last executing test programs: 6.499975851s ago: executing program 1 (id=446): syz_emit_ethernet(0xe7, &(0x7f00000004c0)={@empty, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xb1, 0x3a, 0x0, @dev, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x8, 0xfffe, "8bfb568d8e879fb738a6b47deb94adebf48e448a047b8abbb461b1277a3feeca3d431b12329f764f7b24776e534dca060f8bd846d65cba5386eac81ee48bccca0f568b9f34a60a38e3124173a1b4d8f5ca6cd6e79b760ee17a805dc381e14d9d53b7b7b9a5368266bc3ce8faaeed1d837a340a7a31ae4b07378a0afd38015356c9523ccb8bc7f7a850387b6597bba17e848e50f3e973cd7a9b80afaa880b34bc600503f625493eb4af"}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xffffff00}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) r2 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x8) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/130, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) poll(&(0x7f0000000140)=[{r2, 0x816c}], 0x1, 0x1004) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000100)={0x0, 0x0, 0x20, 0x7, 0x0, 0xffffffffffffffff, 0x0}]) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0xe0}}, 0x41) socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="1400000038000b63d25a80648c2594f90124fc", 0x13}], 0x1}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, 0x0) 5.771912052s ago: executing program 2 (id=448): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "78e99e15"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00f505000000526ac71fdb"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f00000003c0)={0x0, 0x6, 0xad, {0xad, 0xd, "0a21ba75a3630b90b9198f03022e6a0d9d93c27d4447c07663a90f1cbb56c2e1b1379aa9fa682bb63f0d485d80850837886a46eb3ff996133dc25eea321caac7280cf931992bfc10cfc75ddf10e8d89ef358cc5272062d70f5a291f3bb99a37b7714f2e675867fffa99823e2069df25e1a82f79a5fd9c74bc7cdec1f1aa7431f58e99f02f096d8d5add2be530b6a03c3aa5f3398e2d4185a0ae822a017c48c01a4d06d1bcaea8ec09a5cdc"}}, &(0x7f00000005c0)={0x0, 0x3, 0xc7, @string={0xc7, 0x3, "e59191b72ccb806317b4406e1d07deb47f21d88ccde1d836e47aae1c831b0ce8f375ff71fd9c19479f2060cd6abdd862f2b947a553204640692c50cc07527f676450c4cde8dca28a915d8163937e0ff0023b6a10f44047e4b376a643a0856a810cefd9f8fd2184056fe60f22eb0421b8e97c4469530b8c04035a0bbc229f8029ebb4ed059b8d0a3e50f676829d4aac1772e2113f5902aa7bbe52634b3701a5447ed23fb17d83452a17c8a3b896a1484d96651392a7f438391bba8b2e9e568ed9ab3d679162"}}, &(0x7f0000000140)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x9}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x2, 0xa, 0x4, "f4fe4ead", '_,At'}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x2, 0x10, 0x2, 0x4, 0x101}}}, &(0x7f0000000a80)={0x84, &(0x7f00000006c0)={0x40, 0x0, 0x3c, "2f89b48b5ab3f7b5e63e629b7739d4a8d35bad9cb01bd758ee9721c7e131d5f2c674945bf5a439c7139db631dd64ec8fb14119a24bfeaaf7e14eeb0c"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x14}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9e}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x4, 0x20}}, &(0x7f00000007c0)={0x40, 0x7, 0x2}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0xfe}, &(0x7f0000000840)={0x40, 0xb, 0x2, 'a2'}, &(0x7f0000000880)={0x40, 0xf, 0x2}, &(0x7f00000008c0)={0x40, 0x13, 0x6}, &(0x7f0000000900)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000940)={0x40, 0x19, 0x2, "d967"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x37}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000a00)={0x40, 0x1e, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x6a98047402e98331}, 0x14}}, 0x0) 5.458657846s ago: executing program 1 (id=450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000010018000380040004000a00020000"], 0x44}}, 0x0) io_uring_setup(0x62a7, &(0x7f0000005c00)={0x0, 0x800000, 0x40}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='bd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,u', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000039c0)='./file0/file0\x00', &(0x7f0000003a00)={0x0, 0x0, 0x24}, 0x18) read$FUSE(r5, &(0x7f000000cb00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r6, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110040000"], &(0x7f0000000480)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000180), 0x1, 0x1) syz_emit_ethernet(0xc8, &(0x7f00000005c0)={@multicast, @random="1704b45adbde", @void, {@llc={0x4, {@snap={0x54, 0x1, "d1", ')\nu', 0x9200, "aa06617d0ad07bde280291ba76cf986e2793b5b13c2d9968424e1334363db158b51c852ec981c2e600435985272252cb1c67ef47f2c7aab9685f72f743502261bf7dd4d5accf109081cd570bc7edb2901376fa11dd108876b39475dab4941d025147a9cbe00a700d2fcc1b2513d325ac3600a65a3f1aeca181f7917e28179bc7599156cfdbf28b4f6c8c4394dc3b79a7ecfddc6f0498c48b501d611d59bfcae0387e04aa8e371fd01a279e9bc3eec13cbe0a"}}}}}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x42, 0x0, &(0x7f0000e5f000)) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc08c5332, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000040)) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x141, 0x0) write$binfmt_elf64(r9, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c4605062046000000000000000003003e0002000000740300000000000040000000000000003c020000000000000100000001013800010002000000f9ff00000070790000000900000000000000fbffffffffffffff070000000000000003000000"], 0x61c) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) close_range(r4, 0xffffffffffffffff, 0xff0f) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYRES32=r3], 0xc8) 5.061360758s ago: executing program 0 (id=453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000004400)={@ifindex, 0xffffffffffffffff, 0x0, 0x4, 0x0, @link_id}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 4.71854113s ago: executing program 0 (id=454): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3e, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0xd6, 0x84, 0xe1, 0x20, 0x408, 0x3090, 0xa63f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfa, 0x0, 0x0, 0xe, 0x1}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x4, 0x10, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "b6798d082cf1"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000304000000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000009c0)={0x14, &(0x7f00000008c0)={0x40, 0xa, 0x8e, {0x8e, 0x2, "136214654a2ef379370d544ce795167c7af34a06578653cc7689d73dd96832356e520ba4c9e329b24291d0aa290378dd8cc456b4493b834512dd5d0f60bd8c4c95f85c019c77c3789ac8eb4d4d5d29a71c1c1e1fe15bb0f265974c1394f7262dfefa780f8bf4c5dd30c3a0a3999c1b21c6153b37ed8a977d27bf73a9cf98238d1237334d62e7bc1e1af24362"}}, &(0x7f0000000980)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x1c, &(0x7f0000000a00)={0x40, 0x0, 0x55, "84b2bcc6f2e0967717fd6f5cfba7479edcd5603e5ae69276b08b79befe98db1abaa7206baaa363e13ee1cdfa0539aa1872860501a11ebbf5a2565888186f6e498c5e57d4f126c8a15264ceff49093d8904867c36d7"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x8}}) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000bc0)={0x0, 0x31, 0x6a, {0x6a, 0x21, "8bfda214a1c0a40f44d88ee93802adad8f78758041e39c388d605ecc386cec8979b7494e80aea26f68f5dde16375ad45cce615d4b61fb87ab16d918488d5b9b2176a0d51291c333619e1479c6a68909b624cd6bb4f3a524123100908f023289e060f204a7736676c"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000c80)=ANY=[@ANYBLOB="00189e000000f5259469e2b7471ac7224068ce88749d181caf3dbf48b61bcfb253659fccd7bbcf746cf358f43fc4fdc7b92d81cef4ae81bb052cee0f60babd44f56ffc1da5c3b1594f62bd2893879b87544d36c67915438d07e3bb83756a221eb48ffddc262a40c2f7784956321350cce0eac069a260ad8fbe7e4e059f6e92cbedd5cd7fa24904f66a190097291880dd8946fde752cb82ef0358d08cdb6d640c8fb366bb"], &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x5f}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0x7, 0x1ff, 0x5, 0x7, 0x8, 0x3ff, 0x3, 0x0, 0x4, 0x2, 0x726, 0x8001}}, &(0x7f0000000e00)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000e40)={0x20, 0x83, 0x2}, &(0x7f0000000e80)={0x20, 0x87, 0x2, 0x371}, &(0x7f0000000ec0)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, &(0x7f0000000540)={0x20, 0xd, 0xd1, {0xd1, 0x9, "21bf5be91bdf639fd0d2bb4eda1e7fe296a7918baa934a212444c787adfc00cb9aea112169106829becf1d8a14d4861f904220e295ba9d306f8218df70af1a9eba49d70687df19db584d2540553b6164f6721e1996ab7b1e4b623bb08fcf5ebec4786e6dfdb54b5c7ffe90742d5634ce4b633fbe2c4cc484241c3bd26d5474345d7b9bc0d57565763ab4955c4b5fac4984c08e6968201a4ccfee3482f7f09a1e360834e144c76a62212d874b8686129a6cf056af5324537c3c57e4f1762d90a998e1adf9ab612d5b6266690b26d466"}}, &(0x7f0000000b40)=ANY=[@ANYBLOB="00030400000004031004b63ac7e558a19c24bfd924b7834d41f6eb5f9f874b06f15f142be56c18c5058dba1cd783b830c2e2d39f6f4c8322dcf2484f2903920ee6a58f874d249be8c807fe0d6302000000ffb60506fa5e0656ac8f5dcfa6db1174663bfbf7e5d0b07b"], &(0x7f00000002c0)={0x0, 0x22, 0x21, {[@main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0xa, "46ae12e1"}, @global=@item_4={0x3, 0x1, 0x5, "454b990c"}, @global=@item_4={0x3, 0x1, 0x8, "b7095a7d"}, @main=@item_4={0x3, 0x0, 0x9, "4d95ea9b"}, @global=@item_4={0x3, 0x1, 0x9, "c3f4ac54"}, @global=@item_012={0x2, 0x1, 0x2, "7ad0"}, @local=@item_012={0x2, 0x2, 0x3, "5fd5"}, @local=@item_012={0x0, 0x2, 0x3}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x38, 0x3, 0x1, {0x22, 0xb80}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x0, 0x15, 0x7c, "97fccd3a14f5133aa581d7e7f857794c65ec1697606360d286ec77a44eba62b9c0e389d76a3fc7fa2a3f7459f0f0de8ff3a96bfc7e10c22355d4c234e31b0ffaa5919ffe8a4a50e202bb5eab3d85304601a51f3583a8e575be6cedc354db3c89f6c2a18d6c959c7d56689acb39116601a176085b42eddd20d00e493c"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000007c0)={0x20, 0x1, 0x5d, "bba8f218829da9540b51b76d05665b22af9333f0e7c14b037a413ea7b3bbd8c94cd6bd09a95e28997575928cf979eb3e087424a8831570af3287df139e680ce52f5ef3d8a7c472fe5cabad55e0b6f9a5912cf82c3266caf3d3acc65f52"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x8}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000500)={0x1, 0x0, 0x2, &(0x7f0000000540)={0x0, "0500e7d85c8bbfe6931aa54bce5d926e7908d527733a7700000000000000000100"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000000)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x100}], 0xff}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) 4.065253498s ago: executing program 3 (id=456): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003e80)='Z', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000004280)="81", 0x1}], 0x1}}], 0x3, 0x608d811) 3.967788193s ago: executing program 1 (id=457): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r4) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x1000}], 0x1}, 0x0) syz_io_uring_setup(0xa5b, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x3b4a, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000180)=0x200, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000400)=@req3={0x148, 0x7fff, 0x9, 0x80000001, 0x0, 0xaa66, 0x5}, 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 3.889864531s ago: executing program 3 (id=458): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 3.798168656s ago: executing program 1 (id=459): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = inotify_init1(0x0) fcntl$getownex(r2, 0x10, 0x0) r3 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) 3.26431782s ago: executing program 3 (id=460): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000001100010026bd7000fcdbdf2500000000", @ANYRES32=r5], 0x94}}, 0x0) 3.006909208s ago: executing program 3 (id=461): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000"], 0x0) inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 2.678440538s ago: executing program 2 (id=463): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 2.583732039s ago: executing program 2 (id=465): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b00)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2006}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4e}], 0x1}, 0x0) 2.529521819s ago: executing program 2 (id=466): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000002540)={0x7, 'vlan0\x00', {0x3}, 0x90}) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) 2.278170271s ago: executing program 1 (id=467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000015c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r2, @ANYBLOB="340003802800038024"], 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) 2.117893021s ago: executing program 2 (id=468): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d661321aafe161f8daa3aa686b49201e28", 0x12}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b09f5b752b2121b7fad3d1f6b7470ed80fece2a9b225b6f374dfe7761a3e1947198cd2e80db5039319fc789e105efe29c9fed9105d6c33e0349a8e3330282f27a58632de84541cac2cc7b21d99b0fd5ae4bfb5659bbda08606d62763806122f79162c835206d1d7adead527011943d2", 0x9e}], 0x2}}], 0x1, 0x0) 1.955938364s ago: executing program 1 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) setrlimit(0xc, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000340)={0x1, 0x1}) 1.86445335s ago: executing program 2 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffffeb, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r5, 0x5412, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0x3f) socket$inet6(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x98}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) 1.637660905s ago: executing program 0 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000217100000001010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000016d8ce4db711d5e46c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e30000000000000000000000014000100677265e52ea619052f9c08000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0x4b0}}, 0x0) 1.435993083s ago: executing program 0 (id=472): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/arp\x00') read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 1.421380798s ago: executing program 4 (id=473): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000003c0)={0x0, 0x0, 0x12, 0x4c1, 0xfffffffffffffff2}) 1.374305252s ago: executing program 3 (id=474): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000340)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, r2, 0x0, 0x0) keyctl$link(0x8, 0x0, r2) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r3) keyctl$read(0xb, r4, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, 0x0, r4}, 0x0, 0x0, &(0x7f00000001c0)={0x0}) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "e831bccdaf4ebe9106b904ebf3d045a733132af2c824259a31f57160d9b85129b355594a553ed476080b4d78a80decdc568a787e5788807a7ba205b2e7de8621", 0x1a}, 0x48, r1) keyctl$search(0xa, r4, &(0x7f0000000180)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, r0) 1.288072251s ago: executing program 0 (id=475): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1ffffd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.129633095s ago: executing program 4 (id=476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 1.125516629s ago: executing program 0 (id=477): futex(0x0, 0x88, 0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) io_pgetevents(0x0, 0x2, 0x1, &(0x7f00000003c0)=[{}], 0x0, &(0x7f0000000740)={0x0}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1, &(0x7f0000000240)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0']) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x61}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 1.124994128s ago: executing program 3 (id=478): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d0000000000291dec98850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffff4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) landlock_create_ruleset(&(0x7f00000000c0), 0x10, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="02c82041003d0001000e01030000001f02090400090009001001040000000c000642040004008eff071104007500ffb00e3f03000000000e090300feffa30f08040000021f00"], 0x46) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2, 0x3, 0x2) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) 891.885329ms ago: executing program 4 (id=479): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'team_slave_0\x00', {}, 0x6}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000080)={0x1000, 0x9}) 589.47029ms ago: executing program 4 (id=480): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000080)=[&(0x7f0000000740)='\\\\B\xc6+\xd5\xb9\x93L\\\x87\x84K\xb9!\x0eX =z\\\x14\xec*\xed\xa6u\xc4\x14=\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9=?i\x86Lpw\xba\xe1\v\x1a9G\a\xf9\x18\xe4\xf6f\xd6\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1dC\xba2\xa6u\x14\x0ee\xef\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95h\xd7PN\xf1\xe7\xe2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5bP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\xa1w,\xc7\x15oA\xc5m\xbb\x15\xd1\x1e\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4moccU\xb5\\\xf5\x05\xec\xa7\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xacd\x9d=d\xae\xbf\xd7K\x9do)p\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xf3\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\x05\xde\xaal\xf4\x82\xe2?