last executing test programs: 4.791665567s ago: executing program 1 (id=3046): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="840000001a000100000000000006000080000020"], 0x84}}, 0x20048010) 4.495634039s ago: executing program 1 (id=3049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d400000000010104000000000a000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000080008400000000a040016400800154000000003040017"], 0xd4}}, 0x0) 4.400731066s ago: executing program 1 (id=3050): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@private, @dev, 0x0}, &(0x7f0000000280)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @broadcast, @broadcast}, &(0x7f0000000300)=0xc) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0xfdfdffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fff, 0x0, {{0x1e, 0x4, 0x0, 0x2e, 0x78, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x37}, {[@timestamp={0x44, 0x18, 0xf3, 0x0, 0x1, [0xbd0, 0x7, 0xffff7fff, 0x7, 0x6]}, @timestamp_prespec={0x44, 0x24, 0xe9, 0x3, 0xb, [{@remote, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0x3}, {@loopback, 0x7e3}]}, @ssrr={0x89, 0x7, 0xa9, [@broadcast]}, @cipso={0x86, 0x20, 0x1, [{0x6, 0x3, "9f"}, {0x6, 0x2}, {0x6, 0x4, "14a3"}, {0x0, 0x11, "4f144e95633065a43bf35bff04ad4a"}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0xdc, r0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xf5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfff}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40c0}, 0xd4) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20201, 0x0) ppoll(&(0x7f0000000180)=[{r9, 0x1000}, {r8, 0x1000}], 0x2, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x8]}, 0x8) 4.087275034s ago: executing program 0 (id=3052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000014d564b00000000ff"]) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000e40)=[@textreal={0x8, &(0x7f0000000dc0)="660f3882a99ea4670fc7b894a0df6f0f01c40f23cbbaf80c66b87c256d8e66efbafc0ced0f01c50f010866b9800000c00f326635000100000f30baf80c66b8e4e6138a66efbafc0cb03beebaa000ed", 0x4f}], 0x1, 0x2c, &(0x7f0000000e80)=[@cstype3={0x5, 0x1}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.575299208s ago: executing program 0 (id=3055): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4c}, 0x1, 0x0, 0x0, 0x20}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmmsg(r2, &(0x7f0000005a40)=[{{&(0x7f0000000540)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000680)="f73d34e3764af0a5316119432a30f1e2a3a10d64e889c2beb83e10fcef7d01df93293af3db2add6d71de008ebc4e77c798bc1d520d0c92960f89cff3649867623aef04c28688f4c85df21ec8d71e624cfdd9d8a6f17912fe8f2a78cb568760fb9b949919c56e0a2a1ed496272359e5b49340f1a771e03bb7e18a59528830a253e47b032589bcef50c3196c47496315b49ad07875db0c81bd64462bfbccd7f5554aa8b2ec563dc2d2593fd5f8e47ca1ac096bb8268a3a94430e7ac543988af99172b2ecb2a46504fe1fb21ed7ea8f", 0xce}, {&(0x7f00000005c0)="962c60038763605822fcb8e14721fd965a3ffbe9219a94a75cf84ce8beab892d9679dc9a7fd4666b8c4c02a35fc0d99420b899cff1a2d17d516631253a8b961395be430db60c67eb697fd6bcb0d9677e62bbe03188df7d686c56bc876f168e6b1ca71a4fbdd5880655768b785f599cd132812c186a", 0x75}, {&(0x7f0000000780)="57241bc2d68ef4d4a2b4b1d35973677bc0a5278cde8f090019728fa1890c10c43b39016c667de323e4ad8092805ad36944382e225fca94eff7d8a139e106738f3c7f142bf3ce5153ffe745fd71bea3b6e8ce30b8b97ab0f0137ed9c1da5f9a9e9d1ac536d2d363ca0227577750947900e64351e0d4ce399b06f2ecd476c7305259429b01b5446fde67b8c39a3981e7aa6513902bff08c95107367db25599786dc720ba5e074cb66fb350d221b6ed3d471fd304", 0xb3}, {&(0x7f0000000840)="e62ae4f6dcc703cf", 0x8}, {&(0x7f0000000880)="ee74d8c6a8250d468d47a4f178ab8af15562ebe80a4ef187afe82b604ba5d443c2b963bb4ff1a224c0e034a7212c4b613b958f0ed295d9449cf70bb37ec9b6097f0a6006997c6ddec27bce09f3568f3cd74d3948a5863109862afbc4fea4c99403cf587ec132aa0d7d5b196348c44fd438297f6e46110d5ed789ab70edccb26ad2f47d9a2763500c49e6aecc7816fd5f30e3ad9356084057c16dcdf23a1c96d5b0a54e1a06778ac9b97052d4d9eec51668704c96cd6ef8641bedc6827ab34d960d66abc68961798dad64cd102da9baabaccacba30829eae18c", 0xd9}, {&(0x7f0000000980)="8a440016ad5cf340b3a399ca7d128a3313fdbf99c3ed92535c975f22a0a710e388467c1d17b880e12b1151e30a81165b46dd75c01d86ffd1571ad8faf832ada8f0975da9c83ff16b5e7fe51de7b2708fc0a4c7d1fba40084b9e54ce11faa01cf3bc88943ad23533a97002c52213676df19ea56020c236a21df2d9c2678916d71db71a7f66efd88c5dfb9", 0x8a}, {&(0x7f0000000a40)="93e1082bea0e486bc08031e63f9565eeaee4f9e1b031a590bf9995fcb22db578274680f8f32228f54b53d636f895d238625028df2b6d217af2ba3b872baaf50894c6405ab5dc3cfc3c84de2306", 0x4d}, {&(0x7f0000000ac0)="5bf95fe49d2aff18d4d7ca7af152a6e4ae6d2155e4f785c430c6765a7859522fe746d484bde53ac0d8be9af55c29d1268ab33e2e402ccf4665166ef1a4b617a33eede9ceb19ad95ef9bf65b72799867918f7a55d882dc06ff8", 0x59}, {&(0x7f0000000b40)="c71844d0def7de8b9837b75b1f3c4340368290bd936b2e8f9afd71", 0x1b}, {&(0x7f0000000b80)="fa34af861b9b9a0809082d6be88c59ab4d3b29999db34160ef0c83e85d48eea35c20c2e4232fe83946da15c44577e4e91246ec732a6e1c83e51d6662fc58", 0x3e}], 0xa}}, {{&(0x7f0000000c80)=@in6={0xa, 0x4e22, 0x7, @private1, 0x80000000}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000d00)="c9ac83dac54aaefda1325652ed53a4d6584d076b447e6f68456fb43a60c1b93431200458c5e5234ae00b55ba4510ce140f5873bf41233371622897431ddc874f2a30901e5bee074fca7a41caedd9ab84a339ddb3beea811c151e6d6b14a235b3ea3ff47ded5ac415dd7495801ce67b6d7088f612c6d893c7034aab908cd3b08bb474409a7258aa1e3a261bbe16b09455c5a89def25884644e48227c2446d2b170fd23d1df57390b0aacd2e35f29ecd7a042e26ce1b06c7c62fd51ead07e49a4b3944c424e83589a1ff15c8d0cf6e72a6eea44543802450d6e1cb76b5412d1fe66c5c1cc4737d7a0f2b3c4ac54311f8ef297c4908b4d1", 0xf6}, {&(0x7f0000000e00)="74025336b56f69830047f292cfb070bf908e5a666b572818002363f4b0a1b10ac49c77311af0cb4fea", 0x29}, {&(0x7f0000000e40)="b52565d742f7791a19dda982c4010c83aff36bb5a18c87a185a63402be3c6ca0f254d80222c12d3fd00a3cc8527711174f10304416ce1801e66f7dbd05890693ea58a39707d9", 0x46}], 0x3, &(0x7f0000000f00)}}, {{&(0x7f0000000f40)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @broadcast}, 0x4, 0x4, 0x0, 0x1}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000fc0)="e36bed91198f0ae785adef7273e26d8104bc40c1b8a196fc3e9a857b4c36a05ff710e49c269654e51d421b109ccca1a1", 0x30}, {&(0x7f0000001100)="83652e7e21c5513c698271624911f7a217eb9786b676cd9c24cf185c07320008baf677afafa4ffc74b540e7aec491f7b44f9f398148ac3855210e23d5e5e831f508e5f4e0d1dc46136fe16b70db9ae33ea7b28507a57003a693e0974e628eeaeaebe1e8e1a3a6b6d9f95ac1822be3127898deb5aa783fbb82eba83ddc46d841d5baa29e9fc7a25144293cd04c11322f02d5915c6", 0x94}, {&(0x7f0000001000)="2c3d5bc54db1629b68bb6ca6bdc7cbc470ce8502539d124c42396bac747e4cc0d8cb1afbed170c68d43e84723786d1398ac4792ad564ba781b405391cd518700813d50f8a61aaa2535da6b", 0x4b}, {&(0x7f00000011c0)="206261ad5cf4ff83a072275564ee54813b331773d5104b7dd48d900082a103c56d1455e1e82f94a5ecd1ba215715b9329605ecafc12c909d6f2cb6b9c780ec4c5f14bcc2ac165d408959c34d27218fbf82e11dbdbee5bf25ba77546de2c66d9c42b191a059d8a96c337c30273529aa8751e1e9496c87b7b623817e0358edcf3e1f9d44ba8d8ee056b29fa4f0dbdd05fa775630e11d10bc435e08f66b9b85da8324cc046dff3055063970d75310", 0xad}], 0x4, &(0x7f00000023c0)=[{0xb8, 0x1, 0x1, "7c5698b13edfd40caf20edfd775776ff129ad65c710cb1853cb783aa682ae00ac55c534856f7434dcd5c7a0e66a2b898ef76c32aa639450da62ab6ce03d8877ba65b105dce95a3fe11988c6028eb30793e37c1da43d1b2aa69f498b598978a791b1a95b21911004268ee160c115e97cd013423fa1aca90f06a4d45ebc2747d0e47c49f7e6c29957867dc06115c74085dbdcf48d26771f94e8630a41a9761fcca1b"}, {0x48, 0x10, 0x7, "ac8bdf5dc12e6cfb79cf96c8009655b34b6fd98e4a6bbbcfd0c9adc598699adea4460cbcc214d2e9961256ba599a688b8da9f93ea185ef"}, {0xb0, 0x103, 0x7, "6547a91f144f3d8eb38a59c066b35e27af305ef916bdc950f772858cf87fe92c95e00e75ee2a62e39f4524aed1b96477ab771f25d2649bcd265b08935248adefd9f2fc7c88df58d3d427d6f4999fac27205f59503af8bb8f17fa77a8ff71d731b7e1cf3b6d5eda128b869834aade7ea10e952378eef6eb52aae3cdb386c6093165d1d80d83ea03241dc66c0b85a75a81eb041bb4e4781b507c"}, {0x28, 0x88, 0x0, "b6b8d4ad2b07993e3829955c7f88d45afce324a49d37"}, {0x48, 0x101, 0x7f, "7a3fdc1a44c59e961c06fc199f353faa5d01a065a050e958ab0fe6e175c53d0c984b6d40f5647f60e9872b035ac87e6e2a"}, {0x110, 0x29, 0x9182, "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"}], 0x330}}, {{&(0x7f00000012c0)=@in6={0xa, 0x4e20, 0x8001, @empty, 0x4}, 0x80, &(0x7f00000059c0)=[{&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="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", 0x1000}, {&(0x7f0000004700)="0c20fe19aa4a6c1657ceaa95eaadd3becf9171645a69aaa5dcc5a938c66ddb15b8555cb1129b3ad0080185789e20c72835da1bd0b0730c2048519e18f40d6c4352cf01beb2f98fe3a7fbe079474cc919175659944e3e7c802b978166cb48e1673edfa5b6ed8b52e35067461e784dc6fc1f6ebe306a0e38fa8101814fc54e9e2d9781c9354c3b0bb97e5e236374f2e98e507afaad0b31ffa701", 0x99}, {&(0x7f0000001340)="9a4091653a44885016140513b4756865bfa6", 0x12}, {&(0x7f00000047c0)="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", 0x1000}, {&(0x7f00000057c0)="fea40b17a6426052611ec1cb94b58e859bcd388e7786c51bd5a2093e15636d5ff710f172d6c5b0c4a8dea3c19ab5c32c4f2f4e78e74626f86464860263b0c69e7172abb047f9ee80601d", 0x4a}, {&(0x7f0000005840)="aaae8555c9b057c4dad99693af1d5ff664effa1c122f78838106ab1c0b0652420350f0268834df00e3526e178901c5096a0d7abc7fa5e838460a5af14dadf2f6f1378077fdd5031998d578dc9cf858628121", 0x52}, {&(0x7f00000058c0)="2612ee391395b5163dfcb5deee9bb078a014c12f26c113aa2c5f98638f7d0ca470e5bf6c2f74dbcdee1ecc884a8c60a5b776a9eb9989286a498ba4eb1c8b4fabc81aae22b87dd3ca2881868001c2f12c338a6cdf858096c9b97883df9a8d0af40c34d182e1ce299d9650cd3c7ff89ec02b0d73a057b201b2a5b5da8247cb4a9d3c211fc2ba3f3d0cd2ed145312d7dc1adad29f9c094a032617b7a1da3da03a0fdea0e882968897354d9bf4e7b318ed6df228019dd02fde6a6729ead08047741bc54f6c1d021815e7a0ea6249dc6ead6b0ce8fca1a00c93fcc58337893a6775081d60b813642c3f0b4609b3", 0xeb}], 0x8}}], 0x4, 0x200080c5) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYRESHEX=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) dup2(r7, r0) sendmsg$netlink(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001000300000000000000100000400c000400000000000000000005003580f8000000"], 0x28}], 0x1, 0x0, 0x0, 0x40801}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000f00), 0x40, 0x2) recvmsg$can_raw(r1, &(0x7f0000000480)={&(0x7f0000000100)=@tipc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/110, 0x6e}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/34, 0x22}], 0x5}, 0x162) 3.433254368s ago: executing program 3 (id=3058): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x7000, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@flat=@handle={0x73682a85, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x3d}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 3.355834283s ago: executing program 1 (id=3059): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100400000004f0002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 3.22442088s ago: executing program 3 (id=3061): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}, 0x1, 0x0, 0x0, 0xa6975b0d20b3dc1e}, 0x40) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r1, &(0x7f0000000100)={0xc8ad, 0x2, 0x5, 0x89, 0xff, 0x7, 0x1000000000000, 0x7, 0xa}) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f00000000c0)=@sr0, r1, &(0x7f0000000100)) 3.043539729s ago: executing program 1 (id=3063): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000014d564b00000000ff"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000e40)=[@textreal={0x8, &(0x7f0000000dc0)="660f3882a99ea4670fc7b894a0df6f0f01c40f23cbbaf80c66b87c256d8e66efbafc0ced0f01c50f010866b9800000c00f326635000100000f30baf80c66b8e4e6138a66efbafc0cb03beebaa000ed", 0x4f}], 0x1, 0x2c, &(0x7f0000000e80)=[@cstype3={0x5, 0x1}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2.970083292s ago: executing program 3 (id=3064): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x2, r2, 0x29, r0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000006c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x3bc, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r6}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xce}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5d3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r2}}}]}}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x800}, 0x4011) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 2.795526703s ago: executing program 1 (id=3066): creat(&(0x7f0000000040)='./file0\x00', 0x69) pselect6(0xfffffeb1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x6c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) getsockopt(r1, 0x8001, 0x7fff, &(0x7f0000000200)=""/202, &(0x7f00000000c0)=0xca) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, 0x0, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r4, &(0x7f00000014c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000340)="bd", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x404, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x402, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0xd0, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3812589b}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x159e14d8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x178f388c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x708f457}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x41e2bff4}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_DELRULE={0x108, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xde, 0x7, 0x1, 0x0, "87fed2f3a77a3854d7f1d941270c6d60364a30b305ff70407fc61084adb3eb3da5007a631aa813a0d86aec36b3035054ca1b7bc28c88422f2321d296accfa1c792602f6357edca61dd564c6ca20b0f9f0cad657146cabf35b88d055fd16a3fe65db463ab3e3c18e49846d5e94a33cda9fa60e8b657d0fe52d602bfd0b4072634ac772341518069297aa795f47bf7e7f055740457879cf2773ef4b32360e985942679f0c21f97ee74e56922afc124d63f2d0233975c405a94d2c5fd18fa0ad65f01904b1a4de06dc97ca2a8dd0f85a91f185b909422e65459ed30"}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_USERDATA={0x1f, 0xd, 0x1, 0x0, "39ac49f7eee60eb07935df2cc5732c44677bfd1a193f96d79ba91b"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWTABLE={0x14c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x7b, 0x6, "8cc9bbf497b46eb00b193e50507f7193562790fef40d95a29b56d0829bd4610bba6004a852df8cfaa21c662eda3a1f17476ca8a2c0d9c4d93f36d8957f3f59ce9a4be19d4beb03d1941006d716f77da45cd1145058ed34ef25bdc52fec1babc8711dc12e9afe409ac6906332b39dc429868e055b36b18a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x78, 0x6, "5dd7b8997a9139a5cff92bee8c9879b5a9509af9234fbe4347d187c9527e2c36a03d69cb422353e767b32e8ae33cb4f1c782d593305ff915d2b84b43e1efd22c26dfe825dbd84b68e43f0a5f32394550052127f0ba214f07083b2f23768b965f46cfe06e712c1ab15cc7e0c3c99c0e931942070c"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x490}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(r4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r3}}, 0x48) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 2.73499946s ago: executing program 3 (id=3067): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0xfe) 1.703142519s ago: executing program 3 (id=3073): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.527644328s ago: executing program 3 (id=3074): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x5, 0x6], 0x0, 0xa340}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x4}, 0x1c) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0xb, 0x0, 0x10003, 0x7, 0xff, 0x6, 0x5, 0x12, '\x00', 0x1}) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="343d72735fc47ead82bb45e1dc04000000", @ANYRES16=r6, @ANYBLOB="010024bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200cf000000"], 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg0\x00'}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b0001000310030904"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r7, 0x800442d3, &(0x7f00000000c0)={0x6, 0x0, 0x5, @random="cf414f7c93ff", 'veth1_virt_wifi\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) 924.763615ms ago: executing program 2 (id=3079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="019f07"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000002100010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 583.802432ms ago: executing program 2 (id=3080): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="840000001a000100000000000008000080000020"], 0x84}}, 0x20048010) 423.715199ms ago: executing program 0 (id=3081): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x88402) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7fffffffffc, 0x1000000, 0x800, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x9ab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1]}) 423.603367ms ago: executing program 2 (id=3082): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 368.141798ms ago: executing program 0 (id=3083): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc1", 0xc3}, {&(0x7f00000002c0)="9c81", 0x2}], 0x2}}], 0x1, 