last executing test programs: 11.105421517s ago: executing program 3 (id=7016): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x7, 0x700, 0x1000, 0x80002e4, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x63, 0x0, 0x10, 0x4, 0x0, @local, @private=0xa010102}}}}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r1 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000100)=@generic={0x6, "82a99f5e6780f40e24bd809b20ee95341468506a251a4709351dc21527a3211b5d7d9e23507615dbd34b9caf736ffe39f6e94374a73afc6f093b934563f782377d352d07fdcece73844223bbd35bd6f6f009b93ad04c58f9ac067e8978ce9a7748bbd6c30f76a6b803b81161ab575fb223948b4264ca38775a28b1518ec2"}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)="b41c67069cf7d0e58b933b6b07516b13d6c4b9566da24468e40e7184bf31e64f1a960e37f84efe15d0f1e398ea1c84441422a7b805c27aefa79389ba07251a06ed3dddba913816692d80f152742a27753e", 0x51}, {&(0x7f00000001c0)}, {&(0x7f00000002c0)="1ea8b3d3de29ef7febfada5f8be6ca73ee015381d1624d0c05fd76ce80f318db1d5f19921da7", 0x26}, {&(0x7f0000000300)="f70145bda0353ead7ef475643e693bf50cdb617684b8b76a455f22a540b13cbd1e2a50dce0c857f3978a307466b9439acc843409f2407fc8d6773ae982013b0ac95cb99a4e48e724042e9b7050888dce4cdb6053b14be6dd8ae0a7da839ede4f01570dda373e9c1a5ee5f7bcebd9c4d28f70c97b13c6829cc35f34a4ba03fd12aa6aa2bccc4f3925bf9126fb241e9665", 0x90}, {0x0}, {&(0x7f0000000440)="01e4b47036ae80ea7c9416e56933a779f07a75b11aebe2247f7144465da11c92d07f64593235993e1efc11116f9734ae8742d6e7441a7727dc978a5580e085a8d1b5e5d535a807339191c78ba0d275d27279a5314fa1996ff37b583b5bbc307f34a107de124642622bba8e360a973d7fd53baf4f1c636be00dfe6ed4f8cea3", 0x7f}, {&(0x7f0000000500)="1384697df0381f9efbf60a9c978e53792d4b10636b2b31514ab08042d0f3a539ed3becba7e9cd29ada", 0x29}, {&(0x7f0000000780)="d7a080d1b9f557aa89f7e69da4b100133b1c545822c384dd253a36682c5103df71a1c4fdccd471925d403100e6555b5dcfda4fc40627d27ff47786de426d75011b672eafe9469d3ed7bf9203467c006583b89cbf2f20a2cf4636553c66f3bb5cd89893025bb3b47ab8906b703d5d8b49a490b4519cf138fc74127e68468b1a4251d07efe59ce9773027a1308ed72e61bed66f2883609ea5a296499b5b4a55cc04e00c44d7005a90fc0762c5e4cbfaac4b5513a4f1c6b39249aaafd44b5f4f60a796759a6357a8296cbf0f90669965e4889", 0xd1}], 0x8}, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x40847ba, 0x0, 0xe, 0x0, 0x1b) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x22020600) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x80000) r7 = fcntl$dupfd(r5, 0x406, r6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xc) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r11, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c0000007a006bcd9e3fe3dc6e08000007200000010000204da60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d5931fe71197ef8a33af56fbf472a29397bf2d2925f266", 0x6c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) preadv(r11, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) 10.476485191s ago: executing program 2 (id=7019): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000200)={0x0, 0x8}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x10001, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x140) accept4$inet6(r1, 0x0, &(0x7f0000000240), 0x81800) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd1338160000000000000000", @ANYRES32=0x0, @ANYBLOB="08000500040000000500530001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 10.354596212s ago: executing program 3 (id=7021): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001140)='erofs_destroy_inode\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff8}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x1, {{0xa, 0x4e24, 0x1, @remote, 0x6}}, 0x1, 0x4, [{{0xa, 0x4e20, 0x0, @empty, 0x4}}, {{0xa, 0x4e24, 0x82, @empty, 0xf5}}, {{0xa, 0x4e24, 0x81, @private2, 0x3}}, {{0xa, 0x4e21, 0x4, @mcast2, 0xfffffffb}}]}, 0x290) 9.140394212s ago: executing program 3 (id=7024): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x80000, 0x10100, 0xfffffffe, 0xe6}, 0x0, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x5, 0x84) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0xfffffffe, 0x40000000000, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r3, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) r5 = fsopen(&(0x7f0000000040)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='source', &(0x7f0000000480)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendto$packet(r3, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = dup(r1) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r5, 0x0, 0x1000, 0x0, &(0x7f0000000280)="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", &(0x7f0000000040), 0x0, 0x0, 0x98, 0x51, &(0x7f00000000c0)="85dbbd8ec24c0eea17482bee7194e01c94cca8c65cf76752f2659823093149920852648137236a974872c0c9f148a7e43337c3157ab5992daab3ef9387e5ecca3cdbc6e2d4865ca9356343760ea1a810866aff95e2039927f2d68e6bf4182d79acef3db28ce2e1f31b2c26ba9928ded95d469ce1cc0db8ea7c189ace19d50301fe96990f95e9f4e31f7bb54eb7103dabe98aa1749352cdf4", &(0x7f0000000180)="62e8801c2909c37c282b03bd117b3605a7190828adffc9a2a4b1ecb4024cae727ceb103ef2e3f6d6eb1439b3e04633f47e12602aaf4f5597cfb9bf37926ef04dde38f2a43608985ebf6eff7a417e446632", 0x2, 0x0, 0x6}, 0x50) write$UHID_INPUT(r5, 0x0, 0x0) 7.039496448s ago: executing program 0 (id=7027): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0xa, 0x0, 0x10000, 0x80000}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000080)={0x5, 0x1, 0x1}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000c00a80a00000c151000ffffffffffffffff0c000f004effffff7f00000001f67252877fd26713d48a541cfa8daece598dfbd7e6094fe9db57f60000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 6.278786215s ago: executing program 2 (id=7030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000050000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 6.271553412s ago: executing program 0 (id=7031): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x7, 0x700, 0x1000, 0x80002e4, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x63, 0x0, 0x10, 0x4, 0x0, @local, @private=0xa010102}}}}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r1 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000100)=@generic={0x6, "82a99f5e6780f40e24bd809b20ee95341468506a251a4709351dc21527a3211b5d7d9e23507615dbd34b9caf736ffe39f6e94374a73afc6f093b934563f782377d352d07fdcece73844223bbd35bd6f6f009b93ad04c58f9ac067e8978ce9a7748bbd6c30f76a6b803b81161ab575fb223948b4264ca38775a28b1518ec2"}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)="b41c67069cf7d0e58b933b6b07516b13d6c4b9566da24468e40e7184bf31e64f1a960e37f84efe15d0f1e398ea1c84441422a7b805c27aefa79389ba07251a06ed3dddba913816692d80f152742a27753e", 0x51}, {&(0x7f00000001c0)}, {&(0x7f00000002c0)="1ea8b3d3de29ef7febfada5f8be6ca73ee015381d1624d0c05fd76ce80f318db1d5f19921da7", 0x26}, {&(0x7f0000000300)="f70145bda0353ead7ef475643e693bf50cdb617684b8b76a455f22a540b13cbd1e2a50dce0c857f3978a307466b9439acc843409f2407fc8d6773ae982013b0ac95cb99a4e48e724042e9b7050888dce4cdb6053b14be6dd8ae0a7da839ede4f01570dda373e9c1a5ee5f7bcebd9c4d28f70c97b13c6829cc35f34a4ba03fd12aa6aa2bccc4f3925bf9126fb241e9665", 0x90}, {0x0}, {&(0x7f0000000440)="01e4b47036ae80ea7c9416e56933a779f07a75b11aebe2247f7144465da11c92d07f64593235993e1efc11116f9734ae8742d6e7441a7727dc978a5580e085a8d1b5e5d535a807339191c78ba0d275d27279a5314fa1996ff37b583b5bbc307f34a107de124642622bba8e360a973d7fd53baf4f1c636be00dfe6ed4f8cea3", 0x7f}, {&(0x7f0000000500)="1384697df0381f9efbf60a9c978e53792d4b10636b2b31514ab08042d0f3a539ed3becba7e9cd29ada", 0x29}, {&(0x7f0000000780)="d7a080d1b9f557aa89f7e69da4b100133b1c545822c384dd253a36682c5103df71a1c4fdccd471925d403100e6555b5dcfda4fc40627d27ff47786de426d75011b672eafe9469d3ed7bf9203467c006583b89cbf2f20a2cf4636553c66f3bb5cd89893025bb3b47ab8906b703d5d8b49a490b4519cf138fc74127e68468b1a4251d07efe59ce9773027a1308ed72e61bed66f2883609ea5a296499b5b4a55cc04e00c44d7005a90fc0762c5e4cbfaac4b5513a4f1c6b39249aaafd44b5f4f60a796759a6357a8296cbf0f90669965e4889", 0xd1}], 0x8}, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x40847ba, 0x0, 0xe, 0x0, 0x1b) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x22020600) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x80000) r7 = fcntl$dupfd(r5, 0x406, r6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xc) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r11, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c0000007a006bcd9e3fe3dc6e08000007200000010000204da60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d5931fe71197ef8a33af56fbf472a29397bf2d2925f266", 0x6c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) preadv(r11, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) 5.880143355s ago: executing program 2 (id=7034): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) (async, rerun: 32) close(0x3) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f800800014000000f7508000140fffffffd08000340000009c7080003400000008108000240000000e5"], 0x168}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x40000003, 0xffffffffffffffff, 0x1c, 0x3, @in6={0xa, 0x4e21, 0xbc6, @loopback, 0x203}}}, 0xa0) (async) syz_emit_ethernet(0x7a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6076db4000442f00fe800000000000000000000000000021ff020000000000000000000000000001042065580000000000000800000086dd08008877"], 0x0) (async) r4 = signalfd(r0, &(0x7f0000000000)={[0xa0a6]}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000040)={0x200, r1, 0x1}) 5.720724872s ago: executing program 2 (id=7035): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000200)={0x0, 0x8}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x10001, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x140) accept4$inet6(r1, 0x0, &(0x7f0000000240), 0x81800) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd1338160000000000000000", @ANYRES32=0x0, @ANYBLOB="08000500040000000500530001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 5.328681633s ago: executing program 3 (id=7036): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffa2b6}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f0000000580)=0xfedc) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) inotify_init() 5.035999963s ago: executing program 0 (id=7037): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x60, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.165382909s ago: executing program 0 (id=7038): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000100)=""/106, &(0x7f00000001c0)=0x6a) r2 = syz_io_uring_setup(0x245e, &(0x7f0000000840)={0x0, 0xdfef, 0x10100, 0x0, 0x40388, 0x0, r1}, &(0x7f0000000380)=0x0, &(0x7f0000002100)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x0, 0x3, 0xcfa8, 0xd, r5}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) 4.022813368s ago: executing program 3 (id=7039): socket$can_raw(0x1d, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000380)="8d7c0550b68928cd6f8d6fc44a60402470cf6bcbee4aa57d5b44f3101bbfd6c49fdfd652c1e66b899197758b29270ce267d0aa8722ffd0e2e9489cccf2cd651975658e7f7da5aef0c0b5d561c36669f28097", 0x52}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000500)}], 0x7}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f00000006c0)=[{&(0x7f00000004c0)="212d95bfae985135b1bdd65e776fe220cf9285647338f6fe4afb8a54f6e15ade50f306dc53a594f28240", 0x2a}, {&(0x7f0000000800)="ed3002a0591a9e33715280c55270f3dc274070505c61838567c8b7e9829ea6d83b87c4abcbf40f6b41b514b83637f29263111d86c5f7b4406ad6b08aa4a59faec49728dc66272ee5acb3d236d6c940c0c892de77cb582b5b19ffd878f0be9e557497f0b77e134d4392e7181ff6d9d29c16358eddcdeaac04a01b3bf46f8a3024c929bccd6a47d2c5d50b1420de3542fc8ba9bbc215308f1fe5664a50da59ec4a32f0b3dcaf6f390e16d9f5f37ff67101b061c562f96c623df1e01841a4fd8bfc9fe93dfba90aa6a89ea49c35fc716314668208eb9d041d58d1", 0xd9}, {&(0x7f00000001c0)="b1e6", 0x2}, {&(0x7f00000002c0)="76c79c09973384039c959d9b4767f7", 0xf}, {&(0x7f0000000440)}, {&(0x7f0000000900)="3bbfd11080704e603d41987bf0d2dd6b9d1b7bb259d8b0a9abefe77ed1199c8f44e87f41085c1b98b263012387e454867b4d857dffe587523aa2d427ec0e93d1da8b8649207cc4c75f6fd701f8375fd6b923fc4a64af23f72688d0471fb4b52717c062040ba594b225e43299119c64a1585cb2d9451502c4a1ae1c17ec4f9388ba43caa2742edd99f2889040d13b6ffe4ed0bd3cd9f08ea85a33ced22824b5068b0d3dacb410b58faf45a02f82d3272af50dd10fa45ca827640aa5e35d5ff3c5e96e637c8d5cba2b46e81b23411de0a2a9eced926bb9dc3efdd59ea6ab4359d19967817e1136296ae17595ea5ff6c0ea75a6ea0caaf0", 0xf6}, {&(0x7f0000000480)="d0d6d3a588af1000e8f2db", 0xb}], 0x7, 0xe, 0x200004) gettid() prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r7, 0x1000000, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) 2.888728714s ago: executing program 3 (id=7041): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0x8}, 0x8) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x80, 0x10}, 'port0\x00', 0x8, 0x1b0c63, 0x4007fff, 0x3, 0x1ff, 0x7, 0x9, 0x0, 0x0, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x80, 0x10}, 'port0\x00', 0x8, 0x1b0c63, 0x4007fff, 0x3, 0x1ff, 0x7, 0x9, 0x0, 0x0, 0x1}) syz_usb_connect(0x5, 0x51, &(0x7f0000000140)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63000000000009050300000000000009050cf2000002060209050f0000004000000905"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 2.786611466s ago: executing program 0 (id=7042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) 2.7811978s ago: executing program 2 (id=7043): shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xc]}, 0x8, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000140)=0x12) close(r3) io_uring_enter(0xffffffffffffffff, 0x2def, 0x9566, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x311, 0x22000000, 0x34343452, 0x1, 0xe5b, 0xd294, 0xc, 0x80800000, 0x1, 0x6}}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xb) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) syz_open_dev$vbi(0x0, 0x0, 0x2) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x25) recvmmsg(r6, &(0x7f00000008c0), 0x0, 0x10122, 0x0) 2.601449265s ago: executing program 0 (id=7044): syz_open_dev$hidraw(&(0x7f0000000080), 0x80000, 0x418400) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0) 1.002245132s ago: executing program 1 (id=7053): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) 982.881051ms ago: executing program 4 (id=7054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x22, 0x2, 0x21) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a0af36504001a0038021d001931a0e69ee517d34460bc06000000a70525", 0x2d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0120053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 808.255265ms ago: executing program 1 (id=7055): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8000) 807.973792ms ago: executing program 4 (id=7056): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000840)=@generic={0x0, r0}, 0x18) 701.269329ms ago: executing program 1 (id=7057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) 660.287613ms ago: executing program 4 (id=7058): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @rand_addr=0x64010102}}}], 0x20}, 0x4008804) 436.474925ms ago: executing program 4 (id=7059): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 343.552404ms ago: executing program 1 (id=7060): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x841}, 0x84) 265.883089ms ago: executing program 4 (id=7061): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) 132.430153ms ago: executing program 1 (id=7062): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000f000000070000000010"], 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f5c4e59f8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 107.950578ms ago: executing program 4 (id=7063): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000b6e000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@arm64={0x0, 0x1, 0xdf, '\x00', 0x2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x7c, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=7064): futex(&(0x7f000000cffc)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000)=0x7, 0x34fffffd) kernel console output (not intermixed with test programs): ig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc638f749 code=0x7ffc0000 [ 1685.682134][T25295] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1685.714543][T25295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.766507][T25295] usb 5-1: config 0 descriptor?? [ 1685.766696][ T5922] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1685.771794][ T30] audit: type=1326 audit(1765456489.873:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29214 comm="syz.4.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2bc638f749 code=0x7ffc0000 [ 1685.771855][ T30] audit: type=1326 audit(1765456489.873:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29214 comm="syz.4.