last executing test programs: 7.958995813s ago: executing program 2 (id=212): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x1}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0xffffffffffff0001, r0, 'id1\x00'}) (rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10200100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffbff, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x400c0}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000280)={0x1ff, 0x2, 0x10, 0x9ae7}, 0x10) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000002c0)={'security\x00', 0xf, "e3d5aefe6f12472e0e7f7426964e2f"}, &(0x7f0000000300)=0x33) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r2, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5e}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x37}, @NL80211_ATTR_PMK={0x14, 0xfe, "e180ed3ecf375e177cdb6acac142f831"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="10cc18e6463f"}, @NL80211_ATTR_PMK_LIFETIME={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x810) (async, rerun: 32) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000480)=@gcm_256={{0x303}, "13896448cfa271b0", "ae49b6f05767811cc8e40e53d000e0dc0663a9fcec66e10c65b782073da3c467", "c2a701a3", "de357c6a63ac15e3"}, 0x38) (async, rerun: 32) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, 0xee01, &(0x7f00000004c0)={0x0, 0x3, 0x0, 0x5}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'bridge0\x00', 0x0}) (async, rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4b}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7f}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="2b52da29bf57"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8c}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008040}, 0x240408d0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r6, 0x8, 0x70bd2c, 0x25dfdbfe}, 0x1c}}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000007c0)={0x73622a85, 0x1000, 0x2}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r6, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x11, 0xfffffff8, @udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20040004}, 0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000940)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000900)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) (async) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000009c0), r1) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_FAMILY={0x5, 0xd, 0x11}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x8004042) (async) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b00), r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r8, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000000) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000c80)={0x1, &(0x7f0000000c40)=[{0x9, 0x37, &(0x7f0000000c00)="d4ebcc80dc742ceca65c8b3d2e09de9dd39baaf70e3556f64c9bf481d3492691610ee57b41118fde71405bbb70e2eab59e0563cf4279ae"}]}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000cc0)="af5fbbd5baa092ee879e4f4c22c31e8770e50321ce6df082b002b9e95095e3f14b22a57251f33967885f59fc38fc6be6dc127d6d94cab6328da8c884330ad3ece4cbac911b1c69c135d8fb060620a322be06b7e8cbb59d40941117f8db3286cf674d33c7dfb7bcab24a68192d860e065133c63e0ca9f12", 0x77) (async) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000d80)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x92, 0x6, 0x2, 0xffffaf5a, 0x1, 0xffffffc9, "95c3225a295adc1a26671a386d738e44a3fdec3d02095153ececbfeb57fec3fd91cc9b6bc93c259d44efad2505a73cd2044394e8b7c31f7984fe0cb32cd41dc7b519245fdc0bcc3f4c0adea82b848db061476f1ea89f450369a5276134d820dda6f38515132b89815d8116064197b33911a66d7742075bbe0e3d9e3da56af90b08c5b80bc8cfdf55ef23a561ae7ebea8f2bb"}}, 0x1aa) (async, rerun: 32) syz_open_dev$vbi(&(0x7f0000000f40), 0x3, 0x2) (rerun: 32) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000f80)={@multicast1, @multicast1, 0x0, "f49eed0b0fb0d7fc4c700320dc74549780f66d7e6e0b4904de22da8e9bde935c", 0x4, 0xb, 0x80000001, 0x6}, 0x3c) 7.882731162s ago: executing program 2 (id=213): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102983757030109021b00010410200809620a07010300000409050a0300020d0605"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 5.148663617s ago: executing program 4 (id=225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x72, 0x0, 0x1, [@typed={0x8, 0xf9, 0x0, 0x0, @fd=r0}]}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 4.954835832s ago: executing program 4 (id=227): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) 4.946860837s ago: executing program 4 (id=229): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) io_setup(0x8, &(0x7f0000002740)) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r4 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x110}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x80086601, 0x0) (async, rerun: 32) fsopen(&(0x7f0000000000)='udf\x00', 0x0) (async, rerun: 32) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_pressure(r8, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000040)={'full', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) 4.868627468s ago: executing program 2 (id=230): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x101}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r2, 0x3, 0x0, 0x35, 0x4}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x85, &(0x7f0000000380)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000440)=@ethtool_rx_ntuple={0x35, {0xe, @hdata="e5cfd84869f755574b66d2ee69176bce3b217bdd40f9b5e94152925c041c37346304f105978203480c9f76fe82cb35379e055e666e43e06a12b483ea9f464e99d411053c78737dc1", @ah_ip4_spec={@multicast2, @local, 0x4, 0x10}, 0x401, 0x361e, 0x7fff, 0x7f, 0xfffffffffffffffe}}}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/34, 0x22}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f0000000700)=""/212, 0xd4}], 0x4, &(0x7f0000000340)=""/11, 0xb}, 0x10001}, {{&(0x7f0000000800)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000880)=""/252, 0xfc}, {&(0x7f0000000980)=""/209, 0xd1}, {&(0x7f0000000a80)=""/178, 0xb2}, {&(0x7f0000000b40)=""/89, 0x59}, {&(0x7f0000000bc0)=""/133, 0x85}, {&(0x7f0000000c80)=""/182, 0xb6}, {&(0x7f0000000d40)=""/188, 0xbc}, {&(0x7f0000000e00)=""/29, 0x1d}, {&(0x7f0000002cc0)=""/221, 0xdd}], 0x9, &(0x7f0000001000)=""/128, 0x80}, 0x6}, {{&(0x7f0000001080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001100)=""/122, 0x7a}, {&(0x7f0000001180)=""/2, 0x2}, {&(0x7f00000011c0)=""/94, 0x5e}], 0x3, &(0x7f0000001280)=""/87, 0x57}, 0x7}, {{&(0x7f0000001300)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001380)=""/38, 0x26}], 0x1, &(0x7f0000001400)=""/206, 0xce}, 0x7ff}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001500)=""/204, 0xcc}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/88, 0x58}, {&(0x7f0000002680)}, {&(0x7f00000026c0)=""/88, 0x58}, {&(0x7f0000002740)=""/19, 0x13}, {&(0x7f0000002780)=""/90, 0x5a}], 0x7, &(0x7f0000002880)=""/53, 0x35}, 0x5}, {{&(0x7f00000028c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/16, 0x10}, {&(0x7f0000002980)=""/144, 0x90}], 0x2, &(0x7f0000002a80)=""/145, 0x91}, 0x1}], 0x6, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10, 0x0, 0x0, 0xb49, 0x800000000009, 0xd988, 0x0, 0x3}, 0x0) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000080)={0x5, 0x802}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f00000000c0)={0x2}) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="580000001400192340024b80040d8c560aff820fffff5bab003a0000002058000b4835ca945f010ebc000000000000008000f0fffeffe809005300fff5dd00000010400100030c100000000000224e0000d9af4c4ccf6c01", 0x58}], 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r8) 4.822688159s ago: executing program 0 (id=231): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}]}]}, 0x44}}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x20000000) 4.782614742s ago: executing program 0 (id=232): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x800, 0x0, 0x2, 0x0, 0x8, 0x8}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$media(&(0x7f0000000000), 0x2, 0x0) 4.614576377s ago: executing program 0 (id=233): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x0, 0x112}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f00000001c0), 0x0, 0x1e}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x20) 4.394637656s ago: executing program 4 (id=234): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d01000000000000000000060006241a0000000905810300020000000903e60000020d00000904010102020d000009058202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14}}) 3.880415065s ago: executing program 2 (id=236): bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x14d802, 0x0) r3 = dup(r2) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf25", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ftruncate(0xffffffffffffffff, 0x2007ffc) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000009) r6 = socket(0x10, 0x803, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x6}, 0x0, 0x0, 0x7, 0x80, 0x8, 0x5, 0x6, 0x9, 0x9, 0x1}) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x4, 0x0}, 0x8) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x3234564e, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x4}}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r7, 0x4) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 3.550334849s ago: executing program 0 (id=237): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904000a017e63abff09050a"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4140aecd, &(0x7f0000000140)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="000001000000000000000000000000000000000024194562739842bca8c39bce131e22c0729ff68099fba7de9401e095e8e8b7044d6a892b139e35287862cca606b665eb2d0b2f44ec042b2a79050d31efb4c703e812f43d8c4b58f03fa6441f5fb2ac4b232b22164ee0c8691a33c18c1d652fe766a8045ef35dae288a4d197ba726e1", @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) memfd_create(&(0x7f0000000000)='@,-&,$\x00', 0x20000007) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r4, 0x0, 0x0}, 0x20) 2.925801199s ago: executing program 3 (id=240): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 2.8546983s ago: executing program 3 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}]}]}, 0x44}}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x20000000) 2.754757293s ago: executing program 3 (id=243): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x2d9b, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c81, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) unshare(0x42000000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) dup(0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x8, 0x11, 0x0, @private1, @mcast2, {[], {0xfffc, 0xe22, 0x8}}}}}}, 0x0) 2.530724445s ago: executing program 2 (id=244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) 2.058065944s ago: executing program 2 (id=245): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xff4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20ef80"], 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2440, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x0, 0xf, 0x2c, {0x2c, 0x25, "6911a2e8f3500f4d8b372b3fc31b7a723b9aa3c75c6439ec9faf5bc0927d4904f766546c43b0bf933e3b"}}, &(0x7f0000000180)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "6a1e164b36321267563f9fc67ad1ff9a4e47b6d06b7ed00452"}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x4, 0x9, 0x6, "d12f11d0", "3b0471e2"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x0, 0x8, 0xa, 0x52, 0xb31}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="0007450000000f70f55c89f6eef61749975abfef7fd31d20e51f1da63fc275190329b6629f1c1fdaba988f990d34a04f7452b1998f5b925f6beeebbd38f42249e9b3965788000000000061"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000003c0)={0x20, 0x0, 0x4}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x8, 0x4, [0xf00]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "99b0"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0xa554}, &(0x7f0000000540)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "6b8f"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x46}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x56}}) (async, rerun: 32) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.953535001s ago: executing program 0 (id=246): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2c1a1000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x2a, [0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0xffff, 0x8000000, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7fe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0xffffffff, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x1e9, 0x0, 0x0, 0x0, 0x5, 0x54, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xba1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_clone(0x20100000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r4, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000000)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x38, 0x2, [@TCA_ROUTE4_ACT={0x34, 0x6, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000600)={0xd1, ""/209}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0xf8}, 0x1c) 1.862615118s ago: executing program 0 (id=247): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="380102030109021b00010000100009045902019b1e2a00090582020002000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)={0x40, 0x11, 0x4, "2378589f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) userfaultfd(0x801) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.609339217s ago: executing program 3 (id=249): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) prctl$PR_MCE_KILL_GET(0x22) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000fffeffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r6, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b0f, &(0x7f0000000140)={'wlan1\x00', @random="0300000000eb"}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 1.513846892s ago: executing program 4 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002300060000000000000008000500", @ANYRES32=r1, @ANYBLOB="2f449917d4b49cc9c174cddc1d0dbd745d0ff06617a56c903b67c55a0e554f705874d627c22017eb0f23fda5d12d8dd28f427a4a7486344863bfebe10acf74fc85fa3487316680ec8ddd9af6b496ef9889100b8473789e133621ae9b16264146913803605dedfd6119649a4395ffeb96ba11e6cd0f1b45c9316c634f3dac3981d3eedbd82ce6df4d73306943a4784292a651f96ed2ca36b4baab5fa7e890f4c9837bd4be01d55478d9f827e039471faf61677ffc4c98"], 0x48}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) sysfs$3(0x3) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x57, 0x0, 0x0, {0x1, 0x1}, {0x80, 0x2}}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) r4 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x68002) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r4, 0x4112, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000d00)="8b7f02b8279481a88200603543397c706d4169caa2a3c7184314af2a544d070aa0b90b970c55adfeae541af0362ae430d5bcb17539797c2157e36d86c5e71ecc67714dcd30f29298a6d5bc58db04d32ef25fd16daf1ae7acc564cf590795ba4f0817b4df272866c183f764bd025eee71e3ed83c61fea06", 0x77}, {&(0x7f0000000dc0)="2131937e152c013ab36439e6746a3a3c45a1df55e19b", 0x16}, {&(0x7f0000000f00)="69ae9a56876504c9b49c0f1f7e6c7e4f7651bb725b12331b850a0cdd50e9e648959319962504a0ccd3df", 0x2a}, {&(0x7f0000000fc0)}], 0x4, &(0x7f00000059c0)=ANY=[], 0xc8, 0x20040000}}, {{0x0, 0x0, &(0x7f0000006340)=[{&(0x7f0000006300)="efbd7fdc6b91", 0x6}], 0x1, &(0x7f0000006380)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x68, 0x40}}, {{0x0, 0x0, &(0x7f0000006500)=[{0x0}], 0x1, 0x0, 0x0, 0x4080}}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xbf25a33ee3dc305b, 0x5a) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, 0x0, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) socket$inet6(0xa, 0x800, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x8008700b, &(0x7f0000000080)={0x2e, 0x27, 0x1, 0x1d, 0x1, 0x4, 0x2, 0x16b, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 668.857288ms ago: executing program 3 (id=251): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000012c0)={0x101000280, 0x0, 0x0, 0x0, {0x33}, &(0x7f0000000480)=""/220, 0xdc, 0x0, 0x0}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000740)=""/73, 0x49}, {0x0}, {0x0}], 0x4}, 0x6}], 0x1, 0x2, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 622.561721ms ago: executing program 3 (id=252): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b036800e0ff640002", 0x9, 0x0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r3, 0x0, 0xfffffffffffffff7, 0x6}) (async) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) (async, rerun: 32) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) (async, rerun: 32) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) (async) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) (async) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r11, &(0x7f0000000000)=""/73, 0x49) (async) write$char_usb(r11, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 446.691331ms ago: executing program 1 (id=253): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}]}]}, 0x44}}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x20000000) 405.709169ms ago: executing program 1 (id=254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00000004000000040000000900004500000000", @ANYRES32=r4], 0x50) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r1, @ANYRES64=r2, @ANYRESHEX=r4, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRES64=r3], 0x2b) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x13, 0xf989, "d9013bf64f2d91c4dd6dd5e977d6ec"}]}}}}}}}, 0x0) sendfile(r3, r1, 0x0, 0x4000000053d2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000640ffffff000800034000000008340100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000008010380040100800800034000000002f80002801400028008000180fffffffd0800034000000000640002800900020073797a31000000eb070003"], 0x1c8}}, 0x4080) 357.24774ms ago: executing program 1 (id=255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000066000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) 284.246527ms ago: executing program 1 (id=256): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4048aec9, &(0x7f0000000080)={0x5, 0xffffffffffffffff, 0x3}) 173.696135ms ago: executing program 4 (id=257): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a042, 0x41c23}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) readv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000180)=""/68, 0x44}], 0x2) 172.261167ms ago: executing program 1 (id=258): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = io_uring_setup(0x3e60, &(0x7f0000000240)={0x0, 0x1ffd, 0x400, 0x0, 0x2b8}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000a40)={0x1, 0x0, 0x14, 0x1f, 0x183, 0x0}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000000c0)={0x8, 0xffffffffffffffff, 0x1b, {0xfca4, 0xc}, 0x5}, 0x1) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000114010027bd7000ffdbdf25080001000100000008000800"], 0x30}, 0x1, 0x0, 0x0, 0x4048051}, 0x8000) 0s ago: executing program 1 (id=259): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r3 = dup3(r1, r0, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r7, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, &(0x7f0000000140)) write$UHID_INPUT(r3, &(0x7f00000001c0)={0xa, {"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", 0xe00}}, 0xffffff5c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. [ 53.109690][ T5844] cgroup: Unknown subsys name 'net' [ 53.217326][ T5844] cgroup: Unknown subsys name 'cpuset' [ 53.224699][ T5844] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.331967][ T5844] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.615278][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.623310][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.630683][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.637876][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.646135][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.653514][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.661894][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.662958][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.669390][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.676550][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.690587][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.691038][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.705139][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.705814][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.719257][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.720375][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.733879][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.765157][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.772545][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.779850][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.788895][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.797236][ T5182] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.805885][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.813186][ T5182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.821106][ T5182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.074677][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 58.126314][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 58.232175][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.239612][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.247698][ T5868] bridge_slave_0: entered allmulticast mode [ 58.254295][ T5868] bridge_slave_0: entered promiscuous mode [ 58.264580][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.271730][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.279138][ T5868] bridge_slave_1: entered allmulticast mode [ 58.286120][ T5868] bridge_slave_1: entered promiscuous mode [ 58.309496][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 58.323856][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 58.352132][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.372493][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.430807][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.437993][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.445691][ T5872] bridge_slave_0: entered allmulticast mode [ 58.452347][ T5872] bridge_slave_0: entered promiscuous mode [ 58.462132][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.469408][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.477220][ T5872] bridge_slave_1: entered allmulticast mode [ 58.484065][ T5872] bridge_slave_1: entered promiscuous mode [ 58.494318][ T5868] team0: Port device team_slave_0 added [ 58.503219][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 58.520670][ T5868] team0: Port device team_slave_1 added [ 58.576254][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.591879][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.598933][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.624995][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.642055][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.649343][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.656811][ T5871] bridge_slave_0: entered allmulticast mode [ 58.663374][ T5871] bridge_slave_0: entered promiscuous mode [ 58.671582][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.688706][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.696054][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.703301][ T5869] bridge_slave_0: entered allmulticast mode [ 58.709998][ T5869] bridge_slave_0: entered promiscuous mode [ 58.717435][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.724712][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.750792][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.764303][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.771632][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.778847][ T5871] bridge_slave_1: entered allmulticast mode [ 58.785546][ T5871] bridge_slave_1: entered promiscuous mode [ 58.798681][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.805892][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.813086][ T5869] bridge_slave_1: entered allmulticast mode [ 58.819831][ T5869] bridge_slave_1: entered promiscuous mode [ 58.846105][ T5872] team0: Port device team_slave_0 added [ 58.867734][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.880730][ T5872] team0: Port device team_slave_1 added [ 58.889199][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.900620][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.911209][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.979324][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.987227][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.994591][ T5875] bridge_slave_0: entered allmulticast mode [ 59.001105][ T5875] bridge_slave_0: entered promiscuous mode [ 59.008834][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.015827][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.042435][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.056563][ T5868] hsr_slave_0: entered promiscuous mode [ 59.062589][ T5868] hsr_slave_1: entered promiscuous mode [ 59.072743][ T5869] team0: Port device team_slave_0 added [ 59.080216][ T5869] team0: Port device team_slave_1 added [ 59.087311][ T5871] team0: Port device team_slave_0 added [ 59.093285][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.100776][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.108101][ T5875] bridge_slave_1: entered allmulticast mode [ 59.115130][ T5875] bridge_slave_1: entered promiscuous mode [ 59.121885][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.128884][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.155011][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.177721][ T5871] team0: Port device team_slave_1 added [ 59.199189][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.224046][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.231106][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.257410][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.281011][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.293942][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.302725][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.328861][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.370793][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.377954][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.403922][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.418251][ T5872] hsr_slave_0: entered promiscuous mode [ 59.425636][ T5872] hsr_slave_1: entered promiscuous mode [ 59.431515][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 59.437681][ T5872] Cannot create hsr debugfs directory [ 59.469287][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.476317][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.503106][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.517045][ T5875] team0: Port device team_slave_0 added [ 59.542059][ T5869] hsr_slave_0: entered promiscuous mode [ 59.548184][ T5869] hsr_slave_1: entered promiscuous mode [ 59.554025][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 59.560089][ T5869] Cannot create hsr debugfs directory [ 59.570538][ T5875] team0: Port device team_slave_1 added [ 59.626610][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.633659][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.661132][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.688402][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.695624][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.721910][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.767964][ T5871] hsr_slave_0: entered promiscuous mode [ 59.774517][ T5859] Bluetooth: hci2: command tx timeout [ 59.780101][ T5871] hsr_slave_1: entered promiscuous mode [ 59.786432][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 59.792175][ T5871] Cannot create hsr debugfs directory [ 59.854711][ T5182] Bluetooth: hci0: command tx timeout [ 59.860141][ T5860] Bluetooth: hci4: command tx timeout [ 59.860149][ T5861] Bluetooth: hci1: command tx timeout [ 59.863831][ T5859] Bluetooth: hci3: command tx timeout [ 59.882181][ T5875] hsr_slave_0: entered promiscuous mode [ 59.888594][ T5875] hsr_slave_1: entered promiscuous mode [ 59.894489][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 59.900209][ T5875] Cannot create hsr debugfs directory [ 59.960781][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.987076][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.997000][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.019799][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.079909][ T5872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.106014][ T5872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.125038][ T5872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.146938][ T5872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.180183][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.193309][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.207712][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.227748][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.265822][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.287065][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.296234][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.319313][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.328900][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.367566][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.377259][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.387617][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.400803][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.409775][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.434308][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.441455][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.468834][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.475957][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.532633][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.566270][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.604276][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.615813][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.635915][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.645338][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.652438][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.661815][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.669042][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.689047][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.696138][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.707906][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.717129][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.735580][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.766861][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.774058][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.782863][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.789956][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.799617][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.806715][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.853900][ T5871] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.867467][ T5871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.895915][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.931188][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.938402][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.949000][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.956110][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.967622][ T5868] veth0_vlan: entered promiscuous mode [ 60.985101][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.995107][ T5868] veth1_vlan: entered promiscuous mode [ 61.004175][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.032227][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.083944][ T5868] veth0_macvtap: entered promiscuous mode [ 61.098706][ T5868] veth1_macvtap: entered promiscuous mode [ 61.112540][ T5872] veth0_vlan: entered promiscuous mode [ 61.134023][ T5871] veth0_vlan: entered promiscuous mode [ 61.153744][ T5872] veth1_vlan: entered promiscuous mode [ 61.164994][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.176871][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.190684][ T5869] veth0_vlan: entered promiscuous mode [ 61.199367][ T5871] veth1_vlan: entered promiscuous mode [ 61.213306][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.222796][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.233032][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.252944][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.261775][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.280066][ T5869] veth1_vlan: entered promiscuous mode [ 61.325892][ T5872] veth0_macvtap: entered promiscuous mode [ 61.341604][ T5871] veth0_macvtap: entered promiscuous mode [ 61.361419][ T5872] veth1_macvtap: entered promiscuous mode [ 61.372558][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.381568][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.389184][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.398684][ T5871] veth1_macvtap: entered promiscuous mode [ 61.424230][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.435794][ T5869] veth0_macvtap: entered promiscuous mode [ 61.451493][ T5875] veth0_vlan: entered promiscuous mode [ 61.463302][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.464264][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.472394][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.481590][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.501512][ T5869] veth1_macvtap: entered promiscuous mode [ 61.510705][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.521227][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.530843][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.552759][ T5875] veth1_vlan: entered promiscuous mode [ 61.570040][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.571812][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.581610][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.635688][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.645444][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.657181][ T5943] netlink: 'syz.4.5': attribute type 5 has an invalid length. [ 61.660419][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.684327][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.708875][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.720375][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.754277][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.780397][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.791983][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.807043][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.817318][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.835142][ T5875] veth0_macvtap: entered promiscuous mode [ 61.855510][ T5859] Bluetooth: hci2: command tx timeout [ 61.867734][ T5875] veth1_macvtap: entered promiscuous mode [ 61.891053][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.913330][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.935773][ T5859] Bluetooth: hci0: command tx timeout [ 61.936902][ T5182] Bluetooth: hci4: command tx timeout [ 61.941362][ T5859] Bluetooth: hci3: command tx timeout [ 61.941395][ T5859] Bluetooth: hci1: command tx timeout [ 61.984471][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.989188][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.992432][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.003423][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.031292][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.044769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.059378][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.092644][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.165681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.367679][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.418688][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.427306][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.447181][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.534774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.543772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.552365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.561004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.574558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 62.593872][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.605698][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.613693][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.628403][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.644443][ T5934] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.648155][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.746761][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.761622][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.813014][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 62.839179][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.870629][ T5934] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 62.892077][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.916721][ T5934] usb 4-1: config 0 descriptor?? [ 62.961644][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.989360][ T5973] futex_wake_op: syz.1.2 tries to shift op by -1; fix this program [ 62.997513][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.154477][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 63.166237][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.179273][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 63.191296][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 63.202613][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 63.213007][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 63.227758][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.237311][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 63.245878][ T24] usb 1-1: SerialNumber: syz [ 63.252566][ T5959] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 63.260068][ T979] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.268724][ T24] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 63.282766][ T24] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 63.346295][ T5934] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 63.355774][ T5934] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 63.362908][ T5934] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 63.387965][ T5934] uclogic 0003:5543:0005.0001: hidraw0: USB HID v0.05 Device [HID 5543:0005] on usb-dummy_hcd.3-1/input0 [ 63.424496][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 63.446157][ T979] usb 3-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 63.478417][ T979] usb 3-1: config 0 has an invalid interface number: 150 but max is 64 [ 63.490609][ T979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.492796][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.503790][ T979] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 63.513646][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.521155][ T979] usb 3-1: config 0 has no interface number 0 [ 63.534605][ T1210] usb 1-1: USB disconnect, device number 2 [ 63.550051][ T24] usb 4-1: USB disconnect, device number 2 [ 63.567813][ T979] usb 3-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.582959][ T979] usb 3-1: config 0 interface 