last executing test programs: 22.440553376s ago: executing program 3 (id=3065): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) close(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4055}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000001d3a8500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x6b60, &(0x7f0000000040)={0x0, 0xf721, 0x20000, 0xffffffff, 0xa8}, &(0x7f0000000280), &(0x7f0000ffe000)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r4, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 21.285657272s ago: executing program 3 (id=3066): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="7961fdffffff0000000900f2ffff"], 0x20}}, 0x4000054) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 17.780847022s ago: executing program 3 (id=3074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000040)=""/4092, 0xffc) close(r0) socket$kcm(0x11, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 14.239035102s ago: executing program 2 (id=3081): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000040)=""/4092, 0xffc) 14.236733254s ago: executing program 3 (id=3082): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xa, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100400000000000024d564b000000000900818516aedb1b52f9c3aa9b0e2fe85400000000e80000"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x41) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0xb, @local, 0x4e21, 0x3, 'nq\x00', 0x22, 0xed3, 0x4b}, 0x2c) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="71906448fbf1b5b9415338ce626fa615b5c7fbadc49529f85df608c2028c83f3fb5dc1f14123c9f6c4fec88b7296eeff5974f4f4c9b6f96470214d2a5aefad06ab762082e986f7abdd581f4b19ca045270c33bc1f28a2fe2f0ac1411fe66a07fd9", 0x61, 0xfffffffffffffffe) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r4) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r6, @ANYBLOB="00032bbd7000fbdbdf25100000001c0003800800030003000000080001000002000008000200020000000c00038008000100090000006c00058007000100696200003c000280080001001e000000080002000000000008000400e40800000800030001000000080001001100000008000300ffffff7f08000300e6ffffff080001007564700008000100756470000c000280080001000c000000070001006962000074000280040004000800010003000000040004001c000380080002000000000008000100f9ffffff08000200ff070000080002003dae0000080002001aa3dd1608000100faffffff080001000900000008000200000000001c000380080001000c0000f708000200ff7f00000800020008000000"], 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x845) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x4000004) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r7, 0x100000000000f7) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0xa, 0x1ff, 0x1}) 13.373733453s ago: executing program 3 (id=3085): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000001000000000000000700000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x3, 0xff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_raw(0x1d, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 13.181015557s ago: executing program 3 (id=3087): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_connect(0x5, 0x110, &(0x7f0000000b80)={{0x12, 0x1, 0x110, 0xe5, 0xd1, 0xfe, 0xff, 0x5c6, 0x9010, 0x3c0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x1, 0x1, 0x0, 0x30, 0x81, [{{0x9, 0x4, 0x5, 0x1, 0x2, 0x43, 0x73, 0x91, 0x2, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x40, 0x9, 0x5}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "ce08"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x40, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0xde}, @dmm={0x7, 0x24, 0x14, 0xf, 0x81}]}], [{{0x9, 0x5, 0x80, 0x10, 0x8, 0x2, 0x81, 0x6, [@generic={0x81, 0x3, "055caebf40b574d31b8c9b2e32188c7a1ee2304a8c04374224d8cf18e11b6825ee52353ff08d1df67baa35c4e0e0431baf7fef22dad53579593b699edb1e010e700e0877a747959b38b3c27c6f04d24478634cc4c2d9d834b3c8a0755508bae20d0fcbb4aa8a96b8620049a59a5b28db13d41def38a2a2a199c6ece5169584"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x9, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x8000}, @generic={0x14, 0x2, "564f4da5484cb0f21bc98464ac1f3cd0ab4f"}]}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f00000002c0)) 13.073199974s ago: executing program 1 (id=3088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000040)=""/4092, 0xffc) close(r0) socket$kcm(0x11, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 12.302668014s ago: executing program 2 (id=3091): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xa, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100400000000000024d564b000000000900818516aedb1b52f9c3aa9b0e2fe85400000000e80000"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x41) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0xb, @local, 0x4e21, 0x3, 'nq\x00', 0x22, 0xed3, 0x4b}, 0x2c) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r4) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x4000004) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x0, 0x0, 0xa, 0x1ff, 0x1}) 11.707755459s ago: executing program 2 (id=3092): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_connect(0x5, 0x110, &(0x7f0000000b80)={{0x12, 0x1, 0x110, 0xe5, 0xd1, 0xfe, 0xff, 0x5c6, 0x9010, 0x3c0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x1, 0x1, 0x0, 0x30, 0x81, [{{0x9, 0x4, 0x5, 0x1, 0x2, 0x43, 0x73, 0x91, 0x2, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x40, 0x9, 0x5}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "ce08"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x40, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0xde}, @dmm={0x7, 0x24, 0x14, 0xf, 0x81}]}], [{{0x9, 0x5, 0x80, 0x10, 0x8, 0x2, 0x81, 0x6, [@generic={0x81, 0x3, "055caebf40b574d31b8c9b2e32188c7a1ee2304a8c04374224d8cf18e11b6825ee52353ff08d1df67baa35c4e0e0431baf7fef22dad53579593b699edb1e010e700e0877a747959b38b3c27c6f04d24478634cc4c2d9d834b3c8a0755508bae20d0fcbb4aa8a96b8620049a59a5b28db13d41def38a2a2a199c6ece5169584"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x9, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x8000}, @generic={0x14, 0x2, "564f4da5484cb0f21bc98464ac1f3cd0ab4f"}]}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f00000002c0)) 9.689687687s ago: executing program 1 (id=3096): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, 0x0, 0x4) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, 0x0, 0x8840) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x4a000) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r5 = fanotify_init(0xf00, 0x101000) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) timer_create(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 8.541243585s ago: executing program 2 (id=3099): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140), 0x4) sendto$inet(r1, &(0x7f00000000c0)="8f", 0x1, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x40840) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000005200010029bd7000ffdbdf250a08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080002000000008008000100", @ANYRES32=0x0, @ANYBLOB="080005000008f1ffda8e9db84b24aae4f54316b20700050009000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000002) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r5 = syz_usb_connect$cdc_ncm(0x4, 0xa4, &(0x7f0000000040)={{0x12, 0x1, 0x301, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x2, 0x1, 0x1e, 0x20, 0x9b, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'H'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x2, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0xecb, 0x18}, [@mdlm_detail={0xc, 0x24, 0x13, 0x1, "b345f4fe08aecaf3"}, @country_functional={0xc, 0x24, 0x7, 0x0, 0x67a0, [0x7ff, 0x2, 0x8]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1c}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x4, 0x0, 0x67, 0x9, 0x31}, @mbim_extended={0x8, 0x24, 0x1c, 0x2e8, 0x2, 0x100}, @acm={0x4, 0x24, 0x2, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xf9, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xc, 0x6, 0x42}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xc2, 0x8, 0x6}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x81, 0x1, 0x8, 0xc1}, 0x6f, &(0x7f0000000140)={0x5, 0xf, 0x6f, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x7, 0x0, 0xe007, [0x0, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x1, 0x1ff}, @ptm_cap={0x3}, @generic={0x4c, 0x10, 0x1, "3a71626d77bcc8a9424e842d2a3da1e500abbe6fb967e2296c8b451434a370365171e725eb70e53e5cc88608503533166f9ed0a992a72beeb941296c102f35ce00b311811ae09e6eb9"}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x436}}, {0x3d, &(0x7f0000000200)=@string={0x3d, 0x3, "1f6eb4797475ee9538203fbe36c9239f381bd7a421b31b2522d09a342381a39ff234952be142ce97d2bae39bbf1c1c1ae5ccfeffecdad9e0c44575"}}, {0xeb, &(0x7f0000000240)=@string={0xeb, 0x3, "8f7e6f04c489869325c5bcd3b7111cd9802108b93d51141b31ecb37eb12171918015acc683eed0947e693772c34e4f02786628a43734ff3bdc000f11e52ef9521ac7feeff3951572d0442cd267f00b33af72b96c74907474b3584d11ccf91f3350906c1600debcca1a08a5468ea3f32098309d50fdc4c874c4175b6f768d2ab9ed2f17197d906a7569e19b30c8d7552e929af352dca39696dda6c465ad491e01890cbbd3242a335ad034d243d1bb2c188b830107a17d8706ffd75054b6ded0b0dee549f46afc1b64fa319c666c3f9c8a3b0bfac45a61468d36ce7b1f47a043e06fe88a297689fdc86f"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x422}}, {0x89, &(0x7f00000003c0)=@string={0x89, 0x3, "c419fc417385184ecfebf770d4ee3711bce938b05f645774dc48a1b7d668c06db6b2c32dec1472e6cbb92a0ccc4a7a35d5131148135ad5fc6a7578a117817a1676ea0a5c907782e3e35932031f7ec3d62b085f6587eb54704cda2f26495a5cd4e414957ec328053fd72487f10740d7f2a458d62236d410a8a3f592d9304f0bdb7744256019a7b7"}}, {0x30, &(0x7f0000000480)=@string={0x30, 0x3, "8d5c25fa25796491c6ae6ea52b463b2a0fdf012cab30baf38ad3bf8cf80547e4a8ef18ff5f7feaaa828c70bfc957"}}]}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 7.774478586s ago: executing program 4 (id=3100): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r3 = eventfd2(0xfffffff9, 0x80000) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) readv(r3, &(0x7f0000000780)=[{&(0x7f0000000240)=""/18, 0x12}], 0x1) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000004c0)=@urb_type_iso={0x0, {0x7}, 0xaa, 0x6, 0x0, 0x0, 0x8000, 0x5, 0x28, 0x5, 0x6, &(0x7f00000007c0), [{0x400, 0x2, 0x7fff}, {0x7fffffff, 0x466f, 0x3ad}, {0xfff, 0x5, 0x8}, {0x80000001, 0xfffffffc, 0xd}, {0x0, 0xff, 0xfffffffe}, {0x0, 0x8, 0x2}, {0xe35, 0x101, 0x6}, {0x2, 0x7, 0x5}, {0x2, 0x500, 0x2}, {0x5c, 0x9, 0xfffffff7}, {0x2, 0x4, 0x2}, {0x3, 0x97a6, 0x2}, {0xb, 0x0, 0xdfb}, {0x81, 0x7fffffff, 0x68aa}, {0xd5bd, 0x3, 0x5}, {0x9, 0x3, 0x40}, {0xc, 0x5de, 0x1}, {0x8, 0x4, 0x6}, {0x7, 0x1, 0x7fff}, {0x1, 0x3ff, 0x2}, {0xe, 0x7, 0xd}, {0x5, 0x7fffffff, 0x6}, {0x80000000, 0x301, 0xf}, {0x7, 0x162d, 0x9}, {0x6, 0x5b6, 0xb8}, {0x0, 0x40, 0x80000000}, {0xc5, 0x7, 0x62b2}, {0x8000, 0x2, 0x7fffffff}, {0x8001, 0x957, 0x9}, {0x446a, 0xfffffff7, 0x47b12441}, {0xa0, 0x7, 0x6}, {0x80, 0x6, 0x8}, {0x0, 0x0, 0x7}, {0x10000, 0x8, 0x9}, {0x3, 0x7d45, 0x2}, {0xc, 0x1, 0x1}, {0x703, 0x3, 0x1}, {0x0, 0x13a, 0xfffffff9}, {0x4, 0x1, 0xad}, {0x100, 0x1}]}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) getpriority(0x2, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x0, 0x3, 0x4}}, 0x30) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x200009d0}], 0x1, 0x40800) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 7.214873531s ago: executing program 1 (id=3103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) close(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4055}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000001d3a8500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000906010200000000000000000500ffff0c00078008000940000000050900020073797a31000000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc00c0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r5, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 6.157967092s ago: executing program 1 (id=3105): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRESDEC], 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fremovexattr(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) iopl(0x3) syz_clone3(0x0, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000600)=ANY=[@ANYRESDEC=r5, @ANYRES64=r5, @ANYRES64=r3, @ANYBLOB="be71fb804a6a520991cf78454c6ec559779cdeea2743986f4ede3ff325230ddab58f0fb5dfeb24fe85f573a79f19428c37f34f897632e36ff7f0a6d2c5b0ff3f74480860e435706f56d3e2d90e4bc59b09cca82e4754ee672ceea387df6256a633ecaf469dd2036bff9092965a5f7e1a37555ae95d72eda9d0751923a8fbd3d5e290c9d106c755d00076c8b06a15d8552d174de7c1b23f6ecfeb5fee3069fdf0", @ANYRESOCT=r2, @ANYRESHEX, @ANYRESHEX=r5, @ANYRESOCT=r0], 0x118) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x20010, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$ppp(r5, &(0x7f0000000b80)="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", 0xd67) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x200) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x69) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000500)=0x8) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b0800452400280068000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="540413ee37c9a44532a35c2c0e4700fc8f780000"], 0x0) 5.996074244s ago: executing program 4 (id=3106): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.888097351s ago: executing program 1 (id=3107): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xa, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100400000000000024d564b000000000900818516aedb1b52f9c3aa9b0e2fe85400000000e80000"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x41) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0xb, @local, 0x4e21, 0x3, 'nq\x00', 0x22, 0xed3, 0x4b}, 0x2c) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="71906448fbf1b5b9415338ce626fa615b5c7fbadc49529f85df608c2028c83f3fb5dc1f14123c9f6c4fec88b7296eeff5974f4f4c9b6f96470214d2a5aefad06ab762082e986f7abdd581f4b19ca045270c33bc1f28a2fe2f0ac1411fe66a07fd9", 0x61, 0xfffffffffffffffe) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r4) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r6, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x845) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x4000004) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r7, 0x100000000000f7) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0xa, 0x1ff, 0x1}) 4.817043362s ago: executing program 2 (id=3108): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180), 0x0) 4.361519546s ago: executing program 0 (id=3109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000180)='FROZEN\x00', 0x7) (fail_nth: 1) 3.992401339s ago: executing program 1 (id=3110): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.926672168s ago: executing program 0 (id=3111): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000001d3a8500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000906010200000000000000000500ffff0c00078008000940000000050900020073797a31000000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc00c0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r5, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 2.980434299s ago: executing program 0 (id=3112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000400)={0x0, 0xa}) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x18) 2.467780823s ago: executing program 4 (id=3113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) close(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4055}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000001d3a8500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000906010200000000000000000500ffff0c00078008000940000000050900020073797a31000000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc00c0) syz_io_uring_setup(0x6b60, &(0x7f0000000040)={0x0, 0xf721, 0x20000, 0xffffffff, 0xa8}, &(0x7f0000000280), &(0x7f0000ffe000)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r4, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 2.361757156s ago: executing program 0 (id=3114): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xa, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100400000000000024d564b000000000900818516aedb1b52f9c3aa9b0e2fe85400000000e80000"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x41) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0xb, @local, 0x4e21, 0x3, 'nq\x00', 0x22, 0xed3, 0x4b}, 0x2c) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="71906448fbf1b5b9415338ce626fa615b5c7fbadc49529f85df608c2028c83f3fb5dc1f14123c9f6c4fec88b7296eeff5974f4f4c9b6f96470214d2a5aefad06ab762082e986f7abdd581f4b19ca045270c33bc1f28a2fe2f0ac1411fe66a07fd9", 0x61, 0xfffffffffffffffe) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r4) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x4000004) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x100000000000f7) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0xa, 0x1ff, 0x1}) 1.43167585s ago: executing program 4 (id=3115): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r1, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = eventfd(0x3) sync_file_range(r4, 0xffffffffffff0700, 0xfffffffffffffffd, 0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000140), 0xb, 0x170bfa152bcbb407) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r7, r3, 0x1, 0x8, 0x81}) 1.006660805s ago: executing program 4 (id=3116): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRESDEC], 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fremovexattr(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) iopl(0x3) syz_clone3(0x0, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000600)=ANY=[@ANYRESDEC=r5, @ANYRES64=r5, @ANYRES64=r3, @ANYBLOB="be71fb804a6a520991cf78454c6ec559779cdeea2743986f4ede3ff325230ddab58f0fb5dfeb24fe85f573a79f19428c37f34f897632e36ff7f0a6d2c5b0ff3f74480860e435706f56d3e2d90e4bc59b09cca82e4754ee672ceea387df6256a633ecaf469dd2036bff9092965a5f7e1a37555ae95d72eda9d0751923a8fbd3d5e290c9d106c755d00076c8b06a15d8552d174de7c1b23f6ecfeb5fee3069fdf0", @ANYRESOCT=r2, @ANYRESHEX, @ANYRESHEX=r5, @ANYRESOCT=r0], 