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc638f749 code=0x7ffc0000 [ 1685.897722][ T5922] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1685.911827][T29219] netlink: 'syz.2.6707': attribute type 15 has an invalid length. [ 1685.955731][ T5922] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1685.992882][ T5922] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1686.023615][ T5922] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1686.067835][ T5922] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1686.081440][ T5922] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1686.093348][ T5922] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1686.133658][ T5922] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1686.159499][ T5922] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1686.317580][ T5922] usb 2-1: string descriptor 0 read error: -22 [ 1686.324147][ T5922] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1686.334263][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.357080][ T5922] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1687.318511][T27309] usb 4-1: USB disconnect, device number 81 [ 1687.756440][T29240] veth1_to_bond: entered allmulticast mode [ 1687.774051][T29237] veth1_to_bond: left allmulticast mode [ 1687.792112][T20875] usb 5-1: USB disconnect, device number 46 [ 1688.210182][T15440] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1688.560173][T15440] usb 3-1: Using ep0 maxpacket: 16 [ 1688.636504][T15440] usb 3-1: config 0 has no interfaces? [ 1688.645727][T15440] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1688.682127][T15440] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1688.703943][T20875] usb 2-1: USB disconnect, device number 68 [ 1688.732266][T15440] usb 3-1: Manufacturer: syz [ 1688.850847][T15440] usb 3-1: config 0 descriptor?? [ 1688.989713][T27309] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1689.149956][T19974] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1689.207442][T27309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1689.218917][T27309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1689.265581][T27309] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1689.290620][T27309] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1689.299882][T27309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.425597][T19974] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1689.454685][T27309] usb 5-1: config 0 descriptor?? [ 1689.468944][T19974] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1689.523865][T19974] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1689.595534][T19974] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1689.646915][T19974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1689.650126][T20875] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1689.682671][T19974] usb 1-1: Product: syz [ 1689.695101][T19974] usb 1-1: Manufacturer: syz [ 1689.717420][T19974] usb 1-1: SerialNumber: syz [ 1689.836004][T20875] usb 2-1: config 0 has no interfaces? [ 1689.861922][T20875] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1689.896274][T20875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.910055][T20875] usb 2-1: Product: syz [ 1689.915201][T20875] usb 2-1: Manufacturer: syz [ 1689.927382][T20875] usb 2-1: SerialNumber: syz [ 1689.946445][T20875] usb 2-1: config 0 descriptor?? [ 1689.965188][T19974] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1689.985222][T27309] acrux 0003:1A34:0802.005C: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 1690.036107][T27309] acrux 0003:1A34:0802.005C: no inputs found [ 1690.054784][T27309] acrux 0003:1A34:0802.005C: Failed to enable force feedback support, error: -19 [ 1690.486252][T29260] syzkaller1: entered promiscuous mode [ 1690.496253][T29260] syzkaller1: entered allmulticast mode [ 1690.625230][T29261] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.834205][T20875] usb 3-1: USB disconnect, device number 95 [ 1691.361942][T19975] usb 2-1: USB disconnect, device number 69 [ 1691.390823][T27309] usb 5-1: reset high-speed USB device number 47 using dummy_hcd [ 1691.813979][T29280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6720'. [ 1691.831363][T29280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6720'. [ 1691.840751][T29280] netlink: 'syz.3.6720': attribute type 6 has an invalid length. [ 1691.859224][T29280] netlink: 'syz.3.6720': attribute type 5 has an invalid length. [ 1691.860499][T25295] usb 1-1: USB disconnect, device number 62 [ 1691.949478][T25295] usblp0: removed [ 1692.322108][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1692.322126][ T30] audit: type=1326 audit(1765456497.283:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29283 comm="syz.1.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd61d8f749 code=0x7ffc0000 [ 1692.644769][ T30] audit: type=1326 audit(1765456497.283:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29283 comm="syz.1.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd61d8f749 code=0x7ffc0000 [ 1692.764687][ T30] audit: type=1326 audit(1765456497.403:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29283 comm="syz.1.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7efd61d8f749 code=0x7ffc0000 [ 1692.810122][T19975] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1692.911282][ T30] audit: type=1326 audit(1765456497.403:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29283 comm="syz.1.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd61d8f749 code=0x7ffc0000 [ 1692.990088][T19975] usb 1-1: Using ep0 maxpacket: 8 [ 1692.999097][T19975] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1693.020172][T19975] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1693.043319][ T30] audit: type=1326 audit(1765456497.403:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29283 comm="syz.1.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd61d8f749 code=0x7ffc0000 [ 1693.083146][T19975] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1693.159570][T19975] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1693.170734][ T30] audit: type=1326 audit(1765456497.403:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29283 comm="syz.1.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd61d8f749 code=0x7ffc0000 [ 1693.227995][T19975] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1693.266957][T19975] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1693.280072][ T30] audit: type=1326 audit(1765456497.403:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29283 comm="syz.1.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd61d91667 code=0x7ffc0000 [ 1693.423546][T19975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.480647][ T30] audit: type=1326 audit(1765456497.413:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29283 comm="syz.1.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7efd61d915dc code=0x7ffc0000 [ 1693.548202][T19974] usb 5-1: USB disconnect, device number 47 [ 1693.592939][ T30] audit: type=1326 audit(1765456497.413:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29283 comm="syz.1.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efd61d91514 code=0x7ffc0000 [ 1693.652546][ T30] audit: type=1326 audit(1765456497.413:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29283 comm="syz.1.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efd61d91514 code=0x7ffc0000 [ 1693.676098][T19975] usb 1-1: GET_CAPABILITIES returned 0 [ 1693.731389][T19975] usbtmc 1-1:16.0: can't read capabilities [ 1693.818621][T19975] usb 1-1: USB disconnect, device number 63 [ 1693.903391][T19974] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1694.099594][T19974] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1694.114619][T19974] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1694.159095][T19974] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1694.220085][T19974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.495386][T19974] usb 5-1: usb_control_msg returned -32 [ 1694.505788][T19974] usbtmc 5-1:16.0: can't read capabilities [ 1694.856600][T29322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.874369][T29322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.941572][T29322] syzkaller0: entered allmulticast mode [ 1695.259138][T15440] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1695.319311][T29335] macvlan1: entered promiscuous mode [ 1695.326125][T29335] macvlan1: entered allmulticast mode [ 1695.334502][T29335] veth1_vlan: entered allmulticast mode [ 1695.442633][T15440] usb 3-1: Using ep0 maxpacket: 16 [ 1695.456690][T15440] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1695.506726][T15440] usb 3-1: config 0 has no interface number 0 [ 1695.533390][T15440] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1695.563091][T15440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.581950][T15440] usb 3-1: Product: syz [ 1695.597547][T15440] usb 3-1: Manufacturer: syz [ 1695.611698][T15440] usb 3-1: SerialNumber: syz [ 1695.630686][T15440] usb 3-1: config 0 descriptor?? [ 1695.667771][T15440] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1696.110187][T25295] usb 5-1: USB disconnect, device number 48 [ 1696.507093][T15440] gspca_spca1528: reg_w err -71 [ 1696.539794][T29356] pimreg: entered allmulticast mode [ 1696.559887][T15440] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1696.581018][T15440] usb 3-1: USB disconnect, device number 96 [ 1696.660553][T25295] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1696.740269][T29360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6739'. [ 1696.832333][T25295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1696.852492][T25295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1696.880267][T25295] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1697.032739][T25295] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1697.043406][T25295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.059752][T15440] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1697.088852][T25295] usb 4-1: config 0 descriptor?? [ 1697.209835][T15440] usb 1-1: Using ep0 maxpacket: 8 [ 1697.274143][T15440] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1697.302815][T15440] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1697.333145][T15440] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1697.347896][T29369] delete_channel: no stack [ 1697.376104][T15440] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1697.401060][T15440] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1697.471487][T15440] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1697.491518][T15440] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.644280][T25295] acrux 0003:1A34:0802.005D: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 1697.684247][T25295] acrux 0003:1A34:0802.005D: no inputs found [ 1697.764013][T25295] acrux 0003:1A34:0802.005D: Failed to enable force feedback support, error: -19 [ 1697.830099][T25296] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1697.966107][T15440] usb 1-1: usb_control_msg returned -32 [ 1697.988014][T15440] usbtmc 1-1:16.0: can't read capabilities [ 1698.035957][T25296] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1698.077545][T25296] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1698.116615][T25296] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1698.208072][T25296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.484036][T29369] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1698.697105][T25296] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1698.850238][T19975] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1699.000531][T19975] usb 2-1: Using ep0 maxpacket: 16 [ 1699.065309][T19975] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1699.076593][T27309] usb 4-1: reset high-speed USB device number 82 using dummy_hcd [ 1699.085749][T19975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.534218][T19975] usb 2-1: Product: syz [ 1699.555871][T19975] usb 2-1: Manufacturer: syz [ 1699.573632][T19975] usb 2-1: SerialNumber: syz [ 1699.634031][T19975] usb 2-1: config 0 descriptor?? [ 1699.677697][T19975] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1699.724590][T19975] usb 2-1: Detected FT232H [ 1699.932107][T19975] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1700.448010][T19975] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1700.662419][T29376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.729140][T29376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1700.770362][T19975] usb 2-1: USB disconnect, device number 70 [ 1700.805173][T27180] usb 3-1: USB disconnect, device number 97 [ 1700.808482][T29386] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6745'. [ 1700.847097][T19975] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1700.894732][T29386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6745'. [ 1700.905753][T19975] ftdi_sio 2-1:0.0: device disconnected [ 1701.003603][T29386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6745'. [ 1701.037505][T29390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6746'. [ 1701.060701][T29386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6745'. [ 1701.081501][T19974] usb 4-1: USB disconnect, device number 82 [ 1701.135010][T29388] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2228224 (71303168 ns) > initial count (200000 ns). Using initial count to start timer. [ 1702.199783][T19975] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1702.379860][T19975] usb 3-1: Using ep0 maxpacket: 32 [ 1702.397956][T19975] usb 3-1: config 24 has an invalid interface number: 48 but max is 0 [ 1702.416596][T19975] usb 3-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.433332][T19975] usb 3-1: config 24 has no interface number 0 [ 1702.446639][T19975] usb 3-1: too many endpoints for config 24 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 1702.460997][T19975] usb 3-1: config 24 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1702.482542][T19975] usb 3-1: config 24 interface 48 has no altsetting 0 [ 1702.489708][T19975] usb 3-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d [ 1702.498953][T19975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.686558][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6754'. [ 1702.804173][T19975] usb 3-1: string descriptor 0 read error: -71 [ 1702.835197][T29416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6754'. [ 1702.873585][T19975] quatech2 3-1:24.48: Quatech 2nd gen USB to Serial Driver converter detected [ 1702.886841][T19975] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1702.894315][T19975] quatech2 3-1:24.48: probe with driver quatech2 failed with error -71 [ 1702.913170][T19975] usb 3-1: USB disconnect, device number 98 [ 1704.170154][T19975] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1704.342262][T19975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.377520][T19975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.412610][T19975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1704.498949][T19975] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1704.538530][T19975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.735857][T19975] usb 3-1: config 0 descriptor?? [ 1704.962319][T29432] IPVS: Unknown mcast interface: hsr0 [ 1705.010949][T29363] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 1705.089374][T19974] usb 1-1: USB disconnect, device number 64 [ 1705.207453][T19975] acrux 0003:1A34:0802.005E: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 1705.367095][T19975] acrux 0003:1A34:0802.005E: no inputs found [ 1705.406027][T19975] acrux 0003:1A34:0802.005E: Failed to enable force feedback support, error: -19 [ 1706.340207][T20875] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1706.492800][T20875] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.504497][T20875] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1706.602168][T20875] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1706.625363][T20875] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1706.665873][T20875] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1706.700882][T20875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.709796][T25295] usb 3-1: reset high-speed USB device number 99 using dummy_hcd [ 1706.732260][T29448] loop5: detected capacity change from 0 to 2695 [ 1706.855679][T26891] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1706.886505][T20875] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1706.896626][T20875] usb 1-1: invalid MIDI out EP 0 [ 1706.927735][T29448] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1706.995272][T26891] Buffer I/O error on dev loop5, logical block 336, async page read [ 1707.076568][T22348] udevd[22348]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1707.189001][T20875] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1707.277141][T26891] Buffer I/O error on dev loop5, logical block 336, async page read [ 1707.535846][T26891] Buffer I/O error on dev loop5, logical block 336, async page read [ 