last executing test programs: 8.323655159s ago: executing program 1 (id=541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080007000000000014000000466f006500660000401190780a010102ac14141a44041c604e204e22004d907881e58e242842001fa129f05a9347a3403badcf8b2687609808698f5c74c124c6f36d91460055a6e2f48d33ccfb079cac0291b1fa7e24edbabd2e8271224363e501eb7b8f21"], 0x73) 8.091834476s ago: executing program 1 (id=542): ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000003500)={0x0, 0x0, '\x00', @raw_data=[0x3, 0x5, 0x7fff, 0xbcd, 0x957, 0x1, 0xfffffffb, 0x3, 0x7ff, 0xe8, 0xbd, 0x0, 0x7, 0x68e24ef5, 0x9, 0x3ff, 0x10000, 0x3, 0x1, 0x7ff3, 0x0, 0x6, 0xc0, 0xffffffff, 0x7, 0x5, 0x6, 0xe, 0x3, 0xff, 0x5, 0xfff]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00030005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x400dc) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000004e2300000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000010000000000000006000000000000000000000000000000080000000100000001000000000000000c0015000000"], 0xc4}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000001680)={'ip_vti0\x00', r3, 0x0, 0x8000, 0x7, 0x100, {{0x26, 0x4, 0x1, 0x0, 0x98, 0x68, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@end, @timestamp_prespec={0x44, 0x44, 0x9, 0x3, 0x7, [{@empty, 0x7}, {@private=0xa010101, 0x7}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xc}, {@remote, 0x8}, {@broadcast, 0x9}, {@empty}, {@multicast2, 0x8}]}, @rr={0x7, 0x17, 0xe2, [@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1b, 0x39, [@empty, @loopback, @multicast2, @rand_addr=0x64010101, @remote, @broadcast]}, @rr={0x7, 0xb, 0x75, [@loopback, @local]}]}}}}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8"], 0xb8}}, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xbff8, 0x3, 0x4, 0x5, 0x10, "e0ba6cd63df3a082"}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000080)={0x4, 0x1, 0x0, 'queue0\x00', 0x7}) 8.010872635s ago: executing program 1 (id=543): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0x1263, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lseek(0xffffffffffffffff, 0xfa3e, 0x3) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0xe921778a4b67075c}) socket(0x200000000000011, 0x3, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041", 0x1c}], 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$key(0xf, 0x3, 0x2) read$FUSE(r5, &(0x7f00000031c0)={0x2020}, 0x2020) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x9, r3, &(0x7f0000000080)="23a0d8172ad831116f9dcdd480ce152d4084ece9926fca385135218d99845d2f0f67c00814d5456ae652b70118c4131c771fe4b5d5635b0d4fdd248581c3346a73293f7fb9de135ca9bf935ac204428ff2563cc60c645f5d4442ad5d7f82c197c3ba0d34", 0x64, 0x5, 0x0, 0x3}]) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000999000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000200)="27670fee9b660600007635b870008ee0b832000f00d866b8ff0000000f23c80f21f866350c0080000f23f8ba6100b046ee67660f388110d9f4f30f07", 0x3c}], 0x1, 0x61, &(0x7f00000002c0)=[@efer], 0x1) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.623687898s ago: executing program 4 (id=546): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x1000000, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0x4d613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x1}) 7.443863777s ago: executing program 4 (id=547): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000240)={0x0, 0x1, @start={0x3, 0x1}}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc090, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "b56a7019"}, @global=@item_012={0x1, 0x1, 0x9, '#'}]}}, 0x0}, 0x0) 6.174763548s ago: executing program 1 (id=551): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="000f02000000"], 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x1c, 0x5e, 0x1, 0x0, 0x25dfdbfd, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0x4}]}, 0x1c}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x64, 0x0, 0x0, &(0x7f00000001c0)=[@dontfrag={{0x18, 0x29, 0x3e, 0x93}}], 0x18}, 0x40c0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000580)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.745099736s ago: executing program 3 (id=554): ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000003500)={0x0, 0x0, '\x00', @raw_data=[0x3, 0x5, 0x7fff, 0xbcd, 0x957, 0x1, 0xfffffffb, 0x3, 0x7ff, 0xe8, 0xbd, 0x0, 0x7, 0x68e24ef5, 0x9, 0x3ff, 0x10000, 0x3, 0x1, 0x7ff3, 0x0, 0x6, 0xc0, 0xffffffff, 0x7, 0x5, 0x6, 0xe, 0x3, 0xff, 0x5, 0xfff]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00030005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x400dc) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000004e2300000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000010000000000000006000000000000000000000000000000080000000100000001000000000000000c0015000000"], 0xc4}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000001680)={'ip_vti0\x00', r4, 0x0, 0x8000, 0x7, 0x100, {{0x26, 0x4, 0x1, 0x0, 0x98, 0x68, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@end, @timestamp_prespec={0x44, 0x44, 0x9, 0x3, 0x7, [{@empty, 0x7}, {@private=0xa010101, 0x7}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xc}, {@remote, 0x8}, {@broadcast, 0x9}, {@empty}, {@multicast2, 0x8}]}, @rr={0x7, 0x17, 0xe2, [@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1b, 0x39, [@empty, @loopback, @multicast2, @rand_addr=0x64010101, @remote, @broadcast]}, @rr={0x7, 0xb, 0x75, [@loopback, @local]}]}}}}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8"], 0xb8}}, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xbff8, 0x3, 0x4, 0x5, 0x10, "e0ba6cd63df3a082"}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000080)={0x4, 0x1, 0x0, 'queue0\x00', 0x7}) 5.540053234s ago: executing program 0 (id=555): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[0x0]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './control\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fcntl$getown(r2, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'veth1_macvtap\x00', 0x100}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$inet_smc(0x2b, 0x1, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x10006576, 0x3}) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r5, 0x100000000) r6 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r6, 0x0, 0x0) syz_usb_connect(0x5, 0x1b, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x22, 0x97, 0x1, 0x20, 0x90a, 0x1001, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x40, 0xa}}]}}, 0x0) unlinkat(r6, &(0x7f0000000200)='./control\x00', 0x200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x3}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r6) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc100}, 0x4040) fanotify_init(0x40, 0x1) 4.841493358s ago: executing program 3 (id=556): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000202", @ANYBLOB]) r1 = memfd_create(&(0x7f0000000040)='/dev/udmabuf\x00', 0x5) r2 = memfd_create(&(0x7f00000000c0)='(:\x00', 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000580)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea8\xd1\xd2~\xda\x00\\{\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\x05\x00k\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r3, r4, &(0x7f00000001c0), 0x8) fcntl$addseals(r4, 0x409, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f00000011c0)=0x0) io_submit(r7, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x1, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000001c0)='m', 0x1}]) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)={0x0, 0x5, [{r1, 0x0, 0x1000000, 0x1000}, {r2, 0x0, 0xffffc000, 0x4c6e770fffd1c297}, {0xffffffffffffffff, 0x0, 0x1000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x1000}, {r6, 0x0, 0x4000, 0x2000}]}) r8 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x400004, 0x13900}, &(0x7f0000000000), &(0x7f0000000200)) poll(&(0x7f0000000080)=[{r8, 0x5}], 0x1, 0x7ff) open(0x0, 0x86442, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x814}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x38}}, 0x0) 4.431467585s ago: executing program 3 (id=559): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @local=@item_012={0x1, 0x2, 0x7, 'e'}, @main=@item_012={0x2, 0x0, 0x1, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9cb8eba1"}]}}, 0x0}, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x115) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140)=0x6, 0x1) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0x501c4814, &(0x7f00000000c0)={0x3, 0xffffffff, 0xfffbffff, 0x400, 0x4e496f8, 0x1ff}) 3.113232714s ago: executing program 1 (id=566): ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000003500)={0x0, 0x0, '\x00', @raw_data=[0x3, 0x5, 0x7fff, 0xbcd, 0x957, 0x1, 0xfffffffb, 0x3, 0x7ff, 0xe8, 0xbd, 0x0, 0x7, 0x68e24ef5, 0x9, 0x3ff, 0x10000, 0x3, 0x1, 0x7ff3, 0x0, 0x6, 0xc0, 0xffffffff, 0x7, 0x5, 0x6, 0xe, 0x3, 0xff, 0x5, 0xfff]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00030005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x400dc) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000004e2300000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000010000000000000006000000000000000000000000000000080000000100000001000000000000000c0015000000"], 0xc4}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000001680)={'ip_vti0\x00', r3, 0x0, 0x8000, 0x7, 0x100, {{0x26, 0x4, 0x1, 0x0, 0x98, 0x68, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@end, @timestamp_prespec={0x44, 0x44, 0x9, 0x3, 0x7, [{@empty, 0x7}, {@private=0xa010101, 0x7}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xc}, {@remote, 0x8}, {@broadcast, 0x9}, {@empty}, {@multicast2, 0x8}]}, @rr={0x7, 0x17, 0xe2, [@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1b, 0x39, [@empty, @loopback, @multicast2, @rand_addr=0x64010101, @remote, @broadcast]}, @rr={0x7, 0xb, 0x75, [@loopback, @local]}]}}}}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8"], 0xb8}}, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xbff8, 0x3, 0x4, 0x5, 0x10, "e0ba6cd63df3a082"}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000080)={0x4, 0x1, 0x0, 'queue0\x00', 0x7}) 2.987208664s ago: executing program 1 (id=568): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x48, 0x0, 0x14) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20541, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r3, @ANYBLOB="80008f0b0a000200aaaaaaaaaaaa00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) io_setup(0x0, &(0x7f0000000300)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/36, 0x24}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/86, 0x56}], 0x3}, 0x9}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) gettid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [], 0x5}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x3], 0x5}}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000004fe) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r9, 0x0, 0x0, 0x0, 0x0, 0xd, @mcast1, @loopback, 0x40, 0x7800, 0xfffffffc}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a4000000000"], 0x6c}}, 0x0) 2.811906118s ago: executing program 2 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c3a07800c0004005f3a0000000000000c0003"], 0x30}}, 0x20088004) 2.803017449s ago: executing program 2 (id=571): r0 = open(0x0, 0x14927e, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f00000000c0)={0x1, 0x7f, 0x1, 0x0, 0x10001000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r2, 0x0, 0x43) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xe042, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x50, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x50}}, 0x557be85675866f8f) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x5}, 0x1c) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x204) close_range(r1, 0xffffffffffffffff, 0x0) 2.72522278s ago: executing program 4 (id=572): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1ffffffffffffe3e, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 2.655665834s ago: executing program 3 (id=573): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (rerun: 32) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x7, 0x0, 0xb49, 0x9, 0x6, 0x2, 0x3}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) (async) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000100)={'gre0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f0000000800)="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", 0x2000, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) recvmmsg(r8, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {0x0}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000440)=""/140, 0x8c}], 0x5}}], 0x1, 0x2, 0x0) 2.524957736s ago: executing program 2 (id=574): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c00000010000d040200"/20, @ANYRES32=r2, @ANYBLOB="00000000040000004c001280110001006272696467655f736c61766500000000340005800600023f00000005050001"], 0x6c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 2.518365283s ago: executing program 3 (id=575): fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x0) select(0x40, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x1, 0x3, 0x7, 0x7, 0x8}, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000000040)=0x1) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x110, r0, 0x7000) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) 2.487547924s ago: executing program 4 (id=576): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300031000000000000000000000000200090008000000e40000000000000005000600000000000a00002c09bbfc00fc01000000000000000000000000000000000000000000000200010000000000000000160000000005000500000000000a"], 0x80}, 0x1, 0x7, 0x0, 0x1f00}, 0x0) 2.155681881s ago: executing program 0 (id=577): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="fe0f0000e000030000000000000000000000000008"], 0x38}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x360}}, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r1}) (rerun: 32) 2.155145049s ago: executing program 2 (id=578): ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000003500)={0x0, 0x0, '\x00', @raw_data=[0x3, 0x5, 0x7fff, 0xbcd, 0x957, 0x1, 0xfffffffb, 0x3, 0x7ff, 0xe8, 0xbd, 0x0, 0x7, 0x68e24ef5, 0x9, 0x3ff, 0x10000, 0x3, 0x1, 0x7ff3, 0x0, 0x6, 0xc0, 0xffffffff, 0x7, 0x5, 0x6, 0xe, 0x3, 0xff, 0x5, 0xfff]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00030005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x400dc) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000004e2300000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000010000000000000006000000000000000000000000000000080000000100000001000000000000000c0015000000"], 0xc4}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000001680)={'ip_vti0\x00', r3, 0x0, 0x8000, 0x7, 0x100, {{0x26, 0x4, 0x1, 0x0, 0x98, 0x68, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@end, @timestamp_prespec={0x44, 0x44, 0x9, 0x3, 0x7, [{@empty, 0x7}, {@private=0xa010101, 0x7}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xc}, {@remote, 0x8}, {@broadcast, 0x9}, {@empty}, {@multicast2, 0x8}]}, @rr={0x7, 0x17, 0xe2, [@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1b, 0x39, [@empty, @loopback, @multicast2, @rand_addr=0x64010101, @remote, @broadcast]}, @rr={0x7, 0xb, 0x75, [@loopback, @local]}]}}}}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8"], 0xb8}}, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xbff8, 0x3, 0x4, 0x5, 0x10, "e0ba6cd63df3a082"}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000080)={0x4, 0x1, 0x0, 'queue0\x00', 0x7}) 2.006309659s ago: executing program 2 (id=579): unshare(0x6a040000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4040800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x80010, r2, 0xffffd000) listen(0xffffffffffffffff, 0x7ff) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) syz_usb_connect(0x0, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003fb9aa0400d050410dbf70102030109029c05b1450000824788c39a1ce59ed03e75ebd62d3e3f08dceca704150a1e388cd6bab003819861313b765dfe5aa95ce9"], 0x0) 1.835773924s ago: executing program 0 (id=580): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x4000000, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0x4d613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x1}) 1.825310644s ago: executing program 4 (id=581): syz_emit_ethernet(0x18, &(0x7f00000003c0)={@remote, @broadcast, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@generic={0x88f5, "ec3725b121e1"}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x128, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0xfe, 0x8, "d65d3eae0e441bb425bd4b65098bacf567944fa567057bd33ac3429064ad5a0f0ce136baeaf7e8c52746698b1de9b2bc0bb5a7ea79351ad6a4cc35f67558c34ddb490e8cb2359dc88f596c8387c31a55f4ae8de257be71c1cd4aff011be7321e31e732e2c06090f7013dcf4cab2e5236c0e4ae78641c4f40b04145415175f8f083dc2408d529ea190f755b8b4d3ca48b21de380038f4b1f3e3386711044955ea8757133fb65f8edd3e3759fe06e0e6698ab282394961dbffc8cffc3fa40b2335e21f7b471211e0cb2719199b0d4942b4f4890ebf690610e34ce001660f8cde2021cb981ef18bbe613e6c6975a710b7485456dac3220f19a7183e"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}}, @NFT_MSG_DELCHAIN={0x1b8, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xd2, 