0x118) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x20010, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x200) close(0xffffffffffffffff) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x69) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000500)=0x8) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b0800452400280068000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="540413ee37c9a44532a35c2c0e4700fc8f780000"], 0x0) 1.001627028s ago: executing program 0 (id=3117): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRESDEC], 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fremovexattr(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) iopl(0x3) syz_clone3(0x0, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000600)=ANY=[@ANYRESDEC=r5, @ANYRES64=r5, @ANYRES64=r3, @ANYBLOB="be71fb804a6a520991cf78454c6ec559779cdeea2743986f4ede3ff325230ddab58f0fb5dfeb24fe85f573a79f19428c37f34f897632e36ff7f0a6d2c5b0ff3f74480860e435706f56d3e2d90e4bc59b09cca82e4754ee672ceea387df6256a633ecaf469dd2036bff9092965a5f7e1a37555ae95d72eda9d0751923a8fbd3d5e290c9d106c755d00076c8b06a15d8552d174de7c1b23f6ecfeb5fee3069fdf0", @ANYRESOCT=r2, @ANYRESHEX, @ANYRESHEX=r5, @ANYRESOCT=r0], 0x118) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x20010, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$ppp(r5, &(0x7f0000000b80)="95f8dab6b79b7d0e5207d9de37060b7b1aaf9fabe8977f94dbff092e5689d606b0853b4a1b46a4f54e84f482b09256be3b3afdc97a50ad9bd3c98a9e17287edb1cbf844643875967150307f9d51c9a0dc24645e8ce2c9a8300f698bda6c567b7c708ccea993878dbbec68444c8e133b3d5f558001a907881d984cea4ee565cb2d0f9a90978aa730a1a75faf208701b9b6e0e72b3cc5a231a1df62b99f6f50d8c67f8812038753d07c00b63b3b4dfe7b550ab21c218da52c339ddf92563efe8b582c31d7e4dbc9eaf160c16f1af31f480ecdadd110c9beeb4bf729080fa045a35647e94658c21fc3ee22664bdb9eadbc3b2a06cd828a3a1f5785df61623ab68f8b093a9ec16f74ec1e379d431cf7d2758736d78661a0edcac0c14f17dcc1fbd9a7101b34ac07cd5b800a1d1f54a112de2c43d3f0d7e4ffcd375c114710fe4106c2ca8d6ec71bebb3651c397ed79671bc29d96563e7ac468b00fc25df657a790cdd7b2f320139bc6e93f8ba0b202c1be5f9a2fa7c9aa02f6b4d3a2c56b704f7eb6ed205e7bd737e13421a15b5655baad3e12e3e2e532a823246f4a7369e502ad08f307b4a5c111e5643bd04e4655ac93b8f6c7296551493ce8848dbb5a7d125430d3dd4f84217067c5e38c0a4a55e32f37c32fbf83e36476062a4d76e6844bb6040a91a64f61a118fe7c1c08f106f31b374446a6241bef15c5fcce76041422298fdeca516be581878a28acece6350f46675f83bde71e081ecee88c6d8c768d7b1c0510ff1d8989f377e9a454856a0c4a34bf02da9f396d3ff8a2bbe2c20560d6ef50eba53f18370a6eb360c07f48c375de2e77b0daf856ce2fabd9b7b3c43d84b1bb784d0ed9f8d2bbb7e9a095fd6322ab7d765ddbb8932fa1e849b9f63bd8c86fe4d679c3104ef74438c72476fdc70db9f1eae9d9cc84d3b4fdac3f727fd395c9fe962a256d8c103828774449858010704e39ef82d15c94e65bd48df40bbd635bc0c3b2c29dc925fbaf08d2833cb0c629262bdd6a1499f2404ab230f9a1b296ff316d39382d566e907c24407f569fe724127c4473aa84bb35f4a7b6fee7147f8230c567df9a59f7d5d05f822ae3fcd7793bff8c6a453845c16721d24fd61dc5c82b7d020aa3bcb834dbfe7e1cbe6b0e67f6e3210cb9783db3e97a244f8ac542afb3536867c135ac221e06789cade0248890bcc3cde2b92c82cca977e42bb0bb2671d763c6d14618b1a97f0b8630eb96f81f34de671cb6a5decfa8676cb5bafd93ac30c11e588d4b3043ba3e040869ba8cac24e4f8130d216d054d38345a0d343a62c7d75b9787bb25779599b9d99b96336054d4a4e9d63c1ffb866e9bf0164de7224159021d9846d472fc868fb5c91cfe8a688c5cc4937df89d747343d2ba67b34985a6b5a2f5ce14e1a50886b34ef1a8e313536be0517bdedaf08e258104a8da2cc62105848fe9f70542ee0bab7acd764a592ab829d7417b638bbaff3d372daa578a84aedbacfe284d716c2733055588f7ea00e66e19c3e28251e50267746f18f89d3383add176bad0f26b2b42a5fc86f55a788457d6fba8f1950b8dbed76f0252e128a94f6a43542fb890acf471181aaa2ebe82cfef15003d170c8114ac079b081f5168f0102e8e82242ed17900efbc9687d0fa8c9786edeb267d4465de580a775163fc2f1d7cd4cdc6cc81f7d0eb62b112a2cfb165b766fe2e495ef65e4c51abad63ae9cbc91f3089b1b6bfe13c2ca5e801d11964d3a2e1d2cf2c2677d3800d5042c9daabcd8b6c0c2ea710ae074589e335e733975aaccc0211887594818ef3e0d39c0f7f089a3561f3913a69174f7141b49f362197645cb9337f9c80fd68e39fc1bc7814ed2f084350ff7af046154d635f49848cded48da7d6a0ddac90587f630222e3ddda93f06c2d03ca24f9981943d11dd0869076b6186f15340c2282c4b5c3a12dd4faccb0873c0ee8a9651aa02df4b6ee1952bab76020867c9b9394398ad39623e8724f0febb33caed2213fe7e2a2b0ae02dc41809a773b896bbafa210ffef913038b9a5f464c22a248967e8c73b1f46b65ca0487e44abf732b3f75c3a15d97416c91661e60ab579498c566c8589147f65419a609c6f08d125fca76efb209e759fe27d7ee95c30fb2c220ae525b9fd3fabcb29de03f9f7457e3e1ad61f758ef6fbf59b21615adaf222f07b784413b223963310852ac4ba292af37996386e1e668ca8eee8415223edc3e50d61f7c658e05aff477065f878e1b116b8abd97deb968e16e2ceeee3031e5bcb71e89a499c037fb9bc842f95e852404a2ac548b643966df1600dad50929dce0d397285761563ea1fca1057c372fe26b741a935868d261bdfbe781de22a3b6d1f42312e9893a77c0169a642e4bd9b3f5c3a0c9cb1add9dc57e7940b74d3b65e9341a5fd898446682be1aa3a00f18102948cbacaf0e46eb0fab1d0010ef19f694acea18bf997a9642bc95478f28cc92551285f8bd7f2049093d01d85ca4181d115b83ef6cc1a2a0c25d068a566a096d9842d813688b62c5d27a0f7a5d07aee166aa1cce9c2453f5cb25b9a50aab8d1506f412725a7c24edf272719204630b83cecbed8175580b4b4c7d70b1534158a6afce6e2652364039d33b50732506983c1256f56de38f0240c39e3a3ef076a5d6673bab0f6d40994f4095c12a368a98ee4b4413ee191aaa5b0e3372ba0e5495baca49c736ea13d97b2bc104f4666ba2202870b17de291fd5f4082898f688ef040572a6386251c6d18425417069122060ead9decf49ad8fb542e4c2491bfcc8137986bf8d02379c629515f7ea1efbee7b17533f8f99155ec503dba527d20975bb58a28e664ec45bd630891bc80facbd79eb3950a789b7e2d33255acd9c5f883d83d81b7c93de55d4b63c6cac5cd6791c420416df5bc56ce6c88fe701e3c50c8aca20dc7dbe2c3375c09731442a40524025ea7dbc7b0392727907988c389281756b4e45bbaf8b5ca1f963145c067452f41ad74e10b9c63630fcfc711b9012a95e8c2dcfc8ecc6c2eeb1aa75a44fdcaf98d4de2ebfec4a8f79fc7058e87d75e92d3825e4b7aacfff8364d9ecc787ec3d20d40ba059339c7829896f92c7548bf486c39ba32e594c9c0aeecd7d7177cf9a64bcf775b4181fe55468a41aa7005526560aa149e27868c43fca7a2f17099ad999621b2f84503179b868160254ead90f9143359fc7415273c7aa5c154c209fc44e2da9bd4bcfee26cd7d89a2f5eadcd48fdd52645ec583690bf2a1aeab74e98afe16b7e27b552c22cc676447105c5bfe89359acfb37e5a0c47f673ace712d2def31f770af52d47a6c9b88d2c78c3530cf4a548606679ea33eb7bb60970d8ecbaae96b6d22528713e0d745679aea2707dc09c5daf61893528fc0376fbeb6897b18ac5263a8e65112ac8a9d7641abefb69c49fc8f0911a687f6d6c7ef1eafcd0716cfbf413663d02cb4acfd24a9e1ac934e3c0a269d6bb69eca20cc4c015fc6b1420992a811101d84eecde7cf7ac61ee6570cbe8a2851158b93494fe7534ed9aee14a15ec537fb83032f4e0dece9255e309463bbd2667e741af4d4292b06bb468b2fb9c3f70db9e35fd3182ce5a4a4af9004a5580d3360ec5b3f1fd190b9970cd2d33d6b4f68f9ae7ecd2a3ed6405b416ac28682b0c2aecee24c2db6d2e8f00b43b00e7983c954d4466c85b0c61a17ba3e848d485d7fd1730509d24a49bd739f3a9bb84a42e901e8176710c683a5c0611a3e76a23376038e55e439d102c6752b8ccfc4a33cfb26e62bf18bea88efa075128bbba193f8aaa886eb5feb1b8e6b114b8fbf1d856ba4acdaf87504fb2a8d7e45ecbb31bfc2e189b4c4bde43e51127dbd4fbb1ec3139ce1aae9ae7dd0502895c9905e68f37dd7d4b6f0874421477911773a4efaa89ecf90c2a5b4fdd6e2bac6b8264a86166ff7fb1678092ac564c5627f1490040505f2f69da45476f07f82bfcd4ecb6ce2405a55fe3e90859e6d644f044d0c1b0c15535630b3d32a88a11ecd62ed84875db7c1bdee49375955efeb34eadcedb607010418874a62301bcdc1ffac96e59e30c51bd8abe0c8aafcf6b9dc086c2e4a842d5df84082938540248a581f07fe1c99186c6af40a18bf71f88f5b5f30f6692d8892264abd5880e16f1273b4c25a9466ab45333e126538d1abc28f6831f2b696c13051723f788c53eed16805e0c82f73ff55d89846be8e75d417382cec939d56d8341f97291b2792e0c1804e49ad5a805c58c5edae50aa5948f7ea208ec688e7588ef29d60d7eb6ed032e2e617034f8bb2f74f0e3f24a6e8d3b33c33a42a5dec4362c335e65a53b8e03e0a564fb709dac07fefa89a79248cfceaa6e066694c7df418a932ccbb9832004bd9bfd035be902d7e0c8ac5a2486f663c0cd2044c49bf494ad4ed2c4724328b4e2bc94e88b01c85752f1d5b738d46d7044d2f665aecabfab87babb41dae5f919659e0adb43b7df509b9375054343ee7316d3b5c633d7582b6eb381e48ef0fcd49fa2de5b3a72bcc57847278743b79e17a5623b33bee5dcb7f9bafc3c32b42e955f103f57a50366844356b4489b239d77e1c03be3b1b0875e77d4fa91d323446352176939ec7035a568a03c10a2dee180c5e5002fcda55a73284b77998e98a09be0a65ec205a7191f115edfd4bf379c9f18e62952488bb306fc23783441fc166420918eee5da10cddd1797f3ca88a4db6deb4a116e8a1d77b21ac947184984a592a4473ecf5cca45c8dfa9ca10dcdfab21c3140ecade4d6fce30b23fc3892b2a3cf4232c8a62a9b734515ce6470c9907edcd3069529dc61f7c12d361c2740cc986d19bfac33d2cf640a6aa3c49bc0bc", 0xd67) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="042ffd02ffffffffffff030863d9ff03009f7dbe22ff0f00fc44ea6d1aec274c8968917697e62edc322898c618f3fb5e491f9e8adff68d373fb0734adfc545389458b825340c8c8f5c492078d00adc867641fcb0351732cefa32848d5e44c43df47371c93da4cdff225f61b624958bd6668dc99425d17452bb3e5dbe078b3a7451e54dc0c2587964a6886f466d7b66c8f914cf3a4b3b61cd721e36df2e08fec18c94317d8bb53ef342ff391f7034a4f3639116e19551aac5539c313ea03737d2c1404121a85b892b08815abf97626ad4e6a9b0d00d9a74e409486f8ea349fdba0cb4757dbcea513381c76a1c3d6e79f0d14e3a27d93b600168eebeaaaaaaaaaa10d2098a54c3330000dba74559adde41e078484e9f387a109a0520c9f59f1d3c9fac7a118a24988d673e37ce8ccef7862cdffa1d7d6066471ca7831aeb3d20e729b78a4adeac6c80e8933e4a010100d15fcfe4620aacd245cc5e5b50016ede784d559561b836e5c308740b523d9024b9b77f9d51db558ee477509a28b06bc2f0787bb8dbeda3e4aa3d1762352c5c15886251caea2fb1af87e76e9729578474233bf840c98d40147e5b9739727ee5956ab2f56bb12147ed75fcccb20c8d9345679c0ca03ad687d80cb2c18ef347722461d189b1f1486d43ea431403af86d22a25140beafb7169473d849429ca7e5d006d6b2dcf600e469486a4"], 0x200) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x69) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000500)=0x8) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b0800452400280068000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="540413ee37c9a44532a35c2c0e4700fc8f780000"], 0x0) 321.22603ms ago: executing program 2 (id=3118): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xd, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 101.530152ms ago: executing program 4 (id=3119): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000140), &(0x7f0000000240)=0x4) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0xa00, 0x0, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(0x4) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4) 0s ago: executing program 0 (id=3120): creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRESOCT], 0x27) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') lseek(r6, 0x8, 0x0) getsockname$packet(r6, &(0x7f0000000100), &(0x7f0000000280)=0x14) connect$can_bcm(r5, &(0x7f0000000000), 0x10) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r7, 0x52b242d) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, r7) sendmsg$can_bcm(r5, 0x0, 0x20000080) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) kernel console output (not intermixed with test programs): [T15933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2905'. [ 1012.970821][ T1203] usb 1-1: device descriptor read/8, error -71 [ 1013.124560][ T5964] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.137035][ T5964] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1013.149849][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.170794][ T5964] usb 2-1: config 0 descriptor?? [ 1013.261053][ T1203] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1013.301239][ T1203] usb 1-1: device descriptor read/8, error -71 [ 1013.309553][T15890] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1013.323781][ T5964] pwc: Askey VC010 type 2 USB webcam detected. [ 1013.344250][T15890] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1013.353220][T15890] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1013.366136][T15890] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1013.619906][T15944] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2906'. [ 1013.629625][T15944] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2906'. [ 1013.740456][ T5832] Bluetooth: hci5: command tx timeout [ 1013.750183][ T1203] usb usb1-port1: unable to enumerate USB device [ 1013.817324][T15890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.835469][T15890] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.848020][T14294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.855119][T14294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.870751][T13099] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1013.884666][T14294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.891813][T14294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.925624][T15948] fuse: Bad value for 'user_id' [ 1013.930624][T15948] fuse: Bad value for 'user_id' [ 1013.968117][ T5964] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1013.979409][ T5964] pwc: recv_control_msg error -32 req 02 val 2700 [ 1013.979848][T15922] sctp: [Deprecated]: syz.1.2903 (pid 15922) Use of int in max_burst socket option deprecated. [ 1013.979848][T15922] Use struct sctp_assoc_value instead [ 1013.993057][T15890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1014.123742][ T5964] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1014.164727][T15950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2909'. [ 1014.183729][T13099] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1014.194546][T13099] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1014.211064][T13099] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1014.240005][T13099] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1014.256766][T13099] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1014.272074][T13099] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1014.273073][T15890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1014.286319][T13099] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1014.296161][T13099] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1014.305407][T13099] usb 5-1: Product: syz [ 1014.311165][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2909'. [ 1014.320657][T13099] usb 5-1: Manufacturer: syz [ 1014.325268][T13099] usb 5-1: SerialNumber: syz [ 1014.333863][T13099] usb 5-1: config 0 descriptor?? [ 1014.336894][T15890] veth0_vlan: entered promiscuous mode [ 1014.345263][T15938] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1014.361901][T13099] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1014.375049][T15890] veth1_vlan: entered promiscuous mode [ 1014.384803][T13099] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1014.409097][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2909'. [ 1014.424953][T15890] veth0_macvtap: entered promiscuous mode [ 1014.437810][T15890] veth1_macvtap: entered promiscuous mode [ 1014.450727][T14246] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1014.458984][T15890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1014.483743][T15890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1014.499512][T15890] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.513337][T15890] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.524149][T15890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.528078][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2909'. [ 1014.533330][T15890] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.633832][T14246] usb 4-1: Using ep0 maxpacket: 8 [ 1014.656770][T14246] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1014.670697][T14246] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1014.685820][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.700187][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.709542][T14246] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1014.724711][ T30] audit: type=1326 audit(1751401603.503:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb095d8e929 code=0x7ffc0000 [ 1014.749229][T14246] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64 [ 1014.761128][T14246] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1014.782489][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.791558][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.792640][ T30] audit: type=1326 audit(1751401603.503:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb095d8e929 code=0x7ffc0000 [ 1014.800754][T14246] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1014.835929][T14246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.110964][T14246] usbtmc 4-1:16.0: bulk endpoints not found [ 1015.226070][ T30] audit: type=1326 audit(1751401603.503:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb095d8e929 code=0x7ffc0000 [ 1015.268997][T13099] usb 5-1: USB disconnect, device number 59 [ 1015.315550][T13099] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1015.345739][T15963] delete_channel: no stack [ 1015.350537][ T30] audit: type=1326 audit(1751401603.503:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb095d8e929 code=0x7ffc0000 [ 1015.375337][ T30] audit: type=1326 audit(1751401603.503:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb095d8e929 code=0x7ffc0000 [ 1015.430717][ T5964] pwc: recv_control_msg error -71 req 04 val 1300 [ 1015.459422][ T30] audit: type=1326 audit(1751401603.503:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb095d8e929 code=0x7ffc0000 [ 1015.488751][ T5964] pwc: recv_control_msg error -71 req 04 val 1400 [ 1015.503523][ T5964] pwc: recv_control_msg error -71 req 02 val 2000 [ 1015.504192][ T30] audit: type=1326 audit(1751401603.503:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb095d8e929 code=0x7ffc0000 [ 1015.533382][ T5964] pwc: recv_control_msg error -71 req 02 val 2100 [ 1015.533733][ T5964] pwc: recv_control_msg error -71 req 04 val 1500 [ 1015.534130][ T5964] pwc: recv_control_msg error -71 req 02 val 2500 [ 1015.534444][ T5964] pwc: recv_control_msg error -71 req 02 val 2400 [ 1015.563094][T14246] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1015.565575][ T30] audit: type=1326 audit(1751401603.503:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fb095d8e929 code=0x7ffc0000 [ 1015.601910][ T5964] pwc: recv_control_msg error -71 req 02 val 2600 [ 1015.606476][ T30] audit: type=1326 audit(1751401603.563:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb095d8e929 code=0x7ffc0000 [ 1015.633292][ T5964] pwc: recv_control_msg error -71 req 02 val 2900 [ 1015.637317][ T30] audit: type=1326 audit(1751401603.563:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.0.