last executing test programs: 16.763066986s ago: executing program 3 (id=1895): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = dup(r1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x7, 0x209, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000280), 0x0}, 0x20) (async) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000e00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@loopback]}]}}}], 0x18}}], 0x1, 0x0) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) (async) write$P9_RMKDIR(r2, &(0x7f0000000000)={0x14, 0x49, 0x1, {0xc8, 0x2, 0x8}}, 0x14) (async) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000060000001400000008000300", @ANYRES32=r9, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x44084}, 0x0) 13.961855654s ago: executing program 3 (id=1905): syz_usb_connect(0x0, 0xa7, &(0x7f0000000640)=ANY=[@ANYBLOB="1201062592d7c610f00a31704378010203010902"], &(0x7f0000000e00)={0x0, 0x0, 0x17, &(0x7f0000000b40)=ANY=[@ANYBLOB="050f090003"]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3d, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) 12.419936542s ago: executing program 3 (id=1914): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00038e0000008e03"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x20, 0xc, 0xe9, {0xe9, 0x22, "3c7a2beb288b1998f4f20795d4afce5efcf3307a9b7c20869f8a102ca445ff47349c13f255e99a28d9fb40098ed56fa1837503c5c7ed362168422c77b8d729090c2a51e26ef5534289b0f7ce3514cb16e5d77694ddca18c0420cb6cf2e5b91793a94b79ac2e63591042b26c8a285e8d472aa35a71ae673d52bd9bba8108a42864ae0a9dd6d6822d4f2d1083f516c0bd1cf87e3bd0f31a25a2304b4a77608c8d5c479cb4c694a852e2fc8f2439e6d5cd1b636b5192d43a85ac4d576813ffbec53a083ab6e83df860425123ec393c4ef5a06c625cedbdbfae11c36d9309b573cecdc1035d52f452c"}}, &(0x7f0000000240)={0x0, 0x3, 0x67, @string={0x67, 0x3, "e7ef34d46227d875bac24784f1cde5c3af32e076c7db28d912af5d7df87dbc12a5c2cb107d798acf673f2ede2cdcaf295d0e902af62b3c45b3f6c84073f2a41e87140e7b7796da58256b2fe6fbf144a28abfb2c29db1fea30c4329d2d8c84726bc81ca678f"}}, &(0x7f0000001480)=ANY=[@ANYBLOB="000f46000000050f46000424100a0ca60000000ff08100303fff006000ff00000000000f7eff00003f00003f60ff0003100b0a10030201006e0d000610100a06810f000000000100c000ff009738187a7587e87eb751e90057003af724403b3cdf886cb80f7eccc0534b32259b387ee3053ba3"], &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x8, 0x2, 0x7, "293c9556", "716b0010"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x4, 0x7, 0x8, 0x5c0, 0x1}}}, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x60, 0x3, 0x82, "7b5e97c8e5e403091606e2bbf0d2fb90858522fee34321b9bc98a640d88fe3c2aebff534cb282230d1a8ba5ec5e8dc7c8d76f86faed7afc59eb3130490307d9308f51972c5029e8c700e6ee0595eb645a55614a8f9e164d4d0b48f4aa6c6ec382c38165230d0869a264070b2b7dbae974bcf02aaec3be819894ce7c2a57bcafb1891"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x0, 0x20, [0xff00]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000640)={0x40, 0xb, 0x2, "4afb"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0xffff}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x17, 0x6, @local}, &(0x7f0000000740)={0x40, 0x19, 0x2, "00a3"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0xe80}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x40}}) 9.548694157s ago: executing program 3 (id=1923): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000100)='./file0\x00', 0x70000588) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) io_setup(0x401, &(0x7f00000002c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x598}) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x200000, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b0400000000000400000221e50000005c000480580001800a000100696e6e65720000004800028008000246fb718fa723dbdd40000000840800034000000007080004400000000f080001400000000024000580090001006d657460fffffffffc0002800800024000000010080001400000000c031a4012d1e6520900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a51b1732324e158786d13c79e941cf2f893f7e22219702753eed0a52d06962643"], 0xb0}}, 0x0) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000090600000000000000000000000083d2e47aa50f63b159fefcce5bbe783da465e6bcde091f399121deda97acfce805aff8044df7fe02e788bad31292b1c15acb85c11bc4b136d10177bda8c35194742141c366", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008001f0005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 6.148333585s ago: executing program 4 (id=1935): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x80000000000000, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r2}}, 0x20) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000000000)='7', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, 0x0) r5 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r5, &(0x7f0000000a40)=[{&(0x7f0000000680)="67bc", 0x2}], 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc1918, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x1, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x81, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x0, 0x7, 0x3, 0x0, 0x8, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea6, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x7fffffff, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x8, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xe2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0xb, 0x6, 0x1c, 0x120000, 0x3, 0x4, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0xb, 0x3, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10083, 0x6cc, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xe, 0xb1c, 0x4, 0x200, 0xffff3441, 0xffe]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12015002000000962505a8a44000010203010902240001014070fc0904000601070101ac090501022010fb06100905820210000f0705b18d968de4d6b1983e723b6832f4a63bb9d934276cd62b37fd65ff667d82b1762641c430928e8006953c107e2c86f9dbaeabee2087a703ff9999d8c5d335fa584b15ea2f793e2bde7a09ebe8cc3e78a73af3256dd4c7d67a35861c8c519f295144aca7bfda6d68fe02a5e2416f91b4724bb6e28b8ff9e3b28ec21da4180fba5211d0c81aef378fd900c8cb5f4d34edbeb047993c90395f4d292f256a07696ab12bb410addd174fde140a"], &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x2, 0x5, 0x9, 0x40, 0xff}, 0x2f, &(0x7f00000009c0)=ANY=[@ANYBLOB="050f038fc9dacba183b9f559b462fc0e2ae4662dbe0f9fccfc1d618d051b21a272180710021680cd000a10030008000709"], 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x419}}, {0x45, &(0x7f0000000140)=ANY=[@ANYBLOB="45035f13b27085b499d714c5c1dcb72b1db756239439b70788fdf7fd877e91a2fea4e93f87f1bb4d507494717be9a2c297fa7e466eed7f3a05b738"]}, {0xca, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]}]}) 5.942303554s ago: executing program 3 (id=1936): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000035c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000780)=[0x0]) dup3(r5, r3, 0x0) r7 = memfd_create(&(0x7f0000000480)='syz0\x00', 0x5) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000004c0)={r7, 0x1, 0x0, 0xfffffffff0000000}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x40, 0x2, 0x20, {0x20, 0x2, "69b3abb89f2554b46d6a321c5f21888794f7c43244de001555e7c6a18761"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0xb, '\x00@'}, @main=@item_4={0x3, 0x0, 0x8, "e6fd8ffa"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xb, 0x1, {0x22, 0xa89}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x20, 0x39, 0x92, "72f287b00ae6b5f520845788ad04cb3ed0e6f2fea261ef178a783262dcff2f512ae20c6939c27462ddc128ff6b36026e0a4b435b586c6b30ada1ea7be1c030d757d7adb54ef1adc63a1ee1ed1b2b71730dcb4f86e240cf6a544545f257b290d3575619f0e2d4a6c45f5554d8858f694da01be2762611d492c7bdf676d950810dfa580354a8279cf94c39f3034ff497d75ece"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000003c0)={0x20, 0x1, 0x51, "1b5d9b5f98f5b08c3c435c66960a7e87ec11ed8e96235e4f330ff1f3ced2ceb96781a1147da43ee09d65395bacaf83abd96dec19a58c39b6cc0c6a2b7c9dd1e2686957c057a4424bca87e4f05dd045a245"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x9}}) 5.125741634s ago: executing program 1 (id=1938): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000390326bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="1800168014000180100006"], 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x0) 5.086470354s ago: executing program 1 (id=1939): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x24000010, &(0x7f0000000040)={0xa, 0x1, 0xfffffbfd, @remote, 0x81}, 0x1c) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xe404, 0x980) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000080)={0x0, 0x25c7, 0x101, 0x3, '\x00', '\x00', '\x00', 0x5ba, 0x10001, 0x8, 0x7, "b9f454a7ac5295569593b257f0ba8a01"}) 5.020995666s ago: executing program 1 (id=1940): r0 = syz_clone(0x40000000, &(0x7f0000000180)="043c578b607e93c8b48550792dc67451e7aa38100dedf2d7246f90f94e70ad80e1dde7671171368ede869771ddbc77df36793faaeb1b57985a4a1a980174f0c8c19a063da11fa187089a3a99b28eda0a20947394081990fa396b1efbf34483af85d4f5cf6faa8448998bfdcf4bd6bc67ce6f329ceec22bf95c912e1dc8f66283c8df1a8820c3b3d7b7cc36034f8d4b212a3bf7e0987f71164ca056", 0x9b, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000240)="5932b88b792e271f916cb2a2961b52494787ee8a7287542f740d7b1f20a9065197eae797f9decfab487e63fd948ecfb6edf252165d0f4ed8d9d6953f41e099409d6a93b87b5b20b88e3ee04ff5355fce222ed509f050650640db085e6f93b7676adb97f809d89a76bcd653d4ca86e69cd1b4c065bb8fdb150e0404") ioprio_set$pid(0x3, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) sendfile(r2, r2, 0x0, 0x20003) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) (async) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000000000000000086dd602c96ed00203c00fe800000000000000000000000000000fe8000000000000000000000000000aa0003000000000000c910fc"], 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, 0x0, 0x0) (async) semop(0x0, &(0x7f0000000000)=[{0x2, 0x4000, 0x1000}, {0x0, 0x0, 0x2000}], 0x2) semtimedop(0x0, &(0x7f00000002c0)=[{0x4, 0x1, 0x1800}], 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) 4.439824396s ago: executing program 2 (id=1944): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060003000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007"], 0x6c}}, 0x840) 4.067873336s ago: executing program 2 (id=1945): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103df000905050008000200e5090501020800010000072501", @ANYRES16=r0], 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x6282, &(0x7f0000000080)) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) (async) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x3, 0x1, 0x1, 0xfffffffffffffffc, 0x2, 0x5, 0x0, 0x6, 0x2, 0x0, 0x2, 0x6], 0x2000, 0x98302}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0xa05e, 0x10, 0x4, 0x2cf}, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x2, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000044}, 0x20000004) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) (rerun: 32) 3.875050722s ago: executing program 1 (id=1947): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r2 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='//', 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/189, 0xbd}, 