0x4004894) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)="f1bf762b2df497800dcf425815085540a84b34e45a2dd0c3d6959de25e4b4099be1063e1fa1aa0551a8a566a38d445c8402a7de6a415fdc02268a82f7a81246c1d9fd8535d43baacb265ad29f678e05a457003a96a3366bdeb013a8071a7c7121d79215fb3719541d13bcd571cdfd0f947dfc4bf39462818ec015a8cc563478821a523aae22623dcd131f619735980753532d31e06529ec717b0f44ecb205014e379fcccf44f79c6b1ffe1efcc6c6022124d077a367b1b00bc79158a55cb6ba852541a52f84cd61dc7be74d97a5f79ea1d9722c68345ab2e57ac77785d14de0f1c63b1fecae05e09a1e7220f122dbc127d26ca959ad4d4360b6de6661599c2c8dfa01462b1679baa2fa10c1f48db81126af7c6b960441310102ed902635b36f2f209a5062564acd554ab4fc7205500378435c802d64ef48edcd0c92a8c538f490e8ac794fd0d456b9e05781ea508e419bd33fa70cd8df0c041bbdd73a1101ccbb9b58b8d89ce948816dd6ecb61ef15161f1ba4c5dea93adc83f810ae92f1243894aa582464ad805e150f0aca68bbbb2e4fe3d8c2053d8eeccdbbe259dc9a557124492a5e3105ae0b32ae5fc87194ac37455dad4712dd68e9102b26ebb7cdb137a7acb653442c97b5d8fdc76069555375f185b1b1385ef606528aedbbfc75082be35f1bf77ec19dfcd506fe9094e95d78da6ba8b1526f30658e501471b8edbfe9e117c7aee5a3a484fcde922fba28a3960750ab5f52f1dd27841d977e4b5883f1cceabb8478487bfd031e1e5f0896cbf8489cce0280b4cf914ea97445df382b63ce9c82ae56a05699287ca6bbeaf1fa24393203a4366a89388d8e260dc7e9d0d5d8345e2764650dfe8f8414f37cf750c516ed99e5ba59926b1eb3c0cc16a289d42682fd9fdf7eff5566da634983d7ba64621290fd3a616da3c6be3e854c8d27d8ce28363506c0ea41527be5d9d1bdf49be227f2949298c29a0c6d2ed07038a6cab167bd60b8a71f3a25de8242ca88c6f9166c6bf0996c4484b632898cc4b1de741b153093d85b3ac83849a361147deb3d5eb77e21491c88b4adc955c9b1e5fd41f1d7379d01cb36e165703fe0de180fd236e892fe2901a361fd1168e7fa25d0f6eb21a2a3ab290ea4e6f8f611dec443a089efb13fc92477d3aa7a977b74e6a6e85cf99b98e2dfbe717870b987729c4aa98a98311d822bd662060fe3bb55adb9d9c44d95b50cd214b8da99ad6fe849fb3acd9eedbe6c78761e2c6887774eb2e942cebcf4be4a662fe6166e7be02217d90d09ef84d3edd40ddb253004f09d1221c8ef2aa68e0a80cd0ba83fdce38e30a6e50cc99804c3f7802cfd2fee86e9ee88ae506eb57c632620d9777b3890c0854ec5e6562c9b0af383a332368c1534eec05ba36e91d09d1aca5993c1fdf24880e02d57f3d735d1674807841ba280fb6aef0f878815b027f828bb630c92c75e5e1c439e9e1e497b69b5460c8c5bf7ae8f50b67fec3cd62bc0b67b5fc472d23d4e9bc27c9cd3db01a230612ed3b3f387e6f02700a5e72f0166214cdaa80b2b64d15e805305aaee0812444dc28ce2717432852cc0524617c027afd340993f9de4f843c02a70ace7a6eafa98d67118f8c86b3bc72589226607e876793c4bc88f0e1aab31df9dbe75731af87d908bb35a194e7ba8a98c9ddb74446e3558ccebefe197375afbf2cfddf893b95a9ace4ca4cd5e067e196af1fc6ad0f510b011226a7e3ab49e9bea546fd6f5923f8d37484f3249597548e3f50c1a0a49ea7d967f10ecee53236d346ccb310bbe9117d247497f6f59ae558e29def6bca99b8269f4743df005d2377a1da748ea92342892dc02ff0428ceaa5bffd7f19aa3da258fcf257f74896623ebddd6436f446dade95137831bc2b6d7ad30ac373c6a68aad234c87172244ede7fc7304c891bce153072bd10621250578ba2abba3ef4aabd016dc08a8305bc15525070186388ade5a98039c3b4ef2fe2cd145811b5", 0x586}], 0x1}, 0x24}], 0x1, 0x80) 361.903823ms ago: executing program 2 (id=3084): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1295800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000058000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002cf8f6d700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000100)=0x100000000) (async) creat(&(0x7f0000000040)='./file0\x00', 0x15d) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 223.728111ms ago: executing program 2 (id=3085): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000540)={{0x4000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x6000, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0xf000, 0x80a0000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0xeeef0000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x2000, 0x0, 0xd, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0xfd}, {0x80a0000, 0xdddd0000, 0xb, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000, 0x1}, {0xeeef0000}, 0xfdfcffdb, 0x88, 0x0, 0x28, 0x7, 0x8800, 0x0, [0x0, 0x1000000000000, 0x9]}) 278.394µs ago: executing program 0 (id=3086): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {0x0, 0x0, 0x400000}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 136.151µs ago: executing program 0 (id=3087): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, r0, 0xfffff000) modify_ldt$write(0x1, &(0x7f0000000040)={0x9, 0xffffffffffffffff, 0x2000, 0x0, 0x2, 0x0, 0x1}, 0x10) syz_clone(0x26000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 0s ago: executing program 2 (id=3088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x1000000001) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0xff) (rerun: 32) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd672ed990c66297b) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r3, 0x2000) kernel console output (not intermixed with test programs): [ 425.922633][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.933993][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 425.944664][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 425.948050][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 425.965284][ T24] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 425.974076][ T5925] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 425.975529][ T24] usb 3-1: Product: syz [ 425.983560][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.995676][ T24] usb 3-1: Manufacturer: syz [ 425.995699][ T24] usb 3-1: SerialNumber: syz [ 426.002012][ T24] usb 3-1: config 0 descriptor?? [ 426.013017][ T5925] usb 1-1: Product: syz [ 426.027474][ T5925] usb 1-1: Manufacturer: syz [ 426.032260][ T5925] usb 1-1: SerialNumber: syz [ 426.034116][ T24] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 426.047218][ T5925] usb 1-1: config 0 descriptor?? [ 426.067563][T12675] netlink: 'syz.3.2361': attribute type 21 has an invalid length. [ 426.075744][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2361'. [ 426.178754][ T982] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 426.264737][ T5925] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 426.323782][ T982] usb 2-1: device descriptor read/64, error -71 [ 426.393224][T12682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.424389][T12682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.441673][ T982] usb usb2-port1: attempt power cycle [ 426.453489][T12684] netlink: 'syz.3.2364': attribute type 10 has an invalid length. [ 426.462702][T12684] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2364'. [ 426.467452][T12648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.472386][T12684] team0: entered promiscuous mode [ 426.487002][T12684] team_slave_0: entered promiscuous mode [ 426.487325][T12648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.494100][T12684] team_slave_1: entered promiscuous mode [ 426.506296][T12648] kernel profiling enabled (shift: 63) [ 426.508343][T12684] team0: entered allmulticast mode [ 426.518703][T12684] team_slave_0: entered allmulticast mode [ 426.522507][T12648] profiling shift: 63 too large [ 426.526303][T12684] team_slave_1: entered allmulticast mode [ 426.540065][T12684] bond0: (slave team0): Releasing backup interface [ 426.552235][T12684] bridge0: port 3(team0) entered blocking state [ 426.558819][T12684] bridge0: port 3(team0) entered disabled state [ 426.811088][ T982] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 426.849554][ T982] usb 2-1: device descriptor read/8, error -71 [ 426.924668][T12690] MTD: Couldn't look up '/dev/rnullb0': -15 [ 426.937050][T12691] MTD: Couldn't look up '/dev/rnullb0': -15 [ 427.088027][ T982] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 427.118942][ T982] usb 2-1: device descriptor read/8, error -71 [ 427.226525][T12701] MTD: Couldn't look up '/dev/rnullb0': -15 [ 427.233161][ T982] usb usb2-port1: unable to enumerate USB device [ 427.342258][ T5943] hid_parser_main: 5 callbacks suppressed [ 427.342283][ T5943] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 427.374201][ T5943] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 427.401667][ T5925] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 427.431849][ T5925] usb 1-1: USB disconnect, device number 89 [ 428.228406][ T982] usb 3-1: USB disconnect, device number 85 [ 428.238633][ T982] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 428.598429][T12721] FAULT_INJECTION: forcing a failure. [ 428.598429][T12721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.644277][T12721] CPU: 0 UID: 0 PID: 12721 Comm: syz.1.2377 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 428.644306][T12721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.644317][T12721] Call Trace: [ 428.644334][T12721] [ 428.644344][T12721] dump_stack_lvl+0x189/0x250 [ 428.644377][T12721] ? __pfx____ratelimit+0x10/0x10 [ 428.644403][T12721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.644430][T12721] ? __pfx__printk+0x10/0x10 [ 428.644458][T12721] ? __might_fault+0xb0/0x130 [ 428.644500][T12721] should_fail_ex+0x414/0x560 [ 428.644535][T12721] _copy_from_user+0x2d/0xb0 [ 428.644564][T12721] kstrtouint_from_user+0xc4/0x170 [ 428.644592][T12721] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 428.644637][T12721] proc_fail_nth_write+0x88/0x240 [ 428.644664][T12721] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 428.644697][T12721] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 428.644725][T12721] vfs_write+0x27e/0xa90 [ 428.644756][T12721] ? __pfx_vfs_write+0x10/0x10 [ 428.644778][T12721] ? __fget_files+0x2a/0x420 [ 428.644806][T12721] ? __fget_files+0x3a0/0x420 [ 428.644827][T12721] ? __fget_files+0x2a/0x420 [ 428.644860][T12721] ksys_write+0x145/0x250 [ 428.644883][T12721] ? __pfx_ksys_write+0x10/0x10 [ 428.644900][T12721] ? rcu_is_watching+0x15/0xb0 [ 428.644931][T12721] ? do_syscall_64+0xbe/0x3b0 [ 428.644962][T12721] do_syscall_64+0xfa/0x3b0 [ 428.644986][T12721] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.645010][T12721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.645029][T12721] ? clear_bhb_loop+0x60/0xb0 [ 428.645053][T12721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.645071][T12721] RIP: 0033:0x7fb2a638d3df [ 428.645089][T12721] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 428.645106][T12721] RSP: 002b:00007fb2a715b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 428.645127][T12721] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb2a638d3df [ 428.645140][T12721] RDX: 0000000000000001 RSI: 00007fb2a715b0a0 RDI: 0000000000000004 [ 428.645152][T12721] RBP: 00007fb2a715b090 R08: 0000000000000000 R09: 0000000000000000 [ 428.645163][T12721] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 428.645174][T12721] R13: 0000000000000000 R14: 00007fb2a65b5fa0 R15: 00007ffe863b0728 [ 428.645207][T12721] [ 428.879606][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.087752][T12742] /dev/rnullb0: Can't lookup blockdev [ 429.347943][ T982] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 429.598010][ T43] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 429.757695][T12767] /dev/rnullb0: Can't lookup blockdev [ 429.769429][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 429.783764][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.793135][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.803075][T12767] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 429.831004][T12767] CIFS: Unable to determine destination address [ 429.838362][ T43] usb 3-1: config 0 descriptor?? [ 429.847762][ T43] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 430.094754][T12776] /dev/rnullb0: Can't lookup blockdev [ 430.172762][ T30] audit: type=1400 audit(1752216930.057:12): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=12778 comm="syz.1.2395" [ 430.193827][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.202593][T12781] /dev/rnullb0: Can't lookup blockdev [ 430.341314][T12787] netlink: 'syz.3.2399': attribute type 1 has an invalid length. [ 430.349443][T12787] netlink: 624 bytes leftover after parsing attributes in process `syz.3.2399'. [ 430.441594][T12790] FAULT_INJECTION: forcing a failure. [ 430.441594][T12790] name failslab, interval 1, probability 0, space 0, times 0 [ 430.455740][T12790] CPU: 1 UID: 0 PID: 12790 Comm: syz.3.2400 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 430.455767][T12790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.455779][T12790] Call Trace: [ 430.455788][T12790] [ 430.455796][T12790] dump_stack_lvl+0x189/0x250 [ 430.455829][T12790] ? __pfx____ratelimit+0x10/0x10 [ 430.455857][T12790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.455882][T12790] ? __pfx__printk+0x10/0x10 [ 430.455916][T12790] ? __pfx___might_resched+0x10/0x10 [ 430.455940][T12790] ? fs_reclaim_acquire+0x7d/0x100 [ 430.455966][T12790] should_fail_ex+0x414/0x560 [ 430.456002][T12790] should_failslab+0xa8/0x100 [ 430.456023][T12790] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 430.456051][T12790] ? __d_alloc+0x36/0x7a0 [ 430.456082][T12790] __d_alloc+0x36/0x7a0 [ 430.456105][T12790] ? from_kgid+0x1b0/0x650 [ 430.456128][T12790] d_alloc_parallel+0xe5/0x15e0 [ 430.456162][T12790] ? security_capable+0x7e/0x2e0 [ 430.456194][T12790] ? capable_wrt_inode_uidgid+0x1e7/0x290 [ 430.456226][T12790] ? __lock_acquire+0xab9/0xd20 [ 430.456250][T12790] ? __pfx_d_alloc_parallel+0x10/0x10 [ 430.456274][T12790] ? look_up_lock_class+0x74/0x170 [ 430.456305][T12790] ? __raw_spin_lock_init+0x45/0x100 [ 430.456346][T12790] ? __init_waitqueue_head+0xa9/0x150 [ 430.456371][T12790] __lookup_slow+0x116/0x3d0 [ 430.456401][T12790] ? __pfx___lookup_slow+0x10/0x10 [ 430.456447][T12790] ? down_read+0x1ad/0x2e0 [ 430.456478][T12790] lookup_slow+0x53/0x70 [ 430.456504][T12790] walk_component+0x2d2/0x400 [ 430.456527][T12790] ? path_lookupat+0x156/0x430 [ 430.456554][T12790] path_lookupat+0x163/0x430 [ 430.456587][T12790] filename_lookup+0x212/0x570 [ 430.456617][T12790] ? __pfx_filename_lookup+0x10/0x10 [ 430.456670][T12790] ? strncpy_from_user+0x150/0x290 [ 430.456702][T12790] ? getname_flags+0x1e5/0x540 [ 430.456730][T12790] user_path_at+0x3a/0x60 [ 430.456758][T12790] __se_sys_chdir+0x91/0x280 [ 430.456780][T12790] ? __pfx___se_sys_chdir+0x10/0x10 [ 430.456800][T12790] ? rcu_is_watching+0x15/0xb0 [ 430.456831][T12790] ? do_syscall_64+0xbe/0x3b0 [ 430.456862][T12790] do_syscall_64+0xfa/0x3b0 [ 430.456886][T12790] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.456910][T12790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.456929][T12790] ? clear_bhb_loop+0x60/0xb0 [ 430.456953][T12790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.456971][T12790] RIP: 0033:0x7ff2cad8e929 [ 430.456989][T12790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.457003][T12790] RSP: 002b:00007ff2cbbd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 430.457022][T12790] RAX: ffffffffffffffda RBX: 00007ff2cafb5fa0 RCX: 00007ff2cad8e929 [ 430.457034][T12790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 430.457043][T12790] RBP: 00007ff2cbbd4090 R08: 0000000000000000 R09: 0000000000000000 [ 430.457052][T12790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.457062][T12790] R13: 0000000000000000 R14: 00007ff2cafb5fa0 R15: 00007fff26c505b8 [ 430.457087][T12790] [ 430.498056][ T982] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 430.834891][T12795] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 430.891745][T12797] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2403'. [ 430.940002][ T982] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 430.957108][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 18, changing to 8 [ 430.970891][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 33041, setting to 1024 [ 430.997005][ T982] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 431.010268][ T982] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 431.019951][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.038701][ T982] usb 2-1: config 0 descriptor?? [ 431.148299][T12804] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:0 [ 431.169318][T12804] /dev/rnullb0: Can't lookup blockdev [ 431.218141][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 431.388037][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 431.399463][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.409808][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 431.420142][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 431.430605][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.442264][ T10] usb 1-1: Product: syz [ 431.446558][ T10] usb 1-1: Manufacturer: syz [ 431.451796][ T10] usb 1-1: SerialNumber: syz [ 431.461280][ T982] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 431.482102][ T10] usb 1-1: config 0 descriptor?? [ 431.487368][ T982] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 431.501045][ T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 431.508007][ T982] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 431.515462][ T982] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 431.523145][ T982] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 431.530974][ T982] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 431.541503][ T982] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 431.549026][ T982] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 431.556467][ T982] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 431.581384][ T982] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 431.625216][T12815] MTD: Couldn't look up '/dev/rnullb0': -15 [ 431.673540][T12812] : entered promiscuous mode [ 431.711327][ T10] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 431.736382][ T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 431.762800][ T10] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 431.796965][ T10] usb 2-1: USB disconnect, device number 102 [ 431.918585][ T43] usb 1-1: USB disconnect, device number 90 [ 432.085644][T12825] MTD: Couldn't look up '/dev/rnullb0': -15 [ 432.139577][ T30] audit: type=1400 audit(1752216932.027:13): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="-::}[" pid=12826 comm="syz.3.2415" [ 432.364250][ T43] usb 3-1: USB disconnect, device number 86 [ 432.371633][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2418'. [ 432.471703][T12838] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2419'. [ 432.683868][T12846] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2423'. [ 432.694199][T12846] gfs2: gfs2 mount does not exist [ 432.704357][T12846] /dev/rnullb0: Can't lookup blockdev [ 432.738054][ T5925] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 432.828233][ T10] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 432.887945][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 432.890851][T12856] FAULT_INJECTION: forcing a failure. [ 432.890851][T12856] name failslab, interval 1, probability 0, space 0, times 0 [ 432.902329][ T5925] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 432.908325][T12856] CPU: 1 UID: 0 PID: 12856 Comm: syz.0.2427 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 432.908350][T12856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.908360][T12856] Call Trace: [ 432.908368][T12856] [ 432.908376][T12856] dump_stack_lvl+0x189/0x250 [ 432.908405][T12856] ? __pfx____ratelimit+0x10/0x10 [ 432.908428][T12856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.908452][T12856] ? __pfx__printk+0x10/0x10 [ 432.908481][T12856] ? __pfx___might_resched+0x10/0x10 [ 432.908508][T12856] should_fail_ex+0x414/0x560 [ 432.908539][T12856] should_failslab+0xa8/0x100 [ 432.908559][T12856] __kmalloc_cache_noprof+0x70/0x3d0 [ 432.908583][T12856] ? percpu_ref_init+0xc5/0x360 [ 432.908607][T12856] ? __pfx_nfsd_net_free+0x10/0x10 [ 432.908624][T12856] percpu_ref_init+0xc5/0x360 [ 432.908649][T12856] nfsd_create_serv+0x11f/0x840 [ 432.908671][T12856] ? stack_depot_save_flags+0x40/0x900 [ 432.908693][T12856] ? __pfx_nfsd_create_serv+0x10/0x10 [ 432.908709][T12856] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 432.908733][T12856] ? __pfx___mutex_lock+0x10/0x10 [ 432.908757][T12856] ? __asan_memset+0x22/0x50 [ 432.908780][T12856] ? ____sys_sendmsg+0x505/0x830 [ 432.908802][T12856] ? ___sys_sendmsg+0x21f/0x2a0 [ 432.908815][T12856] ? __x64_sys_sendmsg+0x19b/0x260 [ 432.908842][T12856] nfsd_nl_listener_set_doit+0x13f/0x1690 [ 432.908873][T12856] ? __pfx___nla_validate_parse+0x10/0x10 [ 432.908913][T12856] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 432.908940][T12856] ? __nla_parse+0x40/0x60 [ 432.908962][T12856] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 432.908989][T12856] genl_family_rcv_msg_doit+0x215/0x300 [ 432.909015][T12856] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 432.909046][T12856] ? bpf_lsm_capable+0x9/0x20 [ 432.909067][T12856] ? security_capable+0x7e/0x2e0 [ 432.909098][T12856] genl_rcv_msg+0x60e/0x790 [ 432.909122][T12856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.909138][T12856] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 432.909174][T12856] netlink_rcv_skb+0x205/0x470 [ 432.909197][T12856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.909216][T12856] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.909255][T12856] ? down_read+0x1ad/0x2e0 [ 432.909281][T12856] genl_rcv+0x28/0x40 [ 432.909296][T12856] netlink_unicast+0x759/0x8e0 [ 432.909328][T12856] netlink_sendmsg+0x805/0xb30 [ 432.909361][T12856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.909387][T12856] ? aa_sock_msg_perm+0xf1/0x1d0 [ 432.909413][T12856] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.909432][T12856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.909455][T12856] __sock_sendmsg+0x219/0x270 [ 432.909478][T12856] ____sys_sendmsg+0x505/0x830 [ 432.909509][T12856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.909543][T12856] ? import_iovec+0x74/0xa0 [ 432.909572][T12856] ___sys_sendmsg+0x21f/0x2a0 [ 432.909591][T12856] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.909646][T12856] ? __fget_files+0x2a/0x420 [ 432.909664][T12856] ? __fget_files+0x3a0/0x420 [ 432.909694][T12856] __x64_sys_sendmsg+0x19b/0x260 [ 432.909714][T12856] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.909741][T12856] ? __pfx_ksys_write+0x10/0x10 [ 432.909755][T12856] ? rcu_is_watching+0x15/0xb0 [ 432.909782][T12856] ? do_syscall_64+0xbe/0x3b0 [ 432.909808][T12856] do_syscall_64+0xfa/0x3b0 [ 432.909828][T12856] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.909849][T12856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.909865][T12856] ? clear_bhb_loop+0x60/0xb0 [ 432.909886][T12856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.909902][T12856] RIP: 0033:0x7fd328d8e929 [ 432.909918][T12856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.909933][T12856] RSP: 002b:00007fd329c94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.909953][T12856] RAX: ffffffffffffffda RBX: 00007fd328fb5fa0 RCX: 00007fd328d8e929 [ 432.909966][T12856] RDX: 0000000004000054 RSI: 0000200000000040 RDI: 0000000000000008 [ 432.909977][T12856] RBP: 00007fd329c94090 R08: 0000000000000000 R09: 0000000000000000 [ 432.909989][T12856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.909999][T12856] R13: 0000000000000000 R14: 00007fd328fb5fa0 R15: 00007ffdbd6001f8 [ 432.910028][T12856] [ 433.345234][ T5925] usb 2-1: config 0 has no interface number 0 [ 433.345290][ T5925] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.345317][ T5925] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.345360][ T5925] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 433.345383][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.348664][ T5925] usb 2-1: config 0 descriptor?? [ 433.422600][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 433.456622][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 433.476709][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.490090][ T10] usb 3-1: Product: syz [ 433.494364][ T10] usb 3-1: Manufacturer: syz [ 433.499322][ T10] usb 3-1: SerialNumber: syz [ 433.499736][T12859] syzkaller1: entered promiscuous mode [ 433.516202][T12859] syzkaller1: entered allmulticast mode [ 433.518722][ T10] usb 3-1: config 0 descriptor?? [ 433.559935][T12861] /dev/rnullb0: Can't lookup blockdev [ 433.732077][T12870] /dev/rnullb0: Can't lookup blockdev [ 433.962412][ T5925] uclogic 0003:28BD:0094.0049: pen parameters not found [ 433.971089][ T5925] uclogic 0003:28BD:0094.0049: interface is invalid, ignoring [ 434.200190][T12840] /dev/rnullb0: Can't lookup blockdev [ 434.230850][ T5925] usb 2-1: USB disconnect, device number 103 [ 434.328097][ T10] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 434.502548][T12893] netlink: 'syz.3.2442': attribute type 10 has an invalid length. [ 434.511791][T12893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2442'. [ 434.526149][T12893] bridge0: port 3(team0) entered blocking state [ 434.532627][T12893] bridge0: port 3(team0) entered forwarding state [ 434.557535][T12893] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.045142][T12914] /dev/rnullb0: Can't lookup blockdev [ 435.089821][ T5943] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 435.259996][ T5943] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 435.272006][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 435.283792][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 435.293717][ T5943] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 435.307154][ T5943] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 435.316322][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.337012][ T5943] usb 1-1: config 0 descriptor?? [ 435.358280][ T43] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 435.382158][T12920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2454'. [ 435.392580][T12920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2454'. [ 435.404685][T12920] /dev/rnullb0: Can't lookup blockdev [ 435.413938][T12920] use of bytesused == 0 is deprecated and will be removed in the future, [ 435.422711][T12920] use the actual size instead. [ 435.520653][ T43] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 435.535615][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.545915][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.565952][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 435.578620][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.587697][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.603031][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 435.612382][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.627090][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.639881][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 435.648341][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.653002][ T984] hid_parser_main: 6 callbacks suppressed [ 435.653020][ T984] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 435.661748][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.681871][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 435.694836][ T984] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 435.701859][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.724674][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.741959][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 435.751588][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.764171][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.777519][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 435.781017][ T5943] plantronics 0003:047F:FFFF.004B: ignoring exceeding usage max [ 435.790186][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.806552][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.818235][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 435.826963][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.836934][ T43] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.850111][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 435.868519][ T5943] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 435.873272][ T43] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 435.901259][ T43] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 435.921310][ T43] usb 4-1: Product: syz [ 435.929207][ T43] usb 4-1: Manufacturer: syz [ 435.936444][ T43] usb 4-1: SerialNumber: syz [ 435.965375][ T43] usb 4-1: config 0 descriptor?? [ 436.045544][ T43] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1 [ 436.172301][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 436.199474][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 436.206241][ T10] usb 3-1: media controller created [ 436.282506][T12931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.291430][ T10] usb 3-1: dvb_usb_v2: MAC address: e3:59:87:04:2c:ab [ 436.302234][T12931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.353074][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.485756][ T10] DVB: Unable to find symbol drxk_attach() [ 436.675084][ T10] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -22 [ 436.705112][ T10] usb 3-1: USB disconnect, device number 87 [ 437.214109][T12947] program syz.2.2459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.448016][ T984] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 437.609458][ T984] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 437.618118][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.661403][ T984] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 437.678039][ T984] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 437.703013][ T984] usb 2-1: Manufacturer: syz [ 437.716476][ T984] usb 2-1: config 0 descriptor?? [ 437.728148][T12949] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2460'. [ 437.895951][ T10] usb 1-1: USB disconnect, device number 91 [ 437.944790][T12945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.982587][T12945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.038027][ T984] rc_core: IR keymap rc-hauppauge not found [ 438.048172][ T984] Registered IR keymap rc-empty [ 438.064979][ T984] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 438.098434][ T984] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30 [ 438.239732][ T984] usb 4-1: USB disconnect, device number 112 [ 438.284465][ T984] yurex 4-1:0.0: USB YUREX #1 now disconnected [ 438.839166][T12974] /dev/rnullb0: Can't lookup blockdev [ 439.851304][T12998] /dev/rnullb0: Can't lookup blockdev [ 440.106317][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.710064][T13011] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 440.723071][T13011] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 440.742046][T13011] overlayfs: conflicting lowerdir path [ 440.806942][T13011] sctp: [Deprecated]: syz.0.2476 (pid 13011) Use of int in max_burst socket option deprecated. [ 440.806942][T13011] Use struct sctp_assoc_value instead [ 441.413377][ T6779] usb 2-1: USB disconnect, device number 104 [ 441.532395][T13018] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2478'. [ 441.671575][ T5925] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 441.727316][ T30] audit: type=1800 audit(1752216941.607:14): pid=13025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2481" name="/newroot/572/file0" dev="tmpfs" ino=3153 res=0 errno=0 [ 441.831934][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 441.845268][ T5925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.860233][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.866024][T13033] syzkaller0: entered promiscuous mode [ 441.875136][T13033] syzkaller0: entered allmulticast mode [ 441.876102][ T5925] usb 3-1: config 0 descriptor?? [ 441.882747][T13033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2483'. [ 441.904312][ T5925] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 441.987926][ T6779] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 442.138752][ T6779] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 442.147467][ T6779] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 442.157666][ T6779] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 442.169212][ T6779] usb 2-1: config 0 interface 0 has no altsetting 0 [ 442.177051][ T6779] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 442.186402][ T6779] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 442.198465][ T6779] usb 2-1: config 0 interface 0 has no altsetting 0 [ 442.205936][ T6779] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 442.215028][ T6779] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 442.226114][ T6779] usb 2-1: config 0 interface 0 has no altsetting 0 [ 442.233845][ T6779] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 442.242843][ T6779] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 442.253781][ T6779] usb 2-1: config 0 interface 0 has no altsetting 0 [ 442.261757][ T6779] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 442.270867][ T6779] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 442.287738][ T6779] usb 2-1: config 0 interface 0 has no altsetting 0 [ 442.296927][ T6779] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 442.306272][ T6779] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 442.320246][ T6779] usb 2-1: config 0 interface 0 has no altsetting 0 [ 442.327741][ T6779] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 442.337121][ T6779] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 442.348043][ T6779] usb 2-1: config 0 interface 0 has no altsetting 0 [ 442.355634][ T6779] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 442.364723][ T6779] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 442.375873][ T6779] usb 2-1: config 0 interface 0 has no altsetting 0 [ 442.384446][ T6779] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 442.394586][ T6779] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 442.403004][ T6779] usb 2-1: Product: syz [ 442.407194][ T6779] usb 2-1: Manufacturer: syz [ 442.411908][ T6779] usb 2-1: SerialNumber: syz [ 442.419194][ T6779] usb 2-1: config 0 descriptor?? [ 442.434020][ T6779] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 442.630880][T13031] syzkaller0: left allmulticast mode [ 442.636323][T13031] syzkaller0: left promiscuous mode [ 442.755102][ T6779] usb 2-1: USB disconnect, device number 105 [ 442.766547][ T6779] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 443.042828][T13054] FAULT_INJECTION: forcing a failure. [ 443.042828][T13054] name failslab, interval 1, probability 0, space 0, times 0 [ 443.056426][T13054] CPU: 1 UID: 0 PID: 13054 Comm: syz.0.2490 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 443.056453][T13054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.056465][T13054] Call Trace: [ 443.056473][T13054] [ 443.056482][T13054] dump_stack_lvl+0x189/0x250 [ 443.056513][T13054] ? __pfx____ratelimit+0x10/0x10 [ 443.056540][T13054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.056566][T13054] ? __pfx__printk+0x10/0x10 [ 