1707.599885][T20875] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1707.745290][T29464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6768'. [ 1707.756545][T20875] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1707.784020][T20875] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1707.805504][T20875] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1707.826942][T20875] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 1707.852819][T20875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.886729][T20875] usb 5-1: config 0 descriptor?? [ 1708.289832][T19974] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1708.302859][T25296] usb 3-1: USB disconnect, device number 99 [ 1708.450144][T19974] usb 4-1: Using ep0 maxpacket: 16 [ 1708.458642][T19974] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1708.469441][T19974] usb 4-1: config 1 has no interface number 0 [ 1708.476305][T19974] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1708.487283][T19974] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 1224, setting to 1024 [ 1708.514487][T19974] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1708.536941][T19974] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1708.559066][T19974] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1708.569200][T19974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.578876][T19974] usb 4-1: Product: syz [ 1708.586018][T19974] usb 4-1: Manufacturer: syz [ 1708.588145][T20875] uclogic 0003:28BD:0075.005F: interface is invalid, ignoring [ 1708.711579][T19975] usb 1-1: USB disconnect, device number 65 [ 1708.746601][T19974] usb 4-1: SerialNumber: syz [ 1708.762081][T29467] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1708.771340][T25296] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1708.782986][T29453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6764'. [ 1708.799280][T29467] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1708.931741][T15440] usb 5-1: USB disconnect, device number 49 [ 1708.969878][T25296] usb 3-1: device descriptor read/64, error -71 [ 1709.219933][T25296] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1709.320575][T29467] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1709.327897][T29467] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1709.359963][T25296] usb 3-1: device descriptor read/64, error -71 [ 1709.485927][T25296] usb usb3-port1: attempt power cycle [ 1709.735318][T29494] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6777'. [ 1709.829768][T25296] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1709.861628][T29499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6779'. [ 1709.886268][T25296] usb 3-1: device descriptor read/8, error -71 [ 1709.901688][T29500] loop5: detected capacity change from 0 to 1967 [ 1709.909518][T29500] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1709.988199][T29467] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1710.316053][T25296] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1710.381137][T25296] usb 3-1: device descriptor read/8, error -71 [ 1710.490951][T25296] usb usb3-port1: unable to enumerate USB device [ 1710.998034][T29512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6781'. [ 1711.170985][T29515] FAULT_INJECTION: forcing a failure. [ 1711.170985][T29515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1711.229747][T29515] CPU: 1 UID: 0 PID: 29515 Comm: syz.3.6783 Tainted: G L syzkaller #0 PREEMPT(full) [ 1711.229782][T29515] Tainted: [L]=SOFTLOCKUP [ 1711.229792][T29515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1711.229806][T29515] Call Trace: [ 1711.229815][T29515] [ 1711.229825][T29515] dump_stack_lvl+0x189/0x250 [ 1711.229860][T29515] ? __pfx____ratelimit+0x10/0x10 [ 1711.229890][T29515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1711.229918][T29515] ? __pfx__printk+0x10/0x10 [ 1711.229952][T29515] ? __might_fault+0xb0/0x130 [ 1711.229998][T29515] should_fail_ex+0x414/0x560 [ 1711.230033][T29515] _copy_from_user+0x2d/0xb0 [ 1711.230051][T29515] __sys_bpf+0x1e3/0x860 [ 1711.230075][T29515] ? __pfx___sys_bpf+0x10/0x10 [ 1711.230124][T29515] ? ksys_write+0x22a/0x250 [ 1711.230148][T29515] ? __pfx_ksys_write+0x10/0x10 [ 1711.230176][T29515] __x64_sys_bpf+0x7c/0x90 [ 1711.230200][T29515] do_syscall_64+0xfa/0xf80 [ 1711.230225][T29515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.230245][T29515] ? clear_bhb_loop+0x60/0xb0 [ 1711.230273][T29515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.230294][T29515] RIP: 0033:0x7f913238f749 [ 1711.230313][T29515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1711.230335][T29515] RSP: 002b:00007f91331d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1711.230353][T29515] RAX: ffffffffffffffda RBX: 00007f91325e5fa0 RCX: 00007f913238f749 [ 1711.230365][T29515] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000000 [ 1711.230375][T29515] RBP: 00007f91331d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1711.230385][T29515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1711.230398][T29515] R13: 00007f91325e6038 R14: 00007f91325e5fa0 R15: 00007f913270fa28 [ 1711.230433][T29515] [ 1711.414231][T19975] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1711.809127][T19975] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1712.029738][T25296] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1712.127965][T19975] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1712.178741][T19975] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1712.198133][T19975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.229759][T25296] usb 5-1: Using ep0 maxpacket: 8 [ 1712.241085][T25296] usb 5-1: config 162 has an invalid interface number: 161 but max is 1 [ 1712.243095][T19975] usb 2-1: config 0 descriptor?? [ 1712.250002][T25296] usb 5-1: config 162 has an invalid interface number: 187 but max is 1 [ 1712.263353][T25296] usb 5-1: config 162 has no interface number 0 [ 1712.270080][T25296] usb 5-1: config 162 has no interface number 1 [ 1712.279521][T25296] usb 5-1: config 162 interface 161 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1712.293250][T25296] usb 5-1: config 162 interface 187 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1712.304794][T25296] usb 5-1: config 162 interface 187 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1712.317047][T25296] usb 5-1: config 162 interface 187 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1712.501792][T25296] usb 5-1: config 162 interface 187 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1712.569869][T25296] usb 5-1: config 162 interface 187 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1712.602257][T25296] usb 5-1: config 162 interface 161 has no altsetting 0 [ 1712.625959][T25296] usb 5-1: config 162 interface 187 has no altsetting 0 [ 1712.677373][T25296] usb 5-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=62.b7 [ 1712.693637][T25296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.711796][T25296] usb 5-1: Product: syz [ 1712.731936][T25296] usb 5-1: Manufacturer: syz [ 1712.741631][T25296] usb 5-1: SerialNumber: syz [ 1713.179710][T20875] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1713.353443][T20875] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.403198][T29534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6781'. [ 1713.420456][T29534] ip6tnl0: entered promiscuous mode [ 1713.449932][T20875] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1713.479435][T20875] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1713.509803][T20875] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1713.551183][T20875] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1713.579211][T20875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.684831][T20875] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1713.694056][T20875] usb 3-1: invalid MIDI out EP 0 [ 1713.829237][T20875] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1713.988030][T22244] udevd[22244]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1714.105763][T25295] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 1714.280328][T25295] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1714.292725][T29541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6790'. [ 1714.302936][T25295] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1714.316743][T25295] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1714.335131][T25295] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1714.388818][T25295] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1714.492807][T29543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6791'. [ 1714.850485][T19974] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -110 [ 1714.889948][T19974] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1714.958246][T19974] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, de:a3:44:12:1f:ef [ 1715.065128][T19974] usb 2-1: USB disconnect, device number 71 [ 1715.180992][T25296] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1715.205220][T25296] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1715.385495][T25296] usb 5-1: USB disconnect, device number 50 [ 1715.931751][T29557] FAULT_INJECTION: forcing a failure. [ 1715.931751][T29557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1715.990056][T29557] CPU: 0 UID: 0 PID: 29557 Comm: syz.4.6795 Tainted: G L syzkaller #0 PREEMPT(full) [ 1715.990092][T29557] Tainted: [L]=SOFTLOCKUP [ 1715.990101][T29557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1715.990116][T29557] Call Trace: [ 1715.990124][T29557] [ 1715.990131][T29557] dump_stack_lvl+0x189/0x250 [ 1715.990157][T29557] ? __pfx____ratelimit+0x10/0x10 [ 1715.990186][T29557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1715.990215][T29557] ? __pfx__printk+0x10/0x10 [ 1715.990259][T29557] should_fail_ex+0x414/0x560 [ 1715.990290][T29557] _copy_to_user+0x31/0xb0 [ 1715.990309][T29557] simple_read_from_buffer+0xe1/0x170 [ 1715.990338][T29557] proc_fail_nth_read+0x1b3/0x220 [ 1715.990368][T29557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1715.990401][T29557] ? rw_verify_area+0x2a6/0x4d0 [ 1715.990423][T29557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1715.990442][T29557] vfs_read+0x200/0xa30 [ 1715.990457][T29557] ? fdget_pos+0x247/0x320 [ 1715.990481][T29557] ? __pfx___mutex_lock+0x10/0x10 [ 1715.990504][T29557] ? __pfx_vfs_read+0x10/0x10 [ 1715.990529][T29557] ? __fget_files+0x2a/0x420 [ 1715.990560][T29557] ? __fget_files+0x3a0/0x420 [ 1715.990585][T29557] ? __fget_files+0x2a/0x420 [ 1715.990611][T29557] ksys_read+0x145/0x250 [ 1715.990629][T29557] ? __pfx_ksys_read+0x10/0x10 [ 1715.990655][T29557] ? do_syscall_64+0xbe/0xf80 [ 1715.990692][T29557] do_syscall_64+0xfa/0xf80 [ 1715.990724][T29557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.990743][T29557] ? clear_bhb_loop+0x60/0xb0 [ 1715.990762][T29557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.990777][T29557] RIP: 0033:0x7f2bc638e15c [ 1715.990796][T29557] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1715.990817][T29557] RSP: 002b:00007f2bc716a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1715.990840][T29557] RAX: ffffffffffffffda RBX: 00007f2bc65e5fa0 RCX: 00007f2bc638e15c [ 1715.990856][T29557] RDX: 000000000000000f RSI: 00007f2bc716a0a0 RDI: 0000000000000003 [ 1715.990869][T29557] RBP: 00007f2bc716a090 R08: 0000000000000000 R09: 0000000000000000 [ 1715.990884][T29557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1715.990893][T29557] R13: 00007f2bc65e6038 R14: 00007f2bc65e5fa0 R15: 00007f2bc670fa28 [ 1715.990918][T29557] [ 1716.777836][T25295] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1716.881685][T25295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.942910][T25295] usb 1-1: can't set config #1, error -71 [ 1716.961135][T25295] usb 1-1: USB disconnect, device number 66 [ 1717.218084][T29568] pim6reg: entered allmulticast mode [ 1717.493091][T29573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6797'. [ 1717.946295][T20875] usb 3-1: USB disconnect, device number 104 [ 1718.190541][T25296] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1718.550603][T25296] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1718.568618][T25296] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 250, changing to 11 [ 1718.591797][T25296] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1718.620739][T25296] usb 5-1: string descriptor 0 read error: -22 [ 1718.628881][T25296] usb 5-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 1718.699310][T25296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.152208][ T5494] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -32 [ 1720.194628][ T5494] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -32 [ 1720.229717][ T5494] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -32 [ 1720.260313][ T5494] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -32 [ 1720.301255][ T5494] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -32 [ 1720.342531][ T5494] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -32 [ 1720.403776][ T5494] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -32 [ 1720.481335][T29595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6801'. [ 1720.781611][T29601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.791270][T29601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.811129][T29601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.917351][T25296] usbhid 5-1:1.0: can't add hid device: -71 [ 1720.936510][T25296] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1720.963907][T29601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1721.162202][T25296] usb 5-1: USB disconnect, device number 51 [ 1722.169830][T19974] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1722.393183][T29623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6805'. [ 1722.496196][T19974] usb 2-1: Using ep0 maxpacket: 16 [ 1722.658048][T19974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1722.676478][T19974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1722.706167][T29629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1722.742667][T29629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1722.759900][T27309] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1722.767630][T19975] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1722.816978][T19974] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1722.949693][T27309] usb 1-1: Using ep0 maxpacket: 16 [ 1722.994146][T27309] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1723.005686][T19975] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1723.046861][T19975] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1723.057272][T27309] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1723.078589][T19974] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1723.094092][T19975] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1723.104435][T27309] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1723.124900][T19974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.220782][T27309] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1723.229982][T19975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.307601][T27309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.316830][T19974] usb 2-1: config 0 descriptor?? [ 1723.324474][T19975] usb 5-1: config 0 descriptor?? [ 1723.351129][T27309] usb 1-1: config 0 descriptor?? [ 1723.502321][T19974] usb 2-1: can't set config #0, error -71 [ 1723.536862][T19974] usb 2-1: USB disconnect, device number 72 [ 1723.839007][T27309] apple 0003:05AC:0247.0060: unexpected long global item [ 1723.855152][T27309] apple 0003:05AC:0247.0060: parse failed [ 1723.868562][T27309] apple 0003:05AC:0247.0060: probe with driver apple failed with error -22 [ 1724.252934][T20875] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1724.484740][T20875] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.514724][T20875] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1724.537070][T20875] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1724.705641][T29645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6805'. [ 1724.837344][T20875] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1724.870917][T20875] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1724.896186][T20875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.937699][T20875] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1724.958212][T20875] usb 2-1: invalid MIDI out EP 0 [ 1725.160458][T20875] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1725.326338][T25299] usb 1-1: USB disconnect, device number 67 [ 1726.450999][T27180] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1726.510595][T27309] usb 5-1: USB disconnect, device number 52 [ 1726.609884][T27180] usb 1-1: Using ep0 maxpacket: 32 [ 