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb095d8e929 code=0x7ffc0000 [ 1015.663142][ T5964] pwc: recv_control_msg error -71 req 02 val 2800 [ 1015.664087][ T5964] pwc: recv_control_msg error -71 req 04 val 1100 [ 1015.850220][ T5832] Bluetooth: hci5: command tx timeout [ 1015.858368][ T5964] pwc: recv_control_msg error -71 req 04 val 1200 [ 1015.867344][ T5964] pwc: Registered as video103. [ 1016.870913][T14246] usb 3-1: Using ep0 maxpacket: 32 [ 1016.880479][T14246] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1017.094828][T14246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.114593][ T5964] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input111 [ 1017.176431][T14246] usb 3-1: Product: syz [ 1017.213100][T14246] usb 3-1: Manufacturer: syz [ 1017.309968][T14246] usb 3-1: SerialNumber: syz [ 1017.441320][ T5964] usb 2-1: USB disconnect, device number 71 [ 1017.469121][T14246] usb 3-1: config 0 descriptor?? [ 1017.553320][T14246] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1017.565115][T13226] usb 4-1: USB disconnect, device number 42 [ 1017.584892][T15969] delete_channel: no stack [ 1017.754628][T15991] fuse: Bad value for 'user_id' [ 1017.759795][T15991] fuse: Bad value for 'user_id' [ 1017.901186][ T5832] Bluetooth: hci5: command tx timeout [ 1017.901412][ T10] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1018.376332][ T10] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1018.541235][T13226] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1018.549997][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1018.710507][T13226] usb 4-1: Using ep0 maxpacket: 8 [ 1018.784405][ T10] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1018.794196][T13226] usb 4-1: no configurations [ 1018.796754][ T10] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1018.811991][ T10] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1018.825300][T13226] usb 4-1: can't read configurations, error -22 [ 1018.923164][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1018.964053][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1018.973221][T13226] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1018.981991][ T10] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1018.993305][ T10] usb 5-1: Product: syz [ 1018.998619][ T10] usb 5-1: Manufacturer: syz [ 1019.047269][ T10] usb 5-1: SerialNumber: syz [ 1019.130421][T13226] usb 4-1: Using ep0 maxpacket: 8 [ 1019.139745][T13226] usb 4-1: no configurations [ 1019.140091][ T10] usb 5-1: config 0 descriptor?? [ 1019.144508][T13226] usb 4-1: can't read configurations, error -22 [ 1019.144835][T13226] usb usb4-port1: attempt power cycle [ 1019.161684][T15985] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1019.183728][ T10] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1019.212184][ T10] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1019.890902][T14246] gspca_stk1135: reg_w 0x200 err -110 [ 1019.897585][T14246] gspca_stk1135: serial bus timeout: status=0x00 [ 1019.929956][T14246] gspca_stk1135: Sensor write failed [ 1019.950405][T14246] gspca_stk1135: serial bus timeout: status=0x00 [ 1019.970752][T13226] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1019.979283][T14246] gspca_stk1135: Sensor write failed [ 1020.077193][T13226] usb 4-1: Using ep0 maxpacket: 8 [ 1020.103208][T14246] gspca_stk1135: serial bus timeout: status=0x00 [ 1020.153457][ T5820] usb 5-1: USB disconnect, device number 60 [ 1020.153609][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 1020.183751][T13226] usb 4-1: no configurations [ 1020.188731][T13226] usb 4-1: can't read configurations, error -22 [ 1020.192491][ T5820] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1020.201724][T14246] gspca_stk1135: Sensor read failed [ 1020.201820][T14246] gspca_stk1135: serial bus timeout: status=0x00 [ 1020.253622][T14246] gspca_stk1135: Sensor read failed [ 1020.259421][T14246] gspca_stk1135: Detected sensor type unknown (0x0) [ 1020.267305][T14246] gspca_stk1135: serial bus timeout: status=0x00 [ 1020.277392][T14246] gspca_stk1135: Sensor read failed [ 1020.282904][T14246] gspca_stk1135: serial bus timeout: status=0x00 [ 1020.291305][T14246] gspca_stk1135: Sensor read failed [ 1020.380535][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 1020.380551][ T30] audit: type=1326 audit(1751401609.153:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa035b8e929 code=0x7ffc0000 [ 1020.422207][T14246] gspca_stk1135: serial bus timeout: status=0x00 [ 1020.446384][T14246] gspca_stk1135: Sensor write failed [ 1020.455677][T14246] gspca_stk1135: serial bus timeout: status=0x00 [ 1020.465729][T14246] gspca_stk1135: Sensor write failed [ 1020.495751][ T30] audit: type=1326 audit(1751401609.153:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa035b8e929 code=0x7ffc0000 [ 1020.639640][T13226] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1020.684021][T14246] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 1020.698672][T14246] usb 3-1: USB disconnect, device number 44 [ 1021.128538][ T5832] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1021.190624][T13226] usb 4-1: device descriptor read/8, error -71 [ 1021.422932][T13226] usb usb4-port1: unable to enumerate USB device [ 1021.435336][T16001] delete_channel: no stack [ 1022.167673][T16022] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2925'. [ 1022.177335][T16022] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2925'. [ 1022.305332][T16032] kvm: pic: non byte write [ 1022.403190][ T30] audit: type=1400 audit(1751401611.183:948): avc: denied { listen } for pid=16034 comm="syz.3.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1022.423010][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1022.440646][ T48] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1022.453183][ T1203] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1022.464760][ T30] audit: type=1400 audit(1751401611.243:949): avc: denied { accept } for pid=16034 comm="syz.3.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1022.580377][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1022.587497][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1022.599513][ T10] usb 1-1: config 0 has no interface number 0 [ 1022.610182][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1022.627845][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1022.637024][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.640302][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 1022.645076][ T1203] usb 2-1: Using ep0 maxpacket: 8 [ 1022.655386][ T10] usb 1-1: Product: syz [ 1022.659552][ T10] usb 1-1: Manufacturer: syz [ 1022.660982][ T48] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1022.664304][ T10] usb 1-1: SerialNumber: syz [ 1022.675688][ T48] usb 5-1: config 0 has no interface number 0 [ 1022.678694][ T1203] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 1022.702470][ T10] usb 1-1: config 0 descriptor?? [ 1022.711610][ T1203] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1022.723894][ T1203] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1022.763008][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1022.818108][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 1022.848068][ T1203] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1022.912820][ T1203] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1023.021518][ T1203] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1023.030776][ T48] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1023.042353][ T1203] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1023.050432][ T48] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1023.055065][ T1203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.062802][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.078837][ T48] usb 5-1: Product: syz [ 1023.083227][ T48] usb 5-1: Manufacturer: syz [ 1023.094858][ T48] usb 5-1: SerialNumber: syz [ 1023.110093][ T48] usb 5-1: config 0 descriptor?? [ 1023.121120][ T48] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1023.131085][ T48] em28xx 5-1:0.132: Video interface 132 found: [ 1023.361283][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1023.504302][ T1203] usb 2-1: usb_control_msg returned -32 [ 1023.604012][ T1203] usbtmc 2-1:16.0: can't read capabilities [ 1023.646267][ T1203] usb 2-1: USB disconnect, device number 72 [ 1023.719024][T16028] batman_adv: batadv0: Adding interface: dummy0 [ 1023.725838][ T48] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1023.748305][T16028] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.780742][T16028] batman_adv: batadv0: Interface activated: dummy0 [ 1023.811755][ T10] em28xx 1-1:0.132: failed to read eeprom (err=-110) [ 1023.839008][ T10] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1024.030377][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1024.038496][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 1024.076665][ T1203] em28xx 1-1:0.132: Registering V4L2 extension [ 1024.193739][ T10] usb 1-1: USB disconnect, device number 39 [ 1024.242407][ T48] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1024.267038][ T10] em28xx 1-1:0.132: Disconnecting em28xx [ 1024.274845][ T48] em28xx 5-1:0.132: board has no eeprom [ 1024.370382][ T48] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1024.380383][ T48] em28xx 5-1:0.132: analog set to bulk mode. [ 1024.453659][ T48] usb 5-1: USB disconnect, device number 61 [ 1024.483816][ T48] em28xx 5-1:0.132: Disconnecting em28xx [ 1024.490321][T13099] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1024.788411][ T1203] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1024.797728][ T1203] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1024.806825][ T1203] em28xx 1-1:0.132: No AC97 audio processor [ 1024.828895][ T1203] usb 1-1: Decoder not found [ 1024.834921][ T1203] em28xx 1-1:0.132: failed to create media graph [ 1024.843898][ T1203] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1024.852837][ T1203] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1024.864694][ T10] em28xx 1-1:0.132: Closing input extension [ 1024.883264][ T10] em28xx 1-1:0.132: Freeing device [ 1024.900311][T13226] em28xx 5-1:0.132: Registering V4L2 extension [ 1024.900499][T13099] usb 3-1: Using ep0 maxpacket: 32 [ 1024.963293][T13099] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1024.991583][T13099] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.025315][T13099] usb 3-1: Product: syz [ 1025.029514][T13099] usb 3-1: Manufacturer: syz [ 1025.054685][T13099] usb 3-1: SerialNumber: syz [ 1025.090844][T13099] usb 3-1: config 0 descriptor?? [ 1025.118513][T13099] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1025.781851][T13099] gspca_stk1135: reg_w 0x2 err -110 [ 1025.849182][T13099] gspca_stk1135: serial bus timeout: status=0x00 [ 1025.923064][T13099] gspca_stk1135: Sensor write failed [ 1025.928414][T13099] gspca_stk1135: serial bus timeout: status=0x00 [ 1025.980856][T13099] gspca_stk1135: Sensor write failed [ 1026.001835][T13099] gspca_stk1135: serial bus timeout: status=0x00 [ 1026.035363][T13099] gspca_stk1135: Sensor read failed [ 1026.052075][T13099] gspca_stk1135: serial bus timeout: status=0x00 [ 1026.070700][T13099] gspca_stk1135: Sensor read failed [ 1026.094872][T13099] gspca_stk1135: Detected sensor type unknown (0x0) [ 1026.229434][T13099] gspca_stk1135: serial bus timeout: status=0x00 [ 1026.229485][T13226] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1026.246106][T13099] gspca_stk1135: Sensor read failed [ 1026.762173][T13099] gspca_stk1135: serial bus timeout: status=0x00 [ 1026.768519][T13099] gspca_stk1135: Sensor read failed [ 1026.800329][T13099] gspca_stk1135: serial bus timeout: status=0x00 [ 1026.840374][T13226] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1026.840868][T13099] gspca_stk1135: Sensor write failed [ 1026.877986][T13226] em28xx 5-1:0.132: No AC97 audio processor [ 1026.976292][T13099] gspca_stk1135: serial bus timeout: status=0x00 [ 1026.991849][T13099] gspca_stk1135: Sensor write failed [ 1026.997185][T13099] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 1027.247976][T16090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2943'. [ 1027.257545][T16090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2943'. [ 1027.499600][T13226] usb 5-1: Decoder not found [ 1027.556215][T13226] em28xx 5-1:0.132: failed to create media graph [ 1027.585732][T13226] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1027.605623][ T1203] usb 3-1: USB disconnect, device number 45 [ 1027.655107][T13226] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1027.679558][ T48] em28xx 5-1:0.132: Closing input extension [ 1027.807468][ T48] em28xx 5-1:0.132: Freeing device [ 1027.919309][T16095] kvm: pic: non byte write [ 1028.010346][ T1203] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1028.080342][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1028.142257][ T48] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1028.177831][ T1203] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 1028.221652][ T1203] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1028.242985][ T1203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.251125][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1028.266890][ T10] usb 2-1: no configurations [ 1028.276630][ T1203] usb 3-1: Product: syz [ 1028.281190][ T10] usb 2-1: can't read configurations, error -22 [ 1028.290305][ T1203] usb 3-1: Manufacturer: syz [ 1028.294916][ T1203] usb 3-1: SerialNumber: syz [ 1028.335867][ T1203] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1028.368344][T13099] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1028.450439][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 1028.578337][ T48] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1028.635524][T16105] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2948'. [ 1028.644751][T16105] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2948'. [ 1028.832280][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.885340][T16093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.951638][ T48] usb 5-1: Product: syz [ 1028.965451][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1028.992967][T16093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.999911][ T48] usb 5-1: Manufacturer: syz [ 1029.007518][T16093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.018359][ T48] usb 5-1: SerialNumber: syz [ 1029.025917][T16093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.026531][ T48] usb 5-1: config 0 descriptor?? [ 1029.140561][ T1203] usb 3-1: USB disconnect, device number 46 [ 1029.170474][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1029.176094][ T10] usb 2-1: no configurations [ 1029.189579][ T10] usb 2-1: can't read configurations, error -22 [ 1029.197614][ T48] usb 5-1: can't set config #0, error -71 [ 1029.224265][ T48] usb 5-1: USB disconnect, device number 62 [ 1029.246426][ T10] usb usb2-port1: attempt power cycle [ 1030.023135][T13099] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1030.078977][T14246] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1030.155334][T13099] ath9k_htc: Failed to initialize the device [ 1030.165321][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1030.251847][ T1203] usb 3-1: ath9k_htc: USB layer deinitialized [ 1030.290645][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1030.391588][ T10] usb 2-1: no configurations [ 1030.396221][ T10] usb 2-1: can't read configurations, error -22 [ 1030.410484][T14246] usb 1-1: Using ep0 maxpacket: 8 [ 1030.421608][T14246] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1030.446506][T14246] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1030.455750][T14246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.465194][T14246] usb 1-1: Product: syz [ 1030.469493][T14246] usb 1-1: Manufacturer: syz [ 1030.477452][T14246] usb 1-1: SerialNumber: syz [ 1030.491529][T14246] usb 1-1: config 0 descriptor?? [ 1030.630377][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1031.005764][ T1203] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1031.131486][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1031.211737][ T10] usb 2-1: device descriptor read/all, error -71 [ 1031.224763][ T10] usb usb2-port1: unable to enumerate USB device [ 1031.256248][T16126] tmpfs: Bad value for 'mpol' [ 1031.886275][ T1203] usb 3-1: device descriptor read/64, error -71 [ 1031.980418][ T10] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1031.988080][ T5948] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1032.145087][ T1203] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1032.155040][ T5948] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 1032.163674][ T10] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1032.171884][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1032.182974][ T10] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1032.194152][ T10] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1032.206227][ T10] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1032.219635][T16117] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1032.227297][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1032.234649][ T5948] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1032.243804][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.254092][ T5948] usb 5-1: Product: syz [ 1032.258279][ T5948] usb 5-1: Manufacturer: syz [ 1032.263093][ T5948] usb 5-1: SerialNumber: syz [ 1032.267949][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1032.277869][ T10] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1032.289363][ T5948] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1032.305896][ T10] usb 2-1: Product: syz [ 1032.314870][ T5906] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1032.327053][ T1203] usb 3-1: Using ep0 maxpacket: 32 [ 1032.329162][ T48] usb 1-1: USB disconnect, device number 40 [ 1032.332445][ T10] usb 2-1: Manufacturer: syz [ 1032.357413][ T10] usb 2-1: SerialNumber: syz [ 1032.370499][ T1203] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1032.384520][ T10] usb 2-1: config 0 descriptor?? [ 1032.389716][ T1203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.403816][ T1203] usb 3-1: Product: syz [ 1032.403906][T16134] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1032.408142][T16117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.427811][ T1203] usb 3-1: Manufacturer: syz [ 1032.434226][ T10] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1032.443719][ T1203] usb 3-1: SerialNumber: syz [ 