last executing test programs: 11.068062946s ago: executing program 0 (id=611): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000030800783a00fc010000000000000000000000000000feda"], 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x0) syz_usb_connect(0x4, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000300, 0x0, 0x1, 0xa, 0x0, 0x4}, 0x20) 10.134667829s ago: executing program 0 (id=613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000090000014e224e21009c9078"], 0xd2) 9.587506107s ago: executing program 0 (id=615): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0001f00000000000000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x232) 9.158095369s ago: executing program 0 (id=617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$vim2m(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000003c0)={0x2, @vbi={0x455eb137, 0x5, 0x7, 0x20343059, [0x5], [0x52ab, 0xd], 0x13a}}) r2 = socket(0x8, 0x80000, 0xffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000001d00)={{0x12, 0x1, 0x200, 0x59, 0xfb, 0xfa, 0x10, 0x403, 0xfa78, 0xbcca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4b, 0x2, 0xe0, 0x5, [{{0x9, 0x4, 0x88, 0x0, 0x0, 0xb6, 0x5e, 0xcd, 0x50}}]}}]}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003fc0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x6c}}, 0x0) 7.40451895s ago: executing program 0 (id=625): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x85, 0x0, &(0x7f00000000c0)) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_setup(0xb, &(0x7f0000000240)=0x0) io_getevents(r5, 0x1fffe, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4) openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)) 6.915261259s ago: executing program 4 (id=626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff020000000000000000004e220000014e224e21009c9078"], 0xd2) 6.627110441s ago: executing program 4 (id=627): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x3, 0x50, 0x8}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r7}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r7, 0x4}}]}, 0xc4}}, 0x0) getsockname$packet(r3, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000f80)=0x15) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r8, @ANYBLOB="8fd60400dd0000001c0012800e00010069703665727370616e00000008000280040012"], 0x3c}}, 0x0) sendto$packet(r0, &(0x7f00000000c0)="8001c83a9c9e9cec12074a6886dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) r9 = socket(0x1e, 0x4, 0x0) r10 = fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r11 = openat2$dir(0xffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x40, 0x185}, 0x18) fsconfig$FSCONFIG_SET_PATH(r10, 0x3, &(0x7f0000000140)='&,]*(--#(\xf8\x00', &(0x7f0000000200)='./file0\x00', r11) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x7f, 0x6, 0xffffffff, 0x3, 0x10001, 0x9, 0x7}, 0x1c) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv4_delroute={0x2c, 0x19, 0x8, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x80, 0x6, 0xfd, 0x4, 0x0, 0x2, 0xb00}, [@RTA_MARK={0x8, 0x10, 0x3}, @RTA_PRIORITY={0x8, 0x6, 0x1}]}, 0x2c}}, 0x4004) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011d019bde521023398a71d7d80102030109022400010509401909047b07021950d5980905eb022000020205090504"], 0x0) socket(0x29, 0x3, 0x81) 4.889555226s ago: executing program 1 (id=633): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x34) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4, 0x0, 0x6, 0x7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0xa, 0x4, 0xfffffffe, 0x0, 0x0, 0x1) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r2, &(0x7f0000007900), 0x40000000000003d, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x44000) 4.606395244s ago: executing program 1 (id=635): io_uring_setup(0x79e1, &(0x7f0000000000)={0x0, 0xf4e2, 0x10, 0x1, 0x1eb}) (async) r0 = io_uring_setup(0x79e1, &(0x7f0000000000)={0x0, 0xf4e2, 0x10, 0x1, 0x1eb}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000000200)=""/98, 0x62}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000000200)=""/98, 0x62}], 0x3) fchmod(r0, 0x74) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_uring_enter(r2, 0x3977, 0xe543, 0x22, &(0x7f0000000300)={[0x6, 0x8]}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000340), &(0x7f0000000380)=0x4) openat$khugepaged_scan(0xffffff9c, &(0x7f00000003c0), 0x1, 0x0) (async) r3 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000003c0), 0x1, 0x0) close_range(r3, r2, 0x0) r4 = openat$dsp(0xffffff9c, &(0x7f0000000440), 0x8000, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000480)) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f00000004c0)={@loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r5 = accept4$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14, 0x800) getsockname$packet(r5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) fallocate(r2, 0x10, 0x4, 0xffffff7d) r7 = open_tree(r2, &(0x7f0000000600)='./file0\x00', 0x80000) r8 = request_key(&(0x7f0000000640)='pkcs7_test\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)='-\x00', 0xfffffffffffffff9) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r1, 0x3) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r1, 0x3) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000700), &(0x7f0000000740)=0x4) write$6lowpan_enable(r7, &(0x7f0000000780)='1', 0x1) recvmsg$kcm(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/104, 0x68}, {&(0x7f0000000840)=""/165, 0xa5}, {&(0x7f0000000900)=""/61, 0x3d}], 0x3, &(0x7f0000000980)=""/114, 0x72}, 0x40000002) (async) recvmsg$kcm(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/104, 0x68}, {&(0x7f0000000840)=""/165, 0xa5}, {&(0x7f0000000900)=""/61, 0x3d}], 0x3, &(0x7f0000000980)=""/114, 0x72}, 0x40000002) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000a40)={r2, 0x5, {0x0, 0x0, 0x0, 0x8000000000000001, 0x5, 0x0, 0x1, 0x11, 0x18, "6fff245bb2455e804ea20f9c6a0631f7608ca07b20fa95ce170b8c699efee6a0e1ceb2ab57ea059ad901f396c789862dc2eafc59c9a1650d2c846aacbf955155", "f0a8749f498ebad79c6cbd6495b88bca344c4e8cc91871cf46e8df9250a5dad5160fdc9f42fc63a6390e6c94d73c13317b811290b0f396161e507686a2b0e51c", "5c821a9d0a22aae92e94e4300fa4b20e1137935ee44c5105c4bbf5ad9b9753e6", [0x8, 0xfffffffffffffff7]}}) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000a40)={r2, 0x5, {0x0, 0x0, 0x0, 0x8000000000000001, 0x5, 0x0, 0x1, 0x11, 0x18, "6fff245bb2455e804ea20f9c6a0631f7608ca07b20fa95ce170b8c699efee6a0e1ceb2ab57ea059ad901f396c789862dc2eafc59c9a1650d2c846aacbf955155", "f0a8749f498ebad79c6cbd6495b88bca344c4e8cc91871cf46e8df9250a5dad5160fdc9f42fc63a6390e6c94d73c13317b811290b0f396161e507686a2b0e51c", "5c821a9d0a22aae92e94e4300fa4b20e1137935ee44c5105c4bbf5ad9b9753e6", [0x8, 0xfffffffffffffff7]}}) keyctl$unlink(0x9, r8, r8) (async) keyctl$unlink(0x9, r8, r8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000b80)={0x0, @in6={{0xa, 0x4e22, 0x1, @private0, 0x76}}, [0x0, 0x2, 0xfffffffffffffff3, 0x3580000000000000, 0xfffffffffffffff7, 0x4, 0x6, 0x81, 0x2, 0x4, 0x4, 0x0, 0x0, 0x0, 0x9e7]}, &(0x7f0000000c80)=0xfc) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000b80)={0x0, @in6={{0xa, 0x4e22, 0x1, @private0, 0x76}}, [0x0, 0x2, 0xfffffffffffffff3, 0x3580000000000000, 0xfffffffffffffff7, 0x4, 0x6, 0x81, 0x2, 0x4, 0x4, 0x0, 0x0, 0x0, 0x9e7]}, &(0x7f0000000c80)=0xfc) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000cc0)={r9, 0x7, 0x4, 0x7, 0xb8, 0xff2}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@bloom_filter={0x1e, 0x8, 0x9, 0x4, 0x40400, r2, 0x8, '\x00', r6, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0xe, @void, @value, @void, @value}, 0x50) add_key$user(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x1}, &(0x7f0000000e00)="27ecddd727fa4b9d85de7e6d8c67148f81f2ef9c67102b1f1862a897f18e758aeb538be18d0fd226dbfc23b9708c4ace4e0dc36ffe61267157740e73e1ef70ec5e577205689383270c071a16e90368c95539f9b15d6b2cd607c15b28d8d2a021f52b2b8cfb8f5c4e38568125f1f01caa4bc415e755ac6ab0e7c3578251803607e3da5f8fffa0a0ca692e2fd50a070021530c5d544097b3ab9dd75871", 0x9c, 0x0) (async) add_key$user(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x1}, &(0x7f0000000e00)="27ecddd727fa4b9d85de7e6d8c67148f81f2ef9c67102b1f1862a897f18e758aeb538be18d0fd226dbfc23b9708c4ace4e0dc36ffe61267157740e73e1ef70ec5e577205689383270c071a16e90368c95539f9b15d6b2cd607c15b28d8d2a021f52b2b8cfb8f5c4e38568125f1f01caa4bc415e755ac6ab0e7c3578251803607e3da5f8fffa0a0ca692e2fd50a070021530c5d544097b3ab9dd75871", 0x9c, 0x0) syz_usb_connect$uac1(0x0, 0xec, &(0x7f0000000ec0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0x0, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x8}, [@selector_unit={0x8, 0x24, 0x5, 0x6, 0x6, "979e77"}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x6, "a2a37eca4349"}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x2, 0xb, 'S'}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x5, 0x3, "d7e3432881"}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x0, 0x7, "49e83948"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x3, 0x7, 0x1, 0x8f, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x80, 0x6, 's', "91c06e"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x7ff, 0x5, "379f"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x9, 0x1001}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xf, 0x32f, 0x9, "892dab49bb85"}, @as_header={0x7, 0x24, 0x1, 0x9d, 0x3, 0x5}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0xb9, 0x9, "9c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3bf, 0x4, 0x7, 0xfe, {0x7, 0x25, 0x1, 0x80, 0x3, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x8, 0x40, {0x7, 0x25, 0x1, 0x2, 0x1, 0x560a}}}}}}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x110, 0x5, 0xff, 0x3, 0xff, 0x1}, 0x3a, &(0x7f0000001000)={0x5, 0xf, 0x3a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x9, 0x0, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x7, 0xdfa}, @ssp_cap={0x10, 0x10, 0xa, 0xe, 0x1, 0x5, 0xf011, 0x6, [0x1403f]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "7e0cf6c04a9caff31c516f5bb4e4c1b9"}]}, 0x5, [{0x7f, &(0x7f0000001040)=@string={0x7f, 0x3, "4ce37d0d72226a2054813ebd490dc83ddb6ad86e6c43fb4fbbc6e83f89798e6a7e3a7aba5c495cfa952ede6fb15f5541aa64cf2ef9713cbec782dc0a67848232c8ab9c9b3a1039505da30de2c8e33ffcbc79a9097e65b4a3a1dd5a8c55dc6e07ef06ef2ba0d6a2ffc59fe5b64cd0acb5967b08c77382442c80d627a21b"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x42c}}, {0xa5, &(0x7f0000001140)=@string={0xa5, 0x3, "86808f0084e73c3ebe796d0adf6c4fca6bfbcbd25538d1df0f70a3e61b7d97cdac4604bb488abb28eef5b9ee2fbf7609272bc59f6d10595725eaa38a7316237c194f22a322d5e8d3011f11f6d9e2fb577bb29b71b2880b906af98f4860ac7f10a1511d3ab181d2fe30f42880dd6177abb47fe81ee62ceacce725822a25741ef68e8f78d51028562ea833a75fcbc988577b589472b5aff55c11fb23d080474929c05dc6"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x41c}}]}) (async) syz_usb_connect$uac1(0x0, 0xec, &(0x7f0000000ec0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0x0, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x8}, [@selector_unit={0x8, 0x24, 0x5, 0x6, 0x6, "979e77"}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x6, "a2a37eca4349"}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x2, 0xb, 'S'}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x5, 0x3, "d7e3432881"}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x0, 0x7, "49e83948"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x3, 0x7, 0x1, 0x8f, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x80, 0x6, 's', "91c06e"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x7ff, 0x5, "379f"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x9, 0x1001}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xf, 0x32f, 0x9, "892dab49bb85"}, @as_header={0x7, 0x24, 0x1, 0x9d, 0x3, 0x5}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0xb9, 0x9, "9c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3bf, 0x4, 0x7, 0xfe, {0x7, 0x25, 0x1, 0x80, 0x3, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x8, 0x40, {0x7, 0x25, 0x1, 0x2, 0x1, 0x560a}}}}}}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x110, 0x5, 0xff, 0x3, 0xff, 0x1}, 0x3a, &(0x7f0000001000)={0x5, 0xf, 0x3a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x9, 0x0, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x7, 0xdfa}, @ssp_cap={0x10, 0x10, 0xa, 0xe, 0x1, 0x5, 0xf011, 0x6, [0x1403f]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "7e0cf6c04a9caff31c516f5bb4e4c1b9"}]}, 0x5, [{0x7f, &(0x7f0000001040)=@string={0x7f, 0x3, "4ce37d0d72226a2054813ebd490dc83ddb6ad86e6c43fb4fbbc6e83f89798e6a7e3a7aba5c495cfa952ede6fb15f5541aa64cf2ef9713cbec782dc0a67848232c8ab9c9b3a1039505da30de2c8e33ffcbc79a9097e65b4a3a1dd5a8c55dc6e07ef06ef2ba0d6a2ffc59fe5b64cd0acb5967b08c77382442c80d627a21b"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x42c}}, {0xa5, &(0x7f0000001140)=@string={0xa5, 0x3, "86808f0084e73c3ebe796d0adf6c4fca6bfbcbd25538d1df0f70a3e61b7d97cdac4604bb488abb28eef5b9ee2fbf7609272bc59f6d10595725eaa38a7316237c194f22a322d5e8d3011f11f6d9e2fb577bb29b71b2880b906af98f4860ac7f10a1511d3ab181d2fe30f42880dd6177abb47fe81ee62ceacce725822a25741ef68e8f78d51028562ea833a75fcbc988577b589472b5aff55c11fb23d080474929c05dc6"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x41c}}]}) getresuid(&(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000001700)={0x0, 0x3, 0x0, &(0x7f0000001340)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000001480)=[{}, {}, {}, {}], 0x1, 0x0, &(0x7f0000001640)=[{}], 0x2, 0x0, &(0x7f0000001680)=[{}, {}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', r6, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 4.586984269s ago: executing program 4 (id=636): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000000801040000000000000000030000010c04048008000740000000090900010073797a300000000006000240001a00000500030021000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000008}, 0x20000044) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="28005080110001004abee33908f8eef16f162471f400000005000200020000000800030006ac0f00"], 0x44}}, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x7}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020ac054e0240000102030e0902240001010540000904000302030102b409210200030122080109058103080007070f"], 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@fallback, 0xffffffffffffffff, 0x9, 0x2000, 0xffffffffffffffff, @value}, 0x20) 4.2992628s ago: executing program 3 (id=638): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x50, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x50, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x3, 0x800, 0x0) (async) r2 = socket(0x3, 0x800, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000005a40)={0x24dc, 0x12, 0x1, 0x0, 0x0, {0xd, 0x2}, [@typed={0x5, 0x6c, 0x0, 0x0, @str='\x00'}, @nested={0x24bf, 0xea, 0x0, 0x1, [@nested={0x1f1, 0x5a, 0x0, 0x1, [@generic="b01ead02a9b6e818e0d6359c3b00bf5352bdb5eba8d383d04bc28693941c786d09b48c15810bd59c9ee9fde9232269cfc247571b5d27032f7792eb593c5ded898039f772ede2afe91cff2e2cc90c76026f893a473ba4287e542cb3eda0e106b91796c2fb7366e3edda464aeb021ac5dee5d6384ead0a37a9847c115eb5ab2c6956827ab126c3503ec97a9b8cbee4c1571f1b32d657c0b4e9f79ed600e9220d63bdb666b0c73e8e31387d10963db21429258e07ea18157086a57dc60ad8822b149ffabd1997c6c1960fb0a5cd2dd60494a9920c1eda8559b3ca22e44762b3c1d86800f6fec9b07e9576", @nested={0x4, 0xb6}, @typed={0x4b, 0x9b, 0x0, 0x0, @binary="c9787104de580bbeadcf85c7480520b5d3eccaaea771e0ebe6b423b1380f1edc99d1a7fe341c5bc1c7c9779b46cf0ebcf3846476e1f210f67bdcff6e4365b1a894840b5d72168e"}, @nested={0x4, 0xed}, @generic="796eb9af639dd2d9eaaaac6250824ff182cefa492078574c61a530b15ab8b6922692770617", @generic="08081c16ff91b1e78de8dee5dccafda6387d9be131a43b623b6f359e4d878bf18f92dc840c45da1e0ad51ccdb28bbe96d9298678e5a62c444943f14e07caa947", @generic="d2046030ba3011f9e8e2bb6ea5ed43c8a1445e1c60f33cfcc23c3f373eb2334f5c236220150a9ff148ae", @generic="54450ef1908fc7ecc8", @typed={0x8, 0xda, 0x0, 0x0, @pid}, @typed={0xd, 0x120, 0x0, 0x0, @str='macvlan0\x00'}]}, @typed={0x14, 0x49, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x135, 0x0, 0x0, @fd=r2}, @generic="453a715409ae53b390ae1bd610cbc5b610b64c938c2b483ab9eff53d61e36590ccf64fc2b56f7902b55b87c4927d30329b45d58516eb73b6292ce362e3b1054df9a2b37b4ab5e1d5da015c5b6530204577239c41ca45cb", @nested={0x1159, 0x14f, 0x0, 0x1, [@nested={0x4, 0xd6}, @generic="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", @generic="2a2760ec7c3fffe46a041fd080fb8a29385be7724f9f16f4134dde4f8b623ee76032bc9cbe1d9bd2994243c66eb07d759e137ccb63fcd0bee65681ca221153762477779b0346102b38d5239cf1f87255297f4123cb44f967f0dc9ac87956220ff359ebea3a046643ae3689953adf513bdb642990acc0c0eb1af024f9128275d12d670abce3303e4b82f1dbdb433b7115ab40c0921bd1a89d209625bf260e4db125268bf4b2d255bce13ce1907500890a267a304295cd1eb3cecf12b460d72e28fcbacfbe358ab10090bb54631ef571f7f91554df43af271bacd2eaadd938057aa8529b6e6585822be0a14d3a2a2d", @nested={0x4, 0x7b}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0x12c}, @generic="254df8d80c18825eb173a5c1244b0163caecf715a49df7711b2d15b09466b1ec8257103709d484072b4d45d8147193730afa194237fc58e5713656243c40d5077c8eba5642b82429dd0d7ab9d24c7924c87c3358139c95c54a1e7b5f3441221abce995d3ee26d969679a8b50"]}, @nested={0x10f0, 0xee, 0x0, 0x1, [@generic="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", @generic="4f82100b33cae6b5e9399031f4cb1d6d682399b85bd3944ca49f1d51239b9bfd53296de901efbf1a7313b4bf793120bfe2a7501e92fc5215b6a015c91543629967ca789002ddf47f57a2f2b298acf5ae4bc310e20306f5f08e402d6c9ab1b32aa7dc528018a36267f80c8e535f64e89f948e7456d9089c7c7a4439900563be19918a1845063f76639a026c53a8e2f64de85b8c88b4b08ed3e34431d8cf969dc9f6e52ef10cb1d6ee0ee7d00cd201a32d3aeb41144d4c96e009e004d8f9e35264234ac8474d3d1e76", @nested={0x4, 0x51}, @nested={0x1c, 0xef, 0x0, 0x1, [@typed={0x4, 0x10a}, @typed={0xc, 0x27, 0x0, 0x0, @u64=0x2}, @typed={0x6, 0x11e, 0x0, 0x0, @str='!