1726.658803][T27180] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1726.669002][T27180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.691375][T27180] usb 1-1: Product: syz [ 1726.708082][T27180] usb 1-1: Manufacturer: syz [ 1726.736635][T27180] usb 1-1: SerialNumber: syz [ 1726.769378][T27180] usb 1-1: config 0 descriptor?? [ 1726.812141][T27180] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1727.382140][T27180] dvb-usb: bulk message failed: -22 (2/0) [ 1727.400600][T19974] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1727.431590][T27180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1727.472641][T27180] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1727.538388][T27180] usb 1-1: media controller created [ 1727.663126][T27180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1727.786171][T27180] usb 1-1: selecting invalid altsetting 7 [ 1727.812471][T27180] cxusb: set interface failed [ 1727.815478][T20875] usb 2-1: USB disconnect, device number 73 [ 1727.858119][T27180] dvb-usb: bulk message failed: -22 (1/0) [ 1728.108201][T29675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6814'. [ 1728.117483][T29677] netlink: 'syz.3.6816': attribute type 3 has an invalid length. [ 1728.152956][T27180] DVB: Unable to find symbol lgdt330x_attach() [ 1728.166291][T29677] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6816'. [ 1728.182059][T27180] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1728.430372][T27180] rc_core: IR keymap rc-dvico-portable not found [ 1728.446950][T27180] Registered IR keymap rc-empty [ 1728.497759][T27180] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1728.545501][T27180] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input129 [ 1728.559773][T19974] usb 5-1: device descriptor read/64, error -71 [ 1728.597229][T29691] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6820'. [ 1728.607527][T27180] dvb-usb: schedule remote query interval to 100 msecs. [ 1728.633840][T27180] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1728.697444][T29691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.708231][T29691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.743748][T27180] dvb-usb: bulk message failed: -22 (1/0) [ 1728.808825][T29694] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6820'. [ 1728.820311][T19974] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1728.880673][T27308] dvb-usb: bulk message failed: -22 (1/0) [ 1728.930322][T27180] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1729.010302][T27309] dvb-usb: bulk message failed: -22 (1/0) [ 1729.099880][T27180] usb 3-1: Using ep0 maxpacket: 16 [ 1729.143180][T27309] dvb-usb: bulk message failed: -22 (1/0) [ 1729.180490][T27180] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 1729.191505][T29702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1729.215493][T29698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6822'. [ 1729.224570][T29698] netlink: 'syz.1.6822': attribute type 7 has an invalid length. [ 1729.232474][T27180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 1729.270214][T27180] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1729.280858][T29698] netlink: 'syz.1.6822': attribute type 8 has an invalid length. [ 1729.280883][T29698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6822'. [ 1729.286706][T29702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1729.290175][T27309] dvb-usb: bulk message failed: -22 (1/0) [ 1729.356781][T27180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1729.368566][T27308] usb 1-1: USB disconnect, device number 68 [ 1729.410289][T27180] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1729.491302][T27180] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1729.542822][T27180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.587156][T27308] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1729.599655][T27180] usb 3-1: Product: syz [ 1729.610000][T27180] usb 3-1: Manufacturer: syz [ 1729.628535][T27180] usb 3-1: SerialNumber: syz [ 1729.661017][T27180] usb 3-1: config 0 descriptor?? [ 1729.685427][T29693] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1729.870930][T27180] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 1729.905129][T27180] mcba_usb 3-1:0.0 can0: couldn't start device: -90 [ 1730.050480][T27308] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1730.073702][T27180] mcba_usb 3-1:0.0: probe with driver mcba_usb failed with error -90 [ 1730.155245][T27180] usb 3-1: USB disconnect, device number 105 [ 1730.278656][T27308] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.335498][T27308] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1730.360407][T27308] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1730.386213][T27308] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1730.424161][T27308] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1730.436638][T27308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.459929][T20875] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1730.484446][T27308] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1730.494255][T27308] usb 1-1: invalid MIDI out EP 0 [ 1730.663509][T20875] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 1730.714796][T20875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.768645][T20875] usb 2-1: config 0 has no interface number 0 [ 1730.797973][T27308] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1730.799946][T20875] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1730.821438][T29718] netlink: 'syz.3.6827': attribute type 6 has an invalid length. [ 1730.909842][T20875] usb 2-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1730.977493][T20875] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1731.042737][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1731.042758][ T30] audit: type=1326 audit(1765456536.073:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29714 comm="syz.3.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1731.098608][T20875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.161393][T20875] usb 2-1: config 0 descriptor?? [ 1731.210924][ T30] audit: type=1326 audit(1765456536.073:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29714 comm="syz.3.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1731.215185][T20875] ttusbir 2-1:0.83: cannot find expected altsetting [ 1731.250083][ T30] audit: type=1326 audit(1765456536.073:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29714 comm="syz.3.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f913238de97 code=0x7ffc0000 [ 1731.329939][ T30] audit: type=1326 audit(1765456536.073:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29714 comm="syz.3.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1731.487945][T20875] usb 2-1: USB disconnect, device number 74 [ 1731.520862][ T30] audit: type=1326 audit(1765456536.073:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29714 comm="syz.3.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1731.577221][ T30] audit: type=1326 audit(1765456536.073:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29714 comm="syz.3.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1731.673480][ T30] audit: type=1326 audit(1765456536.073:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29714 comm="syz.3.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1731.752831][ T30] audit: type=1326 audit(1765456536.073:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29714 comm="syz.3.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1731.806281][ T30] audit: type=1326 audit(1765456536.073:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29714 comm="syz.3.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1731.910428][ T30] audit: type=1326 audit(1765456536.073:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29714 comm="syz.3.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1732.120257][T29738] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6833'. [ 1732.149705][T29738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.157427][T29738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.227118][T29740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6832'. [ 1732.301344][T29738] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6833'. [ 1732.659870][T20875] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1732.828785][T20875] usb 3-1: not running at top speed; connect to a high speed hub [ 1732.894343][T20875] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 1732.918459][T20875] usb 3-1: config 95 has no interface number 0 [ 1732.929522][T20875] usb 3-1: config 95 interface 1 has no altsetting 0 [ 1732.979961][T27309] usb 1-1: USB disconnect, device number 69 [ 1733.034719][T20875] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1733.089344][T20875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.120877][T20875] usb 3-1: Product: syz [ 1733.136017][T20875] usb 3-1: Manufacturer: syz [ 1733.150019][T20875] usb 3-1: SerialNumber: syz [ 1733.460822][T29740] team1: entered promiscuous mode [ 1733.465923][T29740] team1: entered allmulticast mode [ 1734.304974][T29768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6840'. [ 1735.413556][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.431367][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.549830][T19974] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1735.702772][T29784] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1735.751898][T19974] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1735.771184][T19974] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1735.812705][T19974] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1735.965798][T19974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.975133][T19974] usb 1-1: Product: syz [ 1735.979350][T19974] usb 1-1: Manufacturer: syz [ 1735.984467][T19974] usb 1-1: SerialNumber: syz [ 1736.027929][T19974] usb 1-1: config 0 descriptor?? [ 1736.115680][T19974] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1736.213023][T20875] usb 3-1: USB disconnect, device number 106 [ 1736.441066][T26891] udevd[26891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1736.714953][T29778] geneve2: entered promiscuous mode [ 1736.921646][T20875] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1737.039960][T19974] gspca_sunplus: reg_r err -110 [ 1737.062773][T19974] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 1737.193607][T20875] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.229825][T20875] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1737.261321][T20875] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1737.309714][T20875] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1737.343060][T25299] usb 1-1: USB disconnect, device number 70 [ 1737.357370][T20875] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1737.397254][T20875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.418427][T29807] block device autoloading is deprecated and will be removed. [ 1737.498997][T20875] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1737.535735][T29810] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6848'. [ 1737.550700][T20875] usb 5-1: invalid MIDI out EP 0 [ 1737.586181][T29810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.595095][T29810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.642497][T29813] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6848'. [ 1737.916989][T20875] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1738.082067][T22248] udevd[22248]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1738.250502][T29817] syz_tun: entered allmulticast mode [ 1738.265224][T29817] pimreg: entered allmulticast mode [ 1738.294198][T29816] syz_tun: left allmulticast mode [ 1739.122057][T27308] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1739.326617][T27308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1739.365966][T27308] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1739.382121][T27308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.429780][T27308] usb 2-1: Product: syz [ 1739.469857][T27308] usb 2-1: Manufacturer: syz [ 1739.552353][T27308] usb 2-1: SerialNumber: syz [ 1739.662587][T27308] usb 2-1: config 0 descriptor?? [ 1739.675872][T27308] hub 2-1:0.0: bad descriptor, ignoring hub [ 1739.706476][T27308] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1739.761607][T27308] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input133 [ 1739.901860][T29834] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6853'. [ 1740.165252][T29840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1740.183358][T29841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1740.206577][T29840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1740.229271][T29841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1740.280229][T27308] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1740.355311][T15440] usb 5-1: USB disconnect, device number 55 [ 1740.440201][T27308] usb 3-1: Using ep0 maxpacket: 8 [ 1740.454159][T27308] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1740.464521][T27308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.484514][T27308] usb 3-1: Product: syz [ 1740.494688][T27308] usb 3-1: Manufacturer: syz [ 1740.514623][T27308] usb 3-1: SerialNumber: syz [ 1740.548606][T27308] usb 3-1: config 0 descriptor?? [ 1740.562051][T27308] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1740.640559][T26770] raw-gadget.2 gadget.1: failed to queue suspend event [ 1740.762877][T29838] loop9: detected capacity change from 0 to 7 [ 1740.770704][T29838] Dev loop9: unable to read RDB block 7 [ 1740.777797][T29838] loop9: unable to read partition table [ 1740.799421][T29838] loop9: partition table beyond EOD, truncated [ 1740.823148][T29838] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1740.864505][T27308] gspca_vc032x: reg_r err -71 [ 1740.893652][T27308] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1740.958228][T27308] usb 3-1: USB disconnect, device number 107 [ 1741.738572][T27308] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1742.214986][T27308] usb 1-1: Using ep0 maxpacket: 16 [ 1742.233987][T29867] netlink: 'syz.4.6860': attribute type 11 has an invalid length. [ 1742.602032][T27308] usb 1-1: config 0 has no interfaces? [ 1742.751624][T29868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6860'. [ 1742.766685][T27308] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1742.789334][T27308] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1742.800416][T29825] raw-gadget.2 gadget.1: failed to queue disconnect event [ 1742.921275][T15440] usb 2-1: USB disconnect, device number 75 [ 1743.133844][T27308] usb 1-1: Manufacturer: syz [ 1743.246301][T27308] usb 1-1: config 0 descriptor?? [ 1743.739754][T20875] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1743.930311][T20875] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1743.954775][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1743.954794][ T30] audit: type=1326 audit(1765456548.983:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29878 comm="syz.3.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1743.985934][T20875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.010862][T20875] usb 2-1: Product: syz [ 1744.030069][T20875] usb 2-1: Manufacturer: syz [ 1744.042590][T20875] usb 2-1: SerialNumber: syz [ 1744.088674][T20875] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1744.108472][ T30] audit: type=1326 audit(1765456548.983:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29878 comm="syz.3.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1744.209305][T15440] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1744.248637][ T30] audit: type=1326 audit(1765456548.993:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29878 comm="syz.3.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1744.602925][ T30] audit: type=1326 audit(1765456548.993:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29878 comm="syz.3.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1744.629879][ T30] audit: type=1326 audit(1765456548.993:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29878 comm="syz.3.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1744.660723][ T30] audit: type=1326 audit(1765456548.993:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29878 comm="syz.3.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1744.723555][T29872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6861'. [ 1744.730390][T27180] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1744.822513][ T30] audit: type=1326 audit(1765456548.993:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29878 comm="syz.3.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1744.934552][ T30] audit: type=1326 audit(1765456548.993:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29878 comm="syz.3.