0x5}], 0x1, 0x42, 0x0) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x40600) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname$netlink(r4, 0x0, &(0x7f0000001640)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="866da11f", @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="04005b00"], 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x10, 0x6, 0x5b0, 0x290, 0xd0, 0x1a0, 0x1a0, 0x0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff00, 0xff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x73, 0x81, 0x2, 0x64}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x4e0}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, @ipv6=@private0, 0xd, 0x25, 0x162b}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x84}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@hbh={{0x48}, {0x8001, 0x6, 0x0, [0x3, 0x2, 0x1, 0x8, 0xd850, 0x8000, 0x0, 0x2bd8, 0x6, 0x7, 0x9, 0x3, 0x1, 0x1, 0xb30, 0xa2f6], 0xf}}, @common=@frag={{0x30}, {[0x6, 0x800], 0x5, 0xe, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x6, @ipv4=@private=0xa010101, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r13 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12210000000000402505a8a440000102030109021b0009050502000200000092b5086dc90b14c4c7f0eb8ff090bb2f2e07ee96f6c1af04f4580761e4dbd369995d79f9ddb4daa74d371a6333f5ce273a55cbdc37cf96ca991398d5979e722f1c4b05a5ac7e0d2016e97bb9aa5f1f308649402616c56c4aac"], 0x0) syz_usb_control_io$printer(r13, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r14 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r15 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r14, &(0x7f0000000080)={0x2000001e}) syz_clone(0x4147000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) 3.732359635s ago: executing program 2 (id=1949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090503"], 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x3f6) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xf}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.569426549s ago: executing program 3 (id=1951): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000008000000e27f00000100000009000000", @ANYRES32, @ANYRES8, @ANYRES16, @ANYRES32, @ANYBLOB], 0x85) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000c40)={0x20, 0x0, &(0x7f0000000c00)=[{0x5c51da2279bf4027, 0x2}], 0xdeadbeef, 0x8, 0x1}) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18b35824", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x2, 0xe, 0x4}, {0x2, 0x6, 0x5, 0x2}, {0x4, 0x4, 0x9, 0x7}, {0x3, 0x4, 0x5, 0xa}, {0x5, 0x4, 0xe, 0x6}, {0x2, 0x2, 0xa, 0x6}, {0x1, 0x3, 0xa}, {0x5, 0x5, 0x4, 0x4}, {0x1, 0x3, 0xa, 0x9}], 0x10, 0xe, @void, @value}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x2eb4, 0x2000007ff) read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020}, 0x2020) 3.117345432s ago: executing program 4 (id=1953): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbM:', 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e21, @rand_addr=0x401}}) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop]}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 2.825258959s ago: executing program 4 (id=1954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000fffffff50000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000380000001c0a03000000f80000000000020000060c00034000000000004000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) 2.64817317s ago: executing program 4 (id=1955): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r3, r3, 0x0, 0x40000f63c) write$char_usb(r3, &(0x7f0000000280)="9f2212fa272cddcbc9b74eb9682bd0cf403903d85a644ad6f662e05429f3cfe27149960231a9bb6ea34b7c1fa5fed72a053e2cb6d7e837ba32903d759e47b9e5f11345d770c310b9b8c8036ee2c2e34de8ccd840cadf61be359f1ec3fd74a229320101fd44d26efd53f41a2b0478cc19aa5a2ad4053538eed79ccd82115bc7da144aff6d6dc120e2dd0146efcfe2f87e1f6dfcc2697d736b25d412f61e08106745a2381551e9f3ae19a2cbdda6fe91efaae4c1c17b275617b80409ba14d3c0052535", 0xc2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f00000001c0)=@usbdevfs_driver={0x3d71, 0x0, &(0x7f0000000dc0)="2c7a2c276597da972cdeed0baf59182fa3d1e599775d75b61f4247c8f1dc9f4ad738a571e0f290f842a270c817ad925965600cebee11e43db56e137ce84f613043649eeaa7f1536cf6cc4e56e6b6a918d2d1d69df927fec135beadd35575d9a49e0d63ec9ffc4c38aed1d78b27bae4c7bee49a47dda06db132ca545525ac619f71be6e88fc56602f4192da9fcd31093d3b4c27b9c4ef9f82c07b9d014e41473cd11acde3226af27cf6113531be269e00264948402b70f34d2cc4daed6c959e88ccb8b0f6ba088a2daa518710"}) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f00000022c0)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) gettid() r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats\x00') write$apparmor_current(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000200)={0x1, 0x1, 0xfa00, {0x0}}, 0xffffffffffffffee) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendfile(r9, r9, 0x0, 0x200000) r10 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r10, 0x10d, 0xd6, &(0x7f0000000240), &(0x7f00000003c0)=0x4) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000240035c500002800061903e600"/28], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000002d000000000000005504000001ed0a001700000017ffffff9f044100000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.636484525s ago: executing program 4 (id=1956): openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00'], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.227034593s ago: executing program 0 (id=1957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}}, 0x0) 1.198732114s ago: executing program 4 (id=1958): r0 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001840)=""/42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd701020301"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7200000ff00001fbfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004704000001ed00006203000000ffffff9c440000000000007a0a00fe00ffffffc3030000f1000000b4000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204ab3949006c3172171652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0e3adde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9e}]}]}]}, 0x34}}, 0x0) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet_dccp(0x2, 0x6, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f00000025c0)={0x1, 0x7, 0x200}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb36, 0x0}) getsockopt$inet_int(r8, 0x10d, 0xd2, &(0x7f0000000080), &(0x7f0000000000)=0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000140)) bind$packet(r6, 0x0, 0x0) 1.088403079s ago: executing program 0 (id=1959): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000014058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006081000418e00000004fcff", 0x58}], 0x1) 1.045140267s ago: executing program 0 (id=1960): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0xfe, 0x8, 0x3, 0xa, 0x20, 0x40, 0x1, 0x0, 0x8, 0x0, 0xfd, 0xc0, 0x40, 0x4, 0x3}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000002000000020000000000000000000000000108"], 0x38}, 0x1, 0x0, 0x0, 0x8084}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x40800, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mprotect(&(0x7f00002ed000/0x4000)=nil, 0x4000, 0xc) 936.595794ms ago: executing program 2 (id=1961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r1, @ANYBLOB="01012abd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460024003400047a137c88a067e2bc52cfea864062e9875a4ee7df43ee4e024bf72737a5dba9080026006c09"], 0xe8}}, 0x4800) 800.345625ms ago: executing program 2 (id=1962): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0001083c0001800c00028005000100000000002c00018014000300fe8800000000000000000000000001011400040000000000000000000000ffff0a0101023c0003800c00028005160100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c000280055d4800000000000000000000000000000114000400fe8000000000000000000000000000aa00"/200], 0xc8}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netfilter\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="3e0f38f0a0e7a3640f320fc7a80d00650f01df642e65660f384179862e0fc730f2260f30360f01c4f3d93af3f30f0159f7", 0x31}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 695.20711ms ago: executing program 1 (id=1963): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0001083c0001800c00028005000100000000002c00018014000300fe8800000000000000000000000001011400040000000000000000000000ffff0a0101023c0003800c00028005160100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c000280055d4800000000000000000000000000000114000400fe8000000000000000000000000000aa00"/200], 0xc8}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netfilter\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x4c}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="3e0f38f0a0e7a3640f320fc7a80d00650f01df642e65660f384179862e0fc730f2260f30360f01c4f3d93af3f30f0159f7", 0x31}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 656.739541ms ago: executing program 0 (id=1964): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}, {@allow_other}, {}]}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x150, 0x40, 0x1, 0x70bd29, 0x25dfdbfd, {0x11}, [@generic="df64b156bdb1383491f2ca03f831e9d59f537523cd2dea25ced19b9ba9625086fbbe8d47b15ddf84ed40336ae0c653e6bd", @nested={0x14, 0x42, 0x0, 0x1, [@typed={0xc, 0x72, 0x0, 0x0, @str='syztnl0\x00'}, @nested={0x4, 0xb4}]}, @nested={0xc5, 0x43, 0x0, 0x1, [@nested={0x4, 0xde}, @generic="fd81cceb6c65ed335fc9cbb1d50faa7ca3172d19a352c49ba843c82422096c8553ded11141037ac35a3f062e4358cd46a7", @typed={0x5, 0x97, 0x0, 0x0, @str='\x00'}, @generic="2d0fb40c8b662d9ea65e88374243bcc511624a7d3e1ad4d652ae92e68cf230b856adda08945c36553fccbfc643885b2a31df1b41436cb8084b136d51c25d7869c7d06c51bb65f6a4154df2877507b5ab76bdb9e70ec7ba798f7aee55d08d99adf7c8920114168ee82a012871ba3491b06b4b4984a0ce51657abee5a78d332fd8d24adf63"]}, @typed={0x8, 0xbd, 0x0, 0x0, @uid}, @typed={0xc, 0x118, 0x0, 0x0, @u64=0x80}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xdb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x24004010) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"/925], 0x390) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x201, &(0x7f0000000080)={0x0}) getdents64(r5, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x29, 0x6, 0x0, {0x1, 0x200000000000, 0x0, 0x2, '', 0x8}}, 0x29) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES16=r2, @ANYRES32=r0, @ANYBLOB="0021c7928d44fb3a000000e8fa3a0e09ebffff4577fa1e547400005b76"], 0x0, 0x0, 0x0}) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r7, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3, 0x0, 0x3, 0x0, 0x2, 0x3e, 0x0, 0x301, 0x38, 0x1bf, 0xf, 0x0, 0x20, 0x1, 0x4, 0x0, 0x7}, [{0x3, 0x40008, 0xf3, 0x81, 0x4, 0x4, 0xc, 0x400}]}, 0x58) close(r7) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r9, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) r10 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x7f) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x2802, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) sendmsg$key(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x2, 