\x00'}]}, @nested={0x4, 0x101}]}, @typed={0x8, 0x9a, 0x0, 0x0, @pid}]}]}, 0x24dc}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x286}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1, 0x1}, 0x1) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000140)=0xfffffffe, 0x4) (async) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000140)=0xfffffffe, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, 0x2000, 0x1}) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, 0x2000, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {0x7, 0x0}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x100b, &(0x7f0000001e40)=""/4107, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000058020000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r12], 0x68}}, 0x0) sendmsg(r8, &(0x7f00000003c0)={&(0x7f0000000180)=@can={0x1d, r12}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="5b12283334fb5f30266e62c1f3ed958d374128c788c82abec647ce40e365a7bf362ca989a40c89db25c57bac8f42812d2c12542065f3abb139944230f8cfdd25a34bae355d3dc41ed83b4b3a66becc01df2847198adf52d1b7f8be5049bf52afe01d", 0x62}, {&(0x7f00000002c0)="6468467b576129174671446e03f9ff3a7499cd8ce6b5298fd105fd4bc9b447bd2ab34db5147f687ef60e8d5ef2efea964c5c3cea9a9b14656b84ecd2a069627ccf1de555069932d6a11d08e1a6b642cc6aa46b96a04957d0325541780ab2cf8e565e9f00cd4060dfe62d2851a1cead346be7b24071956548ddb5edf83df8e88aed53667bfa8d", 0x86}], 0x2, &(0x7f00000026c0)=[{0x34, 0x1, 0x7, "24e472bd2e6c75f1c861456bd89934f0245d2c0e9f31131d38e31b17c06b873c00c74913b2"}, {0xd4, 0x115, 0xc6a2, "89ec4ce8df2155e94dc5664cd5bb81c49be73f587e575962ffdbde75301518590c2e32fb5afc0e9ac9b3fb77719684f3fdd4067027208f64f541cc360917a77535f4b4ea0061de317c2029219f4cba9ec8d93b5bb34244d69f7b62b6ab6c7f3da0155e01a4db6540d5f57b9d30fcc28b9661d5ea04d4b318fd992da9af706b9dce1ebb319dd31af9697bde4a4812c7189e328d0a9ee8c10630d5285ac519e000cbdadd8d1cbc84f325b5761510007fd9f2340c5d1efdb9a7f1b6a4ca85733aafa652f7343d"}, {0x30, 0x6, 0x9, "698efd1ea4ed2906199872e70317f6757fdcec4de945ff56c4827d499e88efa4fb2279"}, {0x44, 0x117, 0x7, "834fa68a612aeb148cdec76feb4d321cbfbd5170267dbf48d6b6547d7bf0a01aabc5cfc482b1c39607fdf9fc0b502f42c53272e1f723fe94"}, {0xec, 0x119, 0x7, "f945e6eb6993a8684957edbd6b8bfc51e5e7599b9b73212c0a67d688a9054764c8662e0b5b6988c597653b922713ef40aeaf366ff283a5ef8a9a9d13ba9a756b48fcf1542dd7c92d1bcda2ddecfe60a82fbbe68e706b12bbe4e37fcde324c59f74f12fe4a3d179a1e2c041a46ef6e6accf09909cdfdad8e571cbb14f69c4ca247fe758e9429abc10eda33e3d12e1b4200f4e1411d7e407ddfc2991df34dafc81455540301b278694df48e503165299b73fcd4f0f418e624fb22553d8dce99f552f05da09a7b5fc386a8c3717cbcb78f5e40bd33fe0d90dc9d6affad8a09897ba"}, {0xb0, 0x101, 0x2, "0d581ec53f90388df3ef27b45e694264d4a4842066235f808129361bcd3a883c02394b4f2c652a0df80dc0a280785cf78d62da06922a166fd4a5837a957715582c3dd57fc0c828634e6d63d9c0e1289640190858280899bbde686b4c7fb38a534e998a2b31f95f45d1f8c554f85992100f6f13f516071d64b09b7971cdf0ed6004a9ee8271803e3cca6a405614be77823ca35b1a6265e96f1eee9e84b63e2647c02cec"}], 0x318}, 0x4000000) (async) sendmsg(r8, &(0x7f00000003c0)={&(0x7f0000000180)=@can={0x1d, r12}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="5b12283334fb5f30266e62c1f3ed958d374128c788c82abec647ce40e365a7bf362ca989a40c89db25c57bac8f42812d2c12542065f3abb139944230f8cfdd25a34bae355d3dc41ed83b4b3a66becc01df2847198adf52d1b7f8be5049bf52afe01d", 0x62}, {&(0x7f00000002c0)="6468467b576129174671446e03f9ff3a7499cd8ce6b5298fd105fd4bc9b447bd2ab34db5147f687ef60e8d5ef2efea964c5c3cea9a9b14656b84ecd2a069627ccf1de555069932d6a11d08e1a6b642cc6aa46b96a04957d0325541780ab2cf8e565e9f00cd4060dfe62d2851a1cead346be7b24071956548ddb5edf83df8e88aed53667bfa8d", 0x86}], 0x2, &(0x7f00000026c0)=[{0x34, 0x1, 0x7, "24e472bd2e6c75f1c861456bd89934f0245d2c0e9f31131d38e31b17c06b873c00c74913b2"}, {0xd4, 0x115, 0xc6a2, "89ec4ce8df2155e94dc5664cd5bb81c49be73f587e575962ffdbde75301518590c2e32fb5afc0e9ac9b3fb77719684f3fdd4067027208f64f541cc360917a77535f4b4ea0061de317c2029219f4cba9ec8d93b5bb34244d69f7b62b6ab6c7f3da0155e01a4db6540d5f57b9d30fcc28b9661d5ea04d4b318fd992da9af706b9dce1ebb319dd31af9697bde4a4812c7189e328d0a9ee8c10630d5285ac519e000cbdadd8d1cbc84f325b5761510007fd9f2340c5d1efdb9a7f1b6a4ca85733aafa652f7343d"}, {0x30, 0x6, 0x9, "698efd1ea4ed2906199872e70317f6757fdcec4de945ff56c4827d499e88efa4fb2279"}, {0x44, 0x117, 0x7, "834fa68a612aeb148cdec76feb4d321cbfbd5170267dbf48d6b6547d7bf0a01aabc5cfc482b1c39607fdf9fc0b502f42c53272e1f723fe94"}, {0xec, 0x119, 0x7, "f945e6eb6993a8684957edbd6b8bfc51e5e7599b9b73212c0a67d688a9054764c8662e0b5b6988c597653b922713ef40aeaf366ff283a5ef8a9a9d13ba9a756b48fcf1542dd7c92d1bcda2ddecfe60a82fbbe68e706b12bbe4e37fcde324c59f74f12fe4a3d179a1e2c041a46ef6e6accf09909cdfdad8e571cbb14f69c4ca247fe758e9429abc10eda33e3d12e1b4200f4e1411d7e407ddfc2991df34dafc81455540301b278694df48e503165299b73fcd4f0f418e624fb22553d8dce99f552f05da09a7b5fc386a8c3717cbcb78f5e40bd33fe0d90dc9d6affad8a09897ba"}, {0xb0, 0x101, 0x2, "0d581ec53f90388df3ef27b45e694264d4a4842066235f808129361bcd3a883c02394b4f2c652a0df80dc0a280785cf78d62da06922a166fd4a5837a957715582c3dd57fc0c828634e6d63d9c0e1289640190858280899bbde686b4c7fb38a534e998a2b31f95f45d1f8c554f85992100f6f13f516071d64b09b7971cdf0ed6004a9ee8271803e3cca6a405614be77823ca35b1a6265e96f1eee9e84b63e2647c02cec"}], 0x318}, 0x4000000) 4.116488603s ago: executing program 2 (id=639): r0 = syz_usb_connect$hid(0x0, 0xfffffffffffffdeb, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0xb}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x40, 0x29, 0x1}}]}}}]}}]}}, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000002"], 0xfe44, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x1, 0x104) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x8040) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc10c5541, &(0x7f0000000340)) recvmmsg(r4, 0x0, 0x0, 0x1, &(0x7f0000001f40)={0x77359400}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x4, 0x19305490181193e1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000040)=0x5fc1) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001f80)=@newqdisc={0x344, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x4000000, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffe0}, {0x0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x81, 0x81, 0x2, 0x7685, 0x0, 0x2}}, {0x8, 0x2, [0x4, 0x6]}}, {{0x1c, 0x1, {0x9, 0x32, 0x8, 0xc, 0x0, 0x81, 0x237, 0xa}}, {0x18, 0x2, [0x1, 0x7, 0x81, 0xb, 0x20, 0x5, 0x3ff, 0x6, 0x8, 0x3]}}, {{0x1c, 0x1, {0xfa, 0x5, 0x27, 0x2, 0x1, 0x9, 0x4, 0x2}}, {0x8, 0x2, [0x8, 0x6]}}, {{0x1c, 0x1, {0x1e, 0x7, 0x3, 0x2, 0x2, 0xfffffffd, 0x1, 0x8}}, {0x14, 0x2, [0x3, 0xfff, 0x9, 0x8, 0x401, 0x4, 0x6, 0x2]}}, {{0x1c, 0x1, {0x0, 0x2, 0x4, 0x8, 0x1, 0x900, 0x3, 0x1}}, {0x6, 0x2, [0xa21f]}}, {{0x1c, 0x1, {0x5, 0x5d, 0x1, 0x10, 0x2, 0x800, 0x401, 0x2}}, {0x8, 0x2, [0x0, 0x8]}}, {{0x1c, 0x1, {0x40, 0x1, 0xfec4, 0x8001, 0x1, 0x8, 0x8000, 0x4}}, {0xc, 0x2, [0xe2e, 0x3ff, 0x8, 0x100]}}, {{0x1c, 0x1, {0x4, 0x0, 0x1d, 0x1, 0x2, 0x379, 0x4, 0x9}}, {0x16, 0x2, [0x3, 0x5, 0xa7, 0xb6, 0xfe6a, 0x56, 0x9, 0xfffe, 0x4]}}]}, @TCA_STAB={0x138, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfc, 0x4, 0xc73, 0x5, 0x0, 0x0, 0x101, 0x5}}, {0xe, 0x2, [0xfff7, 0xd3, 0x92c, 0x4fa5, 0x2d86]}}, {{0x1c, 0x1, {0x1, 0x6, 0x8, 0x596, 0x1, 0x2, 0x403, 0xa}}, {0x18, 0x2, [0x8001, 0x74, 0x20d, 0x7f, 0x3, 0xf8f4, 0x673, 0x824, 0x2, 0x4]}}, {{0x1c, 0x1, {0xff, 0xac, 0xfffa, 0x8, 0x2, 0xb, 0x100}}, {0x4}}, {{0x1c, 0x1, {0xff, 0x24, 0x1, 0xbe55, 0x2, 0x2fd, 0x4, 0xa}}, {0x18, 0x2, [0x0, 0x800, 0xcae4, 0x9, 0x4, 0x40, 0x3, 0x1, 0x30, 0x10]}}, {{0x1c, 0x1, {0x1a, 0x7, 0x1, 0x3, 0x0, 0x4, 0x2277, 0x4}}, {0xc, 0x2, [0x1, 0xfffd, 0xa17, 0x7]}}, {{0x1c, 0x1, {0x9, 0x6, 0x4, 0xfffffff8, 0x1, 0xffffffff, 0x18e5, 0x7}}, {0x12, 0x2, [0xee7, 0xff00, 0x4, 0x0, 0x9, 0x4, 0x37a]}}, {{0x1c, 0x1, {0x2, 0x2, 0xd, 0x7, 0x0, 0x6c, 0x5, 0x3}}, {0xa, 0x2, [0x7, 0x4, 0x1af]}}]}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa3, 0x9, 0xb, 0x0, 0x2, 0x1ff, 0x6, 0x5}}, {0xe, 0x2, [0x0, 0xfffe, 0x762, 0x8, 0x1]}}, {{0x1c, 0x1, {0x7, 0x1, 0x4, 0xe8, 0x1, 0x7, 0xc0c, 0x7}}, {0x12, 0x2, [0x5, 0xffff, 0x7ff, 0xe71f, 0x0, 0x0, 0x2]}}, {{0x1c, 0x1, {0x2, 0xc, 0x5, 0x3, 0x0, 0x9, 0x7, 0x2}}, {0x8, 0x2, [0x401, 0x6]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x344}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pwritev2(r3, &(0x7f00000013c0)=[{&(0x7f00000000c0)="d0", 0x1}, {0x0, 0x30}], 0x2, 0x0, 0x7, 0x5) renameat(r2, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r2, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000007c0)=ANY=[@ANYBLOB="33486df260ec100000000000000000000000005a11bda4ebf8ae3fe776feea43c05d27168af7f14e689c5fa6cd6c076dc928f2709d07d14fd58817d1375512c0f3d829f937131794b457191d239ee85dd71056a2d783a591d3e4d2c7d44a086534fc075e7331dc1521818e5af8c965f579944bf0db8d118db2c4d6e4eeb75ef5bf1ae5520eda4406d787e7426123cf5b441a0c843ad381e36f215882d2a829d9679d7fe56c"]) syz_usb_control_io$hid(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz0\x00', {0x8b8, 0x7fff, 0x6, 0x1}, 0x8, [0x2, 0x9, 0x1c, 0x401, 0x2, 0x5, 0x51c2, 0x5, 0x2, 0x100, 0x2, 0x8, 0x5, 0x0, 0x5, 0x8, 0x804d470, 0x3, 0xb, 0x4, 0x4, 0x81, 0x833, 0x3ff, 0x8, 0x400, 0x2, 0x7, 0x10001, 0x0, 0x4, 0xacd, 0xe1fd, 0x8, 0x6, 0x7d, 0xe7d, 0x0, 0xb5, 0x4, 0x1c, 0x59, 0x2, 0x8, 0x7, 0x10000, 0x6, 0xfffffc67, 0x2, 0xe37, 0x6, 0x3, 0xfffffffa, 0x7fffffff, 0x5, 0xfffffff8, 0x2, 0x7, 0x7, 0x800, 0x6, 0x3, 0x5, 0x1], [0x1, 0x1, 0x3, 0x1, 0xffffff22, 0x9, 0x1, 0x3f5, 0x2, 0x3, 0x162885c1, 0x81, 0xd, 0xfffffff9, 0x61af, 0x7, 0xfffffffd, 0x1, 0xac, 0x100, 0x1, 0xffff5487, 0x5, 0x6, 0x101, 0x6, 0xcbd8, 0x2, 0x3, 0x6, 0x7, 0x6, 0x153, 0x1, 0xffffff50, 0x4, 0x5, 0x5, 0x11, 0x1, 0x9c8, 0x1000, 0x9, 0x400, 0xd, 0x0, 0x7, 0x400, 0x6, 0x7, 0x8f1, 0xe, 0x53cb, 0xffffff00, 0x80000000, 0x3, 0xfffffffc, 0xc49, 0x2, 0x7, 0x3, 0x6, 0x1, 0x9], [0xa00000, 0x6, 0x401, 0x9, 0x7, 0x9, 0x3, 0x2726, 0x7fff, 0x200, 0xa, 0xbc, 0x8, 0x4, 0x3, 0x8, 0x2, 0x9, 0x2, 0x5e3e, 0x6, 0x2, 0x81, 0x8, 0xfffffff9, 0x401, 0x140, 0x4, 0x81, 0xe8, 0x9, 0xfff, 0x9, 0x7, 0x0, 0x9, 0x26e, 0x8000, 0x7fff, 0x8, 0xa630, 0x2, 0x80, 0x7ff, 0xad42, 0x0, 0x2, 0x4, 0xffffffff, 0x7fff, 0x2, 0x8, 0x40, 0x59b, 0x4, 0xa, 0x7, 0x5, 0x10000, 0x5, 0xf, 0x8, 0x5], [0x2, 0x7, 0x8, 0xd1f, 0xfffffffe, 0x4, 0x178, 0x3, 0x1, 0x6, 0x9, 0x8, 0xb, 0x3ff, 0x8, 0x1, 0x3, 0x300000, 0xc, 0x5, 0x4b2a, 0x1000, 0x4, 0x2, 0xffffe565, 0x80000001, 0x8, 0x2, 0x2, 0x3, 0x1f0f6ebe, 0x8, 0x5, 0x7, 0x4, 0x2f9, 0x0, 0x5, 0x1, 0x8, 0xf5, 0x8, 0x5, 0xb7b8, 0x1, 0x3, 0x0, 0x9, 0x34, 0xfffffffb, 0x9, 0x2, 0x8, 0x5, 0xa2d4aa8a, 0xff, 0xffff341d, 0xedff, 0x7, 0x8, 0x8, 0x1, 0x5, 0x7ff]}, 0x45c) syz_usb_control_io(r0, &(0x7f00000001c0)={0xffffffffffffffeb, &(0x7f0000000000)=ANY=[@ANYBLOB="9248"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.699571622s ago: executing program 3 (id=640): r0 = io_uring_setup(0x57a3, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x4000, 0x1e4}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4}) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e}) close_range(r0, 0xffffffffffffffff, 0x0) 3.481033819s ago: executing program 3 (id=641): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4000) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)="363c8f3fca5d66571e583e7c88a8651088", 0x11, 0x48000, 0x0, 0x0) 3.455131869s ago: executing program 3 (id=642): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f4, 0x0, 0x40, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000180)="363c8f3fca5d66571e583e7c88a8651088a8", 0x12, 0x48000, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="e2b2c612e1be"}, 0x14) 3.387464453s ago: executing program 3 (id=643): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="ae62a7", 0x3) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1, 0x8, 0x1, 0x0, 0x6, 0x400, 0x3, 0x1}, &(0x7f0000000180)={0x100000001, 0xca72, 0x7, 0xffff, 0x8, 0x11, 0x100000001, 0x100000000}, &(0x7f0000000240)={0x3, 0x6, 0xce, 0x8000, 0x8000000000000000, 0x1, 0x3, 0x8}, &(0x7f0000000300)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000340)={[0x8001, 0x16c8000]}, 0x8}) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xa, "ff00f7000000000000000000af88008300"}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r6, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) r7 = syz_open_pts(r5, 0x141601) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) 2.86431547s ago: executing program 0 (id=644): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="ae62a7", 0x3) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1, 0x8, 0x1, 0x0, 0x6, 0x400, 0x3, 0x1}, &(0x7f0000000180)={0x100000001, 0xca72, 0x7, 0xffff, 0x8, 0x11, 0x100000001, 0x100000000}, &(0x7f0000000240)={0x3, 0x6, 0xce, 0x8000, 0x8000000000000000, 0x1, 0x3, 0x8}, &(0x7f0000000300)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000340)={[0x8001, 0x16c8000]}, 0x8}) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xa, "ff00f7000000000000000000af88008300"}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r6, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) r7 = syz_open_pts(r5, 0x141601) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) 2.415202265s ago: executing program 4 (id=645): syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40000000}) openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc00c6419, &(0x7f0000000580)={0x4, &(0x7f0000000040)=""/2, &(0x7f0000000540)=[{0x6, 0xc4, 0x3, &(0x7f0000000380)=""/196}, {0x2, 0x8b, 0x10001, &(0x7f0000000200)=""/139}, {0x9, 0x11, 0x7, &(0x7f0000000480)=""/17}, {0x8, 0x7c, 0x9, &(0x7f00000004c0)=""/124}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000080)=ANY=[@ANYBLOB="00cf"]) write$6lowpan_enable(r3, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r5 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x24, 0x18, 0x8000010, 0x16, 0x4, 0x8000, 0x4}}) syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 1.436745107s ago: executing program 4 (id=646): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0004200000000000000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x232) 1.300235163s ago: executing program 4 (id=647): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f00000000000000084f844a69e9", 0x0, 0x200}, 0x3c) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x1, 0x97, 0xca, 0x10, 0xc88, 0x21, 0x1947, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x8, 0x40, 0x3, [{{0x9, 0x4, 0xa0, 0x4, 0x0, 0x3a, 0xd0, 0x94, 0xc}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x5, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r7, &(0x7f0000003800)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r6, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$inet(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}}, 0x24}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYBLOB="f7", @ANYRESDEC], 0x0) 1.29435622s ago: executing program 1 (id=648): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.229489525s ago: executing program 1 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff02000000000000000000224e0000014e224e21009c9078"], 0xd2) 1.116900142s ago: executing program 1 (id=650): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigaction(0x11, 0x0, 0x0, 0x8, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002700)='net/ip_mr_cache\x00') pread64(r2, &(0x7f0000000000)=""/12, 0xfffffc64, 0x6) 988.727405ms ago: executing program 2 (id=651): r0 = io_uring_setup(0x57a3, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x4000, 0x1e4}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4}) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e}) close_range(r0, 0xffffffffffffffff, 0x0) 916.929909ms ago: executing program 2 (id=652): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x4000) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)="363c8f3fca5d66571e583e7c88a8651088", 0x11, 0x48000, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="e2b2c612e1be"}, 0x14) 834.751658ms ago: executing program 2 (id=653): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f4, 0x0, 0x40, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)="363c8f3fca5d66571e583e7c88a8651088a8", 0x12, 0x48000, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="e2b2c612e1be"}, 0x14) 738.925103ms ago: executing program 2 (id=654): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x4000) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)="363c8f3fca5d66571e583e7c88a8651088", 0x11, 0x48000, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="e2b2c612e1be"}, 0x14) (fail_nth: 1) 340.599232ms ago: executing program 2 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000020101080000000000000000020000090800154000000003080008400000044aa236521c51b4d1ba93d326a10009"], 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x20000080) openat$tun(0xffffffffffffff9c, 0x0, 0x440261, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_io_uring_setup(0x4670, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r4, 0x0, 0x0, r4}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x10) 38.601262ms ago: executing program 3 (id=656): r0 = openat$nvram(0xffffff9c, &(0x7f0000000080), 0x82, 0x0) close_range(0xffffffffffffffff, r0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@fallback, 0xffffffffffffffff, 0x9, 0x2000, 0xffffffffffffffff, @value}, 0x20) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @private=0xa010302}, {0x306}, 0x10, {0x2, 0x4e1e, @multicast1}, 'pimreg0\x00'}) 0s ago: executing program 1 (id=657): mmap(&(0x7f00007e3000/0x4000)=nil, 0x4000, 0x2, 0x20010, 0xffffffffffffffff, 0xf582c000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r4, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f0000000040)={0x0, 0x32315842, 0x780, 0x438, 0x0, @discrete={0x6, 0x1044b873}}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r9, r8) setsockopt$sock_attach_bpf(r8, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r8, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) recvmsg(r8, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000000480)=""/252, 0xfc}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/189, 0xbd}, {&(0x7f00000002c0)=""/2, 0x2}], 0x6, &(0x7f0000000400)=""/10, 0xa}, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="0500000000000000bc100800000000000fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x700, 0x7800, 0x7, 0xde, {{0x13, 0x4, 0x3, 0x21, 0x4c, 0x65, 0x0, 0x2, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x12, 0x1, 0xf, [{@loopback, 0x3}]}, @cipso={0x86, 0xc, 0x2, [{0x2, 0x6, "98581dea"}]}, @rr={0x7, 0xb, 0x12, [@empty, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0x39, 0x3, 0x4, [{@empty, 0x2}]}, @generic={0x7, 0x7, "49e19ddd24"}, @end]}}}}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r12, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) kernel console output (not intermixed with test programs): r 10 using dummy_hcd [ 151.748138][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 151.765204][ T10] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 151.794192][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.830660][ T10] usb 3-1: config 0 descriptor?? [ 151.887932][ T5847] usb 4-1: config 0 has no interfaces? [ 151.937152][ T5847] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 152.012481][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.059286][ T5848] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 152.069369][ T5847] usb 4-1: Product: syz [ 152.073696][ T5847] usb 4-1: Manufacturer: syz [ 152.081117][ T6579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.102314][ T5847] usb 4-1: SerialNumber: syz [ 152.110734][ T6579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.140922][ T5847] usb 4-1: config 0 descriptor?? [ 152.208728][ T6597] loop2: detected capacity change from 0 to 5 [ 152.245004][ T6597] Dev loop2: unable to read RDB block 5 [ 152.253490][ T6597] loop2: AHDI p2 p3 [ 152.260956][ T6597] loop2: partition table partially beyond EOD, truncated [ 152.275432][ T5848] usb 1-1: config 0 has no interfaces? [ 152.295755][ T6597] loop2: p2 size 1701016946 extends beyond EOD, truncated [ 152.306763][ T5848] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 152.316321][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.337279][ T5848] usb 1-1: Product: syz [ 152.342343][ T5848] usb 1-1: Manufacturer: syz [ 152.347206][ T5848] usb 1-1: SerialNumber: syz [ 152.364150][ T10] nti 0003:0757:0A00.0001: reserved main item tag 0xd [ 152.377921][ T10] nti 0003:0757:0A00.0001: unexpected long global item [ 152.387142][ T5848] usb 1-1: config 0 descriptor?? [ 152.403165][ T10] nti 0003:0757:0A00.0001: probe with driver nti failed with error -22 [ 152.533720][ T6538] udevd[6538]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 152.563421][ T10] usb 3-1: USB disconnect, device number 8 [ 153.867647][ T5903] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 153.987536][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.117879][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 154.133577][ T5903] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.146984][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 154.160953][ T10] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.478289][ T5847] usb 4-1: USB disconnect, device number 10 [ 154.484276][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 154.491139][ T5903] usb 2-1: config 1 interface 0 has no altsetting 0 [ 154.536317][ T10] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 154.550220][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.565504][ T10] usb 3-1: Product: syz [ 154.573421][ T10] usb 3-1: Manufacturer: syz [ 154.593720][ T5903] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 154.604132][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.616923][ T10] usb 3-1: SerialNumber: syz [ 154.630175][ T5903] usb 2-1: Product: syz [ 154.659636][ T5903] usb 2-1: Manufacturer: syz [ 154.686736][ T5903] usb 2-1: SerialNumber: syz [ 154.860623][ T5848] usb 1-1: USB disconnect, device number 9 [ 155.252524][ T6612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.261428][ T6612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.379506][ T6607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.440843][ T6607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.763599][ T6628] loop2: detected capacity change from 0 to 7 [ 155.790146][ T6628] Dev loop2: unable to read RDB block 7 [ 155.832666][ T6628] loop2: unable to read partition table [ 155.853759][ T6628] loop2: partition table beyond EOD, truncated [ 155.887489][ T6628] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 156.052711][ T5843] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 156.084259][ T5213] Dev loop2: unable to read RDB block 7 [ 156.092328][ T5213] loop2: unable to read partition table [ 156.148175][ T5213] loop2: partition table beyond EOD, truncated [ 156.355210][ T6617] input: syz0 as /devices/virtual/input/input15 [ 156.395014][ T5843] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 156.473765][ T5843] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 156.611837][ T5903] usbhid 2-1:1.0: can't add hid device: -71 [ 156.620361][ T6617] syz.4.196: attempt to access beyond end of device [ 156.620361][ T6617] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 156.643491][ T5903] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 156.659126][ T5843] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 156.728596][ T5903] usb 2-1: USB disconnect, device number 9 [ 156.781905][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.113675][ T6641] FAULT_INJECTION: forcing a failure. [ 157.113675][ T6641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.209901][ T6641] CPU: 1 UID: 0 PID: 6641 Comm: syz.1.203 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 