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1745.039852][ T30] audit: type=1326 audit(1765456548.993:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29878 comm="syz.3.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1745.127159][T27180] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.138300][T27180] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1745.200948][ T30] audit: type=1326 audit(1765456548.993:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29878 comm="syz.3.6863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f913238f749 code=0x7ffc0000 [ 1745.250877][T27180] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1745.264700][T20875] usb 1-1: USB disconnect, device number 71 [ 1745.311174][T15440] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1745.350161][T15440] ath9k_htc: Failed to initialize the device [ 1745.385311][T27180] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1745.472565][T27180] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1745.474249][T15440] usb 2-1: ath9k_htc: USB layer deinitialized [ 1745.503375][T27180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.596434][T27180] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1745.618532][T27180] usb 5-1: invalid MIDI out EP 0 [ 1745.731250][T27309] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1745.948074][T27180] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1745.991320][T27309] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1746.010482][T27309] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1746.027397][T27309] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1746.049490][T27309] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1746.059996][T27309] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1746.099520][T27309] usb 1-1: Product: syz [ 1746.125447][T29872] team0 (unregistering): Port device team_slave_0 removed [ 1746.135696][T27309] usb 1-1: Manufacturer: syz [ 1746.144695][T27309] usb 1-1: SerialNumber: syz [ 1746.176748][T29872] team0 (unregistering): Port device team_slave_1 removed [ 1746.206319][T27309] usb 1-1: config 0 descriptor?? [ 1746.242480][T27309] hub 1-1:0.0: bad descriptor, ignoring hub [ 1746.258836][T27309] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1746.336022][T27309] usb 1-1: selecting invalid altsetting 0 [ 1746.653260][T25295] usb 2-1: USB disconnect, device number 76 [ 1746.773788][T27309] usb 1-1: USB disconnect, device number 72 [ 1747.004949][T22348] udevd[22348]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1747.039026][T29906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6870'. [ 1747.417757][T27309] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1747.574127][T27309] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1747.582509][T27309] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1747.650659][T19975] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1747.678924][T27309] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1747.689532][T27309] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1747.710713][T27309] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1747.718963][T27309] usb 1-1: Product: syz [ 1747.759884][T27309] usb 1-1: Manufacturer: syz [ 1747.779699][T27309] usb 1-1: SerialNumber: syz [ 1747.795705][T27309] usb 1-1: config 0 descriptor?? [ 1747.833522][T27309] hub 1-1:0.0: bad descriptor, ignoring hub [ 1747.843818][T27180] usb 5-1: USB disconnect, device number 56 [ 1747.858898][T27309] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1747.891617][T27309] usb 1-1: selecting invalid altsetting 0 [ 1747.919549][T19975] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1747.944459][T19975] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1748.000457][T19975] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1748.045257][T19975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.116690][T19975] usb 2-1: config 0 descriptor?? [ 1748.140017][T27180] usb 1-1: USB disconnect, device number 73 [ 1748.739818][T27180] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1748.909977][T27180] usb 5-1: Using ep0 maxpacket: 8 [ 1749.114167][T29908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6870'. [ 1749.605218][T27180] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1749.666525][T27180] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 1749.681600][T27180] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1749.698629][T27180] usb 5-1: config 4 has no interface number 0 [ 1749.720820][T20875] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1749.721997][T27180] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1749.738125][T27180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.754319][T27180] usb 5-1: Product: syz [ 1749.786616][T27180] usb 5-1: Manufacturer: syz [ 1749.794601][T27180] usb 5-1: SerialNumber: syz [ 1749.908493][T20875] usb 1-1: Using ep0 maxpacket: 16 [ 1750.265369][T20875] usb 1-1: config 0 has no interfaces? [ 1750.353893][T20875] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1750.366737][T27180] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1750.378205][T20875] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1750.396723][T27180] uvcvideo 5-1:4.147: No valid video chain found. [ 1750.426108][T27180] usb 5-1: USB disconnect, device number 57 [ 1750.529359][T20875] usb 1-1: Manufacturer: syz [ 1750.539810][T27309] usb 2-1: USB disconnect, device number 77 [ 1750.597279][T20875] usb 1-1: config 0 descriptor?? [ 1751.710294][T15440] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1752.145903][T15440] usb 2-1: Using ep0 maxpacket: 16 [ 1752.182763][T15440] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.260408][T15440] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1752.270078][T27309] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1752.328925][T29949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1752.337924][T29949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1752.404531][T15440] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1752.439937][T27309] usb 3-1: Using ep0 maxpacket: 16 [ 1752.447584][T15440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.478148][T27309] usb 3-1: config 0 has no interfaces? [ 1752.479054][T15440] usb 2-1: Product: syz [ 1752.496880][T27309] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1752.531603][T15440] usb 2-1: Manufacturer: syz [ 1752.546568][T15440] usb 2-1: SerialNumber: syz [ 1752.610299][T27309] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1752.619949][T27309] usb 3-1: Manufacturer: syz [ 1752.644469][T27309] usb 3-1: config 0 descriptor?? [ 1752.834522][T15440] usb 2-1: 0:2 : does not exist [ 1752.898032][T15440] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1752.965929][T15440] usb 2-1: USB disconnect, device number 78 [ 1753.091874][T26891] udevd[26891]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1753.222446][T20875] usb 1-1: USB disconnect, device number 74 [ 1753.494034][T29957] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6883'. [ 1753.699782][T15440] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1753.760143][T27180] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1753.869937][T15440] usb 1-1: device descriptor read/64, error -71 [ 1753.930438][T27180] usb 2-1: Using ep0 maxpacket: 32 [ 1753.941917][T27180] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1753.952032][T27180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.963458][T27180] usb 2-1: Product: syz [ 1753.967843][T27180] usb 2-1: Manufacturer: syz [ 1753.977290][T27180] usb 2-1: SerialNumber: syz [ 1754.009757][T27309] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1754.030725][T27180] usb 2-1: config 0 descriptor?? [ 1754.109746][T15440] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1754.169956][T27309] usb 5-1: Using ep0 maxpacket: 8 [ 1754.201525][T27309] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1754.215980][T27309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.232559][T27309] usb 5-1: Product: syz [ 1754.240779][T15440] usb 1-1: device descriptor read/64, error -71 [ 1754.254940][T27309] usb 5-1: Manufacturer: syz [ 1754.276067][T27309] usb 5-1: SerialNumber: syz [ 1754.283468][T29957] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2464837308 (9859349232 ns) > initial count (8647923304 ns). Using initial count to start timer. [ 1754.311958][T27309] usb 5-1: config 0 descriptor?? [ 1754.396357][T15440] usb usb1-port1: attempt power cycle [ 1754.448063][T27309] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1754.499151][T27180] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1754.508165][T27180] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1754.522102][T29959] loop9: detected capacity change from 0 to 7 [ 1754.532432][T29959] Dev loop9: unable to read RDB block 7 [ 1754.542953][T29959] loop9: unable to read partition table [ 1754.549179][T29959] loop9: partition table beyond EOD, truncated [ 1754.557196][T29959] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1754.579663][T27309] gspca_vc032x: reg_r err -71 [ 1754.587504][T27309] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 1754.625157][T27309] usb 5-1: USB disconnect, device number 58 [ 1754.641200][T27180] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 1754.657461][T27180] usb 2-1: USB disconnect, device number 79 [ 1754.759972][T15440] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1754.799343][T15440] usb 1-1: device descriptor read/8, error -71 [ 1754.956702][T27180] usb 3-1: USB disconnect, device number 108 [ 1755.052739][T15440] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1755.097280][T15440] usb 1-1: device descriptor read/8, error -71 [ 1755.225002][T15440] usb usb1-port1: unable to enumerate USB device [ 1755.517243][T29974] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6889'. [ 1755.609986][T27180] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1755.811480][T27180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1755.829945][T27180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1755.854236][T27180] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1755.867859][T29981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6889'. [ 1755.887050][T27180] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1755.890393][T29982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6890'. [ 1755.917647][T27180] usb 2-1: Manufacturer: syz [ 1755.941525][T29981] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1756.194220][T27180] usb 2-1: config 0 descriptor?? [ 1756.369868][T20875] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1756.592131][T20875] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1756.610998][T20875] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1756.630365][T20875] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1756.639488][T20875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.644455][T27180] pyra 0003:1E7D:2CF6.0061: unknown main item tag 0x0 [ 1756.679845][T27180] pyra 0003:1E7D:2CF6.0061: unknown main item tag 0x0 [ 1756.680171][T20875] usb 5-1: config 0 descriptor?? [ 1756.728690][T27180] pyra 0003:1E7D:2CF6.0061: unknown main item tag 0x0 [ 1756.767730][T27180] pyra 0003:1E7D:2CF6.0061: unknown main item tag 0x0 [ 1756.785314][T27180] pyra 0003:1E7D:2CF6.0061: unknown main item tag 0x0 [ 1756.803018][T27180] pyra 0003:1E7D:2CF6.0061: unknown main item tag 0x0 [ 1756.824350][T27180] pyra 0003:1E7D:2CF6.0061: unknown main item tag 0x0 [ 1756.910354][T29996] macvlan0: entered promiscuous mode [ 1756.916632][T29996] netlink: 'syz.2.6893': attribute type 1 has an invalid length. [ 1756.924557][T29996] netlink: 'syz.2.6893': attribute type 2 has an invalid length. [ 1756.970060][T27309] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1757.095588][T27180] pyra 0003:1E7D:2CF6.0061: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1757.161818][T27309] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1757.174051][T27309] usb 1-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1757.191125][T27309] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1757.204445][T27309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.254929][T27309] usb 1-1: Product: syz [ 1757.268250][T27309] usb 1-1: Manufacturer: syz [ 1757.283333][T27309] usb 1-1: SerialNumber: syz [ 1757.390237][T27309] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1757.413018][T27308] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1757.733886][T30001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6890'. [ 1758.031184][T15440] usb 1-1: USB disconnect, device number 79 [ 1758.404837][T27180] pyra 0003:1E7D:2CF6.0061: couldn't init struct pyra_device [ 1758.412619][T27180] pyra 0003:1E7D:2CF6.0061: couldn't install mouse [ 1758.426409][T27180] pyra 0003:1E7D:2CF6.0061: probe with driver pyra failed with error -32 [ 1758.465559][T27308] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1758.475462][T27308] ath9k_htc: Failed to initialize the device [ 1758.503828][T15440] usb 1-1: ath9k_htc: USB layer deinitialized [ 1758.813728][T29999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.831984][T29999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.846874][T20875] usb 5-1: USB disconnect, device number 59 [ 1758.959731][T25295] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1758.979806][T15440] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1759.066868][T30020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1759.079165][T30020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1759.139694][T15440] usb 1-1: Using ep0 maxpacket: 8 [ 1759.149805][T25295] usb 3-1: Using ep0 maxpacket: 16 [ 1759.158325][T15440] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1759.168927][T15440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.191592][T25295] usb 3-1: config 0 has no interfaces? [ 1759.202396][T15440] usb 1-1: Product: syz [ 1759.207911][T25295] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1759.219003][T15440] usb 1-1: Manufacturer: syz [ 1759.224201][T25295] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1759.232726][T15440] usb 1-1: SerialNumber: syz [ 1759.237678][T25295] usb 3-1: Manufacturer: syz [ 1759.246558][T15440] usb 1-1: config 0 descriptor?? [ 1759.258847][T25295] usb 3-1: config 0 descriptor?? [ 1759.272665][T15440] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1759.475609][T30011] loop9: detected capacity change from 0 to 7 [ 1759.503720][T30011] Dev loop9: unable to read RDB block 7 [ 1759.511071][T30011] loop9: unable to read partition table [ 1759.566318][T30011] loop9: partition table beyond EOD, truncated [ 1759.591899][T30011] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1759.622902][T15440] gspca_vc032x: reg_r err -71 [ 1759.628626][T15440] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 1759.659554][T15440] usb 1-1: USB disconnect, device number 80 [ 1759.948217][T27308] usb 2-1: USB disconnect, device number 80 [ 1760.609705][T20875] usb 1-1: new low-speed USB device number 81 using dummy_hcd [ 1760.819755][T20875] usb 1-1: device descriptor read/64, error -71 [ 1761.070865][T20875] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 1761.210947][T20875] usb 1-1: device descriptor read/64, error -71 [ 1761.486604][T20875] usb usb1-port1: attempt power cycle [ 1761.580296][T25295] usb 3-1: USB disconnect, device number 109 [ 1761.829880][T20875] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 1761.870651][T20875] usb 1-1: device descriptor read/8, error -71 [ 1762.019960][T25295] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1762.189742][T20875] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 1762.220516][T20875] usb 1-1: device descriptor read/8, error -71 [ 1762.227133][T22844] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1762.230286][T25295] usb 2-1: Using ep0 maxpacket: 16 [ 1762.246289][T25295] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1762.288888][T25295] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=a7.8c [ 1762.309408][T25295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.568282][T30074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.580544][T20875] usb usb1-port1: unable to enumerate USB device [ 1762.588133][T25295] usb 2-1: Product: syz [ 1762.601404][T25295] usb 2-1: Manufacturer: syz [ 1762.605394][T30074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.614665][T25295] usb 2-1: SerialNumber: syz [ 1762.618325][T30074] loop9: detected capacity change from 0 to 7 [ 1762.635922][T24025] Dev loop9: unable to read RDB block 7 [ 1762.642939][T24025] loop9: unable to read partition table [ 1762.649238][T24025] loop9: partition table beyond EOD, truncated [ 1762.658715][T30074] Dev loop9: unable to read RDB block 7 [ 1762.805252][T30074] loop9: unable to read partition table [ 1762.817973][T30074] loop9: partition table beyond