfer+0x10/0x10 [ 1656.948643][T29738] ? _copy_from_user+0x94/0xb0 [ 1656.953429][T29738] i2cdev_ioctl_rdwr+0x460/0x740 [ 1656.958416][T29738] i2cdev_ioctl+0x64b/0x7f0 [ 1656.962934][T29738] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1656.968011][T29738] ? __fget_files+0x3a0/0x420 [ 1656.972713][T29738] ? __fget_files+0x2a/0x420 [ 1656.977325][T29738] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1656.982290][T29738] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1656.987945][T29738] __se_sys_ioctl+0xfc/0x170 [ 1656.992562][T29738] do_syscall_64+0xfa/0x3b0 [ 1656.997628][T29738] ? lockdep_hardirqs_on+0x9c/0x150 [ 1657.002835][T29738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.008969][T29738] ? clear_bhb_loop+0x60/0xb0 [ 1657.013666][T29738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.019627][T29738] RIP: 0033:0x7fc6fd18e929 [ 1657.024154][T29738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1657.043903][T29738] RSP: 002b:00007fc6fe056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1657.052328][T29738] RAX: ffffffffffffffda RBX: 00007fc6fd3b5fa0 RCX: 00007fc6fd18e929 [ 1657.060564][T29738] RDX: 0000200000000280 RSI: 0000000000000707 RDI: 0000000000000004 [ 1657.068586][T29738] RBP: 00007fc6fd210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1657.076599][T29738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1657.084649][T29738] R13: 0000000000000000 R14: 00007fc6fd3b5fa0 R15: 00007fc6fd4dfa28 [ 1657.093262][T29738] [ 1657.096956][T29738] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1657.104238][T29738] CPU: 1 UID: 0 PID: 29738 Comm: syz.5.6442 Not tainted 6.16.0-rc2-syzkaller-00308-gf7301f856d35 #0 PREEMPT(full) [ 1657.116284][T29738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1657.126326][T29738] Call Trace: [ 1657.129592][T29738] [ 1657.132517][T29738] dump_stack_lvl+0x99/0x250 [ 1657.137121][T29738] ? __asan_memcpy+0x40/0x70 [ 1657.141717][T29738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1657.146914][T29738] ? __pfx__printk+0x10/0x10 [ 1657.151509][T29738] panic+0x2db/0x790 [ 1657.155403][T29738] ? __pfx_panic+0x10/0x10 [ 1657.159841][T29738] __warn+0x31b/0x4b0 [ 1657.163829][T29738] ? usb_submit_urb+0x115d/0x1890 [ 1657.168858][T29738] ? usb_submit_urb+0x115d/0x1890 [ 1657.173873][T29738] report_bug+0x2be/0x4f0 [ 1657.178191][T29738] ? usb_submit_urb+0x115d/0x1890 [ 1657.183207][T29738] ? usb_submit_urb+0x115d/0x1890 [ 1657.188256][T29738] ? usb_submit_urb+0x115f/0x1890 [ 1657.193268][T29738] handle_bug+0x84/0x160 [ 1657.197516][T29738] exc_invalid_op+0x1a/0x50 [ 1657.202006][T29738] asm_exc_invalid_op+0x1a/0x20 [ 1657.206865][T29738] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 1657.212493][T29738] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 29 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 24 26 63 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 1657.232081][T29738] RSP: 0018:ffffc9000c427870 EFLAGS: 00010246 [ 1657.238142][T29738] RAX: 02e84d62dee8cf00 RBX: ffff8880630c8a00 RCX: 0000000000080000 [ 1657.246103][T29738] RDX: ffffc9000f84a000 RSI: 00000000000059d4 RDI: 00000000000059d5 [ 1657.254069][T29738] RBP: 1ffff11008dfccdc R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 1657.262054][T29738] R10: dffffc0000000000 R11: ffffed10170e4853 R12: ffff888046fe66e0 [ 1657.270035][T29738] R13: dffffc0000000000 R14: 0000000080001380 R15: ffff8880273f2c60 [ 1657.278043][T29738] usb_start_wait_urb+0x114/0x4c0 [ 1657.283083][T29738] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1657.288635][T29738] ? __kmalloc_noprof+0x29b/0x4f0 [ 1657.293681][T29738] usb_control_msg+0x232/0x3e0 [ 1657.298458][T29738] osif_xfer+0x21a/0x5e0 [ 1657.302711][T29738] __i2c_transfer+0x874/0x2170 [ 1657.307471][T29738] ? lockdep_hardirqs_on+0x9c/0x150 [ 1657.312663][T29738] ? __pfx___i2c_transfer+0x10/0x10 [ 1657.317847][T29738] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1657.323224][T29738] ? i2c_transfer+0x11d/0x3a0 [ 1657.327903][T29738] i2c_transfer+0x25b/0x3a0 [ 1657.332526][T29738] ? __pfx_i2c_transfer+0x10/0x10 [ 1657.337577][T29738] ? _copy_from_user+0x94/0xb0 [ 1657.342340][T29738] i2cdev_ioctl_rdwr+0x460/0x740 [ 1657.347274][T29738] i2cdev_ioctl+0x64b/0x7f0 [ 1657.351787][T29738] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1657.356811][T29738] ? __fget_files+0x3a0/0x420 [ 1657.361502][T29738] ? __fget_files+0x2a/0x420 [ 1657.366097][T29738] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1657.371027][T29738] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1657.376048][T29738] __se_sys_ioctl+0xfc/0x170 [ 1657.380648][T29738] do_syscall_64+0xfa/0x3b0 [ 1657.385149][T29738] ? lockdep_hardirqs_on+0x9c/0x150 [ 1657.390340][T29738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.396408][T29738] ? clear_bhb_loop+0x60/0xb0 [ 1657.401091][T29738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.406984][T29738] RIP: 0033:0x7fc6fd18e929 [ 1657.411388][T29738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1657.430994][T29738] RSP: 002b:00007fc6fe056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1657.439401][T29738] RAX: ffffffffffffffda RBX: 00007fc6fd3b5fa0 RCX: 00007fc6fd18e929 [ 1657.447379][T29738] RDX: 0000200000000280 RSI: 0000000000000707 RDI: 0000000000000004 [ 1657.455451][T29738] RBP: 00007fc6fd210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1657.463439][T29738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1657.471409][T29738] R13: 0000000000000000 R14: 00007fc6fd3b5fa0 R15: 00007fc6fd4dfa28 [ 1657.479396][T29738] [ 1657.482681][T29738] Kernel Offset: disabled [ 1657.487008][T29738] Rebooting in 86400 seconds..