157.209932][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.209946][ T6641] Call Trace: [ 157.209954][ T6641] [ 157.209963][ T6641] dump_stack_lvl+0x241/0x360 [ 157.210000][ T6641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.210031][ T6641] ? __pfx__printk+0x10/0x10 [ 157.210073][ T6641] should_fail_ex+0x424/0x570 [ 157.210100][ T6641] _copy_from_user+0x2d/0xb0 [ 157.210130][ T6641] snd_seq_oss_write+0x5dc/0xc10 [ 157.210175][ T6641] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 157.210202][ T6641] ? end_current_label_crit_section+0x151/0x180 [ 157.210233][ T6641] ? common_file_perm+0x1a6/0x210 [ 157.210268][ T6641] ? bpf_lsm_file_permission+0x9/0x10 [ 157.210295][ T6641] odev_write+0x5b/0x80 [ 157.210316][ T6641] ? __pfx_odev_write+0x10/0x10 [ 157.210338][ T6641] vfs_write+0x2bc/0xd10 [ 157.210364][ T6641] ? __pfx_vfs_write+0x10/0x10 [ 157.210386][ T6641] ? __fget_files+0x2a/0x420 [ 157.210405][ T6641] ? __fget_files+0x2a/0x420 [ 157.210426][ T6641] ? __fget_files+0x39d/0x420 [ 157.210442][ T6641] ? __fget_files+0x2a/0x420 [ 157.210469][ T6641] ksys_write+0x19d/0x2d0 [ 157.210493][ T6641] ? __pfx_ksys_write+0x10/0x10 [ 157.210512][ T6641] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 157.210530][ T6641] ? lockdep_hardirqs_on+0x9d/0x150 [ 157.210559][ T6641] __do_fast_syscall_32+0xb4/0x110 [ 157.210585][ T6641] ? exc_page_fault+0x5f8/0x920 [ 157.210613][ T6641] do_fast_syscall_32+0x34/0x80 [ 157.210639][ T6641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.210657][ T6641] RIP: 0023:0xf7f23579 [ 157.210670][ T6641] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 157.210682][ T6641] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 157.210705][ T6641] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 157.210720][ T6641] RDX: 0000000000000232 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.210733][ T6641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.210744][ T6641] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 157.210756][ T6641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.210786][ T6641] [ 157.449353][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.808824][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 157.835517][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 157.932499][ T10] usb 3-1: USB disconnect, device number 9 [ 158.309666][ T5847] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 158.527886][ T5847] usb 2-1: Using ep0 maxpacket: 8 [ 158.535539][ T5847] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 158.557173][ T5847] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 158.579782][ T5847] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 158.615891][ T6661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.627536][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 158.629125][ T6661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.669622][ T5847] usb 2-1: string descriptor 0 read error: -71 [ 158.677690][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 158.691574][ T5847] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.713378][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.741226][ T5847] usb 2-1: can't set config #1, error -71 [ 158.750894][ T5847] usb 2-1: USB disconnect, device number 10 [ 158.797645][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 158.814736][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 158.824739][ T10] usb 3-1: config 0 has no interface number 0 [ 158.835419][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 158.838268][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 158.846088][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.872751][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 158.890207][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.900715][ T10] usb 3-1: Product: syz [ 158.901173][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.912113][ T10] usb 3-1: Manufacturer: syz [ 158.919415][ T24] usb 5-1: Product: syz [ 158.923842][ T24] usb 5-1: Manufacturer: syz [ 158.923860][ T10] usb 3-1: SerialNumber: syz [ 158.933538][ T24] usb 5-1: SerialNumber: syz [ 158.952810][ T10] usb 3-1: config 0 descriptor?? [ 158.962174][ T24] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 158.994243][ T10] smsc95xx v2.0.0 [ 158.998290][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 159.009245][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 159.202075][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.212836][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.152439][ T6666] input: syz0 as /devices/virtual/input/input16 [ 160.244451][ T5898] usb 1-1: USB disconnect, device number 10 [ 160.477588][ T6670] syz.1.210: attempt to access beyond end of device [ 160.477588][ T6670] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 161.342738][ T10] usb 5-1: USB disconnect, device number 13 [ 161.444276][ T5847] usb 3-1: USB disconnect, device number 10 [ 161.557988][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 161.594948][ T6678] vlan2: entered promiscuous mode [ 161.622125][ T6678] vlan1: entered promiscuous mode [ 161.641183][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 162.228216][ T5847] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 162.325878][ T6697] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 162.506722][ T5847] usb 1-1: config 0 has no interfaces? [ 162.528317][ T6700] pim6reg: entered allmulticast mode [ 162.550575][ T5847] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 162.581809][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.591582][ T5847] usb 1-1: Product: syz [ 162.595825][ T5847] usb 1-1: Manufacturer: syz [ 162.613888][ T6702] pim6reg: left allmulticast mode [ 162.619673][ T5847] usb 1-1: SerialNumber: syz [ 162.637298][ T5847] usb 1-1: config 0 descriptor?? [ 163.037607][ T5847] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 163.047668][ T5903] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 163.209076][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 163.219118][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 163.259909][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.518219][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 163.749245][ T5847] usb 4-1: config 0 has no interfaces? [ 163.827585][ T5903] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 163.845124][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.855190][ T5847] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 163.864699][ T5903] usb 3-1: Product: syz [ 163.869123][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.899355][ T5903] usb 3-1: Manufacturer: syz [ 163.926602][ T5847] usb 4-1: Product: syz [ 163.955782][ T5903] usb 3-1: SerialNumber: syz [ 163.965286][ T5847] usb 4-1: Manufacturer: syz [ 164.012773][ T5903] usb 3-1: config 0 descriptor?? [ 164.035690][ T5847] usb 4-1: SerialNumber: syz [ 164.062702][ T5847] usb 4-1: config 0 descriptor?? [ 165.084189][ T6707] bridge1: entered promiscuous mode [ 165.089634][ T6707] bridge1: entered allmulticast mode [ 165.679294][ T6723] input: syz0 as /devices/virtual/input/input18 [ 165.811561][ T6723] syz.4.226: attempt to access beyond end of device [ 165.811561][ T6723] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 165.848674][ T5847] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 165.869857][ T5903] usb 3-1: USB disconnect, device number 11 [ 166.017517][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 166.029079][ T5847] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 166.038909][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.071263][ T5847] usb 2-1: Product: syz [ 166.087705][ T5848] usb 1-1: USB disconnect, device number 11 [ 166.228385][ T5847] usb 2-1: Manufacturer: syz [ 166.235113][ T5847] usb 2-1: SerialNumber: syz [ 166.273494][ T10] usb 4-1: USB disconnect, device number 11 [ 166.296599][ T5847] usb 2-1: config 0 descriptor?? [ 166.477692][ T5903] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 166.655164][ T5903] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 166.676568][ T5903] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 166.700565][ T5903] usb 3-1: config 220 has no interface number 2 [ 166.707591][ T5848] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 166.718674][ T5903] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 166.737966][ T5903] usb 3-1: config 220 interface 0 has no altsetting 0 [ 166.748736][ T5903] usb 3-1: config 220 interface 76 has no altsetting 0 [ 166.755855][ T5903] usb 3-1: config 220 interface 1 has no altsetting 0 [ 166.774179][ T5903] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 166.788431][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.806962][ T5903] usb 3-1: Product: syz [ 166.819832][ T5903] usb 3-1: Manufacturer: syz [ 166.830233][ T5903] usb 3-1: SerialNumber: syz [ 166.841024][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'. [ 166.852626][ T5847] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 166.878363][ T5847] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 166.899907][ T5848] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.917787][ T5848] usb 1-1: config 0 has no interface number 0 [ 166.928009][ T5848] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 166.951409][ T5848] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 166.977617][ T5848] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.987034][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.017946][ T5848] usb 1-1: config 0 descriptor?? [ 167.024594][ T6728] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.080518][ T5848] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 167.267086][ T24] usb 1-1: USB disconnect, device number 12 [ 167.325052][ T5847] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 167.368162][ T5903] usb 3-1: selecting invalid altsetting 0 [ 167.387098][ T5903] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 167.402077][ T5903] usb 3-1: No valid video chain found. [ 167.425831][ T5847] usb 2-1: USB disconnect, device number 11 [ 167.475593][ T5903] usb 3-1: selecting invalid altsetting 0 [ 167.523900][ T5903] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 167.545425][ T5903] usb 3-1: USB disconnect, device number 12 [ 167.588391][ T6755] loop2: detected capacity change from 0 to 7 [ 167.623603][ T6755] Dev loop2: unable to read RDB block 7 [ 167.649657][ T6755] loop2: unable to read partition table [ 167.678683][ T6755] loop2: partition table beyond EOD, truncated [ 167.710585][ T6755] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 167.879377][ T5213] Dev loop2: unable to read RDB block 7 [ 167.885038][ T5213] loop2: unable to read partition table [ 167.907688][ T5213] loop2: partition table beyond EOD, truncated [ 168.451188][ T5903] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 168.614813][ T5903] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 168.672612][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.717536][ T5903] usb 1-1: Product: syz [ 168.721867][ T5903] usb 1-1: Manufacturer: syz [ 168.767521][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 168.787491][ T5903] usb 1-1: SerialNumber: syz [ 168.833172][ T5903] usb 1-1: config 0 descriptor?? [ 168.845384][ T5903] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 169.215602][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 169.259657][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 169.274231][ T24] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.292256][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 169.326596][ T24] usb 2-1: string descriptor 0 read error: -22 [ 169.333307][ T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 169.357739][ T30] audit: type=1326 audit(1744090270.014:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.0.242" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7fde0000 [ 169.383149][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.666300][ T5903] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 169.751739][ T5903] sq905c 1-1:0.0: Reading version command failed [ 169.796402][ T5903] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 170.287568][ T6781] process 'syz.1.243' launched './file1' with NULL argv: empty string added [ 170.608292][ T6811] vivid-000: disconnect [ 170.726887][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 170.900089][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.911666][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 170.922514][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.936535][ T10] usb 4-1: config 0 descriptor?? [ 171.183030][ T6809] netlink: 40 bytes leftover after parsing attributes in process `syz.3.252'. [ 171.212564][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 171.220357][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 171.277775][ T10] usb 4-1: USB disconnect, device number 12 [ 171.498558][ T6808] vivid-000: reconnect [ 171.606299][ T5898] usb 1-1: USB disconnect, device number 13 [ 171.621195][ T24] usbhid 2-1:1.0: can't add hid device: -71 [ 171.652626][ T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 171.716803][ T24] usb 2-1: USB disconnect, device number 12 [ 171.768542][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 171.960103][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 171.997148][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.026217][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 172.064126][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.125044][ T10] usb 4-1: config 0 descriptor?? [ 172.404250][ T6819] bond0: entered promiscuous mode [ 172.430875][ T6819] bond_slave_0: entered promiscuous mode [ 172.460436][ T6819] bond_slave_1: entered promiscuous mode [ 172.477337][ T6819] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 172.549144][ T6822] loop2: detected capacity change from 0 to 7 [ 172.574147][ T10] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 172.597104][ T6822] Dev loop2: unable to read RDB block 7 [ 172.609963][ T6819] bond0: left promiscuous mode [ 172.615824][ T6822] loop2: unable to read partition table [ 172.627540][ T6822] loop2: partition table beyond EOD, truncated [ 172.634233][ T6822] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 172.644542][ T6819] bond_slave_0: left promiscuous mode [ 172.657794][ T6819] bond_slave_1: left promiscuous mode [ 172.962702][ T5847] usb 4-1: USB disconnect, device number 13 [ 173.399215][ T6840] netlink: 'syz.1.260': attribute type 10 has an invalid length. [ 173.407211][ T6840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.260'. [ 174.168782][ T6849] netlink: 'syz.3.262': attribute type 11 has an invalid length. [ 174.256711][ T6840] batman_adv: batadv0: Adding interface: virt_wifi0 [ 174.269333][ T6840] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.295636][ T6840] batman_adv: batadv0: Interface activated: virt_wifi0 [ 174.367814][ T6831] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 175.287625][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 175.383215][ T6877] batadv1: entered promiscuous mode [ 175.490545][ T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 175.507548][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.515763][ T10] usb 2-1: Product: syz [ 175.521899][ T10] usb 2-1: Manufacturer: syz [ 175.526788][ T10] usb 2-1: SerialNumber: syz [ 175.544592][ T10] usb 2-1: config 0 descriptor?? [ 176.184474][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 176.421021][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 176.463608][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.527180][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 176.554041][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 176.634627][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.710138][ T24] usb 1-1: config 0 descriptor?? [ 177.516309][ T10] usb-storage 2-1:0.0: USB Mass Storage device detected [ 177.615421][ T10] usb 2-1: USB disconnect, device number 13 [ 177.736546][ T6926] xt_connbytes: Forcing CT accounting to be enabled [ 177.746294][ T6926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.345281][ T5898] usb 1-1: USB disconnect, device number 14 [ 178.494661][ T6935] loop2: detected capacity change from 0 to 7 [ 178.515433][ T30] audit: type=1326 audit(1744090279.184:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.1.274" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x0 [ 178.555265][ T5864] Dev loop2: unable to read RDB block 7 [ 178.575186][ T5864] loop2: unable to read partition table [ 178.593564][ T5864] loop2: partition table beyond EOD, truncated [ 178.736697][ T6935] Dev loop2: unable to read RDB block 7 [ 178.776622][ T6935] loop2: unable to read partition table [ 178.823303][ T6935] loop2: partition table beyond EOD, truncated [ 178.866628][ T6956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.880146][ T6935] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 178.967832][ T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 179.003746][ T5213] Dev loop2: unable to read RDB block 7 [ 179.019856][ T5213] loop2: unable to read partition table [ 179.032367][ T5213] loop2: partition table beyond EOD, truncated [ 179.100472][ T6956] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 179.142370][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.162321][ T30] audit: type=1326 audit(1744090279.834:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 179.203359][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 179.234495][ T10] usb 4-1: config 12 interface 0 altsetting 4 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 179.277863][ T10] usb 4-1: config 12 interface 0 has no altsetting 0 [ 179.284835][ T30] audit: type=1326 audit(1744090279.864:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 179.330632][ T10] usb 4-1: New USB device found, idVendor=eb1a, idProduct=5051, bcdDevice=d0.01 [ 179.447369][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.467828][ T30] audit: type=1326 audit(1744090279.864:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 179.511321][ T10] usb 4-1: Product: syz [ 179.515564][ T10] usb 4-1: Manufacturer: syz [ 179.556482][ T10] usb 4-1: SerialNumber: syz [ 179.642864][ T30] audit: type=1326 audit(1744090279.884:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 179.752358][ T5213] Dev loop2: unable to read RDB block 7 [ 179.797495][ T5213] loop2: unable to read partition table [ 179.803435][ T5213] loop2: partition table beyond EOD, truncated [ 179.803985][ T30] audit: type=1326 audit(1744090279.884:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=235 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 179.994232][ T30] audit: type=1326 audit(1744090279.884:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 180.122453][ T10] usb 4-1: USB disconnect, device number 14 [ 180.767776][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 180.999418][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.067496][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 181.099585][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 181.148511][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 181.187618][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 181.244229][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 181.264143][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.292300][ T10] usb 2-1: Product: syz [ 181.304832][ T10] usb 2-1: Manufacturer: syz [ 181.347699][ T10] usb 2-1: SerialNumber: syz [ 181.382950][ T10] usb 2-1: config 0 descriptor?? [ 181.431214][ T10] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 181.458270][ T10] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 181.512882][ T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 181.647371][ T10] usb 2-1: USB disconnect, device number 14 [ 181.694798][ T10] garmin_gps 2-1:0.0: device disconnected [ 181.965592][ T7025] netlink: 'syz.3.287': attribute type 1 has an invalid length. [ 182.337515][ T5898] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 182.503450][ T5898] usb 5-1: config 0 has no interfaces? [ 182.515623][ T5898] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 182.525806][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.595462][ T5898] usb 5-1: Product: syz [ 182.631102][ T5898] usb 5-1: Manufacturer: syz [ 182.680178][ T5898] usb 5-1: SerialNumber: syz [ 182.774853][ T5898] usb 5-1: config 0 descriptor?? [ 183.757551][ T5843] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 183.921082][ T5843] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.989108][ T5843] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 183.999541][ T5898] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 184.041398][ T5843] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.077011][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.108108][ T5843] usb 3-1: Product: syz [ 184.128177][ T5843] usb 3-1: Manufacturer: syz [ 184.151504][ T5843] usb 3-1: SerialNumber: syz [ 184.184355][ T5898] usb 2-1: not running at top speed; connect to a high speed hub [ 184.264583][ T5898] usb 2-1: config 4 has an invalid interface number: 250 but max is 1 [ 184.301956][ T5843] cdc_mbim 3-1:1.0: skipping garbage [ 184.317453][ T5898] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 184.348270][ T5898] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 184.452019][ T5898] usb 2-1: config 4 has an invalid interface number: 11 but max is 1 [ 184.487238][ T7067] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.533825][ T5898] usb 2-1: config 4 has an invalid interface number: 249 but max is 1 [ 184.649322][ T5898] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 184.738251][ T5898] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 184.828793][ T5843] cdc_mbim 3-1:1.0: bind() failure [ 184.844345][ T5898] usb 2-1: config 4 has 3 interfaces, different from the descriptor's value: 2 [ 184.870931][ T5843] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 184.894739][ T5898] usb 2-1: config 4 has no interface number 0 [ 184.908005][ T5843] cdc_ncm 3-1:1.1: bind() failure [ 184.931307][ T5898] usb 2-1: config 4 has no interface number 1 [ 184.963705][ T5843] usb 3-1: USB disconnect, device number 13 [ 184.976569][ T5898] usb 2-1: config 4 has no interface number 2 [ 185.013335][ T5898] usb 2-1: config 4 interface 250 altsetting 1 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 185.095948][ T5898] usb 2-1: config 4 interface 250 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 185.127351][ T5898] usb 2-1: config 4 interface 250 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 185.177471][ T5898] usb 2-1: config 4 interface 250 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 185.224174][ T5898] usb 2-1: config 4 interface 250 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 185.265721][ T5898] usb 2-1: config 4 interface 250 altsetting 1 endpoint 0x3 has invalid maxpacket 46118, setting to 64 [ 185.341637][ T5898] usb 2-1: config 4 interface 250 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 185.387452][ T5898] usb 2-1: config 4 interface 250 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 185.447564][ T5898] usb 2-1: config 4 interface 11 altsetting 145 has an invalid descriptor for endpoint zero, skipping [ 185.479873][ T5898] usb 2-1: config 4 interface 11 altsetting 145 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 185.516428][ T5898] usb 2-1: too many endpoints for config 4 interface 249 altsetting 43: 214, using maximum allowed: 30 [ 185.533118][ T24] usb 5-1: USB disconnect, device number 14 [ 185.554196][ T5898] usb 2-1: config 4 interface 249 altsetting 43 has an invalid descriptor for endpoint zero, skipping [ 185.586065][ T5898] usb 2-1: config 4 interface 249 altsetting 43 has a duplicate endpoint with address 0x8, skipping [ 185.632598][ T5898] usb 2-1: config 4 interface 249 altsetting 43 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 185.662108][ T5898] usb 2-1: config 4 interface 249 altsetting 43 has a duplicate endpoint with address 0x8, skipping [ 185.685207][ T5898] usb 2-1: config 4 interface 249 altsetting 43 has a duplicate endpoint with address 0x9, skipping [ 185.716851][ T5898] usb 2-1: config 4 interface 249 altsetting 43 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 185.778930][ T5898] usb 2-1: config 4 interface 249 altsetting 43 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 185.790380][ T5898] usb 2-1: config 4 interface 249 altsetting 43 has a duplicate endpoint with address 0xB, skipping [ 185.822333][ T5898] usb 2-1: config 4 interface 249 altsetting 43 has a duplicate endpoint with address 0x9, skipping [ 185.847647][ T5898] usb 2-1: config 4 interface 249 altsetting 43 has a duplicate endpoint with address 0x5, skipping [ 185.877457][ T5898] usb 2-1: config 4 interface 249 altsetting 43 has a duplicate endpoint with address 0x4, skipping [ 185.898798][ T5898] usb 2-1: config 4 interface 249 altsetting 43 has 15 endpoint descriptors, different from the interface descriptor's value: 214 [ 185.925973][ T5898] usb 2-1: config 4 interface 250 has no altsetting 0 [ 185.929505][ T7105] netlink: 64 bytes leftover after parsing attributes in process `syz.4.311'. [ 185.943277][ T5898] usb 2-1: config 4 interface 11 has no altsetting 0 [ 185.967555][ T5898] usb 2-1: config 4 interface 249 has no altsetting 0 [ 185.990571][ T5898] usb 2-1: New USB device found, idVendor=12d1, idProduct=57aa, bcdDevice=26.d2 [ 186.007680][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.025983][ T5898] usb 2-1: Product: ೄ啤瘖悰天샄឵栗楓⒦⋔⋶䷛⎴鳌瞡オᤴՒ㗘缑뮽轲彘럣䢈痜鮢Ӌ섵鄰楆ሖ睸⧠⸵찛옇楧鍄䵕鶂ﬕ《쭺捻繛㪹Ꙁ蠥츬挦훐빭礮ꫧ綄铆쉊率핦俊혓涍徟﹓낺猡ᢔ첋䟧惟四늱ȃ홿ൻ喣䲔索໦尲뮞炠㢫╭芨섎卂黶♻᫂觠亍昄詯琭䮯ᇗ䣡﷘㏧䷛蝣큃昦▆ັ㧼槜ᘊﮣ拨푧 [ 186.097536][ T5898] usb 2-1: Manufacturer: ᐉ [ 186.102389][ T5898] usb 2-1: SerialNumber: 粏Ხ谫ꆓ㖩⓱쒩빳䖣ꭧ샚狝ᖌ颙ﶱ袻⌋嵡㼖㰙杆鼏绮堢⃝厴㭞ى㮪씚㏽쵼鴽ᕮ턼篗ᐰ㇬敌⬚䙔닯磔鐁囯윶扑꒖拝㞺诜◆铍퉳ᒅ䦤默좻훵鯝쯕㿀牭舯䟖ऽ菒焳앢᳼孡阝Ό뀚ڱȽꃐ䜢焕㤼ꊂ답﫰鰛콈ື嬾뒋㦧㍎ꥍ望穲៴퀕㇠鷛 [ 186.165781][ T30] audit: type=1326 audit(1744090286.804:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 186.207697][ T30] audit: type=1326 audit(1744090286.804:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 186.234590][ T5848] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 186.265268][ T30] audit: type=1326 audit(1744090286.804:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 186.303111][ T7071] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 186.314475][ T7071] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 186.369873][ T30] audit: type=1326 audit(1744090286.804:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 186.439798][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 186.447090][ T5848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.476525][ T5848] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 186.485933][ T30] audit: type=1326 audit(1744090286.804:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 186.486014][ T30] audit: type=1326 audit(1744090286.804:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 186.486057][ T30] audit: type=1326 audit(1744090286.814:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 186.486100][ T30] audit: type=1326 audit(1744090286.814:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 186.486170][ T30] audit: type=1326 audit(1744090286.814:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 186.517113][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.667293][ T5848] usb 5-1: config 0 descriptor?? [ 186.668777][ T5898] option 2-1:4.250: GSM modem (1-port) converter detected [ 186.692660][ T5848] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 186.705259][ T30] audit: type=1326 audit(1744090286.814:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 186.732604][ T7087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.784441][ T5898] usb 2-1: USB disconnect, device number 15 [ 186.801761][ T5898] option 2-1:4.250: device disconnected [ 187.007648][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 187.032020][ T5843] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 187.177637][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 187.186632][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 187.204381][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 187.223834][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.241416][ T5843] usb 1-1: config 0 has an invalid interface number: 232 but max is 0 [ 187.260929][ T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.277483][ T5843] usb 1-1: config 0 has no interface number 0 [ 187.297493][ T24] usb 3-1: config 1 has no interface number 1 [ 187.309103][ T5843] usb 1-1: New USB device found, idVendor=14aa, idProduct=0221, bcdDevice=e6.ca [ 187.323344][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 187.346631][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.356810][ T5843] usb 1-1: Product: syz [ 187.366970][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 187.378429][ T5843] usb 1-1: Manufacturer: syz [ 187.383071][ T5843] usb 1-1: SerialNumber: syz [ 187.423855][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 187.439603][ T5843] usb 1-1: config 0 descriptor?? [ 187.455152][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.465249][ T5843] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 187.493506][ T24] usb 3-1: Product: syz [ 187.498523][ T5843] dvb-usb: bulk message failed: -22 (2/0) [ 187.504618][ T24] usb 3-1: Manufacturer: syz [ 187.513884][ T24] usb 3-1: SerialNumber: syz [ 187.518628][ T5843] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 187.547535][ T5843] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 187.558963][ T5843] usb 1-1: media controller created [ 187.570074][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.599182][ T5843] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 187.615639][ T5843] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 187.653457][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 187.741527][ T7126] netlink: 'syz.3.316': attribute type 2 has an invalid length. [ 187.848907][ T24] usb 3-1: USB disconnect, device number 14 [ 187.938381][ T5843] rc_core: IR keymap rc-dtt200u not found [ 188.003685][ T5843] Registered IR keymap rc-empty [ 188.070413][ T5843] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 188.089534][ T5843] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input19 [ 188.141838][ T5899] usb 5-1: USB disconnect, device number 15 [ 188.166059][ T5843] dvb-usb: schedule remote query interval to 300 msecs. [ 188.188315][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.208264][ T5843] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 188.470612][ T7118] team0 (unregistering): Port device team_slave_0 removed [ 188.539406][ T7118] team0 (unregistering): Port device team_slave_1 removed [ 188.700403][ T5843] dvb-usb: bulk message failed: -22 (1/0) [ 188.728060][ T5843] dvb-usb: error -22 while querying for an remote control event. [ 189.107309][ T3411] dvb-usb: bulk message failed: -22 (1/0) [ 189.132791][ T3411] dvb-usb: error -22 while querying for an remote control event. [ 189.427719][ T5898] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 189.480788][ T52] dvb-usb: bulk message failed: -22 (1/0) [ 189.493766][ T52] dvb-usb: error -22 while querying for an remote control event. [ 189.747658][ T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 189.765270][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.785123][ T5898] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 189.831653][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.865732][ T5898] usb 5-1: config 0 descriptor?? [ 189.877505][ T10] usb 3-1: device descriptor read/64, error -71 [ 189.896117][ T5898] usb 5-1: bad CDC descriptors [ 189.987762][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 190.004456][ T5898] dvb-usb: error -22 while querying for an remote control event. [ 190.100832][ T5898] usb 5-1: USB disconnect, device number 16 [ 190.127673][ T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 190.276361][ T52] usb 1-1: USB disconnect, device number 15 [ 190.291951][ T10] usb 3-1: device descriptor read/64, error -71 [ 190.440717][ T10] usb usb3-port1: attempt power cycle [ 190.524122][ T52] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 190.858636][ T52] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 191.013665][ T10] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 191.168022][ T10] usb 3-1: device descriptor read/8, error -71 [ 191.237724][ T52] usb 1-1: Using ep0 maxpacket: 32 [ 191.245476][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.258754][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.270916][ T52] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 191.287806][ T5847] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 191.296892][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.320518][ T52] usb 1-1: config 0 descriptor?? [ 191.517508][ T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 191.549322][ T5847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.559797][ T5847] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 191.572745][ T10] usb 3-1: device descriptor read/8, error -71 [ 191.582595][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.597514][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.612717][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.727607][ T10] usb usb3-port1: unable to enumerate USB device [ 191.739763][ T5847] usb 5-1: config 0 descriptor?? [ 191.749884][ T5847] pwc: Askey VC010 type 2 USB webcam detected. [ 191.781417][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 191.834918][ T7162] bridge0: entered promiscuous mode [ 191.961841][ T5847] pwc: send_video_command error -71 [ 191.970970][ T5847] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 192.002687][ T5847] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 192.017570][ T5847] usb 5-1: USB disconnect, device number 17 [ 192.087213][ T52] magicmouse 0003:05AC:0269.0003: ignoring exceeding usage max [ 192.128306][ T52] magicmouse 0003:05AC:0269.0003: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.0-1/input0 [ 192.427495][ T52] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 192.507595][ T5847] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 192.599526][ T52] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.610311][ T52] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 192.624563][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.664594][ T52] usb 4-1: config 0 descriptor?? [ 192.671750][ T5847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.684896][ T5847] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 192.709975][ T52] pwc: Askey VC010 type 2 USB webcam detected. [ 192.715322][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.739811][ T5847] usb 5-1: config 0 descriptor?? [ 192.749062][ T7185] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 192.755835][ T7185] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 192.767970][ T7185] vhci_hcd vhci_hcd.0: Device attached [ 192.770382][ T5847] pwc: Askey VC010 type 2 USB webcam detected. [ 192.779786][ T7187] vhci_hcd: connection closed [ 192.785624][ T53] vhci_hcd: stop threads [ 192.800172][ T53] vhci_hcd: release socket [ 192.821184][ T3411] usb 1-1: USB disconnect, device number 16 [ 192.827761][ T53] vhci_hcd: disconnect device [ 192.905838][ T52] pwc: send_video_command error -71 [ 192.915916][ T52] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 192.946470][ T52] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 192.982152][ T52] usb 4-1: USB disconnect, device number 15 [ 193.195929][ T5847] pwc: recv_control_msg error -32 req 02 val 2b00 [ 193.205601][ T5847] pwc: recv_control_msg error -32 req 02 val 2700 [ 193.227320][ T5847] pwc: recv_control_msg error -32 req 02 val 2c00 [ 193.240726][ T5847] pwc: recv_control_msg error -32 req 04 val 1000 [ 193.249700][ T5847] pwc: recv_control_msg error -32 req 04 val 1300 [ 193.317504][ T52] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 193.462373][ T7172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.507908][ T52] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.527909][ T7172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.572753][ T52] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 193.647588][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.706675][ T52] usb 4-1: config 0 descriptor?? [ 193.727511][ T5847] pwc: recv_control_msg error -71 req 02 val 2000 [ 193.740911][ T52] pwc: Askey VC010 type 2 USB webcam detected. [ 193.954666][ T52] pwc: recv_control_msg error -32 req 02 val 2b00 [ 193.987686][ T3411] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 194.062677][ T52] pwc: recv_control_msg error -71 req 02 val 2700 [ 194.126651][ T52] pwc: recv_control_msg error -71 req 02 val 2c00 [ 194.167656][ T3411] usb 3-1: Using ep0 maxpacket: 8 [ 194.185053][ T52] pwc: recv_control_msg error -71 req 04 val 1000 [ 194.208914][ T3411] usb 3-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.254136][ T52] pwc: recv_control_msg error -71 req 04 val 1300 [ 194.299962][ T5847] pwc: recv_control_msg error -71 req 02 val 2100 [ 194.306924][ T5847] pwc: recv_control_msg error -71 req 04 val 1500 [ 194.310885][ T3411] usb 3-1: config 1 interface 0 has no altsetting 0 [ 194.313945][ T5847] pwc: recv_control_msg error -71 req 02 val 2500 [ 194.320490][ T52] pwc: recv_control_msg error -71 req 04 val 1400 [ 194.327053][ T5847] pwc: recv_control_msg error -71 req 02 val 2400 [ 194.343084][ T5847] pwc: recv_control_msg error -71 req 02 val 2600 [ 194.350228][ T5847] pwc: recv_control_msg error -71 req 02 val 2900 [ 194.357136][ T5847] pwc: recv_control_msg error -71 req 02 val 2800 [ 194.364377][ T5847] pwc: recv_control_msg error -71 req 04 val 1100 [ 194.372501][ T5847] pwc: recv_control_msg error -71 req 04 val 1200 [ 194.393435][ T5847] pwc: Registered as video103. [ 194.399950][ T3411] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 194.410081][ T5847] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 194.435971][ T52] pwc: recv_control_msg error -71 req 02 val 2000 [ 194.448982][ T5847] usb 5-1: USB disconnect, device number 18 [ 194.464846][ T3411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.507049][ T52] pwc: recv_control_msg error -71 req 02 val 2100 [ 194.524163][ T3411] usb 3-1: Product: ӿ [ 194.536557][ T52] pwc: recv_control_msg error -71 req 04 val 1500 [ 194.547688][ T3411] usb 3-1: Manufacturer: Щ [ 194.555980][ T3411] usb 3-1: SerialNumber: 썚黮낌꭮㽉只࿹懹愋㞪採䋜憱䇪쪬ঃ醖嘫땵䥃﭂䵯³솮䋻ꟽ顟腄딊謋䫤︳퐎㸹냫췓ေ玟當푾ꪫ錘 [ 194.573829][ T52] pwc: recv_control_msg error -71 req 02 val 2500 [ 194.620842][ T52] pwc: recv_control_msg error -71 req 02 val 2400 [ 194.639796][ T52] pwc: recv_control_msg error -71 req 02 val 2600 [ 194.652932][ T3411] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 194.662581][ T52] pwc: recv_control_msg error -71 req 02 val 2900 [ 194.687653][ T3411] usb 3-1: no configuration chosen from 1 choice [ 194.694387][ T52] pwc: recv_control_msg error -71 req 02 val 2800 [ 194.708105][ T7222] tipc: Started in network mode [ 194.714990][ T52] pwc: recv_control_msg error -71 req 04 val 1100 [ 194.727791][ T7222] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 194.766288][ T7222] tipc: Enabled bearer , priority 0 [ 194.775856][ T52] pwc: recv_control_msg error -71 req 04 val 1200 [ 194.812530][ T52] pwc: Registered as video103. [ 194.831213][ T52] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 194.886534][ T52] usb 4-1: USB disconnect, device number 16 [ 195.277825][ T52] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 195.436797][ T52] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.476307][ T52] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d [ 195.516520][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.536925][ T52] usb 4-1: config 0 descriptor?? [ 195.545709][ T52] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 195.571089][ T52] command write [95] error -22 [ 195.757323][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.786823][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.875384][ T5847] usb 4-1: USB disconnect, device number 17 [ 195.947120][ T5848] tipc: Node number set to 10136234 [ 196.157526][ T5848] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 196.343957][ T7246] xt_CT: No such helper "netbios-ns" [ 196.461182][ T5848] usb 2-1: config 0 has no interfaces? [ 196.476115][ T5848] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 196.485512][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.517769][ T5848] usb 2-1: Product: syz [ 196.538172][ T5848] usb 2-1: Manufacturer: syz [ 196.542848][ T5848] usb 2-1: SerialNumber: syz [ 196.617016][ T5848] usb 2-1: config 0 descriptor?? [ 196.752661][ T52] usb 3-1: USB disconnect, device number 19 [ 197.185897][ T7260] netlink: 'syz.0.356': attribute type 1 has an invalid length. [ 197.440326][ T7273] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 197.615171][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 197.623491][ T7260] bond1: entered promiscuous mode [ 197.630124][ T7260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.637606][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 197.845301][ T7270] bond1: (slave bridge1): making interface the new active one [ 197.883229][ T7270] bridge1: entered promiscuous mode [ 197.912145][ T7270] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 197.976649][ T7273] bond1: entered promiscuous mode [ 197.986811][ T7273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.207661][ T5847] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 198.240834][ T7282] fuse: Bad value for 'rootmode' [ 198.331446][ T5848] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 198.364495][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'. [ 198.374835][ T7286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.363'. [ 198.379475][ T5847] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.415162][ T5847] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 198.439249][ T5847] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.461077][ T7288] xt_CT: No such helper "netbios-ns" [ 198.466590][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.494620][ T7277] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 198.507790][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 198.522450][ T5848] usb 1-1: config 222 has an invalid interface number: 31 but max is 0 [ 198.534098][ T5847] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 198.542248][ T5848] usb 1-1: config 222 has no interface number 0 [ 198.552181][ T5848] usb 1-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 198.568419][ T7292] netlink: 'syz.4.365': attribute type 3 has an invalid length. [ 198.589040][ T5848] usb 1-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 198.657496][ T5848] usb 1-1: config 222 interface 31 has no altsetting 0 [ 198.687202][ T5848] usb 1-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 198.698538][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.706590][ T5848] usb 1-1: Product: syz [ 198.712348][ T5848] usb 1-1: Manufacturer: syz [ 198.727288][ T5848] usb 1-1: SerialNumber: syz [ 198.766020][ T7280] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 198.802195][ T5898] usb 4-1: USB disconnect, device number 18 [ 198.918071][ T7299] netlink: 'syz.4.367': attribute type 10 has an invalid length. [ 198.934447][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.942781][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.978790][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.980978][ T7301] dccp_invalid_packet: P.Data Offset(10) too large [ 198.986107][ T7299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.998808][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 199.001349][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.015950][ T7299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.025845][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.038337][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.052406][ T7299] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 199.079158][ T7301] bridge_slave_1: left allmulticast mode [ 199.092836][ T5848] ldusb 1-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 199.095264][ T7301] bridge_slave_1: left promiscuous mode [ 199.116211][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.133269][ T5848] usb 1-1: USB disconnect, device number 17 [ 199.135047][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.157306][ T5848] ldusb 1-1:222.31: LD USB Device #0 now disconnected [ 199.218750][ T7301] bridge_slave_0: left allmulticast mode [ 199.224568][ T7301] bridge_slave_0: left promiscuous mode [ 199.242563][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.258548][ T3411] usb 2-1: USB disconnect, device number 16 [ 199.453549][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.460219][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.737723][ T5848] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 199.962367][ T5848] usb 5-1: Using ep0 maxpacket: 16 [ 200.016832][ T5848] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 200.096667][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.206450][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 200.295747][ T5848] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 200.407589][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.466116][ T5848] usb 5-1: Product: syz [ 200.592082][ T5848] usb 5-1: Manufacturer: syz [ 200.642444][ T5848] usb 5-1: SerialNumber: syz [ 200.665629][ T5848] usb 5-1: config 0 descriptor?? [ 200.836410][ T7330] netlink: 124 bytes leftover after parsing attributes in process `syz.1.375'. [ 200.858319][ T7326] xt_CT: No such helper "netbios-ns" [ 200.916775][ T5848] usb 5-1: USB disconnect, device number 19 [ 201.347752][ T5898] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 201.510106][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 201.520262][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.541722][ T5898] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.560639][ T5898] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 201.584633][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.604432][ T5898] usb 4-1: Product: syz [ 201.619303][ T5898] usb 4-1: Manufacturer: syz [ 201.645646][ T5898] usb 4-1: SerialNumber: syz [ 201.666224][ T5898] usb 4-1: config 0 descriptor?? [ 202.057494][ T5847] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 202.837510][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 202.846139][ T5847] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 202.860422][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.871847][ T5847] usb 5-1: config 0 descriptor?? [ 203.599903][ T7379] xt_CT: No such helper "netbios-ns" [ 203.787843][ T5899] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 203.957628][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 203.970189][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.989867][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.010194][ T5899] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 204.036998][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.052740][ T5899] usb 3-1: config 0 descriptor?? [ 204.060930][ T5899] hub 3-1:0.0: USB hub found [ 204.185122][ T5848] usb 4-1: USB disconnect, device number 19 [ 204.312402][ T5899] hub 3-1:0.0: 1 port detected [ 204.339150][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 204.348668][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 204.478207][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 204.537506][ T5848] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 204.602112][ T5899] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 204.612011][ T5899] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 204.627226][ T5899] usbhid 3-1:0.0: can't add hid device: -71 [ 204.637264][ T5899] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 204.675612][ T5899] usb 3-1: USB disconnect, device number 20 [ 204.677543][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 204.698230][ T5848] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 204.721879][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.759072][ T5848] usb 4-1: config 0 descriptor?? [ 204.771695][ T5848] cp210x 4-1:0.0: cp210x converter detected [ 204.805485][ T7401] openvswitch: netlink: Flow key attr not present in new flow. [ 204.977844][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 204.994791][ T7397] vlan2: entered promiscuous mode [ 205.000328][ T7397] dummy0: entered promiscuous mode [ 205.291055][ T5848] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 205.414849][ T5848] usb 4-1: cp210x converter now attached to ttyUSB0 [ 205.577310][ T3411] usb 4-1: USB disconnect, device number 20 [ 205.634670][ T3411] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 205.683637][ T3411] cp210x 4-1:0.0: device disconnected [ 206.044906][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.066237][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 206.085322][ T10] usb 1-1: can't read configurations, error -71 [ 206.681630][ T7423] xt_CT: No such helper "netbios-ns" [ 206.742903][ T5847] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 206.764019][ T5847] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 206.800140][ T5847] asix 5-1:0.0: probe with driver asix failed with error -71 [ 206.822211][ T5847] usb 5-1: USB disconnect, device number 20 [ 207.198132][ T7440] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.409'. [ 207.218090][ T7440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.409'. [ 207.234702][ T5848] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 207.308082][ T5847] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 207.334314][ T7442] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 207.377819][ T5848] usb 3-1: device descriptor read/64, error -71 [ 207.470504][ T5847] usb 5-1: not running at top speed; connect to a high speed hub [ 207.483003][ T5847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.511001][ T5847] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 207.550769][ T5847] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.571140][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.586682][ T5847] usb 5-1: Product: 吽遺䡦婦꾤䖀औ摳ḑ쥣꣖鉦嘘ⅈ쉠얭ﴥ螏䯻䘰ݤ瑹韇ⷵ➄젿ᡗൔ凯⦥띺릹ⲍ䵥ࢁख롕㈣ඹᡥ噣튘눸﷢⠫ὰញ놼㧐ힰ殺橦㸼︗縰攜ಌ칄䫘먽莻⢎픩ぽ䄥溺쨲卿౟홂ح쒠蚶ꢠ෡먕逮ᎺᏉ笫ࡋ覭１䒴坳쾃퐕젉砢ゕ彲駛課ᗀ鬱ᵍ䋊⇽럽胓渶쑭諨산목짊 [ 207.621333][ T5847] usb 5-1: Manufacturer: Ж [ 207.626356][ T5847] usb 5-1: SerialNumber: 덫쵕棾䚣ًඕ퀹傉뢽客鮨ҥ燒ꅎ龠ﲝⴉ⍌㒶핓⏮鎞⥁濿ᡌ쥕飣؏줾쟬‡苠왶䂨껖₠⎀鱻ⅅᩇֱ뷕跀졒￝ᾇ偔獡装ᐸ恇窊걢紏洬尪❿꽳ⓧ⟨Ȧ뒢㆖눂頕䈘ᩡ㞭멲淴ꠚ틤㷾᷽㵽㗬嬔뭹昡嶾鿈쒒嬣ႋ劔ຢ覀∏쥄粸䛲쐘硊䩐﬐恀䮌䴂촾蠐唾⿤홍 [ 207.666830][ T5848] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 207.798068][ T5848] usb 3-1: device descriptor read/64, error -71 [ 207.908061][ T5848] usb usb3-port1: attempt power cycle [ 208.103678][ T5847] cdc_ncm 5-1:1.0: bind() failure [ 208.121364][ T5847] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 208.140284][ T5847] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 208.160550][ T5847] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 208.192514][ T5847] usb 5-1: USB disconnect, device number 21 [ 208.259431][ T5848] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 208.319173][ T5848] usb 3-1: device descriptor read/8, error -71 [ 208.418719][ T52] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 208.645798][ T3411] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 208.675289][ T3411] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 208.685049][ T5848] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 208.699121][ T52] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 208.707687][ T52] usb 2-1: config 0 has no interface number 0 [ 208.721861][ T52] usb 2-1: config 0 interface 25 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 208.743832][ T52] usb 2-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 208.752469][ T5848] usb 3-1: device descriptor read/8, error -71 [ 208.753025][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.771306][ T52] usb 2-1: Product: syz [ 208.775651][ T52] usb 2-1: Manufacturer: syz [ 208.780813][ T52] usb 2-1: SerialNumber: syz [ 208.792358][ T52] usb 2-1: config 0 descriptor?? [ 208.838224][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.418'. [ 208.868700][ T5848] usb usb3-port1: unable to enumerate USB device [ 209.142619][ T5899] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 209.317503][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 209.334148][ T5899] usb 4-1: config 0 has no interfaces? [ 209.398615][ T5899] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 209.430062][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.456590][ T5899] usb 4-1: config 0 descriptor?? [ 209.685960][ T10] usb 4-1: USB disconnect, device number 21 [ 209.787782][ T5899] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 209.957533][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 209.972251][ T5899] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 209.991319][ T5899] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 210.025324][ T5899] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 210.069713][ T5899] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 210.116123][ T5899] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.138807][ T5899] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 210.156607][ T5899] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 210.175290][ T5899] usb 5-1: Product: syz [ 210.185118][ T5899] usb 5-1: Manufacturer: syz [ 210.196437][ T5899] usb 5-1: SerialNumber: syz [ 210.215129][ T5899] usb 5-1: config 0 descriptor?? [ 210.230056][ T5899] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 210.254327][ T5899] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 210.373690][ T7481] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 210.574414][ T5899] usb 5-1: USB disconnect, device number 22 [ 210.574526][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 210.593026][ T7477] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 210.610697][ T5899] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 210.610765][ T7485] ldusb: No device or device unplugged -19 [ 210.901394][ T7485] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 210.912269][ T7485] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 211.179594][ T52] usb 2-1: Found UVC 0.00 device syz (1b3b:2951) [ 211.186972][ T52] usb 2-1: No valid video chain found. [ 211.213616][ T52] usb 2-1: USB disconnect, device number 17 [ 211.366957][ T7502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.429'. [ 211.782657][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 211.783511][ T5856] Bluetooth: hci0: command 0x0406 tx timeout [ 211.788770][ T5153] Bluetooth: hci4: command 0x0406 tx timeout [ 211.788818][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 211.811978][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 211.977490][ T5847] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 212.156986][ T7529] loop2: detected capacity change from 0 to 7 [ 212.166599][ T7529] Dev loop2: unable to read RDB block 7 [ 212.172594][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 212.184327][ T5847] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 212.193382][ T5847] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.203966][ T7529] loop2: unable to read partition table [ 212.207618][ T5899] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 212.212588][ T5847] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 212.234188][ T7529] loop2: partition table beyond EOD, truncated [ 212.240913][ T5847] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 212.251918][ T5847] usb 1-1: Manufacturer: syz [ 212.295750][ T7529] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 212.321294][ T5847] usb 1-1: config 0 descriptor?? [ 212.330500][ T5847] igorplugusb 1-1:0.0: incorrect number of endpoints [ 212.404527][ T10] usb 5-1: config 0 has no interfaces? [ 212.427541][ T5899] usb 4-1: device descriptor read/64, error -71 [ 212.448142][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 212.457660][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.466337][ T10] usb 5-1: Product: syz [ 212.473081][ T10] usb 5-1: Manufacturer: syz [ 212.484511][ T5213] Dev loop2: unable to read RDB block 7 [ 212.490319][ T5213] loop2: unable to read partition table [ 212.497593][ T10] usb 5-1: SerialNumber: syz [ 212.508126][ T5213] loop2: partition table beyond EOD, truncated [ 212.520405][ T10] usb 5-1: config 0 descriptor?? [ 212.549102][ T5847] usb 1-1: USB disconnect, device number 20 [ 212.710270][ T5899] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 212.784294][ T7519] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 212.873726][ T7520] openvswitch: netlink: Missing key (keys=40, expected=80) [ 213.175904][ T5899] usb 4-1: device descriptor read/64, error -71 [ 213.308557][ T5899] usb usb4-port1: attempt power cycle [ 213.323726][ T7534] syzkaller1: entered promiscuous mode [ 213.373805][ T7534] syzkaller1: entered allmulticast mode [ 213.649308][ T7540] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 213.657590][ T5899] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 213.698290][ T5899] usb 4-1: device descriptor read/8, error -71 [ 213.787263][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 213.802061][ T7540] bond1: (slave gretap1): making interface the new active one [ 213.813117][ T7540] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 213.862354][ T7543] bond1 (unregistering): (slave gretap1): Releasing active interface [ 213.876809][ T7543] bond1 (unregistering): Released all slaves [ 213.947862][ T5899] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 213.978389][ T5899] usb 4-1: device descriptor read/8, error -71 [ 214.098246][ T5899] usb usb4-port1: unable to enumerate USB device [ 214.247985][ T52] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 214.485720][ T52] usb 1-1: config 0 has no interfaces? [ 214.518095][ T52] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 214.532385][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.536928][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 214.544245][ T52] usb 1-1: Product: syz [ 214.554624][ T52] usb 1-1: Manufacturer: syz [ 214.563027][ T52] usb 1-1: SerialNumber: syz [ 214.572146][ T52] usb 1-1: config 0 descriptor?? [ 214.595405][ T7560] netlink: 104 bytes leftover after parsing attributes in process `syz.2.446'. [ 214.627873][ T5847] usb 5-1: USB disconnect, device number 23 [ 214.673638][ T7560] netlink: 104 bytes leftover after parsing attributes in process `syz.2.446'. [ 214.713528][ T7560] veth0_to_hsr: entered promiscuous mode [ 214.724214][ T7560] batadv0: entered promiscuous mode [ 214.853430][ T7549] veth1_to_team: entered promiscuous mode [ 215.064185][ T7569] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 215.440126][ T7580] netlink: 76 bytes leftover after parsing attributes in process `syz.2.452'. [ 215.897655][ T52] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 216.139851][ T52] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 216.175070][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.213989][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.252584][ T52] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 216.316182][ T52] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 216.334308][ T52] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 216.352920][ T52] usb 4-1: Manufacturer: syz [ 216.373735][ T52] usb 4-1: config 0 descriptor?? [ 216.535731][ T7585] xt_CT: No such helper "netbios-ns" [ 216.809796][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.832713][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.919869][ T52] usbhid 4-1:0.0: can't add hid device: -71 [ 216.956160][ T52] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 217.011111][ T52] usb 4-1: USB disconnect, device number 26 [ 217.196408][ T7548] veth1_to_team: left promiscuous mode [ 217.221737][ T7604] loop9: detected capacity change from 0 to 7 [ 217.230419][ T7604] loop9: [POWERTEC] p1 p2 p3 [ 217.237218][ T7604] loop9: p1 start 786432 is beyond EOD, truncated [ 217.249898][ T7604] loop9: p2 size 262144 extends beyond EOD, truncated [ 217.264309][ T52] usb 1-1: USB disconnect, device number 21 [ 217.267238][ T7604] loop9: p3 start 2883584 is beyond EOD, truncated [ 217.375842][ T7604] bridge0: entered promiscuous mode [ 217.396458][ T7604] bridge0: entered allmulticast mode [ 217.877537][ T5847] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 217.918462][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 217.963695][ T7619] xt_CT: No such helper "netbios-ns" [ 217.987485][ T52] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 218.120097][ T7625] loop2: detected capacity change from 0 to 7 [ 218.156627][ T5847] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 218.170848][ T5847] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 218.180214][ T5847] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 218.190372][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 218.233214][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.244473][ T7625] Dev loop2: unable to read RDB block 7 [ 218.261565][ T52] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 218.277585][ T7625] loop2: unable to read partition table [ 218.281077][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.283740][ T7625] loop2: partition table beyond EOD, truncated [ 218.327721][ T52] usb 1-1: Product: syz [ 218.331967][ T52] usb 1-1: Manufacturer: syz [ 218.362668][ T7625] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 218.435950][ T5213] Dev loop2: unable to read RDB block 7 [ 218.443518][ T5213] loop2: unable to read partition table [ 218.453953][ T5213] loop2: partition table beyond EOD, truncated [ 218.469251][ T52] usb 1-1: SerialNumber: syz [ 218.684138][ T52] usb 1-1: config 0 descriptor?? [ 218.931409][ T52] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 219.127860][ T5898] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 219.247632][ T5847] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 219.299976][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.312865][ T5898] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 219.326893][ T5898] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 219.339945][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.353228][ T5898] usb 3-1: config 0 descriptor?? [ 219.398407][ T5847] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 219.409453][ T5847] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 219.417321][ T5847] usb 4-1: can't read configurations, error -61 [ 219.497590][ T5843] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 219.547560][ T5847] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 219.659102][ T5843] usb 2-1: config 6 has an invalid interface number: 59 but max is 1 [ 219.678471][ T5843] usb 2-1: config 6 has an invalid interface number: 220 but max is 1 [ 219.702545][ T5843] usb 2-1: config 6 has no interface number 0 [ 219.714097][ T5847] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 219.718433][ T5843] usb 2-1: config 6 has no interface number 1 [ 219.729826][ T5847] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 219.736535][ T5843] usb 2-1: config 6 interface 59 has no altsetting 0 [ 219.739092][ T5847] usb 4-1: can't read configurations, error -61 [ 219.748036][ T5843] usb 2-1: config 6 interface 220 has no altsetting 0 [ 219.752401][ T5847] usb usb4-port1: attempt power cycle [ 219.803464][ T5843] usb 2-1: New USB device found, idVendor=0586, idProduct=341e, bcdDevice=d4.80 [ 219.814786][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.824342][ T5843] usb 2-1: Product: syz [ 219.829109][ T5843] usb 2-1: Manufacturer: syz [ 219.833804][ T5843] usb 2-1: SerialNumber: syz [ 220.060074][ T5843] usb 2-1: USB disconnect, device number 18 [ 220.070883][ T5898] Bluetooth: Can't get version to change to load ram patch err [ 220.102554][ T5898] Bluetooth: Loading sysconfig file failed [ 220.121835][ T5898] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 220.138031][ T5898] usb 3-1: USB disconnect, device number 25 [ 220.147651][ T5847] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 220.190815][ T5847] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 220.215039][ T5847] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 220.226423][ T5847] usb 4-1: can't read configurations, error -61 [ 220.357622][ T5847] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 220.379218][ T5847] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 220.392359][ T5847] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 220.400268][ T5847] usb 4-1: can't read configurations, error -61 [ 220.406990][ T5847] usb usb4-port1: unable to enumerate USB device [ 220.420109][ T52] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 220.537474][ T52] usb 5-1: USB disconnect, device number 24 [ 220.651042][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 220.820243][ T5898] usb 1-1: USB disconnect, device number 22 [ 220.957837][ T52] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 221.000744][ T7661] loop2: detected capacity change from 0 to 7 [ 221.034424][ T7661] Dev loop2: unable to read RDB block 7 [ 221.049137][ T7661] loop2: unable to read partition table [ 221.055063][ T7661] loop2: partition table beyond EOD, truncated [ 221.095441][ T7661] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 221.139872][ T52] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 221.157711][ T52] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 221.180041][ T5213] Dev loop2: unable to read RDB block 7 [ 221.185782][ T5213] loop2: unable to read partition table [ 221.196449][ T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 221.216134][ T52] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 221.224698][ T5213] loop2: partition table beyond EOD, truncated [ 221.256610][ T52] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 221.291952][ T52] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 221.321583][ T52] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 221.357597][ T52] usb 5-1: Product: syz [ 221.369757][ T52] usb 5-1: Manufacturer: syz [ 221.388558][ T52] cdc_wdm 5-1:1.0: skipping garbage [ 221.408418][ T52] cdc_wdm 5-1:1.0: skipping garbage [ 221.434241][ T52] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 221.448779][ T52] cdc_wdm 5-1:1.0: Unknown control protocol [ 222.471320][ T7686] netlink: 'syz.3.488': attribute type 10 has an invalid length. [ 222.486348][ T7686] veth1_vlan: entered allmulticast mode [ 222.607509][ T5847] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 222.831415][ T5847] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 222.852146][ T7690] JFS: charset not found [ 222.945856][ T5847] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 222.955499][ T5847] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 222.965399][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.207858][ T52] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 223.428188][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 223.439134][ T52] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 223.449551][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.461011][ T52] usb 4-1: Product: syz [ 223.496037][ T52] usb 4-1: Manufacturer: syz [ 223.537259][ T52] usb 4-1: SerialNumber: syz [ 223.591174][ T5898] usb 5-1: USB disconnect, device number 25 [ 223.629265][ T52] usb 4-1: config 0 descriptor?? [ 223.639150][ T7703] xt_CT: No such helper "netbios-ns" [ 223.850375][ T52] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 224.052949][ T7714] loop2: detected capacity change from 0 to 7 [ 224.063922][ T7714] Dev loop2: unable to read RDB block 7 [ 224.072182][ T7714] loop2: unable to read partition table [ 224.081868][ T7714] loop2: partition table beyond EOD, truncated [ 224.090278][ T7714] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 224.222741][ T5213] Dev loop2: unable to read RDB block 7 [ 224.232021][ T5213] loop2: unable to read partition table [ 224.256993][ T5213] loop2: partition table beyond EOD, truncated [ 224.265356][ T7695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.296895][ T7695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.535642][ T52] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 225.006318][ T7731] netlink: 80 bytes leftover after parsing attributes in process `syz.0.503'. [ 225.308314][ T52] usb 2-1: USB disconnect, device number 19 [ 225.466158][ T7745] xt_CT: No such helper "netbios-ns" [ 225.473919][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 225.493545][ T7753] tipc: Disabling bearer [ 225.509505][ T7757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.509'. [ 225.592863][ T7760] veth1_macvtap: left promiscuous mode [ 225.817486][ T5898] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 225.925841][ T7767] loop2: detected capacity change from 0 to 7 [ 225.934437][ T7767] Dev loop2: unable to read RDB block 7 [ 225.940723][ T7767] loop2: unable to read partition table [ 225.946566][ T7767] loop2: partition table beyond EOD, truncated [ 225.956413][ T7767] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 225.998959][ T5898] usb 1-1: too many configurations: 79, using maximum allowed: 8 [ 226.012461][ T5898] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 226.022769][ T5898] usb 1-1: can't read configurations, error -61 [ 226.167617][ T5898] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 226.338358][ T5898] usb 1-1: too many configurations: 79, using maximum allowed: 8 [ 226.341061][ T10] usb 4-1: USB disconnect, device number 31 [ 226.367476][ T5898] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 226.396211][ T5898] usb 1-1: can't read configurations, error -61 [ 226.418928][ T5898] usb usb1-port1: attempt power cycle [ 226.524692][ T7782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.517'. [ 226.575699][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'. [ 226.596813][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'. [ 226.778391][ T5898] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 226.809442][ T5898] usb 1-1: too many configurations: 79, using maximum allowed: 8 [ 226.819712][ T5898] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 226.827475][ T5898] usb 1-1: can't read configurations, error -61 [ 226.891227][ T7801] loop2: detected capacity change from 0 to 7 [ 226.949728][ T7793] xt_CT: No such helper "netbios-ns" [ 226.955348][ T7801] Dev loop2: unable to read RDB block 7 [ 226.986596][ T7801] loop2: unable to read partition table [ 226.997959][ T5898] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 227.039056][ T5898] usb 1-1: too many configurations: 79, using maximum allowed: 8 [ 227.047193][ T7801] loop2: partition table beyond EOD, truncated [ 227.068640][ T5898] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 227.090086][ T5898] usb 1-1: can't read configurations, error -61 [ 227.112317][ T5898] usb usb1-port1: unable to enumerate USB device [ 227.123083][ T7801] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 227.197757][ T52] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 227.402127][ T52] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 227.430244][ T52] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 227.462672][ T52] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 227.518936][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.206681][ T7824] netlink: 'syz.4.530': attribute type 29 has an invalid length. [ 228.351285][ T5898] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 229.178927][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.199968][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 229.223873][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 23094, setting to 64 [ 229.247540][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 229.411039][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 229.463592][ T5898] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 229.473414][ T5898] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 229.492439][ T5898] usb 4-1: Manufacturer: syz [ 229.513327][ T5898] usb 4-1: config 0 descriptor?? [ 230.006405][ T52] usb 2-1: USB disconnect, device number 20 [ 230.132275][ T7845] xt_CT: No such helper "netbios-ns" [ 230.177491][ T5898] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 230.290814][ T5899] usb 4-1: USB disconnect, device number 32 [ 230.357833][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 230.377218][ T5898] usb 1-1: unable to get BOS descriptor or descriptor too short [ 230.400059][ T5898] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.441999][ T5898] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.475308][ T5898] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 230.508156][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.516237][ T5898] usb 1-1: Product: syz [ 230.527725][ T5898] usb 1-1: Manufacturer: 䌕뤈ᦷꡯ͗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 230.537445][ T5898] usb 1-1: SerialNumber: syz [ 230.544467][ T7858] loop2: detected capacity change from 0 to 7 [ 230.563049][ T7858] Dev loop2: unable to read RDB block 7 [ 230.570412][ T7858] loop2: unable to read partition table [ 230.576655][ T7858] loop2: partition table beyond EOD, truncated [ 230.588924][ T7858] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 230.757471][ T5843] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 230.942662][ T5843] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 230.972487][ T5843] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 231.029387][ T5843] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 231.061078][ T5843] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 231.079240][ T5843] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 231.095650][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.863985][ T5843] ath6kl: Failed to submit usb control message: -71 [ 231.883525][ T5843] ath6kl: unable to send the bmi data to the device: -71 [ 231.892637][ T5898] usbhid 1-1:1.0: can't add hid device: -22 [ 231.901901][ T5843] ath6kl: Unable to send get target info: -71 [ 232.040793][ T5898] usbhid 1-1:1.0: probe with driver usbhid failed with error -22 [ 232.067889][ T5898] usb 1-1: USB disconnect, device number 27 [ 232.074084][ T5843] ath6kl: Failed to init ath6kl core: -71 [ 232.095405][ T5843] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 232.171883][ T5843] usb 5-1: USB disconnect, device number 26 [ 232.317647][ T52] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 232.488251][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 232.519967][ T52] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.558081][ T52] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 232.578113][ T52] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 232.608187][ T52] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 232.625766][ T52] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 232.644393][ T52] usb 4-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 232.654036][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 232.666317][ T52] usb 4-1: SerialNumber: syz [ 232.675649][ T7874] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 232.690703][ T52] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 232.704029][ T52] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 232.747683][ T5843] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 232.915229][ T52] usb 4-1: USB disconnect, device number 33 [ 232.941595][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 232.985574][ T5843] usb 2-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 232.986802][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 233.007586][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.053544][ T5843] usb 2-1: Product: syz [ 233.068715][ T5843] usb 2-1: Manufacturer: syz [ 233.093722][ T5843] usb 2-1: SerialNumber: syz [ 233.110334][ T5843] usb 2-1: config 0 descriptor?? [ 233.131966][ T5843] ipw 2-1:0.0: IPWireless converter converter detected [ 233.336129][ T52] usb 2-1: USB disconnect, device number 21 [ 233.349934][ T52] ipw 2-1:0.0: device disconnected [ 233.357573][ T5847] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 233.529854][ T5847] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 233.548260][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.571401][ T5847] usb 3-1: config 0 descriptor?? [ 234.083459][ T5847] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 234.113152][ T5847] hackrf 3-1:0.0: Could not detect board [ 234.138270][ T5847] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 234.197215][ T5847] usb 3-1: USB disconnect, device number 27 [ 234.317981][ T7900] xt_CT: No such helper "netbios-ns" [ 235.855218][ T5847] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 236.087518][ T5847] usb 4-1: Using ep0 maxpacket: 8 [ 236.106040][ T5847] usb 4-1: config 0 has an invalid interface number: 25 but max is 0 [ 236.114646][ T5847] usb 4-1: config 0 has no interface number 0 [ 236.138950][ T5847] usb 4-1: config 0 interface 25 altsetting 6 endpoint 0x8 has invalid maxpacket 544, setting to 64 [ 236.188729][ T5847] usb 4-1: config 0 interface 25 has no altsetting 0 [ 236.202647][ T5847] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c00, bcdDevice=b4.82 [ 236.218875][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.227528][ T5847] usb 4-1: Product: syz [ 236.296156][ T5847] usb 4-1: Manufacturer: syz [ 236.311428][ T5847] usb 4-1: SerialNumber: syz [ 236.350177][ T5847] usb 4-1: config 0 descriptor?? [ 236.601405][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.618005][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.652501][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 236.652522][ T30] audit: type=1326 audit(1744090337.324:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.3.557" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x0 [ 236.737731][ T5899] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 236.901102][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 237.027516][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.049609][ T5899] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 237.068502][ T5899] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 237.091005][ T5899] usb 5-1: Manufacturer: syz [ 237.124622][ T5899] usb 5-1: config 0 descriptor?? [ 237.612404][ T5899] cougar 0003:060B:700A.0005: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 237.631567][ T5843] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 237.828847][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 237.842142][ T5843] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0105, bcdDevice=43.55 [ 237.854391][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.897828][ T5899] usb 5-1: USB disconnect, device number 27 [ 237.926375][ T5843] usb 2-1: Product: syz [ 237.940603][ T5843] usb 2-1: Manufacturer: syz [ 237.990952][ T5843] usb 2-1: SerialNumber: syz [ 238.073525][ T5843] usb 2-1: config 0 descriptor?? [ 238.111672][ T5843] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 238.126292][ T7964] loop2: detected capacity change from 0 to 7 [ 238.160605][ T7964] Dev loop2: unable to read RDB block 7 [ 238.317145][ T7964] loop2: unable to read partition table [ 238.346580][ T7944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.379112][ T7944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.388895][ T7964] loop2: partition table beyond EOD, truncated [ 238.422185][ T7964] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 238.662518][ T5847] usb 4-1: bad CDC descriptors [ 238.671655][ T5847] cp210x 4-1:0.25: cp210x converter detected [ 238.678410][ T5847] cp210x 4-1:0.25: failed to get vendor val 0x370b size 1: -71 [ 238.686479][ T5847] cp210x 4-1:0.25: querying part number failed [ 238.721383][ T5847] usb 4-1: cp210x converter now attached to ttyUSB0 [ 238.771574][ T5847] usb 4-1: USB disconnect, device number 34 [ 238.844742][ T5847] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 238.886998][ T5847] cp210x 4-1:0.25: device disconnected [ 239.107817][ T5899] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 239.417876][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 239.430023][ T5899] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 239.439641][ T5899] usb 5-1: config 0 has no interface number 0 [ 239.474179][ T5899] usb 5-1: config 0 interface 184 has no altsetting 0 [ 239.516269][ T5899] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 239.556615][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.595005][ T5899] usb 5-1: Product: syz [ 239.621933][ T5899] usb 5-1: Manufacturer: syz [ 239.660931][ T5899] usb 5-1: SerialNumber: syz [ 239.690185][ T5899] usb 5-1: config 0 descriptor?? [ 239.718893][ T5899] smsc75xx v1.0.0 [ 240.112794][ T5847] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 240.268396][ T7973] warning: `syz.4.571' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 240.294375][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.310509][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.350641][ T5847] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 240.365640][ T5847] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 240.385171][ T5847] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 240.411675][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.490179][ T5899] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 240.527581][ T5848] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 240.627577][ T5899] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 240.976478][ T5843] usb 2-1: USB disconnect, device number 22 [ 241.136347][ T7973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.571'. [ 241.152548][ T5899] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 241.239832][ T5899] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 241.282067][ T5899] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 241.323722][ T5899] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 241.364009][ T5899] usb 5-1: USB disconnect, device number 28 [ 241.474167][ T8003] xt_CT: No such helper "netbios-ns" [ 241.909870][ T8013] loop2: detected capacity change from 0 to 7 [ 241.921063][ T8013] Dev loop2: unable to read RDB block 7 [ 241.929084][ T8013] loop2: unable to read partition table [ 241.937831][ T8013] loop2: partition table beyond EOD, truncated [ 241.946497][ T8013] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 242.092297][ T5848] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 242.198906][ T5847] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 242.289568][ T5848] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 242.301383][ T5848] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 242.341753][ T5848] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 242.358299][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 242.369782][ T5847] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.386030][ T5847] usb 2-1: config 0 has no interface number 0 [ 242.399799][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.425681][ T5847] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 242.439284][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.490618][ T5847] usb 2-1: Product: syz [ 242.556871][ T5847] usb 2-1: Manufacturer: syz [ 242.587751][ T5847] usb 2-1: SerialNumber: syz [ 242.622071][ T5847] usb 2-1: config 0 descriptor?? [ 242.650058][ T5847] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 242.977165][ T975] usb 1-1: USB disconnect, device number 28 [ 242.987695][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 243.062359][ T8014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.090634][ T8014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.120973][ T8014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.158966][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 243.167940][ T8014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.194199][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 243.218269][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.280212][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.290970][ T5848] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 243.324597][ T5848] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input25 [ 243.339322][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.353986][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.363225][ T10] usb 5-1: Product: syz [ 243.367986][ T10] usb 5-1: Manufacturer: syz [ 243.372686][ T10] usb 5-1: SerialNumber: syz [ 243.387526][ T5848] input: failed to attach handler kbd to device input25, error: -5 [ 243.387762][ T5898] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 243.468840][ T5848] usb 3-1: USB disconnect, device number 29 [ 243.577658][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 243.603346][ T5898] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.620181][ T5898] usb 4-1: config 1 interface 0 has no altsetting 0 [ 243.642800][ T5898] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 243.655947][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.666119][ T5898] usb 4-1: Product: syz [ 243.672806][ T5898] usb 4-1: Manufacturer: syz [ 243.680005][ T5898] usb 4-1: SerialNumber: syz [ 243.688127][ T5903] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 243.833476][ T10] usb 5-1: 0:2 : does not exist [ 243.857488][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 243.883118][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.894089][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 243.928334][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 243.959097][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 243.989120][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 244.017191][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.053003][ T5903] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 244.063793][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.074770][ T5903] usb 1-1: Product: syz [ 244.112747][ T5903] usb 1-1: Manufacturer: syz [ 244.124902][ T5903] usb 1-1: SerialNumber: syz [ 244.138398][ T5903] usb 1-1: config 0 descriptor?? [ 244.147769][ T5847] gspca_spca1528: reg_w err -110 [ 244.159448][ T5847] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 244.171526][ T8028] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 244.208166][ T8024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.218537][ T8024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.924073][ T5847] usb 2-1: USB disconnect, device number 23 [ 245.769036][ T5903] rc_core: IR keymap rc-snapstream-firefly not found [ 245.788605][ T5903] Registered IR keymap rc-empty [ 245.805945][ T5903] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 245.846354][ T8054] loop2: detected capacity change from 0 to 7 [ 245.862737][ T5903] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input26 [ 245.886958][ T8054] Dev loop2: unable to read RDB block 7 [ 245.965431][ T5903] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 245.978939][ T8054] loop2: unable to read partition table [ 246.116127][ T5898] usbhid 4-1:1.0: can't add hid device: -71 [ 246.127208][ T5898] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 246.149530][ T8054] loop2: partition table beyond EOD, truncated [ 246.172244][ T5898] usb 4-1: USB disconnect, device number 35 [ 246.180526][ T8054] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 246.336980][ T5903] usb 1-1: USB disconnect, device number 29 [ 246.337052][ C0] ati_remote 1-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 247.297558][ T5843] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 247.474933][ T5843] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 247.490291][ T5843] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 247.895177][ T5843] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.941112][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.983679][ T8071] netlink: 32 bytes leftover after parsing attributes in process `syz.3.600'. [ 248.172850][ T10] usb 5-1: USB disconnect, device number 29 [ 248.500724][ T7297] udevd[7297]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.842125][ T8105] netlink: 76 bytes leftover after parsing attributes in process `syz.2.610'. [ 249.852262][ T8105] netlink: 72 bytes leftover after parsing attributes in process `syz.2.610'. [ 249.904021][ T8105] netlink: 'syz.2.610': attribute type 3 has an invalid length. [ 249.932908][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 249.977088][ T8105] netlink: 11 bytes leftover after parsing attributes in process `syz.2.610'. [ 250.088000][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 250.113773][ T10] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.131571][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 250.218442][ T10] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 250.227775][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.239403][ T10] usb 5-1: Product: syz [ 250.243630][ T10] usb 5-1: Manufacturer: syz [ 250.277884][ T10] usb 5-1: SerialNumber: syz [ 250.442761][ T8113] loop2: detected capacity change from 0 to 7 [ 250.489855][ T8113] Dev loop2: unable to read RDB block 7 [ 250.496416][ T8113] loop2: unable to read partition table [ 250.506024][ T8113] loop2: partition table beyond EOD, truncated [ 250.515676][ T8113] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 250.597458][ T8103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.608330][ T8103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.860860][ T52] usb 2-1: USB disconnect, device number 24 [ 251.433854][ T8097] netlink: 'syz.3.606': attribute type 2 has an invalid length. [ 251.819122][ T52] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 251.857599][ T5847] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 252.027896][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 252.054160][ T5847] usb 1-1: config 75 has an invalid interface number: 136 but max is 0 [ 252.082913][ T5847] usb 1-1: config 75 has no interface number 0 [ 252.105139][ T5847] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=bc.ca [ 252.116410][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.128266][ T5847] usb 1-1: Product: syz [ 252.132639][ T5847] usb 1-1: Manufacturer: syz [ 252.140911][ T5847] usb 1-1: SerialNumber: syz [ 252.150348][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 252.179683][ T52] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 252.188970][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.196992][ T52] usb 3-1: Product: syz [ 252.201632][ T52] usb 3-1: Manufacturer: syz [ 252.206469][ T52] usb 3-1: SerialNumber: syz [ 252.232851][ T52] r8152-cfgselector 3-1: Unknown version 0x0000 [ 252.248166][ T52] r8152-cfgselector 3-1: config 0 descriptor?? [ 252.373129][ T5847] ftdi_sio 1-1:75.136: FTDI USB Serial Device converter detected [ 252.433828][ T5847] ftdi_sio ttyUSB0: unknown device type: 0xbcca [ 252.535079][ T5847] usb 1-1: USB disconnect, device number 30 [ 252.712899][ T5847] ftdi_sio 1-1:75.136: device disconnected [ 252.915632][ T8152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.102496][ T8152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.423983][ T8152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.442593][ T8152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.647479][ T10] usbhid 5-1:1.0: can't add hid device: -71 [ 253.677503][ T52] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 253.685519][ T10] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 253.726760][ T10] usb 5-1: USB disconnect, device number 30 [ 253.913641][ T5847] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 253.927895][ T52] usb 4-1: device descriptor read/64, error -71 [ 254.068939][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 254.086725][ T5847] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 254.105583][ T5847] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 254.131885][ T5847] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 254.155562][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.207469][ T52] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 254.397564][ T52] usb 4-1: device descriptor read/64, error -71 [ 254.507733][ T52] usb usb4-port1: attempt power cycle [ 254.514176][ T10] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 254.730205][ T10] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 254.739262][ T10] usb 5-1: config 5 has no interface number 0 [ 254.760136][ T10] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 254.792705][ T10] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 254.998085][ T52] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 255.017717][ T5847] r8152-cfgselector 3-1: USB disconnect, device number 30 [ 255.032655][ T52] usb 4-1: device descriptor read/8, error -71 [ 255.044273][ T10] usb 5-1: config 5 interface 123 has no altsetting 0 [ 255.109835][ T10] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 255.123987][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.142959][ T10] usb 5-1: Product: syz [ 255.168121][ T10] usb 5-1: Manufacturer: syz [ 255.173636][ T10] usb 5-1: SerialNumber: syz [ 255.358039][ T52] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 255.388292][ T52] usb 4-1: device descriptor read/8, error -71 [ 255.415198][ T10] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 255.463020][ T10] usb 5-1: USB disconnect, device number 31 [ 255.528401][ T52] usb usb4-port1: unable to enumerate USB device [ 255.836450][ T8181] fuse: Bad value for 'fd' [ 255.905750][ T8182] netlink: 'syz.1.633': attribute type 10 has an invalid length. [ 256.209028][ T8186] netlink: 40 bytes leftover after parsing attributes in process `syz.4.636'. [ 256.291943][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.309585][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.467645][ T5898] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 256.530193][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 256.677488][ T10] usb 2-1: device descriptor read/64, error -71 [ 256.677554][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 256.701379][ T5898] usb 5-1: too many configurations: 14, using maximum allowed: 8 [ 256.720584][ T5898] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.748454][ T5898] usb 5-1: config 1 interface 0 has no altsetting 0 [ 256.775025][ T5898] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.797988][ T5847] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 256.807485][ T5898] usb 5-1: config 1 interface 0 has no altsetting 0 [ 256.816700][ T5898] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.830222][ T5898] usb 5-1: config 1 interface 0 has no altsetting 0 [ 256.838824][ T5898] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.852307][ T5898] usb 5-1: config 1 interface 0 has no altsetting 0 [ 256.861028][ T5898] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.893991][ T5898] usb 5-1: config 1 interface 0 has no altsetting 0 [ 256.905944][ T5898] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.923286][ T5898] usb 5-1: config 1 interface 0 has no altsetting 0 [ 256.932769][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 256.934036][ T5898] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.954703][ T5898] usb 5-1: config 1 interface 0 has no altsetting 0 [ 256.963585][ T5898] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.976734][ T5898] usb 5-1: config 1 interface 0 has no altsetting 0 [ 256.977602][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 256.995009][ T5847] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 257.004914][ T5847] usb 3-1: can't read configurations, error -22 [ 257.004915][ T5898] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 257.004945][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.030825][ T5898] usb 5-1: Product: syz [ 257.035127][ T5898] usb 5-1: Manufacturer: syz [ 257.040011][ T5898] usb 5-1: SerialNumber: syz [ 257.087518][ T10] usb 2-1: device descriptor read/64, error -71 [ 257.157496][ T5847] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 257.207843][ T10] usb usb2-port1: attempt power cycle [ 257.268616][ T5898] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input28 [ 257.282506][ T5198] bcm5974 5-1:1.0: could not read from device [ 257.305873][ T5198] bcm5974 5-1:1.0: could not read from device [ 257.322894][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 257.331730][ T5847] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 257.384366][ T5847] usb 3-1: can't read configurations, error -22 [ 257.399292][ T5198] bcm5974 5-1:1.0: could not read from device [ 257.422764][ T5847] usb usb3-port1: attempt power cycle [ 257.428010][ T5898] usb 5-1: USB disconnect, device number 32 [ 257.449999][ T5198] bcm5974 5-1:1.0: could not read from device [ 257.627525][ T975] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 257.641084][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 257.671269][ T5903] usb 1-1: USB disconnect, device number 31 [ 257.702860][ T10] usb 2-1: device descriptor read/8, error -71 [ 257.767762][ T5847] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 257.798284][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 257.805451][ T5847] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 257.817457][ T5847] usb 3-1: can't read configurations, error -22 [ 257.977539][ T5847] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 257.985549][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 258.038748][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 258.044286][ T10] usb 2-1: device descriptor read/8, error -71 [ 258.069986][ T5847] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 258.085219][ T5847] usb 3-1: can't read configurations, error -22 [ 258.093108][ T5847] usb usb3-port1: unable to enumerate USB device [ 258.114971][ T975] usb 4-1: config 0 has no interfaces? [ 258.185278][ T10] usb usb2-port1: unable to enumerate USB device [ 258.229297][ T975] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 258.300416][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.318891][ T975] usb 4-1: Product: syz [ 258.326550][ T975] usb 4-1: Manufacturer: syz [ 258.340047][ T975] usb 4-1: SerialNumber: syz [ 258.348594][ T5903] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 258.409158][ T975] usb 4-1: config 0 descriptor?? [ 258.563889][ T5903] usb 1-1: config 0 has no interfaces? [ 258.574377][ T5903] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 258.592236][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.607252][ T5903] usb 1-1: Product: syz [ 258.614608][ T5903] usb 1-1: Manufacturer: syz [ 258.619375][ T5903] usb 1-1: SerialNumber: syz [ 258.627278][ T5903] usb 1-1: config 0 descriptor?? [ 259.569995][ T975] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 259.747559][ T975] usb 5-1: Using ep0 maxpacket: 16 [ 259.772911][ T975] usb 5-1: unable to get BOS descriptor or descriptor too short [ 259.802031][ T975] usb 5-1: config 1 has an invalid interface number: 160 but max is 0 [ 259.825695][ T975] usb 5-1: config 1 has no interface number 0 [ 259.843319][ T975] usb 5-1: config 1 interface 160 has no altsetting 0 [ 259.860158][ T975] usb 5-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 259.878635][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.897059][ T975] usb 5-1: Product: syz [ 259.907164][ T975] usb 5-1: Manufacturer: syz [ 259.921037][ T975] usb 5-1: SerialNumber: syz [ 259.949564][ T8238] FAULT_INJECTION: forcing a failure. [ 259.949564][ T8238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.963051][ T8238] CPU: 0 UID: 0 PID: 8238 Comm: syz.2.654 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 259.963080][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 259.963108][ T8238] Call Trace: [ 259.963116][ T8238] [ 259.963125][ T8238] dump_stack_lvl+0x241/0x360 [ 259.963165][ T8238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.963197][ T8238] ? __pfx__printk+0x10/0x10 [ 259.963239][ T8238] should_fail_ex+0x424/0x570 [ 259.963266][ T8238] _copy_from_user+0x2d/0xb0 [ 259.963298][ T8238] move_addr_to_kernel+0x7f/0x170 [ 259.963328][ T8238] __sys_sendto+0x26a/0x4c0 [ 259.963355][ T8238] ? __pfx___sys_sendto+0x10/0x10 [ 259.963389][ T8238] ? __fget_files+0x2a/0x420 [ 259.963419][ T8238] ? ksys_write+0x275/0x2d0 [ 259.963453][ T8238] __ia32_sys_sendto+0xdd/0x100 [ 259.963477][ T8238] __do_fast_syscall_32+0xb4/0x110 [ 259.963504][ T8238] ? exc_page_fault+0x5f8/0x920 [ 259.963533][ T8238] do_fast_syscall_32+0x34/0x80 [ 259.963560][ T8238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.963588][ T8238] RIP: 0023:0xf73fd579 [ 259.963606][ T8238] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 259.963624][ T8238] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 259.963647][ T8238] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000180 [ 259.963662][ T8238] RDX: 0000000000000011 RSI: 0000000000048000 RDI: 0000000080000200 [ 259.963676][ T8238] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 259.963700][ T8238] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 259.963714][ T8238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.963744][ T8238] [ 260.332533][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 260.376348][ T5898] usb 4-1: USB disconnect, device number 40 [ 260.450710][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.463109][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.466773][ T8239] bridge_slave_1: left allmulticast mode [ 260.495971][ T8239] bridge_slave_1: left promiscuous mode [ 260.517175][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.554705][ T8239] bridge_slave_0: left allmulticast mode [ 260.564026][ T8239] bridge_slave_0: left promiscuous mode [ 260.583849][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.596963][ T36] [ 260.599691][ T36] ============================= [ 260.604598][ T36] WARNING: suspicious RCU usage [ 260.609627][ T36] 6.15.0-rc1-syzkaller #0 Not tainted [ 260.615011][ T36] ----------------------------- [ 260.619917][ T36] net/sched/sch_generic.c:1285 suspicious rcu_dereference_protected() usage! [ 260.628918][ T36] [ 260.628918][ T36] other info that might help us debug this: [ 260.628918][ T36] [ 260.639279][ T36] [ 260.639279][ T36] rcu_scheduler_active = 2, debug_locks = 1 [ 260.647630][ T36] 3 locks held by kworker/u8:2/36: [ 260.652819][ T36] #0: ffff8881437dc948 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 260.664035][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 260.677030][ T36] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 260.686823][ T36] [ 260.686823][ T36] stack backtrace: [ 260.692768][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 260.692789][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.692803][ T36] Workqueue: bond0 bond_mii_monitor [ 260.692839][ T36] Call Trace: [ 260.692850][ T36] [ 260.692859][ T36] dump_stack_lvl+0x241/0x360 [ 260.692892][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.692915][ T36] ? __pfx__printk+0x10/0x10 [ 260.692938][ T36] ? print_lock+0x171/0x1a0 [ 260.692968][ T36] lockdep_rcu_suspicious+0x175/0x200 [ 260.692998][ T36] dev_deactivate_queue+0x8f/0x1b0 [ 260.693033][ T36] dev_deactivate_many+0x14c/0xca0 [ 260.693062][ T36] ? __pfx_dev_deactivate_many+0x10/0x10 [ 260.693088][ T36] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 260.693114][ T36] dev_deactivate+0x186/0x280 [ 260.693149][ T36] ? __pfx_dev_deactivate+0x10/0x10 [ 260.693176][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 260.693195][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 260.693209][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 