EOD, truncated [ 1762.824561][T30074] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1762.855989][T25295] as10x_usb: device has been detected [ 1762.862533][T25295] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1762.882739][T25295] usb 2-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 1762.895298][T25295] as10x_usb: error during firmware upload part1 [ 1762.903258][T25295] Registered device Abilis Systems DVB-Titan [ 1762.914174][T25295] usb 2-1: USB disconnect, device number 81 [ 1762.998887][T25295] Unregistered device Abilis Systems DVB-Titan [ 1763.003234][T25295] as10x_usb: device has been disconnected [ 1764.020046][T27180] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1764.156304][T30104] netdevsim netdevsim0: Direct firmware load for / [ 1764.156304][T30104] failed with error -2 [ 1764.170494][T30104] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 1764.170494][T30104] [ 1764.189712][T27309] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1764.229823][T27180] usb 2-1: config 13 has an invalid interface number: 72 but max is 1 [ 1764.243008][T27180] usb 2-1: config 13 has an invalid interface number: 91 but max is 1 [ 1764.259654][T27180] usb 2-1: config 13 has no interface number 0 [ 1764.269153][T27180] usb 2-1: config 13 has no interface number 1 [ 1764.285776][T27180] usb 2-1: config 13 interface 72 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1764.323341][T27180] usb 2-1: config 13 interface 72 altsetting 5 endpoint 0xF has invalid wMaxPacketSize 0 [ 1764.349721][T27309] usb 3-1: Using ep0 maxpacket: 16 [ 1764.358848][T27180] usb 2-1: config 13 interface 72 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1764.370558][T27309] usb 3-1: config 0 has no interfaces? [ 1764.381291][T27309] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1764.411673][T27309] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1764.420622][T27180] usb 2-1: config 13 interface 72 altsetting 5 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1764.439783][T27309] usb 3-1: Manufacturer: syz [ 1764.445863][T27180] usb 2-1: config 13 interface 91 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1764.465306][T27309] usb 3-1: config 0 descriptor?? [ 1764.485299][T27180] usb 2-1: config 13 interface 91 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1764.518718][T27180] usb 2-1: config 13 interface 91 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 1764.561312][T27180] usb 2-1: config 13 interface 91 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 1764.615465][T27180] usb 2-1: config 13 interface 91 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 1764.646734][T27180] usb 2-1: config 13 interface 91 altsetting 6 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1764.669733][T27180] usb 2-1: config 13 interface 91 altsetting 6 endpoint 0xC has invalid maxpacket 1544, setting to 64 [ 1764.739717][T27180] usb 2-1: config 13 interface 91 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 1764.760036][T27180] usb 2-1: config 13 interface 91 altsetting 6 has a duplicate endpoint with address 0x8F, skipping [ 1764.856202][T27180] usb 2-1: config 13 interface 91 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 1764.936509][T27180] usb 2-1: config 13 interface 91 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 1764.994443][T27180] usb 2-1: config 13 interface 91 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 1765.081093][T27180] usb 2-1: config 13 interface 72 has no altsetting 0 [ 1765.110211][T27180] usb 2-1: config 13 interface 91 has no altsetting 0 [ 1765.124632][T27180] usb 2-1: New USB device found, idVendor=0bda, idProduct=018a, bcdDevice=db.6e [ 1765.135338][T27180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.144558][T27180] usb 2-1: Product: syz [ 1765.148893][T27180] usb 2-1: Manufacturer: syz [ 1765.155928][T27180] usb 2-1: SerialNumber: syz [ 1765.309845][T27309] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1765.375627][T30092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.384670][T30092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.395954][T30092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.405324][T30092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.429672][T27180] uvcvideo 2-1:13.91: Found UVC 0.00 device syz (0bda:018a) [ 1765.437943][T27180] uvcvideo 2-1:13.91: No valid video chain found. [ 1765.471382][T27309] usb 1-1: no configurations [ 1765.476057][T27309] usb 1-1: can't read configurations, error -22 [ 1765.486631][T27180] usb 2-1: USB disconnect, device number 82 [ 1765.489801][T25295] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1765.567856][T30124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.580419][T30124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.620438][T27309] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1766.103592][T27309] usb 1-1: no configurations [ 1766.205451][T30128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6928'. [ 1766.233601][T30128] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6928'. [ 1766.304488][T30128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.316427][T27309] usb 1-1: can't read configurations, error -22 [ 1766.323801][T30128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.337223][T25295] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 1766.349048][T25295] usb 5-1: can't read configurations, error -22 [ 1766.369558][T27309] usb usb1-port1: attempt power cycle [ 1766.480308][T25295] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1766.605619][T25299] usb 3-1: USB disconnect, device number 110 [ 1766.643135][T25295] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 1766.652101][T25295] usb 5-1: can't read configurations, error -22 [ 1766.670081][T25295] usb usb5-port1: attempt power cycle [ 1766.699771][T20875] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1766.729768][T27309] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1766.767699][T27309] usb 1-1: no configurations [ 1766.774850][T27309] usb 1-1: can't read configurations, error -22 [ 1766.859779][T20875] usb 2-1: Using ep0 maxpacket: 8 [ 1766.899341][T20875] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1766.908791][T20875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.930012][T27309] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1766.938083][T20875] usb 2-1: Product: syz [ 1766.947975][T20875] usb 2-1: Manufacturer: syz [ 1766.959438][T20875] usb 2-1: SerialNumber: syz [ 1766.968511][T27309] usb 1-1: no configurations [ 1766.969971][T20875] usb 2-1: config 0 descriptor?? [ 1766.978222][T27309] usb 1-1: can't read configurations, error -22 [ 1766.993626][T20875] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1766.995357][T27309] usb usb1-port1: unable to enumerate USB device [ 1767.029930][T25295] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1767.066791][T25295] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 1767.076837][T25295] usb 5-1: can't read configurations, error -22 [ 1767.184625][T30131] loop9: detected capacity change from 0 to 7 [ 1767.191935][T30131] Dev loop9: unable to read RDB block 7 [ 1767.197680][T30131] loop9: unable to read partition table [ 1767.205107][T30131] loop9: partition table beyond EOD, truncated [ 1767.211630][T30131] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1767.222672][T25295] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1767.231617][T20875] gspca_vc032x: reg_r err -71 [ 1767.243576][T20875] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1767.271942][T20875] usb 2-1: USB disconnect, device number 83 [ 1767.282502][T25295] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 1767.296365][T25295] usb 5-1: can't read configurations, error -22 [ 1767.305978][T25295] usb usb5-port1: unable to enumerate USB device [ 1767.370422][T25299] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 1767.532624][T25299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1767.542915][T25299] usb 3-1: New USB device found, idVendor=0b05, idProduct=1869, bcdDevice= 0.00 [ 1767.552216][T25299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.563341][T25299] usb 3-1: config 0 descriptor?? [ 1767.982417][T25299] asus 0003:0B05:1869.0062: unknown main item tag 0x0 [ 1767.992395][T25299] asus 0003:0B05:1869.0062: unknown main item tag 0x0 [ 1768.000970][T25299] asus 0003:0B05:1869.0062: unknown main item tag 0x0 [ 1768.047185][T25299] asus 0003:0B05:1869.0062: unknown main item tag 0x0 [ 1768.061132][T25299] asus 0003:0B05:1869.0062: unknown main item tag 0x0 [ 1768.083312][T25299] asus 0003:0B05:1869.0062: hidraw0: USB HID v0.00 Device [HID 0b05:1869] on usb-dummy_hcd.2-1/input0 [ 1768.107169][T25299] asus 0003:0B05:1869.0062: Asus input not registered [ 1768.125069][T25299] asus 0003:0B05:1869.0062: probe with driver asus failed with error -12 [ 1768.185796][T27309] usb 3-1: USB disconnect, device number 111 [ 1768.352599][T30138] fido_id[30138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1768.500668][T27180] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1768.849057][T27180] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1768.865943][T27180] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1768.884687][T27180] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1768.925339][T27180] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1768.950996][T27180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.100635][T27180] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1769.279782][T19975] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1769.416567][T27180] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1769.578084][T30156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.605673][T30156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.702497][T19975] usb 3-1: config index 0 descriptor too short (expected 8192, got 77) [ 1769.721751][T30157] tap0: tun_chr_ioctl cmd 2147767506 [ 1769.747342][T19975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.777364][T19975] usb 3-1: config 0 has no interfaces? [ 1769.800460][T30158] tap0: tun_chr_ioctl cmd 2147767506 [ 1769.833961][T19975] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1769.891873][T19975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.938010][T19975] usb 3-1: Product: syz [ 1769.953740][T19975] usb 3-1: Manufacturer: syz [ 1769.977174][T19975] usb 3-1: SerialNumber: syz [ 1770.007051][T19975] usb 3-1: config 0 descriptor?? [ 1770.091856][T20875] usb 1-1: USB disconnect, device number 89 [ 1770.262213][T30161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6938'. [ 1770.293076][T30161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1770.514549][T30161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1772.734595][T30185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6943'. [ 1773.912066][T19975] usb 3-1: USB disconnect, device number 112 [ 1774.423727][T30194] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6944'. [ 1774.640016][T25295] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1774.939736][T25295] usb 3-1: Using ep0 maxpacket: 16 [ 1774.949550][T25295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1774.998185][T25295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1775.029734][T20875] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1775.083792][T25295] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1775.179683][T25295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.272350][T20875] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.301314][T20875] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1775.311131][T25295] usb 3-1: config 0 descriptor?? [ 1775.360963][T20875] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1775.373208][T20875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1775.394640][T20875] usb 5-1: SerialNumber: syz [ 1775.760463][T25295] apple 0003:05AC:024B.0063: unknown main item tag 0x7 [ 1775.774586][T25295] apple 0003:05AC:024B.0063: unbalanced collection at end of report description [ 1775.803573][T25295] apple 0003:05AC:024B.0063: parse failed [ 1775.822231][T25295] apple 0003:05AC:024B.0063: probe with driver apple failed with error -22 [ 1775.917255][T20875] usb 5-1: 0:2 : does not exist [ 1776.014300][T30206] input: syz1 as /devices/virtual/input/input137 [ 1776.274736][T20875] usb 5-1: USB disconnect, device number 64 [ 1776.343467][T26891] udevd[26891]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1776.414056][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1776.414076][ T30] audit: type=1326 audit(1765456581.443:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30192 comm="syz.2.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f942292b829 code=0x7ffc0000 [ 1776.477101][ T30] audit: type=1326 audit(1765456581.443:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30192 comm="syz.2.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942298f749 code=0x7ffc0000 [ 1776.616277][ T30] audit: type=1326 audit(1765456581.443:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30192 comm="syz.2.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f942292b829 code=0x7ffc0000 [ 1776.804757][ T30] audit: type=1326 audit(1765456581.453:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30192 comm="syz.2.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942298f749 code=0x7ffc0000 [ 1776.958244][ T30] audit: type=1326 audit(1765456581.453:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30192 comm="syz.2.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942298f749 code=0x7ffc0000 [ 1777.064682][ T30] audit: type=1326 audit(1765456581.453:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30192 comm="syz.2.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f942292b829 code=0x7ffc0000 [ 1777.185761][ T30] audit: type=1326 audit(1765456581.453:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30192 comm="syz.2.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942298f749 code=0x7ffc0000 [ 1777.282433][ T30] audit: type=1326 audit(1765456581.453:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30192 comm="syz.2.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f942292b829 code=0x7ffc0000 [ 1777.378385][ T30] audit: type=1326 audit(1765456581.453:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30192 comm="syz.2.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f942292b829 code=0x7ffc0000 [ 1777.460703][ T30] audit: type=1326 audit(1765456581.453:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30192 comm="syz.2.