1032.449095][T16117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.459896][ T1203] usb 3-1: config 0 descriptor?? [ 1032.466723][T16117] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1032.480130][ T10] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1032.489794][ T1203] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1032.499171][T16117] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1032.508364][T16117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.531337][T16117] usb 4-1: config 0 descriptor?? [ 1032.558979][T16133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.569992][T16133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.582642][T16133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.591561][T16133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.602619][T14246] usb 5-1: USB disconnect, device number 63 [ 1032.711618][ T48] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1032.892167][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.903323][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.913759][ T48] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1032.927529][ T48] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1032.936913][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.948882][ T48] usb 1-1: config 0 descriptor?? [ 1032.949133][T16117] usbhid 4-1:0.0: can't add hid device: -71 [ 1032.976849][T16117] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1032.996599][T16117] usb 4-1: USB disconnect, device number 47 [ 1033.366588][ T48] usbhid 1-1:0.0: can't add hid device: -71 [ 1033.377865][ T48] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1033.389871][ T48] usb 1-1: USB disconnect, device number 41 [ 1033.420538][ T5906] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1033.427735][ T5906] ath9k_htc: Failed to initialize the device [ 1033.438331][T14246] usb 5-1: ath9k_htc: USB layer deinitialized [ 1033.750354][T14246] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1033.821860][ T48] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1033.904416][T14246] usb 5-1: Using ep0 maxpacket: 8 [ 1033.916218][T14246] usb 5-1: config index 0 descriptor too short (expected 241, got 72) [ 1033.924984][T14246] usb 5-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 1033.940668][T14246] usb 5-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da [ 1033.954408][T14246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.975536][T14246] usb 5-1: config 0 descriptor?? [ 1033.985167][ T48] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 1034.021963][ T48] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1034.031382][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.039420][ T48] usb 4-1: Product: syz [ 1034.043730][ T48] usb 4-1: Manufacturer: syz [ 1034.049966][ T48] usb 4-1: SerialNumber: syz [ 1034.065020][T16149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2962'. [ 1034.074501][ T48] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1034.092570][T14246] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1034.229405][ T5906] usb 5-1: USB disconnect, device number 64 [ 1034.324056][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2962'. [ 1034.334101][T16147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.343629][T16147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.372099][T16147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.393198][T16147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.407758][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2962'. [ 1034.421790][ T5906] usb 4-1: USB disconnect, device number 48 [ 1034.506732][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2962'. [ 1034.766557][ T48] usb 2-1: USB disconnect, device number 77 [ 1034.779727][ T48] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1034.850030][ T30] audit: type=1326 audit(1751401623.613:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.4.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873918e929 code=0x7ffc0000 [ 1034.887346][ T30] audit: type=1326 audit(1751401623.613:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.4.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873918e929 code=0x7ffc0000 [ 1034.911404][ T30] audit: type=1326 audit(1751401623.653:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.4.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f873918e929 code=0x7ffc0000 [ 1034.935565][ T30] audit: type=1326 audit(1751401623.653:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.4.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873918e929 code=0x7ffc0000 [ 1034.959221][ T30] audit: type=1326 audit(1751401623.653:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.4.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873918e929 code=0x7ffc0000 [ 1034.985271][ T30] audit: type=1326 audit(1751401623.653:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.4.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f873918e929 code=0x7ffc0000 [ 1035.008730][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.016284][ T30] audit: type=1326 audit(1751401623.673:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.4.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873918e929 code=0x7ffc0000 [ 1035.041118][ T30] audit: type=1326 audit(1751401623.673:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.4.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f873918e929 code=0x7ffc0000 [ 1035.065999][ T30] audit: type=1326 audit(1751401623.723:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.4.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873918e929 code=0x7ffc0000 [ 1035.089965][ T30] audit: type=1326 audit(1751401623.723:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.4.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873918e929 code=0x7ffc0000 [ 1035.180494][ T5964] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1035.195895][T14246] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1035.220497][ T48] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1035.236981][T14246] ath9k_htc: Failed to initialize the device [ 1035.246819][ T5906] usb 4-1: ath9k_htc: USB layer deinitialized [ 1035.385810][ T5964] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 1035.415445][ T1203] gspca_stk1135: reg_w 0x351 err -71 [ 1035.434194][ T1203] gspca_stk1135: serial bus timeout: status=0x00 [ 1035.447017][ T48] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1035.476245][ T48] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1035.493595][ T5964] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1035.502895][ T48] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1035.514176][ T1203] gspca_stk1135: Sensor write failed [ 1035.514238][ T1203] gspca_stk1135: serial bus timeout: status=0x00 [ 1035.519525][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.546713][ T1203] gspca_stk1135: Sensor write failed [ 1035.549263][ T48] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1035.565775][ T5964] usb 1-1: Product: syz [ 1035.565786][ T1203] gspca_stk1135: serial bus timeout: status=0x00 [ 1035.565799][ T1203] gspca_stk1135: Sensor read failed [ 1035.569929][ T5964] usb 1-1: Manufacturer: syz [ 1035.569947][ T5964] usb 1-1: SerialNumber: syz [ 1035.591172][ T48] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1035.605614][ T1203] gspca_stk1135: serial bus timeout: status=0x00 [ 1035.607586][ T48] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1035.619090][ T1203] gspca_stk1135: Sensor read failed [ 1035.623112][ T5964] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1035.636374][ T1203] gspca_stk1135: Detected sensor type unknown (0x0) [ 1035.638534][ T48] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1035.654274][ T1203] gspca_stk1135: serial bus timeout: status=0x00 [ 1035.654276][T13226] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1035.662234][ T48] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1035.670960][T16157] delete_channel: no stack [ 1035.681922][ T48] usb 2-1: Product: syz [ 1035.687664][ T48] usb 2-1: Manufacturer: syz [ 1035.692850][ T48] usb 2-1: SerialNumber: syz [ 1035.712718][ T1203] gspca_stk1135: Sensor read failed [ 1035.718054][ T1203] gspca_stk1135: serial bus timeout: status=0x00 [ 1035.720408][ T48] usb 2-1: config 0 descriptor?? [ 1035.733140][ T1203] gspca_stk1135: Sensor read failed [ 1035.739558][ T1203] gspca_stk1135: serial bus timeout: status=0x00 [ 1035.751414][T16160] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1035.758593][ T1203] gspca_stk1135: Sensor write failed [ 1035.762075][ T48] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1035.766962][ T1203] gspca_stk1135: serial bus timeout: status=0x00 [ 1035.775903][ T48] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1035.789729][ T1203] gspca_stk1135: Sensor write failed [ 1035.796563][ T5906] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1035.807355][ T1203] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1035.845608][ T1203] usb 3-1: USB disconnect, device number 48 [ 1035.898645][T16162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.915509][T16162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.929938][T16162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.942723][T16162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.955730][T13099] usb 1-1: USB disconnect, device number 42 [ 1035.961809][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 1035.975502][ T5906] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 1036.021951][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 1036.052851][ T5906] usb 4-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da [ 1036.073489][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.132904][T16170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1036.526813][ T5906] usb 4-1: config 0 descriptor?? [ 1036.560074][ T1203] usb 2-1: USB disconnect, device number 78 [ 1036.590659][ T1203] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1036.619492][ T5906] usb 4-1: USB disconnect, device number 49 [ 1036.735945][T13226] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1036.743972][T13226] ath9k_htc: Failed to initialize the device [ 1036.758015][T13099] usb 1-1: ath9k_htc: USB layer deinitialized [ 1036.773697][T16178] FAULT_INJECTION: forcing a failure. [ 1036.773697][T16178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1036.792207][T16178] CPU: 0 UID: 0 PID: 16178 Comm: syz.2.2970 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1036.792233][T16178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1036.792243][T16178] Call Trace: [ 1036.792250][T16178] [ 1036.792257][T16178] dump_stack_lvl+0x16c/0x1f0 [ 1036.792296][T16178] should_fail_ex+0x512/0x640 [ 1036.792325][T16178] _copy_from_user+0x2e/0xd0 [ 1036.792352][T16178] copy_msghdr_from_user+0x98/0x160 [ 1036.792379][T16178] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1036.792416][T16178] ___sys_sendmsg+0xfe/0x1d0 [ 1036.792448][T16178] ? __pfx____sys_sendmsg+0x10/0x10 [ 1036.792470][T16178] ? __lock_acquire+0x622/0x1c90 [ 1036.792529][T16178] __sys_sendmsg+0x16d/0x220 [ 1036.792554][T16178] ? __pfx___sys_sendmsg+0x10/0x10 [ 1036.792595][T16178] do_syscall_64+0xcd/0x4c0 [ 1036.792624][T16178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.792642][T16178] RIP: 0033:0x7fb3d418e929 [ 1036.792658][T16178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.792675][T16178] RSP: 002b:00007fb3d5006038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1036.792692][T16178] RAX: ffffffffffffffda RBX: 00007fb3d43b5fa0 RCX: 00007fb3d418e929 [ 1036.792704][T16178] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 1036.792714][T16178] RBP: 00007fb3d5006090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.792724][T16178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.792735][T16178] R13: 0000000000000000 R14: 00007fb3d43b5fa0 R15: 00007ffc59ed75c8 [ 1036.792759][T16178] [ 1037.907960][T13099] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1038.320471][T16189] FAULT_INJECTION: forcing a failure. [ 1038.320471][T16189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.357568][T16189] CPU: 0 UID: 0 PID: 16189 Comm: syz.0.2974 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1038.357594][T16189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1038.357603][T16189] Call Trace: [ 1038.357608][T16189] [ 1038.357615][T16189] dump_stack_lvl+0x16c/0x1f0 [ 1038.357642][T16189] should_fail_ex+0x512/0x640 [ 1038.357666][T16189] _copy_from_user+0x2e/0xd0 [ 1038.357689][T16189] copy_msghdr_from_user+0x98/0x160 [ 1038.357714][T16189] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1038.357746][T16189] ___sys_sendmsg+0xfe/0x1d0 [ 1038.357770][T16189] ? __pfx____sys_sendmsg+0x10/0x10 [ 1038.357791][T16189] ? __lock_acquire+0x622/0x1c90 [ 1038.357846][T16189] __sys_sendmsg+0x16d/0x220 [ 1038.357869][T16189] ? __pfx___sys_sendmsg+0x10/0x10 [ 1038.357908][T16189] do_syscall_64+0xcd/0x4c0 [ 1038.357936][T16189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.357953][T16189] RIP: 0033:0x7fb095d8e929 [ 1038.357968][T16189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1038.357984][T16189] RSP: 002b:00007fb096b9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1038.358001][T16189] RAX: ffffffffffffffda RBX: 00007fb095fb5fa0 RCX: 00007fb095d8e929 [ 1038.358012][T16189] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1038.358022][T16189] RBP: 00007fb096b9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.358033][T16189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.358043][T16189] R13: 0000000000000000 R14: 00007fb095fb5fa0 R15: 00007ffed35849f8 [ 1038.358067][T16189] [ 1039.064688][T14246] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1039.269884][T16214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1040.200394][T14246] usb 5-1: Using ep0 maxpacket: 8 [ 1040.254422][T14246] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1040.332179][T14246] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1040.377526][T16222] FAULT_INJECTION: forcing a failure. [ 1040.377526][T16222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.454746][T14246] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1040.465310][T16222] CPU: 0 UID: 0 PID: 16222 Comm: syz.2.2984 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1040.465333][T16222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1040.465342][T16222] Call Trace: [ 1040.465349][T16222] [ 1040.465356][T16222] dump_stack_lvl+0x16c/0x1f0 [ 1040.465384][T16222] should_fail_ex+0x512/0x640 [ 1040.465409][T16222] _copy_from_user+0x2e/0xd0 [ 1040.465431][T16222] __sys_bpf+0x21d/0x4d80 [ 1040.465459][T16222] ? __pfx___sys_bpf+0x10/0x10 [ 1040.465484][T16222] ? ksys_write+0x190/0x250 [ 1040.465509][T16222] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1040.465551][T16222] ? fput+0x70/0xf0 [ 1040.465578][T16222] ? ksys_write+0x1ac/0x250 [ 1040.465599][T16222] ? __pfx_ksys_write+0x10/0x10 [ 1040.465633][T16222] __x64_sys_bpf+0x78/0xc0 [ 1040.465657][T16222] ? lockdep_hardirqs_on+0x7c/0x110 [ 1040.465682][T16222] do_syscall_64+0xcd/0x4c0 [ 1040.465710][T16222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.465728][T16222] RIP: 0033:0x7fb3d418e929 [ 1040.465743][T16222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.465760][T16222] RSP: 002b:00007fb3d5006038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1040.465777][T16222] RAX: ffffffffffffffda RBX: 00007fb3d43b5fa0 RCX: 00007fb3d418e929 [ 1040.465789][T16222] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 000000000000001d [ 1040.465800][T16222] RBP: 00007fb3d5006090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.465810][T16222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.465820][T16222] R13: 0000000000000000 R14: 00007fb3d43b5fa0 R15: 00007ffc59ed75c8 [ 1040.465841][T16222] [ 1040.654955][T14246] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1040.666357][T14246] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1040.676562][T14246] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1040.707681][T14246] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1040.732180][T14246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.781682][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1040.799167][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1040.808433][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1040.821159][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1040.831192][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1041.040515][ T48] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1041.049358][T14246] usb 5-1: usb_control_msg returned -71 [ 1041.094960][T14246] usbtmc 5-1:16.0: can't read capabilities [ 1041.290614][ T48] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 1041.331820][T14246] usb 5-1: USB disconnect, device number 65 [ 1041.363465][ T48] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1041.382891][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.395639][ T48] usb 2-1: Product: syz [ 1041.399885][ T48] usb 2-1: Manufacturer: syz [ 1041.409677][ T48] usb 2-1: SerialNumber: syz [ 1041.426714][ T2967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1041.431254][ T48] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1041.468136][ T5964] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1041.502516][ T2967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.693943][T16227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.721876][ T2967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1041.723067][T16227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.747847][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1041.747862][ T30] audit: type=1326 audit(1751401630.523:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16239 comm="syz.3.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af2d8e929 code=0x7ffc0000 [ 1041.751134][ T2967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.758677][ T30] audit: type=1326 audit(1751401630.523:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16239 comm="syz.3.