last executing test programs: 16.530439394s ago: executing program 1 (id=342): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000a8", @ANYRES32=r0], 0x28}}, 0x802) 16.327839787s ago: executing program 1 (id=343): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000240)={0xa}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r7 = creat(0x0, 0xd931d3864d39dcca) unshare(0x22020600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x1b, 0x0, r1, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=@generic={0x5, "320f435b7edeee1d063a27ed7bbf875254b63dac7f7c20f0bf335d087322924b157eb5645d225c62725c3f684ab25e89169ba2000a12d1a876b18a88bf1198443534f45eb92f89acc8bdd49365f8c8a9e6ccfe31f17416d7d738605dd5cfb9674310e0b8f586225aff90a13159b249c9b42a01f98743c7e4b19ad5f22a71"}, 0x80, 0x0}, 0x0, 0x4000, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r10 = socket$inet(0x2, 0x1, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x8, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r11, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r12}}, 0x18) setsockopt$inet_mreqn(r10, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 13.266856895s ago: executing program 2 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x6000000000000) 12.821146496s ago: executing program 2 (id=354): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r2, 0x0, 0xd1, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r3 = getpgrp(0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000600), 0x10400, 0x0) sendmmsg$unix(r1, &(0x7f0000001dc0)=[{{&(0x7f0000000140)=@file={0x1, '.\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000002c0)="62d7d0a2d6d57d6efdde2c098359af6fbd2885e3754141c764350e813bf0620ca53dd53ff4d896821bf0fb4fb877fe6d438c091c6c220bb31453aacff62eb26550474ad638aed6068194807751e9625151735e294c03cb89304365dbe1f687a021c31cee17826c5d66fa16c5023563d7040be91426e332f5c2ebcb3a84a365a6dedf85e89e110bc58a58b888f97a9d3e951f10aef27d1525eb1bd70813c7880c33fdf4161c8f037e89fa0f257c01ab76f70a48074ce3440a4f949cf974b03d294a4be2fdc1bc7c1e99d54e3bcd5669ffbb2496a4f2b5c37cde93ca151eaceee38bf8685b4d7f775d995c9c656bdee0fb130559ac", 0xf4}, {&(0x7f00000001c0)="6d834577d2e6229e789e957173ecb1c6f959a91681206123cb18816389eff2289e1dfe81275f0066e3c80cc0e1135540efb13e44c5ec784d18a1512467dac8a926e42168f554d567cd3aba1ea2c9f6ea06739ff7f1e31afaf02494b137e18d3579c7ebd26fc02dfae8904e1df31398d0dca4d2a8c77fb3876933d917c72a013cfe252051052ad4b96504a20f32f78a62bf3bcf2b943018db715c6fe038efc7851c50cfc9561d15e68a86bfb9a93f4f", 0xaf}, {&(0x7f00000003c0)="58aa4007c60fd677d2cdc45b24ec9bd753d7f460ee78b9e610f13d9d048dfbbd598f12bc577ea6af1337daffb5dd0d8b04bd44d5839f6ba42863658435c8e156d28ed028905bd5e7f56e01ce58eb7b2f6bb210ceb865dfd1c723a7732fdce20134a6fe37abaf2fca07b64b9cbbcd4ed1ef73fa99176135f0c0dd96bc3b9a89e6177c4aa96dc1573e2fa6d189471469d84e57902c1353d6b9f08660051a30fbc58a301a93307f385100fed5085380719e75639b1e980f5dc8f537870d5ffb3257f3f455c9709db81016319334545f3511b353e4b7e1bf2ca609190b9fc18457ef2070097d2841fcf10dbe7b", 0xeb}], 0x3, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r2, r6, r2, r2, r0, r2]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xa0, 0x4000}}, {{&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000000780)="912e117a2e5dea1acf6f8bb73a2b779d2e1aaf74d4fa7aac05780818da6623202a405003161c5a8764cf4c80b7791cb02d9af798514c4fa78bf35101a4ad", 0x3e}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="f5b15f9bbc071fce0fbfc5e32b8897f6af69fe70301b17003ba26d649a97ca6410daf8ddeeb8635c052f18ba351ee0b3477a5f1d566c017b2460115b8055908f708146d30073e3ee740fc9ea5a5a1728be29bc24c29761567dbb0f0f295ecab8cdbf795898661b74cb5a82612ea65aecfd029dd99a1cce06e4b6f604cc092223c0a66024c958b6316e563b476951a035d5c3644d483b", 0x96}, {&(0x7f0000001880)="6e06af4c6d371e3ceffec98f9175146c3ceb08c4e12d5d83ba7ffcc18c29af2c5e618412d7d2c27f4d023b52f8716a265c966f8db83c2d3a9aa8a7e87cdcd1fbedcfd90fa4008a2c4eacac0fc3a2eb4ffedfda7a2937e877a8a7db1a109ce971c76694ba272bba178a0377c5dc3f317eb08b8aff31fddd54399e3772da0a1fafd525480cb6bbfa63a8cc66c19b061f5760edc7c89d977be241cc0222b66021cf74eb37f2c921283fbff758bcb1bd367a", 0xb0}, {&(0x7f0000001940)="89c7", 0x2}, {&(0x7f0000001980)="861fabac2f94ebdc2de673ff3949919b43458bbbe112d72341d2eb81e985695afeb06273b8a84ce73bb4fa69be03716a75c73fdb0e99a5f3157be73d96103077a890b5a5b9c72452e6d1144bada4120307e9485dc51f763475651a5ea1181b481fa8c900dcd2372651d9a47f00d63c2020f1c890cf344af0c9ba27963e1273544865ae25e3c7bbbcbb1381066cb620be10307f7fa4a879c7a1bd574b5a302baf716c23b8d268a5b284d1c9ed1fab973e302dc01c69963dff1e6a786d557d95cba0c00af781da8593c690", 0xca}, {&(0x7f0000001a80)="2be60faeaf65eb20421bceaabdd3c760565d0a64a93396cc000f3c2112cb8943f0c871e3a2842ca24c0b0f2d215b1ca42955c7c51983959ff0103844820dc7ca5ebd562921dbb3cbfea3aba11111fc9630f9fb9ab376a6d3e24d7a90a66d83", 0x5f}, {&(0x7f0000001b00)="4352db9f1bd614ae7bfff6e9184a724becca931eacdd89bd050571fc3dce2680b2bd7b902988a73c331cd12c6f63d6633cbf2cacdfbe1c9c3244858e782859e6dac277412f1b509d92a9b2074bdaecd33fbefa8ce45fd51901e7cd8630b961d31ab46c2f06db143512f8037cd3a7a28be4235e78bbe2f358e8cd5009c483796d1aae3afcb52ee6d5e19d8c96ab1b7c2e51bd2dee4d46", 0x96}, {&(0x7f0000001bc0)="61a27c4f4018fde2cddb120368eb01e229351d2f198c6681b75697e2c8f13d089d84cc78c7eb83abb710b9f638b84f0d1cfb8df5c02c687118bfbd94c88bbdd276c1db83475e40e0ca3cdf60d4d16ec1c3ce823ec5a7b3f7f46093b6beebad78d0ea1ec8b79093a1c7017511acf239ae68586e0b1ac730d81055fe567bf8e4226636e8b33a72b20ae32250d06913044de607fac30572f006d16928", 0x9b}, {&(0x7f0000001c80)="836a1a8fd066b8f472a6814be88df1963fde052f0778fe91b4e58b24eaf9d76737d946a31cc64f4b574906fdd59a7e04c92e7dcf0b1d40e9d97caa6a12e8ceff671be30c4e2a78b9a593cd6bbc3edb5927ce4de7afabdd9ec28cc3773bd887650d26bb420b9681579c4f4386bdbd8190098c5688", 0x74}], 0xa, 0x0, 0x0, 0x8c0}}], 0x2, 0x20040041) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, 0x0, 0x0) write$FUSE_DIRENT(r7, 0x0, 0x130) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r10, 0x4bfa, 0x0) 11.783120268s ago: executing program 1 (id=357): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="00000088", @ANYRES32=r0], 0x28}}, 0x802) 11.588747926s ago: executing program 1 (id=358): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000000001a6912180000000000bf00010001020000950000000000000044bdfcb137c1fca8d2f5cd366e4b2c076f47e32114b10fe3604474503267d7a68ad9a57c234653865062201f95969f7b9f5046be8e288ffa93e24c5dd2d42d5b519cd54271647c70ede13711c99ad22edaf376f5049e6a"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a07000000000000000000020000000900010073797a3000000000040006005c000000030a01020000000000000000020000000900010073797a30000000003900030091abc12404cf378042f2", @ANYRESHEX=r0], 0xbc}}, 0x8014) syz_usb_connect(0x4, 0x5f, &(0x7f0000000040)=ANY=[], 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r1 = socket(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x24) ioctl$KVM_CAP_PMU_CAPABILITY(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xd4, 0x0, 0xfffffffffffff800}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x4470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x44080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0xfffffffffffffe6d) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='./file0\x00') unshare(0x24020400) unshare(0x22020400) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000000)) 11.34498841s ago: executing program 4 (id=359): munmap(&(0x7f0000feb000/0x14000)=nil, 0x14000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0, 0xfa, 0x0) mq_open(0x0, 0x40, 0x4, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x2, 0x4, 0x9) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r3, r2, &(0x7f0000002700)=0x1, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000040)={0x2, 0x1, @rand_addr=0x64010101}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value, 0x8) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x30) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001280)={0x2, 0x400000000000003, 0x0, 0x9, 0x31, 0x0, 0x0, 0x3, [@sadb_key={0x1f, 0x9, 0x760, 0x0, "9399b6cbebaaae2bf08f74a727756761b729387e139c576fd3422f4ef772a7d3c18518a240128d6621c67489abacbac9ebad249de74575663a6fa5a8258674cf951fc54978da13fcfa498ced193425e5ff8ba882f82bd34f47bedde38731e06618b7f431de80b647e6bee02b76c8b397e1a4f34d18c85e75b9d35e89ed4bdbbdebbffd19910c4ffcc8e487c1835f2a76f049cc9985115131ecfacc05953b8bcb9247be02a017966e980f062889c8663b1ee7be4b9940c986ed3baf69a203b0506acf7f1e05348b879e29a4171d6086cdaf07397a541b9b54dd8dee75debaee292255556a9007cb546543aef8"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, 0x9}, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_ident={0x2, 0xb, 0xfffe, 0x0, 0x101}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x188}}, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102070109023600010000000009040000042ec25d0009050200000000000009050c0000000000000905e8cd"], 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r6, &(0x7f0000000040), 0x8) lseek(r6, 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001040)={'batadv_slave_1\x00', 0x0}) r8 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)={0x1b, 0x0, 0x0, 0x4, 0x0, r6, 0x5, '\x00', r7, r9, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) 9.501259308s ago: executing program 2 (id=361): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x2c9ab000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xa7, 0xa3, 0xab, 0x20, 0x1235, 0x10, 0x5984, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2b, 0x9, 0x0, 0x90, 0x52, 0xe5, 0x5}}]}}]}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000440)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0xfffffffe, 0x8b5, 0x56, 0x23, 0x3, 0x3, 0x2}}) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e23, 0x20380000, @mcast2, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x1ffc, @loopback, 0x7fffe}, 0x1c) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000043a5aa40801b96e3b1a70000000109021200010000005bd100"], 0x0) madvise(&(0x7f0000641000/0x2000)=nil, 0x2000, 0x64) syz_open_procfs(0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fd23291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a5", 0x3e}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead9", 0x101}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) fadvise64(r0, 0x5851, 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.431572307s ago: executing program 4 (id=362): syz_emit_ethernet(0x46, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000000000000000000000fe8000000000000000003c00030000bb0001000000000000050200003102"], 0x0) 9.021437847s ago: executing program 4 (id=364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000140)=""/67) (async) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r4, 0x0, 0x3fff, 0x2, &(0x7f0000000240)='\x00~', 0x5}) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000040)={{0x2, 0xb04c}, {0x7ff, 0x1003ff}}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000500)={r7, 0x1, 0x20, 0x0, 0x2}, &(0x7f0000000540)=0x18) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac1414aa0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000dfff130016"], 0x78}}, 0x0) 8.633920367s ago: executing program 4 (id=366): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd318001c0600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRESDEC=r2, @ANYRESOCT=r4], 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r5) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000200)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2f09c0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x3, 0x3}}) 8.332336582s ago: executing program 1 (id=369): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigpending(0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x60030000, {0x4000000000000, 0xff000000}, [@common=@unspec=@rateest={{0x68}, {'gretap0\x00', 'ip6_vti0\x00', 0xb, 0x0, 0xff, 0x80000000, 0x9, 0x200, {}, {0x81}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0xcba55ab594c3ff37, 0x30, 0x3}}, @common=@inet=@esp={{0x30}, {[0x4d2, 0x4d4]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xaf) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x90, 0xd, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x0, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x80, 0xa}}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x1a, &(0x7f0000000080)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x6, 0xf7, 0x7ff}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x7f, 0xe, 0x1ff, 0x7f}]}}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20000010) 8.269390685s ago: executing program 0 (id=370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 7.974321776s ago: executing program 0 (id=371): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x2c9ab000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xa7, 0xa3, 0xab, 0x20, 0x1235, 0x10, 0x5984, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2b, 0x9, 0x0, 0x90, 0x52, 0xe5, 0x5}}]}}]}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000440)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0xfffffffe, 0x8b5, 0x56, 0x23, 0x3, 0x3, 0x2}}) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e23, 0x20380000, @mcast2, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x1ffc, @loopback, 0x7fffe}, 0x1c) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000043a5aa40801b96e3b1a70000000109021200010000005bd100"], 0x0) madvise(&(0x7f0000641000/0x2000)=nil, 0x2000, 0x64) syz_open_procfs(0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fd23291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a5", 0x3e}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead9", 0x101}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) fadvise64(r0, 0x5851, 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.506368901s ago: executing program 2 (id=373): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d04b1082a6d000000040902"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x9, 0x14, 0xc2}, &(0x7f00000007c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12015002000000081c1b051c40000102030109022400010100a8731f08bf176d640d000608000000000000000109210100957a0601224d02"], &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x9, 0x12, 0x5, 0x8, 0xa}, 0x3b, &(0x7f0000000100)={0x5, 0xf, 0x3b, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x0, 0x20, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "6e010000008000400000000000001000"}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0xb0, 0x0, 0x8}, @ssp_cap={0xc, 0x10, 0xa, 0x2a, 0x0, 0x4, 0x11, 0x40}]}, 0x2, [{0xc5, &(0x7f0000000300)=ANY=[@ANYBLOB="c5038d7951624e5fe3b4b138759dbfd71cc6d10a167489684f900c0ea2eb69398e2577d0166a35e53755e6372893fe7547d3598c53377626323ce64f7b2fd8107c09b738fbc3defcf871bbe1c9f1475ffee671d2c7ed59484c7d3eb22a03691c435a2ddd81b736c38cf9938f7f95405b05c9857c136c764c9bae934a5675a53cc6e56845300b037751d4efa5e893c24cb97002d871616094cb3dd3a2a07364317f11464d624a77a17289027c88c5fcab40a649260e50fa964f5faaa15a90e19f316dc88b221e7c27f80af517aff6ee4aebcafb30d9f8720a566409e4fa8bc03ede6d07b9fc", @ANYRES16=r0]}, {0xd2, &(0x7f0000000480)=@string={0xd2, 0x3, "d000c56a72345bf4c3dc484e14650ad291f4d4100f3e54567463a1a84632ff108fa604b936f2878f0b1734f12e566b69875cb67e19410af683bb64de5b2a5205d5729f958dd18b04d712d06e0b90d8b12ca651b611e7adb5b778bc761c95e64529619c3708917b8da52872f36342e019fcd8cae6c28868aada9332175d8eaf498c582155482b4f72bff3ad57dea92c5eaf131f3c6516b49af6371b9f442d852e638f064994dae1eaefec6d3ff7b81014751118044f8b34871fa2bc7e0a460f2d56882b541ca46a7bbdfb140a7a5ae0d4"}}]}) 3.479422556s ago: executing program 0 (id=375): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1b, &(0x7f0000000040)=[{&(0x7f0000001540)=""/4102, 0x1006}], 0x1}, 0x0) 3.192005571s ago: executing program 3 (id=376): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000080)={0xe54, 0x5, 0x797270ac, 0x4, 0x4}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3e, 0xffffffec, 0x294, 0x40, 0x0, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe2, 0x1, 0x3}], "ee7188f57a7a48c0b16c6511ec9aff06384522eee5f591880d7e8a359bd321426ffe1a7527de84dc6a76a434221c198d9af29c2a9ed731ed0ca4a37ddbbb046efb2253315fe96153218b2f4f6663120b9eece508f0688b3511e7ee26d20bac310a3a51f5ebe02a95d2704d62df02"}, 0xe6) close(r1) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.151296305s ago: executing program 0 (id=377): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa842, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/167, 0xa7}], 0x1) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="931c00007d00000005f0000000000000000080ff0000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 3.149595681s ago: executing program 4 (id=378): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x20400) syz_emit_ethernet(0xfc, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0xc6, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @mcast2, [{0x0, 0x15, "122b47b32e56e24b11f34b608816e57fe51d91f8de58259602058b08dbec77f830ce59b82967764698a6759539b0298be679061fd2bb777f3d21fd044b77f5d66bd987c2b986fa23d4de9a7722025644125542c92d4952e5e79d8bf2ebc35efd13bf0b869b2c8b760f2d4e068f4940549ce605b7b517375a95a92ac73778099aa14e0dbe087035878b98ce678b8b5d8d3edaad1ff27706cbbe47d1ef741f87030fd563d4d2388b35c23c0e2e"}]}}}}}}, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd56, 0x0, 0x0, 0x0, 