150 has no altsetting 0 [ 63.592291][ T979] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 63.609008][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.622158][ T979] usb 3-1: config 0 descriptor?? [ 63.934990][ T5859] Bluetooth: hci2: command tx timeout [ 64.014700][ T5859] Bluetooth: hci4: command tx timeout [ 64.014724][ T5860] Bluetooth: hci3: command tx timeout [ 64.014752][ T5860] Bluetooth: hci0: command tx timeout [ 64.020156][ T5182] Bluetooth: hci1: command tx timeout [ 64.046717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 64.324493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 64.344602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 64.352442][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 64.362645][ T6004] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 64.383680][ T6005] mmap: syz.3.15 (6005) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.459739][ T5927] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.624507][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 64.633276][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.647362][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.703368][ T5927] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 64.732643][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.752216][ T5927] usb 5-1: config 0 descriptor?? [ 64.854551][ T5987] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 64.944456][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.972666][ T5927] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 65.006954][ T5987] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 65.019845][ T5987] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 65.030602][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.050458][ T5987] usb 4-1: Product: syz [ 65.062068][ T5987] usb 4-1: Manufacturer: syz [ 65.068484][ T5987] usb 4-1: SerialNumber: syz [ 65.075614][ T5987] usb 4-1: config 0 descriptor?? [ 65.094654][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 65.101315][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.113192][ T24] usb 2-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 65.122697][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.132493][ T24] usb 2-1: config 0 descriptor?? [ 65.172358][ T5927] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 65.388196][ T5927] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 65.616144][ T24] betop 0003:11C0:5506.0003: unknown main item tag 0x0 [ 65.630099][ T24] betop 0003:11C0:5506.0003: unknown main item tag 0x0 [ 65.637391][ T24] betop 0003:11C0:5506.0003: unknown main item tag 0x0 [ 65.644738][ T24] betop 0003:11C0:5506.0003: unknown main item tag 0x0 [ 65.653065][ T24] betop 0003:11C0:5506.0003: unknown main item tag 0x0 [ 65.684775][ T24] betop 0003:11C0:5506.0003: hidraw0: USB HID v0.05 Device [HID 11c0:5506] on usb-dummy_hcd.1-1/input0 [ 65.719977][ T24] betop 0003:11C0:5506.0003: no inputs found [ 65.790506][ T5927] ft260 0003:0403:6030.0002: failed to retrieve status: -71 [ 65.800076][ T5927] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71 [ 65.831833][ T979] usb 3-1: USB disconnect, device number 2 [ 65.862020][ T5927] usb 5-1: USB disconnect, device number 2 [ 66.114521][ T5860] Bluetooth: hci2: command tx timeout [ 66.119961][ T5860] Bluetooth: hci4: command tx timeout [ 66.125470][ T5861] Bluetooth: hci1: command tx timeout [ 66.140042][ T5861] Bluetooth: hci0: command tx timeout [ 66.140871][ T5859] Bluetooth: hci3: command tx timeout [ 66.302216][ T5927] usb 2-1: USB disconnect, device number 2 [ 66.311651][ T6031] loop2: detected capacity change from 0 to 7 [ 66.389252][ T6035] netlink: 'syz.4.28': attribute type 30 has an invalid length. [ 66.409710][ T6033] process 'syz.2.27' launched './file0' with NULL argv: empty string added [ 66.714759][ T979] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 66.854424][ T979] usb 1-1: device descriptor read/64, error -71 [ 66.982281][ T6052] netlink: 4660 bytes leftover after parsing attributes in process `syz.1.33'. [ 67.040494][ T6054] netlink: 4660 bytes leftover after parsing attributes in process `syz.1.34'. [ 67.114399][ T979] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 67.147329][ T5927] usb 4-1: USB disconnect, device number 3 [ 67.244468][ T979] usb 1-1: device descriptor read/64, error -71 [ 67.340238][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.38'. [ 67.356190][ T979] usb usb1-port1: attempt power cycle [ 67.379549][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.534546][ T5927] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 67.545305][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 67.551855][ T24] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 67.560062][ T24] usb 2-1: config 0 has no interface number 0 [ 67.576652][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 67.591606][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.600471][ T24] usb 2-1: Product: syz [ 67.604741][ T24] usb 2-1: Manufacturer: syz [ 67.609336][ T24] usb 2-1: SerialNumber: syz [ 67.619909][ T24] usb 2-1: config 0 descriptor?? [ 67.626461][ T24] smsc95xx v2.0.0 [ 67.644473][ T5863] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.696829][ T5927] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 67.705602][ T979] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 67.707991][ T5927] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 67.716913][ T5955] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 67.727002][ T5927] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 67.744196][ T5927] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 67.753416][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.757288][ T979] usb 1-1: device descriptor read/8, error -71 [ 67.768187][ T6060] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 67.779802][ T5927] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 67.814439][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 67.822552][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.835843][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8347, setting to 1024 [ 67.847482][ T5863] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 67.858821][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.869513][ T5863] usb 5-1: config 0 descriptor?? [ 67.884451][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 67.890884][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.901845][ T5955] usb 3-1: config 0 has no interfaces? [ 67.907453][ T5955] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 67.916634][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.926075][ T5955] usb 3-1: config 0 descriptor?? [ 68.004437][ T979] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 68.024909][ T979] usb 1-1: device descriptor read/8, error -71 [ 68.035136][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 68.046975][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 68.051055][ T5927] usb 4-1: USB disconnect, device number 4 [ 68.145406][ T979] usb usb1-port1: unable to enumerate USB device [ 68.286368][ T5863] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 68.540306][ T5927] usb 5-1: USB disconnect, device number 3 [ 68.964400][ T5927] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 69.107286][ T5927] usb 4-1: device descriptor read/64, error -71 [ 69.354441][ T5927] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 69.676115][ T5927] usb 4-1: device descriptor read/64, error -71 [ 69.784669][ T5927] usb usb4-port1: attempt power cycle [ 70.123100][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 70.134448][ T5927] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 70.164761][ T24] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 70.188347][ T24] usb 2-1: USB disconnect, device number 3 [ 70.231583][ T5927] usb 4-1: device descriptor read/8, error -71 [ 70.491934][ T5927] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 70.518974][ T5927] usb 4-1: device descriptor read/8, error -71 [ 70.643753][ T5927] usb usb4-port1: unable to enumerate USB device [ 70.675491][ T5927] usb 3-1: USB disconnect, device number 3 [ 70.726090][ T6112] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.786908][ T6116] netlink: 56 bytes leftover after parsing attributes in process `syz.1.53'. [ 70.822050][ T6118] loop2: detected capacity change from 0 to 7 [ 70.999823][ T6121] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 71.002079][ T6118] Dev loop2: unable to read RDB block 7 [ 71.019598][ T6118] loop2: unable to read partition table [ 71.025523][ T6118] loop2: partition table beyond EOD, truncated [ 71.123409][ T6118] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 71.457011][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.467410][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.766073][ T6153] fuse: Unknown parameter '0xffffffffffffffff' [ 72.036605][ T5927] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 72.081366][ T6155] netlink: 'syz.0.64': attribute type 12 has an invalid length. [ 72.092716][ T6155] netlink: 'syz.0.64': attribute type 29 has an invalid length. [ 72.118841][ T6155] netlink: 148 bytes leftover after parsing attributes in process `syz.0.64'. [ 72.131369][ T6155] Zero length message leads to an empty skb [ 72.142550][ T6155] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 72.232085][ T6156] vlan2: entered allmulticast mode [ 72.374383][ T6156] batadv_slave_1: entered allmulticast mode [ 72.404841][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 72.412334][ T5927] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 72.422570][ T5927] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 72.449269][ T5927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 72.483453][ T5927] usb 4-1: config 1 has no interface number 0 [ 72.492733][ T5927] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.517708][ T5927] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 72.532609][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.65'. [ 72.543253][ T5927] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 72.669491][ T5927] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 72.711512][ T6162] netlink: 'syz.0.65': attribute type 2 has an invalid length. [ 72.811194][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.846334][ T5927] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 72.859792][ T6171] netlink: 'syz.2.67': attribute type 1 has an invalid length. [ 73.016954][ T6171] bond1 (unregistering): Released all slaves [ 73.067851][ T5927] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 73.076323][ T5927] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 73.090822][ T5927] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 73.486564][ T5927] usb 4-1: USB disconnect, device number 9 [ 73.522912][ T979] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 73.694486][ T979] usb 2-1: device descriptor read/64, error -71 [ 73.955489][ T979] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 74.104718][ T979] usb 2-1: device descriptor read/64, error -71 [ 74.124433][ T6069] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 74.262033][ T979] usb usb2-port1: attempt power cycle [ 74.424426][ T6069] usb 4-1: Using ep0 maxpacket: 16 [ 74.433247][ T6069] usb 4-1: config 222 has an invalid interface number: 31 but max is 0 [ 74.449755][ T6069] usb 4-1: config 222 has no interface number 0 [ 74.462709][ T6069] usb 4-1: config 222 interface 31 altsetting 11 bulk endpoint 0xE has invalid maxpacket 16 [ 74.486343][ T6069] usb 4-1: config 222 interface 31 has no altsetting 0 [ 74.495156][ T5927] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 74.508480][ T6069] usb 4-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 74.517924][ T6069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.526257][ T6069] usb 4-1: Product: syz [ 74.530655][ T6069] usb 4-1: Manufacturer: syz [ 74.535311][ T6069] usb 4-1: SerialNumber: syz [ 74.552051][ T6185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 74.614450][ T979] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 74.634437][ T5927] usb 3-1: device descriptor read/64, error -71 [ 74.645159][ T979] usb 2-1: device descriptor read/8, error -71 [ 74.822805][ T6069] ldusb 4-1:222.31: Interrupt out endpoint not found (using control endpoint instead) [ 74.870542][ T6069] ldusb 4-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 74.890618][ T6198] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.75'. [ 74.917034][ T6069] usb 4-1: USB disconnect, device number 10 [ 74.924550][ T5927] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 74.934677][ T979] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 74.953080][ T6069] ldusb 4-1:222.31: LD USB Device #0 now disconnected [ 74.961496][ T979] usb 2-1: device descriptor read/8, error -71 [ 75.054460][ T5927] usb 3-1: device descriptor read/64, error -71 [ 75.094688][ T979] usb usb2-port1: unable to enumerate USB device [ 75.164671][ T5927] usb usb3-port1: attempt power cycle [ 75.514966][ T5927] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 75.536216][ T5927] usb 3-1: device descriptor read/8, error -71 [ 75.561664][ T6215] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 