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af2d8e929 code=0x7ffc0000 [ 1041.777331][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.780614][T16227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.798655][ T30] audit: type=1326 audit(1751401630.533:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16239 comm="syz.3.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f1af2d8e929 code=0x7ffc0000 [ 1041.811003][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.815848][T16227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.862686][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.895085][ T30] audit: type=1326 audit(1751401630.533:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16239 comm="syz.3.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af2d8e929 code=0x7ffc0000 [ 1041.899569][ T1203] usb 2-1: USB disconnect, device number 79 [ 1041.924929][ T30] audit: type=1326 audit(1751401630.533:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16239 comm="syz.3.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af2d8e929 code=0x7ffc0000 [ 1041.948319][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.960038][ T30] audit: type=1326 audit(1751401630.533:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16239 comm="syz.3.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f1af2d8e929 code=0x7ffc0000 [ 1041.983405][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.018231][T14246] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1042.086259][ T2967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.099982][ T2967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.200185][ T30] audit: type=1326 audit(1751401630.533:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16239 comm="syz.3.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af2d8e929 code=0x7ffc0000 [ 1042.248459][T14246] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1042.285023][T14246] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1042.285127][ T30] audit: type=1326 audit(1751401630.533:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16239 comm="syz.3.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af2d8e929 code=0x7ffc0000 [ 1042.299808][T14246] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1042.346957][T14246] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1042.359868][T14246] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1042.448143][T14246] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1042.458723][ T30] audit: type=1326 audit(1751401630.533:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16239 comm="syz.3.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f1af2d8e929 code=0x7ffc0000 [ 1042.482099][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.500975][ T30] audit: type=1326 audit(1751401630.663:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16239 comm="syz.3.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af2d8e929 code=0x7ffc0000 [ 1042.528907][T14246] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1042.553911][ T2967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.564295][ T5964] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1042.571884][T14246] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1042.584609][ T5964] ath9k_htc: Failed to initialize the device [ 1042.590684][T14246] usb 5-1: Product: syz [ 1042.593812][T16239] delete_channel: no stack [ 1042.600072][ T2967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.610530][T14246] usb 5-1: Manufacturer: syz [ 1042.620475][T14246] usb 5-1: SerialNumber: syz [ 1042.623873][ T1203] usb 2-1: ath9k_htc: USB layer deinitialized [ 1042.632223][T14246] usb 5-1: config 0 descriptor?? [ 1042.645577][T16238] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1042.664714][T14246] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1042.801151][T14246] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1042.820445][ T48] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1042.882257][ T5832] Bluetooth: hci0: command tx timeout [ 1043.000356][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 1043.025010][ T48] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1043.047223][ T48] usb 3-1: config 0 has no interface number 0 [ 1043.070730][ T48] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1043.107343][ T48] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1043.117056][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.130817][ T48] usb 3-1: Product: syz [ 1043.136248][ T48] usb 3-1: Manufacturer: syz [ 1043.152914][ T1203] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1043.189703][ T48] usb 3-1: SerialNumber: syz [ 1043.208225][ T48] usb 3-1: config 0 descriptor?? [ 1043.259135][T14246] usb 5-1: USB disconnect, device number 66 [ 1043.286916][ T48] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1043.306405][ T48] em28xx 3-1:0.132: Video interface 132 found: [ 1043.319056][T14246] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1043.330449][ T1203] usb 2-1: Using ep0 maxpacket: 32 [ 1043.336892][ T1203] usb 2-1: config index 0 descriptor too short (expected 241, got 72) [ 1043.358347][ T1203] usb 2-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 1043.373328][ T1203] usb 2-1: New USB device found, idVendor=230a, idProduct=0109, bcdDevice=bd.da [ 1043.382482][ T1203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.396082][ T1203] usb 2-1: config 0 descriptor?? [ 1043.512356][T16117] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1043.594213][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.605503][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1043.613626][ T1203] usb 2-1: USB disconnect, device number 80 [ 1043.621564][ T2967] bond0 (unregistering): Released all slaves [ 1043.670597][T16117] usb 4-1: Using ep0 maxpacket: 32 [ 1043.690194][ T48] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1043.698532][T16117] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1043.713126][T16247] batman_adv: batadv0: Adding interface: dummy0 [ 1043.718633][T16117] usb 4-1: config 0 has no interface number 0 [ 1043.719969][T16247] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.738616][T16117] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1043.750846][ C1] vkms_vblank_simulate: vblank timer overrun [ 1043.754292][T16247] batman_adv: batadv0: Interface activated: dummy0 [ 1043.817174][T16117] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1043.838191][T16117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.852706][T16117] usb 4-1: Product: syz [ 1043.856896][T16117] usb 4-1: Manufacturer: syz [ 1043.861691][T16117] usb 4-1: SerialNumber: syz [ 1043.871258][T16117] usb 4-1: config 0 descriptor?? [ 1043.888418][T16117] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1043.898525][T16117] em28xx 4-1:0.132: Video interface 132 found: [ 1043.963148][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2996'. [ 1044.079886][T16224] chnl_net:caif_netlink_parms(): no params data found [ 1044.091997][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2996'. [ 1044.260778][ T48] em28xx 3-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 1044.282027][ T48] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 1044.295503][ T48] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1044.311226][T16117] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1044.370478][ T48] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1044.398708][ T48] em28xx 3-1:0.132: analog set to bulk mode. [ 1044.409103][ T5964] em28xx 3-1:0.132: Registering V4L2 extension [ 1044.466366][ T48] usb 3-1: USB disconnect, device number 49 [ 1044.472482][T14246] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1044.488408][ T48] em28xx 3-1:0.132: Disconnecting em28xx [ 1044.588112][T16224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.607391][T16224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.615742][T16224] bridge_slave_0: entered allmulticast mode [ 1044.626829][T16224] bridge_slave_0: entered promiscuous mode [ 1044.646612][T16224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.650499][T14246] usb 2-1: Using ep0 maxpacket: 32 [ 1044.655054][T16224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.669311][ T5964] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1044.673069][T16224] bridge_slave_1: entered allmulticast mode [ 1044.684512][T16224] bridge_slave_1: entered promiscuous mode [ 1044.686575][ T5964] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1044.699476][T14246] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1044.715144][T14246] usb 2-1: config 0 has no interface number 0 [ 1044.722424][T14246] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1044.734266][ T5964] em28xx 3-1:0.132: No AC97 audio processor [ 1044.743868][T14246] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1044.753378][T14246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.763939][ T5964] usb 3-1: Decoder not found [ 1044.768537][ T5964] em28xx 3-1:0.132: failed to create media graph [ 1044.790430][T14246] usb 2-1: Product: syz [ 1044.800029][T14246] usb 2-1: Manufacturer: syz [ 1044.806453][ T5964] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1044.817835][T14246] usb 2-1: SerialNumber: syz [ 1044.824631][ T5964] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1044.841007][T14246] usb 2-1: config 0 descriptor?? [ 1044.850544][T16117] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 1044.852224][ T48] em28xx 3-1:0.132: Closing input extension [ 1044.857416][T16117] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1044.867243][T14246] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1044.888953][ T48] em28xx 3-1:0.132: Freeing device [ 1044.891156][T16224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.894493][T14246] em28xx 2-1:0.132: Video interface 132 found: [ 1044.915548][ T2967] hsr_slave_0: left promiscuous mode [ 1044.936638][ T2967] hsr_slave_1: left promiscuous mode [ 1044.940988][ T5832] Bluetooth: hci0: command tx timeout [ 1044.952726][ T2967] batman_adv: batadv0: Interface deactivated: dummy0 [ 1044.962558][T16117] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1044.980435][T16117] em28xx 4-1:0.132: analog set to bulk mode. [ 1044.994261][ T2967] batman_adv: batadv0: Removing interface: dummy0 [ 1045.001631][T13099] em28xx 4-1:0.132: Registering V4L2 extension [ 1045.018541][T16117] usb 4-1: USB disconnect, device number 50 [ 1045.026976][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.060190][T16117] em28xx 4-1:0.132: Disconnecting em28xx [ 1045.067568][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.102068][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.120097][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.163281][ T2967] veth1_macvtap: left promiscuous mode [ 1045.169081][ T2967] veth0_macvtap: left promiscuous mode [ 1045.177834][ T2967] veth1_vlan: left promiscuous mode [ 1045.183293][ T2967] veth0_vlan: left promiscuous mode [ 1045.203345][T13099] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1045.213386][T13099] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1045.220515][ T48] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1045.228881][T13099] em28xx 4-1:0.132: No AC97 audio processor [ 1045.238572][T13099] usb 4-1: Decoder not found [ 1045.250381][T13099] em28xx 4-1:0.132: failed to create media graph [ 1045.256798][T13099] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1045.261502][ T5964] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1045.280026][T13099] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1045.281911][T14246] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1045.290542][T16117] em28xx 4-1:0.132: Closing input extension [ 1045.309777][T16117] em28xx 4-1:0.132: Freeing device [ 1045.372039][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 1045.388564][ T48] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1045.401559][ T48] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1045.427372][ T48] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1045.462837][ T5964] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.475942][ T48] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1045.488245][ T5964] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1045.497532][ T48] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1045.510035][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.532045][ T48] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1045.557589][ T5964] usb 5-1: config 0 descriptor?? [ 1045.622172][ T5964] pwc: Askey VC010 type 2 USB webcam detected. [ 1045.640162][ T48] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1045.651905][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.888660][ T48] usb 3-1: usb_control_msg returned -32 [ 1045.927149][ T48] usbtmc 3-1:16.0: can't read capabilities [ 1046.527263][ T5964] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1046.533835][T14246] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1046.542816][ T48] usb 3-1: USB disconnect, device number 50 [ 1046.550535][T14246] em28xx 2-1:0.132: board has no eeprom [ 1046.577838][T16293] sctp: [Deprecated]: syz.4.3000 (pid 16293) Use of int in max_burst socket option deprecated. [ 1046.577838][T16293] Use struct sctp_assoc_value instead [ 1046.580365][ T5964] pwc: recv_control_msg error -32 req 02 val 2700 [ 1046.651709][ T5964] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1046.900002][T16308] kvm: pic: non byte write [ 1046.988280][T16224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.018830][ T5964] pwc: recv_control_msg error -71 req 04 val 1300 [ 1047.025406][ T5832] Bluetooth: hci0: command tx timeout [ 1047.043697][ T5964] pwc: recv_control_msg error -71 req 04 val 1400 [ 1047.060810][T14246] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1047.068754][ T5964] pwc: recv_control_msg error -71 req 02 val 2000 [ 1047.075375][T14246] em28xx 2-1:0.132: analog set to bulk mode. [ 1047.081552][ T5964] pwc: recv_control_msg error -71 req 02 val 2100 [ 1047.088043][ T5924] em28xx 2-1:0.132: Registering V4L2 extension [ 1047.096260][ T5964] pwc: recv_control_msg error -71 req 04 val 1500 [ 1047.103238][ T5964] pwc: recv_control_msg error -71 req 02 val 2500 [ 1047.109994][ T5964] pwc: recv_control_msg error -71 req 02 val 2400 [ 1047.116793][ T5964] pwc: recv_control_msg error -71 req 02 val 2600 [ 1047.123578][ T5964] pwc: recv_control_msg error -71 req 02 val 2900 [ 1047.130778][ T5964] pwc: recv_control_msg error -71 req 02 val 2800 [ 1047.154789][T16224] team0: Port device team_slave_0 added [ 1047.170768][T14246] usb 2-1: USB disconnect, device number 81 [ 1047.192145][ T5964] pwc: recv_control_msg error -71 req 04 val 1100 [ 1047.211870][T14246] em28xx 2-1:0.132: Disconnecting em28xx [ 1047.245143][T16224] team0: Port device team_slave_1 added [ 1047.250899][ T5964] pwc: recv_control_msg error -71 req 04 val 1200 [ 1047.280126][ T5964] pwc: Registered as video103. [ 1047.323903][ T5964] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input112 [ 1047.497603][ T5924] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1047.511491][ T5924] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1047.526121][ T5964] usb 5-1: USB disconnect, device number 67 [ 1047.532502][ T5924] em28xx 2-1:0.132: No AC97 audio processor [ 1047.538596][ T5924] videodev: could not get a free minor [ 1047.544702][ T5924] em28xx 2-1:0.132: unable to register video device (error=-23). [ 1047.553916][ T5924] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1047.752310][ T5832] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1048.000645][T14246] em28xx 2-1:0.132: Closing input extension [ 1048.016627][T14246] em28xx 2-1:0.132: Freeing device [ 1048.117147][T16224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.147339][T16224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.362989][T16224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.415028][T16224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.443985][T16224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.519545][T16224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.030695][ T5924] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1049.158122][ T5832] Bluetooth: hci0: command tx timeout [ 1049.294096][ T5924] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 1049.404423][ T5924] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1049.432098][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.440138][ T5924] usb 4-1: Product: syz [ 1049.446007][ T5924] usb 4-1: Manufacturer: syz [ 1049.450814][ T5924] usb 4-1: SerialNumber: syz [ 1049.467325][ T5924] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1049.506112][T14246] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1049.537421][T16224] hsr_slave_0: entered promiscuous mode [ 1049.601868][T16224] hsr_slave_1: entered promiscuous mode [ 1049.608032][T16224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1049.665520][T16224] Cannot create hsr debugfs directory [ 1049.706763][T16346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3010'. [ 1049.731803][T16333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.755259][T16333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.798395][T16333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.821584][T16333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.851899][T13099] usb 4-1: USB disconnect, device number 51 [ 1049.900853][ T5924] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1050.016725][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'. [ 1050.063439][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 1050.082311][ T5924] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1050.091571][ T5964] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1050.094840][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'. [ 1050.117130][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.133457][ T5924] usb 3-1: Product: syz [ 1050.139798][ T5924] usb 3-1: Manufacturer: syz [ 1050.149782][ T5924] usb 3-1: SerialNumber: syz [ 1050.166040][ T5924] usb 3-1: config 0 descriptor?? [ 1050.186705][ T5924] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1050.268761][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'. [ 1050.286251][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.314015][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.325809][ T5964] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1050.343849][ T5964] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1050.381384][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.424256][ T5964] usb 5-1: config 0 descriptor?? [ 1050.529580][T16224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1050.542401][T14246] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1050.550035][T14246] ath9k_htc: Failed to initialize the device [ 1050.576195][T16224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1050.598520][T16224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1050.618786][T16224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1050.650745][T13099] usb 4-1: ath9k_htc: USB layer deinitialized [ 1050.686021][ T5924] gspca_sonixj: reg_r err -32 [ 1050.696553][ T5924] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 1050.803912][ T5832] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1051.053290][ T5964] usbhid 5-1:0.0: can't add hid device: -71 [ 1051.153681][ T5964] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1051.177306][ T5964] usb 5-1: USB disconnect, device number 68 [ 1051.209911][T16224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.234202][T16224] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.248538][T14307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.255765][T14307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.276092][T14290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.283296][T14290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.291163][T13099] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1051.657930][T16224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.722099][T16224] veth0_vlan: entered promiscuous mode [ 1051.738617][T16224] veth1_vlan: entered promiscuous mode [ 1051.751701][ T5906] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1051.759447][T13099] usb 4-1: device descriptor read/64, error -71 [ 1051.798864][T16224] veth0_macvtap: entered promiscuous mode [ 1051.814138][T16224] veth1_macvtap: entered promiscuous mode [ 1051.832902][T16224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.855863][T16224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.865441][T16410] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3016'. [ 1051.883146][T16224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.896389][T16224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.906802][T16224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.917705][T16224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.945406][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 1051.956120][ T5906] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1051.978213][ T5906] usb 2-1: config 0 has no interface number 0 [ 1051.995603][ T5906] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1052.020741][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.023134][T13099] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1052.028571][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.047698][ T5906] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1052.059860][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.068994][ T5906] usb 2-1: Product: syz [ 1052.077504][ T5906] usb 2-1: Manufacturer: syz [ 1052.086254][ T5906] usb 2-1: SerialNumber: syz [ 1052.106114][ T5906] usb 2-1: config 0 descriptor?? [ 1052.119598][ T5906] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1052.130809][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.138635][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.158884][ T5906] em28xx 2-1:0.132: Video interface 132 found: [ 1052.196952][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'. [ 1052.198435][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1052.198447][ T30] audit: type=1400 audit(1751401640.973:1022): avc: denied { mounton } for pid=16224 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1052.232377][T13099] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.272439][T13099] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1052.304196][T13099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.339992][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'. [ 1052.354383][T13099] usb 4-1: config 0 descriptor?? [ 1052.367761][T13099] pwc: Askey VC010 type 2 USB webcam detected. [ 1052.499130][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'. [ 1052.534384][ T5906] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1052.680739][ T5924] usb 3-1: USB disconnect, device number 51 [ 1052.767921][T13099] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1052.788708][T13099] pwc: recv_control_msg error -32 req 02 val 2700 [ 1052.789073][T16394] sctp: [Deprecated]: syz.3.3014 (pid 16394) Use of int in max_burst socket option deprecated. [ 1052.789073][T16394] Use struct sctp_assoc_value instead [ 1053.072702][ T5906] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1053.090352][ T5906] em28xx 2-1:0.132: board has no eeprom [ 1053.346549][ T5906] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1053.703503][T16459] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3021'. [ 1053.714998][T16459] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3021'. [ 1053.721836][T16460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1053.740494][ T5906] em28xx 2-1:0.132: analog set to bulk mode. [ 1053.752888][ T5948] em28xx 2-1:0.132: Registering V4L2 extension [ 1053.776828][T13099] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1053.801562][ T5906] usb 2-1: USB disconnect, device number 82 [ 1053.999087][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.006497][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.019479][ T5906] em28xx 2-1:0.132: Disconnecting em28xx [ 1054.430711][T13099] pwc: recv_control_msg error -71 req 04 val 1300 [ 1054.470639][T13099] pwc: recv_control_msg error -71 req 04 val 1400 [ 1054.503673][T13099] pwc: recv_control_msg error -71 req 02 val 2000 [ 1054.560481][T13099] pwc: recv_control_msg error -71 req 02 val 2100 [ 1054.580746][T13099] pwc: recv_control_msg error -71 req 04 val 1500 [ 1054.595354][T16480] fuse: Bad value for 'rootmode' [ 1054.597467][T13099] pwc: recv_control_msg error -71 req 02 val 2500 [ 1054.620335][T13099] pwc: recv_control_msg error -71 req 02 val 2400 [ 1054.670922][T13099] pwc: recv_control_msg error -71 req 02 val 2600 [ 1054.695306][T13099] pwc: recv_control_msg error -71 req 02 val 2900 [ 1054.723118][T13099] pwc: recv_control_msg error -71 req 02 val 2800 [ 1054.754443][T13099] pwc: recv_control_msg error -71 req 04 val 1100 [ 1054.763335][ T5948] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1054.774965][T13099] pwc: recv_control_msg error -71 req 04 val 1200 [ 1054.790884][ T5948] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1054.808475][T13099] pwc: Registered as video103. [ 1054.817175][ T5948] em28xx 2-1:0.132: No AC97 audio processor [ 1054.860367][T13099] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input113 [ 1054.892437][ T5948] videodev: could not get a free minor [ 1054.897936][ T5948] em28xx 2-1:0.132: unable to register video device (error=-23). [ 1054.960331][T13099] usb 4-1: USB disconnect, device number 53 [ 1054.967307][ T5948] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1055.011438][ T5906] em28xx 2-1:0.132: Closing input extension [ 1055.032130][ T5906] em28xx 2-1:0.132: Freeing device [ 1055.178809][T16496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3029'. [ 1055.260321][ T5948] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1055.340101][T16498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3032'. [ 1055.385408][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3029'. [ 1055.414006][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1055.425713][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1055.440331][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 1055.453628][ T5948] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1055.466280][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.489057][ T5948] usb 3-1: Product: syz [ 1055.499090][ T5948] usb 3-1: Manufacturer: syz [ 1055.511544][ T5948] usb 3-1: SerialNumber: syz [ 1055.526129][ T5948] usb 3-1: config 0 descriptor?? [ 1055.536828][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3032'. [ 1055.557790][ T5948] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1055.587774][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3029'. [ 1055.597527][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1055.626664][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1055.635690][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1055.884595][T16516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3033'. [ 1055.893929][T16516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3033'. [ 1056.150609][ T5948] gspca_sonixj: reg_w1 err -110 [ 1056.169508][ T5948] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 1056.299730][ T54] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.245909][ T54] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.443485][ T54] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.599807][T16545] fuse: Bad value for 'rootmode' [ 1057.668579][T16548] FAULT_INJECTION: forcing a failure. [ 1057.668579][T16548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.672979][ T54] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.681889][T16548] CPU: 1 UID: 0 PID: 16548 Comm: syz.0.3040 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1057.681910][T16548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1057.681919][T16548] Call Trace: [ 1057.681925][T16548] [ 1057.681931][T16548] dump_stack_lvl+0x16c/0x1f0 [ 1057.681957][T16548] should_fail_ex+0x512/0x640 [ 1057.681979][T16548] _copy_from_user+0x2e/0xd0 [ 1057.682000][T16548] copy_msghdr_from_user+0x98/0x160 [ 1057.682022][T16548] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1057.682048][T16548] ? __lock_acquire+0x622/0x1c90 [ 1057.682074][T16548] ___sys_recvmsg+0xdb/0x1a0 [ 1057.682095][T16548] ? __pfx____sys_recvmsg+0x10/0x10 [ 1057.682135][T16548] __sys_recvmsg+0x16a/0x220 [ 1057.682157][T16548] ? __pfx___sys_recvmsg+0x10/0x10 [ 1057.682193][T16548] do_syscall_64+0xcd/0x4c0 [ 1057.682220][T16548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.682236][T16548] RIP: 0033:0x7f6d4498e929 [ 1057.682248][T16548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1057.682263][T16548] RSP: 002b:00007f6d457cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1057.682278][T16548] RAX: ffffffffffffffda RBX: 00007f6d44bb5fa0 RCX: 00007f6d4498e929 [ 1057.682288][T16548] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000005 [ 1057.682297][T16548] RBP: 00007f6d457cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.682306][T16548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.682315][T16548] R13: 0000000000000000 R14: 00007f6d44bb5fa0 R15: 00007ffdeffc6e78 [ 1057.682336][T16548] [ 1057.831041][ T5827] Bluetooth: hci1: command tx timeout [ 1057.924072][ T5948] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1058.031072][T14246] usb 3-1: USB disconnect, device number 52 [ 1058.082540][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.122491][ T5948] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1058.150143][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.170876][T16117] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1058.202406][ T5948] usb 2-1: config 0 descriptor?? [ 1058.235672][ T5948] pwc: Askey VC010 type 2 USB webcam detected. [ 1058.236804][T16562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3044'. [ 1058.340434][T16117] usb 4-1: Using ep0 maxpacket: 32 [ 1058.349603][T16117] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1058.361921][T16117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.370079][T16117] usb 4-1: Product: syz [ 1058.374564][T16117] usb 4-1: Manufacturer: syz [ 1058.379360][T16117] usb 4-1: SerialNumber: syz [ 1058.390555][ T5924] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1058.403124][T16117] usb 4-1: config 0 descriptor?? [ 1058.417018][T16117] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1058.432315][T16566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3044'. [ 1058.472064][T16566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3044'. [ 1058.567276][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.579066][ T5924] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1058.598139][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.615235][ T5948] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1058.615472][ T5924] usb 1-1: config 0 descriptor?? [ 1058.623774][ T5948] pwc: recv_control_msg error -32 req 02 val 2700 [ 1058.638037][T16542] sctp: [Deprecated]: syz.1.3038 (pid 16542) Use of int in max_burst socket option deprecated. [ 1058.638037][T16542] Use struct sctp_assoc_value instead [ 1058.654316][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.666062][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.677596][ T54] bond0 (unregistering): Released all slaves [ 1058.735510][ T5948] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1058.803665][ T54] tipc: Disabling bearer [ 1058.812729][ T54] tipc: Left network mode [ 1059.059224][ T5924] keytouch 0003:0926:3333.0054: fixing up Keytouch IEC report descriptor [ 1059.094249][ T5924] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0054/input/input114 [ 1059.158152][T16505] chnl_net:caif_netlink_parms(): no params data found [ 1059.250600][ T5924] keytouch 0003:0926:3333.0054: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1059.295958][T16564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.335423][T16564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.991979][ T5827] Bluetooth: hci1: command tx timeout [ 1060.437479][T13099] usb 1-1: USB disconnect, device number 44 [ 1060.500769][ T54] hsr_slave_0: left promiscuous mode [ 1060.584491][ T5948] pwc: recv_control_msg error -71 req 04 val 1300 [ 1060.591121][ T54] hsr_slave_1: left promiscuous mode [ 1060.600768][ T5948] pwc: recv_control_msg error -71 req 04 val 1400 [ 1060.609973][ T54] batman_adv: batadv0: Interface deactivated: dummy0 [ 1060.629683][ T5948] pwc: recv_control_msg error -71 req 02 val 2000 [ 1060.645502][ T5948] pwc: recv_control_msg error -71 req 02 val 2100 [ 1060.658205][ T5948] pwc: recv_control_msg error -71 req 04 val 1500 [ 1060.666004][ T54] batman_adv: batadv0: Removing interface: dummy0 [ 1060.669174][ T5948] pwc: recv_control_msg error -71 req 02 val 2500 [ 1060.683699][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.700752][ T5948] pwc: recv_control_msg error -71 req 02 val 2400 [ 1060.703268][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.714401][ T5948] pwc: recv_control_msg error -71 req 02 val 2600 [ 1060.714780][ T5948] pwc: recv_control_msg error -71 req 02 val 2900 [ 1060.740408][ T5948] pwc: recv_control_msg error -71 req 02 val 2800 [ 1060.747324][ T5948] pwc: recv_control_msg error -71 req 04 val 1100 [ 1060.747768][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.766548][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.770890][ T5948] pwc: recv_control_msg error -71 req 04 val 1200 [ 1060.791367][ T5948] pwc: Registered as video103. [ 1060.808397][ T54] veth1_macvtap: left promiscuous mode [ 1060.811724][ T5948] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input115 [ 1060.819276][ T54] veth0_macvtap: left promiscuous mode [ 1060.829221][ T54] veth1_vlan: left promiscuous mode [ 1060.859569][ T54] veth0_vlan: left promiscuous mode [ 1060.863685][ T5948] usb 2-1: USB disconnect, device number 83 [ 1061.058951][T16615] fuse: Bad value for 'rootmode' [ 1061.429938][ T5827] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1061.534140][T16117] gspca_stk1135: reg_w 0x350 err -71 [ 1061.556837][T16117] gspca_stk1135: serial bus timeout: status=0x00 [ 1061.563340][T16117] gspca_stk1135: Sensor write failed [ 1061.569012][T16117] gspca_stk1135: serial bus timeout: status=0x00 [ 1061.575873][T16117] gspca_stk1135: Sensor write failed [ 1061.581605][T16117] gspca_stk1135: serial bus timeout: status=0x00 [ 1061.587962][T16117] gspca_stk1135: Sensor read failed [ 1061.595089][T16117] gspca_stk1135: serial bus timeout: status=0x00 [ 1061.601732][T16117] gspca_stk1135: Sensor read failed [ 1061.606937][T16117] gspca_stk1135: Detected sensor type unknown (0x0) [ 1061.613664][T16117] gspca_stk1135: serial bus timeout: status=0x00 [ 1061.620124][T16117] gspca_stk1135: Sensor read failed [ 1061.625422][T16117] gspca_stk1135: serial bus timeout: status=0x00 [ 1061.631938][T16117] gspca_stk1135: Sensor read failed [ 1061.637165][T16117] gspca_stk1135: serial bus timeout: status=0x00 [ 1061.643585][T16117] gspca_stk1135: Sensor write failed [ 1061.648896][T16117] gspca_stk1135: serial bus timeout: status=0x00 [ 1061.655636][T16117] gspca_stk1135: Sensor write failed [ 1061.661070][T16117] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1061.675991][T16117] usb 4-1: USB disconnect, device number 54 [ 1061.916653][T16505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.947781][T16505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.990443][T16505] bridge_slave_0: entered allmulticast mode [ 1061.997700][T16505] bridge_slave_0: entered promiscuous mode [ 1062.042231][T16505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.049356][T16505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.060308][ T5827] Bluetooth: hci1: command tx timeout [ 1062.077251][T16505] bridge_slave_1: entered allmulticast mode [ 1062.086331][T16505] bridge_slave_1: entered promiscuous mode [ 1062.144601][T16505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.154661][ T30] audit: type=1400 audit(1751401650.933:1023): avc: denied { create } for pid=16626 comm="syz.0.3055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1062.183029][T16505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.185537][ T30] audit: type=1400 audit(1751401650.933:1024): avc: denied { ioctl } for pid=16626 comm="syz.0.3055" path="socket:[57519]" dev="sockfs" ino=57519 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1062.217052][T16117] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1062.373046][T16117] usb 