0x0}}, 0x10) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000084000040"]) 2.850145977s ago: executing program 1 (id=379): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x22, 0x2, 0x24) close(r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r1, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r6, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r7) sendmmsg$inet(r5, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000a00)="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", 0xfe5}], 0x1}}], 0x1, 0xf00) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x100000, 0x109000}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000019000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40808) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 2.793313741s ago: executing program 3 (id=380): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000013"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000524500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2.167178143s ago: executing program 4 (id=381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYBLOB="050700004000ffc25e77e30000"], 0x14}}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x6c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x3d, 0x8, "fcd40fcdc6571022bd372f8a506502c92f84ef5d8927d7b2d423c063a463386db6e3c6ac7ce0eee162ee986d207a3cbbfbe03547d6d162fa2f"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0xd0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a30000000000800034000000001140000001100010000000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a3100000000080003400000000109"], 0x34}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 1.97504998s ago: executing program 3 (id=382): r0 = socket$inet6(0xa, 0x80001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 1.958157049s ago: executing program 0 (id=383): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000080)="b57d4ed40f8e249b7c870eb64179473adfc6e51f0161fb970d790a869d55d1850dc898", 0x23) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000001400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.957447958s ago: executing program 2 (id=384): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 1.513425078s ago: executing program 2 (id=385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) select(0x406f205456671cf9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000240035b900000000004000000000000006000480fffd0000060003"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) tee(r1, r0, 0x8, 0x5) 1.499946276s ago: executing program 3 (id=386): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1a0d01150001"], 0x1d) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) 854.100334ms ago: executing program 0 (id=387): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0xffff0001, 0x5, 0xfffffffe, 0x5, 0x6462, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x500, 0x9, 0x0, 0x7f}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xf32, 0x1}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 789.165443ms ago: executing program 3 (id=388): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000f, 0x4000010, r0, 0xeb7cf000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000680)=0xebde, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x1e0, 0x98, 0x0, 0x98, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x68}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1003000000000000}}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff000000, 0xffffffff, 'ipvlan0\x00', 'pimreg0\x00', {}, {}, 0x33, 0x3, 0x12}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r6, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x10000000000000}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f00000003c0)=0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) open_tree(r7, &(0x7f0000000700)='./file0\x00', 0x80801) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@private}, {@dev}, {@loopback}, {@dev}, {@dev}]}]}}}}}}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) socket$kcm(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000740)={0x2, 0x0, @ioapic={0x1000, 0x0, 0x7fffffff, 0x9, 0x0, [{0x9, 0xff, 0x0, '\x00', 0x2}, {0x14, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7d, '\x00', 0x3}, {}, {0x81, 0x64, 0x5}, {0x0, 0x9, 0x2f, '\x00', 0x3}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x33, 0xc, '\x00', 0x8}, {0x2, 0x5}, {0xff, 0x5, 0x0, '\x00', 0x10}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {0x0, 0x20, 0x0, '\x00', 0x1}, {0x3, 0x0, 0x0, '\x00', 0xc0}, {0xfc, 0xa, 0x0, '\x00', 0x3}, {0x0, 0x86, 0x80, '\x00', 0x5}, {0x7, 0x2, 0x7f, '\x00', 0xfe}, {0x5, 0x0, 0x0, '\x00', 0xf6}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x27}, {0x58, 0x6}, {0x0, 0x0, 0x41}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7}]}}) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000380)={0x8, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) mq_open(&(0x7f0000000140)='ipvlan0\x00', 0x80, 0x8, &(0x7f0000000180)={0x8, 0x1, 0x99}) 0s ago: executing program 3 (id=389): r0 = socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x805, 0x0) syz_open_dev$sndpcmc(0x0, 0x60e9, 0x218400) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e000000040002800800", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) kernel console output (not intermixed with test programs): yz.0.65'. [ 112.910211][ T5896] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.110217][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 113.160982][ T5896] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.169148][ T5896] usb 5-1: config 0 has no interface number 0 [ 113.198338][ T30] audit: type=1326 audit(1744853395.644:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.2.72" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e19d8e169 code=0x0 [ 113.219670][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.252745][ T5896] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 113.263236][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.271587][ T5896] usb 5-1: Product: syz [ 113.275868][ T5896] usb 5-1: Manufacturer: syz [ 113.280987][ T5896] usb 5-1: SerialNumber: syz [ 113.287992][ T5896] usb 5-1: config 0 descriptor?? [ 113.298535][ T5896] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 113.524336][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.555341][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.670167][ T10] usb 2-1: USB disconnect, device number 9 [ 113.732437][ T6184] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772170 (5368709440 ns) > initial count (640 ns). Using initial count to start timer. [ 113.746067][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.75'. [ 113.763786][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 113.798727][ T6187] netlink: 'syz.0.75': attribute type 8 has an invalid length. [ 113.823858][ T6185] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772170 (5368709440 ns) > initial count (640 ns). Using initial count to start timer. [ 113.961181][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 114.038122][ T9] usb 3-1: device descriptor read/all, error -71 [ 114.098354][ T5899] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.290203][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 114.402473][ T5899] usb 4-1: config 1 has an invalid interface number: 6 but max is 0 [ 114.425403][ T5899] usb 4-1: config 1 has no interface number 0 [ 114.467082][ T5896] gspca_spca1528: reg_w err -110 [ 114.490235][ T5896] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 114.845463][ T6202] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 114.926560][ T5899] usb 4-1: New USB device found, idVendor=542b, idProduct=3cdb, bcdDevice=1a.ea [ 114.962894][ T5899] usb 4-1: New USB device strings: Mfr=25, Product=39, SerialNumber=185 [ 114.980279][ T5899] usb 4-1: Product: syz [ 114.984691][ T5899] usb 4-1: Manufacturer: syz [ 114.989420][ T5899] usb 4-1: SerialNumber: syz [ 115.210377][ T5899] usb 4-1: USB disconnect, device number 3 [ 115.335688][ T6166] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 115.349376][ T6166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.375485][ T6166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.430241][ T838] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.602681][ T838] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 115.620022][ T838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.645675][ T838] usb 1-1: config 0 descriptor?? [ 115.657489][ T838] cp210x 1-1:0.0: cp210x converter detected [ 115.730214][ T5899] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 116.043064][ T5899] usb 2-1: config 4 has an invalid interface number: 174 but max is 3 [ 116.082512][ T5899] usb 2-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 116.112458][ T5899] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 4 [ 116.135162][ T5899] usb 2-1: config 4 has no interface number 0 [ 116.160673][ T6225] syzkaller0: entered promiscuous mode [ 116.166189][ T5899] usb 2-1: config 4 interface 174 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 116.166247][ T5899] usb 2-1: config 4 interface 174 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.166276][ T5899] usb 2-1: config 4 interface 174 has no altsetting 0 [ 116.204362][ T6229] FAULT_INJECTION: forcing a failure. [ 116.204362][ T6229] name failslab, interval 1, probability 0, space 0, times 0 [ 116.219908][ T6225] syzkaller0: entered allmulticast mode [ 116.236707][ T5899] usb 2-1: New USB device found, idVendor=04bf, idProduct=030a, bcdDevice=a4.76 [ 116.237705][ T6229] CPU: 1 UID: 0 PID: 6229 Comm: syz.3.85 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 116.237733][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.237745][ T6229] Call Trace: [ 116.237753][ T6229] [ 116.237761][ T6229] dump_stack_lvl+0x241/0x360 [ 116.237811][ T6229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.237841][ T6229] ? __pfx__printk+0x10/0x10 [ 116.237873][ T6229] ? __pfx___might_resched+0x10/0x10 [ 116.237903][ T6229] should_fail_ex+0x424/0x570 [ 116.237931][ T6229] should_failslab+0xac/0x100 [ 116.237960][ T6229] __kvmalloc_node_noprof+0x170/0x5a0 [ 116.237991][ T6229] ? rhashtable_init_noprof+0x534/0xa60 [ 116.238024][ T6229] rhashtable_init_noprof+0x534/0xa60 [ 116.238059][ T6229] rhltable_init_noprof+0x1c/0x60 [ 116.238085][ T6229] nf_tables_newtable+0x806/0x1e80 [ 116.238131][ T6229] ? __pfx_nf_tables_newtable+0x10/0x10 [ 116.238171][ T6229] ? __nla_parse+0x40/0x60 [ 116.238200][ T6229] nfnetlink_rcv+0x12eb/0x28f0 [ 116.238271][ T6229] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 116.238348][ T6229] ? skb_clone+0x240/0x390 [ 116.238383][ T6229] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.238414][ T6229] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.238446][ T6229] netlink_unicast+0x7f8/0x9a0 [ 116.238481][ T6229] ? __pfx_netlink_unicast+0x10/0x10 [ 116.238509][ T6229] ? skb_put+0x114/0x1f0 [ 116.238533][ T6229] netlink_sendmsg+0x8c3/0xcd0 [ 116.238575][ T6229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.238609][ T6229] ? aa_sock_msg_perm+0x91/0x160 [ 116.238643][ T6229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.238669][ T6229] __sock_sendmsg+0x221/0x270 [ 116.238700][ T6229] ____sys_sendmsg+0x523/0x860 [ 116.238731][ T6229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.238750][ T6229] ? __fget_files+0x2a/0x420 [ 116.238772][ T6229] ? __fget_files+0x2a/0x420 [ 116.238799][ T6229] __sys_sendmsg+0x271/0x360 [ 116.238827][ T6229] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.238904][ T6229] ? do_syscall_64+0xb6/0x230 [ 116.238933][ T6229] do_syscall_64+0xf3/0x230 [ 116.238958][ T6229] ? clear_bhb_loop+0x45/0xa0 [ 116.238982][ T6229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.239005][ T6229] RIP: 0033:0x7fe72e18e169 [ 116.239027][ T6229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.239044][ T6229] RSP: 002b:00007fe72f0db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.239065][ T6229] RAX: ffffffffffffffda RBX: 00007fe72e3b5fa0 RCX: 00007fe72e18e169 [ 116.239079][ T6229] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 116.239091][ T6229] RBP: 00007fe72f0db090 R08: 0000000000000000 R09: 0000000000000000 [ 116.239103][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.239133][ T6229] R13: 0000000000000000 R14: 00007fe72e3b5fa0 R15: 00007fe72e4dfa28 [ 116.239165][ T6229] [ 116.605652][ T838] usb 1-1: cp210x converter now attached to ttyUSB0 [ 116.840446][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.849023][ T5899] usb 2-1: Product: П [ 116.853287][ T5899] usb 2-1: Manufacturer: 鋈ﱙ嬺弮蓜ś銫뭋ê—跳沶ꛚ혀ᇙﭓ饯庂ﹰ益釉掸籆괄î¶å¼°á²Žâ½©å‰©ìª³ê–’䪻脑㗥ꮂ䜀褽ඪ [ 116.868751][ T5899] usb 2-1: SerialNumber: syz [ 116.999649][ T5913] usb 5-1: USB disconnect, device number 5 [ 117.130531][ T5899] usb 2-1: USB disconnect, device number 10 [ 117.179431][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 117.619634][ T6244] xt_bpf: check failed: parse error [ 117.751926][ T3026] bond0: (slave bond_slave_0): interface is now down [ 117.779579][ T3026] bond0: (slave bond_slave_1): interface is now down [ 117.800145][ T5913] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.819471][ T3026] bond0: now running without any active interface! [ 117.960390][ T5899] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.960564][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 117.986623][ T5913] usb 4-1: config 0 has no interfaces? [ 117.994168][ T5913] usb 4-1: config 0 has no interfaces? [ 118.007818][ T5913] usb 4-1: config 0 has no interfaces? [ 118.015742][ T5913] usb 4-1: config 0 has no interfaces? [ 118.023865][ T5913] usb 4-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 118.042685][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.074380][ T5913] usb 4-1: config 0 descriptor?? [ 118.131897][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 118.150136][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 118.178403][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.197210][ T5899] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 118.239820][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.266977][ T5899] usb 5-1: Product: syz [ 118.307435][ T5899] usb 5-1: Manufacturer: syz [ 118.310447][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 118.334239][ T5899] usb 5-1: SerialNumber: syz [ 118.347484][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.383148][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.408984][ T24] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 118.430200][ T5899] usb 5-1: config 0 descriptor?? [ 118.438843][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.458770][ T6258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.474089][ T5899] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 118.493997][ T6258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.505228][ T24] usb 3-1: config 0 descriptor?? [ 118.520149][ T5899] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 119.197884][ T6262] dccp_v4_rcv: dropped packet with invalid checksum [ 119.286352][ T24] usb 3-1: string descriptor 0 read error: -71 [ 119.305931][ T24] usb 3-1: USB disconnect, device number 11 [ 120.425195][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 120.609761][ T5896] usb 4-1: USB disconnect, device number 4 [ 120.706400][ T6272] FAULT_INJECTION: forcing a failure. [ 120.706400][ T6272] name failslab, interval 1, probability 0, space 0, times 0 [ 120.731894][ T6272] CPU: 0 UID: 0 PID: 6272 Comm: syz.3.96 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 120.731925][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.731941][ T6272] Call Trace: [ 120.731950][ T6272] [ 120.731958][ T6272] dump_stack_lvl+0x241/0x360 [ 120.732008][ T6272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.732039][ T6272] ? __pfx__printk+0x10/0x10 [ 120.732066][ T6272] ? __debug_object_init+0x284/0x480 [ 120.732102][ T6272] ? __pfx___might_resched+0x10/0x10 [ 120.732133][ T6272] should_fail_ex+0x424/0x570 [ 120.732160][ T6272] should_failslab+0xac/0x100 [ 120.732191][ T6272] __kmalloc_cache_noprof+0x73/0x370 [ 120.732219][ T6272] ? nft_trans_table_add+0x57/0x400 [ 120.732246][ T6272] nft_trans_table_add+0x57/0x400 [ 120.732274][ T6272] nf_tables_newtable+0x1177/0x1e80 [ 120.732320][ T6272] ? __pfx_nf_tables_newtable+0x10/0x10 [ 120.732362][ T6272] ? __nla_parse+0x40/0x60 [ 120.732393][ T6272] nfnetlink_rcv+0x12eb/0x28f0 [ 120.732454][ T6272] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 120.732533][ T6272] ? skb_clone+0x240/0x390 [ 120.732570][ T6272] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.732604][ T6272] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.732636][ T6272] netlink_unicast+0x7f8/0x9a0 [ 120.732673][ T6272] ? __pfx_netlink_unicast+0x10/0x10 [ 120.732702][ T6272] ? skb_put+0x114/0x1f0 [ 120.732728][ T6272] netlink_sendmsg+0x8c3/0xcd0 [ 120.732772][ T6272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.732807][ T6272] ? aa_sock_msg_perm+0x91/0x160 [ 120.732849][ T6272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.732878][ T6272] __sock_sendmsg+0x221/0x270 [ 120.732910][ T6272] ____sys_sendmsg+0x523/0x860 [ 120.732942][ T6272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.732962][ T6272] ? __fget_files+0x2a/0x420 [ 120.732985][ T6272] ? __fget_files+0x2a/0x420 [ 120.733014][ T6272] __sys_sendmsg+0x271/0x360 [ 120.733043][ T6272] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.733125][ T6272] ? do_syscall_64+0xb6/0x230 [ 120.733156][ T6272] do_syscall_64+0xf3/0x230 [ 120.733182][ T6272] ? clear_bhb_loop+0x45/0xa0 [ 120.733208][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.733229][ T6272] RIP: 0033:0x7fe72e18e169 [ 120.733253][ T6272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.733269][ T6272] RSP: 002b:00007fe72f0db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.733298][ T6272] RAX: ffffffffffffffda RBX: 00007fe72e3b5fa0 RCX: 00007fe72e18e169 [ 120.733313][ T6272] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 120.733326][ T6272] RBP: 00007fe72f0db090 R08: 0000000000000000 R09: 0000000000000000 [ 120.733338][ T6272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.733349][ T6272] R13: 0000000000000000 R14: 00007fe72e3b5fa0 R15: 00007fe72e4dfa28 [ 120.733381][ T6272] [ 121.100148][ T5899] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 121.273956][ T5899] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 121.300548][ T5899] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 121.309679][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.317809][ T5899] usb 3-1: Product: syz [ 121.322038][ T5899] usb 3-1: Manufacturer: syz [ 121.326662][ T5899] usb 3-1: SerialNumber: syz [ 121.341578][ T5899] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 121.831531][ T838] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.994266][ T838] usb 4-1: config 0 has an invalid descriptor of length 209, skipping remainder of the config [ 122.006336][ T838] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.017269][ T838] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 122.026792][ T838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.056111][ T838] usb 4-1: config 0 descriptor?? [ 122.091816][ T6268] warning: `syz.2.