0xc, "fa998d8096d01f36d3787417f0d997bc05b764c95e170d31a21d3d47c9c8a05d0a950a27ab0123628aa35d85041853d22302b0c1e633b1531f47640efd18c9910ecacd1bc3cab4a63c422a8418842c2f57ffd337b883fa2a2c7a2aca265cce4ca11be3a733bcb3f78f0a0317cc80d936a531f6fb7324276ca998bc0f56e495bab3862c6270e8927ec7083d851e949aa5a3a57d54b7ec033eb087e84efae55780a405b39b1d2d1e1d348522fbd156c13446d0e5d1ec23aa822a4aa20fddfd53e894d419d185f652cd81af6ab7e8d8"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x84, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50af0206}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3c599087}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe83b670}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5fe32fbb}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0xec, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x23, 0x6, "6b44a82d681f4cbfde92309043f8c8bf63119db6353f505eab7e80e94f1b9e"}, @NFTA_TABLE_USERDATA={0x90, 0x6, "48da73440100529e601e5d6aa2e34a8978edce23b9f799fa2fc50c709a4012fcded122a82bf4ee290bb4a2a136ade072af0d44761a493b2dcd3f3cbf52097c2a89ce4ba8a845d179d090f106d67a913ac75800e60c8944c9f504b623c9ab1c6ac332c8b160bc38b3c571f6886f0395f0eb5f7ab054077517f2332b6636474123aa65be9c70d9a459ec2298d4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x424}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="a40000000002010400000000000000000a000000180001801400018008000100ffffffff08000200ac1414363c0003800c00028005000100000000002c00018014000300fc000000000000000000f9d580e718e9eafb0400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) 1.634473835s ago: executing program 0 (id=582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c5f07800c0004005f3a0000000000000c0003"], 0x30}}, 0x20088004) 1.405896208s ago: executing program 0 (id=583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000080)={'bond_slave_1\x00', {0x2, 0x0, @private}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x3, 0x15, 0x2, 0x0, 0x2, 0x2, 0xe, 0xfe, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x34, '\x00', 0x40, 0x80000000}) 1.191805556s ago: executing program 0 (id=584): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x2ac00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000940)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa28bbbbbbbbbbbb8100130008050008fba2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b79e94577115ca453482522b4556c46525a96e82073a9b6b5f9dba7f68e1ecd9b71d2615886c46b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626ddac800b260e2f6292f759b1c6d9"], &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) mknodat$loop(r2, &(0x7f0000000440)='./file0/file0\x00', 0x6000, 0x0) munlockall() madvise(&(0x7f00002af000/0x2000)=nil, 0x2000, 0x15) r5 = dup(r3) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_io_uring_setup(0xbea, &(0x7f0000000180)={0x0, 0x4d24, 0x8, 0x1, 0xf5, 0x0, r5}, &(0x7f0000000200), &(0x7f0000000300)) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000480)={0x2b, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x898d, 0x10100, 0x0, 0x1002b4}, &(0x7f0000000180)=0x0, &(0x7f00000008c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_io_uring_submit(0x0, r9, &(0x7f0000000900)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x8, 0x0, r2, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r7}}) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) 767.03303ms ago: executing program 2 (id=585): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000401904000600000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0xffffffffffffff37, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a0b000000c5396c55d73bdbf89f1950456cb65ef1e750a2acedc757682043c591"], 0x0}, 0x0) r3 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='vuto_da_alloc', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r1, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x5000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000401904000600000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0xffffffffffffff37, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a0b000000c5396c55d73bdbf89f1950456cb65ef1e750a2acedc757682043c591"], 0x0}, 0x0) (async) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) (async) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00, 0x0) (async) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='vuto_da_alloc', 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) (async) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x5000}) (async) 352.455641ms ago: executing program 3 (id=586): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1ffffffffffffe3e, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x2100}, 0x0) 0s ago: executing program 4 (id=587): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003180), 0x80043, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000000)) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000080)=0x40) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x800006, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x6, 0x192, "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"}}) r5 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T5925] usb 1-1: USB disconnect, device number 13 [ 111.038340][ T5914] usb 2-1: USB disconnect, device number 9 [ 111.051154][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 111.152511][ T93] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 111.181221][ T93] usb 5-1: device descriptor read/8, error -71 [ 111.210513][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 111.217106][ T24] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 111.225569][ T24] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 111.233881][ T24] usb 4-1: config 0 has no interface number 0 [ 111.240581][ T24] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.252213][ T24] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 111.263485][ T24] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.274759][ T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 111.283936][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.294778][ T24] usb 4-1: config 0 descriptor?? [ 111.300764][ T6421] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 111.440683][ T93] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 111.472363][ T93] usb 5-1: device descriptor read/8, error -71 [ 111.523253][ T24] usb 4-1: USB disconnect, device number 16 [ 111.582452][ T93] usb usb5-port1: unable to enumerate USB device [ 111.728186][ T6439] fuse: Unknown parameter 'no' [ 111.760936][ T6439] IPv6: sit1: Disabled Multicast RS [ 111.769455][ T6439] sit1: entered allmulticast mode [ 112.289046][ T6454] fuse: Bad value for 'fd' [ 112.322495][ T6452] fuse: Bad value for 'fd' [ 112.422415][ T6453] block device autoloading is deprecated and will be removed. [ 113.232169][ T6468] netlink: 68 bytes leftover after parsing attributes in process `syz.3.154'. [ 113.267186][ T6468] kvm: kvm [6466]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008d) [ 113.676242][ T5914] IPVS: starting estimator thread 0... [ 113.760651][ T6481] IPVS: using max 52 ests per chain, 124800 per kthread [ 114.310536][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 114.310551][ T30] audit: type=1800 audit(1750837185.443:162): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.160" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=10889 res=0 errno=0 [ 114.552550][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.730484][ T93] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 114.988943][ T93] usb 5-1: Using ep0 maxpacket: 32 [ 114.998712][ T93] usb 5-1: config 0 has no interfaces? [ 115.221819][ T93] usb 5-1: New USB device found, idVendor=090a, idProduct=1001, bcdDevice= 1.00 [ 115.221839][ T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.221849][ T93] usb 5-1: Product: syz [ 115.221856][ T93] usb 5-1: Manufacturer: syz [ 115.221863][ T93] usb 5-1: SerialNumber: syz [ 115.223717][ T93] usb 5-1: config 0 descriptor?? [ 115.573418][ T6506] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 116.161988][ T6513] loop6: detected capacity change from 0 to 7 [ 116.200441][ T6513] Dev loop6: unable to read RDB block 7 [ 116.232612][ T6513] loop6: AHDI p1 p2 p4 [ 116.237705][ T6514] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 116.246248][ T6513] loop6: partition table partially beyond EOD, truncated [ 116.256118][ T6514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.295887][ T6513] loop6: p1 start 926365495 is beyond EOD, truncated [ 116.312883][ T6513] loop6: p2 size 8 extends beyond EOD, truncated [ 116.655520][ T6522] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 116.694500][ T6522] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.756575][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 116.874013][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 116.950762][ T5914] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 117.108422][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.115780][ T5914] usb 4-1: device descriptor read/64, error -71 [ 117.126708][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.266794][ T24] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 117.298780][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.371726][ T24] usb 1-1: config 0 descriptor?? [ 117.411047][ T5914] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 117.540665][ T5914] usb 4-1: device descriptor read/64, error -71 [ 117.615554][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 117.621717][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 117.651197][ T5914] usb usb4-port1: attempt power cycle [ 117.826998][ T93] usb 5-1: USB disconnect, device number 13 [ 118.004529][ T24] usb 1-1: USB disconnect, device number 14 [ 118.020663][ T5914] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 118.034978][ T30] audit: type=1326 audit(1750837189.183:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6539 comm="syz.4.174" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f784218e929 code=0x0 [ 118.060751][ T5914] usb 4-1: device descriptor read/8, error -71 [ 118.330431][ T5914] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 118.361942][ T5914] usb 4-1: device descriptor read/8, error -71 [ 118.443560][ T6545] input: syz1 as /devices/virtual/input/input8 [ 118.483928][ T5914] usb usb4-port1: unable to enumerate USB device [ 118.541997][ T6547] netlink: 32 bytes leftover after parsing attributes in process `syz.4.176'. [ 118.907855][ T6551] macvlan2: entered allmulticast mode [ 119.602464][ T93] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 119.780643][ T93] usb 5-1: Using ep0 maxpacket: 32 [ 119.800748][ T93] usb 5-1: config 0 has no interfaces? [ 119.826224][ T93] usb 5-1: New USB device found, idVendor=090a, idProduct=1001, bcdDevice= 1.00 [ 119.835988][ T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.844375][ T93] usb 5-1: Product: syz [ 119.859106][ T93] usb 5-1: Manufacturer: syz [ 119.866084][ T6575] loop6: detected capacity change from 0 to 7 [ 119.893109][ T93] usb 5-1: SerialNumber: syz [ 119.910474][ T93] usb 5-1: config 0 descriptor?? [ 119.964112][ T5838] Dev loop6: unable to read RDB block 7 [ 119.990112][ T5838] loop6: AHDI p1 p2 p4 [ 119.998167][ T5838] loop6: partition table partially beyond EOD, truncated [ 120.028615][ T5838] loop6: p1 start 926365495 is beyond EOD, truncated [ 120.041206][ T5838] loop6: p2 size 8 extends beyond EOD, truncated [ 120.082216][ T6575] Dev loop6: unable to read RDB block 7 [ 120.090373][ T6575] loop6: AHDI p1 p2 p4 [ 120.095333][ T6575] loop6: partition table partially beyond EOD, truncated [ 120.105550][ T6575] loop6: p1 start 926365495 is beyond EOD, truncated [ 120.113518][ T6575] loop6: p2 size 8 extends beyond EOD, truncated [ 120.171843][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 120.319066][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 120.760528][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 120.974254][ T10] usb 2-1: config 0 has an invalid interface number: 129 but max is 0 [ 120.983863][ T10] usb 2-1: config 0 has no interface number 0 [ 120.990022][ T10] usb 2-1: config 0 interface 129 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 121.025786][ T10] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 121.035113][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.044965][ T10] usb 2-1: Product: syz [ 121.051661][ T10] usb 2-1: Manufacturer: syz [ 121.067733][ T10] usb 2-1: SerialNumber: syz [ 121.105779][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 121.112317][ T10] r8152-cfgselector 2-1: config 0 descriptor?? [ 121.124645][ T6592] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 121.133325][ T10] r8152 2-1:0.129: Expected endpoints are not found [ 121.180460][ T93] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 121.337270][ T10] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 121.349849][ T93] usb 4-1: Using ep0 maxpacket: 32 [ 121.370449][ T93] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 121.403593][ T93] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 121.412941][ T93] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 121.426685][ T93] usb 4-1: Product: syz [ 121.436430][ T93] usb 4-1: Manufacturer: syz [ 121.447579][ T93] usb 4-1: SerialNumber: syz [ 121.475039][ T93] usb 4-1: config 0 descriptor?? [ 121.488490][ T6600] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 121.630467][ T5839] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 121.816008][ T5839] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 122.024758][ T5839] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 122.108191][ T5839] usb 3-1: config 8 has no interface number 0 [ 122.140175][ T5839] usb 3-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.174502][ T5839] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 122.225669][ T5839] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 122.267759][ T5839] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 122.311780][ T93] usb 4-1: USB disconnect, device number 21 [ 122.324026][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.408466][ T6612] netlink: 32 bytes leftover after parsing attributes in process `syz.1.198'. [ 122.421689][ T5839] usb 3-1: NFC: intf ffff8880786c1000 id ffffffff8eb52e40 [ 122.454873][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.484149][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.491341][ T6612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.631832][ T6617] loop6: detected capacity change from 0 to 7 [ 122.686094][ T24] usb 5-1: USB disconnect, device number 14 [ 122.703500][ T6617] Dev loop6: unable to read RDB block 7 [ 122.743070][ T6617] loop6: AHDI p1 p2 p4 [ 122.757625][ T6617] loop6: partition table partially beyond EOD, truncated [ 122.781309][ T6617] loop6: p1 start 926365495 is beyond EOD, truncated [ 122.828262][ T6617] loop6: p2 size 8 extends beyond EOD, truncated [ 122.892424][ T93] usb 3-1: USB disconnect, device number 8 [ 123.055833][ T6631] fuse: Bad value for 'fd' [ 123.104126][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 123.123017][ T6631] fuse: Bad value for 'fd' [ 123.178188][ T6626] loop2: detected capacity change from 0 to 7 [ 123.215815][ T6626] Dev loop2: unable to read RDB block 7 [ 123.228445][ T6626] loop2: AHDI p1 p2 p3 [ 123.228482][ T6626] loop2: partition table partially beyond EOD, truncated [ 123.238678][ T6626] loop2: p1 start 1601398130 is beyond EOD, truncated [ 123.238706][ T6626] loop2: p2 start 1702059890 is beyond EOD, truncated [ 123.400412][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 123.558783][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 123.576029][ T43] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 123.584533][ T43] usb 3-1: config 0 has no interface number 1 [ 123.599429][ T43] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 123.612619][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.621473][ T43] usb 3-1: Product: syz [ 123.625827][ T43] usb 3-1: Manufacturer: syz [ 123.630864][ T43] usb 3-1: SerialNumber: syz [ 123.642252][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 123.656681][ T43] usb 3-1: config 0 descriptor?? [ 123.710807][ T43] snd-usb-audio 3-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 123.723682][ T6642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.732563][ T6642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.746461][ T6642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.760070][ T6642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.817195][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.092191][ T6650] netlink: 32 bytes leftover after parsing attributes in process `syz.0.211'. [ 124.271021][ T30] audit: type=1326 audit(1750837195.423:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67538e929 code=0x7ffc0000 [ 124.313549][ T30] audit: type=1326 audit(1750837195.443:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb67538e929 code=0x7ffc0000 [ 124.338863][ T30] audit: type=1326 audit(1750837195.443:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67538e929 code=0x7ffc0000 [ 124.407152][ T30] audit: type=1326 audit(1750837195.443:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb67538e929 code=0x7ffc0000 [ 124.448044][ T30] audit: type=1326 audit(1750837195.443:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67538e929 code=0x7ffc0000 [ 124.478951][ T30] audit: type=1326 audit(1750837195.443:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fb67538e929 code=0x7ffc0000 [ 124.504545][ T30] audit: type=1326 audit(1750837195.443:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67538e929 code=0x7ffc0000 [ 124.611577][ T30] audit: type=1326 audit(1750837195.443:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb67538e929 code=0x7ffc0000 [ 124.635006][ T30] audit: type=1326 