443.056600][T13054] ? __pfx___might_resched+0x10/0x10 [ 443.056624][T13054] ? fs_reclaim_acquire+0x7d/0x100 [ 443.056650][T13054] should_fail_ex+0x414/0x560 [ 443.056685][T13054] should_failslab+0xa8/0x100 [ 443.056706][T13054] kmem_cache_alloc_noprof+0x73/0x3c0 [ 443.056733][T13054] ? fuse_get_req+0x7b9/0x10b0 [ 443.056759][T13054] fuse_get_req+0x7b9/0x10b0 [ 443.056775][T13054] ? stack_depot_save_flags+0x40/0x900 [ 443.056809][T13054] ? __pfx_fuse_get_req+0x10/0x10 [ 443.056824][T13054] ? create_new_entry+0x131/0xa20 [ 443.056847][T13054] ? fuse_symlink+0x181/0x1f0 [ 443.056870][T13054] ? vfs_symlink+0x143/0x2f0 [ 443.056888][T13054] ? do_symlinkat+0x1b1/0x3f0 [ 443.056905][T13054] ? __x64_sys_symlinkat+0x95/0xb0 [ 443.056923][T13054] ? do_syscall_64+0xfa/0x3b0 [ 443.056945][T13054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.056979][T13054] __fuse_simple_request+0x2aa/0x18d0 [ 443.057007][T13054] ? rcu_is_watching+0x15/0xb0 [ 443.057033][T13054] ? __pfx___fuse_simple_request+0x10/0x10 [ 443.057059][T13054] ? get_create_ext+0x8db/0xc70 [ 443.057095][T13054] ? __pfx_get_create_ext+0x10/0x10 [ 443.057123][T13054] ? __kasan_kmalloc+0x93/0xb0 [ 443.057162][T13054] create_new_entry+0x291/0xa20 [ 443.057203][T13054] ? __pfx_create_new_entry+0x10/0x10 [ 443.057256][T13054] fuse_symlink+0x181/0x1f0 [ 443.057279][T13054] ? do_raw_spin_unlock+0x122/0x240 [ 443.057312][T13054] ? __pfx_fuse_symlink+0x10/0x10 [ 443.057334][T13054] ? _raw_spin_unlock+0x28/0x50 [ 443.057372][T13054] ? __pfx_apparmor_path_symlink+0x10/0x10 [ 443.057399][T13054] ? make_vfsgid+0x49/0xa0 [ 443.057427][T13054] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 443.057456][T13054] ? inode_permission+0x149/0x470 [ 443.057478][T13054] ? __pfx_fuse_permission+0x10/0x10 [ 443.057500][T13054] ? bpf_lsm_inode_symlink+0x9/0x20 [ 443.057526][T13054] vfs_symlink+0x143/0x2f0 [ 443.057552][T13054] do_symlinkat+0x1b1/0x3f0 [ 443.057576][T13054] ? __pfx_do_symlinkat+0x10/0x10 [ 443.057601][T13054] ? getname_flags+0x1e5/0x540 [ 443.057629][T13054] __x64_sys_symlinkat+0x95/0xb0 [ 443.057652][T13054] do_syscall_64+0xfa/0x3b0 [ 443.057676][T13054] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.057701][T13054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.057719][T13054] ? clear_bhb_loop+0x60/0xb0 [ 443.057743][T13054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.057762][T13054] RIP: 0033:0x7fd328d8e929 [ 443.057780][T13054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.057796][T13054] RSP: 002b:00007fd329c52038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 443.057819][T13054] RAX: ffffffffffffffda RBX: 00007fd328fb6160 RCX: 00007fd328d8e929 [ 443.057832][T13054] RDX: 0000200000000380 RSI: 0000000000000004 RDI: 0000200000000040 [ 443.057845][T13054] RBP: 00007fd329c52090 R08: 0000000000000000 R09: 0000000000000000 [ 443.057857][T13054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.057868][T13054] R13: 0000000000000001 R14: 00007fd328fb6160 R15: 00007ffdbd6001f8 [ 443.057900][T13054] [ 443.616152][T13063] netlink: 'syz.1.2494': attribute type 10 has an invalid length. [ 443.629979][T13063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2494'. [ 443.641542][T13063] team0: entered promiscuous mode [ 443.648222][T13063] team_slave_0: entered promiscuous mode [ 443.654514][T13063] team_slave_1: entered promiscuous mode [ 443.660560][T13063] team0: entered allmulticast mode [ 443.665697][T13063] team_slave_0: entered allmulticast mode [ 443.671628][T13063] team_slave_1: entered allmulticast mode [ 443.682725][T13063] bridge0: port 3(team0) entered blocking state [ 443.689316][T13063] bridge0: port 3(team0) entered disabled state [ 443.704932][T13063] bridge0: port 3(team0) entered blocking state [ 443.711503][T13063] bridge0: port 3(team0) entered forwarding state [ 443.916526][T13073] syzkaller0: entered promiscuous mode [ 443.935354][T13073] syzkaller0: entered allmulticast mode [ 443.953002][T13073] tipc: Started in network mode [ 443.958772][T13073] tipc: Node identity 862f6e8be62e, cluster identity 4711 [ 443.966227][T13073] tipc: Enabled bearer , priority 0 [ 443.975101][T13072] tipc: Resetting bearer [ 443.998536][T13075] /dev/rnullb0: Can't lookup blockdev [ 443.999620][T13072] tipc: Disabling bearer [ 444.220081][ T30] audit: type=1800 audit(1752216944.097:15): pid=13086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2505" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 444.245143][T13086] trusted_key: encrypted_key: master key parameter is missing [ 444.308951][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'. [ 444.484658][ T984] usb 3-1: USB disconnect, device number 88 [ 444.938709][ T24] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 444.947989][ T6779] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 444.998097][ T43] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 445.087988][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 445.098999][ T24] usb 1-1: too many configurations: 138, using maximum allowed: 8 [ 445.109524][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 445.117133][ T24] usb 1-1: can't read configurations, error -61 [ 445.126236][ T6779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.138796][ T6779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.150071][ T6779] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 445.160386][ T6779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.169485][ T43] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 445.180251][ T6779] usb 3-1: config 0 descriptor?? [ 445.212163][ T43] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 445.226155][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 445.236600][ T43] usb 2-1: Product: syz [ 445.240950][ T43] usb 2-1: Manufacturer: syz [ 445.245680][ T43] usb 2-1: SerialNumber: syz [ 445.255030][ T43] usb 2-1: config 0 descriptor?? [ 445.277981][ T24] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 445.437980][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 445.444478][ T24] usb 1-1: too many configurations: 138, using maximum allowed: 8 [ 445.458941][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 445.467784][ T24] usb 1-1: can't read configurations, error -61 [ 445.475183][ T24] usb usb1-port1: attempt power cycle [ 445.485694][T13132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.495217][T13132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.502713][T13114] loop6: detected capacity change from 0 to 2560 [ 445.514307][T13114] buffer_io_error: 138 callbacks suppressed [ 445.514326][T13114] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.533936][T13114] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.543507][T13114] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.555859][T13114] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.565326][T13114] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.575925][T13114] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.584656][T13114] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.593271][T13114] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.601930][T13114] ldm_validate_partition_table(): Disk read failed. [ 445.612848][ T6779] cm6533_jd 0003:0D8C:0022.004C: item fetching failed at offset 0/5 [ 445.613410][T13114] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.631148][T13135] /dev/rnullb0: Can't lookup blockdev [ 445.637077][T13114] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.637097][ T6779] cm6533_jd 0003:0D8C:0022.004C: parse failed [ 445.652531][ T6779] cm6533_jd 0003:0D8C:0022.004C: probe with driver cm6533_jd failed with error -22 [ 445.678385][T13114] Dev loop6: unable to read RDB block 0 [ 445.684929][T13114] loop6: unable to read partition table [ 445.693676][T13114] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 445.714181][ T6779] usb 2-1: USB disconnect, device number 106 [ 445.727995][ T5925] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 445.828382][ T24] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 445.848723][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 445.855011][ T24] usb 1-1: too many configurations: 138, using maximum allowed: 8 [ 445.866309][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 445.875385][ T24] usb 1-1: can't read configurations, error -61 [ 446.010393][ T24] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 446.038602][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 446.044276][ T24] usb 1-1: too many configurations: 138, using maximum allowed: 8 [ 446.056328][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 446.064025][ T24] usb 1-1: can't read configurations, error -61 [ 446.071016][ T24] usb usb1-port1: unable to enumerate USB device [ 446.292003][T13137] /dev/rnullb0: Can't lookup blockdev [ 446.416738][T13143] overlay: Unknown parameter 'fsmagic' [ 446.618201][ T24] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 446.787930][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 446.806087][ T24] usb 2-1: config 0 has an invalid interface number: 13 but max is 0 [ 446.814624][ T24] usb 2-1: config 0 has no interface number 0 [ 446.821099][ T24] usb 2-1: config 0 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 446.831147][ T24] usb 2-1: config 0 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 446.843893][ T24] usb 2-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 446.853794][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.862814][ T24] usb 2-1: Product: syz [ 446.867253][ T24] usb 2-1: Manufacturer: syz [ 446.875153][ T24] usb 2-1: SerialNumber: syz [ 446.885424][ T24] usb 2-1: config 0 descriptor?? [ 446.896710][T13141] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 446.913104][T13141] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 446.924861][ T24] option 2-1:0.13: GSM modem (1-port) converter detected [ 447.127601][T13141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.139785][T13141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.151832][ T10] usb 2-1: USB disconnect, device number 107 [ 447.165967][ T10] option 2-1:0.13: device disconnected [ 447.328645][ T5925] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 447.481470][ T5925] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 447.489779][ T5925] usb 4-1: config 0 has no interface number 0 [ 447.501165][ T5925] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 447.510341][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.522310][ T5925] usb 4-1: Product: syz [ 447.526489][ T5925] usb 4-1: Manufacturer: syz [ 447.531184][ T5925] usb 4-1: SerialNumber: syz [ 447.537781][ T5925] usb 4-1: config 0 descriptor?? [ 447.618276][ T24] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 447.663095][ T5925] usb 3-1: USB disconnect, device number 89 [ 447.758191][ T24] usb 2-1: device descriptor read/64, error -71 [ 447.771097][T13163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.803302][T13163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.815558][T13163] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2529'. [ 447.827352][T13163] /dev/rnullb0: Can't lookup blockdev [ 447.834843][ T6779] usb 4-1: USB disconnect, device number 114 [ 448.028110][ T24] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 448.158061][ T24] usb 2-1: device descriptor read/64, error -71 [ 448.268954][ T24] usb usb2-port1: attempt power cycle [ 448.291163][T13184] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2538'. [ 448.300280][T13184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2538'. [ 448.309642][T13184] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2538'. [ 448.320972][T13184] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2538'. [ 448.413240][T13188] /dev/rnullb0: Can't lookup blockdev [ 448.430238][T13187] FAULT_INJECTION: forcing a failure. [ 448.430238][T13187] name failslab, interval 1, probability 0, space 0, times 0 [ 448.450165][T13187] CPU: 0 UID: 0 PID: 13187 Comm: syz.3.2539 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 448.450192][T13187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.450203][T13187] Call Trace: [ 448.450212][T13187] [ 448.450221][T13187] dump_stack_lvl+0x189/0x250 [ 448.450255][T13187] ? __pfx____ratelimit+0x10/0x10 [ 448.450281][T13187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.450308][T13187] ? __pfx__printk+0x10/0x10 [ 448.450342][T13187] ? __pfx___might_resched+0x10/0x10 [ 448.450372][T13187] should_fail_ex+0x414/0x560 [ 448.450408][T13187] should_failslab+0xa8/0x100 [ 448.450430][T13187] __kmalloc_noprof+0xcb/0x4f0 [ 448.450455][T13187] ? __svc_create+0x659/0x980 [ 448.450488][T13187] __svc_create+0x659/0x980 [ 448.450526][T13187] ? __pfx_nfsd+0x10/0x10 [ 448.450549][T13187] svc_create_pooled+0x59a/0x760 [ 448.450577][T13187] ? __init_swait_queue_head+0xa9/0x150 [ 448.450611][T13187] nfsd_create_serv+0x525/0x840 [ 448.450645][T13187] ? __pfx_nfsd_create_serv+0x10/0x10 [ 448.450664][T13187] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 448.450693][T13187] ? __pfx___mutex_lock+0x10/0x10 [ 448.450722][T13187] ? __asan_memset+0x22/0x50 [ 448.450748][T13187] ? ____sys_sendmsg+0x505/0x830 [ 448.450776][T13187] ? ___sys_sendmsg+0x21f/0x2a0 [ 448.450791][T13187] ? __x64_sys_sendmsg+0x19b/0x260 [ 448.450822][T13187] nfsd_nl_listener_set_doit+0x13f/0x1690 [ 448.450859][T13187] ? __pfx___nla_validate_parse+0x10/0x10 [ 448.450906][T13187] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 448.450939][T13187] ? __nla_parse+0x40/0x60 [ 448.450965][T13187] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 448.450996][T13187] genl_family_rcv_msg_doit+0x215/0x300 [ 448.451025][T13187] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 448.451061][T13187] ? bpf_lsm_capable+0x9/0x20 [ 448.451077][T13187] ? security_capable+0x7e/0x2e0 [ 448.451112][T13187] genl_rcv_msg+0x60e/0x790 [ 448.451140][T13187] ? __pfx_genl_rcv_msg+0x10/0x10 [ 448.451159][T13187] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 448.451201][T13187] netlink_rcv_skb+0x205/0x470 [ 448.451228][T13187] ? __pfx_genl_rcv_msg+0x10/0x10 [ 448.451249][T13187] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 448.451294][T13187] ? down_read+0x1ad/0x2e0 [ 448.451325][T13187] genl_rcv+0x28/0x40 [ 448.451342][T13187] netlink_unicast+0x759/0x8e0 [ 448.451378][T13187] netlink_sendmsg+0x805/0xb30 [ 448.451416][T13187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.451446][T13187] ? aa_sock_msg_perm+0xf1/0x1d0 [ 448.451477][T13187] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 448.451500][T13187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.451527][T13187] __sock_sendmsg+0x219/0x270 [ 448.451554][T13187] ____sys_sendmsg+0x505/0x830 [ 448.451591][T13187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.451631][T13187] ? import_iovec+0x74/0xa0 [ 448.451664][T13187] ___sys_sendmsg+0x21f/0x2a0 [ 448.451686][T13187] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.451748][T13187] ? __fget_files+0x2a/0x420 [ 448.451769][T13187] ? __fget_files+0x3a0/0x420 [ 448.451805][T13187] __x64_sys_sendmsg+0x19b/0x260 [ 448.451828][T13187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.451866][T13187] ? __pfx_ksys_write+0x10/0x10 [ 448.451894][T13187] ? do_syscall_64+0xbe/0x3b0 [ 448.451924][T13187] do_syscall_64+0xfa/0x3b0 [ 448.451948][T13187] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.451973][T13187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.451991][T13187] ? clear_bhb_loop+0x60/0xb0 [ 448.452016][T13187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.452034][T13187] RIP: 0033:0x7ff2cad8e929 [ 448.452052][T13187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.452069][T13187] RSP: 002b:00007ff2cbbd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.452091][T13187] RAX: ffffffffffffffda RBX: 00007ff2cafb5fa0 RCX: 00007ff2cad8e929 [ 448.452104][T13187] RDX: 0000000004000054 RSI: 0000200000000040 RDI: 0000000000000008 [ 448.452117][T13187] RBP: 00007ff2cbbd4090 R08: 0000000000000000 R09: 0000000000000000 [ 448.452129][T13187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.452140][T13187] R13: 0000000000000000 R14: 00007ff2cafb5fa0 R15: 00007fff26c505b8 [ 448.452175][T13187] [ 448.927934][ T24] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 448.954739][ T24] usb 2-1: device descriptor read/8, error -71 [ 449.135257][T13202] syzkaller1: entered promiscuous mode [ 449.143060][T13202] syzkaller1: entered allmulticast mode [ 449.209560][ T24] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 449.234602][ T24] usb 2-1: device descriptor read/8, error -71 [ 449.240981][ T6779] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 449.268002][ T43] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 449.368305][ T24] usb usb2-port1: unable to enumerate USB device [ 449.419736][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 449.428809][ T6779] usb 4-1: unable to get BOS descriptor or descriptor too short [ 449.437809][ T43] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 449.456174][ T43] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 449.468999][ T6779] usb 4-1: config 1 has an invalid interface number: 255 but max is 1 [ 449.477201][ T6779] usb 4-1: config 1 has no interface number 1 [ 