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.136693][ T9] usb 1-1: USB disconnect, device number 6 [ 122.154418][ T5899] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 122.212194][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 122.248448][ T9] cp210x 1-1:0.0: device disconnected [ 122.416285][ T5899] usb 3-1: USB disconnect, device number 12 [ 122.455922][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 122.570333][ T838] usb 5-1: USB disconnect, device number 6 [ 123.190657][ T5896] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 123.300706][ T838] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 123.449207][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 123.563473][ T5896] usb 2-1: not running at top speed; connect to a high speed hub [ 123.583311][ T838] usb 5-1: config 0 has no interfaces? [ 123.597927][ T838] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 123.607650][ T838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.627858][ T838] usb 5-1: Product: syz [ 123.639918][ T838] usb 5-1: Manufacturer: syz [ 123.647840][ T838] usb 5-1: SerialNumber: syz [ 123.668209][ T838] usb 5-1: config 0 descriptor?? [ 123.717240][ T5896] usb 2-1: config 1 interface 0 has no altsetting 0 [ 123.756272][ T5896] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 123.890031][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 123.949700][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.960791][ T5899] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.988328][ T5896] usb 2-1: Product: syz [ 124.005154][ T5896] usb 2-1: Manufacturer: syz [ 124.015091][ T5896] usb 2-1: SerialNumber: syz [ 124.050118][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 124.057935][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 124.084384][ T9] usb 3-1: config 0 has no interface number 0 [ 124.128814][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 124.137049][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 124.151603][ T5899] usb 1-1: config 0 has no interfaces? [ 124.157739][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 124.173358][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.182860][ T9] usb 3-1: Product: syz [ 124.187412][ T9] usb 3-1: Manufacturer: syz [ 124.194863][ T5899] usb 1-1: config 0 has no interfaces? [ 124.206005][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.103'. [ 124.215798][ T5899] usb 1-1: config 0 has no interfaces? [ 124.221734][ T9] usb 3-1: SerialNumber: syz [ 124.231952][ T5899] usb 1-1: config 0 has no interfaces? [ 124.243541][ T5899] usb 1-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 124.276425][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.285470][ T9] usb 3-1: config 0 descriptor?? [ 124.294365][ T9] smsc75xx v1.0.0 [ 124.303724][ T5899] usb 1-1: config 0 descriptor?? [ 124.656614][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.672117][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.817285][ T838] usb 4-1: USB disconnect, device number 5 [ 124.970109][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 125.014606][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 125.206655][ T6310] FAULT_INJECTION: forcing a failure. [ 125.206655][ T6310] name failslab, interval 1, probability 0, space 0, times 0 [ 125.234750][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.244234][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.249549][ T6310] CPU: 1 UID: 0 PID: 6310 Comm: syz.3.107 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 125.249578][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.249590][ T6310] Call Trace: [ 125.249598][ T6310] [ 125.249607][ T6310] dump_stack_lvl+0x241/0x360 [ 125.249649][ T6310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.249679][ T6310] ? __pfx__printk+0x10/0x10 [ 125.249713][ T6310] ? __debug_object_init+0x284/0x480 [ 125.249747][ T6310] ? __pfx___might_resched+0x10/0x10 [ 125.249777][ T6310] should_fail_ex+0x424/0x570 [ 125.249802][ T6310] should_failslab+0xac/0x100 [ 125.249831][ T6310] __kmalloc_cache_noprof+0x73/0x370 [ 125.249859][ T6310] ? nft_trans_table_add+0x57/0x400 [ 125.249885][ T6310] nft_trans_table_add+0x57/0x400 [ 125.249913][ T6310] nf_tables_newtable+0x1177/0x1e80 [ 125.249957][ T6310] ? __pfx_nf_tables_newtable+0x10/0x10 [ 125.249997][ T6310] ? __nla_parse+0x40/0x60 [ 125.250025][ T6310] nfnetlink_rcv+0x12eb/0x28f0 [ 125.250084][ T6310] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 125.250158][ T6310] ? skb_clone+0x240/0x390 [ 125.250193][ T6310] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.250225][ T6310] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.250255][ T6310] netlink_unicast+0x7f8/0x9a0 [ 125.250290][ T6310] ? __pfx_netlink_unicast+0x10/0x10 [ 125.250318][ T6310] ? skb_put+0x114/0x1f0 [ 125.250343][ T6310] netlink_sendmsg+0x8c3/0xcd0 [ 125.250384][ T6310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.250417][ T6310] ? aa_sock_msg_perm+0x91/0x160 [ 125.250451][ T6310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.250478][ T6310] __sock_sendmsg+0x221/0x270 [ 125.250526][ T6310] ____sys_sendmsg+0x523/0x860 [ 125.250560][ T6310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.250579][ T6310] ? __fget_files+0x2a/0x420 [ 125.250602][ T6310] ? __fget_files+0x2a/0x420 [ 125.250632][ T6310] __sys_sendmsg+0x271/0x360 [ 125.250660][ T6310] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.250749][ T6310] ? do_syscall_64+0xb6/0x230 [ 125.250780][ T6310] do_syscall_64+0xf3/0x230 [ 125.250807][ T6310] ? clear_bhb_loop+0x45/0xa0 [ 125.250832][ T6310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.250852][ T6310] RIP: 0033:0x7fe72e18e169 [ 125.250871][ T6310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.250888][ T6310] RSP: 002b:00007fe72f0db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.250911][ T6310] RAX: ffffffffffffffda RBX: 00007fe72e3b5fa0 RCX: 00007fe72e18e169 [ 125.250926][ T6310] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 125.250940][ T6310] RBP: 00007fe72f0db090 R08: 0000000000000000 R09: 0000000000000000 [ 125.250952][ T6310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.250964][ T6310] R13: 0000000000000000 R14: 00007fe72e3b5fa0 R15: 00007fe72e4dfa28 [ 125.250996][ T6310] [ 126.158113][ T6315] loop6: detected capacity change from 0 to 1 [ 126.190337][ T6315] Dev loop6: unable to read RDB block 1 [ 126.241355][ T6315] loop6: unable to read partition table [ 126.272870][ T6315] loop6: partition table beyond EOD, truncated [ 126.293343][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 126.322143][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 126.348491][ T6315] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 126.376635][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 126.399641][ T47] usb 5-1: USB disconnect, device number 7 [ 126.436201][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 126.518997][ T9] usb 3-1: USB disconnect, device number 13 [ 126.792322][ T838] usb 1-1: USB disconnect, device number 7 [ 127.295765][ T5896] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 127.768463][ T6335] netlink: 'syz.2.113': attribute type 10 has an invalid length. [ 128.007102][ T5896] usb 2-1: USB disconnect, device number 11 [ 128.107905][ T5896] usblp0: removed [ 128.630697][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 128.822280][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.953748][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 129.036417][ T47] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 129.038043][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.143592][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'. [ 129.175733][ T9] usb 3-1: config 0 descriptor?? [ 129.204173][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 129.250097][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 129.273460][ T47] usb 2-1: config 0 has no interfaces? [ 129.291546][ T47] usb 2-1: config 0 has no interfaces? [ 129.311664][ T47] usb 2-1: config 0 has no interfaces? [ 129.368576][ T47] usb 2-1: config 0 has no interfaces? [ 129.374496][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 129.409078][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.462450][ T47] usb 2-1: config 0 descriptor?? [ 129.649637][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 129.665997][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 129.714839][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 129.747526][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 129.761982][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 129.788760][ T6362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.810097][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 129.870355][ T6362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.078962][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 130.090320][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 130.104763][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 130.258129][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 130.267922][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 130.357840][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 130.388077][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 130.418612][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 130.484904][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 130.546743][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 130.584826][ T9] pwc: Registered as video103. [ 130.658410][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 130.697608][ T9] usb 3-1: USB disconnect, device number 14 [ 130.881831][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'. [ 133.034343][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.042318][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.168128][ T10] usb 2-1: USB disconnect, device number 12 [ 133.945561][ T838] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.966303][ T6392] trusted_key: syz.1.129 sent an empty control message without MSG_MORE. [ 134.180199][ T838] usb 1-1: Using ep0 maxpacket: 16 [ 134.187768][ T838] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.238336][ T838] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.308871][ T838] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.348887][ T838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.398171][ T838] usb 1-1: Product: syz [ 134.424415][ T838] usb 1-1: Manufacturer: syz [ 134.462400][ T838] usb 1-1: SerialNumber: syz [ 134.597449][ T6403] netlink: 'syz.3.132': attribute type 7 has an invalid length. [ 134.734356][ T838] usb 1-1: USB disconnect, device number 8 [ 134.790248][ T5896] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 134.890182][ T5897] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 134.943326][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.957469][ T5896] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 134.967907][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.983709][ T5896] usb 5-1: Product: syz [ 134.987936][ T5896] usb 5-1: Manufacturer: syz [ 134.995800][ T5896] usb 5-1: SerialNumber: syz [ 135.008537][ T5896] usb 5-1: config 0 descriptor?? [ 135.042195][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.057442][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.067859][ T5897] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 135.077792][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.089276][ T5897] usb 2-1: config 0 descriptor?? [ 135.234573][ T5913] usb 5-1: USB disconnect, device number 8 [ 135.489891][ T1105] bond0: (slave bond_slave_0): interface is now down [ 135.506540][ T1105] bond0: (slave bond_slave_1): interface is now down [ 135.518041][ T1105] bond0: (slave syz_tun): interface is now down [ 135.549594][ T1105] bond0: now running without any active interface! [ 135.589158][ T5897] pyra 0003:1E7D:2CF6.0006: item fetching failed at offset 5/7 [ 135.642728][ T5897] pyra 0003:1E7D:2CF6.0006: parse failed [ 135.663732][ T5897] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -22 [ 135.813194][ T5897] usb 2-1: USB disconnect, device number 13 [ 135.840110][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 136.116706][ T10] usb 1-1: config 0 has no interfaces? [ 136.134531][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 136.145135][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.157761][ T10] usb 1-1: Product: syz [ 136.177758][ T10] usb 1-1: Manufacturer: syz [ 136.196048][ T10] usb 1-1: SerialNumber: syz [ 136.213118][ T10] usb 1-1: config 0 descriptor?? [ 136.410203][ T838] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 136.572900][ T838] usb 5-1: Using ep0 maxpacket: 16 [ 136.586156][ T838] usb 5-1: config index 0 descriptor too short (expected 17170, got 18) [ 136.625380][ T838] usb 5-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 136.667545][ T838] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 136.695901][ T838] usb 5-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 136.772304][ T838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.781061][ T838] usb 5-1: Product: syz [ 136.785275][ T838] usb 5-1: Manufacturer: syz [ 136.789912][ T838] usb 5-1: SerialNumber: syz [ 136.803033][ T838] usb 5-1: config 0 descriptor?? [ 136.822026][ T6431] fuse: Bad value for 'fd' [ 136.848796][ T838] ums-freecom 5-1:0.0: USB Mass Storage device detected [ 136.920207][ T5913] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 137.152824][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 137.156045][ T838] usb 5-1: USB disconnect, device number 9 [ 137.273482][ T5913] usb 3-1: config 3 has an invalid interface number: 171 but max is 0 [ 137.332881][ T5913] usb 3-1: config 3 has no interface number 0 [ 137.345253][ T6436] netlink: 'syz.3.144': attribute type 10 has an invalid length. [ 137.361993][ T5913] usb 3-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.386541][ T6436] syz_tun: entered promiscuous mode [ 137.427782][ T6436] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 137.519740][ T5913] usb 3-1: config 3 interface 171 has no altsetting 0 [ 137.617038][ T6438] loop6: detected capacity change from 0 to 7 [ 137.643572][ T6438] Dev loop6: unable to read RDB block 7 [ 137.683618][ T6438] loop6: unable to read partition table [ 137.695015][ T5913] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 137.704722][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 137.727978][ T6438] loop6: partition table beyond EOD, truncated [ 137.737945][ T5913] usb 3-1: Product: syz [ 137.759409][ T5913] usb 3-1: Manufacturer: syz [ 137.772852][ T6438] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.809906][ T6441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.993827][ T5913] usb 3-1: SerialNumber: syz [ 138.710471][ T5899] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 138.860151][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 138.878273][ T5899] usb 5-1: too many configurations: 186, using maximum allowed: 8 [ 139.273324][ T10] usb 1-1: USB disconnect, device number 9 [ 139.291116][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 139.329847][ T5899] usb 5-1: can't read configurations, error -61 [ 139.501883][ T5899] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.810932][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 139.827409][ T5899] usb 5-1: too many configurations: 186, using maximum allowed: 8 [ 139.926352][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 140.012538][ T5899] usb 5-1: can't read configurations, error -61 [ 140.102382][ T5899] usb usb5-port1: attempt power cycle [ 140.580159][ T5899] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 140.650885][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 140.740290][ T5899] usb 5-1: too many configurations: 186, using maximum allowed: 8 [ 140.779102][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 140.804832][ T5899] usb 5-1: can't read configurations, error -61 [ 140.921271][ T5913] as10x_usb: device has been detected [ 140.954462][ T5899] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 140.957853][ T5913] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 141.021776][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 141.033528][ T5899] usb 5-1: too many configurations: 186, using maximum allowed: 8 [ 141.055522][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 141.071109][ T5899] usb 5-1: can't read configurations, error -61 [ 141.078006][ T5899] usb usb5-port1: unable to enumerate USB device [ 141.124820][ T5913] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 141.234582][ T5913] as10x_usb: error during firmware upload part1 [ 141.241028][ T5913] Registered device Sky IT Digital Key (green led) [ 141.259571][ T5913] usb 3-1: USB disconnect, device number 15 [ 141.349815][ T5913] Unregistered device Sky IT Digital Key (green led) [ 141.351953][ T5913] as10x_usb: device has been disconnected [ 141.785327][ T6491] loop6: detected capacity change from 0 to 7 [ 141.806376][ T6491] Dev loop6: unable to read RDB block 7 [ 141.820942][ T6491] loop6: unable to read partition table [ 141.821393][ T6477] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.836010][ T6491] loop6: partition table beyond EOD, truncated [ 141.852845][ T6491] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 141.874185][ T6477] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.987230][ T6477] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 142.125361][ T6477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.136589][ T6477] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.185981][ T6477] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.207632][ T6477] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 142.224742][ T6477] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 142.325795][ T6477] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 142.431392][ T6477] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.562946][ T6477] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 142.601722][ T6477] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 142.644787][ T6477] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.651173][ T6477] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 142.719431][ T6477] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.013432][ T6516] FAULT_INJECTION: forcing a failure. [ 143.013432][ T6516] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 143.026777][ T6516] CPU: 1 UID: 0 PID: 6516 Comm: syz.3.162 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 143.026804][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.026817][ T6516] Call Trace: [ 143.026825][ T6516] [ 143.026833][ T6516] dump_stack_lvl+0x241/0x360 [ 143.026871][ T6516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.026902][ T6516] ? __pfx__printk+0x10/0x10 [ 143.026942][ T6516] should_fail_ex+0x424/0x570 [ 143.026968][ T6516] _copy_from_user+0x2d/0xb0 [ 143.026997][ T6516] copy_from_sockptr_offset+0x60/0xb0 [ 143.027025][ T6516] do_ip6t_set_ctl+0xbed/0x1270 [ 143.027054][ T6516] ? __pfx___mutex_trylock_common+0x10/0x10 [ 143.027078][ T6516] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 143.027115][ T6516] ? __mutex_unlock_slowpath+0x229/0x800 [ 143.027145][ T6516] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.027173][ T6516] ? rcu_read_lock_any_held+0xbb/0x160 [ 143.027196][ T6516] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 143.027222][ T6516] nf_setsockopt+0x295/0x2c0 [ 143.027254][ T6516] dccp_setsockopt+0x17e/0x1170 [ 143.027274][ T6516] ? ksys_write+0x24e/0x2d0 [ 143.027300][ T6516] ? __pfx_aa_sk_perm+0x10/0x10 [ 143.027322][ T6516] ? __pfx_dccp_setsockopt+0x10/0x10 [ 143.027342][ T6516] ? aa_sock_opt_perm+0x79/0x120 [ 143.027366][ T6516] ? sock_common_setsockopt+0x37/0xc0 [ 143.027393][ T6516] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 143.027416][ T6516] do_sock_setsockopt+0x3b1/0x710 [ 143.027438][ T6516] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 143.027453][ T6516] ? __fget_files+0x2a/0x420 [ 143.027471][ T6516] ? __fget_files+0x39d/0x420 [ 143.027485][ T6516] ? __fget_files+0x2a/0x420 [ 143.027506][ T6516] __x64_sys_setsockopt+0x1ee/0x280 [ 143.027529][ T6516] do_syscall_64+0xf3/0x230 [ 143.027550][ T6516] ? clear_bhb_loop+0x45/0xa0 [ 143.027570][ T6516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.027586][ T6516] RIP: 0033:0x7fe72e18e169 [ 143.027601][ T6516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.027614][ T6516] RSP: 002b:00007fe72f099038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 143.027632][ T6516] RAX: ffffffffffffffda RBX: 00007fe72e3b6160 RCX: 00007fe72e18e169 [ 143.027644][ T6516] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 143.027654][ T6516] RBP: 00007fe72f099090 R08: 00000000000003c8 R09: 0000000000000000 [ 143.027664][ T6516] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.027674][ T6516] R13: 0000000000000000 R14: 00007fe72e3b6160 R15: 00007fe72e4dfa28 [ 143.027698][ T6516] [ 143.384274][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.400783][ T5913] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 143.660143][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 143.667595][ T5913] usb 5-1: config index 0 descriptor too short (expected 17170, got 18) [ 143.681230][ T5913] usb 5-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 143.695094][ T5897] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 143.789140][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 143.865167][ T5913] usb 5-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 143.882289][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.001454][ T6531] delete_channel: no stack [ 144.082720][ T5897] usb 4-1: not running at top speed; connect to a high speed hub [ 144.160050][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.187742][ T5913] usb 5-1: Product: syz [ 144.240708][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 144.255903][ T1226] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 144.258781][ T5913] usb 5-1: Manufacturer: syz [ 144.270081][ T838] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 144.323548][ T5897] usb 4-1: config 1 interface 0 has no altsetting 0 [ 144.342589][ T5913] usb 5-1: SerialNumber: syz [ 144.360236][ T5897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 144.371029][ T5913] usb 5-1: config 0 descriptor?? [ 144.424491][ T1226] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.455972][ T1226] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 144.486686][ T1226] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.497008][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.506467][ T838] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.520518][ T838] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 144.532132][ T1226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.541844][ T838] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.551152][ T838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.573243][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.593161][ T6531] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 144.601883][ T5913] ums-freecom 5-1:0.0: USB Mass Storage device detected [ 144.610594][ T6529] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 144.631021][ T1226] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.641036][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.662139][ T5897] usb 4-1: Product: syz [ 144.673568][ T5897] usb 4-1: Manufacturer: syz [ 144.696007][ T5897] usb 4-1: SerialNumber: syz [ 144.756830][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 144.801600][ T5913] usb 5-1: USB disconnect, device number 14 [ 144.882966][ T6529] netlink: 268 bytes leftover after parsing attributes in process `syz.1.164'. [ 144.911779][ T6529] unsupported nla_type 65024 [ 144.928783][ T6529] delete_channel: no stack [ 145.064781][ T6547] netlink: 268 bytes leftover after parsing attributes in process `syz.2.165'. [ 145.151356][ T1226] usb 2-1: USB disconnect, device number 14 [ 145.191381][ T838] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.344509][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 145.444178][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.560191][ T838] usb 3-1: USB disconnect, device number 16 [ 145.607901][ T10] usb 5-1: config 0 has no interfaces? [ 145.624348][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 145.633675][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.673617][ T10] usb 5-1: Product: syz [ 145.708516][ T10] usb 5-1: Manufacturer: syz [ 145.729119][ T10] usb 5-1: SerialNumber: syz [ 145.796473][ T10] usb 5-1: config 0 descriptor?? [ 145.938869][ T6541] udevd[6541]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.049361][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 146.240383][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.323193][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 146.507751][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 146.562308][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.722962][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.234377][ T5897] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 147.310795][ T5897] usb 4-1: USB disconnect, device number 6 [ 147.388225][ T5897] usblp0: removed [ 147.394749][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 147.520137][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.115778][ T6570] loop6: detected capacity change from 0 to 1 [ 148.168709][ T6570] Dev loop6: unable to read RDB block 1 [ 148.209604][ T6570] loop6: unable to read partition table [ 148.240447][ T6570] loop6: partition table beyond EOD, truncated [ 148.240551][ T6570] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 148.320206][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.357258][ T30] audit: type=1804 audit(1744853430.774:4): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.171" name="file0" dev="ramfs" ino=11382 res=1 errno=0 [ 148.424675][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 148.530163][ T5896] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 148.530403][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 148.604877][ T6581] xt_policy: neither incoming nor outgoing policy selected [ 148.640137][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.685599][ T5896] usb 3-1: device descriptor read/64, error -32 [ 148.741229][ T6585] input: syz0 as /devices/virtual/input/input9 [ 148.762685][ T5897] usb 5-1: USB disconnect, device number 15 [ 148.807916][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.859439][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 149.010427][ T5896] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 149.301889][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.326936][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.428344][ T5896] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 149.490276][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.519651][ T5896] usb 3-1: config 0 descriptor?? [ 149.540095][ T5913] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 149.550074][ T1226] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 149.743085][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 149.779546][ T5913] usb 4-1: config 0 has an invalid interface number: 43 but max is 0 [ 149.820975][ T5913] usb 4-1: config 0 has no interface number 0 [ 149.878516][ T5913] usb 4-1: config 0 interface 43 has no altsetting 0 [ 149.980231][ T1226] usb 5-1: Using ep0 maxpacket: 32 [ 149.991883][ T1226] usb 5-1: config 0 has an invalid interface number: 43 but max is 0 [ 150.012606][ T1226] usb 5-1: config 0 has no interface number 0 [ 150.018745][ T1226] usb 5-1: config 0 interface 43 has no altsetting 0 [ 150.094539][ T1226] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 150.142568][ T1226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.185996][ T5913] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 150.204828][ T5896] steelseries 0003:1038:12B6.0007: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 150.245909][ T1226] usb 5-1: config 0 descriptor?? [ 150.379065][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.448973][ T5913] usb 4-1: config 0 descriptor?? [ 150.530449][ T6600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.615461][ T6600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.636621][ T6600] mmap: syz.4.176 (6600) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.020348][ T5896] steelseries 0003:1038:12B6.0007: hid_hw_raw_request() failed with -71 [ 151.030466][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 151.042512][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.051874][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.136038][ T5896] usb 3-1: USB disconnect, device number 18 [ 151.520820][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.597932][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.874659][ T24] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 152.091158][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.111700][ T24] usb 1-1: config 0 descriptor?? [ 152.430126][ T5896] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 152.527294][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 152.534187][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 152.630002][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 152.668551][ T5896] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 152.696204][ T24] usb 1-1: USB disconnect, device number 10 [ 152.777099][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.860082][ T5896] usb 3-1: Product: syz [ 152.864386][ T5896] usb 3-1: Manufacturer: syz [ 152.869046][ T5896] usb 3-1: SerialNumber: syz [ 152.965677][ T5896] usb 3-1: config 0 descriptor?? [ 153.040348][ T5896] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 153.044440][ T1226] usb 5-1: string descriptor 0 read error: -71 [ 153.095931][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 153.219908][ T1226] usb 5-1: USB disconnect, device number 16 [ 153.341210][ T5913] usb 4-1: string descriptor 0 read error: -71 [ 153.542317][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.43/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.579018][ T5913] usb 4-1: USB disconnect, device number 7 [ 153.711750][ T6652] fuse: Unknown parameter '0x0000000000000004' [ 153.810692][ T5896] gspca_sonixj: reg_w1 err -71 [ 153.836150][ T5896] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 153.845283][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.43/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.850137][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 153.910403][ T5896] usb 3-1: USB disconnect, device number 19 [ 154.005393][ T6656] loop6: detected capacity change from 0 to 7 [ 154.041053][ T6656] Dev loop6: unable to read RDB block 7 [ 154.050442][ T6656] loop6: AHDI p3 p4 [ 154.054419][ T6656] loop6: partition table partially beyond EOD, truncated [ 154.085884][ T6656] loop6: p3 start 1697644645 is beyond EOD, truncated [ 154.093285][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 154.109669][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 154.127180][ T10] usb 5-1: config 0 has no interface number 0 [ 154.154129][ T10] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 21760, setting to 1024 [ 154.180042][ T10] usb 5-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 154.196935][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 154.207196][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.231227][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 154.240942][ T10] usb 5-1: Product: syz [ 154.246090][ T10] usb 5-1: Manufacturer: syz [ 154.255231][ T10] usb 5-1: SerialNumber: syz [ 154.263090][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 154.283270][ T10] usb 5-1: config 0 descriptor?? [ 154.293369][ T6653] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.305038][ T10] smsc95xx v2.0.0 [ 154.516457][ T6653] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.940185][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 155.067722][ T1226] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 155.095354][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 155.115059][ T6676] loop6: detected capacity change from 0 to 7 [ 155.124745][ T6676] Dev loop6: unable to read RDB block 7 [ 155.141776][ T6676] loop6: unable to read partition table [ 155.147668][ T6676] loop6: partition table beyond EOD, truncated [ 155.217785][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 155.236612][ T6676] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 155.245704][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 155.270615][ T47] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.275162][ T10] usb 5-1: USB disconnect, device number 17 [ 155.290057][ T1226] usb 3-1: Using ep0 maxpacket: 32 [ 155.298662][ T1226] usb 3-1: config 0 has an invalid interface number: 43 but max is 0 [ 155.307583][ T1226] usb 3-1: config 0 has no interface number 0 [ 155.319662][ T1226] usb 3-1: config 0 interface 43 has no altsetting 0 [ 155.328225][ T1226] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 155.340282][ T5896] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 155.377831][ T1226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.409870][ T1226] usb 3-1: config 0 descriptor?? [ 155.442488][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.468398][ T47] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.505391][ T47] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.528511][ T5896] usb 2-1: config 7 descriptor has 1 excess byte, ignoring [ 155.539822][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.553588][ T5896] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 155.636145][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.645883][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.660639][ T6672] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.687186][ T5896] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 155.697830][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.960218][ T5896] usb 2-1: Product: syz [ 155.964454][ T5896] usb 2-1: Manufacturer: syz [ 156.022318][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.061216][ T5896] usb 2-1: SerialNumber: syz [ 156.090367][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 156.283955][ T5896] rndis_host 2-1:7.0: skipping garbage [ 156.297787][ T6681] can: request_module (can-proto-0) failed. [ 156.332996][ T5896] usb 2-1: bad CDC descriptors [ 156.356843][ T5896] option 2-1:7.0: GSM modem (1-port) converter detected [ 156.376994][ T47] usb 4-1: USB disconnect, device number 8 [ 156.393687][ T10] usb 1-1: config 0 has no interfaces? [ 156.430730][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 156.440440][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.477241][ T10] usb 1-1: Product: syz [ 156.487739][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.503798][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.517350][ T10] usb 1-1: Manufacturer: syz [ 156.525311][ T5893] udevd[5893]: setting owner of /dev/snd/midiC3D0 to uid=0, gid=29 failed: No such file or directory [ 156.527714][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.548698][ T10] usb 1-1: SerialNumber: syz [ 156.561470][ T5847] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 156.566608][ T10] usb 1-1: config 0 descriptor?? [ 156.613991][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.667028][ T838] usb 2-1: USB disconnect, device number 15 [ 156.677580][ T838] option 2-1:7.0: device disconnected [ 156.760048][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 156.775449][ T6541] udevd[6541]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.877548][ T5847] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 156.888374][ T5847] usb 5-1: config 0 has no interface number 0 [ 156.909298][ T5847] usb 5-1: config 0 interface 184 has no altsetting 0 [ 156.949169][ T5847] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 156.975030][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.038887][ T5847] usb 5-1: Product: syz [ 157.043754][ T5847] usb 5-1: Manufacturer: syz [ 157.049763][ T5847] usb 5-1: SerialNumber: syz [ 157.063844][ T5847] usb 5-1: config 0 descriptor?? [ 157.079832][ T5847] smsc75xx v1.0.0 [ 157.410057][ T47] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 157.570060][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 157.579777][ T47] usb 2-1: config 0 has an invalid interface number: 43 but max is 0 [ 157.588349][ T47] usb 2-1: config 0 has no interface number 0 [ 157.594771][ T47] usb 2-1: config 0 interface 43 has no altsetting 0 [ 157.603425][ T47] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 157.625718][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.662224][ T47] usb 2-1: config 0 descriptor?? [ 157.686000][ T5847] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 157.781808][ T1226] usb 3-1: string descriptor 0 read error: -71 [ 157.788161][ T5847] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 157.954296][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 157.995224][ T1226] usb 3-1: USB disconnect, device number 20 [ 158.063416][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.162399][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.684337][ T1226] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 158.712565][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 158.855715][ T1226] usb 3-1: device descriptor read/64, error -71 [ 158.879238][ T838] usb 1-1: USB disconnect, device number 11 [ 158.886594][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 158.896416][ T9] usb 4-1: no configurations [ 158.903435][ T9] usb 4-1: can't read configurations, error -22 [ 159.040495][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 159.076944][ T6709] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 159.130481][ T1226] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 159.250054][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 159.256507][ T9] usb 4-1: no configurations [ 159.261291][ T1226] usb 3-1: device descriptor read/64, error -71 [ 159.268923][ T9] usb 4-1: can't read configurations, error -22 [ 159.276946][ T9] usb usb4-port1: attempt power cycle [ 159.398509][ T1226] usb usb3-port1: attempt power cycle [ 159.630276][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 159.661663][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 159.680892][ T9] usb 4-1: no configurations [ 159.694054][ T9] usb 4-1: can't read configurations, error -22 [ 159.750359][ T1226] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 159.772154][ T1226] usb 3-1: device descriptor read/8, error -71 [ 159.830194][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 159.853225][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 159.864786][ T9] usb 4-1: no configurations [ 159.869680][ T9] usb 4-1: can't read configurations, error -22 [ 159.876710][ T9] usb usb4-port1: unable to enumerate USB device [ 159.950761][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 160.010126][ T1226] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 160.030756][ T1226] usb 3-1: device descriptor read/8, error -71 [ 160.100212][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 160.116089][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 160.126964][ T5847] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 160.132415][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.152895][ T1226] usb usb3-port1: unable to enumerate USB device [ 160.162773][ T10] usb 1-1: Product: syz [ 160.166988][ T10] usb 1-1: Manufacturer: syz [ 160.177049][ T10] usb 1-1: SerialNumber: syz [ 160.186597][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.43/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.217776][ T5847] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 160.218842][ T10] usb 1-1: config 0 descriptor?? [ 160.245399][ T5847] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 160.270433][ T5847] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 160.286166][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.206'. [ 160.304804][ T5847] usb 5-1: USB disconnect, device number 18 [ 160.462391][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 160.580994][ T47] usb 2-1: string descriptor 0 read error: -71 [ 160.654536][ T47] usb 2-1: USB disconnect, device number 16 [ 160.722645][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.43/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.863477][ T1167] bond0: (slave bond_slave_0): interface is now down [ 160.873724][ T1167] bond0: (slave bond_slave_1): interface is now down [ 160.886287][ T1167] bond0: now running without any active interface! [ 161.028556][ T6724] netlink: 44 bytes leftover after parsing attributes in process `syz.1.210'. [ 161.241496][ T6732] netlink: 'syz.1.212': attribute type 4 has an invalid length. [ 161.321212][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 161.377954][ T10] usb 1-1: USB disconnect, device number 12 [ 161.478329][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 161.488561][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 161.580158][ T1226] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 161.762308][ T1226] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 161.771626][ T1226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.795958][ T1226] usb 5-1: config 0 descriptor?? [ 161.812928][ T1226] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 162.331834][ T838] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 162.561257][ T838] usb 1-1: config 0 has no interfaces? [ 162.577524][ T838] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 162.586869][ T838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.598604][ T838] usb 1-1: Product: syz [ 162.602891][ T838] usb 1-1: Manufacturer: syz [ 162.607956][ T838] usb 1-1: SerialNumber: syz [ 162.729484][ T838] usb 1-1: config 0 descriptor?? [ 162.742785][ T6750] loop6: detected capacity change from 0 to 7 [ 162.847992][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.850283][ T6750] Dev loop6: unable to read RDB block 7 [ 162.856988][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.897406][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.917891][ T6750] loop6: unable to read partition table [ 163.031293][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.067183][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.077090][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.137816][ T5847] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 163.146010][ T6750] loop6: partition table beyond EOD, truncated [ 163.251520][ T6750] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 163.318268][ T5847] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 163.337632][ T6753] Cannot find add_set index 0 as target [ 163.447728][ T5847] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.525327][ T5847] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 163.535701][ T5847] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.558605][ T5847] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.568011][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.591850][ T5847] usbtmc 2-1:16.0: bulk endpoints not found [ 164.036423][ T1226] usb 5-1: USB disconnect, device number 19 [ 164.436388][ T1226] usb 2-1: USB disconnect, device number 17 [ 164.524738][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 164.607149][ T6760] macsec1: entered allmulticast mode [ 164.627278][ T6760] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 164.696720][ T6760] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 165.106725][ T47] usb 1-1: USB disconnect, device number 13 [ 165.233328][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 165.275396][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 165.443597][ T6774] loop6: detected capacity change from 0 to 524287999 [ 165.475119][ T6774] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.489220][ T6774] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.511865][ T6778] fuse: Bad value for 'group_id' [ 165.516859][ T6778] fuse: Bad value for 'group_id' [ 165.518586][ T6774] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.565685][ T6774] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.853050][ T6774] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.865949][ T6774] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.910237][ T6774] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.918235][ T6774] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.993865][ T6774] ldm_validate_partition_table(): Disk read failed. [ 166.000312][ T5847] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 166.026906][ T6774] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.057513][ T6774] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.077646][ T6789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.230'. [ 166.093559][ T6774] Dev loop6: unable to read RDB block 0 [ 166.142847][ T6774] loop6: unable to read partition table [ 166.170518][ T6774] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 166.183662][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 166.213066][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 166.251053][ T6781] ldm_validate_partition_table(): Disk read failed. [ 166.258195][ T6781] Dev loop6: unable to read RDB block 0 [ 166.270236][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 166.305708][ T5847] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 166.319675][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.328298][ T5847] usb 4-1: Product: syz [ 166.333125][ T5847] usb 4-1: Manufacturer: syz [ 166.337792][ T5847] usb 4-1: SerialNumber: syz [ 166.371796][ T6781] loop6: unable to read partition table [ 166.378219][ T5847] usb 4-1: config 0 descriptor?? [ 166.427863][ T5847] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 166.461809][ T6781] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 166.483818][ T5847] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 166.561780][ T6795] delete_channel: no stack [ 166.820611][ T47] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 166.877561][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 167.000089][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 167.017476][ T47] usb 2-1: config index 0 descriptor too short (expected 17170, got 18) [ 167.028451][ T47] usb 2-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 167.044671][ T47] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 167.058240][ T47] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 167.087472][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.097581][ T47] usb 2-1: Product: syz [ 167.103343][ T47] usb 2-1: Manufacturer: syz [ 167.108289][ T47] usb 2-1: SerialNumber: syz [ 167.120832][ T47] usb 2-1: config 0 descriptor?? [ 167.126779][ T5847] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 167.271647][ T5847] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 167.324894][ T47] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 167.333552][ T5896] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 167.506827][ T47] usb 2-1: USB disconnect, device number 18 [ 167.512948][ T24] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 167.520622][ T5896] usb 3-1: device descriptor read/64, error -71 [ 167.891488][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 167.910295][ T5896] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 167.949536][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 168.043837][ T5847] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 168.066326][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 168.075589][ T5847] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 168.126433][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.180199][ T5896] usb 3-1: device descriptor read/64, error -71 [ 168.210172][ T838] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 168.233831][ T24] usb 1-1: Product: syz [ 168.238184][ T24] usb 1-1: Manufacturer: syz [ 168.300819][ T5896] usb usb3-port1: attempt power cycle [ 168.353626][ T6818] loop6: detected capacity change from 0 to 7 [ 168.366328][ T6818] Dev loop6: unable to read RDB block 7 [ 168.376640][ T6818] loop6: AHDI p3 p4 [ 168.390666][ T838] usb 5-1: config 0 has no interfaces? [ 168.404385][ T838] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 168.414929][ T838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.427245][ T6818] loop6: partition table partially beyond EOD, truncated [ 168.435309][ T24] usb 1-1: SerialNumber: syz [ 168.435663][ T838] usb 5-1: Product: syz [ 168.447709][ T838] usb 5-1: Manufacturer: syz [ 168.453866][ T6818] loop6: p3 start 1697644645 is beyond EOD, truncated [ 168.473099][ T838] usb 5-1: SerialNumber: syz [ 168.591920][ T838] usb 5-1: config 0 descriptor?? [ 168.740191][ T5896] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 168.897253][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'. [ 168.906169][ T5896] usb 3-1: device descriptor read/8, error -71 [ 169.020253][ T838] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 169.221169][ T5847] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 169.280266][ T5847] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 169.286862][ T5896] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 169.300158][ T5847] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 169.319836][ T5847] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 169.328164][ T5896] usb 3-1: device