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x01\x00\x12\xea1K\xc9\xe1\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xa8\xc8\x18\x00\x00\x00\xc4w', &(0x7f00000020c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K9\"\xf1@\a\xea\xbb\xfe\x9cY\xfc\x80\x99\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7\xf7\xff]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\x0e0\xfe\xc7\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xeb\x1a\x18\xf1h\x04\xa8\xe8\x92\xe6\xbc\xe1O\xcf', &(0x7f0000001e80)='gcB\xc6+[;\x88\xfe\x97B*[\a\x03\x96l\x1e\b\xd9\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX c\x03\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\n\xa6)\xd9\x10#\xf5b|i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8f_\xda8l\xc8\xa2\xb0\xd1\fg\x00\x00\x00\x00\x00\x00\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c1\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfe[\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0]) 310.32146ms ago: executing program 4 (id=481): socket$kcm(0x10, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) 0s ago: executing program 4 (id=482): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r0, r0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000400), 0x4) kernel console output (not intermixed with test programs): 0432][ T46] usb 2-1: can't read configurations, error -61 [ 95.525390][ T46] usb usb2-port1: attempt power cycle [ 95.573890][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.600358][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.619861][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.632861][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.643559][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.661233][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.681483][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.703403][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.747808][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.909381][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.937358][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.978295][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.999144][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 96.028502][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.038633][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.051000][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.067523][ T46] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 96.086233][ T46] usb 2-1: can't read configurations, error -61 [ 96.104566][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.128947][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.141994][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.159411][ T5768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.161286][ T5672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.230221][ T5672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.265727][ T5672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.274630][ T46] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 96.302644][ T5672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.328397][ T46] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 96.355314][ T46] usb 2-1: can't read configurations, error -61 [ 96.373755][ T5231] Bluetooth: hci3: command tx timeout [ 96.383464][ T46] usb usb2-port1: unable to enumerate USB device [ 96.398004][ T941] usb 5-1: device descriptor read/64, error -71 [ 96.602302][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.655637][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.771172][ T941] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 96.792422][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.821736][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.838806][ T941] usb 5-1: device reset changed ep0 maxpacket size! [ 96.870106][ T941] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 96.891086][ T941] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 96.937387][ T941] usb 5-1: USB disconnect, device number 10 [ 97.079224][ T5861] FAULT_INJECTION: forcing a failure. [ 97.079224][ T5861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.119805][ T5861] CPU: 0 UID: 0 PID: 5861 Comm: syz.0.104 Not tainted 6.11.0-rc4-syzkaller-00135-gaa0743a22936 #0 [ 97.130448][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 97.140516][ T5861] Call Trace: [ 97.143808][ T5861] [ 97.146748][ T5861] dump_stack_lvl+0x241/0x360 [ 97.151447][ T5861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.156665][ T5861] ? __pfx__printk+0x10/0x10 [ 97.161282][ T5861] ? snprintf+0xda/0x120 [ 97.165547][ T5861] should_fail_ex+0x3b0/0x4e0 [ 97.170246][ T5861] _copy_to_user+0x2f/0xb0 [ 97.174683][ T5861] simple_read_from_buffer+0xca/0x150 [ 97.180080][ T5861] proc_fail_nth_read+0x1ec/0x260 [ 97.185128][ T5861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.190690][ T5861] ? rw_verify_area+0x520/0x6b0 [ 97.195536][ T5861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.201073][ T5861] vfs_read+0x204/0xbc0 [ 97.205224][ T5861] ? __pfx_lock_release+0x10/0x10 [ 97.210252][ T5861] ? __pfx_xsk_getsockopt+0x10/0x10 [ 97.215446][ T5861] ? __pfx_vfs_read+0x10/0x10 [ 97.220121][ T5861] ? __fget_files+0x29/0x470 [ 97.224705][ T5861] ? __fget_files+0x3f6/0x470 [ 97.229383][ T5861] ksys_read+0x1a0/0x2c0 [ 97.233644][ T5861] ? __pfx_ksys_read+0x10/0x10 [ 97.238412][ T5861] ? do_syscall_64+0x100/0x230 [ 97.243170][ T5861] ? do_syscall_64+0xb6/0x230 [ 97.247839][ T5861] do_syscall_64+0xf3/0x230 [ 97.252333][ T5861] ? clear_bhb_loop+0x35/0x90 [ 97.257009][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.262895][ T5861] RIP: 0033:0x7fc204d788bc [ 97.267309][ T5861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 97.286914][ T5861] RSP: 002b:00007fc205aaf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.295324][ T5861] RAX: ffffffffffffffda RBX: 00007fc204f15f80 RCX: 00007fc204d788bc [ 97.303290][ T5861] RDX: 000000000000000f RSI: 00007fc205aaf0a0 RDI: 0000000000000004 [ 97.311261][ T5861] RBP: 00007fc205aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 97.319225][ T5861] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 97.327185][ T5861] R13: 0000000000000000 R14: 00007fc204f15f80 R15: 00007fc20503fa38 [ 97.335156][ T5861] [ 97.358396][ T941] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 97.485343][ T5871] fuse: Bad value for 'fd' [ 97.496035][ T5871] netlink: 'syz.0.138': attribute type 10 has an invalid length. [ 97.543428][ T5871] team0: Failed to send options change via netlink (err -105) [ 97.566679][ T5871] team0: Port device netdevsim0 added [ 97.578371][ T941] usb 5-1: Using ep0 maxpacket: 32 [ 97.588931][ T941] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 97.613948][ T941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.649992][ T941] usb 5-1: config 0 has no interface number 0 [ 97.665261][ T941] usb 5-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 97.720057][ T941] usb 5-1: config 0 interface 8 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 97.752669][ T5876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.768054][ T941] usb 5-1: config 0 interface 8 altsetting 248 has 5 endpoint descriptors, different from the interface descriptor's value: 10 [ 97.816807][ T941] usb 5-1: config 0 interface 8 has no altsetting 0 [ 97.819698][ T5879] Zero length message leads to an empty skb [ 97.831335][ T941] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 97.863478][ T941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.871511][ T941] usb 5-1: Product: syz [ 97.915609][ T941] usb 5-1: Manufacturer: syz [ 97.920253][ T941] usb 5-1: SerialNumber: syz [ 97.947020][ T941] usb 5-1: config 0 descriptor?? [ 98.000500][ T5887] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.141'. [ 98.012331][ T5887] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 98.109115][ T5885] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 98.143378][ T46] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 98.162477][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 98.162491][ T29] audit: type=1326 audit(1724412013.304:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5884 comm="syz.1.142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd879d79e79 code=0x0 [ 98.346093][ T941] ath6kl: Failed to submit usb control message: -71 [ 98.359564][ T941] ath6kl: unable to send the bmi data to the device: -71 [ 98.369595][ T941] ath6kl: Unable to send get target info: -71 [ 98.379243][ T941] ath6kl: Failed to init ath6kl core: -71 [ 98.390320][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=61.47 [ 98.393911][ T941] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 98.409769][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.438602][ T941] usb 5-1: USB disconnect, device number 11 [ 98.456604][ T46] usb 3-1: config 0 descriptor?? [ 98.534234][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 98.689496][ T46] usb 3-1: string descriptor 0 read error: -71 [ 98.702232][ T5874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.708064][ T9] usb 2-1: device descriptor read/64, error -71 [ 98.754107][ T46] pwc: Logitech QuickCam detected (reserved ID). [ 98.775321][ T46] pwc: Failed to set LED on/off time (-71) [ 98.790072][ T46] pwc: send_video_command error -71 [ 98.797881][ T46] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 98.817054][ T46] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 98.851228][ T46] usb 3-1: USB disconnect, device number 10 [ 99.008064][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 99.157888][ T5931] netlink: 64 bytes leftover after parsing attributes in process `syz.3.146'. [ 99.183618][ T9] usb 2-1: device descriptor read/64, error -71 [ 99.313723][ T9] usb usb2-port1: attempt power cycle [ 99.460439][ T5938] xt_CONNSECMARK: invalid mode: 0 [ 99.463551][ T5278] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 99.473507][ T46] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 99.583445][ T5238] Bluetooth: hci3: command tx timeout [ 99.643940][ T46] usb 5-1: device descriptor read/64, error -71 [ 99.683380][ T5278] usb 4-1: Using ep0 maxpacket: 32 [ 99.702345][ T5278] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 99.733254][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.761602][ T5278] usb 4-1: config 0 descriptor?? [ 99.775592][ T5278] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 99.783455][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 99.834320][ T9] usb 2-1: device descriptor read/8, error -71 [ 99.974134][ T46] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 100.113432][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 100.144518][ T46] usb 5-1: device descriptor read/64, error -71 [ 100.174233][ T9] usb 2-1: device descriptor read/8, error -71 [ 100.295293][ T46] usb usb5-port1: attempt power cycle [ 100.300781][ T5278] gspca_sunplus: reg_w_riv err -110 [ 100.319540][ T9] usb usb2-port1: unable to enumerate USB device [ 100.323013][ T5278] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 100.773999][ T46] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 100.845236][ T46] usb 5-1: device descriptor read/8, error -71 [ 101.136758][ T46] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 101.190736][ T46] usb 5-1: device descriptor read/8, error -71 [ 101.271469][ T5961] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.153'. [ 101.282858][ T5961] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 101.339948][ T46] usb usb5-port1: unable to enumerate USB device [ 101.663374][ T46] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 101.853443][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 101.867401][ T46] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 101.889125][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.935808][ T46] usb 1-1: config 0 has no interface number 0 [ 101.954079][ T46] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 101.987208][ T46] usb 1-1: config 0 interface 8 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 102.003374][ T46] usb 1-1: config 0 interface 8 altsetting 248 has 5 endpoint descriptors, different from the interface descriptor's value: 10 [ 102.050420][ T46] usb 1-1: config 0 interface 8 has no altsetting 0 [ 102.067469][ T5311] usb 4-1: USB disconnect, device number 22 [ 102.101795][ T46] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 102.139765][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.187569][ T46] usb 1-1: Product: syz [ 102.191774][ T46] usb 1-1: Manufacturer: syz [ 102.222121][ T46] usb 1-1: SerialNumber: syz [ 102.267492][ T46] usb 1-1: config 0 descriptor?? [ 102.343121][ T5972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.595602][ T46] ath6kl: Failed to submit usb control message: -71 [ 102.602285][ T46] ath6kl: unable to send the bmi data to the device: -71 [ 102.635960][ T46] ath6kl: Unable to send get target info: -71 [ 102.711530][ T46] ath6kl: Failed to init ath6kl core: -71 [ 102.724996][ T46] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 102.733050][ T941] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 102.800735][ T46] usb 1-1: USB disconnect, device number 9 [ 102.826298][ T5987] x_tables: unsorted underflow at hook 4 [ 102.924990][ T941] usb 3-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=61.47 [ 102.975741][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.031922][ T941] usb 3-1: config 0 descriptor?? [ 103.251498][ T941] usb 3-1: string descriptor 0 read error: -71 [ 103.276016][ T5970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.285347][ T941] pwc: Logitech QuickCam detected (reserved ID). [ 103.323406][ T941] pwc: Failed to set LED on/off time (-71) [ 103.347574][ T941] pwc: send_video_command error -71 [ 103.403554][ T941] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 103.412170][ T941] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 103.471006][ T941] usb 3-1: USB disconnect, device number 11 [ 103.988799][ T6009] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.166'. [ 103.999431][ T6009] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 104.525895][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.169'. [ 104.905063][ T5311] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 105.107689][ T5311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.118060][ T5311] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.133956][ T5311] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 105.156723][ T5311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.191965][ T5311] usb 4-1: config 0 descriptor?? [ 105.343481][ T941] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 105.553851][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.590950][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.605192][ T6048] kvm: kvm [6047]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 105.635310][ T941] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 105.651399][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.691477][ T941] usb 3-1: config 0 descriptor?? [ 105.861301][ T6052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.142462][ T941] appletouch 3-1:0.0: Geyser mode initialized. [ 106.170657][ T941] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 106.213677][ T5278] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 106.332781][ T5313] udevd[5313]: Error opening device "/dev/input/event4": Input/output error [ 106.348908][ T5313] udevd[5313]: Unable to EVIOCGABS device "/dev/input/event4" [ 106.377806][ T5313] udevd[5313]: Unable to EVIOCGABS device "/dev/input/event4" [ 106.453372][ T5278] usb 1-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=61.47 [ 106.474490][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.498942][ T5278] usb 1-1: config 0 descriptor?? [ 106.718974][ T5278] usb 1-1: string descriptor 0 read error: -71 [ 106.728767][ T6051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.786603][ T5278] pwc: Logitech QuickCam detected (reserved ID). [ 106.811622][ T5278] pwc: Failed to set LED on/off time (-71) [ 106.820429][ T5278] pwc: send_video_command error -71 [ 106.838971][ T5278] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 106.862510][ T5278] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 106.892683][ T5278] usb 1-1: USB disconnect, device number 10 [ 106.939907][ T6066] netlink: 'syz.1.179': attribute type 10 has an invalid length. [ 106.979909][ T6066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.991092][ T6066] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 107.458495][ T5281] usb 4-1: USB disconnect, device number 23 [ 107.769148][ T46] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 107.988421][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 108.030589][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.077374][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.085932][ T5281] usb 3-1: USB disconnect, device number 12 [ 108.145947][ T46] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 108.184903][ T5281] appletouch 3-1:0.0: input: appletouch disconnected [ 108.198921][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.202434][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 108.230768][ T46] usb 1-1: config 0 descriptor?? [ 108.300612][ T6089] netlink: 'syz.1.184': attribute type 64 has an invalid length. [ 108.321283][ T6089] netlink: 168 bytes leftover after parsing attributes in process `syz.1.184'. [ 108.690057][ T46] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 108.703896][ T5281] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 108.713683][ T46] corsair 0003:1B1C:1B02.