audit(1750837195.443:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67538e929 code=0x7ffc0000 [ 124.675738][ T30] audit: type=1326 audit(1750837195.443:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb67538e929 code=0x7ffc0000 [ 124.889063][ T6674] loop6: detected capacity change from 0 to 7 [ 124.896382][ T6674] Dev loop6: unable to read RDB block 7 [ 124.905466][ T6674] loop6: AHDI p1 p2 p4 [ 124.909828][ T6674] loop6: partition table partially beyond EOD, truncated [ 124.927247][ T6674] loop6: p1 start 926365495 is beyond EOD, truncated [ 124.950396][ T6674] loop6: p2 size 8 extends beyond EOD, truncated [ 125.000936][ T43] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 125.091210][ T6673] loop2: detected capacity change from 0 to 7 [ 125.140528][ T43] usb 1-1: device descriptor read/64, error -71 [ 125.185774][ T6673] Dev loop2: unable to read RDB block 7 [ 125.252546][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 125.267532][ T6673] loop2: AHDI p1 p2 p3 [ 125.279768][ T6673] loop2: partition table partially beyond EOD, truncated [ 125.380644][ T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 125.510367][ T43] usb 1-1: device descriptor read/64, error -71 [ 125.575140][ T6673] loop2: p1 start 1601398130 is beyond EOD, truncated [ 125.650730][ T43] usb usb1-port1: attempt power cycle [ 125.684157][ T6673] loop2: p2 start 1702059890 is beyond EOD, truncated [ 126.032693][ T43] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 126.050441][ T5839] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 126.092811][ T43] usb 1-1: device descriptor read/8, error -71 [ 126.141979][ T24] usb 3-1: USB disconnect, device number 9 [ 126.177822][ T6691] tipc: Enabling of bearer rejected, failed to enable media [ 126.260418][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 126.269818][ T5839] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.278744][ T5839] usb 2-1: config 0 has no interface number 0 [ 126.287353][ T5839] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.302615][ T5839] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.315919][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.360613][ T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 126.366575][ T5839] usb 2-1: config 0 descriptor?? [ 126.377428][ T5839] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 126.397735][ T6689] netlink: 32 bytes leftover after parsing attributes in process `syz.3.225'. [ 126.471836][ T43] usb 1-1: device descriptor read/8, error -71 [ 126.480684][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.488413][ T6689] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.495606][ T6689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.510429][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 126.827843][ T5839] usb 2-1: USB disconnect, device number 11 [ 126.872186][ T43] usb usb1-port1: unable to enumerate USB device [ 126.917240][ T6695] 8021q: adding VLAN 0 to HW filter on device team1 [ 128.073940][ T6708] tipc: Started in network mode [ 128.078941][ T6708] tipc: Node identity ff, cluster identity 4711 [ 128.085380][ T6708] tipc: Enabling of bearer rejected, failed to enable media [ 128.450382][ T5839] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 128.683506][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.694651][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.731852][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.745020][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 129.080367][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 129.096189][ T24] usb 2-1: config 0 has no interfaces? [ 129.113941][ T5839] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.120767][ T24] usb 2-1: New USB device found, idVendor=090a, idProduct=1001, bcdDevice= 1.00 [ 129.132576][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.140882][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.149024][ T24] usb 2-1: Product: syz [ 129.182171][ T24] usb 2-1: Manufacturer: syz [ 129.209007][ T24] usb 2-1: SerialNumber: syz [ 129.216793][ T5839] usb 5-1: config 0 descriptor?? [ 129.367793][ T24] usb 2-1: config 0 descriptor?? [ 129.642289][ T5839] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 129.715316][ T6720] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 129.729892][ T5839] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 129.840686][ T6709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.858024][ T6709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.375584][ T6722] loop2: detected capacity change from 0 to 7 [ 130.394778][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 130.411398][ T6722] Dev loop2: unable to read RDB block 7 [ 130.423787][ T6722] loop2: AHDI p1 p2 p3 [ 130.432832][ T6722] loop2: partition table partially beyond EOD, truncated [ 130.443765][ T6722] loop2: p1 start 1601398130 is beyond EOD, truncated [ 130.452668][ T6722] loop2: p2 start 1702059890 is beyond EOD, truncated [ 130.641337][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 130.978228][ T6735] netlink: 32 bytes leftover after parsing attributes in process `syz.0.237'. [ 131.141217][ T93] IPVS: starting estimator thread 0... [ 131.149152][ T6742] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20001 [ 131.290462][ T6743] IPVS: using max 32 ests per chain, 76800 per kthread [ 131.596087][ T24] usb 2-1: USB disconnect, device number 12 [ 131.659892][ T6756] netlink: 'syz.3.244': attribute type 11 has an invalid length. [ 131.699089][ T6756] netlink: 40 bytes leftover after parsing attributes in process `syz.3.244'. [ 131.716138][ T6756] netlink: 'syz.3.244': attribute type 11 has an invalid length. [ 131.791681][ T6759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.244'. [ 131.801374][ T10] usb 5-1: USB disconnect, device number 15 [ 131.889480][ T6761] tipc: Enabling of bearer rejected, failed to enable media [ 131.921068][ T6765] syz.1.246 uses obsolete (PF_INET,SOCK_PACKET) [ 132.183562][ T6765] syzkaller1: entered allmulticast mode [ 132.387224][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 132.387240][ T30] audit: type=1326 audit(1750837203.533:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 132.430072][ T6771] could not allocate digest TFM handle sm3-generic [ 132.649587][ T6778] netlink: 32 bytes leftover after parsing attributes in process `syz.0.250'. [ 132.663349][ T30] audit: type=1326 audit(1750837203.533:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 132.732269][ T30] audit: type=1326 audit(1750837203.533:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 132.790482][ T6769] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 132.819887][ T6769] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 133.025014][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.032758][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.041288][ T30] audit: type=1326 audit(1750837203.563:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 133.063715][ T30] audit: type=1326 audit(1750837203.563:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 133.106260][ T30] audit: type=1326 audit(1750837203.563:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 133.142716][ T6769] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 133.200742][ T6769] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.234111][ T6769] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 133.248675][ T30] audit: type=1326 audit(1750837203.563:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 133.293819][ T6769] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 133.297920][ T6769] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.298370][ T6769] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 133.328620][ T6769] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 133.385138][ T6769] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.393947][ T30] audit: type=1326 audit(1750837203.563:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 133.393994][ T30] audit: type=1326 audit(1750837203.563:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 133.394031][ T30] audit: type=1326 audit(1750837203.563:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 133.399272][ T6769] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 133.422804][ T6769] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 133.477917][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.566201][ T6769] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 133.590610][ T6769] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 133.611845][ T6769] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 133.777551][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 133.920454][ T5923] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 134.021111][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.095391][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 134.102998][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.130488][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.161609][ T5923] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 134.221247][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.286147][ T5923] usb 1-1: config 0 descriptor?? [ 134.310622][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 134.488268][ T6815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.262'. [ 134.500882][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.508362][ T6815] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.515659][ T6815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.533803][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 134.544969][ T43] usb 3-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 134.616903][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.664915][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.675134][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.691195][ T43] usb 3-1: Product: syz [ 134.695503][ T43] usb 3-1: Manufacturer: syz [ 134.702450][ T43] usb 3-1: SerialNumber: syz [ 134.821459][ T5923] aquacomputer_d5next 0003:0C70:F00A.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.0-1/input0 [ 134.938313][ T5925] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 135.052127][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.076671][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 135.086628][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.123620][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.132548][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.140361][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 135.154294][ T5925] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 135.163226][ T5925] usb 2-1: config 2 has no interface number 0 [ 135.174645][ T43] usb 3-1: 0:2 : does not exist [ 135.183629][ T5925] usb 2-1: config 2 interface 31 has no altsetting 0 [ 135.199459][ T93] usb 1-1: USB disconnect, device number 19 [ 135.201289][ T5925] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 135.214851][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.222208][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.224426][ T43] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 135.238189][ T5925] usb 2-1: Product: syz [ 135.243458][ T5925] usb 2-1: Manufacturer: syz [ 135.249897][ T5925] usb 2-1: SerialNumber: syz [ 135.276666][ T43] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 135.302872][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.311383][ T43] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 135.323385][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 135.339177][ T24] usb 5-1: config 0 has no interfaces? [ 135.363566][ T24] usb 5-1: New USB device found, idVendor=090a, idProduct=1001, bcdDevice= 1.00 [ 135.372787][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.414793][ T24] usb 5-1: Product: syz [ 135.419563][ T24] usb 5-1: Manufacturer: syz [ 135.430375][ T43] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5) [ 135.440140][ T24] usb 5-1: SerialNumber: syz [ 135.463572][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.496430][ T24] usb 5-1: config 0 descriptor?? [ 135.533447][ T43] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 135.547483][ T43] usb 3-1: USB disconnect, device number 10 [ 135.594696][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.639126][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.927253][ T6842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.966516][ T6842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.029360][ T5925] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 136.086956][ T5925] usb 2-1: USB disconnect, device number 13 [ 136.101599][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.163705][ T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 136.365326][ T43] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 136.375543][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.385193][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.399293][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.410223][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.421980][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.437615][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.448385][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.459259][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.473494][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.482675][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.512050][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.536072][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.546525][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.635193][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.711933][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.801283][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.820184][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.844461][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.897154][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.917176][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.967269][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.992298][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.273'. [ 137.025302][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.040113][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.076635][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.109228][ T43] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 137.121571][ T43] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 137.130481][ T6860] netlink: 'syz.1.275': attribute type 10 has an invalid length. [ 137.157233][ T6860] netlink: 40 bytes leftover after parsing attributes in process `syz.1.275'. [ 137.180725][ T43] usb 1-1: Product: syz [ 137.207635][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 137.223201][ T43] usb 1-1: Manufacturer: syz [ 137.259499][ T43] usb 1-1: SerialNumber: syz [ 137.289847][ T6860] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 137.305949][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.315819][ T43] usb 1-1: config 0 descriptor?? [ 137.353331][ T43] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 137.383872][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.540489][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.549934][ T93] usb 1-1: USB disconnect, device number 20 [ 137.578866][ T93] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 137.700620][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 138.061057][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 138.190432][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.225688][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 138.242797][ T30] kauditd_printk_skb: 422 callbacks suppressed [ 138.242811][ T30] audit: type=1326 audit(1750837209.393:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.3.279" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb67538e929 code=0x0 [ 138.244446][ T43] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 138.286377][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.654644][ T6881] netlink: 'syz.0.280': attribute type 3 has an invalid length. [ 138.748558][ T5839] usb 5-1: USB disconnect, device number 16 [ 138.842717][ T43] usb 3-1: config 0 descriptor?? [ 139.123999][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 139.134744][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'. [ 139.241839][ T6892] ip6gretap1: entered promiscuous mode [ 139.247361][ T6892] ip6gretap1: entered allmulticast mode [ 139.273508][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 139.316543][ T43] elecom 0003:056E:00E6.0004: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.2-1/input0 [ 139.329003][ T6894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'. [ 139.386005][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.486383][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.517012][ T6868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.517394][ T6868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.549246][ T5923] usb 3-1: USB disconnect, device number 12 [ 139.623770][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.673276][ T6903] tipc: Cannot configure node identity twice [ 139.774509][ T6896] fido_id[6896]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 139.786136][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 140.091886][ T5923] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 140.189890][ T6913] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 140.262646][ T6913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.300800][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 140.323174][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.338719][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.349054][ T5923] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 140.359186][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.374615][ T5923] usb 4-1: config 0 descriptor?? [ 140.506344][ T6917] bond1: (slave gretap1): making interface the new active one [ 140.552379][ T6917] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 140.632072][ T6917] syz.2.292 (6917) used greatest stack depth: 20040 bytes left [ 140.795402][ T5923] usbhid 4-1:0.0: can't add hid device: -71 [ 140.832016][ T5923] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 140.917290][ T5923] usb 4-1: USB disconnect, device number 22 [ 141.410441][ T93] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 141.529439][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 141.550421][ T93] usb 2-1: device descriptor read/64, error -71 [ 141.800476][ T93] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 141.967330][ T93] usb 2-1: device descriptor read/64, error -71 [ 141.980411][ T5925] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 142.110833][ T93] usb usb2-port1: attempt power cycle [ 142.137191][ T5925] usb 4-1: config 0 has no interfaces? [ 142.145720][ T5925] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 142.171032][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.179399][ T5925] usb 4-1: Product: syz [ 142.186218][ T5925] usb 4-1: Manufacturer: syz [ 142.192638][ T5925] usb 4-1: SerialNumber: syz [ 142.203442][ T5925] usb 4-1: config 0 descriptor?? [ 142.330756][ T5923] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 142.497696][ T93] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 142.512355][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 142.562973][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 142.575739][ T93] usb 2-1: device descriptor read/8, error -71 [ 142.651648][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 142.718785][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.727740][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.757508][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 142.778351][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 142.840460][ T93] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 142.862729][ T5923] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 142.914446][ T93] usb 2-1: device descriptor read/8, error -71 [ 142.989694][ T5923] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 142.990974][ T5839] usb 4-1: USB disconnect, device number 23 [ 142.999142][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.060115][ T93] usb usb2-port1: unable to enumerate USB device [ 143.142299][ T5923] usb 5-1: Product: syz [ 143.152203][ T5923] usb 5-1: Manufacturer: syz [ 143.159277][ T5923] usb 5-1: SerialNumber: syz [ 143.178504][ T5923] usb 5-1: config 0 descriptor?? [ 143.709344][ T5839] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 143.850375][ T5923] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 143.881485][ T5839] usb 1-1: unable to get BOS descriptor or descriptor too short [ 143.889900][ T5839] usb 1-1: not running at top speed; connect to a high speed hub [ 143.900557][ T5839] usb 1-1: config 7 has an invalid interface number: 178 but max is 0 [ 143.908971][ T5839] usb 1-1: config 7 has no interface number 0 [ 143.929237][ T5839] usb 1-1: config 7 interface 178 has no altsetting 0 [ 143.938431][ T5839] usb 1-1: New USB device found, idVendor=0846, idProduct=5f00, bcdDevice=50.c2 [ 143.948058][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.978474][ T5839] usb 1-1: Product: syz [ 143.982742][ T5839] usb 1-1: Manufacturer: syz [ 143.987346][ T5839] usb 1-1: SerialNumber: syz [ 144.050471][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 144.074199][ T5923] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 144.090985][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.099053][ T5923] usb 4-1: Product: syz [ 144.130432][ T5923] usb 4-1: Manufacturer: syz [ 144.135082][ T5923] usb 4-1: SerialNumber: syz [ 144.155089][ T5923] usb 4-1: config 0 descriptor?? [ 144.238473][ T5839] usb 1-1: Could not find all expected endpoints [ 144.258395][ T5839] usb 1-1: USB disconnect, device number 21 [ 144.371755][ T5923] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 144.724445][ T7000] syzkaller1: entered promiscuous mode [ 144.730088][ T7000] syzkaller1: entered allmulticast mode [ 144.738291][ T7000] FAULT_INJECTION: forcing a failure. [ 144.738291][ T7000] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 144.761493][ T7000] CPU: 0 UID: 0 PID: 7000 Comm: syz.2.314 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 144.761516][ T7000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.761531][ T7000] Call Trace: [ 144.761542][ T7000] [ 144.761550][ T7000] dump_stack_lvl+0x189/0x250 [ 144.761586][ T7000] ? irqentry_exit+0x74/0x90 [ 144.761610][ T7000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.761650][ T7000] should_fail_ex+0x414/0x560 [ 144.761675][ T7000] _copy_from_iter+0x1db/0x16f0 [ 144.761699][ T7000] ? __lock_acquire+0xab9/0xd20 [ 144.761729][ T7000] ? __pfx__copy_from_iter+0x10/0x10 [ 144.761766][ T7000] tun_get_user+0x4ce/0x3ce0 [ 144.761808][ T7000] ? aa_file_perm+0x11f/0xed0 [ 144.761830][ T7000] ? __pfx_tun_get_user+0x10/0x10 [ 144.761850][ T7000] ? aa_file_perm+0x11f/0xed0 [ 144.761870][ T7000] ? aa_file_perm+0x3e7/0xed0 [ 144.761902][ T7000] ? ref_tracker_alloc+0x318/0x460 [ 144.761921][ T7000] ? __lock_acquire+0xab9/0xd20 [ 144.761944][ T7000] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 144.761970][ T7000] ? tun_get+0x1c/0x2f0 [ 144.761997][ T7000] ? tun_get+0x1c/0x2f0 [ 144.762018][ T7000] ? tun_get+0x1c/0x2f0 [ 144.762044][ T7000] tun_chr_write_iter+0x113/0x200 [ 144.762069][ T7000] vfs_write+0x54b/0xa90 [ 144.762098][ T7000] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 144.762121][ T7000] ? __pfx_vfs_write+0x10/0x10 [ 144.762154][ T7000] ? __fget_files+0x2a/0x420 [ 144.762187][ T7000] ksys_write+0x145/0x250 [ 144.762205][ T7000] ? __pfx_ksys_write+0x10/0x10 [ 144.762217][ T7000] ? rcu_is_watching+0x15/0xb0 [ 144.762246][ T7000] ? do_syscall_64+0xbe/0x3b0 [ 144.762264][ T7000] do_syscall_64+0xfa/0x3b0 [ 144.762280][ T7000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.762295][ T7000] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.762310][ T7000] ? clear_bhb_loop+0x60/0xb0 [ 144.762330][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.762345][ T7000] RIP: 0033:0x7fa0a2b8e929 [ 144.762364][ T7000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.762377][ T7000] RSP: 002b:00007fa0a3969038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.762396][ T7000] RAX: ffffffffffffffda RBX: 00007fa0a2db5fa0 RCX: 00007fa0a2b8e929 [ 144.762407][ T7000] RDX: 0000000000000073 RSI: 0000200000000080 RDI: 0000000000000003 [ 144.762417][ T7000] RBP: 00007fa0a3969090 R08: 0000000000000000 R09: 0000000000000000 [ 144.762426][ T7000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.762436][ T7000] R13: 0000000000000000 R14: 00007fa0a2db5fa0 R15: 00007fa0a2edfa28 [ 144.762462][ T7000] [ 145.078941][ T43] usb 5-1: USB disconnect, device number 17 [ 145.315444][ T7003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.315'. [ 145.720419][ T93] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 145.780651][ T43] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 145.891104][ T5923] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 145.899609][ T93] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 21, changing to 8 [ 145.916761][ T5923] usb 4-1: USB disconnect, device number 24 [ 145.933247][ T93] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.952759][ T93] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 145.970019][ T93] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 145.985724][ T93] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.996057][ T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.996097][ T43] usb 5-1: config 0 has no interfaces? [ 146.005752][ T93] usb 3-1: Product: 氷㩣외繉멫犱ꡭ溷俣ë‹ä»›ä¢®âªšï±„ᖲｷ塩갘扤ꇣè½á”•ì긹屦娞ç­ìµä½Ÿâ¥‹ê®–➻溇âšé«…翨⮡ᘆﳢ瘴弱訨틌∮ç…ã’»ãŸá½¶ç„뭭仙뗒抩녒뿚玦䫩裺執䇜앥䆬ãºâªë”šì€–굣숢៯矰ï¡æ›¾à¬¼á¾£î‹¬ïƒœî…댨룿팿惔â¼è½–Ҩꎔ橋鄇钻⎅䫠棣๭Ჿ脺 [ 146.124286][ T93] usb 3-1: Manufacturer: ﳿ [ 146.126665][ T43] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 146.139230][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.147781][ T93] usb 3-1: SerialNumber: syz [ 146.159689][ T43] usb 5-1: Product: syz [ 146.177342][ T43] usb 5-1: Manufacturer: syz [ 146.187923][ T43] usb 5-1: SerialNumber: syz [ 146.209575][ T43] usb 5-1: config 0 descriptor?? [ 146.580561][ T93] cdc_ncm 3-1:1.0: bind() failure [ 146.594680][ T93] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 146.594725][ T93] cdc_ncm 3-1:1.1: bind() failure [ 146.611886][ T93] usb 3-1: USB disconnect, device number 13 [ 146.743753][ T7017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.753780][ T7017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.855337][ T7035] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.326' sets config #0 [ 147.009035][ T7040] syzkaller1: entered promiscuous mode [ 147.016313][ T7040] syzkaller1: entered allmulticast mode [ 147.026938][ T7040] FAULT_INJECTION: forcing a failure. [ 147.026938][ T7040] name failslab, interval 1, probability 0, space 0, times 1 [ 147.042751][ T7040] CPU: 1 UID: 0 PID: 7040 Comm: syz.3.328 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 147.042767][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.042772][ T7040] Call Trace: [ 147.042777][ T7040] [ 147.042782][ T7040] dump_stack_lvl+0x189/0x250 [ 147.042801][ T7040] ? __pfx____ratelimit+0x10/0x10 [ 147.042815][ T7040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.042828][ T7040] ? __pfx__printk+0x10/0x10 [ 147.042840][ T7040] ? __pfx___might_resched+0x10/0x10 [ 147.042854][ T7040] ? fs_reclaim_acquire+0x7d/0x100 [ 147.042867][ T7040] should_fail_ex+0x414/0x560 [ 147.042881][ T7040] should_failslab+0xa8/0x100 [ 147.042892][ T7040] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 147.042901][ T7040] ? __alloc_skb+0x112/0x2d0 [ 147.042914][ T7040] __alloc_skb+0x112/0x2d0 [ 147.042925][ T7040] alloc_skb_with_frags+0xca/0x890 [ 147.042936][ T7040] ? __might_fault+0xb0/0x130 [ 147.042951][ T7040] sock_alloc_send_pskb+0x857/0x990 [ 147.042972][ T7040] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 147.042995][ T7040] ? iov_iter_advance+0x8b/0x1c0 [ 147.043010][ T7040] tun_get_user+0x9c3/0x3ce0 [ 147.043033][ T7040] ? aa_file_perm+0x11f/0xed0 [ 147.043047][ T7040] ? __pfx_tun_get_user+0x10/0x10 [ 147.043058][ T7040] ? aa_file_perm+0x11f/0xed0 [ 147.043069][ T7040] ? aa_file_perm+0x3e7/0xed0 [ 147.043086][ T7040] ? ref_tracker_alloc+0x318/0x460 [ 147.043098][ T7040] ? __lock_acquire+0xab9/0xd20 [ 147.043112][ T7040] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 147.043126][ T7040] ? tun_get+0x1c/0x2f0 [ 147.043140][ T7040] ? tun_get+0x1c/0x2f0 [ 147.043152][ T7040] ? tun_get+0x1c/0x2f0 [ 147.043166][ T7040] tun_chr_write_iter+0x113/0x200 [ 147.043179][ T7040] vfs_write+0x54b/0xa90 [ 147.043196][ T7040] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 147.043209][ T7040] ? __pfx_vfs_write+0x10/0x10 [ 147.043227][ T7040] ? __fget_files+0x2a/0x420 [ 147.043243][ T7040] ksys_write+0x145/0x250 [ 147.043253][ T7040] ? __pfx_ksys_write+0x10/0x10 [ 147.043259][ T7040] ? rcu_is_watching+0x15/0xb0 [ 147.043277][ T7040] ? do_syscall_64+0xbe/0x3b0 [ 147.043287][ T7040] do_syscall_64+0xfa/0x3b0 [ 147.043294][ T7040] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.043307][ T7040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.043316][ T7040] ? clear_bhb_loop+0x60/0xb0 [ 147.043327][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.043336][ T7040] RIP: 0033:0x7fb67538e929 [ 147.043345][ T7040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.043353][ T7040] RSP: 002b:00007fb67622b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 147.043364][ T7040] RAX: ffffffffffffffda RBX: 00007fb6755b5fa0 RCX: 00007fb67538e929 [ 147.043371][ T7040] RDX: 0000000000000073 RSI: 0000200000000080 RDI: 0000000000000003 [ 147.043377][ T7040] RBP: 00007fb67622b090 R08: 0000000000000000 R09: 0000000000000000 [ 147.043382][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.043388][ T7040] R13: 0000000000000000 R14: 00007fb6755b5fa0 R15: 00007fb6756dfa28 [ 147.043402][ T7040] [ 147.360171][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.502339][ T43] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 147.549456][ T7043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.329'. [ 147.582310][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.589821][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.597012][ T7043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.660649][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 147.668146][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.678286][ T43] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.707974][ T43] usb 2-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 147.717425][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.725682][ T43] usb 2-1: Product: syz [ 147.732306][ T43] usb 2-1: Manufacturer: syz [ 147.736949][ T43] usb 2-1: SerialNumber: syz [ 147.814169][ T43] usb 2-1: config 0 descriptor?? [ 148.170459][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 148.353715][ T43] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.363042][ T43] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 148.436509][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 148.469731][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 148.490696][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 148.513692][ T5839] usb 5-1: USB disconnect, device number 18 [ 148.516539][ T43] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.548795][ T43] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.584964][ T43] usb 3-1: Product: syz [ 148.606328][ T43] usb 3-1: Manufacturer: syz [ 148.639218][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 148.647009][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 148.664725][ T43] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 148.670958][ T5925] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 148.692493][ T43] cdc_wdm 3-1:1.0: Unknown control protocol [ 148.860674][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 148.902725][ T5925] usb 1-1: config 0 has no interfaces? [ 149.038146][ T5925] usb 1-1: New USB device found, idVendor=090a, idProduct=1001, bcdDevice= 1.00 [ 149.109289][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.182794][ T5925] usb 1-1: Product: syz [ 149.233960][ T5925] usb 1-1: Manufacturer: syz [ 149.265232][ T5925] usb 1-1: SerialNumber: syz [ 149.314637][ T43] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 149.328147][ T5925] usb 1-1: config 0 descriptor?? [ 149.475564][ C1] cdc_wdm 3-1:1.0: Unexpected error -71 [ 149.476408][ T5839] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 149.482706][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 149.496054][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 149.502617][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.509045][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 149.515680][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 149.522602][ T5914] usb 3-1: USB disconnect, device number 14 [ 149.522827][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 149.535139][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 149.541219][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 149.550264][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.580594][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 149.637172][ T7069] IPVS: Error connecting to the multicast addr [ 149.682012][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.695375][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 149.704915][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.717272][ T43] usb 4-1: Product: syz [ 149.733512][ T43] usb 4-1: Manufacturer: syz [ 149.741369][ T43] usb 4-1: SerialNumber: syz [ 149.759856][ T43] usb 4-1: config 0 descriptor?? [ 149.783980][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 149.791567][ T5839] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.804522][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 149.817717][ T43] ipheth 4-1:0.0: Unable to find endpoints [ 149.846453][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.882548][ T5839] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 149.892268][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.900255][ T5839] usb 5-1: Product: syz [ 149.908264][ T5839] usb 5-1: Manufacturer: syz [ 149.923670][ T5839] usb 5-1: SerialNumber: syz [ 150.017541][ T5839] usb 5-1: config 0 descriptor?? [ 150.053269][ T5839] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 150.060924][ T24] usb 2-1: USB disconnect, device number 18 [ 150.082868][ T5839] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -8) [ 150.171120][ T5839] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -8 [ 150.232001][ T7079] netlink: 'syz.4.340': attribute type 8 has an invalid length. [ 150.276325][ T7087] syzkaller1: entered promiscuous mode [ 150.377827][ T7087] syzkaller1: entered allmulticast mode [ 150.385036][ T5839] usb 