0xc, 0x4, 0x2, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x20004000) 260.390679ms ago: executing program 1 (id=1965): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0xe4ffffffffffffff, 0x2, 0x0, 0xe4}) 260.127947ms ago: executing program 0 (id=1966): r0 = msgget(0x1, 0x2b0) msgrcv(r0, 0x0, 0x0, 0x2, 0x2000) msgrcv(r0, 0x0, 0x0, 0x2, 0x0) msgsnd(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='G'], 0x8, 0x800) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000180)=""/99) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ftruncate(r1, 0x2) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="40260f000000ee"], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = io_uring_setup(0x4edd, &(0x7f0000000080)={0x0, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x14, 0x0, 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000000), 0x2) syz_usb_control_io(r2, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000540)={0x20, 0x18, 0xfffffffffffffd97, "89743618c106f6d76b7fd630746b58b161"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="000004000000a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r4, 0x4, 0x2d, &(0x7f0000000000)=""/45) 98.946575ms ago: executing program 2 (id=1967): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x0, 0x30, 0xee, {0xee, 0x21, "63f266fb55a3cf1fb29ac88d8b09f6d76caf9b7283dd25618759613a8da11b2dc6b1ab9bf37acb65ad5337182f5cc4af0c6000fc036b5ab54f29a84d442a6cba8a0b7e79e826c5f593ae76f143fa8f2e137e9ee112224d2f89e5eefa7c77e12f5cd5b2a8cd566a56630af6778474367dc79a9307cde15810f230f5d5cd8d6b88c045ac3cacc9830f5474d9bd6fcb2e6f33a4f6432106f35e55cd62db470b832fc3b8973dd9e7e883a5a466b1292a4f30fb4f15679d27b442df64cf9d5868b356e155980be508c365cade2515621f2708de1f436d5a394b7f4a8229963fb1a3ae0dad9bef66ce21a1c837b928"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}, &(0x7f0000000180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x3, 0xb6, 0x6, "bda34ca5", "99a645ef"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x80, 0x5, 0x7, 0x8b, 0x2, 0x2f}}}, &(0x7f0000000840)={0x84, &(0x7f0000000280)={0x20, 0x8, 0x78, "f02b4e0bd8a8b691a48ac5e646f45418813ae5f9ba32b04a8e8d83706ea176f8b76f45cdea8bfc43549dae71745d73e1df5611dfa45e71d78156e7b924acf857887db0648e7e9e9e521294ac45c50e70e4e3a2cdc1ece5a4cf5cec0faae01703ce502029277fecc3d5b09d66bbafab952dde38edc181d4fc"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x200, 0x8}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "2bc8"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000540)={0x40, 0x13, 0x6, @local}, &(0x7f0000000580)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "b5ff"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x1c}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000a80)={0x14, &(0x7f0000000980)={0x40, 0x30, 0xae, {0xae, 0x23, "4f1ed3a987dbe0fa8b5e020af79bf7cb4ed15f8b0d47f496f1c13be9c373cb1c037385c32888b73e28f6f44cc6d87f10d07f5a8ba72a0906494a64ef29d88e328e2a0f002220e3e257e3bc9006aea6b225fea8b9eb58285d900d956b8b030493599411bc7c13b74eface22cc2d478cb33f1aa59f611c1faa634633111a02f838d5af7236b852c33d295ced45e7fe482e2e1da1782783967a9c52b5f05c0aa6737f6d827f5adfe4b4bfba6d8d"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000ac0)={0x0, 0xc, 0x7a, "4e7f45e31818c2a77add266e3b8456d9fd23ee1ec912caefd9be0126bec2eb9fd2fc5a76a097ab5b7a84bb217bf8f112d025e65543764effa12cae19f09ad93568d121b84d6c144ceeeeeaee515adbf4e3126f5bedfc8cbb00042b6a6f87e4d23b2f748e03d7b372e9fe8a6880d9b271ee8d009eed9d59c51721"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, '2'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, 'A'}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "8c3b2d"}, &(0x7f0000000c80)={0x20, 0x84, 0x2, "96dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "bdfea6"}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000006c0)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=1968): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) setsockopt(r1, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x43ff000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 791303][T11580] kernfs_new_node+0x114/0x220 [ 576.791331][T11580] __kernfs_create_file+0x49/0x2e0 [ 576.791369][T11580] sysfs_add_file_mode_ns+0x24a/0x310 [ 576.791409][T11580] sysfs_merge_group+0x1f9/0x470 [ 576.791438][T11580] ? __pfx_sysfs_merge_group+0x10/0x10 [ 576.791459][T11580] ? device_add_attrs+0x532/0x670 [ 576.791486][T11580] ? __pfx_device_add_attrs+0x10/0x10 [ 576.791512][T11580] ? bus_add_device+0xde/0x460 [ 576.791548][T11580] dpm_sysfs_add+0xd3/0x280 [ 576.791576][T11580] device_add+0x5bc/0xbf0 [ 576.791607][T11580] input_register_device+0x9ed/0x10c0 [ 576.791648][T11580] uinput_create_device+0x40e/0x630 [ 576.791684][T11580] uinput_ioctl_handler+0x496/0x17f0 [ 576.791711][T11580] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 576.791749][T11580] ? ksys_write+0x266/0x2d0 [ 576.791788][T11580] ? __pfx_uinput_ioctl+0x10/0x10 [ 576.791813][T11580] __se_sys_ioctl+0xf1/0x160 [ 576.791844][T11580] do_syscall_64+0xf3/0x210 [ 576.791869][T11580] ? clear_bhb_loop+0x45/0xa0 [ 576.791895][T11580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.791917][T11580] RIP: 0033:0x7f00f4f8e169 [ 576.791937][T11580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.791956][T11580] RSP: 002b:00007f00f5ddb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.791980][T11580] RAX: ffffffffffffffda RBX: 00007f00f51b5fa0 RCX: 00007f00f4f8e169 [ 576.791996][T11580] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 576.792009][T11580] RBP: 00007f00f5ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 576.792023][T11580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.792035][T11580] R13: 0000000000000000 R14: 00007f00f51b5fa0 R15: 00007f00f52dfa28 [ 576.792067][T11580] [ 577.067596][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.171077][ T5921] usb 3-1: USB disconnect, device number 114 [ 577.278345][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1689'. [ 577.358307][ T5898] usb 2-1: config 0 has no interfaces? [ 577.391475][ T5898] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 577.403797][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.413821][ T5898] usb 2-1: Product: syz [ 577.418531][ T5898] usb 2-1: Manufacturer: syz [ 577.423432][ T5898] usb 2-1: SerialNumber: syz [ 577.431302][ T5898] usb 2-1: config 0 descriptor?? [ 577.468760][ T5923] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 577.476565][ T5921] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 577.618778][ T5894] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 577.641340][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 577.649102][ T5923] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 577.660395][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 577.678700][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.696841][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 577.716023][ T5923] usb 1-1: config 0 descriptor?? [ 577.732491][ T5921] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 577.742125][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.752877][ T5921] usb 3-1: Product: syz [ 577.757148][ T5921] usb 3-1: Manufacturer: syz [ 577.786439][T11575] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1684'. [ 577.795648][T11575] 0ªX¹¦D: renamed from gretap0 (while UP) [ 577.798708][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 577.803020][ T5921] usb 3-1: SerialNumber: syz [ 577.814753][T11575] 0ªX¹¦D: entered allmulticast mode [ 577.824074][ T5894] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 577.824597][ T5921] usb 3-1: config 0 descriptor?? [ 577.842517][T11575] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 577.859101][ T5898] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 577.877107][ T5921] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 577.887056][ T5921] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 577.904779][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 577.942806][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 577.964335][ T5894] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.989417][ T5894] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 578.010978][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.012185][ T5898] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 578.032492][ T5898] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 578.046261][ T5898] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 578.057512][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.083370][T11593] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 578.116342][ T5898] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 578.302432][ T5894] usb 5-1: usb_control_msg returned -71 [ 578.308853][ T5894] usbtmc 5-1:16.0: can't read capabilities [ 578.352998][ T10] usb 4-1: USB disconnect, device number 2 [ 578.406849][T11582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.505879][T11582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.516401][ T5921] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 578.542455][ T5894] usb 5-1: USB disconnect, device number 112 [ 578.638363][ T5921] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 578.763882][ T5923] pegasus 1-1:0.0: probe with driver pegasus failed with error -121 [ 579.111729][ T10] usb 2-1: USB disconnect, device number 116 [ 579.672539][ T5921] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 579.715226][ T5921] em28xx 3-1:0.0: No AC97 audio processor [ 579.908557][ T5923] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 580.068697][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 580.075697][ T5923] usb 2-1: config 16 has an invalid interface number: 219 but max is 0 [ 580.084286][ T5923] usb 2-1: config 16 has no interface number 0 [ 580.088647][ T10] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 580.091237][ T5923] usb 2-1: config 16 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 580.110904][ T5923] usb 2-1: config 16 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 580.123138][ T5923] usb 2-1: config 16 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 580.135468][ T5923] usb 2-1: config 16 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 580.145990][ T5923] usb 2-1: config 16 interface 219 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.169677][ T5923] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 580.183180][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.192416][ T5923] usb 2-1: Product: syz [ 580.193984][ T5894] usb 3-1: USB disconnect, device number 115 [ 580.196806][ T5923] usb 2-1: Manufacturer: syz [ 580.205148][ T5894] em28xx 3-1:0.0: Disconnecting em28xx [ 580.208264][ T5923] usb 2-1: SerialNumber: syz [ 580.235868][ T5894] em28xx 3-1:0.0: Freeing device [ 580.250062][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 580.254952][T11600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 580.257603][ T10] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 580.279822][ T10] usb 5-1: config 0 has no interface number 0 [ 580.290414][ T10] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 580.301969][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.329747][ T10] usb 5-1: Product: syz [ 580.333990][ T10] usb 5-1: Manufacturer: syz [ 580.364530][ T10] usb 5-1: SerialNumber: syz [ 580.383830][ T10] usb 5-1: config 0 descriptor?? [ 580.542204][ T5923] etas_es58x 2-1:16.219: Starting syz syz (Serial Number syz) [ 580.568897][ T5923] usb 2-1: USB disconnect, device number 117 [ 580.603823][ T10] ath6kl: Failed to submit usb control message: -71 [ 580.620795][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 580.628115][ T10] ath6kl: Unable to send get target info: -71 [ 580.647292][ T10] ath6kl: Failed to init ath6kl core: -71 [ 580.672790][ T10] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 580.691534][ T10] usb 5-1: USB disconnect, device number 113 [ 580.906000][T11625] tipc: Started in network mode [ 580.912514][T11625] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 580.921747][T11625] tipc: Enabling of bearer rejected, failed to enable media [ 581.361159][T11634] FAULT_INJECTION: forcing a failure. [ 581.361159][T11634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.375750][T11634] CPU: 0 UID: 0 PID: 11634 Comm: syz.1.1701 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 581.375775][T11634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 581.375785][T11634] Call Trace: [ 581.375792][T11634] [ 581.375799][T11634] dump_stack_lvl+0x241/0x360 [ 581.375828][T11634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.375851][T11634] ? __pfx__printk+0x10/0x10 [ 581.375882][T11634] should_fail_ex+0x424/0x570 [ 581.375910][T11634] _copy_from_user+0x2d/0xb0 [ 581.375931][T11634] sctp_getsockopt_peer_addrs+0x106/0x6e0 [ 581.375955][T11634] ? __local_bh_enable_ip+0x168/0x200 [ 581.375978][T11634] ? lockdep_hardirqs_on+0x9d/0x150 [ 581.375995][T11634] ? __pfx_sctp_getsockopt_peer_addrs+0x10/0x10 [ 581.376019][T11634] ? __local_bh_enable_ip+0x168/0x200 [ 581.376043][T11634] ? sctp_getsockopt+0x13a/0xbb0 [ 581.376073][T11634] sctp_getsockopt+0xadc/0xbb0 [ 581.376092][T11634] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 581.376114][T11634] do_sock_getsockopt+0x391/0x740 [ 581.376142][T11634] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 581.376165][T11634] ? __fget_files+0x2a/0x420 [ 581.376181][T11634] ? __fget_files+0x39d/0x420 [ 581.376194][T11634] ? __fget_files+0x2a/0x420 [ 581.376214][T11634] __x64_sys_getsockopt+0x233/0x310 [ 581.376243][T11634] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 581.376273][T11634] ? do_syscall_64+0xb6/0x210 [ 581.376291][T11634] do_syscall_64+0xf3/0x210 [ 581.376308][T11634] ? clear_bhb_loop+0x45/0xa0 [ 581.376327][T11634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.376342][T11634] RIP: 0033:0x7f573418e169 [ 581.376356][T11634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.376370][T11634] RSP: 002b:00007f5734f18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 581.376387][T11634] RAX: ffffffffffffffda RBX: 00007f57343b6080 RCX: 00007f573418e169 [ 581.376399][T11634] RDX: 000000000000006c RSI: 0000000000000084 RDI: 0000000000000003 [ 581.376408][T11634] RBP: 00007f5734f18090 R08: 00002000000000c0 R09: 0000000000000000 [ 581.376419][T11634] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 581.376429][T11634] R13: 0000000000000000 R14: 00007f57343b6080 R15: 00007f57344dfa28 [ 581.376452][T11634] [ 581.788690][ T10] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 582.038929][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 582.126112][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 582.126247][ T5898] usb 1-1: USB disconnect, device number 125 [ 582.139448][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 582.198670][ T5923] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 582.224384][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 582.253198][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.276184][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 582.286682][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.342148][T11647] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1707'. [ 582.414280][ T5923] usb 3-1: config 0 has no interfaces? [ 582.433924][ T5923] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 582.487598][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.527710][ T10] usb 5-1: usb_control_msg returned -71 [ 582.536326][ T10] usbtmc 5-1:16.0: can't read capabilities [ 582.576062][ T10] usb 5-1: USB disconnect, device number 114 [ 582.617673][ T5923] usb 3-1: Product: syz [ 582.641856][ T5923] usb 3-1: Manufacturer: syz [ 582.666984][ T5923] usb 3-1: SerialNumber: syz [ 582.683527][ T5923] usb 3-1: config 0 descriptor?? [ 582.937554][T11640] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1703'. [ 582.947145][T11640] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 583.013853][T11640] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 583.121303][T11668] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 583.281703][T11671] veth1_to_team: entered promiscuous mode [ 583.568636][ T10] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 583.733839][ T10] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 583.749014][ T10] usb 2-1: config 0 has no interface number 0 [ 583.785102][ T10] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=c6.7f [ 583.804690][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.824862][ T10] usb 2-1: Product: syz [ 583.831528][T11678] syz_tun: entered allmulticast mode [ 583.838908][ T10] usb 2-1: Manufacturer: syz [ 583.846985][ T10] usb 2-1: SerialNumber: syz [ 583.852820][T11678] syz_tun: left allmulticast mode [ 583.886448][ T10] usb 2-1: config 0 descriptor?? [ 583.911718][ T10] esd_usb 2-1:0.120: sending version message failed [ 583.940892][ T10] esd_usb 2-1:0.120: probe with driver esd_usb failed with error -8 [ 584.113900][ T5923] usb 2-1: USB disconnect, device number 118 [ 584.248846][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 584.408818][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 584.417362][ T10] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 584.428554][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.453815][ T10] usb 4-1: config 0 descriptor?? [ 584.464699][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 585.288592][ T5895] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 585.468572][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 585.500539][ T10] gspca_vc032x: reg_w err -71 [ 585.505383][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.516138][ T5895] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 585.535352][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.550994][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.556354][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.569703][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 585.590564][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.592308][ T47] usb 3-1: USB disconnect, device number 116 [ 585.595915][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 585.595946][ T5895] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.627417][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.633835][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.641345][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.659480][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.673564][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.681173][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.686800][ T5895] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 585.696027][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.711001][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.724065][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.732560][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.739603][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.746511][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.757465][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.763023][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.768552][ T10] gspca_vc032x: Unknown sensor... [ 585.773725][ T10] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 585.790431][ T10] usb 4-1: USB disconnect, device number 3 [ 585.956192][ T5895] usb 2-1: usb_control_msg returned -71 [ 586.030721][ T5895] usbtmc 2-1:16.0: can't read capabilities [ 586.061508][ T5895] usb 2-1: USB disconnect, device number 119 [ 586.092522][ T5923] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 586.248739][ T47] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 586.270735][ T5923] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 586.281308][ T5923] usb 1-1: config 0 has no interface number 0 [ 586.330798][ T5923] usb 1-1: config 0 interface 235 has no altsetting 0 [ 586.345088][ T5923] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 586.359902][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.368094][ T5923] usb 1-1: Product: syz [ 586.378263][ T5923] usb 1-1: Manufacturer: syz [ 586.393601][ T5923] usb 1-1: SerialNumber: syz [ 586.402139][ T5923] usb 1-1: config 0 descriptor?? [ 586.448770][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 586.459311][ T5923] keyspan 1-1:0.235: Keyspan 1 port adapter converter detected [ 586.478676][ T47] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.500272][ T5923] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 87 [ 586.508227][ T5923] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 7 [ 586.508535][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 586.518947][ T47] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 586.542627][ T5923] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 81 [ 586.551849][ T47] usb 5-1: config 1 has no interface number 1 [ 586.559498][ T5923] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 1 [ 586.567592][ T47] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 586.581269][ T5923] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 85 [ 586.599062][ T47] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 586.612481][ T5923] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 586.631536][ T47] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 586.668632][T11713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1732'. [ 586.669561][ T5923] usb 1-1: USB disconnect, device number 126 [ 586.684466][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.693284][ T47] usb 5-1: Product: syz [ 586.705704][ T47] usb 5-1: Manufacturer: syz [ 586.715867][ T5923] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 586.732633][ T47] usb 5-1: SerialNumber: syz [ 586.737913][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.743140][ T5923] keyspan 1-1:0.235: device disconnected [ 586.777179][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.827472][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 586.878781][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.904908][ T10] usb 4-1: config 0 descriptor?? [ 586.995086][ T47] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 587.040792][ T47] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 587.053885][ T47] usb 5-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 587.128124][ T47] usb 5-1: USB disconnect, device number 115 [ 587.379807][ T7060] udevd[7060]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.521466][T11711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.542788][T11711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.602204][T11711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.615755][T11711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.910104][ T47] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 588.084139][ T47] usb 2-1: config 0 has no interfaces? [ 588.097933][ T47] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 588.107616][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.122343][ T47] usb 2-1: Product: syz [ 588.127597][ T47] usb 2-1: Manufacturer: syz [ 588.132790][ T47] usb 2-1: SerialNumber: syz [ 588.224140][ T47] usb 2-1: config 0 descriptor?? [ 588.503374][ T10] uclogic 0003:256C:006D.0041: v1 frame probing failed: -71 [ 588.511082][ T10] uclogic 0003:256C:006D.0041: failed probing parameters: -71 [ 588.521423][ T10] uclogic 0003:256C:006D.0041: probe with driver uclogic failed with error -71 [ 588.568782][T11727] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1736'. [ 588.580121][T11727] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 588.596437][T11727] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 588.612656][ T5894] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 588.698690][ T10] usb 4-1: USB disconnect, device number 4 [ 588.768584][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 588.793346][ T5894] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 588.818992][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.846885][ T5894] usb 1-1: config 0 descriptor?? [ 588.956852][ T5894] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 589.448790][ T47] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 589.664073][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 589.691060][ T47] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 589.711048][ T47] usb 4-1: config 0 has no interface number 0 [ 589.735675][ T47] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 589.763141][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.806688][ T47] usb 4-1: Product: syz [ 589.821038][ T47] usb 4-1: Manufacturer: syz [ 589.881727][ T47] usb 4-1: SerialNumber: syz [ 589.887953][ T5894] gspca_vc032x: reg_w err -71 [ 589.893062][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.898400][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.917481][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.930799][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.943299][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.953116][ T47] usb 4-1: config 0 descriptor?? [ 589.958348][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.124489][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.136211][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.175530][ T5923] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 590.177054][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.189367][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.194695][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.204500][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.210010][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.215718][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.221448][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.227004][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.232754][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.238407][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.244265][ T5894] gspca_vc032x: Unknown sensor... [ 590.249690][ T5894] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 590.274381][ T5894] usb 1-1: USB disconnect, device number 127 [ 590.332759][ T47] ath6kl: Failed to submit usb control message: -71 [ 590.402116][ T47] ath6kl: unable to send the bmi data to the device: -71 [ 590.435018][ T47] ath6kl: Unable to send get target info: -71 [ 590.452252][ T47] ath6kl: Failed to init ath6kl core: -71 [ 590.465040][ T47] ath6kl_usb 4-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 590.493448][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 590.524112][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.585699][ T47] usb 4-1: USB disconnect, device number 5 [ 590.598954][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.644512][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 590.677726][ T5923] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 590.720487][ T5898] usb 2-1: USB disconnect, device number 120 [ 590.737012][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.773538][ T5923] usb 5-1: config 0 descriptor?? [ 590.930124][T11755] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 590.940302][T11755] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 591.108933][ T5898] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 591.198851][ T47] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 591.215486][ T5923] koneplus 0003:1E7D:2E22.0042: item fetching failed at offset 0/2 [ 591.227519][ T5923] koneplus 0003:1E7D:2E22.0042: parse failed [ 591.329171][ T5898] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 591.342359][ T5898] usb 2-1: config 0 has no interface number 0 [ 591.352969][ T5923] koneplus 0003:1E7D:2E22.0042: probe with driver koneplus failed with error -22 [ 591.365281][ T5898] usb 2-1: config 0 interface 235 has no altsetting 0 [ 591.452398][ T47] usb 1-1: unable to get BOS descriptor or descriptor too short [ 591.461057][ T47] usb 1-1: not running at top speed; connect to a high speed hub [ 591.499149][ T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.514711][ T47] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 591.548215][ T5898] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 591.603252][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.626074][ T5898] usb 2-1: Product: syz [ 591.630609][ T5898] usb 2-1: Manufacturer: syz [ 591.640515][ T5898] usb 2-1: SerialNumber: syz [ 591.645383][ T47] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 591.654719][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.676062][ T47] usb 1-1: Product: syz [ 591.682252][ T5898] usb 2-1: config 0 descriptor?? [ 591.688741][ T47] usb 1-1: Manufacturer: syz [ 591.694447][ T47] usb 1-1: SerialNumber: syz [ 591.712393][ T5898] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected [ 591.722889][ T5898] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87 [ 591.756723][ T5898] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7 [ 591.778391][ T5898] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81 [ 591.908825][ T5898] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1 [ 591.937123][ T5898] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85 [ 592.018378][ T5898] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 592.078222][ T5898] usb 2-1: USB disconnect, device number 121 [ 592.206799][ T5898] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 592.241100][ T5898] keyspan 2-1:0.235: device disconnected [ 592.923430][T11779] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1754'. [ 593.031274][T11781] FAULT_INJECTION: forcing a failure. [ 593.031274][T11781] name failslab, interval 1, probability 0, space 0, times 0 [ 593.044862][T11781] CPU: 0 UID: 0 PID: 11781 Comm: syz.1.1755 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 593.044886][T11781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 593.044901][T11781] Call Trace: [ 593.044910][T11781] [ 593.044919][T11781] dump_stack_lvl+0x241/0x360 [ 593.044958][T11781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.044988][T11781] ? __pfx__printk+0x10/0x10 [ 593.045016][T11781] ? __pfx___might_resched+0x10/0x10 [ 593.045036][T11781] should_fail_ex+0x424/0x570 [ 593.045074][T11781] should_failslab+0xac/0x100 [ 593.045099][T11781] __kmalloc_noprof+0xdf/0x4d0 [ 593.045120][T11781] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 593.045159][T11781] ? apparmor_capable+0x13b/0x1b0 [ 593.045177][T11781] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 593.045211][T11781] genl_rcv_msg+0x819/0xf00 [ 593.045253][T11781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 593.045282][T11781] ? __dev_queue_xmit+0x1780/0x3f60 [ 593.045303][T11781] ? kasan_save_track+0x3f/0x80 [ 593.045324][T11781] ? __kasan_slab_alloc+0x66/0x80 [ 593.045350][T11781] ? do_syscall_64+0xf3/0x210 [ 593.045391][T11781] ? __lock_acquire+0xad5/0xd80 [ 593.045423][T11781] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 593.045451][T11781] ? __pfx_nl80211_set_tx_bitrate_mask+0x10/0x10 [ 593.045476][T11781] ? __pfx_nl80211_post_doit+0x10/0x10 [ 593.045508][T11781] netlink_rcv_skb+0x208/0x480 [ 593.045537][T11781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 593.045572][T11781] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 593.045617][T11781] ? netlink_deliver_tap+0x2e/0x1b0 [ 593.045642][T11781] genl_rcv+0x28/0x40 [ 593.045663][T11781] netlink_unicast+0x7f8/0x9a0 [ 593.045699][T11781] ? __pfx_netlink_unicast+0x10/0x10 [ 593.045724][T11781] ? skb_put+0x114/0x1f0 [ 593.045758][T11781] netlink_sendmsg+0x8c3/0xcd0 [ 593.045794][T11781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.045818][T11781] ? aa_sock_msg_perm+0x91/0x160 [ 593.045854][T11781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.045879][T11781] __sock_sendmsg+0x221/0x270 [ 593.045907][T11781] ____sys_sendmsg+0x523/0x860 [ 593.045941][T11781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 593.045963][T11781] ? __fget_files+0x2a/0x420 [ 593.045988][T11781] ? __fget_files+0x2a/0x420 [ 593.046019][T11781] __sys_sendmsg+0x271/0x360 [ 593.046056][T11781] ? __pfx___sys_sendmsg+0x10/0x10 [ 593.046125][T11781] ? do_syscall_64+0xb6/0x210 [ 593.046160][T11781] do_syscall_64+0xf3/0x210 [ 593.046184][T11781] ? clear_bhb_loop+0x45/0xa0 [ 593.046209][T11781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.046229][T11781] RIP: 0033:0x7f573418e169 [ 593.046244][T11781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.046257][T11781] RSP: 002b:00007f5734f39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.046274][T11781] RAX: ffffffffffffffda RBX: 00007f57343b5fa0 RCX: 00007f573418e169 [ 593.046289][T11781] RDX: 0000000000008044 RSI: 0000200000000040 RDI: 0000000000000004 [ 593.046304][T11781] RBP: 00007f5734f39090 R08: 0000000000000000 R09: 0000000000000000 [ 593.046318][T11781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.046331][T11781] R13: 0000000000000000 R14: 00007f57343b5fa0 R15: 00007f57344dfa28 [ 593.046362][T11781] [ 593.088802][ T5898] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 593.611052][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 