75.571741][ T6215] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 75.614736][ T979] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 75.774531][ T5927] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 75.789022][ T979] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 75.794977][ T5927] usb 3-1: device descriptor read/8, error -71 [ 75.799601][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.812399][ T979] usb 4-1: Product: syz [ 75.818055][ T979] usb 4-1: Manufacturer: syz [ 75.822764][ T979] usb 4-1: SerialNumber: syz [ 75.828692][ T979] usb 4-1: config 0 descriptor?? [ 75.844445][ T5987] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 75.914986][ T5927] usb usb3-port1: unable to enumerate USB device [ 76.014789][ T5987] usb 1-1: Using ep0 maxpacket: 8 [ 76.021161][ T5987] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 76.031642][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.043711][ T979] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 76.044031][ T5987] usb 1-1: config 0 descriptor?? [ 76.274521][ T5987] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 76.284891][ T5987] asix 1-1:0.0: probe with driver asix failed with error -32 [ 76.295248][ T6069] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 76.374472][ T5927] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 76.457483][ T6069] usb 2-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 76.467295][ T6069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.475449][ T6069] usb 2-1: Product: syz [ 76.479625][ T6069] usb 2-1: Manufacturer: syz [ 76.484235][ T6069] usb 2-1: SerialNumber: syz [ 76.490747][ T6069] usb 2-1: config 0 descriptor?? [ 76.497775][ T6069] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 76.536313][ T5927] usb 5-1: unable to get BOS descriptor or descriptor too short [ 76.544973][ T5927] usb 5-1: not running at top speed; connect to a high speed hub [ 76.553651][ T5927] usb 5-1: config 7 has an invalid interface number: 180 but max is 0 [ 76.561918][ T5927] usb 5-1: config 7 has no interface number 0 [ 76.568136][ T5927] usb 5-1: config 7 interface 180 has no altsetting 0 [ 76.578195][ T5927] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=3c.f2 [ 76.587376][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.598205][ T5927] usb 5-1: Product: syz [ 76.602385][ T5927] usb 5-1: Manufacturer: ᆊ罾柵枨톐㉁띎뼱瑲ほ웒ຘ䭡듺늿=ሬ㻔㬚遧畾헍⹙雐羚⨁ᗩ堓툭ጃ㾋יⅤ㩩層ᗼ揣꘣㐌룋瀂商羹띀ꇶ䭌溩棳ꠈ줖伟핶⥦珅囧唵뮺㼑鍢嫥㗓뙼凳鼫俧拌᱓践 [ 76.628181][ T5927] usb 5-1: SerialNumber: syz [ 76.839200][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.848553][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.862953][ T5927] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 76.870043][ T5927] gspca_topro: reg_w err -71 [ 76.904799][ T5927] gspca_topro: Sensor soi763a [ 76.914653][ T5927] usb 5-1: USB disconnect, device number 4 [ 77.301027][ T979] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 77.319320][ T979] usb 4-1: USB disconnect, device number 11 [ 77.441065][ T6247] netlink: 104 bytes leftover after parsing attributes in process `syz.4.90'. [ 78.128581][ T6262] netlink: 40 bytes leftover after parsing attributes in process `syz.3.93'. [ 78.403312][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 78.771294][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 78.910661][ T5927] usb 2-1: USB disconnect, device number 8 [ 79.581551][ T6069] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 79.750436][ T6288] loop7: detected capacity change from 0 to 7 [ 79.765752][ T6069] usb 3-1: device descriptor read/64, error -71 [ 79.854414][ T5987] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 79.873068][ T6289] loop2: detected capacity change from 0 to 7 [ 79.933079][ T979] usb 1-1: USB disconnect, device number 7 [ 79.941383][ T5856] Dev loop7: unable to read RDB block 7 [ 79.951382][ T5856] loop7: unable to read partition table [ 79.958429][ T5856] loop7: partition table beyond EOD, truncated [ 80.004458][ T5987] usb 2-1: Using ep0 maxpacket: 16 [ 80.009920][ T6289] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.011271][ T5987] usb 2-1: config 0 has an invalid interface number: 180 but max is 0 [ 80.105772][ T6069] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 80.160506][ T6288] Dev loop7: unable to read RDB block 7 [ 80.183519][ T5987] usb 2-1: config 0 has no interface number 0 [ 80.192057][ T6288] loop7: unable to read partition table [ 80.199265][ T6288] loop7: partition table beyond EOD, truncated [ 80.208981][ T6288] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 80.239660][ T5987] usb 2-1: New USB device found, idVendor=0421, idProduct=0134, bcdDevice=11.72 [ 80.254690][ T6069] usb 3-1: device descriptor read/64, error -71 [ 80.312073][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.378899][ T6069] usb usb3-port1: attempt power cycle [ 80.405391][ T5987] usb 2-1: Product: syz [ 80.409805][ T5987] usb 2-1: Manufacturer: syz [ 80.480818][ T5987] usb 2-1: SerialNumber: syz [ 80.528224][ T5987] usb 2-1: config 0 descriptor?? [ 80.593902][ T5987] usb 2-1: bad CDC descriptors [ 81.085693][ T6069] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 81.138138][ T6069] usb 3-1: device descriptor read/8, error -71 [ 81.189640][ T5987] usb 2-1: USB disconnect, device number 9 [ 81.214439][ T979] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 81.423710][ T6326] pim6reg: entered allmulticast mode [ 81.438203][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 81.474415][ T6069] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 81.503448][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 81.528191][ T979] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 81.538368][ T6069] usb 3-1: device descriptor read/8, error -71 [ 81.545143][ T979] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 81.558983][ T979] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 81.568418][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.576522][ T979] usb 4-1: Product: syz [ 81.584301][ T979] usb 4-1: Manufacturer: syz [ 81.591174][ T979] usb 4-1: SerialNumber: syz [ 81.601483][ T979] usb 4-1: config 0 descriptor?? [ 81.607468][ T6320] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 81.625631][ T979] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 81.631497][ T979] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 81.638787][ T979] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 81.645511][ T979] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 81.652176][ T979] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 81.674580][ T6069] usb usb3-port1: unable to enumerate USB device [ 81.695983][ T54] cfg80211: failed to load regulatory.db [ 81.876608][ T6316] syz.3.106 uses obsolete (PF_INET,SOCK_PACKET) [ 82.149285][ T6354] FAULT_INJECTION: forcing a failure. [ 82.149285][ T6354] name failslab, interval 1, probability 0, space 0, times 0 [ 82.193943][ T6354] CPU: 0 UID: 0 PID: 6354 Comm: syz.1.113 Not tainted syzkaller #0 PREEMPT(full) [ 82.193967][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.193977][ T6354] Call Trace: [ 82.193984][ T6354] [ 82.193992][ T6354] dump_stack_lvl+0x189/0x250 [ 82.194025][ T6354] ? __pfx____ratelimit+0x10/0x10 [ 82.194047][ T6354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.194064][ T6354] ? __pfx__printk+0x10/0x10 [ 82.194080][ T6354] ? fs_reclaim_acquire+0x7d/0x100 [ 82.194094][ T6354] ? __pfx___might_resched+0x10/0x10 [ 82.194102][ T6354] ? lock_acquire+0x5f/0x360 [ 82.194116][ T6354] should_fail_ex+0x414/0x560 [ 82.194129][ T6354] should_failslab+0xa8/0x100 [ 82.194142][ T6354] __kmalloc_noprof+0xcb/0x4f0 [ 82.194154][ T6354] ? io_cache_alloc_new+0x40/0x100 [ 82.194163][ T6354] ? __memcg_slab_post_alloc_hook+0x522/0x7f0 [ 82.194175][ T6354] io_cache_alloc_new+0x40/0x100 [ 82.194185][ T6354] __io_prep_rw+0x23f/0xe20 [ 82.194196][ T6354] ? rcu_is_watching+0x15/0xb0 [ 82.194206][ T6354] ? rcu_is_watching+0x15/0xb0 [ 82.194214][ T6354] ? percpu_ref_get_many+0x21/0x1e0 [ 82.194225][ T6354] ? __pfx___io_prep_rw+0x10/0x10 [ 82.194236][ T6354] ? percpu_ref_get_many+0x21/0x1e0 [ 82.194247][ T6354] io_prep_rwv+0x8c/0x3d0 [ 82.194258][ T6354] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 82.194268][ T6354] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 82.194280][ T6354] ? __pfx_io_prep_rwv+0x10/0x10 [ 82.194292][ T6354] ? __asan_memset+0x22/0x50 [ 82.194302][ T6354] ? blk_start_plug_nr_ios+0x7f/0x1c0 [ 82.194316][ T6354] io_submit_sqes+0x8f3/0x1d10 [ 82.194344][ T6354] __se_sys_io_uring_enter+0x2df/0x2b20 [ 82.194364][ T6354] ? lock_release+0x4b/0x3e0 [ 82.194382][ T6354] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 82.194402][ T6354] ? rcu_is_watching+0x15/0xb0 [ 82.194417][ T6354] ? lock_release+0x4b/0x3e0 [ 82.194435][ T6354] ? vfs_write+0x956/0xb30 [ 82.194455][ T6354] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 82.194466][ T6354] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 82.194479][ T6354] ? __pfx_vfs_write+0x10/0x10 [ 82.194495][ T6354] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.194509][ T6354] ? __fget_files+0x3a0/0x420 [ 82.194523][ T6354] ? fput+0xa0/0xd0 [ 82.194532][ T6354] ? ksys_write+0x22a/0x250 [ 82.194544][ T6354] ? __pfx_ksys_write+0x10/0x10 [ 82.194554][ T6354] ? rcu_is_watching+0x15/0xb0 [ 82.194564][ T6354] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 82.194576][ T6354] do_syscall_64+0xfa/0x3b0 [ 82.194589][ T6354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.194598][ T6354] ? clear_bhb_loop+0x60/0xb0 [ 82.194608][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.194617][ T6354] RIP: 0033:0x7f893cf8ebe9 [ 82.194634][ T6354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.194642][ T6354] RSP: 002b:00007f893dd51038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 82.194654][ T6354] RAX: ffffffffffffffda RBX: 00007f893d1b6180 RCX: 00007f893cf8ebe9 [ 82.194661][ T6354] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000006 [ 82.194666][ T6354] RBP: 00007f893dd51090 R08: 0000000000000000 R09: 0000000000000000 [ 82.194672][ T6354] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 82.194677][ T6354] R13: 00007f893d1b6218 R14: 00007f893d1b6180 R15: 00007f893d2dfa28 [ 82.194687][ T6354] [ 82.526776][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.646797][ T6356] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 82.947870][ T6356] bond1: entered promiscuous mode [ 82.954691][ T6356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.130835][ T6357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.139292][ T6357] bond1: (slave bond2): making interface the new active one [ 83.154486][ T6357] bond2: entered promiscuous mode [ 83.161253][ T6357] bond1: (slave bond2): Enslaving as an active interface with an up link [ 83.364454][ T54] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 83.541097][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 83.561867][ T54] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 83.574064][ T54] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 83.583929][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.596972][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.120'. [ 83.613433][ T54] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 83.634764][ T54] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 83.666726][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.791019][ T5987] usb 4-1: USB disconnect, device number 12 [ 83.797962][ T5987] mcba_usb 4-1:0.0 can0: device disconnected [ 83.904023][ T6371] delete_channel: no stack [ 83.913881][ T54] usb 1-1: USB disconnect, device number 8 [ 84.365677][ T30] audit: type=1326 audit(1755809121.859:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893cf8ebe9 code=0x7ffc0000 [ 84.392759][ T30] audit: type=1326 audit(1755809121.859:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893cf8ebe9 code=0x7ffc0000 [ 84.594679][ T5987] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 84.597326][ T30] audit: type=1326 audit(1755809121.919:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f893cf8d550 code=0x7ffc0000 [ 84.689193][ T30] audit: type=1326 audit(1755809121.919:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893cf8e7eb code=0x7ffc0000 [ 84.713870][ T30] audit: type=1326 audit(1755809121.919:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893cf8e7eb code=0x7ffc0000 [ 84.749025][ T30] audit: type=1326 audit(1755809121.929:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893cf8e7eb code=0x7ffc0000 [ 84.789124][ T5987] usb 4-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.802422][ T5927] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 84.822407][ T6069] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 84.830251][ T5987] usb 4-1: config 1 interface 0 has no altsetting 0 [ 84.843046][ T30] audit: type=1326 audit(1755809121.929:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893cf8e7eb code=0x7ffc0000 [ 84.926701][ T30] audit: type=1326 audit(1755809122.159:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893cf8e7eb code=0x7ffc0000 [ 84.957274][ T5927] usb 3-1: device descriptor read/64, error -71 [ 84.969489][ T5987] usb 4-1: string descriptor 0 read error: -22 [ 84.977870][ T5987] usb 