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 108.880584][ T46] corsair 0003:1B1C:1B02.0004: Read invalid backlight brightness: db. [ 108.893935][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 108.911258][ T5281] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 108.922229][ T6097] kvm: kvm [6096]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 108.953659][ T5281] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 108.954802][ T6097] kvm: kvm [6096]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x250000f7ff [ 108.978161][ T6097] kvm: kvm [6096]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x250000ffff [ 109.008096][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.008445][ T6097] kvm: kvm [6096]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x250000ffff [ 109.031238][ T6097] kvm: kvm [6096]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x250000f7ff [ 109.031442][ T5281] usb 2-1: Product: syz [ 109.042164][ T6097] kvm: kvm [6096]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x250000ffff [ 109.065293][ T6097] kvm_intel: kvm [6096]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x250000f7ff [ 109.066414][ T5281] usb 2-1: Manufacturer: syz [ 109.105167][ T5281] usb 2-1: SerialNumber: syz [ 109.124298][ T5281] usb 2-1: config 0 descriptor?? [ 109.140249][ T6089] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.162985][ T5281] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.891182][ T6113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.128766][ T6117] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.192'. [ 110.143544][ T6117] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 110.213602][ T46] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 110.375111][ T5238] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 110.383737][ T5238] Bluetooth: hci0: Injecting HCI hardware error event [ 110.391797][ T5238] Bluetooth: hci0: hardware error 0x00 [ 110.406580][ T46] usb 5-1: device descriptor read/64, error -71 [ 110.734010][ T46] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 110.761149][ T9] usb 1-1: USB disconnect, device number 11 [ 110.903411][ T46] usb 5-1: device descriptor read/64, error -71 [ 111.043708][ T46] usb usb5-port1: attempt power cycle [ 111.198066][ T941] usb 2-1: USB disconnect, device number 16 [ 111.514268][ T46] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 111.584264][ T46] usb 5-1: device descriptor read/8, error -71 [ 111.593355][ T58] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 111.834108][ T5281] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 111.839823][ T58] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 111.862984][ T58] usb 4-1: can't read configurations, error -61 [ 111.873361][ T46] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 111.913771][ T46] usb 5-1: device descriptor read/8, error -71 [ 112.035992][ T46] usb usb5-port1: unable to enumerate USB device [ 112.053619][ T58] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 112.073564][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 112.086757][ T5281] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 112.111792][ T5281] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 112.139529][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.150010][ T5281] usb 3-1: Product: syz [ 112.170011][ T5281] usb 3-1: Manufacturer: syz [ 112.194438][ T5281] usb 3-1: SerialNumber: syz [ 112.214206][ T5281] usb 3-1: config 0 descriptor?? [ 112.220052][ T6138] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 112.250643][ T5281] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.269872][ T58] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 112.286674][ T58] usb 4-1: can't read configurations, error -61 [ 112.299151][ T58] usb usb4-port1: attempt power cycle [ 112.453537][ T5238] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 112.638114][ T5281] usb 3-1: USB disconnect, device number 13 [ 112.733701][ T58] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 112.806889][ T58] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 112.823155][ T58] usb 4-1: can't read configurations, error -61 [ 112.891580][ T6113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.023610][ T58] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 113.118319][ T58] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 113.146009][ T58] usb 4-1: can't read configurations, error -61 [ 113.153437][ T58] usb usb4-port1: unable to enumerate USB device [ 113.434862][ T6165] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.203'. [ 113.444455][ T6165] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 113.517636][ T6168] loop0: detected capacity change from 0 to 7 [ 113.533491][ T58] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 113.555841][ T6168] Dev loop0: unable to read RDB block 7 [ 113.561836][ T6168] loop0: unable to read partition table [ 113.595638][ T6168] loop0: partition table beyond EOD, truncated [ 113.612758][ T6168] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 113.612758][ T6168] ) failed (rc=-5) [ 113.734101][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 113.745027][ T58] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 113.765042][ T58] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 113.801624][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 113.829738][ T6174] netlink: 'syz.1.209': attribute type 10 has an invalid length. [ 113.837663][ T58] usb 5-1: SerialNumber: syz [ 113.859983][ T58] usb 5-1: config 0 descriptor?? [ 113.867305][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.876267][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.917577][ T58] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 113.920863][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.931652][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.939738][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.947344][ T6174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.981462][ T58] usb 5-1: No valid video chain found. [ 114.029112][ T6174] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 114.172626][ T941] usb 5-1: USB disconnect, device number 20 [ 114.180566][ T6182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.513419][ T5311] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 114.683479][ T5311] usb 4-1: device descriptor read/64, error -71 [ 114.747947][ T6194] kvm: kvm [6193]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 114.953340][ T5311] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 115.018653][ T6204] fuse: Bad value for 'fd' [ 115.039295][ T6204] netlink: 'syz.4.217': attribute type 10 has an invalid length. [ 115.062349][ T6204] bond0: (slave netdevsim0): Releasing backup interface [ 115.082018][ T6204] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 115.132748][ T6204] team0: Failed to send options change via netlink (err -105) [ 115.144163][ T5311] usb 4-1: device descriptor read/64, error -71 [ 115.148946][ T6204] team0: Port device netdevsim0 added [ 115.233137][ T6213] loop0: detected capacity change from 0 to 7 [ 115.262757][ T6213] Dev loop0: unable to read RDB block 7 [ 115.276905][ T5311] usb usb4-port1: attempt power cycle [ 115.294718][ T6213] loop0: unable to read partition table [ 115.300594][ T6213] loop0: partition table beyond EOD, truncated [ 115.326631][ T6213] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 115.326631][ T6213] ) failed (rc=-5) [ 115.613371][ T5281] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 115.733879][ T5311] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 115.778691][ T5311] usb 4-1: device descriptor read/8, error -71 [ 115.813638][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 115.821143][ T5281] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 115.835336][ T5281] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 115.846390][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.865478][ T5281] usb 2-1: Product: syz [ 115.870600][ T5281] usb 2-1: Manufacturer: syz [ 115.882983][ T5281] usb 2-1: SerialNumber: syz [ 115.912114][ T5281] usb 2-1: config 0 descriptor?? [ 115.928795][ T6219] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 115.939547][ T5281] hub 2-1:0.0: bad descriptor, ignoring hub [ 115.946995][ T5281] hub 2-1:0.0: probe with driver hub failed with error -5 [ 115.971172][ T5281] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 116.070308][ T5311] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 116.133452][ T5278] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 116.141815][ T5311] usb 4-1: device descriptor read/8, error -71 [ 116.277540][ T5311] usb usb4-port1: unable to enumerate USB device [ 116.335320][ T5311] usb 2-1: USB disconnect, device number 17 [ 116.335320][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 116.377259][ T5278] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 116.394431][ T5278] usb 5-1: can't read configurations, error -61 [ 116.525604][ T6235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.227'. [ 116.593508][ T5278] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 116.848727][ T5278] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 116.900282][ T5278] usb 5-1: can't read configurations, error -61 [ 116.949034][ T5278] usb usb5-port1: attempt power cycle [ 116.975422][ T5311] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 117.161559][ T6182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.176327][ T5238] Bluetooth: hci1: command tx timeout [ 117.195866][ T5311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.206433][ T5311] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 117.216568][ T5311] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 117.231449][ T5311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.244263][ T5311] usb 1-1: config 0 descriptor?? [ 117.364869][ T6251] loop0: detected capacity change from 0 to 7 [ 117.413638][ T5278] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 117.428749][ T6251] Dev loop0: unable to read RDB block 7 [ 117.441338][ T6251] loop0: unable to read partition table [ 117.447618][ T6251] loop0: partition table beyond EOD, truncated [ 117.474319][ T6251] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 117.474319][ T6251] ) failed (rc=-5) [ 117.495034][ T5278] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 117.518593][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 117.527886][ T5278] usb 5-1: can't read configurations, error -61 [ 117.703473][ T5278] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 117.756161][ T5278] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 117.784660][ T5278] usb 5-1: can't read configurations, error -61 [ 117.802097][ T5278] usb usb5-port1: unable to enumerate USB device [ 117.893404][ T5311] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 118.127239][ T5311] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 118.156619][ T5311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.187080][ T5311] usb 3-1: Product: syz [ 118.191988][ T5311] usb 3-1: Manufacturer: syz [ 118.199891][ T5311] usb 3-1: SerialNumber: syz [ 118.211928][ T5311] usb 3-1: config 0 descriptor?? [ 118.433733][ T5311] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 118.460489][ T5311] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 118.489030][ T5311] usb 3-1: USB disconnect, device number 14 [ 118.813955][ T6275] fuse: Bad value for 'fd' [ 118.837865][ T6275] netlink: 'syz.4.239': attribute type 10 has an invalid length. [ 118.847236][ T6271] fuse: Bad value for 'group_id' [ 118.862040][ T6271] fuse: Bad value for 'group_id' [ 118.877734][ T6275] netlink: 'syz.4.239': attribute type 10 has an invalid length. [ 118.901211][ T6275] team0: Port device netdevsim0 removed [ 118.921044][ T6275] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 118.942951][ T5238] Bluetooth: Unexpected start frame (len 18) [ 119.092896][ T29] audit: type=1326 audit(1724412034.234:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7217579e79 code=0x7ffc0000 [ 119.182739][ T29] audit: type=1326 audit(1724412034.264:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7217579e79 code=0x7ffc0000 [ 119.236013][ T29] audit: type=1326 audit(1724412034.264:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7217579e79 code=0x7ffc0000 [ 119.294254][ T29] audit: type=1326 audit(1724412034.264:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7217579e79 code=0x7ffc0000 [ 119.343636][ T29] audit: type=1326 audit(1724412034.264:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7217579e79 code=0x7ffc0000 [ 119.404384][ T29] audit: type=1326 audit(1724412034.264:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7217579e79 code=0x7ffc0000 [ 119.436987][ T5278] usb 1-1: USB disconnect, device number 12 [ 119.509867][ T29] audit: type=1326 audit(1724412034.264:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7217579e79 code=0x7ffc0000 [ 119.565578][ T29] audit: type=1326 audit(1724412034.264:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7217579e79 code=0x7ffc0000 [ 119.633619][ T6293] loop0: detected capacity change from 0 to 7 [ 119.670998][ T29] audit: type=1326 audit(1724412034.264:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7217579e79 code=0x7ffc0000 [ 119.695578][ T6293] Dev loop0: unable to read RDB block 7 [ 119.712424][ T6293] loop0: unable to read partition table [ 119.742287][ T29] audit: type=1326 audit(1724412034.264:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7217579e79 code=0x7ffc0000 [ 119.767340][ T6293] loop0: partition table beyond EOD, truncated [ 119.793337][ T6293] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 119.793337][ T6293] ) failed (rc=-5) [ 120.572090][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 120.668674][ T6323] fuse: Bad value for 'fd' [ 120.702082][ T6323] netlink: 'syz.2.251': attribute type 10 has an invalid length. [ 120.731554][ T6323] team0: Failed to send options change via netlink (err -105) [ 120.767181][ T6323] team0: Port device netdevsim0 added [ 120.796097][ T6324] netlink: 'syz.2.251': attribute type 10 has an invalid length. [ 120.826226][ T6324] team0: Failed to send options change via netlink (err -105) [ 120.839403][ T6324] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 120.854110][ T6324] team0: Port device netdevsim0 removed [ 120.861772][ T6326] tmpfs: Unknown parameter 'nGK.e [ 120.861772][ T6326]  ٣7]X#' [ 120.882118][ T6324] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 120.904259][ T5311] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 121.130048][ T5311] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 121.178735][ T5311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.187948][ T5278] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 121.204951][ T5311] usb 4-1: Product: syz [ 121.240130][ T5311] usb 4-1: Manufacturer: syz [ 121.249245][ T5311] usb 4-1: SerialNumber: syz [ 121.256508][ T5311] usb 4-1: config 0 descriptor?? [ 121.405654][ T5278] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.439011][ T5278] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.473596][ T5311] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 121.481012][ T5311] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 121.492196][ T5278] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.506475][ T5311] usb 4-1: USB disconnect, device number 32 [ 121.516540][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.530125][ T5278] usb 2-1: SerialNumber: syz [ 121.543658][ T5281] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 121.746763][ T5281] usb 3-1: config 1 has an invalid interface descriptor of length 8, skipping [ 121.748444][ T6326] tmpfs: Unknown parameter 'nGK.e [ 121.748444][ T6326]  ٣7]X#' [ 121.770178][ T5281] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.774355][ T6342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.788985][ T5281] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 121.804017][ T6342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.809730][ T5281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.821958][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.840834][ T5281] usb 3-1: Product: syz [ 121.845635][ T5278] usb 2-1: 0:2 : does not exist [ 121.848689][ T5281] usb 3-1: Manufacturer: syz [ 121.860762][ T5281] usb 3-1: SerialNumber: syz [ 121.898626][ T5278] usb 2-1: USB disconnect, device number 18 [ 121.959713][ T5318] udevd[5318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.199427][ T5245] syz-executor (5245) used greatest stack depth: 18416 bytes left [ 122.306824][ T2939] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.324239][ T6350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.346945][ T6350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.567428][ T2939] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.800498][ T2939] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.928441][ T2939] bond0: (slave netdevsim0): Releasing backup interface [ 122.962124][ T2939] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.023769][ T5311] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 123.250461][ T5311] usb 4-1: New USB device found, idVendor=0bfd, idProduct=001d, bcdDevice=f2.28 [ 123.295234][ T2939] bridge_slave_1: left allmulticast mode [ 123.303117][ T5311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.326634][ T2939] bridge_slave_1: left promiscuous mode [ 123.353349][ T5311] usb 4-1: Product: syz [ 123.357939][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.373412][ T5311] usb 4-1: Manufacturer: syz [ 123.387246][ T5311] usb 4-1: SerialNumber: syz [ 123.403009][ T2939] bridge_slave_0: left allmulticast mode [ 123.412398][ T5311] usb 4-1: config 0 descriptor?? [ 123.432136][ T2939] bridge_slave_0: left promiscuous mode [ 123.442726][ T5311] kvaser_usb 4-1:0.0: Cannot get usb endpoint(s) [ 123.455148][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.473155][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.481067][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.494882][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.512155][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.522027][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 123.530215][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.621415][ T6358] input: syz0 as /devices/virtual/input/input8 [ 124.142602][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.162741][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.173017][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.180117][ T2939] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 124.192068][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.200488][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 124.207986][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.291620][ T5281] usb 3-1: USB disconnect, device number 15 [ 124.422572][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.442878][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.458911][ T2939] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 124.475569][ T2939] bond0 (unregistering): Released all slaves [ 124.498961][ T6357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.263'. [ 124.555994][ T5281] usb 4-1: USB disconnect, device number 33 [ 125.281961][ T2939] hsr_slave_0: left promiscuous mode [ 125.305737][ T2939] hsr_slave_1: left promiscuous mode [ 125.348642][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.364292][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.384357][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.411739][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.437482][ T2939] veth1_macvtap: left promiscuous mode [ 125.443142][ T2939] veth0_macvtap: left promiscuous mode [ 125.455850][ T2939] veth1_vlan: left promiscuous mode [ 125.461890][ T2939] veth0_vlan: left promiscuous mode [ 125.573475][ T5238] Bluetooth: hci4: command tx timeout [ 125.743294][ T5278] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 125.918717][ T6399] netlink: 64 bytes leftover after parsing attributes in process `syz.3.271'. [ 125.978220][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.999935][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.023833][ T5278] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 126.040055][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.074351][ T5278] usb 3-1: config 0 descriptor?? [ 126.236543][ T58] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 126.293389][ T5238] Bluetooth: hci1: command tx timeout [ 126.431315][ T2939] team0 (unregistering): Port device team_slave_1 removed [ 126.463312][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 126.477273][ T58] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 126.487553][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.519331][ T58] usb 4-1: config 0 descriptor?? [ 126.539785][ T58] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 126.557264][ T5278] logitech 0003:046D:CA04.0005: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 126.583346][ T5278] logitech 0003:046D:CA04.0005: no inputs found [ 126.602055][ T2939] team0 (unregistering): Port device team_slave_0 removed [ 126.813669][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 127.014859][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 127.032019][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.041391][ T9] usb 1-1: Product: syz [ 127.062835][ T9] usb 1-1: Manufacturer: syz [ 127.071818][ T9] usb 1-1: SerialNumber: syz [ 127.077420][ T58] gspca_sunplus: reg_w_riv err -110 [ 127.099037][ T9] usb 1-1: config 0 descriptor?? [ 127.107340][ T58] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 127.357059][ T58] usb 3-1: USB disconnect, device number 16 [ 127.397386][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 127.475496][ T9] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 127.501687][ T9] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 127.529926][ T9] usb 1-1: USB disconnect, device number 13 [ 127.653403][ T5238] Bluetooth: hci4: command tx timeout [ 127.725641][ T6368] chnl_net:caif_netlink_parms(): no params data found [ 127.846524][ T6364] chnl_net:caif_netlink_parms(): no params data found [ 128.029984][ T6368] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.146460][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.178741][ T6368] bridge_slave_0: entered allmulticast mode [ 128.199184][ T6368] bridge_slave_0: entered promiscuous mode [ 128.259996][ T6368] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.283458][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.307827][ T6368] bridge_slave_1: entered allmulticast mode [ 128.348027][ T6368] bridge_slave_1: entered promiscuous mode [ 128.373336][ T5238] Bluetooth: hci1: command tx timeout [ 128.546652][ T6368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.638594][ T2939] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.734326][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.744745][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.756391][ T6364] bridge_slave_0: entered allmulticast mode [ 128.764942][ T6364] bridge_slave_0: entered promiscuous mode [ 128.782695][ T58] usb 4-1: USB disconnect, device number 34 [ 128.823967][ T6368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.903638][ T2939] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.945795][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.953718][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.967173][ T6364] bridge_slave_1: entered allmulticast mode [ 128.981338][ T6364] bridge_slave_1: entered promiscuous mode [ 129.211743][ T6445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.238768][ T2939] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.253930][ T6445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.303900][ T6368] team0: Port device team_slave_0 added [ 129.340392][ T6368] team0: Port device team_slave_1 added [ 129.386123][ T6364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.399536][ T6451] netlink: 41 bytes leftover after parsing attributes in process `syz.2.279'. [ 129.427387][ T6364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.478167][ T2939] bond0: (slave netdevsim0): Releasing backup interface [ 129.506180][ T2939] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.693571][ T5281] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 129.733631][ T5238] Bluetooth: hci4: command tx timeout [ 129.798394][ T6368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.832432][ T6368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.866862][ T6368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.916913][ T5281] usb 3-1: Using ep0 maxpacket: 16 [ 129.933956][ T6364] team0: Port device team_slave_0 added [ 129.943020][ T6364] team0: Port device team_slave_1 added [ 129.974342][ T5281] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 129.981631][ T5281] usb 3-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 129.996022][ T6368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.013294][ T5281] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.022602][ T5281] usb 3-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 130.025717][ T6368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.032360][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.085813][ T6368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.125305][ T5281] usb 3-1: Product: syz [ 130.139737][ T5281] usb 3-1: Manufacturer: syz [ 130.149856][ T5281] usb 3-1: SerialNumber: syz [ 130.189117][ T5281] usb 3-1: config 0 descriptor?? [ 130.210525][ T5281] sierra 3-1:0.0: Sierra USB modem converter detected [ 130.286971][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.301966][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.393561][ T6364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.454660][ T5238] Bluetooth: hci1: command tx timeout [ 130.473399][ T5278] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 130.521803][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.530958][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.561678][ T6364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.641506][ T6368] hsr_slave_0: entered promiscuous mode [ 130.651944][ T6368] hsr_slave_1: entered promiscuous mode [ 130.658802][ T6368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.670210][ T6368] Cannot create hsr debugfs directory [ 130.674528][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.675704][ T5278] usb 4-1: Using ep0 maxpacket: 32 [ 130.697918][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.705031][ T5278] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 130.721561][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.722204][ T5281] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 130.741184][ T2939] bridge_slave_1: left allmulticast mode [ 130.746341][ T5281] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 130.747274][ T5311] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 130.767539][ T2939] bridge_slave_1: left promiscuous mode [ 130.774008][ T5278] usb 4-1: config 0 descriptor?? [ 130.782885][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.796088][ T5278] gspca_main: sunplus-2.14.0 probing 041e:400b [ 130.803158][ T2939] bridge_slave_0: left allmulticast mode [ 130.809661][ T2939] bridge_slave_0: left promiscuous mode [ 130.828307][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.998701][ T58] usb 3-1: USB disconnect, device number 17 [ 131.016252][ T5311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.033072][ T5311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.048013][ T58] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 131.064142][ T5311] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 131.075721][ T5311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.085815][ T58] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 131.098724][ T58] sierra 3-1:0.0: device disconnected [ 131.114703][ T5311] usb 1-1: config 0 descriptor?? [ 131.201827][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.216229][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.245882][ T6467] fuse: Bad value for 'fd' [ 131.261849][ T5278] gspca_sunplus: reg_w_riv err -71 [ 131.267846][ T5278] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 131.279879][ T5278] usb 4-1: USB disconnect, device number 35 [ 131.348646][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.360551][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.374704][ T2939] bond0 (unregistering): Released all slaves [ 131.410828][ T6364] hsr_slave_0: entered promiscuous mode [ 131.421448][ T6364] hsr_slave_1: entered promiscuous mode [ 131.428831][ T6364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.437940][ T6364] Cannot create hsr debugfs directory [ 131.532767][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.552365][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.650713][ T6479] fuse: Bad value for 'fd' [ 131.703085][ T6479] netlink: 'syz.2.283': attribute type 10 has an invalid length. [ 131.729057][ T6479] bond0: (slave netdevsim0): Releasing backup interface [ 131.750872][ T6479] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 131.779654][ T5311] usbhid 1-1:0.0: can't add hid device: -71 [ 131.791524][ T6479] team0: Failed to send options change via netlink (err -105) [ 131.800060][ T5311] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 131.815086][ T5238] Bluetooth: hci4: command tx timeout [ 131.815988][ T6479] team0: Port device netdevsim0 added [ 131.843558][ T5311] usb 1-1: USB disconnect, device number 15 [ 132.178258][ T2939] hsr_slave_0: left promiscuous mode [ 132.200105][ T2939] hsr_slave_1: left promiscuous mode [ 132.222025][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.238830][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.273658][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.292752][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.387523][ T2939] veth1_macvtap: left promiscuous mode [ 132.408212][ T2939] veth0_macvtap: left promiscuous mode [ 132.433585][ T2939] veth1_vlan: left promiscuous mode [ 132.442712][ T2939] veth0_vlan: left promiscuous mode [ 132.534080][ T5238] Bluetooth: hci1: command tx timeout [ 132.873546][ T46] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 133.100154][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.107212][ T46] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 133.107316][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.132579][ T46] usb 3-1: can't read configurations, error -61 [ 133.323359][ T46] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 133.492351][ T2939] team0 (unregistering): Port device team_slave_1 removed [ 133.540867][ T46] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 133.560042][ T46] usb 3-1: can't read configurations, error -61 [ 133.584526][ T46] usb usb3-port1: attempt power cycle [ 133.605090][ T2939] team0 (unregistering): Port device team_slave_0 removed [ 134.030704][ T46] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 134.130502][ T46] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 134.153357][ T46] usb 3-1: can't read configurations, error -61 [ 134.323410][ T46] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 134.386995][ T46] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 134.485090][ T46] usb 3-1: can't read configurations, error -61 [ 134.531104][ T46] usb usb3-port1: unable to enumerate USB device [ 135.250607][ T6523] kvm: emulating exchange as write [ 135.839411][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.293'. [ 136.139553][ T6368] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 136.177639][ T6368] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 136.233806][ T6368] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 136.334346][ T5281] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 136.469496][ T6368] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.504058][ T5311] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 136.560910][ T5281] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.594252][ T5281] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 136.625079][ T5281] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 136.651683][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.694698][ T5281] usb 4-1: config 0 descriptor?? [ 136.716117][ T5311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.790432][ T5311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.819937][ T5311] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 136.833977][ T5311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.846261][ T5311] usb 3-1: config 0 descriptor?? [ 137.077015][ T6364] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 137.102260][ T6364] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 137.127937][ T6364] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 137.167344][ T6364] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 137.271291][ T6368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.293651][ T5311] logitech 0003:046D:CA04.0006: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 137.319375][ T5311] logitech 0003:046D:CA04.0006: no inputs found [ 137.398625][ T6368] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.438298][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.445496][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.479234][ T6543] fuse: Bad value for 'fd' [ 137.487862][ T5311] usb 3-1: USB disconnect, device number 22 [ 137.527388][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.534542][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.821393][ T6364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.925965][ T6364] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.955838][ T6368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.004853][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.012012][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.062362][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.069491][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.154201][ T6570] netlink: 'syz.2.300': attribute type 2 has an invalid length. [ 138.360501][ T6368] veth0_vlan: entered promiscuous mode [ 138.418763][ T6368] veth1_vlan: entered promiscuous mode [ 138.442003][ T6364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.473470][ T5278] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 138.588288][ T6368] veth0_macvtap: entered promiscuous mode [ 138.635782][ T6368] veth1_macvtap: entered promiscuous mode [ 138.678920][ T5278] usb 3-1: config 0 has no interfaces? [ 138.685942][ T5278] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 138.726849][ T941] usb 4-1: USB disconnect, device number 36 [ 138.736758][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.770665][ T5278] usb 3-1: config 0 descriptor?? [ 138.772660][ T6364] veth0_vlan: entered promiscuous mode [ 138.888304][ T6364] veth1_vlan: entered promiscuous mode [ 138.918853][ T6368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.953341][ T6368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.983260][ T6368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.014071][ T6368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.038010][ T5278] usb 3-1: USB disconnect, device number 23 [ 139.043295][ T6368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.083273][ T6368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.125364][ T6368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.180432][ T6368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.213722][ T6368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.244750][ T6368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.275483][ T6368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.313311][ T6590] capability: warning: `syz.0.302' uses deprecated v2 capabilities in a way that may be insecure [ 139.315515][ T6368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.379307][ T6368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.417432][ T6368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.472326][ T6368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.501731][ T6368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.534964][ T6368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.563435][ T6368] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.806527][ T6364] veth0_macvtap: entered promiscuous mode [ 139.895486][ T6364] veth1_macvtap: entered promiscuous mode [ 140.041505][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.056532][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.069818][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.083881][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.096865][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.139155][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.170334][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.212156][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.275803][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.339267][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.368794][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.422859][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.449439][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.479655][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.499455][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.511092][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.529277][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.543080][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.557177][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.617075][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.626721][ T6602] delete_channel: no stack [ 140.631732][ T6602] delete_channel: no stack [ 140.692458][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.712257][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.749224][ T6621] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 140.760196][ T6364] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.780585][ T6364] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.791169][ T6364] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.800275][ T6364] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.065000][ T2890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.072856][ T2890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.165782][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.174917][ T6643] netlink: 'syz.4.266': attribute type 21 has an invalid length. [ 141.182677][ T6643] netlink: 156 bytes leftover after parsing attributes in process `syz.4.266'. [ 141.217771][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.339620][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 142.534329][ T6683] openvswitch: netlink: Message has -1 unknown bytes. [ 142.950758][ T6686] kvm: kvm [6685]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 142.961536][ T6686] kvm: kvm [6685]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 143.017951][ T1077] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.204507][ T1077] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.396411][ T6706] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.320'. [ 143.427690][ T6706] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 143.508335][ T1077] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.655087][ T1077] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.776839][ T6722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.980514][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.002103][ T1077] bridge_slave_1: left allmulticast mode [ 144.014244][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.024255][ T1077] bridge_slave_1: left promiscuous mode [ 144.024294][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.042043][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.042112][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.082759][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.094587][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.123034][ T1077] bridge_slave_0: left allmulticast mode [ 144.149530][ T1077] bridge_slave_0: left promiscuous mode [ 144.179818][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.187472][ T5278] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 144.363548][ T5278] usb 2-1: device descriptor read/64, error -71 [ 144.623342][ T5227] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 144.643286][ T5278] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 144.816270][ T5278] usb 2-1: device descriptor read/64, error -71 [ 144.823548][ T5227] usb 3-1: Using ep0 maxpacket: 32 [ 144.835278][ T5227] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.858983][ T5227] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.910482][ T5227] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 144.921741][ T5227] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 144.947649][ T5278] usb usb2-port1: attempt power cycle [ 144.957742][ T5227] usb 3-1: Product: syz [ 144.961955][ T5227] usb 3-1: Manufacturer: syz [ 144.978324][ T5227] hub 3-1:4.0: USB hub found [ 144.988779][ T6756] FAULT_INJECTION: forcing a failure. [ 144.988779][ T6756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.002681][ T1077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.017801][ T6756] CPU: 0 UID: 0 PID: 6756 Comm: syz.0.326 Not tainted 6.11.0-rc4-syzkaller-00135-gaa0743a22936 #0 [ 145.028413][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 145.038484][ T6756] Call Trace: [ 145.041774][ T6756] [ 145.044719][ T6756] dump_stack_lvl+0x241/0x360 [ 145.049424][ T6756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.054643][ T6756] ? __pfx__printk+0x10/0x10 [ 145.059266][ T6756] ? snprintf+0xda/0x120 [ 145.063534][ T6756] should_fail_ex+0x3b0/0x4e0 [ 145.068245][ T6756] _copy_to_user+0x2f/0xb0 [ 145.072676][ T6756] simple_read_from_buffer+0xca/0x150 [ 145.078070][ T6756] proc_fail_nth_read+0x1ec/0x260 [ 145.083120][ T6756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.088689][ T6756] ? rw_verify_area+0x520/0x6b0 [ 145.093561][ T6756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.099127][ T6756] vfs_read+0x204/0xbc0 [ 145.103294][ T6756] ? __pfx_lock_release+0x10/0x10 [ 145.108347][ T6756] ? __pfx_vfs_read+0x10/0x10 [ 145.113053][ T6756] ? __fget_files+0x29/0x470 [ 145.117663][ T6756] ? __fget_files+0x3f6/0x470 [ 145.122370][ T6756] ksys_read+0x1a0/0x2c0 [ 145.126633][ T6756] ? __pfx_ksys_read+0x10/0x10 [ 145.131408][ T6756] ? do_syscall_64+0x100/0x230 [ 145.136184][ T6756] ? do_syscall_64+0xb6/0x230 [ 145.140874][ T6756] do_syscall_64+0xf3/0x230 [ 145.145389][ T6756] ? clear_bhb_loop+0x35/0x90 [ 145.150084][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.155989][ T6756] RIP: 0033:0x7fc204d788bc [ 145.160424][ T6756] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 145.180041][ T6756] RSP: 002b:00007fc205a8e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.188477][ T6756] RAX: ffffffffffffffda RBX: 00007fc204f16058 RCX: 00007fc204d788bc [ 145.196471][ T6756] RDX: 000000000000000f RSI: 00007fc205a8e0a0 RDI: 000000000000000c [ 145.203428][ T5227] hub 3-1:4.0: 2 ports detected [ 145.204436][ T6756] RBP: 00007fc205a8e090 R08: 0000000000000000 R09: 0000000000000000 [ 145.217260][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.225248][ T6756] R13: 0000000000000000 R14: 00007fc204f16058 R15: 00007fc20503fa38 [ 145.233244][ T6756] [ 145.261066][ T1077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.278491][ T1077] bond0 (unregistering): Released all slaves [ 145.373386][ T5278] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 145.424489][ T5278] usb 2-1: device descriptor read/8, error -71 [ 145.713312][ T5278] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 145.764625][ T5278] usb 2-1: device descriptor read/8, error -71 [ 145.773338][ T58] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 145.890738][ T1077] hsr_slave_0: left promiscuous mode [ 145.904416][ T5278] usb usb2-port1: unable to enumerate USB device [ 145.933040][ T1077] hsr_slave_1: left promiscuous mode [ 145.958293][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.973538][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 145.986266][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.996365][ T58] usb 1-1: config 183 has too many interfaces: 145, using maximum allowed: 32 [ 146.009598][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.023898][ T58] usb 1-1: config 183 has an invalid interface association descriptor of length 5, skipping [ 146.057082][ T58] usb 1-1: config 183 has an invalid descriptor of length 0, skipping remainder of the config [ 146.060975][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.097093][ T1077] veth1_macvtap: left promiscuous mode [ 146.109383][ T1077] veth0_macvtap: left promiscuous mode [ 146.112179][ T58] usb 1-1: config 183 has 0 interfaces, different from the descriptor's value: 145 [ 146.121312][ T1077] veth1_vlan: left promiscuous mode [ 146.133933][ T1077] veth0_vlan: left promiscuous mode [ 146.134418][ T5238] Bluetooth: hci1: command tx timeout [ 146.139251][ T58] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= f.88 [ 146.178550][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.200113][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 146.200127][ T29] audit: type=1326 audit(1724412061.334:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.3.328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7217579e79 code=0x0 [ 146.234871][ T58] usb 1-1: Product: syz [ 146.250883][ T58] usb 1-1: Manufacturer: syz [ 146.260822][ T58] usb 1-1: SerialNumber: syz [ 146.443148][ T5311] hub 3-1:4.0: activate --> -90 [ 146.778901][ T6722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.968549][ T1077] team0 (unregistering): Port device team_slave_1 removed [ 147.054015][ T5311] hub 3-1:4.0: hub_ext_port_status failed (err = 0) [ 147.135344][ T1077] team0 (unregistering): Port device team_slave_0 removed [ 147.270341][ T5311] usb 3-1-port2: cannot warm reset (err = -71) [ 147.273738][ T941] usb 3-1: USB disconnect, device number 24 [ 147.302036][ T5311] usb 3-1-port2: Cannot enable. Maybe the USB cable is bad? [ 148.213469][ T5238] Bluetooth: hci1: command tx timeout [ 148.361823][ T6734] chnl_net:caif_netlink_parms(): no params data found [ 148.957843][ T6734] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.001277][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.035823][ T6734] bridge_slave_0: entered allmulticast mode [ 149.065493][ T6734] bridge_slave_0: entered promiscuous mode [ 149.126409][ T6734] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.140717][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.158935][ T6734] bridge_slave_1: entered allmulticast mode [ 149.182262][ T6734] bridge_slave_1: entered promiscuous mode [ 149.318688][ T6734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.346079][ T6734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.387189][ T5312] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 149.449861][ T58] usb 1-1: USB disconnect, device number 16 [ 149.476062][ T6734] team0: Port device team_slave_0 added [ 149.512775][ T6734] team0: Port device team_slave_1 added [ 149.593651][ T5312] usb 3-1: Using ep0 maxpacket: 8 [ 149.632453][ T5312] usb 3-1: config 4 has an invalid interface number: 241 but max is 1 [ 149.662796][ T5312] usb 3-1: config 4 has an invalid interface number: 151 but max is 1 [ 149.675322][ T6852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.682127][ T5312] usb 3-1: config 4 has an invalid interface number: 3 but max is 1 [ 149.721911][ T5312] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 149.751487][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.759883][ T5312] usb 3-1: config 4 has 4 interfaces, different from the descriptor's value: 2 [ 149.783321][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.789387][ T5312] usb 3-1: config 4 has no interface number 0 [ 149.811911][ T5278] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 149.826323][ T6734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.843764][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.850956][ T5312] usb 3-1: config 4 has no interface number 2 [ 149.850974][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.860128][ T6734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.906868][ T5312] usb 3-1: config 4 interface 241 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 149.922036][ T5312] usb 3-1: too many endpoints for config 4 interface 1 altsetting 2: 131, using maximum allowed: 30 [ 149.938482][ T5312] usb 3-1: config 4 interface 1 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 149.957754][ T5312] usb 3-1: config 4 interface 1 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 149.979287][ T6734] hsr_slave_0: entered promiscuous mode [ 150.005341][ T6734] hsr_slave_1: entered promiscuous mode [ 150.021106][ T5312] usb 3-1: config 4 interface 1 altsetting 2 endpoint 0xC has an invalid bInterval 64, changing to 10 [ 150.045551][ T5227] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 150.047283][ T5312] usb 3-1: config 4 interface 1 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 131 [ 150.069852][ T5312] usb 3-1: config 4 interface 151 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 150.095111][ T5278] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 150.112095][ T5278] usb 4-1: can't read configurations, error -61 [ 150.173251][ T5312] usb 3-1: config 4 interface 3 altsetting 207 endpoint 0x1 has invalid maxpacket 9225, setting to 1024 [ 150.212291][ T5312] usb 3-1: config 4 interface 3 altsetting 207 bulk endpoint 0x1 has invalid maxpacket 1024 [ 150.248158][ T5312] usb 3-1: config 4 interface 3 altsetting 207 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 150.253465][ T5227] usb 2-1: device descriptor read/64, error -71 [ 150.275897][ T5278] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 150.293412][ T5238] Bluetooth: hci1: command tx timeout [ 150.314747][ T5312] usb 3-1: config 4 interface 241 has no altsetting 0 [ 150.321566][ T5312] usb 3-1: config 4 interface 1 has no altsetting 0 [ 150.329029][ T5312] usb 3-1: config 4 interface 151 has no altsetting 0 [ 150.336943][ T5312] usb 3-1: config 4 interface 3 has no altsetting 0 [ 150.364871][ T5312] usb 3-1: New USB device found, idVendor=2040, idProduct=c60c, bcdDevice=65.71 [ 150.375783][ T5312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.386823][ T5312] usb 3-1: Product: syz [ 150.391816][ T5312] usb 3-1: Manufacturer: Ь [ 150.396725][ T5312] usb 3-1: SerialNumber: syz [ 150.487332][ T5278] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 150.515986][ T5278] usb 4-1: can't read configurations, error -61 [ 150.552720][ T5278] usb usb4-port1: attempt power cycle [ 150.573397][ T5227] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 150.653500][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.688606][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.744338][ T5227] usb 2-1: device descriptor read/64, error -71 [ 150.866206][ T5227] usb usb2-port1: attempt power cycle [ 150.883038][ T5312] usb 3-1: USB disconnect, device number 25 [ 150.974555][ T5278] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 151.043006][ T5278] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 151.074366][ T5278] usb 4-1: can't read configurations, error -61 [ 151.264425][ T5278] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 151.305406][ T6734] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.324730][ T6734] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.336548][ T5278] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 151.353970][ T5227] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 151.365096][ T6734] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.374128][ T5278] usb 4-1: can't read configurations, error -61 [ 151.390896][ T5278] usb usb4-port1: unable to enumerate USB device [ 151.416744][ T6734] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.426436][ T5227] usb 2-1: device descriptor read/8, error -71 [ 151.698326][ T5227] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 151.707651][ T6882] loop0: detected capacity change from 0 to 128 [ 151.747511][ T6734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.755701][ T5227] usb 2-1: device descriptor read/8, error -71 [ 151.871235][ T6734] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.905183][ T5227] usb usb2-port1: unable to enumerate USB device [ 151.939440][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.946653][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.022364][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.029538][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.139990][ T6891] kvm: kvm [6890]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6d00000800 [ 152.239492][ T6734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.383942][ T5238] Bluetooth: hci1: command tx timeout [ 152.389891][ T6734] veth0_vlan: entered promiscuous mode [ 152.460479][ T6734] veth1_vlan: entered promiscuous mode [ 152.590752][ T6734] veth0_macvtap: entered promiscuous mode [ 152.601474][ T6734] veth1_macvtap: entered promiscuous mode [ 152.626601][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.639916][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.652745][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.667157][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.679226][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.690974][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.702488][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.713486][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.734354][ T6852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.735255][ T6734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.773121][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.802925][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.825559][ T5277] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 152.857206][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.897264][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.916279][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.927037][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.966495][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.979848][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.006728][ T6734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.017297][ T5277] usb 4-1: device descriptor read/64, error -71 [ 153.042621][ T6734] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.051718][ T6734] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.083934][ T6734] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.096744][ T29] audit: type=1326 audit(1724412068.244:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 153.110664][ T6734] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.154970][ T29] audit: type=1326 audit(1724412068.274:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 153.281949][ T29] audit: type=1326 audit(1724412068.274:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 153.308792][ T5277] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 153.378231][ T29] audit: type=1326 audit(1724412068.274:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 153.433340][ T29] audit: type=1326 audit(1724412068.274:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 153.434295][ T6932] fuse: Bad value for 'fd' [ 153.476604][ T29] audit: type=1326 audit(1724412068.274:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 153.500549][ T5277] usb 4-1: device descriptor read/64, error -71 [ 153.514920][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.522761][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.571074][ T29] audit: type=1326 audit(1724412068.274:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 153.622593][ T6932] netlink: 'syz.1.351': attribute type 10 has an invalid length. [ 153.635378][ T29] audit: type=1326 audit(1724412068.274:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 153.643309][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.658459][ T29] audit: type=1326 audit(1724412068.274:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 153.666240][ T5277] usb usb4-port1: attempt power cycle [ 153.712264][ T29] audit: type=1326 audit(1724412068.274:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 153.723682][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.743359][ T6932] team0: Failed to send options change via netlink (err -105) [ 153.785995][ T6932] team0: Port device netdevsim0 added [ 154.072318][ T6950] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.130738][ T6945] kvm: kvm [6943]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6d00000800 [ 154.153608][ T5277] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 154.162981][ T6945] kvm: kvm [6943]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x14500000800 [ 154.192999][ T6945] kvm: kvm [6943]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x146000048b6 [ 154.206240][ T5277] usb 4-1: device descriptor read/8, error -71 [ 154.493733][ T5277] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 154.545659][ T5277] usb 4-1: device descriptor read/8, error -71 [ 154.622520][ T6958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.695666][ T5277] usb usb4-port1: unable to enumerate USB device [ 154.743522][ T5227] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 154.933640][ T5227] usb 2-1: Using ep0 maxpacket: 16 [ 154.945544][ T5311] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 154.957139][ T5227] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 154.966990][ T5227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.978876][ T5227] usb 2-1: Product: syz [ 154.983051][ T5227] usb 2-1: Manufacturer: syz [ 154.983534][ T9] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 154.987741][ T5227] usb 2-1: SerialNumber: syz [ 155.005459][ T5227] usb 2-1: config 0 descriptor?? [ 155.012417][ T5227] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 155.021418][ T5227] usb 2-1: Detected FT4233HP [ 155.113362][ T5311] usb 5-1: device descriptor read/64, error -71 [ 155.175015][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.186502][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 155.197550][ T9] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 155.206647][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.224082][ T9] usb 3-1: config 0 descriptor?? [ 155.232243][ T6961] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 155.239631][ T5277] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 155.383433][ T5311] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 155.423711][ T5277] usb 1-1: Using ep0 maxpacket: 16 [ 155.431079][ T5277] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 155.444367][ T5277] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.457861][ T5277] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.479829][ T5277] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.489746][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.499020][ T5277] usb 1-1: Product: syz [ 155.503296][ T5277] usb 1-1: Manufacturer: syz [ 155.507931][ T5277] usb 1-1: SerialNumber: syz [ 155.533674][ T5311] usb 5-1: device descriptor read/64, error -71 [ 155.674903][ T5311] usb usb5-port1: attempt power cycle [ 155.678237][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.698128][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.732421][ T9] nintendo 0003:057E:200E.0007: unknown main item tag 0x0 [ 155.740792][ T5231] Bluetooth: hci4: command tx timeout [ 155.749684][ T5227] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 155.755382][ T9] nintendo 0003:057E:200E.0007: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 155.776939][ T5227] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 155.796775][ T5227] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 155.824004][ T5227] usb 2-1: USB disconnect, device number 27 [ 155.845510][ T9] nintendo 0003:057E:200E.0007: Failed charging grip handshake [ 155.855220][ T5227] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 155.869738][ T5227] ftdi_sio 2-1:0.0: device disconnected [ 155.873066][ T9] nintendo 0003:057E:200E.0007: Failed to initialize controller; ret=-110 [ 155.929254][ T5277] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 155.941568][ T6974] netlink: 'syz.1.364': attribute type 2 has an invalid length. [ 155.950924][ T9] nintendo 0003:057E:200E.0007: probe - fail = -110 [ 155.965197][ T9] nintendo 0003:057E:200E.0007: probe with driver nintendo failed with error -110 [ 156.002401][ T9] usb 3-1: USB disconnect, device number 26 [ 156.103351][ T5311] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 156.137845][ T5311] usb 5-1: device descriptor read/8, error -71 [ 156.348023][ T5227] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 156.413418][ T5311] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 156.448424][ T5311] usb 5-1: device descriptor read/8, error -71 [ 156.533536][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 156.538670][ T5227] usb 2-1: config 0 has no interfaces? [ 156.546158][ T6963] process 'syz.0.360' launched './file2' with NULL argv: empty string added [ 156.559921][ T5227] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 156.580207][ T5311] usb usb5-port1: unable to enumerate USB device [ 156.593488][ T5227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.616393][ T5227] usb 2-1: config 0 descriptor?? [ 156.705583][ T6977] kvm: kvm [6976]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x5ce00000000 [ 156.894489][ T5311] usb 2-1: USB disconnect, device number 28 [ 156.901212][ T5277] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 156.999279][ T5277] usb 1-1: USB disconnect, device number 17 [ 157.023360][ T5227] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 157.047613][ T5441] udevd[5441]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.243518][ T5227] usb 4-1: Using ep0 maxpacket: 8 [ 157.250554][ T5227] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 157.259646][ T5227] usb 4-1: config 0 has no interface number 0 [ 157.267892][ T5227] usb 4-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 157.297359][ T5227] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 157.306568][ T5227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.321240][ T5227] usb 4-1: Product: syz [ 157.328485][ T5227] usb 4-1: Manufacturer: syz [ 157.341159][ T5227] usb 4-1: SerialNumber: syz [ 157.355259][ T5227] usb 4-1: config 0 descriptor?? [ 157.370588][ T5227] em28xx 4-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191) [ 157.394271][ T5227] em28xx 4-1:0.191: Video interface 191 found: [ 157.645156][ T6958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.851249][ T5227] em28xx 4-1:0.191: unknown em28xx chip ID (0) [ 157.899508][ T6994] kvm: kvm [6993]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6d00000800 [ 157.990582][ T5227] em28xx 4-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5) [ 158.022815][ T5227] em28xx 4-1:0.191: board has no eeprom [ 158.134179][ T5227] em28xx 4-1:0.191: Identified as Leadtek Winfast USB II (card=7) [ 158.154415][ T5227] em28xx 4-1:0.191: analog set to bulk mode. [ 158.187903][ T5311] em28xx 4-1:0.191: Registering V4L2 extension [ 158.211578][ T5227] usb 4-1: USB disconnect, device number 45 [ 158.224768][ T5227] em28xx 4-1:0.191: Disconnecting em28xx [ 158.372030][ T5311] em28xx 4-1:0.191: Config register raw data: 0xffffffed [ 158.408168][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 158.408180][ T29] audit: type=1326 audit(1724412073.554:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 158.442581][ T5311] em28xx 4-1:0.191: AC97 chip type couldn't be determined [ 158.513820][ T29] audit: type=1326 audit(1724412073.584:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 158.536663][ T5311] em28xx 4-1:0.191: No AC97 audio processor [ 158.572632][ T29] audit: type=1326 audit(1724412073.584:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 158.603459][ T5311] usb 4-1: Decoder not found [ 158.623334][ T5311] em28xx 4-1:0.191: failed to create media graph [ 158.630797][ T5311] em28xx 4-1:0.191: V4L2 device video71 deregistered [ 158.635438][ T29] audit: type=1326 audit(1724412073.584:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 158.707057][ T5311] em28xx 4-1:0.191: Remote control support is not available for this card. [ 158.727653][ T29] audit: type=1326 audit(1724412073.584:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 158.735456][ T5227] em28xx 4-1:0.191: Closing input extension [ 158.759104][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 158.878157][ T5227] em28xx 4-1:0.191: Freeing device [ 158.926504][ T29] audit: type=1326 audit(1724412073.584:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ce2378810 code=0x7ffc0000 [ 158.981357][ T29] audit: type=1326 audit(1724412073.584:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ce2379a7b code=0x7ffc0000 [ 159.018150][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 159.040261][ T29] audit: type=1326 audit(1724412073.584:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ce2379a7b code=0x7ffc0000 [ 159.053248][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.105768][ T29] audit: type=1326 audit(1724412073.584:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ce2379a7b code=0x7ffc0000 [ 159.145961][ T29] audit: type=1326 audit(1724412073.584:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ce2379a7b code=0x7ffc0000 [ 159.192169][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.220211][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 159.254199][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 159.263681][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 159.278577][ T9] usb 2-1: Manufacturer: syz [ 159.290842][ T9] usb 2-1: config 0 descriptor?? [ 159.323790][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 159.543327][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 159.559048][ T25] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 159.567552][ T25] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 159.598195][ T25] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 159.632351][ T25] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 159.669327][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 159.691823][ T25] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 159.705771][ T25] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 159.717980][ T25] usb 1-1: Product: syz [ 159.726066][ T25] usb 1-1: Manufacturer: syz [ 159.730701][ T25] usb 1-1: SerialNumber: syz [ 159.766865][ T25] usb 1-1: config 0 descriptor?? [ 159.781777][ T25] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 159.791088][ T7030] kvm: kvm [7029]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6d00000800 [ 159.798365][ T7030] kvm: kvm [7029]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x14500000800 [ 159.830477][ T7030] kvm: kvm [7029]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x14600000000 [ 159.948905][ T25] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 160.061685][ T7017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.084595][ T7017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.155739][ T25] usb 1-1: USB disconnect, device number 18 [ 160.173675][ T25] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 160.223635][ T5227] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 160.345361][ T7038] kvm: kvm [7037]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x5ce00000000 [ 160.437075][ T5227] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 160.467742][ T5227] usb 5-1: can't read configurations, error -61 [ 160.656683][ T5227] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 160.761115][ T7045] netlink: 64 bytes leftover after parsing attributes in process `syz.3.382'. [ 160.898199][ T5227] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 160.929327][ T5227] usb 5-1: can't read configurations, error -61 [ 160.959172][ T5227] usb usb5-port1: attempt power cycle [ 161.073331][ T25] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 161.203970][ T5278] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 161.274065][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 161.311571][ T25] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 161.344970][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.392412][ T25] usb 4-1: config 0 descriptor?? [ 161.413487][ T5227] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 161.435806][ T5278] usb 1-1: config 0 has no interfaces? [ 161.441336][ T5278] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.466104][ T25] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 161.477830][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.501974][ T5278] usb 1-1: config 0 descriptor?? [ 161.511694][ T5227] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 161.519756][ T5227] usb 5-1: can't read configurations, error -61 [ 161.693610][ T5227] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 161.756487][ T7050] SET target dimension over the limit! [ 161.780746][ T5227] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 161.793101][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 161.819685][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 161.823585][ T5227] usb 5-1: can't read configurations, error -61 [ 161.841186][ T5312] usb 1-1: USB disconnect, device number 19 [ 161.882634][ T5227] usb usb5-port1: unable to enumerate USB device [ 161.905168][ T9] usb 2-1: USB disconnect, device number 29 [ 161.980806][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.988266][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.007220][ T25] gspca_sunplus: reg_w_riv err -110 [ 162.022831][ T25] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 162.773630][ T5312] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 162.965289][ T5312] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 162.992743][ T5312] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 163.006909][ T7074] kvm: kvm [7073]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xfe00000000 [ 163.011613][ T5312] usb 1-1: config 0 has no interface number 0 [ 163.035868][ T5312] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.059078][ T5312] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 163.105144][ T5312] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 163.141168][ T5312] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 163.160520][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.184766][ T5312] usb 1-1: config 0 descriptor?? [ 163.194384][ T7067] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.673460][ T25] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 163.709224][ T5227] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 163.736729][ T58] usb 4-1: USB disconnect, device number 46 [ 163.827754][ T5312] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input9 [ 163.872526][ T7082] kvm: kvm [7081]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 163.933348][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 163.938612][ T5227] usb 3-1: Using ep0 maxpacket: 8 [ 163.951996][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 163.970517][ T5227] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 163.979114][ T5227] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.998565][ T5227] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.010195][ T5227] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.020359][ T5227] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.033817][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=6f.4b [ 164.042882][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.059502][ T5227] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.063134][ T7067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.070812][ T25] usb 2-1: Product: syz [ 164.082335][ T5227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.090425][ T25] usb 2-1: Manufacturer: syz [ 164.101813][ T7067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.111628][ T25] usb 2-1: SerialNumber: syz [ 164.136180][ T25] usb 2-1: config 0 descriptor?? [ 164.155082][ T25] usb 2-1: Found UVC 0.00 device syz (046d:0821) [ 164.161713][ T25] usb 2-1: No valid video chain found. [ 164.187212][ T5312] usb 1-1: USB disconnect, device number 20 [ 164.193174][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 164.203465][ T58] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 164.293729][ T7088] loop0: detected capacity change from 0 to 7 [ 164.300574][ T7088] Dev loop0: unable to read RDB block 7 [ 164.306816][ T7088] loop0: unable to read partition table [ 164.312709][ T7088] loop0: partition table beyond EOD, truncated [ 164.321563][ T7088] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 164.321563][ T7088] ) failed (rc=-5) [ 164.403373][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 164.412074][ T5277] usb 2-1: USB disconnect, device number 30 [ 164.419335][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.443120][ T58] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 164.462611][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 164.480692][ T58] usb 4-1: SerialNumber: syz [ 164.504400][ T58] usb 4-1: config 0 descriptor?? [ 164.532368][ T58] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 164.540447][ T5312] usb 3-1: USB disconnect, device number 27 [ 164.546022][ T58] usb 4-1: No valid video chain found. [ 164.725992][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.736294][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.754498][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 164.770179][ T5277] usb 4-1: USB disconnect, device number 47 [ 164.813599][ T25] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 164.971066][ T7094] netlink: 'syz.0.399': attribute type 29 has an invalid length. [ 165.020734][ T25] usb 5-1: unable to get BOS descriptor set [ 165.027033][ T7099] fuse: Bad value for 'fd' [ 165.040078][ T7099] netlink: 'syz.1.400': attribute type 10 has an invalid length. [ 165.057816][ T7099] netlink: 'syz.1.400': attribute type 10 has an invalid length. [ 165.085231][ T7099] team0: Port device netdevsim0 removed [ 165.116616][ T5231] Bluetooth: Unexpected start frame (len 18) [ 165.263671][ T5277] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 165.433397][ T5277] usb 1-1: device descriptor read/64, error -71 [ 165.853437][ T5277] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 166.033315][ T5277] usb 1-1: device descriptor read/64, error -71 [ 166.192554][ T5277] usb usb1-port1: attempt power cycle [ 166.653328][ T5277] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 166.693889][ T5277] usb 1-1: device descriptor read/8, error -71 [ 166.881359][ T7124] loop0: detected capacity change from 0 to 7 [ 166.890495][ T7124] Dev loop0: unable to read RDB block 7 [ 166.900245][ T7124] loop0: unable to read partition table [ 166.910038][ T7124] loop0: partition table beyond EOD, truncated [ 166.921242][ T7124] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 166.921242][ T7124] ) failed (rc=-5) [ 166.973630][ T5277] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 167.010027][ T5277] usb 1-1: device descriptor read/8, error -71 [ 167.134948][ T5277] usb usb1-port1: unable to enumerate USB device [ 167.384364][ T5227] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 167.540026][ T25] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 167.561113][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.585825][ T25] usb 5-1: can't set config #244, error -71 [ 167.607297][ T5227] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.647301][ T25] usb 5-1: USB disconnect, device number 33 [ 167.662392][ T5227] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.686590][ T5227] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 167.699236][ T5227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.717888][ T5227] usb 3-1: config 0 descriptor?? [ 169.021753][ T7163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.418'. [ 169.180094][ T7169] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 169.383337][ T58] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 169.494984][ T5227] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 169.565187][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.589158][ T58] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 169.629610][ T58] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 169.639429][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.658779][ T58] usb 4-1: config 0 descriptor?? [ 169.695907][ T25] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 169.705913][ T5227] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 169.755913][ T5227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.772985][ T5227] usb 2-1: config 0 descriptor?? [ 169.958308][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 169.980554][ T25] usb 1-1: can't read configurations, error -61 [ 170.029079][ T7169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.040903][ T58] usb 3-1: USB disconnect, device number 28 [ 170.062511][ T7169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.162106][ T5227] usb 2-1: string descriptor 0 read error: -71 [ 170.183473][ T25] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 170.212145][ T5227] mxuport 2-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 170.238125][ T5227] mxuport 2-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 170.256732][ T5227] mxuport 2-1:0.0: probe with driver mxuport failed with error -71 [ 170.270141][ T5227] usb 2-1: USB disconnect, device number 31 [ 170.413634][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 170.431104][ T25] usb 1-1: can't read configurations, error -61 [ 170.438140][ T25] usb usb1-port1: attempt power cycle [ 170.597335][ T7188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.425'. [ 170.854263][ T25] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 170.896520][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 170.942106][ T25] usb 1-1: can't read configurations, error -61 [ 171.133764][ T25] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 171.177622][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 171.201886][ T25] usb 1-1: can't read configurations, error -61 [ 171.213291][ T5311] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 171.229655][ T25] usb usb1-port1: unable to enumerate USB device [ 171.393479][ T5311] usb 3-1: device descriptor read/64, error -71 [ 171.715627][ T5311] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 171.893488][ T5311] usb 3-1: device descriptor read/64, error -71 [ 171.946591][ T25] usb 4-1: USB disconnect, device number 48 [ 172.044418][ T5311] usb usb3-port1: attempt power cycle [ 172.473316][ T5311] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 172.544301][ T5311] usb 3-1: device descriptor read/8, error -71 [ 172.903530][ T5311] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 172.955896][ T5311] usb 3-1: device descriptor read/8, error -71 [ 173.111254][ T5311] usb usb3-port1: unable to enumerate USB device [ 173.714034][ T7226] "syz.0.435" (7226) uses obsolete ecb(arc4) skcipher [ 173.864025][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 173.991583][ T7226] fuse: Unknown parameter 'fd0x0000000000000005' [ 174.071154][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 174.101448][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 174.129250][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.164193][ T9] usb 3-1: Product: syz [ 174.188417][ T9] usb 3-1: Manufacturer: syz [ 174.209693][ T9] usb 3-1: SerialNumber: syz [ 174.233794][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 174.259266][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 174.474223][ T5312] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 174.696496][ T5312] usb 4-1: device descriptor read/64, error -71 [ 174.813987][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 174.823450][ T9] r8152-cfgselector 3-1: bad CDC descriptors [ 174.852650][ T9] r8152-cfgselector 3-1: USB disconnect, device number 33 [ 174.983708][ T5312] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 175.143363][ T5312] usb 4-1: device descriptor read/64, error -71 [ 175.273746][ T5312] usb usb4-port1: attempt power cycle [ 175.377955][ T7270] netlink: 'syz.0.445': attribute type 11 has an invalid length. [ 175.723434][ T5312] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 175.756819][ T5277] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 175.794208][ T5312] usb 4-1: device descriptor read/8, error -71 [ 175.850977][ T7280] netlink: 'syz.1.450': attribute type 2 has an invalid length. [ 175.954030][ T5277] usb 3-1: Using ep0 maxpacket: 16 [ 175.965288][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.985144][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.000897][ T5277] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 176.012102][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.023394][ T5277] usb 3-1: config 0 descriptor?? [ 176.073314][ T5312] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 176.107539][ T5312] usb 4-1: device descriptor read/8, error -71 [ 176.133624][ T941] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 176.238196][ T5312] usb usb4-port1: unable to enumerate USB device [ 176.335650][ T941] usb 2-1: config 0 has no interfaces? [ 176.342756][ T941] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.371375][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.396799][ T941] usb 2-1: config 0 descriptor?? [ 176.461635][ T5277] corsair 0003:1B1C:1B02.0008: unknown main item tag 0x0 [ 176.501654][ T5277] corsair 0003:1B1C:1B02.0008: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 176.631668][ T5311] usb 2-1: USB disconnect, device number 32 [ 176.661915][ T5277] corsair 0003:1B1C:1B02.0008: Read invalid backlight brightness: db. [ 176.853652][ T941] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 177.055471][ T941] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 177.082027][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.106292][ T941] usb 1-1: config 0 descriptor?? [ 177.116776][ T941] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 177.752135][ T7294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.763403][ T5311] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 177.782463][ T7294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.944969][ T7310] netlink: 116 bytes leftover after parsing attributes in process `syz.3.460'. [ 177.954872][ T7310] bridge_slave_1: left allmulticast mode [ 177.960585][ T7310] bridge_slave_1: left promiscuous mode [ 177.966627][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.979727][ T7310] bridge_slave_0: left allmulticast mode [ 177.985087][ T5311] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 177.988923][ T7310] bridge_slave_0: left promiscuous mode [ 178.000111][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.007697][ T5311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.036867][ T5311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.056307][ T5311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.084848][ T5311] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.103211][ T5311] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.111275][ T5311] usb 2-1: Product: syz [ 178.115539][ T5311] usb 2-1: Manufacturer: syz [ 178.137065][ T5311] cdc_wdm 2-1:1.0: skipping garbage [ 178.142297][ T5311] cdc_wdm 2-1:1.0: skipping garbage [ 178.155814][ T5311] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 178.224183][ T941] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 178.343534][ T5311] usb 2-1: USB disconnect, device number 33 [ 178.458780][ T7314] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.468404][ T7314] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.477232][ T7314] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.486083][ T7314] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.513647][ T25] usb 3-1: USB disconnect, device number 34 [ 178.586255][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 178.799289][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.816184][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.848638][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.879868][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.893652][ T7322] veth0_vlan: left promiscuous mode [ 178.902814][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.930011][ T7322] veth0_vlan: entered promiscuous mode [ 178.936561][ T941] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 178.963364][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.991881][ T941] usb 1-1: USB disconnect, device number 29 [ 179.003949][ T9] usb 4-1: Product: syz [ 179.008157][ T9] usb 4-1: Manufacturer: syz [ 179.052851][ T9] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 179.063749][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 179.260488][ T25] usb 4-1: USB disconnect, device number 53 [ 179.614414][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 179.935505][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 179.935522][ T29] audit: type=1326 audit(1724412095.084:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 180.050896][ T29] audit: type=1326 audit(1724412095.114:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 180.154518][ T29] audit: type=1326 audit(1724412095.114:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 180.198996][ T29] audit: type=1326 audit(1724412095.114:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 180.261552][ T29] audit: type=1326 audit(1724412095.114:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 180.345300][ T29] audit: type=1326 audit(1724412095.144:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 180.434698][ T29] audit: type=1326 audit(1724412095.144:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 180.497944][ T29] audit: type=1326 audit(1724412095.144:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 180.583488][ T29] audit: type=1326 audit(1724412095.144:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 180.666960][ T29] audit: type=1326 audit(1724412095.154:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f1ce2379e79 code=0x7ffc0000 [ 181.016116][ T7367] bond0: entered promiscuous mode [ 181.031957][ T7367] bond_slave_0: entered promiscuous mode [ 181.044209][ T7367] bond_slave_1: entered promiscuous mode [ 181.211180][ T5231] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 181.218816][ T5231] Bluetooth: Wrong link type (-22) [ 181.226597][ T5231] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 181.233264][ T5231] Bluetooth: Wrong link type (-22) [ 181.238464][ T5231] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 181.246829][ T5231] Bluetooth: Wrong link type (-22) [ 181.252001][ T5231] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 181.259404][ T5231] Bluetooth: Wrong link type (-22) [ 181.264892][ T5231] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 181.271543][ T5231] Bluetooth: Wrong link type (-22) [ 181.277019][ T5231] ================================================================== [ 181.285090][ T5231] BUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x67b/0x8d0 [ 181.292733][ T5231] Read of size 4 at addr ffff888024bf3810 by task kworker/u9:3/5231 [ 181.300704][ T5231] [ 181.303019][ T5231] CPU: 1 UID: 0 PID: 5231 Comm: kworker/u9:3 Not tainted 6.11.0-rc4-syzkaller-00135-gaa0743a22936 #0 [ 181.313853][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 181.323902][ T5231] Workqueue: hci2 hci_rx_work [ 181.328577][ T5231] Call Trace: [ 181.331842][ T5231] [ 181.334766][ T5231] dump_stack_lvl+0x241/0x360 [ 181.339435][ T5231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.344625][ T5231] ? __pfx__printk+0x10/0x10 [ 181.349210][ T5231] ? _printk+0xd5/0x120 [ 181.353358][ T5231] ? __virt_addr_valid+0x183/0x530 [ 181.358460][ T5231] ? __virt_addr_valid+0x183/0x530 [ 181.363566][ T5231] print_report+0x169/0x550 [ 181.368069][ T5231] ? __virt_addr_valid+0x183/0x530 [ 181.373168][ T5231] ? __virt_addr_valid+0x183/0x530 [ 181.378275][ T5231] ? __virt_addr_valid+0x45f/0x530 [ 181.383378][ T5231] ? __phys_addr+0xba/0x170 [ 181.387868][ T5231] ? l2cap_send_cmd+0x67b/0x8d0 [ 181.392706][ T5231] kasan_report+0x143/0x180 [ 181.397206][ T5231] ? l2cap_send_cmd+0x67b/0x8d0 [ 181.402049][ T5231] l2cap_send_cmd+0x67b/0x8d0 [ 181.406718][ T5231] ? skb_pull+0xc1/0x1e0 [ 181.410957][ T5231] l2cap_recv_frame+0x22f1/0x10850 [ 181.416064][ T5231] ? validate_chain+0x11e/0x5900 [ 181.421004][ T5231] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 181.426367][ T5231] ? validate_chain+0x11e/0x5900 [ 181.431295][ T5231] ? __pfx_validate_chain+0x10/0x10 [ 181.436478][ T5231] ? __pfx_validate_chain+0x10/0x10 [ 181.441663][ T5231] ? __pfx_validate_chain+0x10/0x10 [ 181.446848][ T5231] ? __pfx_validate_chain+0x10/0x10 [ 181.452049][ T5231] ? mark_lock+0x9a/0x350 [ 181.456386][ T5231] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 181.462718][ T5231] ? __lock_acquire+0x137a/0x2040 [ 181.467767][ T5231] ? mark_lock+0x9a/0x350 [ 181.472185][ T5231] ? hci_rx_work+0x4e7/0xca0 [ 181.476769][ T5231] ? __pfx_lock_release+0x10/0x10 [ 181.481793][ T5231] ? __mutex_unlock_slowpath+0x21d/0x750 [ 181.487422][ T5231] ? __pfx_lock_release+0x10/0x10 [ 181.492437][ T5231] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 181.498412][ T5231] ? hci_conn_enter_active_mode+0x260/0x370 [ 181.504303][ T5231] ? l2cap_recv_acldata+0x490/0x1560 [ 181.509585][ T5231] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 181.515473][ T5231] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 181.521444][ T5231] hci_rx_work+0x50f/0xca0 [ 181.525857][ T5231] ? process_scheduled_works+0x945/0x1830 [ 181.531567][ T5231] process_scheduled_works+0xa2c/0x1830 [ 181.537119][ T5231] ? __pfx_process_scheduled_works+0x10/0x10 [ 181.543442][ T5231] ? assign_work+0x364/0x3d0 [ 181.548023][ T5231] worker_thread+0x86d/0xd40 [ 181.552608][ T5231] ? __kthread_parkme+0x169/0x1d0 [ 181.557627][ T5231] ? __pfx_worker_thread+0x10/0x10 [ 181.562736][ T5231] kthread+0x2f0/0x390 [ 181.566812][ T5231] ? __pfx_worker_thread+0x10/0x10 [ 181.571917][ T5231] ? __pfx_kthread+0x10/0x10 [ 181.576500][ T5231] ret_from_fork+0x4b/0x80 [ 181.580909][ T5231] ? __pfx_kthread+0x10/0x10 [ 181.585495][ T5231] ret_from_fork_asm+0x1a/0x30 [ 181.590255][ T5231] [ 181.593259][ T5231] [ 181.595564][ T5231] Allocated by task 5241: [ 181.599874][ T5231] kasan_save_track+0x3f/0x80 [ 181.604542][ T5231] __kasan_kmalloc+0x98/0xb0 [ 181.609122][ T5231] __kmalloc_cache_noprof+0x19c/0x2c0 [ 181.614478][ T5231] l2cap_conn_add+0xa9/0x8e0 [ 181.619054][ T5231] l2cap_connect_cfm+0x136/0x1220 [ 181.624066][ T5231] hci_remote_features_evt+0x536/0xaf0 [ 181.629514][ T5231] hci_event_packet+0xac2/0x1540 [ 181.634438][ T5231] hci_rx_work+0x3e8/0xca0 [ 181.638842][ T5231] process_scheduled_works+0xa2c/0x1830 [ 181.644374][ T5231] worker_thread+0x86d/0xd40 [ 181.648953][ T5231] kthread+0x2f0/0x390 [ 181.653011][ T5231] ret_from_fork+0x4b/0x80 [ 181.657416][ T5231] ret_from_fork_asm+0x1a/0x30 [ 181.662169][ T5231] [ 181.664478][ T5231] Freed by task 5238: [ 181.668455][ T5231] kasan_save_track+0x3f/0x80 [ 181.673131][ T5231] kasan_save_free_info+0x40/0x50 [ 181.678147][ T5231] poison_slab_object+0xe0/0x150 [ 181.683081][ T5231] __kasan_slab_free+0x37/0x60 [ 181.687844][ T5231] kfree+0x149/0x360 [ 181.691724][ T5231] l2cap_connect_cfm+0x11f/0x1220 [ 181.696744][ T5231] hci_conn_failed+0x1f6/0x340 [ 181.701501][ T5231] hci_abort_conn_sync+0x583/0xde0 [ 181.706602][ T5231] hci_cmd_sync_work+0x22b/0x400 [ 181.711531][ T5231] process_scheduled_works+0xa2c/0x1830 [ 181.717064][ T5231] worker_thread+0x86d/0xd40 [ 181.721645][ T5231] kthread+0x2f0/0x390 [ 181.725703][ T5231] ret_from_fork+0x4b/0x80 [ 181.730109][ T5231] ret_from_fork_asm+0x1a/0x30 [ 181.734865][ T5231] [ 181.737174][ T5231] Last potentially related work creation: [ 181.742868][ T5231] kasan_save_stack+0x3f/0x60 [ 181.747536][ T5231] __kasan_record_aux_stack+0xac/0xc0 [ 181.752896][ T5231] insert_work+0x3e/0x330 [ 181.757216][ T5231] __queue_work+0xc8b/0xf50 [ 181.761710][ T5231] call_timer_fn+0x18e/0x650 [ 181.766297][ T5231] __run_timer_base+0x695/0x8e0 [ 181.771147][ T5231] run_timer_softirq+0xb7/0x170 [ 181.775989][ T5231] handle_softirqs+0x2c4/0x970 [ 181.780742][ T5231] do_softirq+0x11b/0x1e0 [ 181.785060][ T5231] __local_bh_enable_ip+0x1bb/0x200 [ 181.790244][ T5231] br_device_event+0x5f0/0x970 [ 181.794997][ T5231] notifier_call_chain+0x19f/0x3e0 [ 181.800097][ T5231] netdev_state_change+0x11f/0x1a0 [ 181.805197][ T5231] linkwatch_do_dev+0x112/0x170 [ 181.810033][ T5231] __linkwatch_run_queue+0x44f/0x6c0 [ 181.815305][ T5231] linkwatch_event+0x4c/0x60 [ 181.819881][ T5231] process_scheduled_works+0xa2c/0x1830 [ 181.825414][ T5231] worker_thread+0x86d/0xd40 [ 181.829992][ T5231] kthread+0x2f0/0x390 [ 181.834050][ T5231] ret_from_fork+0x4b/0x80 [ 181.838455][ T5231] ret_from_fork_asm+0x1a/0x30 [ 181.843208][ T5231] [ 181.845515][ T5231] Second to last potentially related work creation: [ 181.852076][ T5231] kasan_save_stack+0x3f/0x60 [ 181.856740][ T5231] __kasan_record_aux_stack+0xac/0xc0 [ 181.862099][ T5231] insert_work+0x3e/0x330 [ 181.866416][ T5231] __queue_work+0xb66/0xf50 [ 181.870910][ T5231] queue_work_on+0x1c2/0x380 [ 181.875491][ T5231] l2cap_connect_cfm+0xec2/0x1220 [ 181.880509][ T5231] hci_remote_features_evt+0x536/0xaf0 [ 181.885957][ T5231] hci_event_packet+0xac2/0x1540 [ 181.890880][ T5231] hci_rx_work+0x3e8/0xca0 [ 181.895281][ T5231] process_scheduled_works+0xa2c/0x1830 [ 181.900818][ T5231] worker_thread+0x86d/0xd40 [ 181.905396][ T5231] kthread+0x2f0/0x390 [ 181.909454][ T5231] ret_from_fork+0x4b/0x80 [ 181.913861][ T5231] ret_from_fork_asm+0x1a/0x30 [ 181.918612][ T5231] [ 181.920917][ T5231] The buggy address belongs to the object at ffff888024bf3800 [ 181.920917][ T5231] which belongs to the cache kmalloc-1k of size 1024 [ 181.934957][ T5231] The buggy address is located 16 bytes inside of [ 181.934957][ T5231] freed 1024-byte region [ffff888024bf3800, ffff888024bf3c00) [ 181.948735][ T5231] [ 181.951043][ T5231] The buggy address belongs to the physical page: [ 181.957446][ T5231] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24bf0 [ 181.966193][ T5231] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 181.974678][ T5231] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 181.982213][ T5231] page_type: 0xfdffffff(slab) [ 181.986880][ T5231] raw: 00fff00000000040 ffff888015841dc0 ffffea000049bc00 dead000000000002 [ 181.995450][ T5231] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 182.004017][ T5231] head: 00fff00000000040 ffff888015841dc0 ffffea000049bc00 dead000000000002 [ 182.012671][ T5231] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 182.021325][ T5231] head: 00fff00000000003 ffffea000092fc01 ffffffffffffffff 0000000000000000 [ 182.029982][ T5231] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 182.038629][ T5231] page dumped because: kasan: bad access detected [ 182.045031][ T5231] page_owner tracks the page as allocated [ 182.050727][ T5231] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4893, tgid 4893 (start-stop-daem), ts 30705711011, free_ts 30691706093 [ 182.071555][ T5231] post_alloc_hook+0x1f3/0x230 [ 182.076326][ T5231] get_page_from_freelist+0x2e4c/0x2f10 [ 182.081864][ T5231] __alloc_pages_noprof+0x256/0x6c0 [ 182.087052][ T5231] alloc_slab_page+0x5f/0x120 [ 182.091716][ T5231] allocate_slab+0x5a/0x2f0 [ 182.096206][ T5231] ___slab_alloc+0xcd1/0x14b0 [ 182.100869][ T5231] __slab_alloc+0x58/0xa0 [ 182.105184][ T5231] __kmalloc_noprof+0x25a/0x400 [ 182.110022][ T5231] tomoyo_init_log+0x1b3e/0x2050 [ 182.114947][ T5231] tomoyo_supervisor+0x38a/0x11f0 [ 182.119958][ T5231] tomoyo_env_perm+0x178/0x210 [ 182.124706][ T5231] tomoyo_find_next_domain+0x1384/0x1cf0 [ 182.130326][ T5231] tomoyo_bprm_check_security+0x115/0x180 [ 182.136034][ T5231] security_bprm_check+0x65/0x90 [ 182.140970][ T5231] bprm_execve+0xa56/0x1770 [ 182.145463][ T5231] do_execveat_common+0x55f/0x6f0 [ 182.150476][ T5231] page last free pid 4893 tgid 4893 stack trace: [ 182.156786][ T5231] free_unref_page+0xd22/0xea0 [ 182.161540][ T5231] __put_partials+0xeb/0x130 [ 182.166118][ T5231] put_cpu_partial+0x17c/0x250 [ 182.170869][ T5231] __slab_free+0x2ea/0x3d0 [ 182.175270][ T5231] qlist_free_all+0x9e/0x140 [ 182.179850][ T5231] kasan_quarantine_reduce+0x14f/0x170 [ 182.185299][ T5231] __kasan_slab_alloc+0x23/0x80 [ 182.190139][ T5231] __kmalloc_noprof+0x1a6/0x400 [ 182.194973][ T5231] tomoyo_supervisor+0xe0d/0x11f0 [ 182.199987][ T5231] tomoyo_path_permission+0x243/0x360 [ 182.205343][ T5231] tomoyo_path_perm+0x480/0x740 [ 182.210176][ T5231] security_inode_getattr+0xd8/0x130 [ 182.215448][ T5231] vfs_getattr+0x45/0x430 [ 182.219763][ T5231] vfs_fstatat+0xe4/0x190 [ 182.224167][ T5231] __x64_sys_newfstatat+0x11d/0x1a0 [ 182.229351][ T5231] do_syscall_64+0xf3/0x230 [ 182.233838][ T5231] [ 182.236154][ T5231] Memory state around the buggy address: [ 182.241775][ T5231] ffff888024bf3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 182.249821][ T5231] ffff888024bf3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 182.257864][ T5231] >ffff888024bf3800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 182.265905][ T5231] ^ [ 182.270475][ T5231] ffff888024bf3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 182.278525][ T5231] ffff888024bf3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 182.286594][ T5231] ================================================================== [ 182.301887][ T5231] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 182.309108][ T5231] CPU: 1 UID: 0 PID: 5231 Comm: kworker/u9:3 Not tainted 6.11.0-rc4-syzkaller-00135-gaa0743a22936 #0 [ 182.319962][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 182.330033][ T5231] Workqueue: hci2 hci_rx_work [ 182.334750][ T5231] Call Trace: [ 182.338038][ T5231] [ 182.340992][ T5231] dump_stack_lvl+0x241/0x360 [ 182.345699][ T5231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.350921][ T5231] ? __pfx__printk+0x10/0x10 [ 182.355530][ T5231] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 182.361531][ T5231] ? vscnprintf+0x5d/0x90 [ 182.365881][ T5231] panic+0x349/0x860 [ 182.369823][ T5231] ? check_panic_on_warn+0x21/0xb0 [ 182.374956][ T5231] ? __pfx_panic+0x10/0x10 [ 182.379398][ T5231] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 182.385401][ T5231] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 182.391757][ T5231] check_panic_on_warn+0x86/0xb0 [ 182.396713][ T5231] ? l2cap_send_cmd+0x67b/0x8d0 [ 182.401580][ T5231] end_report+0x77/0x160 [ 182.405839][ T5231] kasan_report+0x154/0x180 [ 182.410356][ T5231] ? l2cap_send_cmd+0x67b/0x8d0 [ 182.415222][ T5231] l2cap_send_cmd+0x67b/0x8d0 [ 182.419914][ T5231] ? skb_pull+0xc1/0x1e0 [ 182.424175][ T5231] l2cap_recv_frame+0x22f1/0x10850 [ 182.429304][ T5231] ? validate_chain+0x11e/0x5900 [ 182.434274][ T5231] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 182.439671][ T5231] ? validate_chain+0x11e/0x5900 [ 182.444620][ T5231] ? __pfx_validate_chain+0x10/0x10 [ 182.449828][ T5231] ? __pfx_validate_chain+0x10/0x10 [ 182.455042][ T5231] ? __pfx_validate_chain+0x10/0x10 [ 182.460249][ T5231] ? __pfx_validate_chain+0x10/0x10 [ 182.465462][ T5231] ? mark_lock+0x9a/0x350 [ 182.469818][ T5231] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 182.476177][ T5231] ? __lock_acquire+0x137a/0x2040 [ 182.481229][ T5231] ? mark_lock+0x9a/0x350 [ 182.485586][ T5231] ? hci_rx_work+0x4e7/0xca0 [ 182.490194][ T5231] ? __pfx_lock_release+0x10/0x10 [ 182.495246][ T5231] ? __mutex_unlock_slowpath+0x21d/0x750 [ 182.500888][ T5231] ? __pfx_lock_release+0x10/0x10 [ 182.505933][ T5231] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.511929][ T5231] ? hci_conn_enter_active_mode+0x260/0x370 [ 182.517841][ T5231] ? l2cap_recv_acldata+0x490/0x1560 [ 182.523139][ T5231] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 182.529043][ T5231] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 182.535045][ T5231] hci_rx_work+0x50f/0xca0 [ 182.539479][ T5231] ? process_scheduled_works+0x945/0x1830 [ 182.545215][ T5231] process_scheduled_works+0xa2c/0x1830 [ 182.550785][ T5231] ? __pfx_process_scheduled_works+0x10/0x10 [ 182.556779][ T5231] ? assign_work+0x364/0x3d0 [ 182.561392][ T5231] worker_thread+0x86d/0xd40 [ 182.566011][ T5231] ? __kthread_parkme+0x169/0x1d0 [ 182.571064][ T5231] ? __pfx_worker_thread+0x10/0x10 [ 182.576194][ T5231] kthread+0x2f0/0x390 [ 182.580282][ T5231] ? __pfx_worker_thread+0x10/0x10 [ 182.585404][ T5231] ? __pfx_kthread+0x10/0x10 [ 182.590012][ T5231] ret_from_fork+0x4b/0x80 [ 182.594445][ T5231] ? __pfx_kthread+0x10/0x10 [ 182.599066][ T5231] ret_from_fork_asm+0x1a/0x30 [ 182.603984][ T5231] [ 182.607243][ T5231] Kernel Offset: disabled [ 182.611559][ T5231] Rebooting in 86400 seconds..