2-1: Using ep0 maxpacket: 8 [ 1062.410071][T16117] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1062.437991][T16117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.450389][T16117] usb 2-1: Product: syz [ 1062.467741][T16117] usb 2-1: Manufacturer: syz [ 1062.475663][T16117] usb 2-1: SerialNumber: syz [ 1062.524957][T16117] usb 2-1: config 0 descriptor?? [ 1062.543879][T16117] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1062.898766][ T5827] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1062.965516][T16117] gspca_sonixj: reg_r err -32 [ 1062.994927][T16117] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 1063.402365][T16505] team0: Port device team_slave_0 added [ 1063.410643][T16505] team0: Port device team_slave_1 added [ 1063.874009][ T5832] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1064.141292][ T5832] Bluetooth: hci1: command tx timeout [ 1064.243142][T16505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.272810][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.367321][T16505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.391365][ T30] audit: type=1326 audit(1751401653.163:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d418e929 code=0x7ffc0000 [ 1064.392109][T16505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.468345][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.520897][ T30] audit: type=1326 audit(1751401653.223:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb3d418e929 code=0x7ffc0000 [ 1064.552756][ T30] audit: type=1326 audit(1751401653.223:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d418e929 code=0x7ffc0000 [ 1064.599093][T16505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.619279][ T30] audit: type=1326 audit(1751401653.223:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d418e929 code=0x7ffc0000 [ 1064.669294][ T30] audit: type=1326 audit(1751401653.283:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb3d418e929 code=0x7ffc0000 [ 1065.030349][ T30] audit: type=1326 audit(1751401653.283:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d418e929 code=0x7ffc0000 [ 1065.118335][ T5948] usb 2-1: USB disconnect, device number 84 [ 1065.125430][ T30] audit: type=1326 audit(1751401653.283:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fb3d418e929 code=0x7ffc0000 [ 1065.210657][T16656] delete_channel: no stack [ 1065.234161][T16505] hsr_slave_0: entered promiscuous mode [ 1065.245134][T16505] hsr_slave_1: entered promiscuous mode [ 1065.332373][ T30] audit: type=1326 audit(1751401653.353:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d418e929 code=0x7ffc0000 [ 1065.820016][T16673] __nla_validate_parse: 1 callbacks suppressed [ 1065.826292][T16673] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3062'. [ 1065.835818][T16673] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3062'. [ 1066.757482][T16688] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3065'. [ 1066.767015][T16688] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3065'. [ 1067.229876][T16676] delete_channel: no stack [ 1068.059536][T16713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3067'. [ 1068.069731][T16713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3067'. [ 1070.010659][T16725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1070.446230][T16505] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1070.499620][T16505] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1070.520180][T16505] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1070.722913][T16505] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1070.909917][T16505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.170614][ T5906] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1071.178244][T16117] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1071.192557][T16505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.251144][T14290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.258265][T14290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.330501][T14290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.337645][T14290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.370468][ T5906] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1071.379604][T16117] usb 3-1: Using ep0 maxpacket: 8 [ 1071.416318][ T5906] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1071.437691][ T5906] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1071.446289][T16505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1071.459432][T16117] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1071.459462][T16117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.459480][T16117] usb 3-1: Product: syz [ 1071.459495][T16117] usb 3-1: Manufacturer: syz [ 1071.502391][ T5906] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1071.523416][T16505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1071.526310][T16117] usb 3-1: SerialNumber: syz [ 1071.543600][ T5906] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1071.571031][T16117] usb 3-1: config 0 descriptor?? [ 1071.576040][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1071.591335][T16117] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1071.602712][ T5906] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1071.620379][ T5906] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1071.639413][ T5906] usb 4-1: Product: syz [ 1071.649508][ T5906] usb 4-1: Manufacturer: syz [ 1071.659628][ T5906] usb 4-1: SerialNumber: syz [ 1071.675252][ T5906] usb 4-1: config 0 descriptor?? [ 1071.752854][T16732] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1071.935311][T16752] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3076'. [ 1071.944697][T16752] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3076'. [ 1072.301043][T16117] gspca_sonixj: reg_w1 err -110 [ 1072.306795][ T5906] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1072.316918][T16117] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 1072.336665][ T5906] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1073.168902][ T5948] usb 4-1: USB disconnect, device number 55 [ 1073.189332][ T5948] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1073.193845][T16505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.440564][ T5906] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1073.710473][T16505] veth0_vlan: entered promiscuous mode [ 1073.728537][T16505] veth1_vlan: entered promiscuous mode [ 1073.796871][ T5832] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1074.203784][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.228355][ T5906] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1074.263649][ T5924] usb 3-1: USB disconnect, device number 53 [ 1074.269310][T16505] veth0_macvtap: entered promiscuous mode [ 1074.277207][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.424339][T16505] veth1_macvtap: entered promiscuous mode [ 1074.451959][ T5906] usb 1-1: config 0 descriptor?? [ 1074.524835][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 1074.752020][ T5924] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1074.819370][T16505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.904425][T16505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.925117][T16505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.950321][T16505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.959065][T16505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.977472][T16505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.992107][ T5924] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1075.001088][ T5906] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1075.010350][ T5924] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1075.018866][T16774] sctp: [Deprecated]: syz.0.3079 (pid 16774) Use of int in max_burst socket option deprecated. [ 1075.018866][T16774] Use struct sctp_assoc_value instead [ 1075.034547][T16814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3084'. [ 1075.040065][ T5906] pwc: recv_control_msg error -32 req 02 val 2700 [ 1075.071812][ T5924] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1075.090999][ T5924] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1075.095915][ T5906] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1075.106080][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1075.126570][T16814] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16814 comm=syz.1.3084 [ 1075.158851][ T5924] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1075.188301][ T5924] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1075.223054][ T5924] usb 3-1: Product: syz [ 1075.227257][ T5924] usb 3-1: Manufacturer: syz [ 1075.244258][ T5924] usb 3-1: SerialNumber: syz [ 1075.253413][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.272873][ T5924] usb 3-1: config 0 descriptor?? [ 1075.282550][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.292278][ T5924] ldusb 3-1:0.0: Interrupt in endpoint not found [ 1075.379424][T14294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.398110][ T5906] pwc: recv_control_msg error -71 req 04 val 1300 [ 1075.409840][T14294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.437437][ T5906] pwc: recv_control_msg error -71 req 04 val 1400 [ 1075.448630][ T5906] pwc: recv_control_msg error -71 req 02 val 2000 [ 1075.457437][ T5906] pwc: recv_control_msg error -71 req 02 val 2100 [ 1075.484449][ T5906] pwc: recv_control_msg error -71 req 04 val 1500 [ 1075.508712][ T5906] pwc: recv_control_msg error -71 req 02 val 2500 [ 1075.532746][ T5906] pwc: recv_control_msg error -71 req 02 val 2400 [ 1075.552907][ T5906] pwc: recv_control_msg error -71 req 02 val 2600 [ 1075.563236][ T5906] pwc: recv_control_msg error -71 req 02 val 2900 [ 1075.576615][ T5906] pwc: recv_control_msg error -71 req 02 val 2800 [ 1075.589522][ T5906] pwc: recv_control_msg error -71 req 04 val 1100 [ 1075.601477][ T5906] pwc: recv_control_msg error -71 req 04 val 1200 [ 1075.609361][ T5906] pwc: Registered as video103. [ 1075.640027][ T5906] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input116 [ 1075.670619][T16117] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1075.700686][ T5906] usb 1-1: USB disconnect, device number 45 [ 1075.744972][T13099] usb 3-1: USB disconnect, device number 54 [ 1075.780332][T13226] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 1075.810551][ T5924] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1075.835989][T16117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.848181][T16117] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1075.861210][T16117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.873902][T16117] usb 4-1: config 0 descriptor?? [ 1075.932617][T13226] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1075.942553][T13226] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1075.960552][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 1075.966182][T13226] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1075.981958][ T5924] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1075.996308][ T5924] usb 5-1: config 0 has no interface number 0 [ 1076.003833][T13226] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1076.020648][ T5924] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1076.031761][T13226] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1076.047055][T13226] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1076.055784][ T5924] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1076.068994][T13226] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1076.080886][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.093872][T13226] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1076.102714][ T5924] usb 5-1: Product: syz [ 1076.106897][ T5924] usb 5-1: Manufacturer: syz [ 1076.112075][T13226] usb 2-1: Product: syz [ 1076.116296][ T5924] usb 5-1: SerialNumber: syz [ 1076.127426][T13226] usb 2-1: Manufacturer: syz [ 1076.136400][T13226] usb 2-1: SerialNumber: syz [ 1076.144262][ T5924] usb 5-1: config 0 descriptor?? [ 1076.170859][T13226] usb 2-1: config 0 descriptor?? [ 1076.176458][T16829] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1076.178690][ T5924] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1076.199765][T13226] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1076.230875][ T5924] em28xx 5-1:0.132: Video interface 132 found: [ 1076.239069][T13226] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1076.305062][T16117] keytouch 0003:0926:3333.0055: fixing up Keytouch IEC report descriptor [ 1076.365125][T16117] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0055/input/input117 [ 1076.480369][ T5906] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1076.504840][T16825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.519940][T16825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.563341][T16831] batman_adv: batadv0: Adding interface: dummy0 [ 1076.569852][ T5924] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1076.583435][T16831] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.608617][ C1] vkms_vblank_simulate: vblank timer overrun [ 1076.630845][T16117] keytouch 0003:0926:3333.0055: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1076.677237][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 1076.719726][T16831] batman_adv: batadv0: Interface activated: dummy0 [ 1076.741469][ T5906] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1076.830866][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.838935][ T5906] usb 1-1: Product: syz [ 1076.890394][ T5906] usb 1-1: Manufacturer: syz [ 1076.895091][ T5906] usb 1-1: SerialNumber: syz [ 1076.899761][ T5964] usb 4-1: USB disconnect, device number 56 [ 1076.921038][ T5906] usb 1-1: config 0 descriptor?? [ 1076.962472][ T5906] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1077.052788][T16861] fido_id[16861]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1077.178451][ T5924] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1077.204964][T16117] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1077.205416][ T5924] em28xx 5-1:0.132: board has no eeprom [ 1077.284020][ T5924] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1077.296372][ T5924] em28xx 5-1:0.132: analog set to bulk mode. [ 1077.307697][ T5964] em28xx 5-1:0.132: Registering V4L2 extension [ 1077.334851][ T5924] usb 5-1: USB disconnect, device number 69 [ 1077.342652][ T5906] gspca_sonixj: reg_r err -32 [ 1077.349701][ T5906] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 1077.369017][ T5924] em28xx 5-1:0.132: Disconnecting em28xx [ 1077.382262][T16117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.412481][T16117] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1077.440307][T16117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.463317][T16117] usb 3-1: config 0 descriptor?? [ 1077.685045][ T5964] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1077.727655][ T5964] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1077.766955][ T5964] em28xx 5-1:0.132: No AC97 audio processor [ 1077.800052][ T5964] usb 5-1: Decoder not found [ 1077.831442][ T5964] em28xx 5-1:0.132: failed to create media graph [ 1077.854937][ T5964] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1077.907608][ T5964] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1077.917298][ T5924] em28xx 5-1:0.132: Closing input extension [ 1077.957425][ T5924] em28xx 5-1:0.132: Freeing device [ 1078.015881][T16117] keytouch 0003:0926:3333.0056: fixing up Keytouch IEC report descriptor [ 1078.044754][T16117] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0056/input/input118 [ 1078.280712][T16890] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3094'. [ 1078.290956][T16890] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3094'. [ 1078.308266][T16867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.691238][T16867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.778148][ T5924] usb 2-1: USB disconnect, device number 85 [ 1078.797456][ T5924] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1078.830874][T16117] keytouch 0003:0926:3333.0056: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1079.036817][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1079.055025][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1079.067461][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1079.079654][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1079.116722][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1079.177627][T13226] usb 3-1: USB disconnect, device number 55 [ 1079.279364][ T5906] usb 1-1: USB disconnect, device number 46 [ 1079.540594][ T5827] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1079.567089][ T5964] syz1: Port: 1 Link DOWN [ 1080.882653][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1080.882669][ T30] audit: type=1400 audit(1751401669.663:1092): avc: denied { unmount } for pid=16224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1081.066906][ T5906] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1081.205515][ T5827] Bluetooth: hci2: command tx timeout [ 1081.356505][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.374864][ T5906] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1081.482744][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.501427][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3102'. [ 1081.514681][ T5906] usb 3-1: config 0 descriptor?? [ 1081.521211][T14290] smc: removing ib device syz1 [ 1081.525992][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 1081.983415][T16929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3103'. [ 1081.992500][T16929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3103'. [ 1082.075272][ T30] audit: type=1400 audit(1751401670.843:1093): avc: denied { accept } for pid=16925 comm="syz.0.3102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1082.178298][T16934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1082.202077][ T5906] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1082.281231][ T5906] pwc: recv_control_msg error -32 req 02 val 2700 [ 1082.326118][T16918] sctp: [Deprecated]: syz.2.3099 (pid 16918) Use of int in max_burst socket option deprecated. [ 1082.326118][T16918] Use