593.628521][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 593.643223][ T5898] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 593.656994][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.675208][ T5898] usb 3-1: Product: syz [ 593.679490][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 593.697230][ T5898] usb 3-1: Manufacturer: syz [ 593.707419][ T5898] usb 3-1: SerialNumber: syz [ 593.730171][ T5894] usb 5-1: USB disconnect, device number 116 [ 593.790266][ T5898] usb 3-1: config 0 descriptor?? [ 593.823842][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1757'. [ 593.863028][ T5898] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 593.871151][ T10] usb 2-1: config 0 has no interfaces? [ 593.899941][ T47] usb 1-1: 0:2 : does not exist [ 593.917481][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 593.940227][ T5898] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 593.964172][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.968400][ T47] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 593.981902][ T10] usb 2-1: Product: syz [ 594.000745][ T10] usb 2-1: Manufacturer: syz [ 594.044092][ T10] usb 2-1: SerialNumber: syz [ 594.049596][ T47] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 594.101723][ T10] usb 2-1: config 0 descriptor?? [ 594.150666][ T47] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 594.280045][ T47] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 594.317147][T11785] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1756'. [ 594.470534][ T5898] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 594.480491][ T47] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 594.494754][ T47] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 594.572365][ T47] usb 1-1: USB disconnect, device number 2 [ 594.899072][ T5898] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 594.927325][ T5898] em28xx 3-1:0.0: board has no eeprom [ 594.963185][T11785] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 594.981411][T11785] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 595.048733][ T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 595.158251][T11777] em28xx 3-1:0.0: read from i2c device at 0x0 failed with unknown error (status=65) [ 595.199196][ T5921] usb 5-1: new low-speed USB device number 117 using dummy_hcd [ 595.206899][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 595.215415][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.249512][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.356881][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 595.371844][ T47] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 595.381613][T11777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1753'. [ 595.391185][ T5921] usb 5-1: device descriptor read/64, error -71 [ 595.420343][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.451256][ T47] usb 1-1: config 0 descriptor?? [ 595.458823][ T5898] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 595.466913][ T5898] em28xx 3-1:0.0: dvb set to bulk mode. [ 595.475007][ T5923] em28xx 3-1:0.0: Binding DVB extension [ 595.497516][ T5898] usb 3-1: USB disconnect, device number 117 [ 595.556645][ T5898] em28xx 3-1:0.0: Disconnecting em28xx [ 595.596976][ T5923] em28xx 3-1:0.0: Registering input extension [ 595.624596][ T5898] em28xx 3-1:0.0: Closing input extension [ 595.630666][ T5921] usb 5-1: new low-speed USB device number 118 using dummy_hcd [ 595.653439][ T5898] em28xx 3-1:0.0: Freeing device [ 595.769275][ T5921] usb 5-1: device descriptor read/64, error -71 [ 595.880918][ T5921] usb usb5-port1: attempt power cycle [ 595.930710][ T47] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 595.953640][ T47] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 596.007269][ T47] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 596.041670][ T47] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 596.058900][ T47] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 596.130980][T11797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.140042][T11797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.174823][ T47] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0043/input/input117 [ 596.313396][ T47] microsoft 0003:045E:07DA.0043: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 596.329047][ T5921] usb 5-1: new low-speed USB device number 119 using dummy_hcd [ 596.343102][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.388267][ T24] usb 2-1: USB disconnect, device number 122 [ 596.397187][ T47] usb 1-1: USB disconnect, device number 3 [ 596.408082][ T5921] usb 5-1: device descriptor read/8, error -71 [ 596.689762][ T5921] usb 5-1: new low-speed USB device number 120 using dummy_hcd [ 596.749341][ T5921] usb 5-1: device descriptor read/8, error -71 [ 596.868516][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1765'. [ 596.869445][ T5921] usb usb5-port1: unable to enumerate USB device [ 596.969554][ T24] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 597.159076][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 597.174251][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 597.209207][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.243178][ T24] usb 2-1: Product: syz [ 597.247420][ T24] usb 2-1: Manufacturer: syz [ 597.280924][ T24] usb 2-1: SerialNumber: syz [ 597.337968][ T24] usb 2-1: config 0 descriptor?? [ 597.572720][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 597.641543][ T5921] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 597.799777][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 597.859490][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 597.888854][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 597.931039][ T5921] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 597.946090][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.955439][ T5921] usb 5-1: Product: syz [ 597.965453][ T5921] usb 5-1: Manufacturer: syz [ 597.984062][ T5921] usb 5-1: SerialNumber: syz [ 598.018186][ T5921] usb 5-1: config 0 descriptor?? [ 598.043776][ T5921] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 598.057336][ T5921] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 598.091156][T11830] input: syz1 as /devices/virtual/input/input118 [ 598.390993][T11840] netlink: 'syz.0.1774': attribute type 10 has an invalid length. [ 598.399415][T11840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1774'. [ 598.418882][T11840] batadv0: entered promiscuous mode [ 598.433420][T11840] batadv0: entered allmulticast mode [ 598.461292][T11840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.536454][T11840] bridge0: port 2(batadv0) entered blocking state [ 598.549091][T11840] bridge0: port 2(batadv0) entered disabled state [ 598.660009][ T5921] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 598.667403][ T5921] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 598.685405][T11844] batman_adv: batadv0: Adding interface: dummy0 [ 598.692563][T11844] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.717824][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.758192][T11844] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 598.779555][ T5923] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 599.050051][ T5923] usb 4-1: config 0 has no interfaces? [ 599.086290][ T6462] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 599.095648][ T6462] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 599.155714][ T5923] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 599.217558][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.303739][ T5921] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 599.321232][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 599.345247][ T5923] usb 4-1: Product: syz [ 599.354971][ T5921] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 599.368647][ T5923] usb 4-1: Manufacturer: syz [ 599.373294][ T5923] usb 4-1: SerialNumber: syz [ 599.382227][ T5921] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 599.388956][ T24] usb 2-1: USB disconnect, device number 123 [ 599.422483][ T5921] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 599.438736][ T10] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 599.441511][ T5923] usb 4-1: config 0 descriptor?? [ 599.499416][ T5921] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 599.553375][ T5921] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 599.610772][ T10] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 599.619335][ T10] usb 3-1: config 0 has no interface number 0 [ 599.625441][ T10] usb 3-1: config 0 interface 235 has no altsetting 0 [ 599.644024][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 599.657754][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.673126][T11840] syz.0.1774 (11840) used greatest stack depth: 17576 bytes left [ 599.684250][ T10] usb 3-1: Product: syz [ 599.700206][ T10] usb 3-1: Manufacturer: syz [ 599.726406][ T10] usb 3-1: SerialNumber: syz [ 599.755346][ T10] usb 3-1: config 0 descriptor?? [ 599.787457][ T10] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 599.819284][T11845] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1773'. [ 599.829857][T11845] 0ªX¹¦D: renamed from gretap0 [ 599.840966][ T5921] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 599.845970][ T10] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 599.857562][ T5921] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 599.907060][T11845] 0ªX¹¦D: entered allmulticast mode [ 599.917973][T11845] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 599.939311][ T5921] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 599.953592][ T10] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 599.956597][ T5921] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 599.967428][ T10] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 599.996020][ T5921] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 600.012242][ T10] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 600.022046][ T10] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 600.053357][ T10] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 600.060264][ T5921] usb 5-1: USB disconnect, device number 121 [ 600.073771][T11861] FAULT_INJECTION: forcing a failure. [ 600.073771][T11861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.096339][ T10] usb 3-1: USB disconnect, device number 118 [ 600.125740][T11861] CPU: 1 UID: 0 PID: 11861 Comm: syz.0.1778 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 600.125771][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 600.125785][T11861] Call Trace: [ 600.125795][T11861] [ 600.125804][T11861] dump_stack_lvl+0x241/0x360 [ 600.125839][T11861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.125862][T11861] ? __pfx__printk+0x10/0x10 [ 600.125896][T11861] should_fail_ex+0x424/0x570 [ 600.125923][T11861] _copy_from_iter+0x211/0x1c70 [ 600.125946][T11861] ? __build_skb_around+0x247/0x3d0 [ 600.125971][T11861] ? __alloc_skb+0x298/0x480 [ 