449.486481][ T6779] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 449.500470][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 449.507246][ T6779] usb 4-1: config 1 interface 0 has no altsetting 0 [ 449.508026][ T5943] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 449.516220][ T43] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 449.531129][ T6779] usb 4-1: config 1 interface 255 has no altsetting 0 [ 449.553224][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.569315][ T6779] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 449.578804][ T6779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.586828][ T6779] usb 4-1: Product: syz [ 449.594451][ T43] usb 1-1: Product: syz [ 449.601355][ T43] usb 1-1: Manufacturer: syz [ 449.605982][ T43] usb 1-1: SerialNumber: syz [ 449.612200][ T6779] usb 4-1: Manufacturer: syz [ 449.616851][ T6779] usb 4-1: SerialNumber: syz [ 449.624778][ T43] usb 1-1: config 0 descriptor?? [ 449.687986][ T5943] usb 3-1: Using ep0 maxpacket: 8 [ 449.695105][ T5943] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 449.705073][ T5943] usb 3-1: config 2 has no interface number 0 [ 449.727264][ T5943] usb 3-1: config 2 interface 31 has no altsetting 0 [ 449.736952][ T5943] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 449.746607][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.757745][ T5943] usb 3-1: Product: syz [ 449.762088][ T5943] usb 3-1: Manufacturer: syz [ 449.770928][ T5943] usb 3-1: SerialNumber: syz [ 449.790404][T13212] /dev/rnullb0: Can't lookup blockdev [ 449.802699][ T5943] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 449.848193][ T43] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33 [ 450.048764][ T5925] usb 3-1: USB disconnect, device number 90 [ 450.061471][T13194] netlink: 368 bytes leftover after parsing attributes in process `syz.0.2542'. [ 450.096875][ T5943] usb 1-1: USB disconnect, device number 96 [ 450.096891][ C1] synaptics_usb 1-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 450.144375][ T6779] smsusb:smsusb_probe: board id=8, interface number 0 [ 450.174924][ T6779] smsusb:smsusb_probe: board id=8, interface number 255 [ 450.199271][ T6779] usb 4-1: USB disconnect, device number 115 [ 450.343868][T13229] /dev/rnullb0: Can't lookup blockdev [ 450.426128][T13233] netlink: 'syz.1.2555': attribute type 10 has an invalid length. [ 450.434212][T13233] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2555'. [ 450.598415][T13237] FAULT_INJECTION: forcing a failure. [ 450.598415][T13237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.623780][T13237] CPU: 1 UID: 0 PID: 13237 Comm: syz.1.2556 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 450.623809][T13237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.623820][T13237] Call Trace: [ 450.623828][T13237] [ 450.623837][T13237] dump_stack_lvl+0x189/0x250 [ 450.623879][T13237] ? __pfx____ratelimit+0x10/0x10 [ 450.623906][T13237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.623932][T13237] ? __pfx__printk+0x10/0x10 [ 450.623972][T13237] should_fail_ex+0x414/0x560 [ 450.624005][T13237] _copy_to_user+0x31/0xb0 [ 450.624036][T13237] simple_read_from_buffer+0xe1/0x170 [ 450.624061][T13237] proc_fail_nth_read+0x1df/0x250 [ 450.624092][T13237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.624120][T13237] ? rw_verify_area+0x2a6/0x4d0 [ 450.624138][T13237] ? __lock_acquire+0xab9/0xd20 [ 450.624157][T13237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.624184][T13237] vfs_read+0x200/0x980 [ 450.624209][T13237] ? __pfx___mutex_lock+0x10/0x10 [ 450.624234][T13237] ? __pfx_vfs_read+0x10/0x10 [ 450.624256][T13237] ? __fget_files+0x2a/0x420 [ 450.624284][T13237] ? __fget_files+0x3a0/0x420 [ 450.624304][T13237] ? __fget_files+0x2a/0x420 [ 450.624336][T13237] ksys_read+0x145/0x250 [ 450.624357][T13237] ? __pfx_ksys_read+0x10/0x10 [ 450.624373][T13237] ? rcu_is_watching+0x15/0xb0 [ 450.624403][T13237] ? do_syscall_64+0xbe/0x3b0 [ 450.624434][T13237] do_syscall_64+0xfa/0x3b0 [ 450.624456][T13237] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.624481][T13237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.624499][T13237] ? clear_bhb_loop+0x60/0xb0 [ 450.624523][T13237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.624541][T13237] RIP: 0033:0x7fb2a638d33c [ 450.624560][T13237] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 450.624576][T13237] RSP: 002b:00007fb2a7119030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.624598][T13237] RAX: ffffffffffffffda RBX: 00007fb2a65b6160 RCX: 00007fb2a638d33c [ 450.624611][T13237] RDX: 000000000000000f RSI: 00007fb2a71190a0 RDI: 0000000000000005 [ 450.624623][T13237] RBP: 00007fb2a7119090 R08: 0000000000000000 R09: 0000000000000000 [ 450.624635][T13237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.624647][T13237] R13: 0000000000000001 R14: 00007fb2a65b6160 R15: 00007ffe863b0728 [ 450.624679][T13237] [ 450.636954][T13239] ./cgroup: Can't lookup blockdev [ 451.188061][ T6779] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 451.279702][T13258] binder: BINDER_SET_CONTEXT_MGR already set [ 451.285743][T13258] binder: 13257:13258 ioctl 4018620d 200000000040 returned -16 [ 451.390971][ T6779] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 451.428100][ T6779] usb 1-1: config 150 has an invalid descriptor of length 255, skipping remainder of the config [ 451.454916][T13260] syzkaller1: entered promiscuous mode [ 451.460526][T13260] syzkaller1: entered allmulticast mode [ 451.476194][T13262] syz.2.2568 (13262): /proc/13261/oom_adj is deprecated, please use /proc/13261/oom_score_adj instead. [ 451.477366][ T6779] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 451.548301][ T6779] usb 1-1: config 150 has no interface number 0 [ 451.554630][ T6779] usb 1-1: config 150 interface 204 has no altsetting 0 [ 451.587947][ T6779] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 451.597041][ T6779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.624175][ T6779] usb 1-1: Product: syz [ 451.633558][ T6779] usb 1-1: Manufacturer: syz [ 451.651966][ T6779] usb 1-1: SerialNumber: syz [ 451.762830][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 451.918747][ T10] usb 3-1: device descriptor read/64, error -71 [ 451.931381][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 451.942836][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 451.951563][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 451.964439][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 451.972448][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 452.168303][ T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 452.215908][T13275] netlink: 'syz.1.2571': attribute type 1 has an invalid length. [ 452.226776][T13275] netlink: 624 bytes leftover after parsing attributes in process `syz.1.2571'. [ 452.308007][ T10] usb 3-1: device descriptor read/64, error -71 [ 452.328550][T13267] chnl_net:caif_netlink_parms(): no params data found [ 452.419859][ T10] usb usb3-port1: attempt power cycle [ 452.469232][T13267] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.476469][T13267] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.484652][T13267] bridge_slave_0: entered allmulticast mode [ 452.493998][T13267] bridge_slave_0: entered promiscuous mode [ 452.495585][T13282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.503644][T13267] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.518019][T13267] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.525282][T13267] bridge_slave_1: entered allmulticast mode [ 452.535421][T13267] bridge_slave_1: entered promiscuous mode [ 452.561421][T13282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.612898][T13267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.625084][T13267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.679156][T13267] team0: Port device team_slave_0 added [ 452.689698][T13267] team0: Port device team_slave_1 added [ 452.741718][T13267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.748905][T13267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.775921][T13267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.787236][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 452.799446][T13267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.806532][T13267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.833242][T13267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.846247][ T10] usb 3-1: device descriptor read/8, error -71 [ 452.936295][T13267] hsr_slave_0: entered promiscuous mode [ 452.949329][T13267] hsr_slave_1: entered promiscuous mode [ 453.088130][ T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 453.118774][ T10] usb 3-1: device descriptor read/8, error -71 [ 453.233275][ T10] usb usb3-port1: unable to enumerate USB device [ 453.273697][T13267] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.395622][T13267] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.491253][T13267] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.567755][T13267] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.674145][T13294] netlink: 'syz.1.2575': attribute type 7 has an invalid length. [ 453.684346][T13294] netlink: 'syz.1.2575': attribute type 5 has an invalid length. [ 453.692660][T13294] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2575'. [ 453.852639][T13267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 453.878227][T13267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 453.929604][ T10] usb 1-1: USB disconnect, device number 97 [ 453.933103][T13267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 453.961502][T13267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 454.019298][T12278] Bluetooth: hci1: command tx timeout [ 454.207258][T13309] FAULT_INJECTION: forcing a failure. [ 454.207258][T13309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.223993][T13267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.232750][T13309] CPU: 1 UID: 0 PID: 13309 Comm: syz.0.2579 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 454.232777][T13309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 454.232788][T13309] Call Trace: [ 454.232797][T13309] [ 454.232806][T13309] dump_stack_lvl+0x189/0x250 [ 454.232848][T13309] ? __pfx____ratelimit+0x10/0x10 [ 454.232874][T13309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.232900][T13309] ? __pfx__printk+0x10/0x10 [ 454.232940][T13309] should_fail_ex+0x414/0x560 [ 454.232976][T13309] _copy_to_user+0x31/0xb0 [ 454.233007][T13309] simple_read_from_buffer+0xe1/0x170 [ 454.233035][T13309] proc_fail_nth_read+0x1df/0x250 [ 454.233066][T13309] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.233094][T13309] ? rw_verify_area+0x2a6/0x4d0 [ 454.233112][T13309] ? __lock_acquire+0xab9/0xd20 [ 454.233133][T13309] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.233160][T13309] vfs_read+0x200/0x980 [ 454.233186][T13309] ? __pfx___mutex_lock+0x10/0x10 [ 454.233212][T13309] ? __pfx_vfs_read+0x10/0x10 [ 454.233233][T13309] ? __fget_files+0x2a/0x420 [ 454.233261][T13309] ? __fget_files+0x3a0/0x420 [ 454.233282][T13309] ? __fget_files+0x2a/0x420 [ 454.233315][T13309] ksys_read+0x145/0x250 [ 454.233338][T13309] ? __pfx_ksys_read+0x10/0x10 [ 454.233355][T13309] ? rcu_is_watching+0x15/0xb0 [ 454.233386][T13309] ? do_syscall_64+0xbe/0x3b0 [ 454.233416][T13309] do_syscall_64+0xfa/0x3b0 [ 454.233440][T13309] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.233464][T13309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.233484][T13309] ? clear_bhb_loop+0x60/0xb0 [ 454.233508][T13309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.233526][T13309] RIP: 0033:0x7fd328d8d33c [ 454.233544][T13309] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 454.233561][T13309] RSP: 002b:00007fd329c94030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 454.233584][T13309] RAX: ffffffffffffffda RBX: 00007fd328fb5fa0 RCX: 00007fd328d8d33c [ 454.233599][T13309] RDX: 000000000000000f RSI: 00007fd329c940a0 RDI: 0000000000000004 [ 454.233611][T13309] RBP: 00007fd329c94090 R08: 0000000000000000 R09: 0000000000000000 [ 454.233623][T13309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.233635][T13309] R13: 0000000000000000 R14: 00007fd328fb5fa0 R15: 00007ffdbd6001f8 [ 454.233668][T13309] [ 454.485938][T13267] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.535050][T13267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 454.545490][T13267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 454.598967][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.606097][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.656005][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.663256][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.085686][T13267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.242406][T13267] veth0_vlan: entered promiscuous mode [ 455.283268][T13267] veth1_vlan: entered promiscuous mode [ 455.333755][T13267] veth0_macvtap: entered promiscuous mode [ 455.334449][T13339] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2591'. [ 455.340089][ T984] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 455.356550][T13267] veth1_macvtap: entered promiscuous mode [ 455.409848][T13267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.437263][T13267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.455229][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.472498][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.493465][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.507443][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.520279][ T984] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 455.532272][ T984] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.550418][ T984] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 455.587758][ T984] usb 1-1: config 0 interface 0 has no altsetting 0 [ 455.609139][ T984] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.624496][T13345] syzkaller1: entered promiscuous mode [ 455.626325][ T984] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 455.641475][T13345] syzkaller1: entered allmulticast mode [ 455.666049][ T984] usb 1-1: config 0 interface 0 has no altsetting 0 [ 455.689164][ T984] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.706201][ T984] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 455.728065][ T984] usb 1-1: config 0 interface 0 has no altsetting 0 [ 455.737793][ T984] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.758052][ T984] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 455.765775][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.777623][ T984] usb 1-1: config 0 interface 0 has no altsetting 0 [ 455.795750][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.799026][ T984] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.828025][ T984] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 455.858169][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.858248][ T984] usb 1-1: config 0 interface 0 has no altsetting 0 [ 455.866005][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.904586][ T984] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.925442][ T984] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 455.946913][ T984] usb 1-1: config 0 interface 0 has no altsetting 0 [ 455.959441][ T984] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.980913][ T984] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.018052][ T984] usb 1-1: config 0 interface 0 has no altsetting 0 [ 456.045475][ T984] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.071298][ T984] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.092071][T13350] /dev/rnullb0: Can't lookup blockdev [ 456.098197][T12278] Bluetooth: hci1: command tx timeout [ 456.110289][ T984] usb 1-1: config 0 interface 0 has no altsetting 0 [ 456.179392][ T984] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 456.198065][ T984] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 456.267958][ T984] usb 1-1: Product: syz [ 456.272181][ T984] usb 1-1: Manufacturer: syz [ 456.276795][ T984] usb 1-1: SerialNumber: syz [ 456.330172][ T984] usb 1-1: config 0 descriptor?? [ 456.371524][ T984] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 456.589043][ T24] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 456.738345][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 456.750603][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 456.768019][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.780674][ T24] usb 3-1: config 0 descriptor?? [ 456.790362][ T24] gspca_main: sq930x-2.14.0 probing 041e:403c [ 457.316183][T13380] binder: BINDER_SET_CONTEXT_MGR already set [ 457.325967][T13380] binder: 13379:13380 ioctl 4018620d 200000000040 returned -16 [ 457.699234][T13393] syzkaller0: entered promiscuous mode [ 457.704788][T13393] syzkaller0: entered allmulticast mode [ 457.747253][T13393] tipc: Started in network mode [ 457.757089][T13393] tipc: Node identity b690ca4c876b, cluster identity 4711 [ 457.776783][T13393] tipc: Enabled bearer , priority 0 [ 457.796910][T13391] tipc: Resetting bearer [ 457.808929][T13355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.828728][T13391] tipc: Disabling bearer [ 