5-1: USB disconnect, device number 19 [ 151.062298][ T7103] loop6: detected capacity change from 0 to 7 [ 151.072573][ T7103] Dev loop6: unable to read RDB block 7 [ 151.079834][ T7103] loop6: AHDI p1 p2 p4 [ 151.100385][ T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 151.113424][ T7103] loop6: partition table partially beyond EOD, truncated [ 151.194005][ T7103] loop6: p1 start 926365495 is beyond EOD, truncated [ 151.288296][ T5839] usb 1-1: USB disconnect, device number 22 [ 151.293034][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 151.333011][ T43] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 151.345655][ T43] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 151.357658][ T43] usb 2-1: Product: syz [ 151.367019][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 151.370004][ T43] usb 2-1: Manufacturer: syz [ 151.445733][ T43] usb 2-1: SerialNumber: syz [ 151.467448][ T43] usb 2-1: config 0 descriptor?? [ 151.710748][ T43] usb 4-1: USB disconnect, device number 25 [ 151.830398][ T5925] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 151.838128][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 152.000536][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 152.008012][ T24] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 152.016752][ T5925] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 152.028259][ T24] usb 3-1: config 0 has no interface number 0 [ 152.035183][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.049162][ T24] usb 3-1: config 0 interface 161 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 152.059754][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.071491][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 152.087169][ T5925] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 152.096893][ T24] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=9a.fd [ 152.107245][ T5925] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 152.115526][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.123645][ T5925] usb 5-1: Manufacturer: syz [ 152.129287][ T24] usb 3-1: Product: syz [ 152.136722][ T5925] usb 5-1: config 0 descriptor?? [ 152.141779][ T24] usb 3-1: Manufacturer: syz [ 152.147326][ T24] usb 3-1: SerialNumber: syz [ 152.158658][ T24] usb 3-1: config 0 descriptor?? [ 152.164616][ T7111] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 152.174825][ T24] kvaser_usb 3-1:0.161: error -ENODEV: Cannot get usb endpoint(s) [ 152.210476][ T43] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 152.226448][ T7122] syzkaller0: entered promiscuous mode [ 152.232205][ T7122] syzkaller0: entered allmulticast mode [ 152.360502][ T43] usb 4-1: device descriptor read/64, error -71 [ 152.481587][ T7125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.490752][ T7125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.571288][ T7110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.349'. [ 152.598401][ T5925] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 152.605619][ T43] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 152.615208][ T5925] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 152.644055][ T5925] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 152.750416][ T43] usb 4-1: device descriptor read/64, error -71 [ 152.875551][ T43] usb usb4-port1: attempt power cycle [ 153.250488][ T43] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 153.282578][ T43] usb 4-1: device descriptor read/8, error -71 [ 153.533747][ T43] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 153.570358][ T43] usb 4-1: device descriptor read/8, error -71 [ 153.691366][ T43] usb usb4-port1: unable to enumerate USB device [ 153.741109][ T5914] usb 2-1: USB disconnect, device number 19 [ 153.875977][ T7130] syzkaller1: entered promiscuous mode [ 153.881850][ T7130] syzkaller1: entered allmulticast mode [ 153.889054][ T7129] FAULT_INJECTION: forcing a failure. [ 153.889054][ T7129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.903024][ T7129] CPU: 1 UID: 0 PID: 7129 Comm: syz.1.356 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 153.903046][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.903055][ T7129] Call Trace: [ 153.903062][ T7129] [ 153.903069][ T7129] dump_stack_lvl+0x189/0x250 [ 153.903097][ T7129] ? __pfx____ratelimit+0x10/0x10 [ 153.903121][ T7129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.903144][ T7129] ? __pfx__printk+0x10/0x10 [ 153.903162][ T7129] ? __might_fault+0xb0/0x130 [ 153.903189][ T7129] should_fail_ex+0x414/0x560 [ 153.903214][ T7129] _copy_from_iter+0x1db/0x16f0 [ 153.903240][ T7129] ? sock_alloc_send_pskb+0x875/0x990 [ 153.903268][ T7129] ? __pfx__copy_from_iter+0x10/0x10 [ 153.903298][ T7129] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 153.903322][ T7129] skb_copy_datagram_from_iter+0xf5/0x720 [ 153.903349][ T7129] ? skb_put+0x11b/0x210 [ 153.903370][ T7129] tun_get_user+0x15c3/0x3ce0 [ 153.903423][ T7129] ? aa_file_perm+0x11f/0xed0 [ 153.903448][ T7129] ? __pfx_tun_get_user+0x10/0x10 [ 153.903469][ T7129] ? aa_file_perm+0x11f/0xed0 [ 153.903489][ T7129] ? aa_file_perm+0x3e7/0xed0 [ 153.903522][ T7129] ? ref_tracker_alloc+0x318/0x460 [ 153.903541][ T7129] ? __lock_acquire+0xab9/0xd20 [ 153.903565][ T7129] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 153.903591][ T7129] ? tun_get+0x1c/0x2f0 [ 153.903618][ T7129] ? tun_get+0x1c/0x2f0 [ 153.903638][ T7129] ? tun_get+0x1c/0x2f0 [ 153.903664][ T7129] tun_chr_write_iter+0x113/0x200 [ 153.903689][ T7129] vfs_write+0x54b/0xa90 [ 153.903718][ T7129] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 153.903741][ T7129] ? __pfx_vfs_write+0x10/0x10 [ 153.903773][ T7129] ? __fget_files+0x2a/0x420 [ 153.903800][ T7129] ksys_write+0x145/0x250 [ 153.903818][ T7129] ? __pfx_ksys_write+0x10/0x10 [ 153.903831][ T7129] ? rcu_is_watching+0x15/0xb0 [ 153.903860][ T7129] ? do_syscall_64+0xbe/0x3b0 [ 153.903878][ T7129] do_syscall_64+0xfa/0x3b0 [ 153.903891][ T7129] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.903914][ T7129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.903930][ T7129] ? clear_bhb_loop+0x60/0xb0 [ 153.903950][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.903966][ T7129] RIP: 0033:0x7fd1a158e929 [ 153.903981][ T7129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.903995][ T7129] RSP: 002b:00007fd1a23c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.904012][ T7129] RAX: ffffffffffffffda RBX: 00007fd1a17b5fa0 RCX: 00007fd1a158e929 [ 153.904022][ T7129] RDX: 0000000000000073 RSI: 0000200000000080 RDI: 0000000000000003 [ 153.904031][ T7129] RBP: 00007fd1a23c7090 R08: 0000000000000000 R09: 0000000000000000 [ 153.904042][ T7129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.904051][ T7129] R13: 0000000000000000 R14: 00007fd1a17b5fa0 R15: 00007fd1a18dfa28 [ 153.904077][ T7129] [ 154.193984][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.227562][ T5839] usb 5-1: USB disconnect, device number 20 [ 154.387186][ T7136] syzkaller1: entered promiscuous mode [ 154.414387][ T7136] syzkaller1: entered allmulticast mode [ 154.630807][ T5914] usb 3-1: USB disconnect, device number 15 [ 154.730449][ T5839] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 154.885918][ T7154] netlink: 52 bytes leftover after parsing attributes in process `syz.0.365'. [ 154.912643][ T5839] usb 5-1: config 0 has no interfaces? [ 154.950830][ T5839] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 155.022093][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.176109][ T5839] usb 5-1: Product: syz [ 155.278503][ T5839] usb 5-1: Manufacturer: syz [ 155.286174][ T7167] syzkaller1: entered promiscuous mode [ 155.305163][ T7167] syzkaller1: entered allmulticast mode [ 155.310826][ T5839] usb 5-1: SerialNumber: syz [ 155.318519][ T5839] usb 5-1: config 0 descriptor?? [ 155.344833][ T7169] FAULT_INJECTION: forcing a failure. [ 155.344833][ T7169] name failslab, interval 1, probability 0, space 0, times 0 [ 155.357739][ T7169] CPU: 0 UID: 0 PID: 7169 Comm: syz.0.370 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 155.357761][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.357771][ T7169] Call Trace: [ 155.357779][ T7169] [ 155.357786][ T7169] dump_stack_lvl+0x189/0x250 [ 155.357816][ T7169] ? __pfx____ratelimit+0x10/0x10 [ 155.357841][ T7169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.357865][ T7169] ? __pfx__printk+0x10/0x10 [ 155.357889][ T7169] ? __lock_acquire+0xab9/0xd20 [ 155.357916][ T7169] should_fail_ex+0x414/0x560 [ 155.357942][ T7169] should_failslab+0xa8/0x100 [ 155.357962][ T7169] kmem_cache_alloc_noprof+0x73/0x3c0 [ 155.357987][ T7169] ? dst_alloc+0x105/0x170 [ 155.358013][ T7169] dst_alloc+0x105/0x170 [ 155.358035][ T7169] ip_route_input_rcu+0x1ed5/0x2ff0 [ 155.358064][ T7169] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 155.358080][ T7169] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 155.358123][ T7169] ? ipt_do_table+0x13dd/0x1640 [ 155.358144][ T7169] ? ip_route_input_noref+0x98/0x250 [ 155.358164][ T7169] ip_route_input_noref+0x167/0x250 [ 155.358187][ T7169] ? __pfx_ip_route_input_noref+0x10/0x10 [ 155.358242][ T7169] ? __pfx_udp_v4_early_demux+0x10/0x10 [ 155.358259][ T7169] ? ipt_do_table+0x2a3/0x1640 [ 155.358271][ T7169] ? __pfx_ipt_do_table+0x10/0x10 [ 155.358288][ T7169] ip_rcv_finish_core+0x5af/0x1c00 [ 155.358322][ T7169] ip_rcv_finish+0x14c/0x2f0 [ 155.358337][ T7169] NF_HOOK+0x309/0x3a0 [ 155.358354][ T7169] ? __pfx_ip_rcv_finish+0x10/0x10 [ 155.358368][ T7169] ? NF_HOOK+0x9a/0x3a0 [ 155.358382][ T7169] ? __pfx_NF_HOOK+0x10/0x10 [ 155.358395][ T7169] ? ip_rcv_core+0x7f7/0xd00 [ 155.358411][ T7169] ? __pfx_ip_rcv_finish+0x10/0x10 [ 155.358434][ T7169] ? __pfx_ip_rcv+0x10/0x10 [ 155.358449][ T7169] __netif_receive_skb+0x143/0x380 [ 155.358475][ T7169] ? netif_receive_skb+0x115/0x790 [ 155.358493][ T7169] netif_receive_skb+0x1cb/0x790 [ 155.358511][ T7169] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 155.358528][ T7169] ? _copy_from_iter+0x24c/0x16f0 [ 155.358546][ T7169] ? __pfx_netif_receive_skb+0x10/0x10 [ 155.358564][ T7169] ? skb_partial_csum_set+0x107/0x360 [ 155.358581][ T7169] ? tun_rx_batched+0x160/0x730 [ 155.358600][ T7169] tun_rx_batched+0x1b9/0x730 [ 155.358618][ T7169] ? __lock_acquire+0xab9/0xd20 [ 155.358638][ T7169] ? __pfx_tun_rx_batched+0x10/0x10 [ 155.358658][ T7169] ? tun_get_user+0x2549/0x3ce0 [ 155.358686][ T7169] tun_get_user+0x298e/0x3ce0 [ 155.358706][ T7169] ? tun_get_user+0x2549/0x3ce0 [ 155.358732][ T7169] ? aa_file_perm+0x11f/0xed0 [ 155.358750][ T7169] ? __pfx_tun_get_user+0x10/0x10 [ 155.358765][ T7169] ? aa_file_perm+0x11f/0xed0 [ 155.358781][ T7169] ? aa_file_perm+0x3e7/0xed0 [ 155.358810][ T7169] ? ref_tracker_alloc+0x318/0x460 [ 155.358825][ T7169] ? __lock_acquire+0xab9/0xd20 [ 155.358843][ T7169] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 155.358863][ T7169] ? tun_get+0x1c/0x2f0 [ 155.358884][ T7169] ? tun_get+0x1c/0x2f0 [ 155.358900][ T7169] ? tun_get+0x1c/0x2f0 [ 155.358921][ T7169] tun_chr_write_iter+0x113/0x200 [ 155.358940][ T7169] vfs_write+0x54b/0xa90 [ 155.358963][ T7169] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 155.358981][ T7169] ? __pfx_vfs_write+0x10/0x10 [ 155.359007][ T7169] ? __fget_files+0x2a/0x420 [ 155.359028][ T7169] ksys_write+0x145/0x250 [ 155.359042][ T7169] ? __pfx_ksys_write+0x10/0x10 [ 155.359058][ T7169] ? do_syscall_64+0xbe/0x3b0 [ 155.359073][ T7169] do_syscall_64+0xfa/0x3b0 [ 155.359083][ T7169] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.359100][ T7169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.359113][ T7169] ? clear_bhb_loop+0x60/0xb0 [ 155.359128][ T7169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.359140][ T7169] RIP: 0033:0x7f7d4638e929 [ 155.359153][ T7169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.359164][ T7169] RSP: 002b:00007f7d47189038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.359178][ T7169] RAX: ffffffffffffffda RBX: 00007f7d465b6080 RCX: 00007f7d4638e929 [ 155.359188][ T7169] RDX: 0000000000000073 RSI: 0000200000000080 RDI: 0000000000000003 [ 155.359196][ T7169] RBP: 00007f7d47189090 R08: 0000000000000000 R09: 0000000000000000 [ 155.359203][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.359211][ T7169] R13: 0000000000000001 R14: 00007f7d465b6080 R15: 00007f7d466dfa28 [ 155.359232][ T7169] [ 155.787589][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 155.822992][ T7138] program syz.4.358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.835004][ T7138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.843956][ T7138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.260622][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 156.353802][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.392173][ T24] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 156.479969][ T7175] syzkaller1: entered promiscuous mode [ 156.493029][ T7175] syzkaller1: entered allmulticast mode [ 156.508840][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.543121][ T24] usb 4-1: Product: syz [ 156.557720][ T24] usb 4-1: Manufacturer: syz [ 156.585952][ T24] usb 4-1: SerialNumber: syz [ 156.671616][ T24] usb 4-1: config 0 descriptor?? [ 156.714061][ T24] cdc_phonet 4-1:0.0: skipping garbage [ 156.748832][ T24] cdc_phonet 4-1:0.0: invalid descriptor buffer length [ 156.800559][ T24] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 156.912639][ T24] usb 4-1: USB disconnect, device number 30 [ 156.920622][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 157.130427][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 157.144870][ T10] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.199534][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.252842][ T10] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 157.314581][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.421180][ T10] usb 1-1: config 0 descriptor?? [ 157.510768][ T7185] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[7185] [ 158.210445][ T24] usb 5-1: USB disconnect, device number 21 [ 158.844700][ T7200] netlink: 48 bytes leftover after parsing attributes in process `syz.3.378'. [ 159.620492][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 159.780527][ T7222] tipc: Cannot configure node identity twice [ 159.883616][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 159.908626][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 159.921208][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 159.951565][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.975728][ T24] usb 4-1: Product: syz [ 159.979975][ T24] usb 4-1: Manufacturer: syz [ 160.023904][ T24] usb 4-1: SerialNumber: syz [ 160.034265][ T7224] batadv_slave_0: entered promiscuous mode [ 160.058025][ T24] usb 4-1: config 0 descriptor?? [ 160.086631][ T24] ipheth 4-1:0.0: Unable to find endpoints [ 160.809070][ T7223] batadv_slave_0: left promiscuous mode [ 160.879714][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 160.886308][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 160.941402][ T10] usb 1-1: USB disconnect, device number 23 [ 161.143676][ T7233] loop6: detected capacity change from 0 to 7 [ 161.195193][ T7233] Dev loop6: unable to read RDB block 7 [ 161.216987][ T7233] loop6: AHDI p1 p2 p4 [ 161.241942][ T7233] loop6: partition table partially beyond EOD, truncated [ 161.269446][ T7233] loop6: p1 start 926365495 is beyond EOD, truncated [ 161.293929][ T7233] loop6: p2 size 8 extends beyond EOD, truncated [ 161.427154][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 161.453354][ T43] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 161.639966][ T7247] tipc: Enabling of bearer rejected, failed to enable media [ 161.650456][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 161.662681][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.673698][ T43] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 161.688161][ T43] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.703106][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.717172][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.756188][ T43] usb 5-1: Product: syz [ 161.765052][ T43] usb 5-1: Manufacturer: syz [ 161.776138][ T43] usb 5-1: SerialNumber: syz [ 162.062186][ T7231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.081285][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.169997][ T43] usb-storage 5-1:1.2: USB Mass Storage device detected [ 162.249426][ T43] usb 5-1: USB disconnect, device number 22 [ 162.429926][ T7258] syzkaller1: entered promiscuous mode [ 162.441062][ T24] usb 4-1: USB disconnect, device number 31 [ 162.443636][ T7258] syzkaller1: entered allmulticast mode [ 162.643887][ T5839] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 162.802377][ T5839] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.825666][ T5839] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.870864][ T5839] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.897128][ T5839] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.910796][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 162.955641][ T5839] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.981576][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.985517][ T7272] loop6: detected capacity change from 0 to 7 [ 162.989693][ T5839] usb 1-1: Product: syz [ 163.002173][ T5839] usb 1-1: Manufacturer: syz [ 163.009240][ T7272] Dev loop6: unable to read RDB block 7 [ 163.016088][ T7272] loop6: AHDI p1 p2 p4 [ 163.022498][ T5839] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 163.025164][ T7272] loop6: partition table partially beyond EOD, truncated [ 163.043613][ T7272] loop6: p1 start 926365495 is beyond EOD, truncated [ 163.050719][ T7272] loop6: p2 size 8 extends beyond EOD, truncated [ 163.090750][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 163.116186][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 163.157274][ T7274] tipc: Enabling of bearer rejected, failed to enable media [ 163.178907][ T24] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.190746][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 163.197594][ T24] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 163.208293][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.230481][ T5959] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 163.295254][ T24] usb 4-1: config 0 descriptor?? [ 163.374585][ T10] usb 1-1: USB disconnect, device number 24 [ 163.440542][ T5959] usb 2-1: device descriptor read/64, error -71 [ 163.690424][ T5959] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 163.830410][ T5959] usb 2-1: device descriptor read/64, error -71 [ 163.948325][ T5959] usb usb2-port1: attempt power cycle [ 164.470521][ T5959] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 164.552837][ T5959] usb 2-1: device descriptor read/8, error -71 [ 164.700554][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 164.810749][ T5959] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 164.937232][ T7299] tipc: Enabling of bearer rejected, failed to enable media [ 164.950441][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 164.958185][ T5959] usb 2-1: device descriptor read/8, error -71 [ 164.976635][ T10] usb 3-1: config 0 has no interfaces? [ 164.997168][ T10] usb 3-1: New USB device found, idVendor=090a, idProduct=1001, bcdDevice= 1.00 [ 165.027795][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.061579][ T10] usb 3-1: Product: syz [ 165.168432][ T5959] usb usb2-port1: unable to enumerate USB device [ 165.269364][ T10] usb 3-1: Manufacturer: syz [ 165.398150][ T10] usb 3-1: SerialNumber: syz [ 165.433368][ T10] usb 3-1: config 0 descriptor?? [ 165.660416][ T5959] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 165.781601][ T7305] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 166.061031][ T5959] usb 1-1: Using ep0 maxpacket: 16 [ 166.074537][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.089748][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.124019][ T5959] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 166.143855][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.173800][ T5959] usb 1-1: config 0 descriptor?? [ 166.467998][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 166.527514][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 166.565446][ T24] usb 4-1: USB disconnect, device number 32 [ 166.649737][ T7307] syzkaller1: entered promiscuous mode [ 166.659082][ T7307] syzkaller1: entered allmulticast mode [ 166.817608][ T7309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.410'. [ 166.828610][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.838762][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.845937][ T7309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.941699][ T7312] netlink: 48 bytes leftover after parsing attributes in process `syz.3.411'. [ 167.198031][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.414'. [ 167.232252][ T7320] vlan2: entered promiscuous mode [ 167.237376][ T7320] batadv0: entered promiscuous mode [ 167.379856][ T7324] tipc: Started in network mode [ 167.388580][ T7324] tipc: Node identity 4, cluster identity 4711 [ 167.406601][ T5894] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 167.442242][ T7324] tipc: Node number set to 4 [ 167.570536][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 167.580964][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.595704][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.605753][ T5894] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 167.628610][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.772207][ T5894] usb 4-1: config 0 descriptor?? [ 168.196931][ T24] usb 3-1: USB disconnect, device number 16 [ 168.360886][ T5894] usbhid 4-1:0.0: can't add hid device: -71 [ 168.367139][ T5894] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 168.398631][ T5894] usb 4-1: USB disconnect, device number 33 [ 168.750428][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 168.913547][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 168.921715][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.933121][ T10] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.950524][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 169.235962][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 169.253295][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.287350][ T10] usb 3-1: config 0 descriptor?? [ 169.431542][ T5959] usbhid 1-1:0.0: can't add hid device: -71 [ 169.448463][ T5959] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 169.496232][ T5959] usb 1-1: USB disconnect, device number 25 [ 169.786846][ T7342] netlink: 'syz.2.419': attribute type 29 has an invalid length. [ 170.239153][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 170.255473][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 170.301573][ T10] usb 3-1: USB disconnect, device number 17 [ 170.447879][ T7364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.424'. [ 170.640812][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.427'. [ 170.696699][ T7371] vlan2: entered promiscuous mode [ 170.727903][ T7371] batadv0: entered promiscuous mode [ 170.993993][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 171.170449][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 171.394227][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 171.423715][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.431994][ T5839] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 171.443947][ T7395] tipc: Enabling of bearer rejected, failed to enable media [ 171.454250][ T10] usb 2-1: Product: syz [ 171.468738][ T10] usb 2-1: Manufacturer: syz [ 171.477686][ T10] usb 2-1: SerialNumber: syz [ 171.540430][ T10] usb 2-1: config 0 descriptor?? [ 171.754041][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 172.044437][ T5839] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 172.064937][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.125447][ T5914] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 172.244605][ T5839] usb 1-1: config 0 descriptor?? [ 172.273620][ T5839] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 172.304821][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 172.327783][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.380490][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.410441][ T5914] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 172.467144][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.509836][ T5914] usb 3-1: config 0 descriptor?? [ 172.994804][ T5839] gspca_sunplus: reg_w_riv err -110 [ 173.000500][ T5839] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 173.184277][ T7411] netlink: 32 bytes leftover after parsing attributes in process `syz.4.437'. [ 173.195323][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.218861][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.226154][ T7411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.247115][ T30] audit: type=1326 audit(1750837244.393:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.1.428" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1a158e929 code=0x0 [ 174.058737][ T5915] usb 1-1: USB disconnect, device number 26 [ 174.107738][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 174.375802][ T10] usb 2-1: USB disconnect, device number 24 [ 174.437449][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 174.459624][ T7436] vlan2: entered promiscuous mode [ 174.465703][ T7436] batadv0: entered promiscuous mode [ 174.586315][ T7438] binder: 7437:7438 ioctl 8914 2000000005c0 returned -22 [ 174.599922][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 174.610034][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 174.623761][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 174.631571][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 174.639274][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 174.666251][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 174.688146][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 174.707141][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 174.770338][ T30] audit: type=1326 audit(1750837245.873:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 174.793780][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 174.827504][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 174.835244][ T30] audit: type=1326 audit(1750837245.873:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 174.852660][ T7446] netlink: 40 bytes leftover after parsing attributes in process `syz.3.445'. [ 174.867229][ T7447] netlink: 204 bytes leftover after parsing attributes in process `syz.1.443'. [ 174.901591][ T7446] tipc: Enabling of bearer rejected, failed to enable media [ 174.973110][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 174.983336][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 174.996855][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 175.352849][ T5914] usbhid 3-1:0.0: can't add hid device: -71 [ 175.358859][ T5914] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 175.380551][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 175.382991][ T5914] usb 3-1: USB disconnect, device number 18 [ 175.450819][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 175.480462][ T30] audit: type=1326 audit(1750837245.873:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 175.506467][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 175.638148][ T7438] binder: 7437:7438 ioctl 4020ae46 7f7d471a8be0 returned -22 [ 175.673390][ T30] audit: type=1326 audit(1750837245.873:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 175.739240][ T30] audit: type=1326 audit(1750837245.873:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 175.827651][ T30] audit: type=1326 audit(1750837245.873:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 175.827696][ T30] audit: type=1326 audit(1750837245.873:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 175.827733][ T30] audit: type=1326 audit(1750837245.873:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 175.827773][ T30] audit: type=1326 audit(1750837246.193:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a158e929 code=0x7ffc0000 [ 175.884062][ T7453] use of bytesused == 0 is deprecated and will be removed in the future, [ 175.884115][ T7453] use the actual size instead. [ 176.840480][ T5915] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 177.009292][ T5915] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 177.030155][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.072561][ T5915] usb 3-1: config 0 has no interface number 0 [ 177.078748][ T5915] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 177.155321][ T5915] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 177.325141][ T5915] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 177.361484][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 177.369211][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.389457][ T5915] usb 3-1: Product: syz [ 177.405729][ T5915] usb 3-1: Manufacturer: syz [ 177.412282][ T5915] usb 3-1: SerialNumber: syz [ 177.431125][ T5915] usb 3-1: config 0 descriptor?? [ 177.465937][ T7466] syzkaller1: entered promiscuous mode [ 177.485065][ T7466] syzkaller1: entered allmulticast mode [ 177.545196][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 177.557329][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 177.569956][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.581862][ T24] usb 2-1: Product: syz [ 177.586065][ T24] usb 2-1: Manufacturer: syz [ 177.591266][ T24] usb 2-1: SerialNumber: syz [ 177.611612][ T24] usb 2-1: config 0 descriptor?? [ 177.762020][ T5915] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 177.823612][ T24] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 177.878084][ T7477] tipc: Enabling of bearer rejected, failed to enable media [ 177.923552][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.936107][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 177.953489][ T5915] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.962760][ T5915] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 177.976061][ T5915] usb 5-1: Manufacturer: syz [ 177.981208][ T5959] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 177.988312][ T5915] usb 5-1: config 0 descriptor?? [ 178.067684][ T24] usb write operation failed. (-71) [ 178.106742][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 178.129434][ T24] dvbdev: DVB: registering new adapter (Terratec H7) [ 178.145679][ T24] usb 2-1: media controller created [ 178.161515][ T24] usb read operation failed. (-71) [ 178.170426][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 178.183519][ T24] usb write operation failed. (-71) [ 178.193390][ T5959] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.217298][ T5959] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 178.234010][ T7468] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.245720][ T5915] usb 5-1: USB disconnect, device number 23 [ 178.257484][ T24] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 178.309773][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 178.335376][ T24] usb 2-1: USB disconnect, device number 25 [ 178.344278][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 178.359565][ T5959] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.386685][ T5959] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 178.408511][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.430758][ T5959] usb 4-1: Product: syz [ 178.445095][ T5959] usb 4-1: Manufacturer: syz [ 178.451175][ T5959] usb 4-1: SerialNumber: syz [ 178.469597][ T5959] usb 4-1: config 0 descriptor?? [ 178.734235][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 178.744483][ T5959] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 178.757625][ C1] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 178.816917][ T5959] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 178.870769][ T5959] usb 4-1: USB disconnect, device number 34 [ 178.996781][ T5894] usb 3-1: USB disconnect, device number 19 [ 179.260448][ T5959] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 179.450962][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 179.464227][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.516773][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.527189][ T5959] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 179.538447][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.560425][ T5894] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 179.568552][ T5959] usb 4-1: config 0 descriptor?? [ 179.710574][ T5894] usb 1-1: device descriptor read/64, error -71 [ 179.731016][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 179.740440][ T5914] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 179.923240][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 179.932490][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.962599][ T5894] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 180.019196][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 180.037034][ T24] usb 2-1: config 0 has no interfaces? [ 180.110517][ T5894] usb 1-1: device descriptor read/64, error -71 [ 180.222973][ T5894] usb usb1-port1: attempt power cycle [ 180.347144][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.352843][ T24] usb 2-1: New USB device found, idVendor=090a, idProduct=1001, bcdDevice= 1.00 [ 180.377302][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.417353][ T24] usb 2-1: Product: syz [ 180.440073][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 180.456020][ T24] usb 2-1: Manufacturer: syz [ 180.466609][ T24] usb 2-1: SerialNumber: syz [ 180.486546][ T24] usb 2-1: config 0 descriptor?? [ 180.525058][ T5914] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 180.570943][ T5894] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 180.591881][ T5894] usb 1-1: device descriptor read/8, error -71 [ 180.634749][ T5914] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 180.642887][ T5914] usb 3-1: Manufacturer: syz [ 180.691170][ T5914] usb 3-1: config 0 descriptor?? [ 180.830495][ T5894] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 180.871368][ T5894] usb 1-1: device descriptor read/8, error -71 [ 181.000902][ T5894] usb usb1-port1: unable to enumerate USB device [ 181.121335][ T5914] rc_core: IR keymap rc-hauppauge not found [ 181.128237][ T5914] Registered IR keymap rc-empty [ 181.140558][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 181.219044][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 181.274421][ T5914] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 181.370882][ T5914] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 181.420435][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 181.452371][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 181.491978][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 181.620630][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 181.674650][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 181.727563][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 