600.125992][T11861] ? __pfx__copy_from_iter+0x10/0x10 [ 600.126011][T11861] ? __pfx___alloc_skb+0x10/0x10 [ 600.126035][T11861] ? skb_put+0x114/0x1f0 [ 600.126059][T11861] netlink_sendmsg+0x73c/0xcd0 [ 600.126088][T11861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.126111][T11861] ? aa_sock_msg_perm+0x91/0x160 [ 600.126134][T11861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.126152][T11861] __sock_sendmsg+0x221/0x270 [ 600.126173][T11861] ____sys_sendmsg+0x523/0x860 [ 600.126202][T11861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.126225][T11861] ? __fget_files+0x2a/0x420 [ 600.126242][T11861] ? __fget_files+0x2a/0x420 [ 600.126263][T11861] __sys_sendmsg+0x271/0x360 [ 600.126291][T11861] ? __pfx___sys_sendmsg+0x10/0x10 [ 600.126352][T11861] ? do_syscall_64+0xb6/0x210 [ 600.126371][T11861] do_syscall_64+0xf3/0x210 [ 600.126387][T11861] ? clear_bhb_loop+0x45/0xa0 [ 600.126404][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.126420][T11861] RIP: 0033:0x7f00f4f8e169 [ 600.126433][T11861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.126446][T11861] RSP: 002b:00007f00f5ddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.126463][T11861] RAX: ffffffffffffffda RBX: 00007f00f51b5fa0 RCX: 00007f00f4f8e169 [ 600.126474][T11861] RDX: 0000000000040020 RSI: 0000200000000280 RDI: 0000000000000003 [ 600.126489][T11861] RBP: 00007f00f5ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 600.126499][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.126509][T11861] R13: 0000000000000000 R14: 00007f00f51b5fa0 R15: 00007f00f52dfa28 [ 600.126531][T11861] [ 600.356540][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 600.367314][ T10] keyspan 3-1:0.235: device disconnected [ 600.668586][ T5895] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 600.832302][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 600.845342][ T5895] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 600.854053][ T5895] usb 1-1: config 0 has no interface number 0 [ 600.867483][ T5895] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 600.877446][T11880] tipc: Enabling of bearer rejected, failed to enable media [ 600.913370][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.926645][ T5895] usb 1-1: Product: syz [ 600.957620][ T5895] usb 1-1: Manufacturer: syz [ 600.966525][ T5895] usb 1-1: SerialNumber: syz [ 600.989786][ T5895] usb 1-1: config 0 descriptor?? [ 601.025362][ T5895] usb 1-1: selecting invalid altsetting 2 [ 601.055598][ T5895] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 601.265017][ T5895] usb 1-1: USB disconnect, device number 4 [ 601.578611][ T5921] usb 4-1: USB disconnect, device number 6 [ 603.058735][ T5921] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 603.223921][ T5921] usb 5-1: config 0 has an invalid interface number: 235 but max is 0 [ 603.232656][ T5921] usb 5-1: config 0 has no interface number 0 [ 603.245612][ T5921] usb 5-1: config 0 interface 235 has no altsetting 0 [ 603.295326][ T5921] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 603.346336][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.367176][ T5921] usb 5-1: Product: syz [ 603.383401][ T5921] usb 5-1: Manufacturer: syz [ 603.395131][ T5921] usb 5-1: SerialNumber: syz [ 603.414028][ T5921] usb 5-1: config 0 descriptor?? [ 603.439247][ T5921] keyspan 5-1:0.235: Keyspan 1 port adapter converter detected [ 603.455993][ T5921] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 87 [ 603.477151][ T5921] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 7 [ 603.504022][ T5921] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 81 [ 603.513563][ T5921] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 1 [ 603.526085][ T5921] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 85 [ 603.543598][ T5921] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 603.620017][ T5895] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 603.646432][ T5921] usb 5-1: USB disconnect, device number 122 [ 603.686464][ T5921] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 603.711533][ T5921] keyspan 5-1:0.235: device disconnected [ 603.796526][ T5895] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 603.819115][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.835268][ T5895] usb 4-1: Product: syz [ 603.842241][ T5895] usb 4-1: Manufacturer: syz [ 603.852309][ T5895] usb 4-1: SerialNumber: syz [ 603.866651][ T5895] usb 4-1: config 0 descriptor?? [ 603.883463][ T5895] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 603.921393][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 603.946566][ T5895] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 603.974236][ T5895] usb 4-1: media controller created [ 604.039900][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.177535][ T5895] DVB: Unable to find symbol mt352_attach() [ 604.446428][T11931] ip6tnl1: entered promiscuous mode [ 604.527827][ T5895] DVB: Unable to find symbol nxt6000_attach() [ 604.550991][ T5895] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 604.616673][ T5895] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input120 [ 604.640768][ T5895] dvb-usb: schedule remote query interval to 1000 msecs. [ 604.659036][ T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 604.677619][ T5895] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 604.708958][ T5895] dvb-usb: bulk message failed: -22 (7/0) [ 604.714777][ T5895] dvb-usb: bulk message failed: -22 (7/0) [ 604.752661][ T5895] usb 4-1: USB disconnect, device number 7 [ 604.833194][ T10] usb 3-1: config 0 has no interfaces? [ 604.847592][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 604.858604][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.898689][ T10] usb 3-1: Product: syz [ 604.902935][ T10] usb 3-1: Manufacturer: syz [ 604.907560][ T10] usb 3-1: SerialNumber: syz [ 604.947583][ T10] usb 3-1: config 0 descriptor?? [ 604.954696][ T5895] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 605.048692][ T5894] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 605.204440][T11927] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1802'. [ 605.213641][T11927] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 605.262910][T11927] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 605.297131][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1810'. [ 605.320989][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.334894][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 605.449297][ T5894] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 605.462939][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.481754][T11953] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1811'. [ 605.516765][ T5894] usb 5-1: config 0 descriptor?? [ 605.524899][ T5840] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 605.625916][ T5894] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 605.638655][ C1] af_packet: tpacket_rcv: packet too big, clamped from 12 to 4294967272. macoff=96 [ 605.647696][T11952] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1811'. [ 605.719094][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 605.730984][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 605.774293][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 605.806606][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 605.836702][ T5840] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 605.857497][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.882937][ T5840] usb 1-1: Product: syz [ 605.896140][ T5840] usb 1-1: Manufacturer: syz [ 605.934024][ T5840] usb 1-1: SerialNumber: syz [ 606.017424][ T5840] usb 1-1: config 0 descriptor?? [ 606.046207][ T5840] radioshark 1-1:0.0: Invalid radioSHARK device [ 606.158065][ T5840] radioshark 1-1:0.0: probe with driver radioshark failed with error -22 [ 606.167368][ T5840] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 606.497087][T11946] usb usb8: usbfs: process 11946 (syz.0.1808) did not claim interface 0 before use [ 606.534592][T11965] FAULT_INJECTION: forcing a failure. [ 606.534592][T11965] name failslab, interval 1, probability 0, space 0, times 0 [ 606.558684][T11965] CPU: 1 UID: 0 PID: 11965 Comm: syz.4.1805 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 606.558715][T11965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 606.558727][T11965] Call Trace: [ 606.558736][T11965] [ 606.558745][T11965] dump_stack_lvl+0x241/0x360 [ 606.558783][T11965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.558814][T11965] ? __pfx__printk+0x10/0x10 [ 606.558849][T11965] ? __io_read+0x13f5/0x15a0 [ 606.558872][T11965] should_fail_ex+0x424/0x570 [ 606.558906][T11965] should_failslab+0xac/0x100 [ 606.558929][T11965] __kmalloc_noprof+0xdf/0x4d0 [ 606.558951][T11965] ? io_cache_alloc_new+0x44/0x100 [ 606.558985][T11965] io_cache_alloc_new+0x44/0x100 [ 606.559022][T11965] io_arm_poll_handler+0x55f/0xc80 [ 606.559060][T11965] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 606.559095][T11965] ? __pfx_io_prep_rwv+0x10/0x10 [ 606.559128][T11965] ? __pfx_io_issue_sqe+0x10/0x10 [ 606.559165][T11965] io_queue_async+0xa4/0x4e0 [ 606.559192][T11965] io_submit_sqes+0xdfc/0x1ce0 [ 606.559258][T11965] __se_sys_io_uring_enter+0x2cd/0x34d0 [ 606.559300][T11965] ? rcu_read_lock_any_held+0xbb/0x160 [ 606.559326][T11965] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 606.559353][T11965] ? vfs_write+0xb29/0xd10 [ 606.559403][T11965] ? ksys_write+0x24e/0x2d0 [ 606.559440][T11965] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 606.559482][T11965] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 606.559506][T11965] ? __fget_files+0x2a/0x420 [ 606.559531][T11965] ? __fget_files+0x2a/0x420 [ 606.559559][T11965] ? fput+0x9b/0xd0 [ 606.559581][T11965] ? ksys_write+0x275/0x2d0 [ 606.559623][T11965] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 606.559660][T11965] do_syscall_64+0xf3/0x210 [ 606.559684][T11965] ? clear_bhb_loop+0x45/0xa0 [ 606.559710][T11965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.559731][T11965] RIP: 0033:0x7fa93f38e169 [ 606.559751][T11965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.559769][T11965] RSP: 002b:00007fa940291038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 606.559793][T11965] RAX: ffffffffffffffda RBX: 00007fa93f5b6160 RCX: 00007fa93f38e169 [ 606.559809][T11965] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000004 [ 606.559823][T11965] RBP: 00007fa940291090 R08: 0000000000000000 R09: 0000000000000000 [ 606.559837][T11965] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 606.559850][T11965] R13: 0000000000000000 R14: 00007fa93f5b6160 R15: 00007fa93f6dfa28 [ 606.559883][T11965] [ 607.128691][ T5840] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 607.285638][ T5840] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 607.298027][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.323590][ T5840] usb 4-1: config 0 descriptor?? [ 607.433121][ T5894] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 607.616198][ T5894] usb 2-1: config 0 has