struct sctp_assoc_value instead [ 1082.660604][ T5906] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1082.970034][ T5827] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1083.260496][ T5827] Bluetooth: hci2: command tx timeout [ 1083.380485][ T5906] pwc: recv_control_msg error -71 req 04 val 1300 [ 1083.387493][ T5906] pwc: recv_control_msg error -71 req 04 val 1400 [ 1083.394362][ T5906] pwc: recv_control_msg error -71 req 02 val 2000 [ 1083.401162][ T5906] pwc: recv_control_msg error -71 req 02 val 2100 [ 1083.408780][ T5906] pwc: recv_control_msg error -71 req 04 val 1500 [ 1083.415568][ T5906] pwc: recv_control_msg error -71 req 02 val 2500 [ 1083.430438][ T5906] pwc: recv_control_msg error -71 req 02 val 2400 [ 1083.440424][T16117] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1083.451182][ T5906] pwc: recv_control_msg error -71 req 02 val 2600 [ 1083.467317][ T5906] pwc: recv_control_msg error -71 req 02 val 2900 [ 1083.477012][ T5906] pwc: recv_control_msg error -71 req 02 val 2800 [ 1083.485865][ T5906] pwc: recv_control_msg error -71 req 04 val 1100 [ 1083.495045][ T5906] pwc: recv_control_msg error -71 req 04 val 1200 [ 1083.536481][ T5906] pwc: Registered as video103. [ 1083.561192][ T5906] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input119 [ 1083.671198][T16117] usb 5-1: Using ep0 maxpacket: 8 [ 1083.732070][T16117] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1083.763306][T16117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.980496][ T5906] usb 3-1: USB disconnect, device number 56 [ 1084.080327][T16117] usb 5-1: Product: syz [ 1084.100670][T16117] usb 5-1: Manufacturer: syz [ 1084.115884][T16117] usb 5-1: SerialNumber: syz [ 1084.149802][T16117] usb 5-1: config 0 descriptor?? [ 1084.197866][T16117] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1084.221643][T16900] chnl_net:caif_netlink_parms(): no params data found [ 1084.298581][T16956] FAULT_INJECTION: forcing a failure. [ 1084.298581][T16956] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.320741][T16956] CPU: 0 UID: 0 PID: 16956 Comm: syz.0.3109 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1084.320769][T16956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1084.320778][T16956] Call Trace: [ 1084.320784][T16956] [ 1084.320792][T16956] dump_stack_lvl+0x16c/0x1f0 [ 1084.320822][T16956] should_fail_ex+0x512/0x640 [ 1084.320845][T16956] ? __kmalloc_noprof+0xbf/0x510 [ 1084.320868][T16956] ? kernfs_fop_write_iter+0x237/0x510 [ 1084.320887][T16956] should_failslab+0xc2/0x120 [ 1084.320910][T16956] __kmalloc_noprof+0xd2/0x510 [ 1084.320935][T16956] kernfs_fop_write_iter+0x237/0x510 [ 1084.320958][T16956] vfs_write+0x6c4/0x1150 [ 1084.320979][T16956] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1084.320997][T16956] ? __pfx___mutex_lock+0x10/0x10 [ 1084.321020][T16956] ? __pfx_vfs_write+0x10/0x10 [ 1084.321048][T16956] ksys_write+0x12a/0x250 [ 1084.321061][T16956] ? __pfx_ksys_write+0x10/0x10 [ 1084.321079][T16956] do_syscall_64+0xcd/0x4c0 [ 1084.321095][T16956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.321107][T16956] RIP: 0033:0x7f6d4498e929 [ 1084.321117][T16956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.321127][T16956] RSP: 002b:00007f6d457cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1084.321138][T16956] RAX: ffffffffffffffda RBX: 00007f6d44bb5fa0 RCX: 00007f6d4498e929 [ 1084.321145][T16956] RDX: 0000000000000007 RSI: 0000200000000180 RDI: 0000000000000006 [ 1084.321153][T16956] RBP: 00007f6d457cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.321159][T16956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.321165][T16956] R13: 0000000000000000 R14: 00007f6d44bb5fa0 R15: 00007ffdeffc6e78 [ 1084.321179][T16956] [ 1084.714896][T16117] gspca_sonixj: reg_r err -32 [ 1084.720583][T16117] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 1084.754296][ T5906] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1084.850586][ T5964] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1085.228167][T16965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3111'. [ 1085.237726][T16965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3111'. [ 1085.342951][ T5827] Bluetooth: hci2: command tx timeout [ 1085.344561][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 1085.365418][ T5906] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1085.382400][T16900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.385108][ T5906] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1085.389660][T16900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.408028][T16900] bridge_slave_0: entered allmulticast mode [ 1085.430033][T16900] bridge_slave_0: entered promiscuous mode [ 1085.441936][ T5906] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1085.455535][ T5906] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1085.469087][ T5906] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1085.486134][ T5906] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1085.503850][ T5906] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1085.517939][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.525493][ T5964] usb 2-1: Using ep0 maxpacket: 32 [ 1085.545393][T16900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.545672][ T5964] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1085.565687][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.570480][T16900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.616599][ T5964] usb 2-1: Product: syz [ 1085.616736][T16900] bridge_slave_1: entered allmulticast mode [ 1085.623843][ T5964] usb 2-1: Manufacturer: syz [ 1085.639106][ T5964] usb 2-1: SerialNumber: syz [ 1085.946643][T16900] bridge_slave_1: entered promiscuous mode [ 1085.962844][ T5948] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 1085.963319][ T5964] usb 2-1: config 0 descriptor?? [ 1085.995616][ T5948] hid-generic 0000:0000:0000.0057: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1085.998761][ T5964] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1086.040667][T13099] usb 5-1: USB disconnect, device number 70 [ 1086.084694][ T5906] usb 3-1: GET_CAPABILITIES returned 0 [ 1086.090214][ T5906] usbtmc 3-1:16.0: can't read capabilities [ 1086.196440][T16900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.223194][T16900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.407659][T16972] fido_id[16972]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1086.627657][T16979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3113'. [ 1086.637365][T16979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3113'. [ 1087.303783][T13099] usb 3-1: USB disconnect, device number 57 [ 1087.430680][ T5827] Bluetooth: hci2: command tx timeout [ 1087.526880][T14294] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1087.539574][T14294] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.743838][T16900] team0: Port device team_slave_0 added [ 1087.758654][T16900] team0: Port device team_slave_1 added [ 1088.073599][ T5832] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1088.074644][ T5827] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1088.235375][T14294] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1088.253368][T14294] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.274521][T16900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.281805][T16900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1088.311751][T16900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.334230][T14294] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1088.344609][T14294] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.415823][T16900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.430125][T16900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1088.457515][T16900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.469003][T13099] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1088.554090][ T30] audit: type=1400 audit(1751401677.333:1094): avc: denied { setopt } for pid=16996 comm="syz.4.3119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1088.648535][T17000] ================================================================== [ 1088.656622][T17000] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x549/0x640 [ 1088.664253][T17000] Read of size 1 at addr ffff88805600f030 by task syz.0.3120/17000 [ 1088.672135][T17000] [ 1088.674461][T17000] CPU: 0 UID: 0 PID: 17000 Comm: syz.0.3120 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1088.674488][T17000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1088.674501][T17000] Call Trace: [ 1088.674508][T17000] [ 1088.674516][T17000] dump_stack_lvl+0x116/0x1f0 [ 1088.674546][T17000] print_report+0xcd/0x680 [ 1088.674575][T17000] ? __virt_addr_valid+0x81/0x610 [ 1088.674596][T17000] ? __phys_addr+0xe8/0x180 [ 1088.674617][T17000] ? rose_get_neigh+0x549/0x640 [ 1088.674641][T17000] kasan_report+0xe0/0x110 [ 1088.674668][T17000] ? rose_get_neigh+0x549/0x640 [ 1088.674694][T17000] rose_get_neigh+0x549/0x640 [ 1088.674720][T17000] rose_connect+0x2d4/0x1540 [ 1088.674742][T17000] ? __pfx_rose_connect+0x10/0x10 [ 1088.674760][T17000] ? selinux_netlbl_socket_connect+0x30/0x40 [ 1088.674786][T17000] ? rcu_is_watching+0x12/0xc0 [ 1088.674809][T17000] ? __local_bh_enable_ip+0xa4/0x120 [ 1088.674830][T17000] ? lockdep_hardirqs_on+0x7c/0x110 [ 1088.674855][T17000] ? selinux_netlbl_socket_connect+0x30/0x40 [ 1088.674880][T17000] ? __local_bh_enable_ip+0xa4/0x120 [ 1088.674902][T17000] ? selinux_netlbl_socket_connect+0x30/0x40 [ 1088.674927][T17000] ? selinux_socket_connect+0x6b/0x80 [ 1088.674951][T17000] ? __pfx_rose_connect+0x10/0x10 [ 1088.674967][T17000] __sys_connect_file+0x141/0x1a0 [ 1088.674992][T17000] __sys_connect+0x13b/0x160 [ 1088.675014][T17000] ? __pfx___sys_connect+0x10/0x10 [ 1088.675040][T17000] ? xfd_validate_state+0x61/0x180 [ 1088.675069][T17000] __x64_sys_connect+0x72/0xb0 [ 1088.675093][T17000] ? lockdep_hardirqs_on+0x7c/0x110 [ 1088.675117][T17000] do_syscall_64+0xcd/0x4c0 [ 1088.675143][T17000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.675160][T17000] RIP: 0033:0x7f6d4498e929 [ 1088.675175][T17000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1088.675193][T17000] RSP: 002b:00007f6d457aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1088.675210][T17000] RAX: ffffffffffffffda RBX: 00007f6d44bb6080 RCX: 00007f6d4498e929 [ 1088.675223][T17000] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000007 [ 1088.675234][T17000] RBP: 00007f6d44a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1088.675245][T17000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1088.675255][T17000] R13: 0000000000000000 R14: 00007f6d44bb6080 R15: 00007ffdeffc6e78 [ 1088.675273][T17000] [ 1088.675279][T17000] [ 1088.916166][T17000] Allocated by task 7688: [ 1088.920475][T17000] kasan_save_stack+0x33/0x60 [ 1088.925145][T17000] kasan_save_track+0x14/0x30 [ 1088.929810][T17000] __kasan_kmalloc+0xaa/0xb0 [ 1088.934388][T17000] kernfs_fop_open+0x244/0xda0 [ 1088.939133][T17000] do_dentry_open+0x744/0x1c10 [ 1088.943882][T17000] vfs_open+0x82/0x3f0 [ 1088.947941][T17000] path_openat+0x1de4/0x2cb0 [ 1088.952517][T17000] do_filp_open+0x20b/0x470 [ 1088.957003][T17000] do_sys_openat2+0x11b/0x1d0 [ 1088.961666][T17000] __x64_sys_openat+0x174/0x210 [ 1088.966495][T17000] do_syscall_64+0xcd/0x4c0 [ 1088.970985][T17000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.976867][T17000] [ 1088.979174][T17000] Freed by task 7688: [ 1088.983133][T17000] kasan_save_stack+0x33/0x60 [ 1088.987792][T17000] kasan_save_track+0x14/0x30 [ 1088.992456][T17000] kasan_save_free_info+0x3b/0x60 [ 1088.997459][T17000] __kasan_slab_free+0x51/0x70 [ 1089.002208][T17000] kfree+0x2b4/0x4d0 [ 1089.006088][T17000] kernfs_fop_release+0x12c/0x1e0 [ 1089.011095][T17000] __fput+0x402/0xb70 [ 1089.015062][T17000] fput_close_sync+0x118/0x260 [ 1089.019816][T17000] __x64_sys_close+0x8b/0x120 [ 1089.024484][T17000] do_syscall_64+0xcd/0x4c0 [ 1089.028988][T17000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.034889][T17000] [ 1089.037198][T17000] The buggy address belongs to the object at ffff88805600f000 [ 1089.037198][T17000] which belongs to the cache kmalloc-512 of size 512 [ 1089.051236][T17000] The buggy address is located 48 bytes inside of [ 1089.051236][T17000] freed 512-byte region [ffff88805600f000, ffff88805600f200) [ 1089.064925][T17000] [ 1089.067229][T17000] The buggy address belongs to the physical page: [ 1089.073615][T17000] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5600c [ 1089.082353][T17000] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1089.090827][T17000] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1089.098353][T17000] page_type: f5(slab) [ 1089.102321][T17000] raw: 00fff00000000040 ffff88801b841c80 ffffea000158e800 dead000000000002 [ 1089.110885][T17000] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1089.119447][T17000] head: 00fff00000000040 ffff88801b841c80 ffffea000158e800 dead000000000002 [ 1089.128101][T17000] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1089.136755][T17000] head: 00fff00000000002 ffffea0001580301 00000000ffffffff 00000000ffffffff [ 1089.145411][T17000] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1089.154057][T17000] page dumped because: kasan: bad access detected [ 1089.160445][T17000] page_owner tracks the page as allocated [ 1089.166135][T17000] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5811, tgid 5811 (syz-executor), ts 61965314424, free_ts 14362812329 [ 1089.187477][T17000] post_alloc_hook+0x1c0/0x230 [ 1089.192227][T17000] get_page_from_freelist+0x1321/0x3890 [ 1089.197758][T17000] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1089.203635][T17000] alloc_pages_mpol+0x1fb/0x550 [ 1089.208470][T17000] new_slab+0x23b/0x330 [ 1089.212608][T17000] ___slab_alloc+0xd9c/0x1940 [ 1089.217266][T17000] __slab_alloc.constprop.0+0x56/0xb0 [ 1089.222620][T17000] __kmalloc_noprof+0x2f2/0x510 [ 1089.227454][T17000] fib6_info_alloc+0x40/0x160 [ 1089.232124][T17000] ip6_route_info_create+0x14c/0x870 [ 1089.237394][T17000] ip6_route_add.part.0+0x22/0x1d0 [ 1089.242487][T17000] ip6_route_add+0x45/0x60 [ 1089.246888][T17000] addrconf_add_mroute+0x1dd/0x350 [ 1089.251990][T17000] addrconf_add_dev+0x14e/0x1c0 [ 1089.256826][T17000] inet6_addr_add+0xfe/0x960 [ 1089.261394][T17000] inet6_rtm_newaddr+0x1619/0x1c70 [ 1089.266486][T17000] page last free pid 1 tgid 1 stack trace: [ 1089.272268][T17000] __free_frozen_pages+0x7fe/0x1180 [ 1089.277452][T17000] free_contig_range+0x183/0x4b0 [ 1089.282370][T17000] destroy_args+0x7f6/0xa60 [ 1089.286853][T17000] debug_vm_pgtable+0x13b8/0x2d00 [ 1089.291858][T17000] do_one_initcall+0x120/0x6e0 [ 1089.296604][T17000] kernel_init_freeable+0x5c2/0x900 [ 1089.301787][T17000] kernel_init+0x1c/0x2b0 [ 1089.306100][T17000] ret_from_fork+0x5d4/0x6f0 [ 1089.310677][T17000] ret_from_fork_asm+0x1a/0x30 [ 1089.315422][T17000] [ 1089.317723][T17000] Memory state around the buggy address: [ 1089.323330][T17000] ffff88805600ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1089.331368][T17000] ffff88805600ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1089.339410][T17000] >ffff88805600f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1089.347446][T17000] ^ [ 1089.353059][T17000] ffff88805600f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1089.361098][T17000] ffff88805600f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1089.369136][T17000] ================================================================== [ 1089.377308][T17000] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1089.384502][T17000] CPU: 0 UID: 0 PID: 17000 Comm: syz.0.3120 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1089.396549][T17000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1089.406586][T17000] Call Trace: [ 1089.409849][T17000] [ 1089.412765][T17000] dump_stack_lvl+0x3d/0x1f0 [ 1089.417346][T17000] panic+0x71c/0x800 [ 1089.421233][T17000] ? __pfx_panic+0x10/0x10 [ 1089.425640][T17000] ? irqentry_exit+0x3b/0x90 [ 1089.430217][T17000] ? lockdep_hardirqs_on+0x7c/0x110 [ 1089.435407][T17000] ? rose_get_neigh+0x549/0x640 [ 1089.440249][T17000] ? rose_get_neigh+0x549/0x640 [ 1089.445086][T17000] check_panic_on_warn+0xab/0xb0 [ 1089.450013][T17000] end_report+0x107/0x170 [ 1089.454331][T17000] kasan_report+0xee/0x110 [ 1089.458738][T17000] ? rose_get_neigh+0x549/0x640 [ 1089.463591][T17000] rose_get_neigh+0x549/0x640 [ 1089.468256][T17000] rose_connect+0x2d4/0x1540 [ 1089.472830][T17000] ? __pfx_rose_connect+0x10/0x10 [ 1089.477840][T17000] ? selinux_netlbl_socket_connect+0x30/0x40 [ 1089.483810][T17000] ? rcu_is_watching+0x12/0xc0 [ 1089.488558][T17000] ? __local_bh_enable_ip+0xa4/0x120 [ 1089.493829][T17000] ? lockdep_hardirqs_on+0x7c/0x110 [ 1089.499014][T17000] ? selinux_netlbl_socket_connect+0x30/0x40 [ 1089.504980][T17000] ? __local_bh_enable_ip+0xa4/0x120 [ 1089.510251][T17000] ? selinux_netlbl_socket_connect+0x30/0x40 [ 1089.516215][T17000] ? selinux_socket_connect+0x6b/0x80 [ 1089.521572][T17000] ? __pfx_rose_connect+0x10/0x10 [ 1089.526577][T17000] __sys_connect_file+0x141/0x1a0 [ 1089.531587][T17000] __sys_connect+0x13b/0x160 [ 1089.536163][T17000] ? __pfx___sys_connect+0x10/0x10 [ 1089.541262][T17000] ? xfd_validate_state+0x61/0x180 [ 1089.546367][T17000] __x64_sys_connect+0x72/0xb0 [ 1089.551116][T17000] ? lockdep_hardirqs_on+0x7c/0x110 [ 1089.556305][T17000] do_syscall_64+0xcd/0x4c0 [ 1089.560797][T17000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.566675][T17000] RIP: 0033:0x7f6d4498e929 [ 1089.571073][T17000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1089.590664][T17000] RSP: 002b:00007f6d457aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1089.599062][T17000] RAX: ffffffffffffffda RBX: 00007f6d44bb6080 RCX: 00007f6d4498e929 [ 1089.607015][T17000] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000007 [ 1089.614979][T17000] RBP: 00007f6d44a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1089.622933][T17000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.630889][T17000] R13: 0000000000000000 R14: 00007f6d44bb6080 R15: 00007ffdeffc6e78 [ 1089.638849][T17000] [ 1089.642091][T17000] Kernel Offset: disabled [ 1089.646395][T17000] Rebooting in 86400 seconds..