181.820647][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 181.852447][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.121824][ T5959] usbhid 4-1:0.0: can't add hid device: -71 [ 182.128122][ T5959] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 182.158420][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.190465][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.209624][ T7526] kvm: pic: non byte write [ 182.217646][ T7527] netlink: 'syz.2.466': attribute type 10 has an invalid length. [ 182.228972][ T5959] usb 4-1: USB disconnect, device number 35 [ 182.241582][ T5914] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 182.264107][ T7527] openvswitch: netlink: Flow key attr not present in new flow. [ 182.291320][ T5914] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 182.358925][ T5914] usb 3-1: USB disconnect, device number 20 [ 183.336008][ T24] usb 2-1: can't set config #0, error -71 [ 183.408642][ T24] usb 2-1: USB disconnect, device number 26 [ 183.426000][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 183.426015][ T30] audit: type=1800 audit(1750837254.573:634): pid=7560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.473" name="/" dev="fuse" ino=0 res=0 errno=0 [ 183.668936][ T7566] tipc: Cannot configure node identity twice [ 183.980431][ T5839] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 184.050402][ T5914] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 184.140487][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 184.147148][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.160141][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.170562][ T5839] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 184.179619][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.190938][ T5839] usb 5-1: config 0 descriptor?? [ 184.200410][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 184.208153][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 184.223707][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 184.236771][ T5914] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 184.240551][ T5959] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 184.245956][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.264063][ T5914] usb 1-1: config 0 descriptor?? [ 184.400591][ T5959] usb 4-1: Using ep0 maxpacket: 8 [ 184.411045][ T5959] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 184.419283][ T5959] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 184.435973][ T5959] usb 4-1: config 6 has no interface number 0 [ 184.445390][ T5959] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 184.460905][ T5959] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 184.475244][ T5959] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 184.493903][ T5959] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.510038][ T5959] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 184.522461][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.532229][ T5959] usb 4-1: Product: syz [ 184.536755][ T5959] usb 4-1: Manufacturer: syz [ 184.546839][ T5959] usb 4-1: SerialNumber: syz [ 184.563161][ T7578] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 184.611474][ T5959] hso 4-1:6.2: Failed to find BULK IN ep [ 184.620440][ T43] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 184.804027][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 184.816350][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 184.846219][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.871395][ T43] usb 3-1: config 0 descriptor?? [ 184.950401][ T5959] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 185.003916][ T5914] usbhid 1-1:0.0: can't add hid device: -71 [ 185.020193][ T5914] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 185.034489][ T5914] usb 1-1: USB disconnect, device number 31 [ 185.126268][ T5959] usb 2-1: config 0 has an invalid interface number: 234 but max is 0 [ 185.164119][ T5959] usb 2-1: config 0 has no interface number 0 [ 185.194357][ T5959] usb 2-1: config 0 interface 234 has no altsetting 0 [ 185.227329][ T5959] usb 2-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=b0.31 [ 185.248411][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.271210][ T5959] usb 2-1: Product: syz [ 185.275472][ T5959] usb 2-1: Manufacturer: syz [ 185.296715][ T5959] usb 2-1: SerialNumber: syz [ 185.318375][ T5959] usb 2-1: config 0 descriptor?? [ 185.414515][ T5915] usb 4-1: USB disconnect, device number 36 [ 185.508151][ T43] video4linux radio48: keene_cmd_set failed (-71) [ 185.540477][ T43] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 185.573719][ T43] usb 3-1: USB disconnect, device number 21 [ 185.822028][ T7602] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 185.853337][ T7602] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.482'. [ 186.218276][ T7611] FAULT_INJECTION: forcing a failure. [ 186.218276][ T7611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.232569][ T7611] CPU: 1 UID: 0 PID: 7611 Comm: syz.2.487 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 186.232593][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.232602][ T7611] Call Trace: [ 186.232609][ T7611] [ 186.232616][ T7611] dump_stack_lvl+0x189/0x250 [ 186.232658][ T7611] ? __pfx____ratelimit+0x10/0x10 [ 186.232680][ T7611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.232703][ T7611] ? __pfx__printk+0x10/0x10 [ 186.232730][ T7611] should_fail_ex+0x414/0x560 [ 186.232753][ T7611] _copy_to_user+0x31/0xb0 [ 186.232770][ T7611] simple_read_from_buffer+0xe1/0x170 [ 186.232792][ T7611] proc_fail_nth_read+0x1df/0x250 [ 186.232812][ T7611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.232831][ T7611] ? rw_verify_area+0x258/0x650 [ 186.232851][ T7611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.232867][ T7611] vfs_read+0x200/0x980 [ 186.232891][ T7611] ? __pfx___mutex_lock+0x10/0x10 [ 186.232912][ T7611] ? __pfx_vfs_read+0x10/0x10 [ 186.232936][ T7611] ? __fget_files+0x2a/0x420 [ 186.232956][ T7611] ? __fget_files+0x3a0/0x420 [ 186.232983][ T7611] ? __fget_files+0x2a/0x420 [ 186.233007][ T7611] ksys_read+0x145/0x250 [ 186.233030][ T7611] ? __pfx_ksys_read+0x10/0x10 [ 186.233056][ T7611] ? do_syscall_64+0xbe/0x3b0 [ 186.233074][ T7611] do_syscall_64+0xfa/0x3b0 [ 186.233086][ T7611] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.233108][ T7611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.233124][ T7611] ? clear_bhb_loop+0x60/0xb0 [ 186.233143][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.233159][ T7611] RIP: 0033:0x7fa0a2b8d33c [ 186.233181][ T7611] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 186.233194][ T7611] RSP: 002b:00007fa0a3969030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.233216][ T7611] RAX: ffffffffffffffda RBX: 00007fa0a2db5fa0 RCX: 00007fa0a2b8d33c [ 186.233228][ T7611] RDX: 000000000000000f RSI: 00007fa0a39690a0 RDI: 0000000000000006 [ 186.233237][ T7611] RBP: 00007fa0a3969090 R08: 0000000000000000 R09: 0000000000000000 [ 186.233246][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.233256][ T7611] R13: 0000000000000000 R14: 00007fa0a2db5fa0 R15: 00007fa0a2edfa28 [ 186.233280][ T7611] [ 186.497517][ T5959] pegasus 2-1:0.234: probe with driver pegasus failed with error -32 [ 186.587203][ T7613] netlink: 'syz.3.488': attribute type 2 has an invalid length. [ 186.627810][ T7615] tipc: Cannot configure node identity twice [ 186.673706][ T7617] syzkaller1: entered promiscuous mode [ 186.688830][ T7617] syzkaller1: entered allmulticast mode [ 186.833144][ T7625] tipc: Enabling of bearer rejected, failed to enable media [ 187.211813][ T5839] usbhid 5-1:0.0: can't add hid device: -71 [ 187.270641][ T5839] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 187.327946][ T5839] usb 5-1: USB disconnect, device number 24 [ 187.682603][ T7632] netlink: 32 bytes leftover after parsing attributes in process `syz.2.495'. [ 187.686599][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 187.700853][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.701185][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.701308][ T7632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.815641][ T7636] €Â: renamed from geneve1 [ 187.965899][ T7647] syzkaller1: entered promiscuous mode [ 188.001264][ T43] usb 2-1: USB disconnect, device number 27 [ 188.037917][ T7647] syzkaller1: entered allmulticast mode [ 189.115817][ T7669] syzkaller1: entered promiscuous mode [ 189.129030][ T7669] syzkaller1: entered allmulticast mode [ 189.406858][ T5914] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 189.511932][ T30] audit: type=1326 audit(1750837260.653:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2b8e929 code=0x7ffc0000 [ 189.560001][ T30] audit: type=1326 audit(1750837260.653:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2b8e929 code=0x7ffc0000 [ 189.619929][ T30] audit: type=1326 audit(1750837260.653:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0a2b8e929 code=0x7ffc0000 [ 189.643928][ T30] audit: type=1326 audit(1750837260.653:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2b8e929 code=0x7ffc0000 [ 189.670226][ T30] audit: type=1326 audit(1750837260.653:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2b8e929 code=0x7ffc0000 [ 189.696040][ T30] audit: type=1326 audit(1750837260.653:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa0a2b8e929 code=0x7ffc0000 [ 189.742560][ T30] audit: type=1326 audit(1750837260.653:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2b8e929 code=0x7ffc0000 [ 189.797576][ T30] audit: type=1326 audit(1750837260.653:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a2b8e929 code=0x7ffc0000 [ 189.821812][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 189.827623][ T30] audit: type=1326 audit(1750837260.653:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa0a2b8e929 code=0x7ffc0000 [ 189.855788][ T30] audit: type=1326 audit(1750837260.653:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa0a2b8e963 code=0x7ffc0000 [ 189.913827][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.981310][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.991384][ T5914] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 190.008879][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.094442][ T5914] usb 2-1: config 0 descriptor?? [ 190.265139][ T7697] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 190.310436][ T5839] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 190.460492][ T5915] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 190.500661][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 190.625377][ T5839] usb 3-1: config 0 has no interfaces? [ 190.644719][ T5839] usb 3-1: New USB device found, idVendor=090a, idProduct=1001, bcdDevice= 1.00 [ 190.655814][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.680746][ T5839] usb 3-1: Product: syz [ 190.685044][ T5839] usb 3-1: Manufacturer: syz [ 190.689647][ T5839] usb 3-1: SerialNumber: syz [ 190.724845][ T5839] usb 3-1: config 0 descriptor?? [ 191.209489][ T7704] tipc: Cannot configure node identity twice [ 191.308103][ T5915] usb 5-1: config 0 has no interfaces? [ 191.324642][ T5915] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 191.355358][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.388761][ T5915] usb 5-1: Product: syz [ 191.409550][ T5915] usb 5-1: Manufacturer: syz [ 191.423835][ T5915] usb 5-1: SerialNumber: syz [ 191.449393][ T5915] usb 5-1: config 0 descriptor?? [ 191.852060][ T7709] syzkaller1: entered promiscuous mode [ 191.859346][ T7709] syzkaller1: entered allmulticast mode [ 192.043911][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.056654][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.376442][ T5914] usbhid 2-1:0.0: can't add hid device: -71 [ 192.393164][ T5914] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 192.439048][ T5914] usb 2-1: USB disconnect, device number 28 [ 192.528144][ T7713] syzkaller1: entered promiscuous mode [ 192.533966][ T7713] syzkaller1: entered allmulticast mode [ 193.010521][ T5839] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 193.160430][ T5839] usb 4-1: device descriptor read/64, error -71 [ 193.354825][ T7730] fuse: Unknown parameter '' [ 193.420676][ T5839] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 193.560467][ T5839] usb 4-1: device descriptor read/64, error -71 [ 193.674325][ T5839] usb usb4-port1: attempt power cycle [ 193.706411][ T5915] usb 3-1: USB disconnect, device number 22 [ 193.858951][ T5914] usb 5-1: USB disconnect, device number 25 [ 193.930411][ T7739] tipc: Cannot configure node identity twice [ 194.020485][ T5839] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 194.053656][ T5839] usb 4-1: device descriptor read/8, error -71 [ 194.186893][ T7745] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 194.320403][ T5839] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 194.344486][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.345182][ T43] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 194.350958][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.367774][ T5839] usb 4-1: device descriptor read/8, error -71 [ 194.482152][ T5839] usb usb4-port1: unable to enumerate USB device [ 194.520362][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 194.528398][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.551483][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.569209][ T43] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 194.579054][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.641175][ T43] usb 5-1: config 0 descriptor?? [ 194.760487][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 194.930502][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 194.949806][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.990683][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.016705][ T24] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 195.038704][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.075542][ T24] usb 1-1: config 0 descriptor?? [ 195.502081][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 195.510150][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 195.530664][ T5894] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 195.550918][ T24] usb 1-1: USB disconnect, device number 32 [ 195.730501][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 195.888496][ T5894] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.915622][ T5894] usb 2-1: config 1 interface 0 has no altsetting 0 [ 195.972208][ T5894] usb 2-1: string descriptor 0 read error: -22 [ 195.978634][ T5894] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.40 [ 196.005759][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.737681][ T5925] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 196.941853][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 197.119031][ T7781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.537'. [ 197.146618][ T5925] usb 4-1: config 0 has no interfaces? [ 197.178804][ T5925] usb 4-1: New USB device found, idVendor=090a, idProduct=1001, bcdDevice= 1.00 [ 197.188013][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.196193][ T5925] usb 4-1: Product: syz [ 197.200530][ T5925] usb 4-1: Manufacturer: syz [ 197.205289][ T5925] usb 4-1: SerialNumber: syz [ 197.213523][ T5925] usb 4-1: config 0 descriptor?? [ 197.476945][ T7782] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 197.622007][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 197.630958][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 197.663010][ T5894] usbhid 2-1:1.0: can't add hid device: -71 [ 197.669139][ T5894] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 197.692974][ T43] usb 5-1: USB disconnect, device number 26 [ 197.739121][ T5894] usb 2-1: USB disconnect, device number 29 [ 198.250674][ T5925] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 198.416414][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 198.460953][ T5925] usb 1-1: config 2 has an invalid interface number: 15 but max is 0 [ 198.487949][ T5925] usb 1-1: config 2 has an invalid descriptor of length 171, skipping remainder of the config [ 198.519066][ T5925] usb 1-1: config 2 has no interface number 0 [ 198.537736][ T5925] usb 1-1: config 2 interface 15 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.634764][ T7797] syzkaller1: entered promiscuous mode [ 198.642955][ T7797] syzkaller1: entered allmulticast mode [ 198.728031][ T5925] usb 1-1: config 2 interface 15 has no altsetting 0 [ 198.756534][ T5925] usb 1-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 198.801284][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.811572][ T5925] usb 1-1: Product: syz [ 198.927863][ T5925] usb 1-1: Manufacturer: syz [ 198.943996][ T5925] usb 1-1: SerialNumber: syz [ 199.251442][ T5914] usb 4-1: USB disconnect, device number 41 [ 199.308557][ T5925] usb 1-1: USB disconnect, device number 33 [ 199.710533][ T5914] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 199.882070][ T5914] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.920366][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.001325][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.025940][ T5914] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.055796][ T5914] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.066641][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.074763][ T5914] usb 4-1: Product: syz [ 200.079084][ T5914] usb 4-1: Manufacturer: syz [ 200.089319][ T5914] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 