457.831790][T13355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.864674][T13355] netlink: 'syz.2.2595': attribute type 32 has an invalid length. [ 457.951945][T13400] usb usb8: usbfs: process 13400 (syz.2.2595) did not claim interface 0 before use [ 457.966634][T13400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.975773][T13400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.154301][ T5943] usb 1-1: USB disconnect, device number 98 [ 458.190761][T12278] Bluetooth: hci1: command tx timeout [ 458.190988][T13400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.205954][ T5943] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 458.220275][ T24] gspca_sq930x: ucbus_write failed -110 [ 458.225912][ T24] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 458.228471][T13400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.239156][T13405] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2615'. [ 458.319339][ T984] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 458.478782][ T984] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 458.513263][ T984] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 458.527943][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 458.536165][ T984] usb 4-1: Product: syz [ 458.558039][ T984] usb 4-1: Manufacturer: syz [ 458.562683][ T984] usb 4-1: SerialNumber: syz [ 458.589291][ T984] usb 4-1: config 0 descriptor?? [ 458.604309][T13414] /dev/rnullb0: Can't lookup blockdev [ 458.810552][ T984] usb 4-1: bad CDC descriptors [ 458.832713][ T984] usb 4-1: USB disconnect, device number 116 [ 459.444588][ T24] usb 3-1: USB disconnect, device number 95 [ 459.585802][ T6779] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 459.625923][ T6779] hid-generic 0000:0000:0000.004D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 459.761945][T13440] /dev/rnullb0: Can't lookup blockdev [ 459.799173][T13441] /dev/rnullb0: Can't lookup blockdev [ 460.172513][T13451] mkiss: ax0: crc mode is auto. [ 460.259014][T12278] Bluetooth: hci1: command tx timeout [ 460.345517][T13459] fuse: Bad value for 'user_id' [ 460.368057][T13459] fuse: Bad value for 'user_id' [ 460.386808][T13458] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 460.525444][ T6779] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 460.680124][ T6779] usb 1-1: device descriptor read/64, error -71 [ 460.948749][ T6779] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 461.148262][ T6779] usb 1-1: device descriptor read/64, error -71 [ 461.258480][ T6779] usb usb1-port1: attempt power cycle [ 461.288053][ T984] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 461.417933][ T984] usb 2-1: device descriptor read/64, error -71 [ 461.599892][ T6779] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 461.635019][ T6779] usb 1-1: device descriptor read/8, error -71 [ 461.658357][ T984] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 461.725920][T13494] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 461.798921][ T984] usb 2-1: device descriptor read/64, error -71 [ 461.898188][ T6779] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 461.908578][ T984] usb usb2-port1: attempt power cycle [ 461.929136][ T6779] usb 1-1: device descriptor read/8, error -71 [ 461.987958][ T43] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 462.040877][ T6779] usb usb1-port1: unable to enumerate USB device [ 462.047974][ T982] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 462.150105][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.161392][ T43] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 462.170420][ T43] usb 3-1: config 1 has no interface number 1 [ 462.176531][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 462.189692][ T43] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 462.202308][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.208096][ T982] usb 4-1: Using ep0 maxpacket: 32 [ 462.211398][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.223253][ T982] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 462.224499][ T43] usb 3-1: Product: syz [ 462.237258][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 462.240335][ T43] usb 3-1: Manufacturer: syz [ 462.251729][ T984] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 462.256188][ T43] usb 3-1: SerialNumber: syz [ 462.265980][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 462.282362][ T982] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 462.287229][T13497] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 462.292729][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.312248][ T984] usb 2-1: device descriptor read/8, error -71 [ 462.321739][ T982] usb 4-1: config 0 descriptor?? [ 462.327704][T13500] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 462.341833][ T982] hub 4-1:0.0: USB hub found [ 462.519601][ T43] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 462.527626][ T43] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 462.540197][ T982] hub 4-1:0.0: 2 ports detected [ 462.558726][ T984] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 462.577237][ T43] usb 3-1: USB disconnect, device number 96 [ 462.594703][ T984] usb 2-1: device descriptor read/8, error -71 [ 462.629382][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.719020][ T984] usb usb2-port1: unable to enumerate USB device [ 463.437982][ T982] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 463.592925][ T982] usb 3-1: too many configurations: 227, using maximum allowed: 8 [ 463.614769][ T982] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 463.624938][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.646563][ T982] usb 3-1: config 0 descriptor?? [ 463.656936][ T982] pwc: Samsung MPC-C10 USB webcam detected. [ 463.667945][ T982] pwc: Warning: more than 1 configuration available. [ 463.870465][ T982] pwc: send_video_command error -71 [ 463.870486][ T982] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 463.870709][ T982] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 463.875713][ T982] usb 3-1: USB disconnect, device number 97 [ 464.040638][T13508] /dev/rnullb0: Can't lookup blockdev [ 464.193225][T13515] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2655'. [ 464.655173][T13521] binder: 13520:13521 ioctl c018620b 200000000000 returned -14 [ 465.065328][ T5925] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 465.147731][ T10] usb 4-1: USB disconnect, device number 117 [ 465.158024][ T982] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 465.293309][T13534] syzkaller1: entered promiscuous mode [ 465.300592][T13534] syzkaller1: entered allmulticast mode [ 465.309539][ T5925] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 465.317179][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 465.325441][ T982] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 465.348607][ T982] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 465.361462][ T982] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 465.366518][T13535] block device autoloading is deprecated and will be removed. [ 465.373932][ T982] usb 2-1: Product: syz [ 465.381953][ T982] usb 2-1: Manufacturer: syz [ 465.386580][ T982] usb 2-1: SerialNumber: syz [ 465.431218][T13535] /dev/rnullb0: Can't lookup blockdev [ 465.445006][T13536] /dev/rnullb0: Can't lookup blockdev [ 465.485865][ T5925] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 465.495474][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.516596][ T5925] usb 3-1: config 0 descriptor?? [ 465.524301][ T5925] cp210x 3-1:0.0: cp210x converter detected [ 465.603165][ T982] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 465.611647][ T982] usb 2-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 465.625596][ T982] usb 2-1: Handspring Visor / Palm OS: port 64, is for HotSync use [ 465.634873][ T982] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 465.839333][ T982] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 465.852800][ T982] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 465.865287][ T982] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 465.883811][ T982] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 465.897613][ T982] usb 2-1: USB disconnect, device number 116 [ 465.911192][ T982] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 465.924625][ T982] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 465.934593][ T5925] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 465.950433][ T982] visor 2-1:1.0: device disconnected [ 466.173559][ T5925] usb 3-1: cp210x converter now attached to ttyUSB0 [ 466.374588][ T6779] usb 3-1: USB disconnect, device number 98 [ 466.388575][ T6779] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 466.422112][ T6779] cp210x 3-1:0.0: device disconnected [ 467.077982][ T5925] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 467.188884][T13573] netlink: 'syz.0.2673': attribute type 10 has an invalid length. [ 467.214990][T13573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2673'. [ 467.233373][T13573] team0: entered promiscuous mode [ 467.248318][T13573] team_slave_0: entered promiscuous mode [ 467.258098][T13573] team_slave_1: entered promiscuous mode [ 467.264342][T13573] bridge0: port 3(team0) entered blocking state [ 467.286359][T13573] bridge0: port 3(team0) entered disabled state [ 467.293707][ T5925] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 467.303265][T13573] team0: entered allmulticast mode [ 467.308907][T13573] team_slave_0: entered allmulticast mode [ 467.314788][T13573] team_slave_1: entered allmulticast mode [ 467.324954][T13573] bridge0: port 3(team0) entered blocking state [ 467.328821][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.331406][T13573] bridge0: port 3(team0) entered forwarding state [ 467.369037][ T5925] usb 4-1: config 0 descriptor?? [ 467.396969][ T5925] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 467.621958][ T5925] gp8psk: usb in 128 operation failed. [ 467.836430][ T5925] gp8psk: usb in 146 operation failed. [ 467.843588][ T5925] gp8psk: failed to get FW version [ 467.947112][T13598] netlink: 'syz.1.2683': attribute type 7 has an invalid length. [ 467.970221][T13598] netlink: 'syz.1.2683': attribute type 5 has an invalid length. [ 467.982527][ T984] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 467.997887][T13598] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2683'. [ 468.083326][T13554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.100394][T13554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.122568][T13554] MTD: Couldn't look up '/dev/rnullb0': -15 [ 468.188028][ T984] usb 1-1: Using ep0 maxpacket: 16 [ 468.201236][ T984] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 468.228686][T13600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2684'. [ 468.286784][ T984] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 468.308657][ T5925] gp8psk: usb in 149 operation failed. [ 468.314172][ T5925] gp8psk: failed to get FPGA version [ 468.319800][ T984] usb 1-1: config 0 interface 0 has no altsetting 0 [ 468.326587][ T5925] gp8psk: usb in 138 operation failed. [ 468.333756][ T984] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 0.00 [ 468.343207][ T5925] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 468.367154][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 468.384041][ T984] usb 1-1: SerialNumber: syz [ 468.388953][ T5925] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 468.405885][ T5925] usb 4-1: USB disconnect, device number 118 [ 468.413208][ T984] usb 1-1: config 0 descriptor?? [ 468.419165][T13591] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 468.431161][T13591] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 468.554977][ T5985] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 468.593499][ T5985] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 468.610139][ T984] rc_core: IR keymap rc-hauppauge not found [ 468.619091][ T984] Registered IR keymap rc-empty [ 468.647942][ T984] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 468.666431][T13591] /dev/rnullb0: Can't lookup blockdev [ 468.681618][ T984] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 468.755253][ T984] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 468.791133][ T984] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input37 [ 468.830602][ T984] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 468.865033][ T984] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 468.901097][ T984] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 468.945696][ T984] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 468.978552][ T984] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.012586][ T984] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.053325][ T984] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.063539][T13615] /dev/rnullb0: Can't lookup blockdev [ 469.092270][ T984] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.128302][ T984] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.169834][ T984] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 469.211716][ T984] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 469.238245][ T984] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 469.262968][ T984] usb 1-1: USB disconnect, device number 103 [ 469.438427][ T5925] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 469.505336][T13623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.556437][T13625] 9pnet_fd: Insufficient options for proto=fd [ 469.620677][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2694'. [ 469.659474][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 469.716215][T13631] /dev/rnullb0: Can't lookup blockdev [ 469.729513][ T5925] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 469.752647][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.781634][ T5925] usb 3-1: Product: syz [ 469.785847][ T5925] usb 3-1: Manufacturer: syz [ 469.798004][ T5925] usb 3-1: SerialNumber: syz [ 469.821696][ T5925] usb 3-1: config 0 descriptor?? [ 469.845944][T13634] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 469.879431][T13634] netlink: 624 bytes leftover after parsing attributes in process `syz.3.2697'. [ 470.008062][ T984] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 470.051467][ T5925] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 470.061751][T13638] syzkaller1: entered promiscuous mode [ 470.067253][T13638] syzkaller1: entered allmulticast mode [ 470.191992][ T984] usb 1-1: Using ep0 maxpacket: 8 [ 470.204356][ T984] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.225602][ T984] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 200 [ 470.247220][ T984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 470.267746][ T984] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 470.299579][ T984] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.328023][ T984] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 470.351377][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.382914][ T984] usb 1-1: config 0 descriptor?? [ 470.402221][T13629] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 470.440732][T13644] /dev/rnullb0: Can't lookup blockdev [ 470.517578][T13645] binder: 13642:13645 ioctl c018620b 200000000000 returned -14 [ 470.595278][ T6779] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 470.635113][ T6779] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 470.701560][T13650] MTD: Couldn't look up '/dev/rnullb0': -15 [ 470.707581][T13650] /dev/rnullb0: Can't lookup blockdev [ 470.841301][ T6779] usb 1-1: USB disconnect, device number 104 [ 471.567531][T13617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.580883][T13617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.862956][ T5925] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 471.890037][ T5925] usb 3-1: USB disconnect, device number 99 [ 471.902040][T13669] /dev/rnullb0: Can't lookup blockdev [ 472.008123][ T6779] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 472.170695][ T6779] usb 4-1: Using ep0 maxpacket: 8 [ 472.180815][ T6779] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 472.190309][ T6779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.200650][ T6779] usb 4-1: Product: syz [ 472.204873][ T6779] usb 4-1: Manufacturer: syz [ 472.209777][ T6779] usb 4-1: SerialNumber: syz [ 472.218836][ T6779] usb 4-1: config 0 descriptor?? [ 472.435314][ T6779] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 472.543837][T13684] syzkaller0: entered promiscuous mode [ 472.551727][T13684] syzkaller0: entered allmulticast mode [ 472.562118][T13684] tipc: Enabled bearer , priority 0 [ 472.570049][T13683] tipc: Resetting bearer [ 472.597415][T13683] tipc: Disabling bearer [ 472.668156][ T5925] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 472.838078][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 472.847110][ T5925] usb 3-1: config 0 interface 0 has no altsetting 0 [ 472.862164][ T5925] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 472.888034][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.919471][ T5925] usb 3-1: config 0 descriptor?? [ 473.017293][T13696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.100237][T13698] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2723'. [ 