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f942292b829 code=0x7ffc0000 [ 1777.732060][T25299] usb 3-1: USB disconnect, device number 113 [ 1777.953317][T30231] tipc: Started in network mode [ 1777.958302][T30231] tipc: Node identity 2e461099ff44, cluster identity 4711 [ 1777.965718][T30231] tipc: Enabled bearer , priority 0 [ 1778.012030][T30231] syzkaller0: entered promiscuous mode [ 1778.036144][T30231] syzkaller0: entered allmulticast mode [ 1778.103028][T30231] tipc: Resetting bearer [ 1778.111312][T30230] tipc: Resetting bearer [ 1778.182613][T30230] tipc: Disabling bearer [ 1778.239703][T19975] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1778.395642][T19975] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1778.408260][T19975] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1778.462560][T19975] usb 1-1: config 220 has no interface number 2 [ 1778.468948][T19975] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1778.505419][T19975] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1778.530089][T19975] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1778.561733][T19975] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1778.571945][T19975] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1778.589188][T19975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.688190][T19975] usb 1-1: Product: syz [ 1778.699687][T19975] usb 1-1: Manufacturer: syz [ 1778.743587][T19975] usb 1-1: SerialNumber: syz [ 1779.006431][T30233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.040392][T30233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.075726][T30233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.084860][T27180] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1779.124355][T30233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.163944][T30234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.184605][T30234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.300353][T27180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1779.321945][T27180] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1779.337691][T27180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.413275][T19975] usb 1-1: selecting invalid altsetting 0 [ 1779.419284][T27180] usb 3-1: Product: syz [ 1779.426607][T19975] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1779.443733][T27180] usb 3-1: Manufacturer: syz [ 1779.448691][T19975] uvcvideo 1-1:220.0: No valid video chain found. [ 1779.458726][T27180] usb 3-1: SerialNumber: syz [ 1779.459843][T25299] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1779.471749][T27180] usb 3-1: config 0 descriptor?? [ 1779.494103][T19975] usb 1-1: selecting invalid altsetting 0 [ 1779.503325][T27180] hub 3-1:0.0: bad descriptor, ignoring hub [ 1779.509895][T19975] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1779.589896][T27180] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1779.610556][T27180] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input138 [ 1779.666185][T30251] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6960'. [ 1779.687659][T19975] usb 1-1: USB disconnect, device number 90 [ 1779.689883][T25299] usb 2-1: Using ep0 maxpacket: 8 [ 1779.710027][T25299] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1779.728188][T25299] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1779.740181][T25299] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1779.800170][T25299] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1779.832536][T25299] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1779.850542][T30252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6960'. [ 1779.893177][T30252] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1779.958110][T25299] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1780.338533][T25299] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1780.350072][T25299] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1780.361946][T25299] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1780.373325][T25299] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1780.387527][T25299] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1780.395189][T25299] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1780.406577][T25299] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1780.419888][T25299] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1780.431282][T25299] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1780.445574][T25299] usb 2-1: string descriptor 0 read error: -22 [ 1780.452290][T25299] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1780.461444][T25299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.495848][T25299] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1781.048873][T30257] loop5: detected capacity change from 0 to 1399 [ 1781.086925][T30257] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1781.467486][T30262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6962'. [ 1781.736035][T30262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.818534][T30262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.844626][T30262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6962'. [ 1781.854592][T30262] ip6tnl0: entered promiscuous mode [ 1781.886079][T27180] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1782.057562][T27180] usb 5-1: config 255 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1782.069820][T27180] usb 5-1: config 255 interface 0 has no altsetting 0 [ 1782.077423][T27180] usb 5-1: New USB device found, idVendor=04f2, idProduct=c534, bcdDevice= 0.00 [ 1782.114339][T27180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.124737][T30271] bridge_slave_0: left allmulticast mode [ 1782.143086][T19975] usb 2-1: USB disconnect, device number 84 [ 1782.161592][T30271] bridge_slave_0: left promiscuous mode [ 1782.197628][T30271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.217420][T30272] netlink: 'syz.2.6966': attribute type 10 has an invalid length. [ 1782.276811][T30273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6966'. [ 1782.302753][T30271] bridge_slave_1: left allmulticast mode [ 1782.321286][T30271] bridge_slave_1: left promiscuous mode [ 1782.327392][T30271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.376884][T30271] bond0: (slave bond_slave_0): Releasing backup interface [ 1782.425584][T30271] bond0: (slave bond_slave_1): Releasing backup interface [ 1782.457523][T30271] team0: Port device team_slave_0 removed [ 1782.474974][T30271] team0: Port device team_slave_1 removed [ 1782.500776][T30271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1782.519812][T30271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1782.542292][T30271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1782.560608][T30271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1782.583482][T30271] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1782.620203][T25297] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1782.646139][T30272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1782.662976][T30272] team0: Port device bond0 added [ 1782.792537][T25297] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1782.802001][T27180] usb 5-1: string descriptor 0 read error: -71 [ 1782.811297][T25297] usb 1-1: config 0 has no interface number 0 [ 1782.815137][T27180] usbhid 5-1:255.0: can't add hid device: -71 [ 1782.827818][T27180] usbhid 5-1:255.0: probe with driver usbhid failed with error -71 [ 1782.827862][T25297] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1782.892913][T25297] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1782.895680][T27180] usb 5-1: USB disconnect, device number 65 [ 1782.923242][T25297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.942843][T25297] usb 1-1: Product: syz [ 1782.989782][T25297] usb 1-1: Manufacturer: syz [ 1782.994656][T25297] usb 1-1: SerialNumber: syz [ 1783.030107][T25297] usb 1-1: config 0 descriptor?? [ 1783.242701][T30273] team0 (unregistering): Port device bond0 removed [ 1783.673928][T25297] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1783.692549][T25297] usb 1-1: USB disconnect, device number 91 [ 1783.742261][T15440] usb 3-1: USB disconnect, device number 114 [ 1783.963770][T15440] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1784.109750][T15440] usb 3-1: device descriptor read/64, error -71 [ 1784.249694][T27180] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 1784.350052][T15440] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1784.448236][T27180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1784.468254][T30302] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6974'. [ 1784.519754][T15440] usb 3-1: device descriptor read/64, error -71 [ 1784.645738][T30303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6974'. [ 1784.662795][T30303] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1784.723742][T15440] usb usb3-port1: attempt power cycle [ 1785.999707][T15440] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1786.020480][T15440] usb 3-1: device descriptor read/8, error -71 [ 1786.062668][T30309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1786.075115][T30312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6977'. [ 1786.085896][T30311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6977'. [ 1786.097321][T30311] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6977'. [ 1786.161502][T27180] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1786.180257][T30309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1786.190640][T27180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.205404][T27180] usb 2-1: Product: syz [ 1786.225456][T30309] loop9: detected capacity change from 0 to 7 [ 1786.229662][T27180] usb 2-1: Manufacturer: syz [ 1786.236218][T27180] usb 2-1: SerialNumber: syz [ 1786.251440][T26891] Dev loop9: unable to read RDB block 7 [ 1786.259860][T26891] loop9: unable to read partition table [ 1786.266013][T26891] loop9: partition table beyond EOD, truncated [ 1786.275491][T27180] usb 2-1: config 0 descriptor?? [ 1786.279835][T15440] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1786.289554][T30309] Dev loop9: unable to read RDB block 7 [ 1786.299050][T27180] hub 2-1:0.0: bad descriptor, ignoring hub [ 1786.301568][T30309] loop9: unable to read partition table [ 1786.309069][T27180] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1786.321036][T15440] usb 3-1: device descriptor read/8, error -71 [ 1786.346739][T30309] loop9: partition table beyond EOD, truncated [ 1786.362325][T30309] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1786.368066][T27180] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input140 [ 1786.433738][T15440] usb usb3-port1: unable to enumerate USB device [ 1786.523571][T30316] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6979'. [ 1786.949819][T25296] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1787.149847][T25296] usb 3-1: Using ep0 maxpacket: 16 [ 1787.169232][T25296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.213408][T25296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1787.233901][T25296] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1787.268205][T25296] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1787.323014][T25299] usb 2-1: USB disconnect, device number 85 [ 1787.350774][T25296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.385700][T25296] usb 3-1: config 0 descriptor?? [ 1787.457412][T30332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6985'. [ 1787.735759][T30341] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6987'. [ 1787.839391][T25296] microsoft 0003:045E:07DA.0064: unknown main item tag 0x0 [ 1787.852100][T25296] microsoft 0003:045E:07DA.0064: unknown main item tag 0x0 [ 1787.860198][T25296] microsoft 0003:045E:07DA.0064: unknown main item tag 0x0 [ 1787.914332][T25296] microsoft 0003:045E:07DA.0064: unknown main item tag 0x0 [ 1787.926348][T25296] microsoft 0003:045E:07DA.0064: unknown main item tag 0x0 [ 1788.069698][T25296] microsoft 0003:045E:07DA.0064: unknown main item tag 0x0 [ 1788.077038][T25296] microsoft 0003:045E:07DA.0064: unknown main item tag 0x0 [ 1788.096802][T25296] microsoft 0003:045E:07DA.0064: unknown main item tag 0x0 [ 1788.111777][T25296] microsoft 0003:045E:07DA.0064: unknown main item tag 0x0 [ 1788.119219][T30341] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1788.169798][T15446] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1788.288246][T25296] microsoft 0003:045E:07DA.0064: unknown main item tag 0x0 [ 1788.316146][T25296] microsoft 0003:045E:07DA.0064: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1788.406552][T25296] microsoft 0003:045E:07DA.0064: no inputs found [ 1788.449884][T25296] microsoft 0003:045E:07DA.0064: could not initialize ff, continuing anyway [ 1788.461977][T15446] usb 5-1: Using ep0 maxpacket: 8 [ 1788.491671][T15446] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1788.510867][T15446] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1788.531462][T15446] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1788.543959][T15446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.616938][T15446] usb 5-1: Product: syz [ 1788.629185][T15446] usb 5-1: Manufacturer: Я [ 1788.647367][T15446] usb 5-1: SerialNumber: syz [ 1788.946809][T15446] cdc_ncm 5-1:1.0: bind() failure [ 1788.971443][T15446] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1789.010011][T15446] cdc_ncm 5-1:1.1: bind() failure [ 1789.035588][T15446] usb 5-1: USB disconnect, device number 66 [ 1789.663317][T30359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.663919][T27308] usb 3-1: USB disconnect, device number 119 [ 1789.675283][T30359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.761867][T30363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6992'. [ 1789.860266][T19975] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1790.024649][T19975] usb 1-1: Using ep0 maxpacket: 16 [ 1790.044074][T19975] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.064414][T19975] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1790.077357][T19975] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1790.087825][T19975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.098403][T19975] usb 1-1: Product: syz [ 1790.105675][T19975] usb 1-1: Manufacturer: syz [ 1790.110720][T19975] usb 1-1: SerialNumber: syz [ 1790.119688][T27308] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1790.269866][T27308] usb 3-1: Using ep0 maxpacket: 16 [ 1790.278227][T27308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1790.291063][T27308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1790.303273][T27308] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1790.319157][T27308] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1790.319793][T25299] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1790.328428][T27308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.437989][T19975] usb 1-1: 0:2 : does not exist [ 1790.450597][T19975] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1790.501387][T27308] usb 3-1: config 0 descriptor?? [ 1790.551881][T19975] usb 1-1: USB disconnect, device number 92 [ 1790.625300][T26891] udevd[26891]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1790.650130][T25299] usb 2-1: Using ep0 maxpacket: 32 [ 1790.657674][T25299] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1790.677484][T25299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.722436][T25299] usb 2-1: config 0 descriptor?? [ 1790.747532][T25299] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1790.960000][T27308] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0065/input/input142 [ 1791.050627][T30376] netlink: 'syz.3.6996': attribute type 13 has an invalid length. [ 1791.150388][T25299] gspca_sq930x: ucbus_write failed -71 [ 1791.186608][T25299] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 1791.190455][T27308] microsoft 0003:045E:07DA.0065: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1791.284268][T25299] usb 2-1: USB disconnect, device number 86 [ 1791.293404][T27308] usb 3-1: USB disconnect, device number 120 [ 1791.465853][T30382] fido_id[30382]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1791.685136][T30385] loop5: detected capacity change from 0 to 11311 [ 1791.785899][T30385] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1791.991865][T26891] Buffer I/O error on dev loop5, logical block 1413, async page read [ 1792.249760][T19975] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1792.458796][T30395] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7001'. [ 1792.646717][T30395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7001'. [ 1792.768471][T19975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1792.803188][T30398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7002'. [ 1792.888706][T19975] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1792.908254][T19975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.934833][T19975] usb 2-1: Product: syz [ 1792.942489][T19975] usb 2-1: Manufacturer: syz [ 1793.025908][T19975] usb 2-1: SerialNumber: syz [ 1793.059146][T19975] usb 2-1: config 0 descriptor?? [ 1793.076879][T30395] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1793.101613][T19975] hub 2-1:0.0: bad descriptor, ignoring hub [ 1793.108487][T19975] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1793.124736][T19975] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input143 [ 1794.359738][T20875] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1794.519708][T20875] usb 5-1: Using ep0 maxpacket: 16 [ 1794.531949][T20875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.572368][T20875] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1794.589729][T20875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.623531][T15446] usb 2-1: USB disconnect, device number 87 [ 1794.645877][T20875] usb 5-1: Product: syz [ 1794.651396][T20875] usb 5-1: Manufacturer: syz [ 1794.685313][T20875] usb 5-1: SerialNumber: syz [ 1794.732430][T20875] usb 5-1: config 0 descriptor?? [ 1794.747858][T20875] mcba_usb 5-1:0.0: Can't find endpoints [ 1794.900706][T30427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7009'. [ 1794.952476][T30422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.962183][T30422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1794.986318][T19975] usb 5-1: USB disconnect, device number 67 [ 1795.302903][T30444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7013'. [ 1795.314793][T30444] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7013'. [ 1796.720889][T19975] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1796.854520][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.863031][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.095325][T19975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1797.154551][T19975] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1797.184916][T19975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.335487][T19975] usb 5-1: Product: syz [ 1797.379079][T19975] usb 5-1: Manufacturer: syz [ 1797.403782][T19975] usb 5-1: SerialNumber: syz [ 1797.469475][T19975] usb 5-1: config 0 descriptor?? [ 1797.705539][T19975] hub 5-1:0.0: bad