200.090968][ T5894] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 200.349223][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 200.363531][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.445309][ T5914] usb 4-1: USB disconnect, device number 42 [ 200.512781][ T5894] usb 5-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 200.557118][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.591436][ T5894] usb 5-1: config 0 descriptor?? [ 200.852394][ T7833] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 201.017230][ T7840] syzkaller1: entered promiscuous mode [ 201.022929][ T5839] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 201.031761][ T7840] syzkaller1: entered allmulticast mode [ 201.037170][ T5894] logitech-hidpp-device 0003:046D:C090.0006: unbalanced collection at end of report description [ 201.195595][ T5839] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 201.219579][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.252984][ T5839] usb 2-1: config 0 descriptor?? [ 201.289361][ T5839] cp210x 2-1:0.0: cp210x converter detected [ 201.327977][ T5894] logitech-hidpp-device 0003:046D:C090.0006: hidpp_probe:parse failed [ 201.416309][ T5894] logitech-hidpp-device 0003:046D:C090.0006: probe with driver logitech-hidpp-device failed with error -22 [ 201.748357][ T5839] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 201.757677][ T5839] cp210x 2-1:0.0: querying part number failed [ 201.770013][ T5839] usb 2-1: cp210x converter now attached to ttyUSB0 [ 202.120414][ T5915] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 202.270378][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 202.287830][ T5915] usb 1-1: config 0 has no interfaces? [ 202.296992][ T5915] usb 1-1: New USB device found, idVendor=090a, idProduct=1001, bcdDevice= 1.00 [ 202.306514][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.314928][ T5915] usb 1-1: Product: syz [ 202.319111][ T5915] usb 1-1: Manufacturer: syz [ 202.324531][ T5915] usb 1-1: SerialNumber: syz [ 202.336182][ T5915] usb 1-1: config 0 descriptor?? [ 202.545645][ T7849] IPVS: Error connecting to the multicast addr [ 202.730508][ T5894] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 202.893536][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.905338][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 202.916510][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 202.926999][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.939956][ T5894] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.949378][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.961111][ T5894] usb 4-1: config 0 descriptor?? [ 203.375375][ T5894] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x1 [ 203.384964][ T5894] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 203.393448][ T5894] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 203.422583][ T5894] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 203.641436][ T7861] [U]  [ 203.649089][ T5894] usb 4-1: USB disconnect, device number 43 [ 203.799635][ T43] usb 2-1: USB disconnect, device number 30 [ 203.825892][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 203.858125][ T43] cp210x 2-1:0.0: device disconnected [ 203.997582][ T7893] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 204.093629][ T7898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'. [ 204.162965][ T5839] usb 5-1: USB disconnect, device number 27 [ 204.308682][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 204.323539][ T7908] vlan2: entered promiscuous mode [ 204.564079][ T7912] netlink: 32 bytes leftover after parsing attributes in process `syz.2.574'. [ 204.597838][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.616035][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.623300][ T7912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.750401][ T43] usb 1-1: USB disconnect, device number 34 [ 205.237244][ T7935] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.581'. [ 205.310751][ T7937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.581'. [ 205.340527][ T5839] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 205.420792][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.582'. [ 205.540381][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short [ 205.560191][ T5839] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 205.574638][ T5839] usb 3-1: can't read configurations, error -71 [ 205.600426][ T5914] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 205.763057][ T5914] usb 5-1: config 2 has an invalid interface number: 255 but max is 0 [ 205.771659][ T5914] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 205.782429][ T5914] usb 5-1: config 2 has no interface number 0 [ 205.788735][ T5914] usb 5-1: too many endpoints for config 2 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 205.810530][ T5914] usb 5-1: config 2 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 205.838542][ T5914] usb 5-1: config 2 interface 255 has no altsetting 0 [ 205.873418][ T5914] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 205.888779][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.908362][ T5914] usb 5-1: Product: syz [ 205.928054][ T5914] usb 5-1: Manufacturer: syz [ 205.958607][ T5914] usb 5-1: SerialNumber: syz [ 206.203667][ T5915] usb 5-1: USB disconnect, device number 28 [ 206.239125][ T7947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.640414][ T5839] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 207.156913][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.177605][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 207.186713][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.220580][ T5839] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 207.242670][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.328078][ T7967] vlan2: entered promiscuous mode [ 207.366506][ T7946] ------------[ cut here ]------------ [ 207.372166][ T7946] WARNING: CPU: 1 PID: 7946 at kernel/kcov.c:872 kcov_remote_start+0x55a/0x7f0 [ 207.381102][ T7946] Modules linked in: [ 207.385087][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.0.584 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 207.396970][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.407011][ T7946] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 207.412726][ T7946] Code: ff 4c 89 ff be 03 00 00 00 e8 02 19 01 03 e9 eb fa ff ff e8 58 4d a6 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 0e 66 a6 09 89 c0 48 c7 c7 68 77 9d 92 48 03 3c c5 60 [ 207.432322][ T7946] RSP: 0018:ffffc90003d8f290 EFLAGS: 00010002 [ 207.438373][ T7946] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 207.446334][ T7946] RDX: 0000000000030000 RSI: ffffffff8db6ef48 RDI: ffffffff8be28d40 [ 207.454297][ T7946] RBP: ffffc90003d8f4f0 R08: ffffc90003d8f010 R09: 0000000000000020 [ 207.462255][ T7946] R10: dffffc0000000000 R11: ffffffff819e9310 R12: ffff8880b8728768 [ 207.470220][ T7946] R13: ffffffff81c056c7 R14: ffff888024d11e00 R15: 0000000000000000 [ 207.478181][ T7946] FS: 00007f7d471686c0(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 207.487096][ T7946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.493667][ T7946] CR2: 0000200000057030 CR3: 000000006c862000 CR4: 00000000003526f0 [ 207.501635][ T7946] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.509609][ T7946] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 207.517565][ T7946] Call Trace: [ 207.520833][ T7946] [ 207.523752][ T7946] ieee80211_rx_list+0x53a/0x2d80 [ 207.528771][ T7946] ? __d_instantiate+0x197/0x740 [ 207.533698][ T7946] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 207.539144][ T7946] ? __lock_acquire+0xab9/0xd20 [ 207.543992][ T7946] ? ieee80211_rx_napi+0xca/0x3d0 [ 207.549004][ T7946] ? ieee80211_rx_napi+0xca/0x3d0 [ 207.554017][ T7946] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 207.559903][ T7946] ? ieee80211_rx_napi+0xca/0x3d0 [ 207.564915][ T7946] ieee80211_rx_napi+0x1a8/0x3d0 [ 207.569855][ T7946] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 207.575306][ T7946] ? skb_dequeue+0x10e/0x150 [ 207.579887][ T7946] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 207.585856][ T7946] ? ieee80211_stop_device+0x29/0xf0 [ 207.591127][ T7946] ieee80211_stop_device+0x3e/0xf0 [ 207.596228][ T7946] ieee80211_do_stop+0x17dd/0x1fa0 [ 207.601325][ T7946] ? __lock_acquire+0xab9/0xd20 [ 207.606168][ T7946] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 207.611526][ T7946] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 207.616977][ T7946] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 207.622859][ T7946] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.628049][ T7946] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 207.634366][ T7946] ? wiphy_work_cancel+0x1eb/0x3c0 [ 207.639464][ T7946] ieee80211_stop+0x1b1/0x220 [ 207.644124][ T7946] ? __pfx_ieee80211_stop+0x10/0x10 [ 207.649306][ T7946] __dev_close_many+0x361/0x6f0 [ 207.654143][ T7946] ? __pfx___dev_close_many+0x10/0x10 [ 207.659506][ T7946] ? __mutex_trylock_common+0x153/0x260 [ 207.665040][ T7946] dev_close_many+0x225/0x410 [ 207.669708][ T7946] ? __pfx_dev_close_many+0x10/0x10 [ 207.674893][ T7946] ? __mutex_lock+0x330/0xe80 [ 207.679561][ T7946] netif_close+0x158/0x210 [ 207.683962][ T7946] ? __pfx_netif_close+0x10/0x10 [ 207.688880][ T7946] ? __pfx___mutex_lock+0x10/0x10 [ 207.693894][ T7946] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 207.699778][ T7946] dev_close+0x10a/0x220 [ 207.704017][ T7946] cfg80211_shutdown_all_interfaces+0xbb/0x1d0 [ 207.710162][ T7946] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 207.716301][ T7946] cfg80211_rfkill_set_block+0x2d/0x50 [ 207.721745][ T7946] rfkill_set_block+0x1d2/0x440 [ 207.726590][ T7946] rfkill_fop_write+0x44b/0x570 [ 207.731431][ T7946] ? common_file_perm+0x199/0x200 [ 207.736451][ T7946] ? __pfx_rfkill_fop_write+0x10/0x10 [ 207.741818][ T7946] ? security_kernfs_init_security+0x250/0x290 [ 207.747966][ T7946] ? rw_verify_area+0x258/0x650 [ 207.752809][ T7946] ? __pfx_rfkill_fop_write+0x10/0x10 [ 207.758173][ T7946] vfs_write+0x27e/0xa90 [ 207.762409][ T7946] ? __pfx_vfs_write+0x10/0x10 [ 207.767161][ T7946] ? __fget_files+0x2a/0x420 [ 207.771742][ T7946] ? __fget_files+0x2a/0x420 [ 207.776319][ T7946] ? __fget_files+0x3a0/0x420 [ 207.780989][ T7946] ? __fget_files+0x2a/0x420 [ 207.785572][ T7946] ksys_write+0x145/0x250 [ 207.789884][ T7946] ? __pfx_ksys_write+0x10/0x10 [ 207.794715][ T7946] ? rcu_is_watching+0x15/0xb0 [ 207.799473][ T7946] ? do_syscall_64+0xbe/0x3b0 [ 207.804141][ T7946] do_syscall_64+0xfa/0x3b0 [ 207.808631][ T7946] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.813816][ T7946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.819875][ T7946] ? clear_bhb_loop+0x60/0xb0 [ 207.824541][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.830417][ T7946] RIP: 0033:0x7f7d4638e929 [ 207.834822][ T7946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.854437][ T7946] RSP: 002b:00007f7d47168038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.862849][ T7946] RAX: ffffffffffffffda RBX: 00007f7d465b6160 RCX: 00007f7d4638e929 [ 207.870818][ T7946] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 207.878784][ T7946] RBP: 00007f7d46410b39 R08: 0000000000000000 R09: 0000000000000000 [ 207.886752][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.894750][ T7946] R13: 0000000000000000 R14: 00007f7d465b6160 R15: 00007f7d466dfa28 [ 207.902733][ T7946] [ 207.905747][ T7946] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 207.913013][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.0.584 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 207.924886][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.934940][ T7946] Call Trace: [ 207.938212][ T7946] [ 207.941131][ T7946] dump_stack_lvl+0x99/0x250 [ 207.945724][ T7946] ? __asan_memcpy+0x40/0x70 [ 207.950311][ T7946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.955517][ T7946] ? __pfx__printk+0x10/0x10 [ 207.960109][ T7946] panic+0x2db/0x790 [ 207.964000][ T7946] ? __pfx_panic+0x10/0x10 [ 207.968420][ T7946] __warn+0x31b/0x4b0 [ 207.972390][ T7946] ? kcov_remote_start+0x55a/0x7f0 [ 207.977501][ T7946] ? kcov_remote_start+0x55a/0x7f0 [ 207.982605][ T7946] report_bug+0x2be/0x4f0 [ 207.986928][ T7946] ? kcov_remote_start+0x55a/0x7f0 [ 207.992026][ T7946] ? kcov_remote_start+0x55a/0x7f0 [ 207.997135][ T7946] ? kcov_remote_start+0x55c/0x7f0 [ 208.002231][ T7946] handle_bug+0x84/0x160 [ 208.006462][ T7946] exc_invalid_op+0x1a/0x50 [ 208.010965][ T7946] asm_exc_invalid_op+0x1a/0x20 [ 208.015806][ T7946] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 208.021521][ T7946] Code: ff 4c 89 ff be 03 00 00 00 e8 02 19 01 03 e9 eb fa ff ff e8 58 4d a6 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 0e 66 a6 09 89 c0 48 c7 c7 68 77 9d 92 48 03 3c c5 60 [ 208.041120][ T7946] RSP: 0018:ffffc90003d8f290 EFLAGS: 00010002 [ 208.047173][ T7946] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 208.055128][ T7946] RDX: 0000000000030000 RSI: ffffffff8db6ef48 RDI: ffffffff8be28d40 [ 208.063086][ T7946] RBP: ffffc90003d8f4f0 R08: ffffc90003d8f010 R09: 0000000000000020 [ 208.071042][ T7946] R10: dffffc0000000000 R11: ffffffff819e9310 R12: ffff8880b8728768 [ 208.079003][ T7946] R13: ffffffff81c056c7 R14: ffff888024d11e00 R15: 0000000000000000 [ 208.086969][ T7946] ? kcov_remote_start+0x97/0x7f0 [ 208.091984][ T7946] ? __pfx_hlock_conflict+0x10/0x10 [ 208.097179][ T7946] ieee80211_rx_list+0x53a/0x2d80 [ 208.102199][ T7946] ? __d_instantiate+0x197/0x740 [ 208.107129][ T7946] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 208.112576][ T7946] ? __lock_acquire+0xab9/0xd20 [ 208.117418][ T7946] ? ieee80211_rx_napi+0xca/0x3d0 [ 208.122434][ T7946] ? ieee80211_rx_napi+0xca/0x3d0 [ 208.127455][ T7946] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 208.133340][ T7946] ? ieee80211_rx_napi+0xca/0x3d0 [ 208.138348][ T7946] ieee80211_rx_napi+0x1a8/0x3d0 [ 208.143278][ T7946] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 208.148755][ T7946] ? skb_dequeue+0x10e/0x150 [ 208.153345][ T7946] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 208.159320][ T7946] ? ieee80211_stop_device+0x29/0xf0 [ 208.164592][ T7946] ieee80211_stop_device+0x3e/0xf0 [ 208.169698][ T7946] ieee80211_do_stop+0x17dd/0x1fa0 [ 208.174806][ T7946] ? __lock_acquire+0xab9/0xd20 [ 208.179675][ T7946] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 208.185066][ T7946] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 208.190534][ T7946] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 208.196420][ T7946] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.201608][ T7946] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 208.207924][ T7946] ? wiphy_work_cancel+0x1eb/0x3c0 [ 208.213024][ T7946] ieee80211_stop+0x1b1/0x220 [ 208.217686][ T7946] ? __pfx_ieee80211_stop+0x10/0x10 [ 208.222871][ T7946] __dev_close_many+0x361/0x6f0 [ 208.227709][ T7946] ? __pfx___dev_close_many+0x10/0x10 [ 208.233066][ T7946] ? __mutex_trylock_common+0x153/0x260 [ 208.238599][ T7946] dev_close_many+0x225/0x410 [ 208.243265][ T7946] ? __pfx_dev_close_many+0x10/0x10 [ 208.248447][ T7946] ? __mutex_lock+0x330/0xe80 [ 208.253119][ T7946] netif_close+0x158/0x210 [ 208.257524][ T7946] ? __pfx_netif_close+0x10/0x10 [ 208.262442][ T7946] ? __pfx___mutex_lock+0x10/0x10 [ 208.267458][ T7946] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 208.273341][ T7946] dev_close+0x10a/0x220 [ 208.277574][ T7946] cfg80211_shutdown_all_interfaces+0xbb/0x1d0 [ 208.283717][ T7946] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 208.289861][ T7946] cfg80211_rfkill_set_block+0x2d/0x50 [ 208.295309][ T7946] rfkill_set_block+0x1d2/0x440 [ 208.300154][ T7946] rfkill_fop_write+0x44b/0x570 [ 208.305009][ T7946] ? common_file_perm+0x199/0x200 [ 208.310040][ T7946] ? __pfx_rfkill_fop_write+0x10/0x10 [ 208.315417][ T7946] ? security_kernfs_init_security+0x250/0x290 [ 208.321561][ T7946] ? rw_verify_area+0x258/0x650 [ 208.326403][ T7946] ? __pfx_rfkill_fop_write+0x10/0x10 [ 208.331771][ T7946] vfs_write+0x27e/0xa90 [ 208.336011][ T7946] ? __pfx_vfs_write+0x10/0x10 [ 208.340762][ T7946] ? __fget_files+0x2a/0x420 [ 208.345339][ T7946] ? __fget_files+0x2a/0x420 [ 208.349914][ T7946] ? __fget_files+0x3a0/0x420 [ 208.354583][ T7946] ? __fget_files+0x2a/0x420 [ 208.359163][ T7946] ksys_write+0x145/0x250 [ 208.363480][ T7946] ? __pfx_ksys_write+0x10/0x10 [ 208.368315][ T7946] ? rcu_is_watching+0x15/0xb0 [ 208.373088][ T7946] ? do_syscall_64+0xbe/0x3b0 [ 208.377762][ T7946] do_syscall_64+0xfa/0x3b0 [ 208.382249][ T7946] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.387439][ T7946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.393494][ T7946] ? clear_bhb_loop+0x60/0xb0 [ 208.398156][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.404050][ T7946] RIP: 0033:0x7f7d4638e929 [ 208.408459][ T7946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.428060][ T7946] RSP: 002b:00007f7d47168038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.436465][ T7946] RAX: ffffffffffffffda RBX: 00007f7d465b6160 RCX: 00007f7d4638e929 [ 208.444422][ T7946] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 208.452381][ T7946] RBP: 00007f7d46410b39 R08: 0000000000000000 R09: 0000000000000000 [ 208.460340][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.468293][ T7946] R13: 0000000000000000 R14: 00007f7d465b6160 R15: 00007f7d466dfa28 [ 208.476350][ T7946] [ 208.479647][ T7946] Kernel Offset: disabled [ 208.483973][ T7946] Rebooting in 86400 seconds..