473.324977][T13706] /dev/rnullb0: Can't lookup blockdev [ 473.345150][ T5925] corsair-cpro 0003:1B1C:0C10.0050: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 474.015575][ T5925] corsair-cpro 0003:1B1C:0C10.0050: probe with driver corsair-cpro failed with error -71 [ 474.053123][ T5925] usb 3-1: USB disconnect, device number 100 [ 474.252195][ T6779] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 474.289717][ T6779] dvbdev: DVB: registering new adapter (Terratec H7) [ 474.296508][ T6779] usb 4-1: media controller created [ 474.360561][ T6779] usb 4-1: dvb_usb_v2: MAC address: e3:59:87:04:2c:ab [ 474.408552][ T6779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.523952][ T6779] DVB: Unable to find symbol drxk_attach() [ 474.549443][T13736] /dev/rnullb0: Can't lookup blockdev [ 474.607392][T13740] /dev/rnullb0: Can't lookup blockdev [ 474.677224][ T6779] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -22 [ 474.704239][ T6779] usb 4-1: USB disconnect, device number 119 [ 474.865132][T13513] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 474.901956][T13750] /dev/rnullb0: Can't lookup blockdev [ 475.050016][T13513] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 475.077922][T13513] usb 3-1: config 0 has no interface number 0 [ 475.084095][T13513] usb 3-1: config 0 interface 235 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 475.120426][T13757] netlink: 'syz.1.2743': attribute type 10 has an invalid length. [ 475.132978][T13757] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2743'. [ 475.144369][T13513] usb 3-1: config 0 interface 235 has no altsetting 0 [ 475.163173][T13513] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=d8.f5 [ 475.177000][T13513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.187473][T13513] usb 3-1: Product: syz [ 475.192316][T13513] usb 3-1: Manufacturer: syz [ 475.196950][T13513] usb 3-1: SerialNumber: syz [ 475.221233][T13513] usb 3-1: config 0 descriptor?? [ 475.454273][T13765] /dev/rnullb0: Can't lookup blockdev [ 475.499111][T13513] usb 3-1: USB disconnect, device number 101 [ 475.752331][T13776] /dev/rnullb0: Can't lookup blockdev [ 475.932777][T13784] syzkaller0: entered promiscuous mode [ 475.951361][T13784] syzkaller0: entered allmulticast mode [ 475.971894][T13784] tipc: Enabled bearer , priority 0 [ 475.990572][T13783] tipc: Resetting bearer [ 476.040241][T13783] tipc: Disabling bearer [ 476.148119][T13513] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 476.206832][ C1] Unknown status report in ack skb [ 476.320021][T13513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 476.339723][T13513] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 476.365014][T13513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 476.392324][T13513] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 476.408563][T13513] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 476.416780][T13513] usb 4-1: Manufacturer: syz [ 476.441602][T13513] usb 4-1: config 0 descriptor?? [ 476.461141][T13513] smsusb:smsusb_probe: board id=9, interface number 0 [ 476.468976][T13513] smsusb:smsusb_probe: Device initialized with return code -19 [ 476.663908][ T984] usb 4-1: USB disconnect, device number 120 [ 477.055068][ T30] audit: type=1804 audit(1752216976.937:16): pid=13815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2763" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3791 res=1 errno=0 [ 477.375391][T13827] netlink: 'syz.2.2767': attribute type 1 has an invalid length. [ 477.664253][T13840] autofs4:pid:13840:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.3), cmd(0xc0189377) [ 477.688204][T13840] autofs4:pid:13840:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189377) [ 477.708247][T13840] C: renamed from team_slave_0 (while UP) [ 477.750669][T13840] netlink: 'syz.0.2771': attribute type 1 has an invalid length. [ 477.777761][T13841] /dev/rnullb0: Can't lookup blockdev [ 477.779425][T13840] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2771'. [ 478.087047][T13854] /dev/rnullb0: Can't lookup blockdev [ 478.567041][T13866] netlink: 'syz.0.2781': attribute type 4 has an invalid length. [ 478.736397][T13870] netlink: 'syz.0.2783': attribute type 10 has an invalid length. [ 478.758085][T13870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2783'. [ 478.825379][T13875] /dev/rnullb0: Can't lookup blockdev [ 478.827242][T13873] /dev/rnullb0: Can't lookup blockdev [ 478.897986][ T984] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 478.914002][T13879] 9pnet_fd: p9_fd_create_tcp (13879): problem connecting socket to 127.0.0.1 [ 479.078232][ T984] usb 4-1: Using ep0 maxpacket: 8 [ 479.098170][ T984] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 479.107551][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.116018][ T984] usb 4-1: Product: syz [ 479.123768][ T984] usb 4-1: Manufacturer: syz [ 479.130138][ T984] usb 4-1: SerialNumber: syz [ 479.151170][ T984] usb 4-1: config 0 descriptor?? [ 479.250727][ T30] audit: type=1804 audit(1752216979.137:17): pid=13893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2790" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3791 res=1 errno=0 [ 479.370743][ T984] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 479.584536][T13903] syzkaller0: entered promiscuous mode [ 479.592868][T13903] syzkaller0: entered allmulticast mode [ 479.603137][T13903] tipc: Enabled bearer , priority 0 [ 479.612046][T13902] tipc: Resetting bearer [ 479.643363][T13902] tipc: Disabling bearer [ 479.796455][T13906] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2795'. [ 480.023150][T13920] /dev/rnullb0: Can't lookup blockdev [ 480.374679][T13931] syzkaller1: entered promiscuous mode [ 480.381035][T13931] syzkaller1: entered allmulticast mode [ 481.097404][T13947] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 481.204478][ T984] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 481.227773][ T984] dvbdev: DVB: registering new adapter (Terratec H7) [ 481.234740][ T984] usb 4-1: media controller created [ 481.310483][ T984] usb 4-1: dvb_usb_v2: MAC address: e3:59:87:04:2c:ab [ 481.347242][T13955] netlink: 'syz.0.2813': attribute type 1 has an invalid length. [ 481.347417][T13954] loop3: detected capacity change from 0 to 1 [ 481.373255][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 481.374944][T13955] netlink: 624 bytes leftover after parsing attributes in process `syz.0.2813'. [ 481.464657][ T984] DVB: Unable to find symbol drxk_attach() [ 481.605144][T13964] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 481.619203][ T984] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -22 [ 481.655582][ T984] usb 4-1: USB disconnect, device number 121 [ 481.848600][T13971] netlink: 'syz.2.2818': attribute type 1 has an invalid length. [ 482.051710][T13976] ./file0: Can't lookup blockdev [ 482.069403][T13976] overlay: Unknown parameter 'subj_user' [ 482.108442][T13979] ./file0: Can't lookup blockdev [ 482.114559][T13976] overlay: Unknown parameter 'subj_user' [ 482.566551][T13996] /dev/rnullb0: Can't lookup blockdev [ 482.589835][T13999] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2829'. [ 482.691007][T14002] binder: binder_mmap: 14000 200000001000-20000000b000 bad vm_flags failed -1 [ 483.000103][T14012] /dev/rnullb0: Can't lookup blockdev [ 483.066276][T14018] syzkaller0: entered promiscuous mode [ 483.071901][T14018] syzkaller0: entered allmulticast mode [ 483.082395][T14018] tipc: Enabled bearer , priority 0 [ 483.093231][T14017] tipc: Resetting bearer [ 483.119031][T14017] tipc: Disabling bearer [ 483.441314][ T6779] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 483.496650][ T6779] hid-generic 0000:0000:0000.0051: hidraw0: HID v0.00 Device [syz1] on syz0 [ 483.748035][ T984] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 483.921320][ T984] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 483.955099][ T984] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.977992][ T984] usb 2-1: config 0 interface 0 has no altsetting 0 [ 483.986027][ T984] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 484.010569][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.034862][ T984] usb 2-1: config 0 descriptor?? [ 484.400162][T14049] /dev/rnullb0: Can't lookup blockdev [ 484.459150][ T984] holtek_mouse 0003:04D9:A067.0052: unknown main item tag 0x7 [ 484.477134][ T984] holtek_mouse 0003:04D9:A067.0052: unknown main item tag 0x6 [ 484.548362][ T984] holtek_mouse 0003:04D9:A067.0052: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.1-1/input0 [ 484.673852][T13513] usb 2-1: USB disconnect, device number 117 [ 484.887956][ T6779] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 485.067947][ T6779] usb 3-1: Using ep0 maxpacket: 8 [ 485.075840][ T6779] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 485.085144][ T6779] usb 3-1: config 1 has no interface number 1 [ 485.093212][ T6779] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 485.103441][ T6779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.111523][ T6779] usb 3-1: Product: И [ 485.115608][ T6779] usb 3-1: Manufacturer: ♮忓㔷㝮顎㤃∵絯晆찇냅刹邟毖燰잙卩ⱚᲵ慢헦﬘꟢熁눿睆ꈁ戴ᦀｯ軮ꤡ訶銻ૐܱቂ奅㍽i [ 485.131795][ T6779] usb 3-1: SerialNumber: Ч [ 485.138143][T13513] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 485.299802][T13513] usb 1-1: Using ep0 maxpacket: 32 [ 485.322429][T13513] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 485.333110][T13513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.348645][T13513] usb 1-1: config 0 descriptor?? [ 485.366080][T13513] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 485.374799][ T6779] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 485.389474][T14068] /dev/rnullb0: Can't lookup blockdev [ 485.404014][ T6779] usb 3-1: 2:1 : invalid channels 0 [ 485.467984][ T6779] usb 3-1: USB disconnect, device number 102 [ 485.788097][ T5985] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 485.972014][ T5985] usb 4-1: config 198 descriptor has 1 excess byte, ignoring [ 485.988263][ T5985] usb 4-1: config 198 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 486.013852][ T5985] usb 4-1: config 198 interface 0 altsetting 0 has an endpoint descriptor with address 0x3A, changing to 0xA [ 486.052256][ T5985] usb 4-1: config 198 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 10 [ 486.087934][ T5985] usb 4-1: config 198 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 486.113980][ T5985] usb 4-1: config 198 descriptor has 1 excess byte, ignoring [ 486.132219][ T5985] usb 4-1: config 198 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 486.153424][ T5985] usb 4-1: config 198 interface 0 altsetting 0 has an endpoint descriptor with address 0x3A, changing to 0xA [ 486.177336][ T5985] usb 4-1: config 198 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 10 [ 486.207895][ T5985] usb 4-1: config 198 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 486.259251][ T5985] usb 4-1: config 198 descriptor has 1 excess byte, ignoring [ 486.272169][ T5985] usb 4-1: config 198 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 486.284294][ T5985] usb 4-1: config 198 interface 0 altsetting 0 has an endpoint descriptor with address 0x3A, changing to 0xA [ 486.303041][ T5985] usb 4-1: config 198 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 10 [ 486.314764][ T5985] usb 4-1: config 198 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 486.331029][ T5985] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 486.348797][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=33 [ 486.363668][ T5985] usb 4-1: Product: syz [ 486.380469][T13513] gspca_nw80x: reg_w err -71 [ 486.381766][ T5985] usb 4-1: Manufacturer: syz [ 486.385257][T13513] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 486.402019][ T5985] usb 4-1: SerialNumber: syz [ 486.414688][T13513] usb 1-1: USB disconnect, device number 105 [ 486.432568][T14074] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 486.696481][ T5985] adutux 4-1:198.0: interrupt endpoints not found [ 486.723962][ T5985] usb 4-1: USB disconnect, device number 122 [ 486.920343][T14098] syzkaller0: entered promiscuous mode [ 486.925994][T14098] syzkaller0: entered allmulticast mode [ 486.941769][T14098] tipc: Enabled bearer , priority 0 [ 486.953046][T14097] tipc: Resetting bearer [ 486.979166][T14097] tipc: Disabling bearer [ 486.985717][T14100] netlink: 'syz.0.2871': attribute type 4 has an invalid length. [ 487.307081][T14110] Unknown status report in ack skb [ 487.617079][T14123] /dev/rnullb0: Can't lookup blockdev [ 487.723416][T14125] syzkaller1: entered promiscuous mode [ 487.730542][T14125] syzkaller1: entered allmulticast mode [ 487.838144][ T43] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 487.921742][T14130] /dev/rnullb0: Can't lookup blockdev [ 488.010288][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 488.037744][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 488.060645][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.114280][ T43] usb 3-1: config 0 descriptor?? [ 488.183549][ T43] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 489.094517][T14160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.103440][T14160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.278060][ T43] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 489.433969][ T43] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 489.443163][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.461431][ T43] usb 1-1: Product: syz [ 489.465634][ T43] usb 1-1: Manufacturer: syz [ 489.478207][ T43] usb 1-1: SerialNumber: syz [ 489.489059][ T43] usb 1-1: config 0 descriptor?? [ 489.507567][ T43] ch341 1-1:0.0: ch341-uart converter detected [ 490.501827][ T5925] usb 3-1: USB disconnect, device number 103 [ 490.913232][T14195] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 490.921136][T14195] UDF-fs: Scanning with blocksize 512 failed [ 490.934456][T14195] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 490.942141][T14195] UDF-fs: Scanning with blocksize 1024 failed [ 490.949178][T14195] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 490.956765][T14195] UDF-fs: Scanning with blocksize 2048 failed [ 490.963851][T14195] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 490.978088][T14195] UDF-fs: Scanning with blocksize 4096 failed [ 491.138745][ T43] usb 1-1: failed to send control message: -110 [ 491.147049][ T43] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 491.162858][T14203] /dev/rnullb0: Can't lookup blockdev [ 491.175373][T14203] /dev/rnullb0: Can't lookup blockdev [ 491.208706][T14206] ./cgroup: Can't lookup blockdev [ 491.293462][ C0] Unknown status report in ack skb [ 491.316611][T14210] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2914'. [ 491.688119][ T5925] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 491.860177][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 491.883050][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.893225][ T5925] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 491.902653][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.929198][ T5925] usb 3-1: config 0 descriptor?? [ 492.003016][T13513] usb 1-1: USB disconnect, device number 106 [ 492.060409][T13513] ch341 1-1:0.0: device disconnected [ 492.367715][T14238] netlink: 'syz.1.2925': attribute type 10 has an invalid length. [ 492.376351][T14238] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2925'. [ 492.440009][ T5925] uclogic 0003:2179:0077.0053: interface is invalid, ignoring [ 492.940572][ T5985] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 492.975229][ T5985] hid-generic 0000:0000:0000.0054: hidraw0: HID v0.00 Device [syz1] on syz0 [ 492.999391][T14251] afs: Unknown parameter 'dyneblk' [ 493.076953][T13513] usb 3-1: USB disconnect, device number 104 [ 493.140993][T14254] netlink: 'syz.0.2932': attribute type 1 has an invalid length. [ 493.152222][T14254] overlayfs: failed to resolve './file0': -2 [ 493.298152][ T5985] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 493.341286][T14256] /dev/rnullb0: Can't lookup blockdev [ 493.438265][ T5985] usb 2-1: device descriptor read/64, error -71 [ 493.691203][ T5925] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 493.697912][ T5985] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 493.848432][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 493.878264][ T5985] usb 2-1: device descriptor read/64, error -71 [ 493.888161][ T5925] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 493.896403][ T5925] usb 1-1: config 0 has no interface number 0 [ 493.912504][ T5925] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 493.923598][ T5925] usb 1-1: config 0 interface 1 has no altsetting 0 [ 493.933996][ T5925] usb 1-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 493.944161][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.952430][ T5925] usb 1-1: Product: syz [ 493.960496][ T5925] usb 1-1: Manufacturer: syz [ 493.965093][ T5925] usb 1-1: SerialNumber: syz [ 493.974312][ T5925] usb 1-1: config 0 descriptor?? [ 494.029531][ T5985] usb usb2-port1: attempt power cycle [ 494.194388][ T5925] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a2) with 1 