descriptor read/8, error -71 [ 169.450571][ T5896] usb usb3-port1: unable to enumerate USB device [ 169.480243][ T838] usb 2-1: device descriptor read/64, error -71 [ 169.581144][ T47] usb 4-1: USB disconnect, device number 13 [ 169.770529][ T838] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 169.930365][ T838] usb 2-1: device descriptor read/64, error -71 [ 169.989369][ T6829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.244'. [ 170.071638][ T838] usb usb2-port1: attempt power cycle [ 170.171507][ T5847] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 170.350497][ T5847] usb 3-1: device descriptor read/64, error -71 [ 170.655501][ T838] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 171.000248][ T5847] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 171.050647][ T24] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 171.070748][ T838] usb 2-1: device descriptor read/8, error -71 [ 171.105823][ T24] usb 1-1: USB disconnect, device number 14 [ 171.190141][ T5847] usb 3-1: device descriptor read/64, error -71 [ 171.250986][ T24] usblp0: removed [ 171.266309][ T6836] netlink: 112 bytes leftover after parsing attributes in process `syz.3.247'. [ 171.320152][ T838] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 171.368175][ T5847] usb usb3-port1: attempt power cycle [ 171.377454][ T838] usb 2-1: device descriptor read/8, error -71 [ 171.436602][ T5896] usb 5-1: USB disconnect, device number 20 [ 171.497216][ T6840] FAULT_INJECTION: forcing a failure. [ 171.497216][ T6840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.514566][ T838] usb usb2-port1: unable to enumerate USB device [ 171.528369][ T6840] CPU: 0 UID: 0 PID: 6840 Comm: syz.3.249 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 171.528400][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.528412][ T6840] Call Trace: [ 171.528420][ T6840] [ 171.528428][ T6840] dump_stack_lvl+0x241/0x360 [ 171.528467][ T6840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.528497][ T6840] ? __pfx__printk+0x10/0x10 [ 171.528537][ T6840] should_fail_ex+0x424/0x570 [ 171.528564][ T6840] _copy_to_user+0x31/0xb0 [ 171.528597][ T6840] simple_read_from_buffer+0xc4/0x170 [ 171.528630][ T6840] proc_fail_nth_read+0x1ef/0x260 [ 171.528655][ T6840] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.528680][ T6840] ? rw_verify_area+0x246/0x630 [ 171.528715][ T6840] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.528739][ T6840] vfs_read+0x21f/0xb90 [ 171.528767][ T6840] ? __pfx___mutex_lock+0x10/0x10 [ 171.528795][ T6840] ? __pfx_vfs_read+0x10/0x10 [ 171.528821][ T6840] ? __fget_files+0x2a/0x420 [ 171.528841][ T6840] ? __fget_files+0x39d/0x420 [ 171.528858][ T6840] ? __fget_files+0x2a/0x420 [ 171.528885][ T6840] ksys_read+0x19d/0x2d0 [ 171.528911][ T6840] ? __pfx_ksys_read+0x10/0x10 [ 171.528940][ T6840] ? do_syscall_64+0xb6/0x230 [ 171.528970][ T6840] do_syscall_64+0xf3/0x230 [ 171.528995][ T6840] ? clear_bhb_loop+0x45/0xa0 [ 171.529019][ T6840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.529038][ T6840] RIP: 0033:0x7fe72e18cb7c [ 171.529057][ T6840] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 171.529072][ T6840] RSP: 002b:00007fe72f0db030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.529094][ T6840] RAX: ffffffffffffffda RBX: 00007fe72e3b5fa0 RCX: 00007fe72e18cb7c [ 171.529108][ T6840] RDX: 000000000000000f RSI: 00007fe72f0db0a0 RDI: 0000000000000005 [ 171.529120][ T6840] RBP: 00007fe72f0db090 R08: 0000000000000000 R09: 0000000000000000 [ 171.529132][ T6840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.529144][ T6840] R13: 0000000000000000 R14: 00007fe72e3b5fa0 R15: 00007fe72e4dfa28 [ 171.529175][ T6840] [ 171.802824][ T5847] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 171.834156][ T5847] usb 3-1: device descriptor read/8, error -71 [ 171.848593][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'. [ 171.921392][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 172.042246][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 172.100031][ T5847] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 172.150019][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 172.177441][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 172.186447][ T6855] bridge_slave_1: left allmulticast mode [ 172.192211][ T6855] bridge_slave_1: left promiscuous mode [ 172.198745][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.229326][ T5847] usb 3-1: device descriptor read/8, error -71 [ 172.236115][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.256466][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.285904][ T24] usb 1-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 172.369648][ T6855] bridge_slave_0: left allmulticast mode [ 172.376512][ T6855] bridge_slave_0: left promiscuous mode [ 172.383897][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.394615][ T5847] usb usb3-port1: unable to enumerate USB device [ 172.445123][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.475394][ T24] usb 1-1: config 0 descriptor?? [ 172.841214][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.860901][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.120497][ T24] hid_mf 0003:0079:1843.0008: unbalanced collection at end of report description [ 173.199686][ T24] hid_mf 0003:0079:1843.0008: HID parse failed. [ 173.211797][ T24] hid_mf 0003:0079:1843.0008: probe with driver hid_mf failed with error -22 [ 173.601473][ T6877] netlink: 596 bytes leftover after parsing attributes in process `syz.1.261'. [ 174.046886][ T24] usb 1-1: USB disconnect, device number 15 [ 174.452717][ T6879] loop6: detected capacity change from 0 to 1 [ 174.499810][ T6879] Dev loop6: unable to read RDB block 1 [ 174.505747][ T6879] loop6: unable to read partition table [ 174.512175][ T6879] loop6: partition table beyond EOD, truncated [ 174.518377][ T6879] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 175.122611][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 175.145185][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 175.320078][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 175.525748][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.537111][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.580062][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.636831][ T6897] loop2: detected capacity change from 0 to 7 [ 175.651857][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.656460][ T6897] Dev loop2: unable to read RDB block 7 [ 175.690559][ T6897] loop2: unable to read partition table [ 175.702578][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.732085][ T9] usb 1-1: config 0 descriptor?? [ 175.747169][ T6897] loop2: partition table beyond EOD, truncated [ 175.807577][ T6897] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 176.153754][ T9] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 176.188942][ T9] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 176.434524][ T24] usb 1-1: USB disconnect, device number 16 [ 177.185306][ T6919] loop6: detected capacity change from 0 to 7 [ 177.195130][ T6920] delete_channel: no stack [ 177.261433][ T6919] Dev loop6: unable to read RDB block 7 [ 177.292674][ T6919] loop6: AHDI p3 p4 [ 177.300167][ T6919] loop6: partition table partially beyond EOD, truncated [ 177.338452][ T6919] loop6: p3 start 1697644645 is beyond EOD, truncated [ 177.480059][ T5896] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 177.495364][ T6926] cgroup: fork rejected by pids controller in /syz3 [ 177.614945][ T6927] syz.4.280 (6927): drop_caches: 0 [ 177.665719][ T5896] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.681759][ T5896] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 177.683327][ T6983] Cannot find del_set index 0 as target [ 177.698315][ T5896] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.756918][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.773940][ T6920] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.793216][ T5896] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.968853][ T5862] bond0: (slave syz_tun): Releasing backup interface [ 178.221320][ T7042] netlink: 268 bytes leftover after parsing attributes in process `syz.1.275'. [ 178.258014][ T1085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.262240][ T5847] usb 2-1: USB disconnect, device number 23 [ 178.529225][ T1085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.639343][ T1085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.769327][ T1085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.000169][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 179.186510][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 179.209198][ T9] usb 5-1: config 0 has no interfaces? [ 179.228010][ T9] usb 5-1: config 0 has no interfaces? [ 179.249894][ T9] usb 5-1: config 0 has no interfaces? [ 179.291864][ T9] usb 5-1: config 0 has no interfaces? [ 179.297802][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 179.334836][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.391268][ T9] usb 5-1: config 0 descriptor?? [ 179.606279][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.620507][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.628416][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.671179][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.679748][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.840283][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 179.998980][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.018467][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.135015][ T9] usb 3-1: config 0 has no interfaces? [ 180.140732][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 180.191412][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 180.224391][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.292146][ T9] usb 3-1: Product: syz [ 180.308383][ T9] usb 3-1: Manufacturer: syz [ 180.320776][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 180.348151][ T9] usb 3-1: SerialNumber: syz [ 180.353678][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.403284][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.425061][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.447986][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 180.463821][ T9] usb 3-1: config 0 descriptor?? [ 180.513742][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.629805][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 180.639847][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 180.666193][ T10] usb 2-1: Manufacturer: syz [ 180.690871][ T10] usb 2-1: config 0 descriptor?? [ 180.776168][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 180.853069][ T1085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.877380][ T1085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.904659][ T1085] bond0 (unregistering): Released all slaves [ 181.021794][ T10] rc_core: IR keymap rc-hauppauge not found [ 181.029461][ T10] Registered IR keymap rc-empty [ 181.055252][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.085063][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.095281][ T1085] bond1 (unregistering): Released all slaves [ 181.114651][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 181.129882][ T7072] loop2: detected capacity change from 0 to 7 [ 181.141131][ T7072] Dev loop2: unable to read RDB block 7 [ 181.141429][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 181.166779][ T7072] loop2: unable to read partition table [ 181.167011][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.181527][ T7072] loop2: partition table beyond EOD, truncated [ 181.187837][ T7072] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 181.220491][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.320232][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.440321][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.530549][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.586272][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.635938][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.684020][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.760443][ T5843] Bluetooth: hci2: command tx timeout [ 181.783118][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.836533][ T1226] usb 5-1: USB disconnect, device number 21 [ 181.872647][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.010249][ T10] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 182.035149][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 182.082916][ T1085] hsr_slave_0: left promiscuous mode [ 182.090560][ T5847] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 182.112597][ T10] usb 2-1: USB disconnect, device number 24 [ 182.166462][ T1085] hsr_slave_1: left promiscuous mode [ 182.297141][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.305796][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.318497][ T5847] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.329267][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 182.371228][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 182.387996][ T5847] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.498187][ T5896] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 182.508799][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.524356][ T5897] usb 3-1: USB disconnect, device number 33 [ 182.533811][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 182.575613][ T5847] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 182.585425][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.613751][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.613768][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 182.668425][ T5896] usb 5-1: not running at top speed; connect to a high speed hub [ 182.693554][ T5896] usb 5-1: config 1 interface 0 has no altsetting 0 [ 182.707393][ T1085] veth1_macvtap: left promiscuous mode [ 182.726040][ T5847] usb 1-1: config 0 descriptor?? [ 182.740299][ T5896] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 182.749551][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.758891][ T1085] veth0_macvtap: left promiscuous mode [ 182.771501][ T5847] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.785795][ T1085] veth1_vlan: left promiscuous mode [ 182.791275][ T5896] usb 5-1: Product: syz [ 182.795450][ T5896] usb 5-1: Manufacturer: syz [ 182.806601][ T5847] usb 1-1: MIDIStreaming interface descriptor not found [ 182.820722][ T1085] veth0_vlan: left promiscuous mode [ 182.895784][ T5896] usb 5-1: SerialNumber: syz [ 182.940537][ T7110] loop6: detected capacity change from 0 to 1 [ 182.969810][ T7092] netlink: 'syz.0.293': attribute type 2 has an invalid length. [ 183.006907][ T7110] Dev loop6: unable to read RDB block 1 [ 183.071300][ T7110] loop6: unable to read partition table [ 183.101406][ T7110] loop6: partition table beyond EOD, truncated [ 183.154485][ T7110] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 183.870138][ T5843] Bluetooth: hci2: command tx timeout [ 184.022423][ T7125] netlink: 104 bytes leftover after parsing attributes in process `syz.2.299'. [ 184.310229][ T9] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 184.549286][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 184.579547][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 184.597026][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 184.606463][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.618923][ T9] usb 3-1: Product: syz [ 184.623533][ T9] usb 3-1: Manufacturer: syz [ 184.628845][ T9] usb 3-1: SerialNumber: syz [ 184.747521][ T1226] usb 1-1: USB disconnect, device number 17 [ 185.686932][ T1085] team0 (unregistering): Port device team_slave_1 removed [ 185.731913][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 185.931862][ T5843] Bluetooth: hci2: command tx timeout [ 185.956174][ T1085] team0 (unregistering): Port device team_slave_0 removed [ 185.967318][ T5896] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 186.011854][ T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.023358][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 186.045135][ T10] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 186.062285][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.105947][ T10] usb 1-1: config 0 descriptor?? [ 186.120581][ T5896] usb 5-1: USB disconnect, device number 22 [ 186.202221][ T5896] usblp0: removed [ 186.539421][ T10] hid-alps 0003:044E:1215.000A: unbalanced collection at end of report description [ 186.564496][ T10] hid-alps 0003:044E:1215.000A: parse failed [ 186.581736][ T10] hid-alps 0003:044E:1215.000A: probe with driver hid-alps failed with error -22 [ 186.844560][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 186.855700][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'. [ 187.136952][ T1226] usb 1-1: USB disconnect, device number 18 [ 187.222124][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 187.292203][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 187.492442][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.504228][ T7069] chnl_net:caif_netlink_parms(): no params data found [ 187.522116][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.567848][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 