4-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.40 [ 84.994115][ T30] audit: type=1326 audit(1755809122.239:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893cf8e7eb code=0x7ffc0000 [ 85.016906][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.037212][ T6069] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 85.047821][ T6069] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.072199][ T30] audit: type=1326 audit(1755809122.329:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893cf8e7eb code=0x7ffc0000 [ 85.098914][ T6069] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 85.112888][ T6069] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 85.131657][ T6069] usb 2-1: Manufacturer: syz [ 85.141715][ T6069] usb 2-1: SerialNumber: syz [ 85.272516][ T5987] usbhid 4-1:1.0: can't add hid device: -71 [ 85.278789][ T5927] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 85.286655][ T5987] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 85.296408][ T5987] usb 4-1: USB disconnect, device number 13 [ 85.304576][ T54] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.378998][ T6069] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 85.391279][ T6069] usb 2-1: USB disconnect, device number 10 [ 85.434476][ T5927] usb 3-1: device descriptor read/64, error -71 [ 85.465904][ T54] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 85.474976][ T54] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 85.485372][ T54] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 85.494391][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 85.505471][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 85.518819][ T54] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 85.527952][ T54] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 85.536240][ T54] usb 5-1: Product: syz [ 85.540446][ T54] usb 5-1: Manufacturer: syz [ 85.548714][ T5927] usb usb3-port1: attempt power cycle [ 85.549343][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 85.559610][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 85.565781][ T54] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 85.571690][ T54] cdc_wdm 5-1:1.0: Unknown control protocol [ 85.894672][ T5927] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 85.927962][ T5927] usb 3-1: device descriptor read/8, error -71 [ 86.133442][ T6442] KVM: debugfs: duplicate directory 6442-9 [ 86.314422][ T5927] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 86.326718][ T54] usb 5-1: USB disconnect, device number 5 [ 86.439254][ T6450] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 86.519272][ T5927] usb 3-1: device descriptor read/8, error -71 [ 86.533468][ T6450] bond1: entered promiscuous mode [ 86.546117][ T6450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.605051][ T6449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.613255][ T6449] bond1: (slave bond2): making interface the new active one [ 86.620920][ T6449] bond2: entered promiscuous mode [ 86.628447][ T6449] bond1: (slave bond2): Enslaving as an active interface with an up link [ 86.637426][ T5927] usb usb3-port1: unable to enumerate USB device [ 87.004668][ T5920] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 87.044892][ T6461] loop2: detected capacity change from 0 to 7 [ 87.110963][ T6461] Dev loop2: unable to read RDB block 7 [ 87.116912][ T6461] loop2: unable to read partition table [ 87.122681][ T6461] loop2: partition table beyond EOD, truncated [ 87.184780][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 87.191537][ T6461] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 87.205294][ T5920] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.216895][ T5920] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 87.284686][ T5920] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 8 [ 87.310303][ T6464] FAULT_INJECTION: forcing a failure. [ 87.310303][ T6464] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.317991][ T5920] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 1024 [ 87.333759][ T6464] CPU: 1 UID: 0 PID: 6464 Comm: syz.2.140 Not tainted syzkaller #0 PREEMPT(full) [ 87.333783][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.333793][ T6464] Call Trace: [ 87.333799][ T6464] [ 87.333806][ T6464] dump_stack_lvl+0x189/0x250 [ 87.333835][ T6464] ? __pfx____ratelimit+0x10/0x10 [ 87.333857][ T6464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.333876][ T6464] ? __pfx__printk+0x10/0x10 [ 87.333900][ T6464] ? rcu_is_watching+0x15/0xb0 [ 87.333918][ T6464] should_fail_ex+0x414/0x560 [ 87.333941][ T6464] _copy_to_user+0x31/0xb0 [ 87.333960][ T6464] put_user_ifreq+0x6b/0xd0 [ 87.333980][ T6464] sock_do_ioctl+0x25b/0x300 [ 87.334000][ T6464] ? __pfx_sock_do_ioctl+0x10/0x10 [ 87.334018][ T6464] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 87.334046][ T6464] sock_ioctl+0x576/0x790 [ 87.334064][ T6464] ? lock_release+0x4b/0x3e0 [ 87.334086][ T6464] ? __pfx_sock_ioctl+0x10/0x10 [ 87.334105][ T6464] ? __fget_files+0x2a/0x420 [ 87.334127][ T6464] ? __fget_files+0x3a0/0x420 [ 87.334148][ T6464] ? __fget_files+0x2a/0x420 [ 87.334170][ T6464] ? bpf_lsm_file_ioctl+0x9/0x20 [ 87.334189][ T6464] ? __pfx_sock_ioctl+0x10/0x10 [ 87.334205][ T6464] __se_sys_ioctl+0xfc/0x170 [ 87.334221][ T6464] do_syscall_64+0xfa/0x3b0 [ 87.334241][ T6464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.334255][ T6464] ? clear_bhb_loop+0x60/0xb0 [ 87.334270][ T6464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.334284][ T6464] RIP: 0033:0x7f675b78ebe9 [ 87.334298][ T6464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.334311][ T6464] RSP: 002b:00007f675c6c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.334328][ T6464] RAX: ffffffffffffffda RBX: 00007f675b9b5fa0 RCX: 00007f675b78ebe9 [ 87.334339][ T6464] RDX: 00002000000001c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 87.334349][ T6464] RBP: 00007f675c6c9090 R08: 0000000000000000 R09: 0000000000000000 [ 87.334358][ T6464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.334367][ T6464] R13: 00007f675b9b6038 R14: 00007f675b9b5fa0 R15: 00007f675badfa28 [ 87.334384][ T6464] [ 87.353564][ T5920] usb 2-1: config 1 interface 0 has no altsetting 0 [ 87.584308][ T5920] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.598020][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.627669][ T5920] usb 2-1: Product: syz [ 87.631948][ T5920] usb 2-1: Manufacturer: syz [ 87.648889][ T5920] usb 2-1: SerialNumber: syz [ 87.656853][ T6457] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 87.659361][ T6468] syzkaller0: entered promiscuous mode [ 87.665284][ T6457] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 87.670970][ T6468] syzkaller0: entered allmulticast mode [ 87.826130][ T5927] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 87.977985][ T6486] netlink: 1 bytes leftover after parsing attributes in process `syz.1.136'. [ 87.994493][ T54] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 88.004758][ T5927] usb 3-1: device descriptor read/64, error -71 [ 88.164419][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 88.178645][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.205769][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.218293][ T54] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.228060][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.242079][ T54] usb 4-1: config 0 descriptor?? [ 88.253693][ T54] hub 4-1:0.0: USB hub found [ 88.285932][ T5927] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 88.294937][ T6492] loop2: detected capacity change from 0 to 7 [ 88.301957][ T6492] Dev loop2: unable to read RDB block 7 [ 88.308699][ T6492] loop2: unable to read partition table [ 88.315220][ T6492] loop2: partition table beyond EOD, truncated [ 88.322641][ T6492] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 88.370551][ T6494] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 88.384134][ T6494] xt_time: unknown flags 0xf4 [ 88.415668][ T5927] usb 3-1: device descriptor read/64, error -71 [ 88.448847][ T54] hub 4-1:0.0: 1 port detected [ 88.526011][ T5927] usb usb3-port1: attempt power cycle [ 88.646856][ T6498] FAULT_INJECTION: forcing a failure. [ 88.646856][ T6498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.660558][ T6498] CPU: 0 UID: 0 PID: 6498 Comm: syz.4.153 Not tainted syzkaller #0 PREEMPT(full) [ 88.660580][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.660590][ T6498] Call Trace: [ 88.660596][ T6498] [ 88.660603][ T6498] dump_stack_lvl+0x189/0x250 [ 88.660627][ T6498] ? __pfx____ratelimit+0x10/0x10 [ 88.660650][ T6498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.660668][ T6498] ? __pfx__printk+0x10/0x10 [ 88.660692][ T6498] ? rcu_is_watching+0x15/0xb0 [ 88.660709][ T6498] should_fail_ex+0x414/0x560 [ 88.660733][ T6498] _copy_to_user+0x31/0xb0 [ 88.660752][ T6498] simple_read_from_buffer+0xe1/0x170 [ 88.660777][ T6498] proc_fail_nth_read+0x1b3/0x220 [ 88.660798][ T6498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.660816][ T6498] ? rw_verify_area+0x2a6/0x4d0 [ 88.660835][ T6498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.660853][ T6498] vfs_read+0x200/0xa30 [ 88.660872][ T6498] ? fdget_pos+0x247/0x320 [ 88.660888][ T6498] ? __pfx___mutex_lock+0x10/0x10 [ 88.660910][ T6498] ? __pfx_vfs_read+0x10/0x10 [ 88.660933][ T6498] ? __fget_files+0x3a0/0x420 [ 88.660955][ T6498] ? __fget_files+0x2a/0x420 [ 88.660979][ T6498] ksys_read+0x145/0x250 [ 88.660998][ T6498] ? __fget_files+0x3a0/0x420 [ 88.661020][ T6498] ? __pfx_ksys_read+0x10/0x10 [ 88.661038][ T6498] ? __pfx_sock_ioctl+0x10/0x10 [ 88.661058][ T6498] ? rcu_is_watching+0x15/0xb0 [ 88.661075][ T6498] do_syscall_64+0xfa/0x3b0 [ 88.661097][ T6498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.661112][ T6498] ? clear_bhb_loop+0x60/0xb0 [ 88.661128][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.661143][ T6498] RIP: 0033:0x7f2e6758d5fc [ 88.661157][ T6498] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 88.661171][ T6498] RSP: 002b:00007f2e68379030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.661189][ T6498] RAX: ffffffffffffffda RBX: 00007f2e677b5fa0 RCX: 00007f2e6758d5fc [ 88.661199][ T6498] RDX: 000000000000000f RSI: 00007f2e683790a0 RDI: 0000000000000004 [ 88.661209][ T6498] RBP: 00007f2e68379090 R08: 0000000000000000 R09: 0000000000000000 [ 88.661218][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.661228][ T6498] R13: 00007f2e677b6038 R14: 00007f2e677b5fa0 R15: 00007f2e678dfa28 [ 88.661245][ T6498] [ 88.912693][ T5987] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 88.974753][ T5927] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 88.996474][ T5927] usb 3-1: device descriptor read/8, error -71 [ 89.065814][ T5987] usb 1-1: config 0 has an invalid interface number: 195 but max is 0 [ 89.074136][ T5987] usb 1-1: config 0 has no interface number 0 [ 89.080608][ T5987] usb 1-1: config 0 interface 195 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 89.093545][ T5987] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=fd.08 [ 89.097759][ T54] hub 4-1:0.0: activate --> -90 [ 89.103477][ T5987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.115937][ T5987] usb 1-1: Product: syz [ 89.120139][ T5987] usb 1-1: Manufacturer: syz [ 89.124882][ T5987] usb 1-1: SerialNumber: syz [ 89.131471][ T5987] usb 1-1: config 0 descriptor?? [ 89.139232][ T6496] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 89.264435][ T5927] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 89.296366][ T5927] usb 3-1: device descriptor read/8, error -71 [ 89.358620][ T5987] asix 1-1:0.195 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 89.377466][ T5987] asix 1-1:0.195: probe with driver asix failed with error -71 [ 89.393605][ T5987] usb 1-1: USB disconnect, device number 9 [ 89.405804][ T5927] usb usb3-port1: unable to enumerate USB device [ 89.634654][ T6512] usb usb8: usbfs: process 6512 (syz.4.156) did not claim interface 0 before use [ 89.686459][ T5920] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 89.709850][ T5920] usb 2-1: USB disconnect, device number 11 [ 90.150055][ T54] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 90.188439][ T24] usb 4-1: USB disconnect, device number 14 [ 90.198401][ T54] usb 4-1-port1: cannot reset (err = -71) [ 90.245032][ T54] usb 4-1-port1: Cannot enable. Maybe the USB cable is bad? [ 90.289929][ T54] usb 4-1-port1: attempt power cycle [ 91.136047][ T6546] netlink: 'syz.1.164': attribute type 12 has an invalid length. [ 91.202982][ T6546] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.164'. [ 91.262843][ T5927] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 91.741793][ T5927] usb 3-1: config 0 has no interfaces? [ 91.752657][ T5927] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 91.804023][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.832668][ T5927] usb 3-1: Product: syz [ 91.845364][ T5927] usb 3-1: Manufacturer: syz [ 91.856749][ T5927] usb 3-1: SerialNumber: syz [ 91.866398][ T6560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.168'. [ 91.891028][ T5927] usb 3-1: config 0 descriptor?? [ 92.132146][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.140864][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.213292][ T6539] block device