interfaces [ 494.216430][ T5925] cx231xx 1-1:0.1: Failed to read PCB config [ 494.222584][ T5925] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 494.233118][ T5925] usb 1-1: USB disconnect, device number 107 [ 494.367954][ T5985] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 494.388438][ T5985] usb 2-1: device descriptor read/8, error -71 [ 494.638198][ T5985] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 494.658828][ T5985] usb 2-1: device descriptor read/8, error -71 [ 494.687933][ T5925] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 494.786060][ T5985] usb usb2-port1: unable to enumerate USB device [ 494.838471][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 494.851111][ T5925] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 494.859194][ T5925] usb 1-1: config 0 has no interface number 0 [ 494.865284][ T5925] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 494.878121][ T5925] usb 1-1: config 0 interface 1 has no altsetting 0 [ 494.891371][ T5925] usb 1-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 494.910459][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.918753][ T5925] usb 1-1: Product: syz [ 494.922950][ T5925] usb 1-1: Manufacturer: syz [ 494.928850][ T5925] usb 1-1: SerialNumber: syz [ 494.935769][ T5925] usb 1-1: config 0 descriptor?? [ 495.023221][T14276] /dev/rnullb0: Can't lookup blockdev [ 495.151323][ T5925] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a2) with 1 interfaces [ 495.181992][ T5925] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - CARRAERA (card=1) [ 495.298594][ T5925] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 495.306951][ T5925] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 495.315430][ T5925] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 495.323623][ T5925] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 495.331978][ T5925] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 495.341951][ T5925] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -32 [ 495.363835][ T5925] i2c i2c-2: Added multiplexed i2c bus 4 [ 495.372913][ T5925] i2c i2c-2: Added multiplexed i2c bus 5 [ 495.380515][ T5925] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 495.389437][ T5925] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 495.398709][T14261] /dev/rnullb0: Can't lookup blockdev [ 495.426387][ T5925] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -32 [ 495.443449][ T5925] usb 1-1: USB disconnect, device number 108 [ 496.037993][ T5925] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 496.107017][T14296] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2949'. [ 496.198082][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 496.225692][ T5925] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 496.241715][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.259376][ T5925] usb 3-1: Product: syz [ 496.263657][ T5925] usb 3-1: Manufacturer: syz [ 496.268383][ T5925] usb 3-1: SerialNumber: syz [ 496.283320][ T5925] usb 3-1: config 0 descriptor?? [ 496.447995][ T24] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 496.491715][ T5925] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 496.608020][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 496.618833][ T24] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 496.627046][ T24] usb 4-1: config 0 has no interface number 0 [ 496.636543][ T24] usb 4-1: config 0 interface 133 has no altsetting 0 [ 496.644379][ T5985] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 496.654764][ T24] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=cf.79 [ 496.664189][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.674141][ T24] usb 4-1: Product: syz [ 496.678439][ T24] usb 4-1: Manufacturer: syz [ 496.683058][ T24] usb 4-1: SerialNumber: syz [ 496.692263][ T24] usb 4-1: config 0 descriptor?? [ 496.707495][ T24] ati_remote 4-1:0.133: ati_remote_probe: Unexpected endpoint_in [ 496.812096][ T5985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.823302][ T5985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.833199][ T5985] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 496.842462][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.853190][ T5985] usb 2-1: config 0 descriptor?? [ 496.919332][T14299] /dev/rnullb0: Can't lookup blockdev [ 496.928044][ T24] usb 4-1: USB disconnect, device number 123 [ 497.154808][T14307] netlink: 'syz.0.2954': attribute type 1 has an invalid length. [ 497.164170][T14307] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2954'. [ 497.187359][T14307] netlink: 400 bytes leftover after parsing attributes in process `syz.0.2954'. [ 497.475119][ T5985] usb 2-1: language id specifier not provided by device, defaulting to English [ 497.922721][T14304] md2: using deprecated bitmap file support [ 497.932524][T14304] md2: error: bitmap file must be a regular file [ 497.944448][T14305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2953'. [ 497.958296][T14304] /dev/rnullb0: Can't lookup blockdev [ 497.965807][ T5985] uclogic 0003:256C:006D.0055: failed retrieving string descriptor #200: -71 [ 497.989825][ T5985] uclogic 0003:256C:006D.0055: failed retrieving pen parameters: -71 [ 498.002208][ T5985] uclogic 0003:256C:006D.0055: failed probing pen v2 parameters: -71 [ 498.012231][ T5985] uclogic 0003:256C:006D.0055: failed probing parameters: -71 [ 498.020543][ T5985] uclogic 0003:256C:006D.0055: probe with driver uclogic failed with error -71 [ 498.047054][ T5985] usb 2-1: USB disconnect, device number 122 [ 498.326617][ T5925] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 498.353040][T14341] /dev/rnullb0: Can't lookup blockdev [ 498.376320][ T5925] usb 3-1: USB disconnect, device number 105 [ 498.761204][T14349] MTD: Couldn't look up '/dev/rnullb0': -15 [ 498.767336][T14349] /dev/rnullb0: Can't lookup blockdev [ 498.855620][T14353] MTD: Couldn't look up '/dev/rnullb0': -15 [ 498.908017][ T5985] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 499.059998][ T5985] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 499.077490][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.097490][ T5985] usb 2-1: config 0 descriptor?? [ 499.119091][ T5985] cp210x 2-1:0.0: cp210x converter detected [ 499.440851][T14374] /dev/rnullb0: Can't lookup blockdev [ 499.537220][ T5985] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 499.550895][ T5985] cp210x 2-1:0.0: GPIO initialisation failed: -524 [ 499.569280][ T5985] usb 2-1: cp210x converter now attached to ttyUSB0 [ 499.841281][ T5985] usb 2-1: USB disconnect, device number 123 [ 499.851795][T14385] /dev/rnullb0: Can't lookup blockdev [ 499.860779][ T5985] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 499.877349][ T5985] cp210x 2-1:0.0: device disconnected [ 500.170601][T14394] ./cgroup: Can't lookup blockdev [ 500.372124][T14404] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 500.554989][ C1] Unknown status report in ack skb [ 500.685199][T14417] netlink: 'syz.1.2994': attribute type 4 has an invalid length. [ 500.858472][ T6779] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 500.926303][T14427] ./cgroup: Can't lookup blockdev [ 501.041008][ T6779] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 501.060251][ T6779] usb 1-1: config 0 has no interface number 0 [ 501.092596][ T6779] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 501.122750][ T6779] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 501.147241][ T6779] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 501.160373][ T6779] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 501.174385][ T6779] usb 1-1: Product: syz [ 501.182313][ T6779] usb 1-1: SerialNumber: syz [ 501.217282][ T6779] usb 1-1: config 0 descriptor?? [ 501.236877][ T6779] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 501.237487][T14433] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2998'. [ 501.254490][ T6779] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input41 [ 501.520024][T14442] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'. [ 501.532964][T14442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3001'. [ 501.548277][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.549594][T14443] MTD: Couldn't look up '/dev/rnullb0': -15 [ 501.566667][T14442] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'. [ 501.582663][T14442] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'. [ 501.652698][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.652940][T13513] usb 1-1: USB disconnect, device number 109 [ 501.659926][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 501.693236][T13513] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 501.913317][T14449] gfs2: gfs2 mount does not exist [ 502.069108][T14451] /dev/rnullb0: Can't lookup blockdev [ 502.299312][T14460] netlink: 'syz.2.3010': attribute type 10 has an invalid length. [ 502.341119][T14460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3010'. [ 502.571852][T14477] vivid-003: disconnect [ 502.590499][T14465] vivid-003: reconnect [ 502.658135][ T5985] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 502.827106][ T5985] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 502.869368][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 502.887896][ T5985] usb 4-1: Product: syz [ 502.919285][ T5985] usb 4-1: config 0 descriptor?? [ 502.950066][ T5985] pwc: Creative Labs Webcam Pro Ex detected. [ 503.032872][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3025'. [ 503.154288][ T5985] pwc: Failed to set LED on/off time (-71) [ 503.166579][ T5985] pwc: send_video_command error -71 [ 503.171989][ T5985] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 503.179320][T14503] /dev/rnullb0: Can't lookup blockdev [ 503.180172][ T5985] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 503.252368][ T5985] usb 4-1: USB disconnect, device number 124 [ 503.638385][T14519] syzkaller1: entered promiscuous mode [ 503.643919][T14519] syzkaller1: entered allmulticast mode [ 503.706182][T14522] /dev/rnullb0: Can't lookup blockdev [ 504.008541][ C1] Unknown status report in ack skb [ 504.017375][T14533] netlink: 'syz.3.3041': attribute type 4 has an invalid length. [ 504.318050][T13513] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 504.356341][T13513] hid-generic 0000:0000:0000.0056: hidraw0: HID v0.00 Device [syz1] on syz0 [ 504.650453][T14555] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3049'. [ 504.824209][T14562] /dev/rnullb0: Can't lookup blockdev [ 505.734627][T14581] rtc_cmos 00:00: Alarms can be up to one day in the future [ 505.790364][T14581] rtc_cmos 00:00: Alarms can be up to one day in the future [ 505.974740][T14591] /dev/rnullb0: Can't lookup blockdev [ 506.018193][T14591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3061'. [ 506.027270][T14591] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3061'. [ 506.274904][T14598] /dev/rnullb0: Can't lookup blockdev [ 506.618781][ T984] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 506.630323][T14609] netlink: 'syz.2.3068': attribute type 1 has an invalid length. [ 506.667992][T14609] netlink: 624 bytes leftover after parsing attributes in process `syz.2.3068'. [ 506.778001][ T984] usb 2-1: device descriptor read/64, error -71 [ 507.037915][ T984] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 507.188006][ T984] usb 2-1: device descriptor read/64, error -71 [ 507.335784][ T984] usb usb2-port1: attempt power cycle [ 507.350480][T14632] nbd: must specify an index to disconnect [ 507.462083][T14633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3072'. [ 507.549370][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3072'. [ 507.682209][T14639] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 507.696383][ T984] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 507.718732][ T984] usb 2-1: device descriptor read/8, error -71 [ 507.948189][T13513] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 507.980976][ T984] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 508.028814][ T984] usb 2-1: device descriptor read/8, error -71 [ 508.140458][T13513] usb 4-1: unable to get BOS descriptor or descriptor too short [ 508.149269][T13513] usb 4-1: not running at top speed; connect to a high speed hub [ 508.158160][ T984] usb usb2-port1: unable to enumerate USB device [ 508.188652][T13513] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.209492][T13513] usb 4-1: string descriptor 0 read error: -22 [ 508.215871][T13513] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 508.242426][T13513] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 508.268582][T13513] usb 4-1: config 0 descriptor?? [ 508.326863][T14651] syzkaller0: entered promiscuous mode [ 508.332776][T14651] syzkaller0: entered allmulticast mode [ 508.360017][T14651] tipc: Enabled bearer , priority 0 [ 508.373803][T14650] tipc: Resetting bearer [ 508.423370][T14650] tipc: Disabling bearer [ 508.523439][T14639] binder: 14638:14639 ioctl c018620b 200000000000 returned -14 [ 508.541711][ T6779] usb 4-1: USB disconnect, device number 125 [ 508.792539][T14663] /dev/rnullb0: Can't lookup blockdev [ 509.040338][T14675] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN PTI [ 509.052275][T14675] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 509.060695][T14675] CPU: 0 UID: 0 PID: 14675 Comm: syz.2.3088 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 509.072242][T14675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.082312][T14675] RIP: 0010:bcsp_recv+0x13d/0x1740 [ 509.087428][T14675] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 44 9a b6 f9 49 8b 1f 31 ff 48 89 [ 509.107030][T14675] RSP: 0018:ffffc90002ed7c00 EFLAGS: 00010206 [ 509.113113][T14675] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f [ 509.121090][T14675] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000 [ 509.129049][T14675] RBP: ffffc90002ed7d60 R08: ffff888059f27c1f R09: 1ffff1100b3e4f83 [ 509.137020][T14675] R10: dffffc0000000000 R11: ffffffff886e2030 R12: 0000000000000001 [ 509.145009][T14675] R13: ffffc90002ed7e00 R14: dffffc0000000000 R15: 0000000000000108 [ 509.153005][T14675] FS: 00007fb65bbb16c0(0000) GS:ffff888125798000(0000) knlGS:0000000000000000 [ 509.161933][T14675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.168511][T14675] CR2: 00007fb65bbb0f98 CR3: 0000000033e3c000 CR4: 00000000003526f0 [ 509.176480][T14675] Call Trace: [ 509.179750][T14675] [ 509.182675][T14675] ? __pfx_bcsp_recv+0x10/0x10 [ 509.187437][T14675] ? rcu_read_lock_any_held+0xb3/0x120 [ 509.192902][T14675] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 509.198794][T14675] ? tty_audit_push+0x7c/0x250 [ 509.203550][T14675] hci_uart_tty_receive+0x191/0x220 [ 509.208741][T14675] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 509.214462][T14675] tiocsti+0x239/0x2c0 [ 509.218521][T14675] ? __pfx_tiocsti+0x10/0x10 [ 509.223282][T14675] ? __fget_files+0x2a/0x420 [ 509.227875][T14675] ? __fget_files+0x3a0/0x420 [ 509.232552][T14675] ? __fget_files+0x2a/0x420 [ 509.237139][T14675] tty_ioctl+0x626/0xde0 [ 509.241382][T14675] ? __pfx_tty_ioctl+0x10/0x10 [ 509.246153][T14675] __se_sys_ioctl+0xfc/0x170 [ 509.250772][T14675] do_syscall_64+0xfa/0x3b0 [ 509.255274][T14675] ? lockdep_hardirqs_on+0x9c/0x150 [ 509.260480][T14675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.266562][T14675] ? clear_bhb_loop+0x60/0xb0 [ 509.271246][T14675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.277127][T14675] RIP: 0033:0x7fb65ad8e929 [ 509.281554][T14675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.301157][T14675] RSP: 002b:00007fb65bbb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.309566][T14675] RAX: ffffffffffffffda RBX: 00007fb65afb6160 RCX: 00007fb65ad8e929 [ 509.317535][T14675] RDX: 0000200000000380 RSI: 0000000000005412 RDI: 0000000000000004 [ 509.325504][T14675] RBP: 00007fb65ae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 509.333466][T14675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.341432][T14675] R13: 0000000000000001 R14: 00007fb65afb6160 R15: 00007ffdafadfe58 [ 509.349410][T14675] [ 509.352427][T14675] Modules linked in: [ 509.357654][T14675] ---[ end trace 0000000000000000 ]--- [ 509.367610][T14675] RIP: 0010:bcsp_recv+0x13d/0x1740 [ 509.379877][T14675] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 44 9a b6 f9 49 8b 1f 31 ff 48 89 [ 509.401353][T14675] RSP: 0018:ffffc90002ed7c00 EFLAGS: 00010206 [ 509.407462][T14675] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f [ 509.421613][T14675] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000 [ 509.429726][T14675] RBP: ffffc90002ed7d60 R08: ffff888059f27c1f R09: 1ffff1100b3e4f83 [ 509.437732][T14675] R10: dffffc0000000000 R11: ffffffff886e2030 R12: 0000000000000001 [ 509.448452][T14675] R13: ffffc90002ed7e00 R14: dffffc0000000000 R15: 0000000000000108 [ 509.456457][T14675] FS: 00007fb65bbb16c0(0000) GS:ffff888125798000(0000) knlGS:0000000000000000 [ 509.471393][T14675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.478073][T14675] CR2: 00007fb2a6582178 CR3: 0000000033e3c000 CR4: 00000000003526f0 [ 509.486090][T14675] Kernel panic - not syncing: Fatal exception [ 509.492435][T14675] Kernel Offset: disabled [ 509.496769][T14675] Rebooting in 86400 seconds..