260.693233][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 260.693254][ T36] linkwatch_do_dev+0x10a/0x170 [ 260.693279][ T36] ethtool_op_get_link+0x15/0x60 [ 260.693311][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 260.693342][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 260.693373][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 260.693420][ T36] bond_mii_monitor+0x49d/0x3170 [ 260.693465][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 260.693498][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 260.693534][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 260.693563][ T36] ? register_lock_class+0x54/0x330 [ 260.693591][ T36] ? __lock_acquire+0xad5/0xd80 [ 260.693639][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 260.693662][ T36] process_scheduled_works+0xac3/0x18e0 [ 260.693701][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 260.693730][ T36] ? assign_work+0x367/0x3d0 [ 260.693761][ T36] worker_thread+0x870/0xd50 [ 260.693802][ T36] ? __kthread_parkme+0x1a8/0x200 [ 260.693826][ T36] ? __pfx_worker_thread+0x10/0x10 [ 260.693844][ T36] kthread+0x7b7/0x940 [ 260.693867][ T36] ? __pfx_worker_thread+0x10/0x10 [ 260.693894][ T36] ? __pfx_kthread+0x10/0x10 [ 260.693920][ T36] ? __pfx_kthread+0x10/0x10 [ 260.693948][ T36] ? __pfx_kthread+0x10/0x10 [ 260.693971][ T36] ? __pfx_kthread+0x10/0x10 [ 260.693991][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.694006][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 260.694026][ T36] ? __pfx_kthread+0x10/0x10 [ 260.694062][ T36] ret_from_fork+0x4b/0x80 [ 260.694084][ T36] ? __pfx_kthread+0x10/0x10 [ 260.694110][ T36] ret_from_fork_asm+0x1a/0x30 [ 260.694137][ T36] [ 260.988451][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.994946][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.044847][ T36] [ 261.047324][ T36] ============================= [ 261.052463][ T36] WARNING: suspicious RCU usage [ 261.057427][ T36] 6.15.0-rc1-syzkaller #0 Not tainted [ 261.062990][ T36] ----------------------------- [ 261.068009][ T36] ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage! [ 261.077094][ T36] [ 261.077094][ T36] other info that might help us debug this: [ 261.077094][ T36] [ 261.087530][ T36] [ 261.087530][ T36] rcu_scheduler_active = 2, debug_locks = 1 [ 261.095674][ T36] 3 locks held by kworker/u8:2/36: [ 261.100873][ T36] #0: ffff8881437dc948 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 261.112050][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 261.125059][ T36] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 261.134853][ T36] [ 261.134853][ T36] stack backtrace: [ 261.140828][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 261.140849][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.140861][ T36] Workqueue: bond0 bond_mii_monitor [ 261.140887][ T36] Call Trace: [ 261.140895][ T36] [ 261.140902][ T36] dump_stack_lvl+0x241/0x360 [ 261.140935][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.140956][ T36] ? __pfx__printk+0x10/0x10 [ 261.140986][ T36] lockdep_rcu_suspicious+0x175/0x200 [ 261.141009][ T36] dev_deactivate_many+0x228/0xca0 [ 261.141036][ T36] ? __pfx_dev_deactivate_many+0x10/0x10 [ 261.141063][ T36] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 261.141082][ T36] dev_deactivate+0x186/0x280 [ 261.141107][ T36] ? __pfx_dev_deactivate+0x10/0x10 [ 261.141127][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 261.141143][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 261.141158][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 261.141193][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 261.141211][ T36] linkwatch_do_dev+0x10a/0x170 [ 261.141229][ T36] ethtool_op_get_link+0x15/0x60 [ 261.141252][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 261.141273][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 261.141298][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 261.141332][ T36] bond_mii_monitor+0x49d/0x3170 [ 261.141362][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 261.141385][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 261.141412][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 261.141436][ T36] ? register_lock_class+0x54/0x330 [ 261.141458][ T36] ? __lock_acquire+0xad5/0xd80 [ 261.141492][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 261.141509][ T36] process_scheduled_works+0xac3/0x18e0 [ 261.141554][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 261.141582][ T36] ? assign_work+0x367/0x3d0 [ 261.141603][ T36] worker_thread+0x870/0xd50 [ 261.141632][ T36] ? __kthread_parkme+0x1a8/0x200 [ 261.141655][ T36] ? __pfx_worker_thread+0x10/0x10 [ 261.141673][ T36] kthread+0x7b7/0x940 [ 261.141696][ T36] ? __pfx_worker_thread+0x10/0x10 [ 261.141715][ T36] ? __pfx_kthread+0x10/0x10 [ 261.141735][ T36] ? __pfx_kthread+0x10/0x10 [ 261.141756][ T36] ? __pfx_kthread+0x10/0x10 [ 261.141777][ T36] ? __pfx_kthread+0x10/0x10 [ 261.141798][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.141812][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 261.141830][ T36] ? __pfx_kthread+0x10/0x10 [ 261.141852][ T36] ret_from_fork+0x4b/0x80 [ 261.141868][ T36] ? __pfx_kthread+0x10/0x10 [ 261.141889][ T36] ret_from_fork_asm+0x1a/0x30 [ 261.141915][ T36] [ 261.159864][ T36] [ 261.405359][ T36] ============================= [ 261.410292][ T36] WARNING: suspicious RCU usage [ 261.415190][ T36] 6.15.0-rc1-syzkaller #0 Not tainted [ 261.420755][ T36] ----------------------------- [ 261.425652][ T36] net/sched/sch_generic.c:1301 suspicious rcu_dereference_protected() usage! [ 261.434570][ T36] [ 261.434570][ T36] other info that might help us debug this: [ 261.434570][ T36] [ 261.444903][ T36] [ 261.444903][ T36] rcu_scheduler_active = 2, debug_locks = 1 [ 261.453068][ T36] 3 locks held by kworker/u8:2/36: [ 261.458274][ T36] #0: ffff8881437dc948 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 261.469478][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 261.482527][ T36] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 261.492357][ T36] [ 261.492357][ T36] stack backtrace: [ 261.498323][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 261.498360][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.498375][ T36] Workqueue: bond0 bond_mii_monitor [ 261.498411][ T36] Call Trace: [ 261.498420][ T36] [ 261.498428][ T36] dump_stack_lvl+0x241/0x360 [ 261.498459][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.498484][ T36] ? __pfx__printk+0x10/0x10 [ 261.498510][ T36] ? print_lock+0x171/0x1a0 [ 261.498548][ T36] lockdep_rcu_suspicious+0x175/0x200 [ 261.498575][ T36] dev_reset_queue+0x88/0x1b0 [ 261.498602][ T36] dev_deactivate_many+0x61d/0xca0 [ 261.498628][ T36] ? dev_deactivate_many+0x2e5/0xca0 [ 261.498654][ T36] ? __pfx_dev_deactivate_many+0x10/0x10 [ 261.498686][ T36] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 261.498711][ T36] dev_deactivate+0x186/0x280 [ 261.498738][ T36] ? __pfx_dev_deactivate+0x10/0x10 [ 261.498761][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 261.498779][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 261.498795][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 261.498823][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 261.498847][ T36] linkwatch_do_dev+0x10a/0x170 [ 261.498866][ T36] ethtool_op_get_link+0x15/0x60 [ 261.498892][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 261.498916][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 261.498942][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 261.498985][ T36] bond_mii_monitor+0x49d/0x3170 [ 261.499019][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 261.499045][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 261.499074][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 261.499101][ T36] ? register_lock_class+0x54/0x330 [ 261.499127][ T36] ? __lock_acquire+0xad5/0xd80 [ 261.499165][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 261.499184][ T36] process_scheduled_works+0xac3/0x18e0 [ 261.499227][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 261.499262][ T36] ? assign_work+0x367/0x3d0 [ 261.499290][ T36] worker_thread+0x870/0xd50 [ 261.499323][ T36] ? __kthread_parkme+0x1a8/0x200 [ 261.499347][ T36] ? __pfx_worker_thread+0x10/0x10 [ 261.499368][ T36] kthread+0x7b7/0x940 [ 261.499395][ T36] ? __pfx_worker_thread+0x10/0x10 [ 261.499422][ T36] ? __pfx_kthread+0x10/0x10 [ 261.499444][ T36] ? __pfx_kthread+0x10/0x10 [ 261.499467][ T36] ? __pfx_kthread+0x10/0x10 [ 261.499490][ T36] ? __pfx_kthread+0x10/0x10 [ 261.499512][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.499534][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 261.499558][ T36] ? __pfx_kthread+0x10/0x10 [ 261.499583][ T36] ret_from_fork+0x4b/0x80 [ 261.499600][ T36] ? __pfx_kthread+0x10/0x10 [ 261.499624][ T36] ret_from_fork_asm+0x1a/0x30 [ 261.499653][ T36] [ 261.500775][ T36] [ 261.773533][ T36] ============================= [ 261.778500][ T36] WARNING: suspicious RCU usage [ 261.783385][ T36] 6.15.0-rc1-syzkaller #0 Not tainted [ 261.788846][ T36] ----------------------------- [ 261.793715][ T36] net/sched/sch_generic.c:1332 suspicious rcu_dereference_protected() usage! [ 261.802543][ T36] [ 261.802543][ T36] other info that might help us debug this: [ 261.802543][ T36] [ 261.812897][ T36] [ 261.812897][ T36] rcu_scheduler_active = 2, debug_locks = 1 [ 261.821034][ T36] 3 locks held by kworker/u8:2/36: [ 261.826174][ T36] #0: ffff8881437dc948 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 261.837465][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 261.850493][ T36] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 261.860335][ T36] [ 261.860335][ T36] stack backtrace: [ 261.866273][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 261.866301][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.866316][ T36] Workqueue: bond0 bond_mii_monitor [ 261.866351][ T36] Call Trace: [ 261.866361][ T36] [ 261.866370][ T36] dump_stack_lvl+0x241/0x360 [ 261.866406][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.866432][ T36] ? __pfx__printk+0x10/0x10 [ 261.866467][ T36] lockdep_rcu_suspicious+0x175/0x200 [ 261.866497][ T36] dev_deactivate_many+0x93b/0xca0 [ 261.866529][ T36] ? __pfx_dev_deactivate_many+0x10/0x10 [ 261.866559][ T36] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 261.866580][ T36] dev_deactivate+0x186/0x280 [ 261.866609][ T36] ? __pfx_dev_deactivate+0x10/0x10 [ 261.866635][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 261.866653][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 261.866669][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 261.866696][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 261.866716][ T36] linkwatch_do_dev+0x10a/0x170 [ 261.866739][ T36] ethtool_op_get_link+0x15/0x60 [ 261.866770][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 261.866796][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 261.866823][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 261.866860][ T36] bond_mii_monitor+0x49d/0x3170 [ 261.866894][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 261.866925][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 261.866954][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 261.866980][ T36] ? register_lock_class+0x54/0x330 [ 261.867002][ T36] ? __lock_acquire+0xad5/0xd80 [ 261.867042][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 261.867064][ T36] process_scheduled_works+0xac3/0x18e0 [ 261.867108][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 261.867135][ T36] ? assign_work+0x367/0x3d0 [ 261.867159][ T36] worker_thread+0x870/0xd50 [ 261.867197][ T36] ? __kthread_parkme+0x1a8/0x200 [ 261.867222][ T36] ? __pfx_worker_thread+0x10/0x10 [ 261.867250][ T36] kthread+0x7b7/0x940 [ 261.867275][ T36] ? __pfx_worker_thread+0x10/0x10 [ 261.867297][ T36] ? __pfx_kthread+0x10/0x10 [ 261.867320][ T36] ? __pfx_kthread+0x10/0x10 [ 261.867351][ T36] ? __pfx_kthread+0x10/0x10 [ 261.867378][ T36] ? __pfx_kthread+0x10/0x10 [ 261.867405][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.867423][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 261.867446][ T36] ? __pfx_kthread+0x10/0x10 [ 261.867477][ T36] ret_from_fork+0x4b/0x80 [ 261.867498][ T36] ? __pfx_kthread+0x10/0x10 [ 261.867537][ T36] ret_from_fork_asm+0x1a/0x30 [ 261.867569][ T36] [ 262.137703][ T36] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 262.147169][ T36] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 36, name: kworker/u8:2 [ 262.156450][ T36] preempt_count: 0, expected: 0 [ 262.161509][ T36] RCU nest depth: 1, expected: 0 [ 262.166785][ T36] 3 locks held by kworker/u8:2/36: [ 262.172766][ T36] #0: ffff8881437dc948 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 262.184209][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 262.197949][ T36] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 262.208878][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 262.208908][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.208923][ T36] Workqueue: bond0 bond_mii_monitor [ 262.208955][ T36] Call Trace: [ 262.208962][ T36] [ 262.208968][ T36] dump_stack_lvl+0x241/0x360 [ 262.208996][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.209031][ T36] __might_resched+0x558/0x6c0 [ 262.209055][ T36] ? __pfx___might_resched+0x10/0x10 [ 262.209078][ T36] ? dump_stack_lvl+0x2fd/0x360 [ 262.209105][ T36] down_read+0x90/0xa50 [ 262.209127][ T36] ? __local_bh_enable_ip+0x168/0x200 [ 262.209142][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 262.209161][ T36] ? __local_bh_enable_ip+0x168/0x200 [ 262.209177][ T36] ? __pfx_down_read+0x10/0x10 [ 262.209195][ T36] ? dev_deactivate_many+0xa9b/0xca0 [ 262.209219][ T36] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 262.209242][ T36] ? dev_get_flags+0x147/0x1d0 [ 262.209261][ T36] wext_netdev_notifier_call+0x1f/0x120 [ 262.209289][ T36] notifier_call_chain+0x1a5/0x3f0 [ 262.209313][ T36] netdev_state_change+0x123/0x1a0 [ 262.209335][ T36] ? __pfx_netdev_state_change+0x10/0x10 [ 262.209357][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 262.209373][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 262.209388][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 262.209412][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 262.209429][ T36] linkwatch_do_dev+0x112/0x170 [ 262.209453][ T36] ethtool_op_get_link+0x15/0x60 [ 262.209475][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 262.209497][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 262.209520][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 262.209554][ T36] bond_mii_monitor+0x49d/0x3170 [ 262.209583][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 262.209607][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 262.209633][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 262.209656][ T36] ? register_lock_class+0x54/0x330 [ 262.209675][ T36] ? __lock_acquire+0xad5/0xd80 [ 262.209710][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 262.209727][ T36] process_scheduled_works+0xac3/0x18e0 [ 262.209766][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 262.209791][ T36] ? assign_work+0x367/0x3d0 [ 262.209812][ T36] worker_thread+0x870/0xd50 [ 262.209842][ T36] ? __kthread_parkme+0x1a8/0x200 [ 262.209863][ T36] ? __pfx_worker_thread+0x10/0x10 [ 262.209882][ T36] kthread+0x7b7/0x940 [ 262.209904][ T36] ? __pfx_worker_thread+0x10/0x10 [ 262.209930][ T36] ? __pfx_kthread+0x10/0x10 [ 262.209956][ T36] ? __pfx_kthread+0x10/0x10 [ 262.209985][ T36] ? __pfx_kthread+0x10/0x10 [ 262.210014][ T36] ? __pfx_kthread+0x10/0x10 [ 262.210044][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 262.210062][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 262.210080][ T36] ? __pfx_kthread+0x10/0x10 [ 262.210101][ T36] ret_from_fork+0x4b/0x80 [ 262.210117][ T36] ? __pfx_kthread+0x10/0x10 [ 262.210138][ T36] ret_from_fork_asm+0x1a/0x30 [ 262.210164][ T36] [ 262.210215][ T36] [ 262.505903][ T36] ============================= [ 262.510759][ T36] [ BUG: Invalid wait context ] [ 262.515599][ T36] 6.15.0-rc1-syzkaller #0 Tainted: G W [ 262.522537][ T36] ----------------------------- [ 262.527402][ T36] kworker/u8:2/36 is trying to lock: [ 262.532696][ T36] ffffffff900f0790 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120 [ 262.542297][ T36] other info that might help us debug this: [ 262.548202][ T36] context-{5:5} [ 262.551650][ T36] 3 locks held by kworker/u8:2/36: [ 262.556750][ T36] #0: ffff8881437dc948 ((wq_completion)bond0#5){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 262.567821][ T36] #1: ffffc90000ad7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 262.580704][ T36] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 262.590536][ T36] stack backtrace: [ 262.594262][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G W 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 262.594284][ T36] Tainted: [W]=WARN [ 262.594290][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.594301][ T36] Workqueue: bond0 bond_mii_monitor [ 262.594327][ T36] Call Trace: [ 262.594335][ T36] [ 262.594342][ T36] dump_stack_lvl+0x241/0x360 [ 262.594367][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.594388][ T36] ? __pfx__printk+0x10/0x10 [ 262.594411][ T36] __lock_acquire+0xc30/0xd80 [ 262.594431][ T36] lock_acquire+0x116/0x2f0 [ 262.594446][ T36] ? wext_netdev_notifier_call+0x1f/0x120 [ 262.594474][ T36] down_read+0xb3/0xa50 [ 262.594493][ T36] ? wext_netdev_notifier_call+0x1f/0x120 [ 262.594515][ T36] ? __local_bh_enable_ip+0x168/0x200 [ 262.594530][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 262.594547][ T36] ? __local_bh_enable_ip+0x168/0x200 [ 262.594561][ T36] ? __pfx_down_read+0x10/0x10 [ 262.594579][ T36] ? dev_deactivate_many+0xa9b/0xca0 [ 262.594601][ T36] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 262.594620][ T36] ? dev_get_flags+0x147/0x1d0 [ 262.594636][ T36] wext_netdev_notifier_call+0x1f/0x120 [ 262.594660][ T36] notifier_call_chain+0x1a5/0x3f0 [ 262.594681][ T36] netdev_state_change+0x123/0x1a0 [ 262.594701][ T36] ? __pfx_netdev_state_change+0x10/0x10 [ 262.594721][ T36] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 262.594737][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 262.594751][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 262.594773][ T36] ? rfc2863_policy+0x1ce/0x3f0 [ 262.594789][ T36] linkwatch_do_dev+0x112/0x170 [ 262.594805][ T36] ethtool_op_get_link+0x15/0x60 [ 262.594827][ T36] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 262.594848][ T36] bond_check_dev_link+0x1fb/0x4b0 [ 262.594869][ T36] ? __pfx_bond_check_dev_link+0x10/0x10 [ 262.594894][ T36] bond_mii_monitor+0x49d/0x3170 [ 262.594918][ T36] ? bond_mii_monitor+0x17f/0x3170 [ 262.594940][ T36] ? do_raw_spin_unlock+0x13c/0x8b0 [ 262.594962][ T36] ? __pfx_bond_mii_monitor+0x10/0x10 [ 262.594983][ T36] ? register_lock_class+0x54/0x330 [ 262.594999][ T36] ? __lock_acquire+0xad5/0xd80 [ 262.595022][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 262.595039][ T36] process_scheduled_works+0xac3/0x18e0 [ 262.595065][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 262.595085][ T36] ? assign_work+0x367/0x3d0 [ 262.595102][ T36] worker_thread+0x870/0xd50 [ 262.595124][ T36] ? __kthread_parkme+0x1a8/0x200 [ 262.595143][ T36] ? __pfx_worker_thread+0x10/0x10 [ 262.595161][ T36] kthread+0x7b7/0x940 [ 262.595181][ T36] ? __pfx_worker_thread+0x10/0x10 [ 262.595199][ T36] ? __pfx_kthread+0x10/0x10 [ 262.595218][ T36] ? __pfx_kthread+0x10/0x10 [ 262.595242][ T36] ? __pfx_kthread+0x10/0x10 [ 262.595261][ T36] ? __pfx_kthread+0x10/0x10 [ 262.595280][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 262.595294][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 262.595310][ T36] ? __pfx_kthread+0x10/0x10 [ 262.595330][ T36] ret_from_fork+0x4b/0x80 [ 262.595345][ T36] ? __pfx_kthread+0x10/0x10 [ 262.595365][ T36] ret_from_fork_asm+0x1a/0x30 [ 262.595384][ T36] [ 262.922068][ T10] usb 1-1: USB disconnect, device number 32 [ 262.997847][ T8239] bond0: (slave bridge0): Releasing backup interface [ 263.027333][ T8247] : renamed from lo (while UP) [ 263.094659][ T8251] pimreg: entered allmulticast mode [ 263.101794][ T975] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 263.109535][ T975] visor 5-1:1.160: Handspring Visor / Palm OS converter detected [ 263.122018][ T975] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 263.132679][ T975] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 263.146915][ T975] usb 5-1: USB disconnect, device number 33 [ 263.156969][ T975] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 263.170433][ T975] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 263.180308][ T975] visor 5-1:1.160: device disconnected