autoloading is deprecated and will be removed. [ 92.841664][ T6595] binder_alloc: binder_alloc_mmap_handler: 6594 200000ffd000-200001000000 already mapped failed -16 [ 92.856411][ T6595] binder_alloc: binder_alloc_mmap_handler: 6594 200000ffd000-200001000000 already mapped failed -16 [ 92.869351][ T6595] binder_alloc: binder_alloc_mmap_handler: 6594 200000ffd000-200001000000 already mapped failed -16 [ 92.880716][ T6595] binder_alloc: binder_alloc_mmap_handler: 6594 200000ffd000-200001000000 already mapped failed -16 [ 92.897739][ T6595] binder_alloc: binder_alloc_mmap_handler: 6594 200000ffd000-200001000000 already mapped failed -16 [ 92.966524][ T6600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.206803][ T6595] binder_alloc: binder_alloc_mmap_handler: 6594 200000ffd000-200001000000 already mapped failed -16 [ 93.656306][ T5920] usb 3-1: USB disconnect, device number 20 [ 94.465251][ T6632] netlink: 'syz.4.187': attribute type 21 has an invalid length. [ 94.473087][ T6632] netlink: 128 bytes leftover after parsing attributes in process `syz.4.187'. [ 94.482422][ T6632] netlink: 'syz.4.187': attribute type 5 has an invalid length. [ 94.495396][ T6632] netlink: 3 bytes leftover after parsing attributes in process `syz.4.187'. [ 94.694413][ T54] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 94.854635][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 94.861718][ T54] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.874128][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 94.886330][ T6638] netlink: 64 bytes leftover after parsing attributes in process `syz.1.189'. [ 94.911261][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.922989][ T54] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 94.932108][ T6069] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.940580][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.950997][ T54] usb 4-1: config 0 descriptor?? [ 94.968156][ T6629] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 94.976703][ T54] hub 4-1:0.0: USB hub found [ 94.999464][ T6638] netlink: 'syz.1.189': attribute type 11 has an invalid length. [ 95.104451][ T6069] usb 5-1: Using ep0 maxpacket: 16 [ 95.110957][ T6069] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 95.120302][ T6069] usb 5-1: config 0 has no interface number 0 [ 95.127756][ T6069] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 95.139777][ T6069] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.152641][ T6069] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 95.253395][ T54] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 95.265246][ T6069] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 95.276855][ T54] usbhid 4-1:0.0: can't add hid device: -71 [ 95.319898][ T54] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 95.328413][ T6069] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 95.341008][ T6069] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 95.350484][ T6644] netlink: 'syz.0.191': attribute type 12 has an invalid length. [ 95.356649][ T6069] usb 5-1: Product: syz [ 95.365565][ T6644] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.191'. [ 95.367103][ T54] usb 4-1: USB disconnect, device number 19 [ 95.395219][ T6069] usb 5-1: Manufacturer: syz [ 95.400933][ T6069] usb 5-1: SerialNumber: syz [ 95.408599][ T6069] usb 5-1: config 0 descriptor?? [ 95.414161][ T6634] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 95.630993][ T6651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.719984][ T6651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.745583][ T6069] usb 5-1: USB disconnect, device number 6 [ 95.984563][ T5920] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 96.143273][ T5920] usb 1-1: device descriptor read/64, error -71 [ 96.144514][ T54] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 96.304439][ T54] usb 4-1: device descriptor read/64, error -71 [ 96.424436][ T5920] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 96.544984][ T54] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 96.554588][ T5920] usb 1-1: device descriptor read/64, error -71 [ 96.604415][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.665592][ T5920] usb usb1-port1: attempt power cycle [ 96.675772][ T54] usb 4-1: device descriptor read/64, error -71 [ 96.736768][ T6674] netlink: 104 bytes leftover after parsing attributes in process `syz.1.200'. [ 96.754484][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 96.785255][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 96.796857][ T54] usb usb4-port1: attempt power cycle [ 96.802865][ T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 96.813080][ T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 96.826928][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.836141][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.844133][ T24] usb 5-1: Product: 㠊 [ 96.904174][ T6680] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 96.932888][ T24] usb 5-1: Manufacturer: Ђ [ 96.953139][ T6680] bond1: entered promiscuous mode [ 96.958330][ T24] usb 5-1: SerialNumber: ⒅᝗얚緽㛍쭣鿯䶖姾⨎뎮ྣ뤦㏍子祢銖別ꉱ䦟ꦉ豂愄悿✲棈ム豛†봬Ȏ⻫ﰌ졁뒯癵ᐴ珨弁䄍雰쌢筯눋넃禍 [ 96.976206][ T6680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.027054][ T5920] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 97.056649][ T5920] usb 1-1: device descriptor read/8, error -71 [ 97.089991][ T6680] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.125457][ T6680] bond1: (slave bond2): making interface the new active one [ 97.137594][ T6680] bond2: entered promiscuous mode [ 97.149758][ T6680] bond1: (slave bond2): Enslaving as an active interface with an up link [ 97.158500][ T54] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 97.197316][ T54] usb 4-1: device descriptor read/8, error -71 [ 97.215904][ T24] cdc_ncm 5-1:1.0: bind() failure [ 97.232835][ T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 97.241388][ T24] cdc_ncm 5-1:1.1: bind() failure [ 97.270279][ T24] usb 5-1: USB disconnect, device number 7 [ 97.294462][ T5920] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 97.314843][ T5920] usb 1-1: device descriptor read/8, error -71 [ 97.424633][ T5920] usb usb1-port1: unable to enumerate USB device [ 97.454670][ T54] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 97.474797][ T54] usb 4-1: device descriptor read/8, error -71 [ 97.597805][ T54] usb usb4-port1: unable to enumerate USB device [ 97.661078][ T6697] netlink: 4428 bytes leftover after parsing attributes in process `syz.1.208'. [ 97.974445][ T54] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 98.056218][ T5920] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 98.059471][ T6704] netlink: 104 bytes leftover after parsing attributes in process `syz.2.211'. [ 98.126048][ T54] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 98.139407][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.149933][ T54] usb 2-1: config 0 descriptor?? [ 98.158975][ T54] cp210x 2-1:0.0: cp210x converter detected [ 98.204545][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 98.212258][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.222501][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.232489][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.242717][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.255888][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.266416][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.394437][ T1210] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 98.477949][ T5920] usb 5-1: GET_CAPABILITIES returned 0 [ 98.483490][ T5920] usbtmc 5-1:16.0: can't read capabilities [ 98.524517][ T1210] usb 3-1: device descriptor read/64, error -71 [ 98.559698][ T54] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 98.765030][ T1210] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 98.777982][ T54] usb 2-1: cp210x converter now attached to ttyUSB0 [ 98.895286][ T1210] usb 3-1: device descriptor read/64, error -71 [ 98.978684][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.997932][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.006210][ T1210] usb usb3-port1: attempt power cycle [ 99.023250][ T5920] usb 2-1: USB disconnect, device number 12 [ 99.036805][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 99.065221][ T5920] cp210x 2-1:0.0: device disconnected [ 99.196802][ T6724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.217'. [ 99.207076][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 99.234137][ T24] usb 5-1: USB disconnect, device number 8 [ 99.354459][ T1210] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 99.388836][ T1210] usb 3-1: device descriptor read/8, error -71 [ 99.588468][ T6738] netlink: 'syz.4.218': attribute type 1 has an invalid length. [ 99.634211][ T6738] bond1: entered promiscuous mode [ 99.642933][ T6738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.870259][ T1210] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 99.950909][ T1210] usb 3-1: device descriptor read/8, error -71 [ 99.976353][ T6742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.102007][ T1210] usb usb3-port1: unable to enumerate USB device [ 100.124992][ T6742] bond1: (slave bond2): making interface the new active one [ 100.139236][ T6742] bond2: entered promiscuous mode [ 100.145036][ T6742] bond1: (slave bond2): Enslaving as an active interface with an up link [ 100.317926][ T6752] netlink: 104 bytes leftover after parsing attributes in process `syz.3.222'. [ 100.465471][ T6755] fuse: Bad value for 'user_id' [ 100.474242][ T6755] fuse: Bad value for 'user_id' [ 100.785486][ T6754] tipc: Started in network mode [ 100.790503][ T6754] tipc: Node identity ac14140f, cluster identity 4711 [ 100.797656][ T6754] tipc: New replicast peer: 255.255.255.255 [ 100.804165][ T6754] tipc: Enabled bearer , priority 10 [ 100.813902][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 100.823065][ T6754] tipc: Disabling bearer [ 100.929849][ T6763] netlink: 'syz.4.225': attribute type 2 has an invalid length. [ 100.953195][ T6763] : entered promiscuous mode [ 101.394597][ T54] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 101.703343][ T54] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.723525][ T54] usb 4-1: config 0 has no interfaces? [ 101.757494][ T54] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 101.767211][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.960630][ T54] usb 4-1: config 0 descriptor?? [ 102.054514][ T1210] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 102.181350][ T6777] netlink: 136 bytes leftover after parsing attributes in process `syz.3.228'. [ 102.190942][ T6069] IPVS: starting estimator thread 0... [ 102.200140][ T6069] usb 4-1: USB disconnect, device number 24 [ 102.217943][ T1210] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 102.227962][ T1210] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.304574][ T6800] IPVS: using max 43 ests per chain, 103200 per kthread [ 102.355111][ T6804] netlink: 'syz.2.236': attribute type 1 has an invalid length. [ 102.484402][ T6804] bond3: entered promiscuous mode [ 102.490001][ T6804] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.582255][ T6806] 8021q: adding VLAN 0 to HW filter on device bond4 [ 102.595534][ T6806] bond3: (slave bond4): making interface the new active one [ 102.603333][ T6806] bond4: entered promiscuous mode [ 102.612253][ T6806] bond3: (slave bond4): Enslaving as an active interface with an up link [ 102.641575][ T1210] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.675975][ T1210] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.727507][ T1210] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 102.735682][ T6069] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 102.752726][ T1210] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.841623][ T1210] usb 5-1: config 1 interface 1 has no altsetting 0 [ 102.865384][ T1210] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.879594][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.894514][ T6069] usb 1-1: Using ep0 maxpacket: 8 [ 102.903353][ T1210] usb 5-1: Product: syz [ 102.907516][ T6069] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 102.907548][ T6069] usb 1-1: config 127 has no interface number 1 [ 102.907580][ T6069] usb 1-1: config 127 interface 0 altsetting 10 endpoint 0xA has invalid wMaxPacketSize 0 [ 102.907598][ T6069] usb 1-1: config 127 interface 171 has no altsetting 0 [ 102.907613][ T6069] usb 1-1: config 127 interface 0 has no altsetting 0 [ 102.909605][ T6069] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 102.959211][ T6069] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.968230][ T6069] usb 1-1: Product: syz [ 102.976901][ T6069] usb 1-1: Manufacturer: syz [ 102.983839][ T6069] usb 1-1: SerialNumber: syz [ 103.022100][ T1210] usb 5-1: Manufacturer: syz [ 103.045935][ T1210] usb 5-1: SerialNumber: syz [ 103.108610][ T1210] cdc_ncm 5-1:1.0: skipping garbage [ 103.113843][ T1210] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 103.149440][ T1210] cdc_ncm 5-1:1.0: bind() failure [ 103.232882][ T6822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.241'. [ 103.328609][ T6069] xr_serial 1-1:127.171: xr_serial converter detected [ 103.371326][ T6069] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 103.380073][ T6069] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 103.403539][ T6069] usb 1-1: USB disconnect, device number 14 [ 103.420378][ T6069] xr_serial 1-1:127.171: device disconnected [ 103.575942][ T54] usb 5-1: USB disconnect, device number 9 [ 104.105648][ T6836] input: syz0 as /devices/virtual/input/input5 [ 104.244621][ T1210] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 104.401247][ T5987] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 104.410573][ T1210] usb 3-1: Using ep0 maxpacket: 8 [ 104.422561][ T1210] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 104.441958][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.454410][ T5920] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 104.465826][ T1210] usb 3-1: config 0 descriptor?? [ 104.503844][ T6845] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 104.544611][ T5987] usb 1-1: device descriptor read/64, error -71 [ 104.625471][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.635879][ T5920] usb 2-1: config 0 has no interfaces? [ 104.641397][ T5920] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 104.699285][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.718180][ T5920] usb 2-1: config 0 descriptor?? [ 104.731280][ T6847] warning: `syz.3.249' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.774462][ T5927] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 104.824524][ T5987] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 104.924475][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 104.931115][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.942307][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.954582][ T5987] usb 1-1: device descriptor read/64, error -71 [ 104.964279][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.975535][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.992349][ T5927] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 105.006740][ T6841] netlink: 136 bytes leftover after parsing attributes in process `syz.1.248'. [ 105.017319][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.018307][ T54] usb 2-1: USB disconnect, device number 13 [ 105.042374][ T5927] usb 5-1: config 0 descriptor?? [ 105.075955][ T5987] usb usb1-port1: attempt power cycle [ 105.424976][ T5987] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 105.463177][ T5987] usb 1-1: device descriptor read/8, error -71 [ 105.505172][ T5927] usbhid 5-1:0.0: can't add hid device: -71 [ 105.511563][ T5927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 105.524919][ T5927] usb 5-1: USB disconnect, device number 10 [ 105.648952][ T6863] netlink: 124 bytes leftover after parsing attributes in process `syz.1.254'. [ 105.660628][ T6863] netlink: 'syz.1.254': attribute type 3 has an invalid length. [ 105.704384][ T979] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 105.711075][ T5987] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 105.745730][ T5987] usb 1-1: device descriptor read/8, error -71 [ 105.866511][ T5987] usb usb1-port1: unable to enumerate USB device [ 105.874465][ T979] usb 4-1: Using ep0 maxpacket: 8 [ 105.891616][ T979] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 105.919923][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.929768][ T979] usb 4-1: Product: syz [ 105.934042][ T979] usb 4-1: Manufacturer: syz [ 105.940413][ T979] usb 4-1: SerialNumber: syz [ 105.947606][ T6871] netlink: 'syz.1.258': attribute type 8 has an invalid length. [ 105.950056][ T979] usb 4-1: config 0 descriptor?? [ 105.958510][ T1210] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 105.977227][ T979] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 105.987085][ T1210] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0 [ 106.008902][ T1210] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 106.035805][ T1210] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffe0 [ 106.050006][ T1210] ------------[ cut here ]------------ [ 106.056407][ T1210] UBSAN: shift-out-of-bounds in drivers/net/usb/asix_devices.c:679:27 [ 106.067026][ T1210] shift exponent 240 is too large for 64-bit type 'unsigned long' [ 106.075785][ T1210] CPU: 0 UID: 0 PID: 1210 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 106.075807][ T1210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.075819][ T1210] Workqueue: usb_hub_wq hub_event [ 106.075845][ T1210] Call Trace: [ 106.075852][ T1210] [ 106.075860][ T1210] dump_stack_lvl+0x189/0x250 [ 106.075884][ T1210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.075905][ T1210] ? __pfx__printk+0x10/0x10 [ 106.075933][ T1210] ubsan_epilogue+0xa/0x40 [ 106.075957][ T1210] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 106.075994][ T1210] ax88772_bind+0xdcf/0xfa0 [ 106.076023][ T1210] ? __pfx_ax88772_bind+0x10/0x10 [ 106.076047][ T1210] ? __raw_spin_lock_init+0x45/0x100 [ 106.076067][ T1210] ? usbnet_probe+0x915/0x2870 [ 106.076087][ T1210] usbnet_probe+0xa96/0x2870 [ 106.076122][ T1210] ? __pfx_usbnet_probe+0x10/0x10 [ 106.076140][ T1210] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 106.076162][ T1210] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 106.076183][ T1210] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 106.076204][ T1210] ? usb_disable_lpm+0x77/0x3e0 [ 106.076225][ T1210] usb_probe_interface+0x668/0xc30 [ 106.076252][ T1210] ? __pfx_usb_probe_interface+0x10/0x10 [ 106.076273][ T1210] really_probe+0x26a/0x9e0 [ 106.076295][ T1210] __driver_probe_device+0x18c/0x2f0 [ 106.076315][ T1210] driver_probe_device+0x4f/0x430 [ 106.076335][ T1210] __device_attach_driver+0x2ce/0x530 [ 106.076357][ T1210] bus_for_each_drv+0x251/0x2e0 [ 106.076380][ T1210] ? __pfx___device_attach_driver+0x10/0x10 [ 106.076399][ T1210] ? __pfx_bus_for_each_drv+0x10/0x10 [ 106.076425][ T1210] __device_attach+0x2b8/0x400 [ 106.076444][ T1210] ? __pfx___device_attach+0x10/0x10 [ 106.076462][ T1210] ? do_raw_spin_unlock+0x122/0x240 [ 106.076483][ T1210] bus_probe_device+0x185/0x260 [ 106.076508][ T1210] device_add+0x7b6/0xb50 [ 106.076526][ T1210] usb_set_configuration+0x1a87/0x20e0 [ 106.076558][ T1210] usb_generic_driver_probe+0x8d/0x150 [ 106.076580][ T1210] usb_probe_device+0x1c1/0x390 [ 106.076603][ T1210] ? __pfx_usb_probe_device+0x10/0x10 [ 106.076623][ T1210] really_probe+0x26a/0x9e0 [ 106.076645][ T1210] __driver_probe_device+0x18c/0x2f0 [ 106.076665][ T1210] driver_probe_device+0x4f/0x430 [ 106.076685][ T1210] __device_attach_driver+0x2ce/0x530 [ 106.076706][ T1210] bus_for_each_drv+0x251/0x2e0 [ 106.076729][ T1210] ? __pfx___device_attach_driver+0x10/0x10 [ 106.076749][ T1210] ? __pfx_bus_for_each_drv+0x10/0x10 [ 106.076776][ T1210] __device_attach+0x2b8/0x400 [ 106.076794][ T1210] ? __pfx___device_attach+0x10/0x10 [ 106.076814][ T1210] ? do_raw_spin_unlock+0x122/0x240 [ 106.076834][ T1210] bus_probe_device+0x185/0x260 [ 106.076857][ T1210] device_add+0x7b6/0xb50 [ 106.076878][ T1210] usb_new_device+0xa39/0x16f0 [ 106.076900][ T1210] ? __pfx_usb_new_device+0x10/0x10 [ 106.076919][ T1210] ? rcu_is_watching+0x15/0xb0 [ 106.076937][ T1210] hub_event+0x2958/0x4a20 [ 106.076977][ T1210] ? __pfx_hub_event+0x10/0x10 [ 106.076996][ T1210] ? rcu_is_watching+0x15/0xb0 [ 106.077012][ T1210] ? lock_acquire+0x5f/0x360 [ 106.077036][ T1210] ? rcu_is_watching+0x15/0xb0 [ 106.077051][ T1210] ? process_scheduled_works+0x9ef/0x17b0 [ 106.077068][ T1210] ? process_scheduled_works+0x9ef/0x17b0 [ 106.077084][ T1210] process_scheduled_works+0xae1/0x17b0 [ 106.077121][ T1210] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.077145][ T1210] worker_thread+0x8a0/0xda0 [ 106.077163][ T1210] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 106.077188][ T1210] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 106.077209][ T1210] ? __kthread_parkme+0x7b/0x200 [ 106.077231][ T1210] kthread+0x70e/0x8a0 [ 106.077253][ T1210] ? __pfx_worker_thread+0x10/0x10 [ 106.077269][ T1210] ? __pfx_kthread+0x10/0x10 [ 106.077290][ T1210] ? rcu_is_watching+0x15/0xb0 [ 106.077306][ T1210] ? __pfx_kthread+0x10/0x10 [ 106.077327][ T1210] ret_from_fork+0x3f9/0x770 [ 106.077345][ T1210] ? __pfx_ret_from_fork+0x10/0x10 [ 106.077363][ T1210] ? __switch_to_asm+0x39/0x70 [ 106.077384][ T1210] ? __switch_to_asm+0x33/0x70 [ 106.077404][ T1210] ? __pfx_kthread+0x10/0x10 [ 106.077423][ T1210] ret_from_fork_asm+0x1a/0x30 [ 106.077451][ T1210] [ 106.077548][ T1210] ---[ end trace ]--- [ 106.236470][ T979] gspca_sonixj: reg_r err -32 [ 106.236922][ T5927] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 106.241740][ T979] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 106.250628][ T1210] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 106.250648][ T1210] CPU: 0 UID: 0 PID: 1210 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 106.250673][ T1210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.250685][ T1210] Workqueue: usb_hub_wq hub_event [ 106.250712][ T1210] Call Trace: [ 106.250719][ T1210] [ 106.250727][ T1210] dump_stack_lvl+0x99/0x250 [ 106.250751][ T1210] ? __asan_memcpy+0x40/0x70 [ 106.250772][ T1210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.250793][ T1210] ? __pfx__printk+0x10/0x10 [ 106.250820][ T1210] vpanic+0x281/0x750 [ 106.250841][ T1210] ? __pfx_vpanic+0x10/0x10 [ 106.250866][ T1210] panic+0xb9/0xc0 [ 106.250884][ T1210] ? __pfx_panic+0x10/0x10 [ 106.250905][ T1210] ? __pfx__printk+0x10/0x10 [ 106.250929][ T1210] check_panic_on_warn+0x89/0xb0 [ 106.250953][ T1210] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 106.250989][ T1210] ax88772_bind+0xdcf/0xfa0 [ 106.251017][ T1210] ? __pfx_ax88772_bind+0x10/0x10 [ 106.251041][ T1210] ? __raw_spin_lock_init+0x45/0x100 [ 106.251062][ T1210] ? usbnet_probe+0x915/0x2870 [ 106.251082][ T1210] usbnet_probe+0xa96/0x2870 [ 106.251109][ T1210] ? __pfx_usbnet_probe+0x10/0x10 [ 106.251125][ T1210] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 106.251147][ T1210] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 106.251168][ T1210] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 106.251188][ T1210] ? usb_disable_lpm+0x77/0x3e0 [ 106.251209][ T1210] usb_probe_interface+0x668/0xc30 [ 106.251236][ T1210] ? __pfx_usb_probe_interface+0x10/0x10 [ 106.251257][ T1210] really_probe+0x26a/0x9e0 [ 106.251281][ T1210] __driver_probe_device+0x18c/0x2f0 [ 106.251301][ T1210] driver_probe_device+0x4f/0x430 [ 106.251321][ T1210] __device_attach_driver+0x2ce/0x530 [ 106.251343][ T1210] bus_for_each_drv+0x251/0x2e0 [ 106.251375][ T1210] ? __pfx___device_attach_driver+0x10/0x10 [ 106.251395][ T1210] ? __pfx_bus_for_each_drv+0x10/0x10 [ 106.251424][ T1210] __device_attach+0x2b8/0x400 [ 106.251443][ T1210] ? __pfx___device_attach+0x10/0x10 [ 106.251463][ T1210] ? do_raw_spin_unlock+0x122/0x240 [ 106.251486][ T1210] bus_probe_device+0x185/0x260 [ 106.251511][ T1210] device_add+0x7b6/0xb50 [ 106.251530][ T1210] usb_set_configuration+0x1a87/0x20e0 [ 106.251563][ T1210] usb_generic_driver_probe+0x8d/0x150 [ 106.251585][ T1210] usb_probe_device+0x1c1/0x390 [ 106.251608][ T1210] ? __pfx_usb_probe_device+0x10/0x10 [ 106.251629][ T1210] really_probe+0x26a/0x9e0 [ 106.251650][ T1210] __driver_probe_device+0x18c/0x2f0 [ 106.251670][ T1210] driver_probe_device+0x4f/0x430 [ 106.251691][ T1210] __device_attach_driver+0x2ce/0x530 [ 106.251712][ T1210] bus_for_each_drv+0x251/0x2e0 [ 106.251735][ T1210] ? __pfx___device_attach_driver+0x10/0x10 [ 106.251755][ T1210] ? __pfx_bus_for_each_drv+0x10/0x10 [ 106.251782][ T1210] __device_attach+0x2b8/0x400 [ 106.251800][ T1210] ? __pfx___device_attach+0x10/0x10 [ 106.251821][ T1210] ? do_raw_spin_unlock+0x122/0x240 [ 106.251843][ T1210] bus_probe_device+0x185/0x260 [ 106.251867][ T1210] device_add+0x7b6/0xb50 [ 106.251885][ T1210] usb_new_device+0xa39/0x16f0 [ 106.251907][ T1210] ? __pfx_usb_new_device+0x10/0x10 [ 106.251926][ T1210] ? rcu_is_watching+0x15/0xb0 [ 106.251945][ T1210] hub_event+0x2958/0x4a20 [ 106.251984][ T1210] ? __pfx_hub_event+0x10/0x10 [ 106.252002][ T1210] ? rcu_is_watching+0x15/0xb0 [ 106.252019][ T1210] ? lock_acquire+0x5f/0x360 [ 106.252044][ T1210] ? rcu_is_watching+0x15/0xb0 [ 106.252060][ T1210] ? process_scheduled_works+0x9ef/0x17b0 [ 106.252077][ T1210] ? process_scheduled_works+0x9ef/0x17b0 [ 106.252094][ T1210] process_scheduled_works+0xae1/0x17b0 [ 106.252121][ T1210] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.252144][ T1210] worker_thread+0x8a0/0xda0 [ 106.252163][ T1210] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 106.252186][ T1210] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 106.252207][ T1210] ? __kthread_parkme+0x7b/0x200 [ 106.252228][ T1210] kthread+0x70e/0x8a0 [ 106.252250][ T1210] ? __pfx_worker_thread+0x10/0x10 [ 106.252267][ T1210] ? __pfx_kthread+0x10/0x10 [ 106.252287][ T1210] ? rcu_is_watching+0x15/0xb0 [ 106.252303][ T1210] ? __pfx_kthread+0x10/0x10 [ 106.252323][ T1210] ret_from_fork+0x3f9/0x770 [ 106.252342][ T1210] ? __pfx_ret_from_fork+0x10/0x10 [ 106.252361][ T1210] ? __switch_to_asm+0x39/0x70 [ 106.252386][ T1210] ? __switch_to_asm+0x33/0x70 [ 106.252405][ T1210] ? __pfx_kthread+0x10/0x10 [ 106.926923][ T1210] ret_from_fork_asm+0x1a/0x30 [ 106.931696][ T1210] [ 106.934990][ T1210] Kernel Offset: disabled [ 106.939304][ T1210] Rebooting in 86400 seconds..