descriptor, ignoring hub [ 1797.808525][T19975] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1797.888148][T19975] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input144 [ 1798.228571][T30493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.237704][T30493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.351353][T29984] raw-gadget.1 gadget.4: failed to queue suspend event [ 1799.609922][T30498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7025'. [ 1799.866017][T30502] loop4: detected capacity change from 0 to 2559 [ 1799.889347][T30502] Buffer I/O error on dev loop4, logical block 0, async page read [ 1799.912780][T30502] Buffer I/O error on dev loop4, logical block 0, async page read [ 1799.944284][T30502] Buffer I/O error on dev loop4, logical block 0, async page read [ 1799.976920][T30502] loop4: unable to read partition table [ 1800.004858][T30502] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾¢·˜) failed (rc=-5) [ 1800.006440][T30503] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 1800.064113][T26891] Buffer I/O error on dev loop4, logical block 319, async page read [ 1800.085830][T30503] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 1800.146761][T30503] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 1800.260554][T30503] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 1800.269019][T30503] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 1800.291074][T30505] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7027'. [ 1800.333951][T30509] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7028'. [ 1800.362284][T30503] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 1800.528372][ T5199] ldm_validate_partition_table(): Disk read failed. [ 1800.551450][ T5199] Dev loop4: unable to read RDB block 0 [ 1800.570080][ T5199] loop4: unable to read partition table [ 1800.758627][T30466] raw-gadget.1 gadget.4: failed to queue disconnect event [ 1800.870983][T27308] usb 5-1: USB disconnect, device number 68 [ 1800.878407][T30516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7030'. [ 1801.429710][T27308] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1801.599665][T27308] usb 5-1: Using ep0 maxpacket: 32 [ 1801.644796][T27308] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1801.679693][T27308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.691809][T27308] usb 5-1: Product: syz [ 1801.696074][T27308] usb 5-1: Manufacturer: syz [ 1801.729823][T27308] usb 5-1: SerialNumber: syz [ 1801.763085][T27308] usb 5-1: config 0 descriptor?? [ 1801.788340][T27308] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1801.798998][T27308] dvb-usb: bulk message failed: -22 (2/0) [ 1801.807918][T27308] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1801.823315][T27308] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1801.851722][T27308] usb 5-1: media controller created [ 1801.914491][T27308] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1802.023233][T27308] usb 5-1: selecting invalid altsetting 7 [ 1802.068613][T27308] cxusb: set interface failed [ 1802.085066][T27308] dvb-usb: bulk message failed: -22 (1/0) [ 1802.652492][T27308] DVB: Unable to find symbol lgdt330x_attach() [ 1802.681814][T27308] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1802.911734][T27308] rc_core: IR keymap rc-dvico-portable not found [ 1802.930517][T27308] Registered IR keymap rc-empty [ 1802.957091][T27308] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1803.144027][T27308] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input146 [ 1803.192767][T27308] dvb-usb: schedule remote query interval to 100 msecs. [ 1803.376461][T27308] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1803.525448][T27308] dvb-usb: bulk message failed: -22 (1/0) [ 1803.613389][T30557] fuse: Bad value for 'fd' [ 1803.661943][T27308] dvb-usb: bulk message failed: -22 (1/0) [ 1803.872409][T27308] dvb-usb: bulk message failed: -22 (1/0) [ 1803.999861][T27308] dvb-usb: bulk message failed: -22 (1/0) [ 1804.120170][T27308] dvb-usb: bulk message failed: -22 (1/0) [ 1804.250036][T27308] dvb-usb: bulk message failed: -22 (1/0) [ 1804.292335][T30561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1804.305988][T30561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1804.359956][T27308] dvb-usb: bulk message failed: -22 (1/0) [ 1804.492752][T27308] dvb-usb: bulk message failed: -22 (1/0) [ 1804.635653][T27308] dvb-usb: bulk message failed: -22 (1/0) [ 1804.652646][T15446] usb 5-1: USB disconnect, device number 69 [ 1804.779701][T27308] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1804.810058][T19975] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1804.825156][T15446] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1804.973814][T27308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1804.990028][T19975] usb 1-1: Using ep0 maxpacket: 8 [ 1805.020664][T19975] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.031187][T27308] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1805.043493][T27308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.056543][T19975] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1805.075561][T27308] usb 3-1: Product: syz [ 1805.085850][T19975] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1805.103633][T27308] usb 3-1: Manufacturer: syz [ 1805.123057][T27308] usb 3-1: SerialNumber: syz [ 1805.141716][T19975] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1805.154356][T27308] usb 3-1: config 0 descriptor?? [ 1805.188388][T27308] hub 3-1:0.0: bad descriptor, ignoring hub [ 1805.219282][T19975] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1805.233753][T27308] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1805.241144][T19975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.254052][T27308] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input147 [ 1805.272875][T19975] hub 1-1:1.0: bad descriptor, ignoring hub [ 1805.287986][T19975] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1805.300887][T19975] cdc_wdm 1-1:1.0: skipping garbage [ 1805.318796][T19975] cdc_wdm 1-1:1.0: skipping garbage [ 1805.337329][T19975] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1805.364063][T19975] cdc_wdm 1-1:1.0: Unknown control protocol [ 1805.780178][T25299] usb 1-1: USB disconnect, device number 93 [ 1806.101225][T30589] delete_channel: no stack [ 1806.109736][T27308] usb 1-1: new low-speed USB device number 94 using dummy_hcd [ 1806.262267][T27308] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.272723][T27308] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1806.307938][T27308] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1806.364450][T27308] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1806.395285][T27308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.416120][T30570] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1806.432324][T27308] hub 1-1:1.0: bad descriptor, ignoring hub [ 1806.442066][T27308] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1806.446380][T30599] tap0: tun_chr_ioctl cmd 1074025677 [ 1806.469989][T30599] tap0: linktype set to 804 [ 1806.483370][T27308] cdc_wdm 1-1:1.0: skipping garbage [ 1806.502624][T27308] cdc_wdm 1-1:1.0: skipping garbage [ 1806.525337][T27308] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1806.560976][T27308] cdc_wdm 1-1:1.0: Unknown control protocol [ 1806.637319][T27308] usb 1-1: USB disconnect, device number 94 [ 1807.067993][T30609] kvm: pic: non byte write [ 1807.078803][T30609] ------------[ cut here ]------------ [ 1807.084509][T30609] WARNING: arch/x86/kvm/x86.c:11592 at vcpu_run+0x748a/0x76b0, CPU#0: syz.4.7063/30609 [ 1807.095870][T30609] Modules linked in: [ 1807.102009][T30609] CPU: 0 UID: 0 PID: 30609 Comm: syz.4.7063 Tainted: G L syzkaller #0 PREEMPT(full) [ 1807.114236][T30609] Tainted: [L]=SOFTLOCKUP [ 1807.118616][T30609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1807.128813][T30609] RIP: 0010:vcpu_run+0x748a/0x76b0 [ 1807.134707][T30609] Code: 48 83 c3 20 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 16 02 00 00 44 88 33 eb 10 e8 be a0 7a 00 eb 09 e8 b7 a0 7a 00 90 <0f> 0b 90 45 31 e4 48 c7 84 24 00 03 00 00 0e 36 e0 45 48 8b 84 24 [ 1807.154443][T30609] RSP: 0018:ffffc9000bbef560 EFLAGS: 00010287 [ 1807.160576][T30609] RAX: ffffffff81470ff9 RBX: 00000000fffffff0 RCX: 0000000000080000 [ 1807.168685][T30609] RDX: ffffc9000c881000 RSI: 0000000000000471 RDI: 0000000000000472 [ 1807.176756][T30609] RBP: ffffc9000bbef990 R08: ffff8880213a72e7 R09: 1ffff11004274e5c [ 1807.185183][T30609] R10: dffffc0000000000 R11: ffffed1004274e5d R12: 1ffff110042f358e [ 1807.193365][T30609] R13: ffff88802179a940 R14: ffff88802179a978 R15: dffffc0000000000 [ 1807.201402][T30609] FS: 00007f2bc716a6c0(0000) GS:ffff888125e3a000(0000) knlGS:0000000000000000 [ 1807.211320][T30609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1807.217945][T30609] CR2: 000000110c342dd3 CR3: 00000000786ee000 CR4: 00000000003526f0 [ 1807.227325][T30609] Call Trace: [ 1807.230713][T30609] [ 1807.233698][T30609] ? vcpu_run+0x9c5/0x76b0 [ 1807.238245][T30609] ? __pfx_vcpu_run+0x10/0x10 [ 1807.243043][T30609] ? vmx_get_cs_db_l_bits+0x49/0x160 [ 1807.248362][T30609] ? kvm_pmu_trigger_event+0xbc/0x6f0 [ 1807.253943][T30609] ? skip_emulated_instruction+0x40b/0x5b0 [ 1807.260024][T30609] ? __pfx_complete_fast_pio_out+0x10/0x10 [ 1807.265896][T30609] kvm_arch_vcpu_ioctl_run+0x1148/0x1c90 [ 1807.271606][T30609] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1807.277345][T30609] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1807.283468][T30609] ? rcu_is_watching+0x15/0xb0 [ 1807.288246][T30609] ? trace_contention_end+0x39/0x100 [ 1807.293586][T30609] ? __mutex_lock+0x335/0x1350 [ 1807.298372][T30609] ? kasan_quarantine_put+0xdd/0x220 [ 1807.303734][T30609] ? lockdep_hardirqs_on+0x98/0x140 [ 1807.310117][T30609] ? kvm_vcpu_ioctl+0x269/0xed0 [ 1807.315026][T30609] ? __pfx___mutex_lock+0x10/0x10 [ 1807.321250][T30609] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1807.326954][T30609] ? do_vfs_ioctl+0xbe8/0x1430 [ 1807.331765][T30609] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1807.337415][T30609] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1807.342493][T30609] kvm_vcpu_ioctl+0x99a/0xed0 [ 1807.347192][T30609] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1807.352454][T30609] ? do_futex+0x333/0x420 [ 1807.356818][T30609] ? __fget_files+0x2a/0x420 [ 1807.361507][T30609] ? __fget_files+0x3a0/0x420 [ 1807.366214][T30609] ? __fget_files+0x2a/0x420 [ 1807.370884][T30609] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1807.375870][T30609] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1807.381116][T30609] __se_sys_ioctl+0xfc/0x170 [ 1807.385757][T30609] do_syscall_64+0xfa/0xf80 [ 1807.390305][T30609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.396382][T30609] ? clear_bhb_loop+0x60/0xb0 [ 1807.401120][T30609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.407048][T30609] RIP: 0033:0x7f2bc638f749 [ 1807.412435][T30609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1807.433311][T30609] RSP: 002b:00007f2bc716a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1807.441823][T30609] RAX: ffffffffffffffda RBX: 00007f2bc65e5fa0 RCX: 00007f2bc638f749 [ 1807.449958][T30609] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1807.457965][T30609] RBP: 00007f2bc6413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1807.466012][T30609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1807.474037][T30609] R13: 00007f2bc65e6038 R14: 00007f2bc65e5fa0 R15: 00007f2bc670fa28 [ 1807.482172][T30609] [ 1807.485206][T30609] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1807.492506][T30609] CPU: 0 UID: 0 PID: 30609 Comm: syz.4.7063 Tainted: G L syzkaller #0 PREEMPT(full) [ 1807.503453][T30609] Tainted: [L]=SOFTLOCKUP [ 1807.507780][T30609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1807.517869][T30609] Call Trace: [ 1807.521163][T30609] [ 1807.524103][T30609] dump_stack_lvl+0x99/0x250 [ 1807.528741][T30609] ? __asan_memcpy+0x40/0x70 [ 1807.533366][T30609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1807.538949][T30609] ? __pfx__printk+0x10/0x10 [ 1807.543616][T30609] vpanic+0x237/0x6d0 [ 1807.547618][T30609] ? __pfx_vpanic+0x10/0x10 [ 1807.552131][T30609] ? is_bpf_text_address+0x292/0x2b0 [ 1807.557421][T30609] ? is_bpf_text_address+0x26/0x2b0 [ 1807.562723][T30609] panic+0xb9/0xc0 [ 1807.566483][T30609] ? __pfx_panic+0x10/0x10 [ 1807.571121][T30609] __warn+0x317/0x4b0 [ 1807.575148][T30609] ? vcpu_run+0x748a/0x76b0 [ 1807.579684][T30609] ? vcpu_run+0x748a/0x76b0 [ 1807.584222][T30609] __report_bug+0x288/0x500 [ 1807.588735][T30609] ? kasan_save_track+0x3e/0x80 [ 1807.593593][T30609] ? kasan_save_free_info+0x46/0x50 [ 1807.598808][T30609] ? __kasan_slab_free+0x5c/0x80 [ 1807.603750][T30609] ? vcpu_run+0x748a/0x76b0 [ 1807.608270][T30609] ? __pfx___report_bug+0x10/0x10 [ 1807.613409][T30609] ? rcuwait_wake_up+0x1c/0x230 [ 1807.618307][T30609] ? rcuwait_wake_up+0x1c/0x230 [ 1807.623256][T30609] ? vcpu_run+0x748a/0x76b0 [ 1807.627781][T30609] report_bug+0x16a/0x220 [ 1807.632218][T30609] ? vcpu_run+0x748a/0x76b0 [ 1807.636747][T30609] ? vcpu_run+0x748c/0x76b0 [ 1807.641280][T30609] handle_bug+0x98/0x200 [ 1807.645549][T30609] exc_invalid_op+0x1a/0x50 [ 1807.650073][T30609] asm_exc_invalid_op+0x1a/0x20 [ 1807.654960][T30609] RIP: 0010:vcpu_run+0x748a/0x76b0 [ 1807.660123][T30609] Code: 48 83 c3 20 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 16 02 00 00 44 88 33 eb 10 e8 be a0 7a 00 eb 09 e8 b7 a0 7a 00 90 <0f> 0b 90 45 31 e4 48 c7 84 24 00 03 00 00 0e 36 e0 45 48 8b 84 24 [ 1807.679747][T30609] RSP: 0018:ffffc9000bbef560 EFLAGS: 00010287 [ 1807.685825][T30609] RAX: ffffffff81470ff9 RBX: 00000000fffffff0 RCX: 0000000000080000 [ 1807.693802][T30609] RDX: ffffc9000c881000 RSI: 0000000000000471 RDI: 0000000000000472 [ 1807.701868][T30609] RBP: ffffc9000bbef990 R08: ffff8880213a72e7 R09: 1ffff11004274e5c [ 1807.709854][T30609] R10: dffffc0000000000 R11: ffffed1004274e5d R12: 1ffff110042f358e [ 1807.717858][T30609] R13: ffff88802179a940 R14: ffff88802179a978 R15: dffffc0000000000 [ 1807.725850][T30609] ? vcpu_run+0x7489/0x76b0 [ 1807.730393][T30609] ? vcpu_run+0x9c5/0x76b0 [ 1807.734901][T30609] ? __pfx_vcpu_run+0x10/0x10 [ 1807.739603][T30609] ? vmx_get_cs_db_l_bits+0x49/0x160 [ 1807.744947][T30609] ? kvm_pmu_trigger_event+0xbc/0x6f0 [ 1807.750333][T30609] ? skip_emulated_instruction+0x40b/0x5b0 [ 1807.756148][T30609] ? __pfx_complete_fast_pio_out+0x10/0x10 [ 1807.761987][T30609] kvm_arch_vcpu_ioctl_run+0x1148/0x1c90 [ 1807.767662][T30609] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 1807.773404][T30609] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1807.779408][T30609] ? rcu_is_watching+0x15/0xb0 [ 1807.784189][T30609] ? trace_contention_end+0x39/0x100 [ 1807.789485][T30609] ? __mutex_lock+0x335/0x1350 [ 1807.794275][T30609] ? kasan_quarantine_put+0xdd/0x220 [ 1807.799604][T30609] ? lockdep_hardirqs_on+0x98/0x140 [ 1807.804849][T30609] ? kvm_vcpu_ioctl+0x269/0xed0 [ 1807.809724][T30609] ? __pfx___mutex_lock+0x10/0x10 [ 1807.814775][T30609] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1807.820449][T30609] ? do_vfs_ioctl+0xbe8/0x1430 [ 1807.825256][T30609] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1807.830938][T30609] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1807.835975][T30609] kvm_vcpu_ioctl+0x99a/0xed0 [ 1807.840671][T30609] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1807.845882][T30609] ? do_futex+0x333/0x420 [ 1807.850265][T30609] ? __fget_files+0x2a/0x420 [ 1807.854879][T30609] ? __fget_files+0x3a0/0x420 [ 1807.859623][T30609] ? __fget_files+0x2a/0x420 [ 1807.864281][T30609] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1807.869244][T30609] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1807.874458][T30609] __se_sys_ioctl+0xfc/0x170 [ 1807.879069][T30609] do_syscall_64+0xfa/0xf80 [ 1807.883594][T30609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.889685][T30609] ? clear_bhb_loop+0x60/0xb0 [ 1807.894393][T30609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.900296][T30609] RIP: 0033:0x7f2bc638f749 [ 1807.904717][T30609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1807.924332][T30609] RSP: 002b:00007f2bc716a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1807.932765][T30609] RAX: ffffffffffffffda RBX: 00007f2bc65e5fa0 RCX: 00007f2bc638f749 [ 1807.940743][T30609] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1807.948731][T30609] RBP: 00007f2bc6413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1807.956707][T30609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1807.964770][T30609] R13: 00007f2bc65e6038 R14: 00007f2bc65e5fa0 R15: 00007f2bc670fa28 [ 1807.972766][T30609] [ 1807.976162][T30609] Kernel Offset: disabled [ 1807.980494][T30609] Rebooting in 86400 seconds..