187.594280][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 187.634420][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.646018][ T9] usb 3-1: USB disconnect, device number 34 [ 187.677203][ T10] usb 5-1: SerialNumber: syz [ 187.696607][ T9] usblp0: removed [ 187.938860][ T10] usb 5-1: 0:2 : does not exist [ 188.000565][ T5843] Bluetooth: hci2: command tx timeout [ 188.096925][ T10] usb 5-1: USB disconnect, device number 23 [ 188.156559][ T7069] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.171291][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 188.200563][ T7069] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.207856][ T7069] bridge_slave_0: entered allmulticast mode [ 188.262999][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 188.309130][ T7069] bridge_slave_0: entered promiscuous mode [ 188.357528][ T7069] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.370885][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 188.398358][ T9] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 188.405713][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.454011][ T7069] bridge_slave_1: entered allmulticast mode [ 188.476645][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.492931][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.499121][ T7069] bridge_slave_1: entered promiscuous mode [ 188.537987][ T9] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 188.551330][ T7184] loop2: detected capacity change from 0 to 7 [ 188.584105][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.610188][ T7184] Dev loop2: unable to read RDB block 7 [ 188.626104][ T7184] loop2: unable to read partition table [ 188.626404][ T9] usb 3-1: Product: syz [ 188.650958][ T7184] loop2: partition table beyond EOD, truncated [ 188.698102][ T7184] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 188.708862][ T9] usb 3-1: Manufacturer: syz [ 188.718119][ T9] usb 3-1: SerialNumber: syz [ 188.775357][ T7069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.781581][ T9] usb 3-1: config 0 descriptor?? [ 188.866806][ T7069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.978394][ T9] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 189.030781][ T7069] team0: Port device team_slave_0 added [ 189.049568][ T7069] team0: Port device team_slave_1 added [ 189.160202][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 189.253748][ T7069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.261428][ T7069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.306792][ T7069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.329581][ T7196] IPv6: Can't replace route, no match found [ 189.342218][ T7069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.350102][ T7069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.376589][ T5847] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 189.389353][ T7069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.406209][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 189.417331][ T10] usb 5-1: config 0 has an invalid interface number: 43 but max is 0 [ 189.425918][ T10] usb 5-1: config 0 has no interface number 0 [ 189.432573][ T10] usb 5-1: config 0 interface 43 has no altsetting 0 [ 189.483523][ T10] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 189.492773][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.529248][ T10] usb 5-1: config 0 descriptor?? [ 189.564475][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 189.584800][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.606071][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.626432][ T5847] usb 1-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 189.639895][ T7069] hsr_slave_0: entered promiscuous mode [ 189.647103][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.657527][ T7069] hsr_slave_1: entered promiscuous mode [ 189.676638][ T7069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.690408][ T5847] usb 1-1: config 0 descriptor?? [ 189.700890][ T7069] Cannot create hsr debugfs directory [ 189.740588][ T9] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 189.749800][ T9] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 189.804868][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.823784][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.335579][ T7195] netlink: 'syz.0.316': attribute type 10 has an invalid length. [ 190.388917][ T7195] macvlan0: entered allmulticast mode [ 190.424876][ T7195] veth1_vlan: entered allmulticast mode [ 190.514898][ T7195] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 190.682656][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 190.785958][ T5847] usbhid 1-1:0.0: can't add hid device: -71 [ 190.796358][ T5847] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 190.841253][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 190.849656][ T9] usb 2-1: config 0 has no interfaces? [ 190.857213][ T9] usb 2-1: config 0 has no interfaces? [ 190.865017][ T9] usb 2-1: config 0 has no interfaces? [ 190.873062][ T9] usb 2-1: config 0 has no interfaces? [ 190.878896][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 190.892626][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.911703][ T5847] usb 1-1: USB disconnect, device number 19 [ 190.931880][ T9] usb 2-1: config 0 descriptor?? [ 191.415461][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.445283][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.671638][ T1226] usb 3-1: USB disconnect, device number 35 [ 191.788115][ T10] usb 5-1: string descriptor 0 read error: -71 [ 191.835452][ T30] audit: type=1326 audit(1744853474.284:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.0.320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff511d8e169 code=0x0 [ 191.892773][ T10] usb 5-1: USB disconnect, device number 24 [ 192.110334][ T1226] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 192.119713][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.43/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.188466][ T7069] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.213995][ T7069] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.256406][ T7069] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.291734][ T1226] usb 3-1: Using ep0 maxpacket: 32 [ 192.310639][ T1226] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 192.321985][ T7069] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.331419][ T5897] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 192.338573][ T1226] usb 3-1: config 0 has no interface number 0 [ 192.359388][ T1226] usb 3-1: too many endpoints for config 0 interface 196 altsetting 143: 248, using maximum allowed: 30 [ 192.404442][ T1226] usb 3-1: config 0 interface 196 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 192.446783][ T1226] usb 3-1: config 0 interface 196 has no altsetting 0 [ 192.467629][ T1226] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 192.488346][ T1226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.504857][ T5897] usb 1-1: config 0 has no interfaces? [ 192.524464][ T1226] usb 3-1: config 0 descriptor?? [ 192.529608][ T5897] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 192.556725][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.596361][ T5897] usb 1-1: config 0 descriptor?? [ 192.895217][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.995326][ T5896] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 193.009351][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.106273][ T5897] usb 1-1: USB disconnect, device number 20 [ 193.132913][ T7069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.212747][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 193.234957][ T7069] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.252135][ T5896] usb 5-1: config 0 has no interfaces? [ 193.267702][ T5896] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 193.296407][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.357712][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.365471][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.376854][ T5896] usb 5-1: Product: syz [ 193.390233][ T5896] usb 5-1: Manufacturer: syz [ 193.395861][ T5896] usb 5-1: SerialNumber: syz [ 193.409157][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.416395][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.427810][ T5896] usb 5-1: config 0 descriptor?? [ 193.606671][ T5897] usb 2-1: USB disconnect, device number 25 [ 193.962549][ T7069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.348385][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.356235][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.535383][ T7251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.551304][ T1226] usb 3-1: string descriptor 0 read error: -71 [ 194.563983][ T1226] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 194.580146][ T1226] gspca_nw80x: reg_w err -71 [ 194.648200][ T1226] nw80x 3-1:0.196: probe with driver nw80x failed with error -71 [ 194.726861][ T1226] usb 3-1: USB disconnect, device number 36 [ 194.973391][ T7069] veth0_vlan: entered promiscuous mode [ 195.034430][ T7069] veth1_vlan: entered promiscuous mode [ 195.098700][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 195.479146][ T7069] veth0_macvtap: entered promiscuous mode [ 195.618945][ T7069] veth1_macvtap: entered promiscuous mode [ 195.783825][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.859956][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.933687][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.974232][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.030061][ T5897] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 196.044137][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.090196][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.146584][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.220700][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.268350][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 196.281954][ T7069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.374591][ T5897] usb 3-1: config 0 has an invalid interface number: 43 but max is 0 [ 196.386141][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.417179][ T5897] usb 3-1: config 0 has no interface number 0 [ 196.472751][ T5847] usb 5-1: USB disconnect, device number 25 [ 196.481343][ T5897] usb 3-1: config 0 interface 43 has no altsetting 0 [ 196.488098][ T5897] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 196.507143][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.530046][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.551400][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.581138][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.601337][ T5897] usb 3-1: config 0 descriptor?? [ 196.608294][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.640637][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.669576][ T7069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.704038][ T7069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.752000][ T7069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.797953][ T7069] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.844507][ T7069] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.861491][ T7069] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.876043][ T7069] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.916772][ T7291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.961590][ T5847] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 196.969614][ T7291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.142319][ T7317] netlink: 596 bytes leftover after parsing attributes in process `syz.4.336'. [ 197.201865][ T5847] usb 1-1: Using ep0 maxpacket: 8 [ 197.219659][ T5847] usb 1-1: config 0 has no interfaces? [ 197.246289][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.261975][ T5847] usb 1-1: config 0 has no interfaces? [ 197.284930][ T5847] usb 1-1: config 0 has no interfaces? [ 197.324265][ T5847] usb 1-1: config 0 has no interfaces? [ 197.328652][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.354050][ T5847] usb 1-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 197.469100][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.492463][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.494712][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.720454][ T5847] usb 1-1: config 0 descriptor?? [ 198.185404][ T7331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.197458][ T7331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.269356][ T7330] netlink: 9 bytes leftover after parsing attributes in process `syz.3.285'. [ 198.318659][ T7330] gretap0: entered promiscuous mode [ 198.338652][ T7328] netlink: 5 bytes leftover after parsing attributes in process `syz.3.285'. [ 198.391198][ T7328] 0ªX¹¦D: renamed from gretap0 [ 198.426645][ T7328] 0ªX¹¦D: left promiscuous mode [ 198.433031][ T7328] 0ªX¹¦D: entered allmulticast mode [ 198.481667][ T7328] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 198.853315][ T5897] usb 3-1: string descriptor 0 read error: -71 [ 199.009302][ T5897] usb 3-1: USB disconnect, device number 37 [ 199.578833][ T5897] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 199.780208][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 199.789672][ T5897] usb 3-1: config index 0 descriptor too short (expected 17170, got 18) [ 199.827777][ T5897] usb 3-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 199.837111][ T5847] usb 1-1: USB disconnect, device number 21 [ 199.867942][ T5897] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 199.922259][ T5897] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 199.939369][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.994365][ T5897] usb 3-1: Product: syz [ 200.033045][ T5897] usb 3-1: Manufacturer: syz [ 200.050081][ T5897] usb 3-1: SerialNumber: syz [ 200.079197][ T63] bond0: (slave bond_slave_0): interface is now down [ 200.089202][ T5897] usb 3-1: config 0 descriptor?? [ 200.114738][ T63] bond0: (slave bond_slave_1): interface is now down [ 200.132594][ T5897] ums-freecom 3-1:0.0: USB Mass Storage device detected [ 200.164490][ T63] bond0: (slave team0): interface is now down [ 200.197308][ T63] bond0: (slave syz_tun): interface is now down [ 200.300183][ T63] bond0: (slave macvlan0): interface is now down [ 200.332727][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.346'. [ 200.417025][ T63] bond0: now running without any active interface! [ 200.729463][ T5897] usb 3-1: USB disconnect, device number 38 [ 200.947914][ T7385] delete_channel: no stack [ 200.980867][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.43/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.316985][ T838] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 201.554088][ T838] usb 1-1: config 0 has no interfaces? [ 201.578409][ T838] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 201.597002][ T838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.626157][ T838] usb 1-1: Product: syz [ 201.643512][ T838] usb 1-1: Manufacturer: syz [ 201.730052][ T1226] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 201.815133][ T838] usb 1-1: SerialNumber: syz [ 201.866979][ T838] usb 1-1: config 0 descriptor?? [ 201.933841][ T1226] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.001064][ T1226] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 202.020108][ T1226] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.050006][ T1226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.103752][ T7385] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 202.123317][ T1226] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.483774][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 202.504164][ T7385] netlink: 268 bytes leftover after parsing attributes in process `syz.4.348'. [ 202.581801][ T1226] usb 5-1: USB disconnect, device number 26 [ 202.887663][ T7404] netlink: 'syz.2.352': attribute type 10 has an invalid length. [ 203.236803][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 203.750196][ T5896] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 203.872535][ T1226] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 204.009877][ T5896] usb 3-1: config 0 has no interfaces? [ 204.025218][ T5896] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 204.060186][ T1226] usb 4-1: Using ep0 maxpacket: 8 [ 204.065076][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.075431][ T1226] usb 4-1: config 0 has no interfaces? [ 204.091447][ T1226] usb 4-1: config 0 has no interfaces? [ 204.123341][ T5896] usb 3-1: Product: syz [ 204.127570][ T5896] usb 3-1: Manufacturer: syz [ 204.130836][ T1226] usb 4-1: config 0 has no interfaces? [ 204.166531][ T5896] usb 3-1: SerialNumber: syz [ 204.184018][ T1226] usb 4-1: config 0 has no interfaces? [ 204.189558][ T1226] usb 4-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 204.197519][ T5896] usb 3-1: config 0 descriptor?? [ 204.266816][ T7425] loop6: detected capacity change from 0 to 1 [ 204.285017][ T1226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.301528][ T7425] Dev loop6: unable to read RDB block 1 [ 204.307123][ T7425] loop6: unable to read partition table [ 204.351543][ T7425] loop6: partition table beyond EOD, truncated [ 204.361045][ T1226] usb 4-1: config 0 descriptor?? [ 204.413967][ T7425] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 204.727380][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.765850][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.799105][ T7441] sctp: [Deprecated]: syz.4.359 (pid 7441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.799105][ T7441] Use struct sctp_sack_info instead [ 204.924028][ T5896] usb 1-1: USB disconnect, device number 22 [ 205.090131][ T5897] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 205.324757][ T7448] delete_channel: no stack [ 205.520070][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 205.530420][ T5897] usb 5-1: config 0 has an invalid descriptor of length 139, skipping remainder of the config [ 205.541375][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 205.553237][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 205.568374][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 205.584376][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 180, changing to 7 [ 205.598178][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 33168, setting to 1024 [ 205.614479][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 205.627620][ T838] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 205.637377][ T5897] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 205.656466][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 205.685716][ T5897] usb 5-1: Product: syz [ 205.697394][ T5897] usb 5-1: Manufacturer: syz [ 205.708477][ T5897] usb 5-1: SerialNumber: syz [ 205.726770][ T5897] usb 5-1: config 0 descriptor?? [ 205.741659][ T5897] usb 5-1: no audio or video endpoints found [ 205.941055][ T838] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.953923][ T5897] usb 5-1: USB disconnect, device number 27 [ 205.979606][ T838] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 205.993180][ T838] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.012426][ T838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.042420][ T7448] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.062534][ T838] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.310488][ T7447] netlink: 268 bytes leftover after parsing attributes in process `syz.0.360'. [ 206.327015][ T838] usb 1-1: USB disconnect, device number 23 [ 206.396265][ T5897] usb 3-1: USB disconnect, device number 39 [ 206.713221][ T838] usb 4-1: USB disconnect, device number 14 [ 206.940073][ T5897] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 207.066354][ T7456] loop6: detected capacity change from 0 to 7 [ 207.103638][ T7456] Dev loop6: unable to read RDB block 7 [ 207.143392][ T7456] loop6: AHDI p3 p4 [ 207.166136][ T7456] loop6: partition table partially beyond EOD, truncated [ 207.210448][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 207.224031][ T7456] loop6: p3 start 1697644645 is beyond EOD, truncated [ 207.248265][ T30] audit: type=1326 audit(1744853489.684:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e738e169 code=0x7ffc0000 [ 207.293665][ T5897] usb 3-1: config 0 has an invalid interface number: 43 but max is 0 [ 207.314088][ T5897] usb 3-1: config 0 has no interface number 0 [ 207.336456][ T5897] usb 3-1: config 0 interface 43 has no altsetting 0 [ 207.369862][ T5897] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 207.395312][ T30] audit: type=1326 audit(1744853489.684:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e738e169 code=0x7ffc0000 [ 207.428057][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.448969][ T5897] usb 3-1: config 0 descriptor?? [ 207.543430][ T30] audit: type=1326 audit(1744853489.694:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9e738e169 code=0x7ffc0000 [ 207.647906][ T30] audit: type=1326 audit(1744853489.694:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e738e169 code=0x7ffc0000 [ 207.764763][ T30] audit: type=1326 audit(1744853489.694:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e738e169 code=0x7ffc0000 [ 207.807613][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 207.830103][ T30] audit: type=1326 audit(1744853489.694:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9e738e169 code=0x7ffc0000 [ 207.908378][ T30] audit: type=1326 audit(1744853489.694:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e738e169 code=0x7ffc0000 [ 207.945559][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.955567][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.250447][ T5899] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 208.312162][ T30] audit: type=1326 audit(1744853489.724:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9e738e169 code=0x7ffc0000 [ 208.336845][ T838] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 208.506996][ T5899] usb 2-1: not running at top speed; connect to a high speed hub [ 208.510459][ T5899] usb 2-1: config 1 interface 0 has no altsetting 0 [ 208.516722][ T5899] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 208.516754][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.516778][ T5899] usb 2-1: Product: syz [ 208.516795][ T5899] usb 2-1: Manufacturer: syz [ 208.516811][ T5899] usb 2-1: SerialNumber: syz [ 208.648302][ T30] audit: type=1326 audit(1744853489.724:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e738e169 code=0x7ffc0000 [ 209.100919][ T838] usb 5-1: config 0 has no interfaces? [ 209.110036][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 209.127734][ T838] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 209.147868][ T838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.158246][ T30] audit: type=1326 audit(1744853489.724:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9e738e169 code=0x7ffc0000 [ 209.242772][ T838] usb 5-1: Product: syz [ 209.249457][ T838] usb 5-1: Manufacturer: syz [ 209.261590][ T838] usb 5-1: SerialNumber: syz [ 209.278103][ T838] usb 5-1: config 0 descriptor?? [ 209.400521][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 209.426129][ T10] usb 1-1: config 0 has an invalid interface number: 43 but max is 0 [ 209.440283][ T10] usb 1-1: config 0 has no interface number 0 [ 209.472480][ T10] usb 1-1: config 0 interface 43 has no altsetting 0 [ 209.602684][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 209.677300][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.775628][ T7491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.789384][ T7491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.909835][ T10] usb 1-1: config 0 descriptor?? [ 210.346201][ T7494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.355464][ T7494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.439094][ T5897] usb 3-1: string descriptor 0 read error: -71 [ 210.784250][ T5897] usb 3-1: USB disconnect, device number 40 [ 211.510260][ T5897] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 211.779975][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 211.811785][ T5897] usb 3-1: config 0 has no interfaces? [ 211.830134][ T5897] usb 3-1: config 0 has no interfaces? [ 211.909990][ T5897] usb 3-1: config 0 has no interfaces? [ 211.970193][ T5897] usb 3-1: config 0 has no interfaces? [ 211.975739][ T5897] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 212.020129][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.091256][ T5897] usb 3-1: config 0 descriptor?? [ 212.130826][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.43/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.408146][ T10] usb 1-1: string descriptor 0 read error: -71 [ 212.498415][ T7497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.554206][ T10] usb 1-1: USB disconnect, device number 24 [ 212.576449][ T7497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.756269][ T5897] usb 5-1: USB disconnect, device number 28 [ 212.892598][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.43/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.052547][ T5899] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 213.188331][ T5899] usb 2-1: USB disconnect, device number 26 [ 213.300916][ T5899] usblp0: removed [ 213.436053][ T7513] loop2: detected capacity change from 0 to 7 [ 213.469538][ T7513] Dev loop2: unable to read RDB block 7 [ 213.494932][ T7513] loop2: unable to read partition table [ 213.525858][ T7513] loop2: partition table beyond EOD, truncated [ 213.542099][ T7515] delete_channel: no stack [ 213.549581][ T7513] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 213.961679][ T5896] usb 3-1: USB disconnect, device number 41 [ 214.015260][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 214.140603][ T7522] loop6: detected capacity change from 0 to 1 [ 214.147124][ T7523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.384'. [ 214.227661][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.239609][ T7522] Dev loop6: unable to read RDB block 1 [ 214.258703][ T7522] loop6: unable to read partition table [ 214.329759][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 214.340142][ T7522] loop6: partition table beyond EOD, truncated [ 214.352294][ T7522] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 214.369578][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.390429][ T5897] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 214.424592][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.497279][ T7515] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 214.553754][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.573366][ T5897] usb 5-1: config 0 has no interfaces? [ 214.588077][ T5897] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 214.628570][ T7531] program syz.3.386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.662736][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.824063][ T7515] netlink: 268 bytes leftover after parsing attributes in process `syz.1.379'. [ 214.865174][ T5897] usb 5-1: Product: syz [ 214.879962][ T5897] usb 5-1: Manufacturer: syz [ 214.891114][ T5897] usb 5-1: SerialNumber: syz [ 215.038117][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 215.118558][ T5897] usb 5-1: config 0 descriptor?? [ 215.145054][ T24] usb 2-1: USB disconnect, device number 27 [ 215.337055][ T7538] ipt_ECN: cannot use operation on non-tcp rule [ 215.607774][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 215.775039][ T7541] udevd[7541]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.188383][ T7545] netlink: 'syz.3.389': attribute type 16 has an invalid length. [ 216.197569][ T7545] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000055: 0000 [#1] SMP KASAN PTI [ 216.209495][ T7545] KASAN: null-ptr-deref in range [0x00000000000002a8-0x00000000000002af] [ 216.217911][ T7545] CPU: 0 UID: 0 PID: 7545 Comm: syz.3.389 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 216.229800][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.239948][ T7545] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 216.245604][ T7545] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 ea 06 3b f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 c2 06 3b f8 45 31 e4 48 83 7d 00 [ 216.265224][ T7545] RSP: 0018:ffffc90003baee70 EFLAGS: 00010206 [ 216.271305][ T7545] RAX: 0000000000000055 RBX: ffff88806b218008 RCX: 0000000000080000 [ 216.279279][ T7545] RDX: ffffc9001019a000 RSI: 0000000000002eb8 RDI: 0000000000002eb9 [ 216.287283][ T7545] RBP: 00000000000002a8 R08: ffffffff89f28719 R09: 1ffff92000775dfa [ 216.295262][ T7545] R10: dffffc0000000000 R11: fffff52000775dfb R12: ffff888060be2080 [ 216.303240][ T7545] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88806b218000 [ 216.311218][ T7545] FS: 00007f0b04a4b6c0(0000) GS:ffff888124f93000(0000) knlGS:0000000000000000 [ 216.320152][ T7545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.326736][ T7545] CR2: 00002000000000c0 CR3: 000000006ce5c000 CR4: 00000000003526f0 [ 216.334717][ T7545] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.342714][ T7545] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 216.350684][ T7545] Call Trace: [ 216.353960][ T7545] [ 216.356895][ T7545] rtnl_newlink_create+0x2f2/0xcb0 [ 216.362018][ T7545] ? __mutex_lock+0x380/0x10c0 [ 216.366796][ T7545] ? __pfx_aa_get_newest_label+0x10/0x10 [ 216.372440][ T7545] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 216.378097][ T7545] ? __pfx___mutex_lock+0x10/0x10 [ 216.383134][ T7545] ? ns_capable+0x8a/0xf0 [ 216.387480][ T7545] rtnl_newlink+0x18b0/0x1fe0 [ 216.392164][ T7545] ? stack_depot_save_flags+0x44/0x940 [ 216.397628][ T7545] ? __pfx_rtnl_newlink+0x10/0x10 [ 216.402659][ T7545] ? __netlink_deliver_tap+0x561/0x7f0 [ 216.408123][ T7545] ? netlink_deliver_tap+0x19d/0x1b0 [ 216.413432][ T7545] ? netlink_unicast+0x7c6/0x9a0 [ 216.418375][ T7545] ? netlink_sendmsg+0x8c3/0xcd0 [ 216.423324][ T7545] ? __sock_sendmsg+0x221/0x270 [ 216.428186][ T7545] ? ____sys_sendmsg+0x523/0x860 [ 216.433126][ T7545] ? __sys_sendmsg+0x271/0x360 [ 216.437907][ T7545] ? do_syscall_64+0xf3/0x230 [ 216.442587][ T7545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.448666][ T7545] ? kasan_quarantine_put+0xdc/0x230 [ 216.453954][ T7545] ? lockdep_hardirqs_on+0x9d/0x150 [ 216.459156][ T7545] ? nlmon_xmit+0xaf/0x100 [ 216.463590][ T7545] ? __local_bh_enable_ip+0x168/0x200 [ 216.468964][ T7545] ? lockdep_hardirqs_on+0x9d/0x150 [ 216.474170][ T7545] ? aa_get_newest_label+0x101/0x6f0 [ 216.479467][ T7545] ? __lock_acquire+0xad5/0xd80 [ 216.484329][ T7545] ? __pfx_rtnl_newlink+0x10/0x10 [ 216.489365][ T7545] rtnetlink_rcv_msg+0x80f/0xd70 [ 216.494314][ T7545] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 216.499437][ T7545] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 216.504908][ T7545] ? ref_tracker_free+0x63e/0x7e0 [ 216.509945][ T7545] netlink_rcv_skb+0x208/0x480 [ 216.514720][ T7545] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 216.520185][ T7545] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.525484][ T7545] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.530690][ T7545] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.535894][ T7545] netlink_unicast+0x7f8/0x9a0 [ 216.540668][ T7545] ? __pfx_netlink_unicast+0x10/0x10 [ 216.545956][ T7545] ? skb_put+0x114/0x1f0 [ 216.550215][ T7545] netlink_sendmsg+0x8c3/0xcd0 [ 216.554987][ T7545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.560309][ T7545] ? aa_sock_msg_perm+0x91/0x160 [ 216.565264][ T7545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.570562][ T7545] __sock_sendmsg+0x221/0x270 [ 216.575252][ T7545] ____sys_sendmsg+0x523/0x860 [ 216.580024][ T7545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.585319][ T7545] ? __fget_files+0x2a/0x420 [ 216.589915][ T7545] ? __fget_files+0x2a/0x420 [ 216.594507][ T7545] __sys_sendmsg+0x271/0x360 [ 216.599101][ T7545] ? __pfx_futex_wake+0x10/0x10 [ 216.603956][ T7545] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.609106][ T7545] ? do_syscall_64+0xb6/0x230 [ 216.613793][ T7545] do_syscall_64+0xf3/0x230 [ 216.618309][ T7545] ? clear_bhb_loop+0x45/0xa0 [ 216.622991][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.628894][ T7545] RIP: 0033:0x7f0b03b8e169 [ 216.633318][ T7545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.653020][ T7545] RSP: 002b:00007f0b04a4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.661450][ T7545] RAX: ffffffffffffffda RBX: 00007f0b03db5fa0 RCX: 00007f0b03b8e169 [ 216.669428][ T7545] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000010 [ 216.677402][ T7545] RBP: 00007f0b03c10a68 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 216.685465][ T7545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.693461][ T7545] R13: 0000000000000000 R14: 00007f0b03db5fa0 R15: 00007f0b03edfa28 [ 216.701453][ T7545] [ 216.704485][ T7545] Modules linked in: [ 216.708522][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.715186][ T7545] ---[ end trace 0000000000000000 ]--- [ 216.821213][ T5830] syz-executor (5830) used greatest stack depth: 19576 bytes left [ 216.891778][ T7545] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 216.897488][ T7545] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 ea 06 3b f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 c2 06 3b f8 45 31 e4 48 83 7d 00 [ 216.917463][ T7545] RSP: 0018:ffffc90003baee70 EFLAGS: 00010206 [ 216.923925][ T7545] RAX: 0000000000000055 RBX: ffff88806b218008 RCX: 0000000000080000 [ 216.932219][ T7545] RDX: ffffc9001019a000 RSI: 0000000000002eb8 RDI: 0000000000002eb9 [ 216.940492][ T7545] RBP: 00000000000002a8 R08: ffffffff89f28719 R09: 1ffff92000775dfa [ 216.951493][ T7545] R10: dffffc0000000000 R11: fffff52000775dfb R12: ffff888060be2080 [ 216.959523][ T7545] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88806b218000 [ 216.973367][ T7545] FS: 00007f0b04a4b6c0(0000) GS:ffff888125093000(0000) knlGS:0000000000000000 [ 216.992863][ T7545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.999596][ T7545] CR2: 000020000038b030 CR3: 000000006ce5c000 CR4: 00000000003526f0 [ 217.135055][ T7545] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.162204][ T7545] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 217.190153][ T7545] Kernel panic - not syncing: Fatal exception [ 217.196576][ T7545] Kernel Offset: disabled [ 217.200905][ T7545] Rebooting in 86400 seconds..