no interfaces? [ 607.626401][ T5894] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 607.636585][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.652665][ T5894] usb 2-1: Product: syz [ 607.656986][ T5894] usb 2-1: Manufacturer: syz [ 607.662512][ T5894] usb 2-1: SerialNumber: syz [ 607.691423][ T5894] usb 2-1: config 0 descriptor?? [ 607.902454][ T5921] usb 5-1: USB disconnect, device number 123 [ 607.941598][T11973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.951054][T11973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.140828][ T5894] usb 3-1: USB disconnect, device number 119 [ 608.267798][ T10] usb 1-1: USB disconnect, device number 5 [ 609.636435][ T5840] pegasus 4-1:0.0: setup Pegasus II specific registers [ 609.763150][ T5840] pegasus 4-1:0.0: can't locate MII phy, using default [ 609.823446][ T5840] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, ae:ff:fa:5a:e4:d9 [ 609.837804][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 609.869861][ T5840] usb 4-1: USB disconnect, device number 8 [ 610.148895][ T5921] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 610.536569][ T5921] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 610.584232][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.665185][ T5921] usb 3-1: config 0 descriptor?? [ 610.675747][ T5923] usb 2-1: USB disconnect, device number 124 [ 610.689895][ T5840] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 610.918739][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 610.978701][ T5894] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 611.011207][ T5840] usb 5-1: config 0 has no interfaces? [ 611.054767][ T5840] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 611.068971][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 611.092509][ T24] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.37 [ 611.104915][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.123675][ T24] usb 4-1: Product: syz [ 611.132319][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.133924][ T24] usb 4-1: Manufacturer: syz [ 611.166717][ T24] usb 4-1: SerialNumber: syz [ 611.190515][ T24] usb 4-1: config 0 descriptor?? [ 611.198334][ T5840] usb 5-1: Product: syz [ 611.211818][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 611.219337][ T5894] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 611.238354][ T5840] usb 5-1: Manufacturer: syz [ 611.247783][ T5894] usb 1-1: config 0 has no interface number 0 [ 611.256887][ T5840] usb 5-1: SerialNumber: syz [ 611.264374][ T5894] usb 1-1: config 0 interface 235 has no altsetting 0 [ 611.279110][ T5840] usb 5-1: config 0 descriptor?? [ 611.292298][ T5894] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 611.301724][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.310405][ T5894] usb 1-1: Product: syz [ 611.330829][ T5894] usb 1-1: Manufacturer: syz [ 611.335526][ T5894] usb 1-1: SerialNumber: syz [ 611.361835][ T5894] usb 1-1: config 0 descriptor?? [ 611.380022][ T5894] keyspan 1-1:0.235: Keyspan 1 port adapter converter detected [ 611.388224][ T5894] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 87 [ 611.424863][ T5894] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 7 [ 611.438626][ T5923] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 611.448315][ T5894] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 81 [ 611.466895][ T5894] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 1 [ 611.484571][ T5894] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 85 [ 611.505648][ T5894] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 611.526334][T12012] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1829'. [ 611.535481][T12012] 0ªX¹¦D: renamed from gretap0 [ 611.543591][T12012] 0ªX¹¦D: entered allmulticast mode [ 611.556696][T12012] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 611.585560][ T47] usb 1-1: USB disconnect, device number 6 [ 611.624527][ T47] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 611.634216][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 611.647532][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 611.665779][ T47] keyspan 1-1:0.235: device disconnected [ 611.685943][ T5923] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 611.716612][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.751669][ T5923] usb 2-1: Product: syz [ 611.761947][ T5923] usb 2-1: Manufacturer: syz [ 611.772938][ T5923] usb 2-1: SerialNumber: syz [ 611.791745][ T5923] usb 2-1: config 0 descriptor?? [ 611.808364][ T5923] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 611.822137][ T5923] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 612.161292][T12004] netlink: 'syz.2.1827': attribute type 3 has an invalid length. [ 612.185341][ T5921] pegasus 3-1:0.0: can't reset MAC [ 612.191194][ T5921] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 612.411007][ T5923] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 612.568551][ T5894] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 612.730480][ T5894] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 612.743459][ T5894] usb 1-1: config 0 interface 0 has no altsetting 0 [ 612.761282][ T5894] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 612.774160][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.782424][ T5894] usb 1-1: Product: syz [ 612.786726][ T5894] usb 1-1: Manufacturer: syz [ 612.791494][ T5894] usb 1-1: SerialNumber: syz [ 612.799478][ T5894] usb 1-1: config 0 descriptor?? [ 612.808377][ T5894] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 612.816270][ T5894] keyspan 1-1:0.0: unsupported endpoint type 0 [ 612.823480][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 612.833934][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 612.843511][ T5923] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 612.843856][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 612.856680][ T5923] em28xx 2-1:0.0: board has no eeprom [ 612.860001][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 612.873071][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 612.881761][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 612.892995][ T5894] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 612.904675][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 612.912970][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 612.922056][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 612.930262][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 612.938100][ T5894] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 612.949123][ T5894] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 613.049332][ T24] gspca_stk1135: reg_w 0x200 err -71 [ 613.076087][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 613.096296][ T24] gspca_stk1135: Sensor write failed [ 613.117449][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 613.125072][ T24] gspca_stk1135: Sensor write failed [ 613.131537][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 613.138031][ T24] gspca_stk1135: Sensor read failed [ 613.144309][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 613.152981][ T24] gspca_stk1135: Sensor read failed [ 613.158253][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 613.160483][ T5894] usb 1-1: USB disconnect, device number 7 [ 613.166354][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 613.177760][ T24] gspca_stk1135: Sensor read failed [ 613.191175][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 613.198056][ T24] gspca_stk1135: Sensor read failed [ 613.216286][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 613.226763][ T24] gspca_stk1135: Sensor write failed [ 613.235296][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 613.242390][ T5894] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 613.245944][ T24] gspca_stk1135: Sensor write failed [ 613.267714][ T24] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 613.273617][ T10] usb 3-1: USB disconnect, device number 120 [ 613.296592][ T5894] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 613.314010][ T24] usb 4-1: USB disconnect, device number 9 [ 613.328203][ T5894] keyspan 1-1:0.0: device disconnected [ 613.462304][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'. [ 613.631144][ T24] usb 5-1: USB disconnect, device number 124 [ 613.919838][T12026] em28xx 2-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 613.988904][ T5923] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 614.002941][ T5923] em28xx 2-1:0.0: dvb set to bulk mode. [ 614.027429][ T47] em28xx 2-1:0.0: Binding DVB extension [ 614.072273][ T5923] usb 2-1: USB disconnect, device number 125 [ 614.101126][ T5840] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 614.144984][ T5923] em28xx 2-1:0.0: Disconnecting em28xx [ 614.187601][ T47] em28xx 2-1:0.0: Registering input extension [ 614.213985][ T5923] em28xx 2-1:0.0: Closing input extension [ 614.256042][ T5923] em28xx 2-1:0.0: Freeing device [ 614.269391][ T5840] usb 1-1: device descriptor read/64, error -71 [ 614.413419][ T5894] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 614.548620][ T5840] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 614.579283][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 614.589060][ T5894] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.37 [ 614.598646][ T47] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 614.599060][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.614831][ T5894] usb 4-1: Product: syz [ 614.643992][ T5894] usb 4-1: Manufacturer: syz [ 614.708880][ T5840] usb 1-1: device descriptor read/64, error -71 [ 614.722526][ T5894] usb 4-1: SerialNumber: syz [ 614.761160][ T5894] usb 4-1: config 0 descriptor?? [ 614.768988][ T47] usb 3-1: device descriptor read/64, error -71 [ 614.788391][ T5894] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 614.807711][ T10] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 614.819376][ T5840] usb usb1-port1: attempt power cycle [ 615.009590][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 615.018713][ T47] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 615.067955][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.083805][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 615.093547][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.104104][ T10] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 615.140862][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.215472][ T10] hub 5-1:1.0: bad descriptor, ignoring hub [ 615.228733][ T5840] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 615.228787][ T47] usb 3-1: device descriptor read/64, error -71 [ 615.250794][ T10] hub 5-1:1.0: probe with driver hub failed with error -5 [ 615.268133][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 615.273721][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 615.279775][ T5840] usb 1-1: device descriptor read/8, error -71 [ 615.286187][ T10] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 615.349332][ T47] usb usb3-port1: attempt power cycle [ 615.421576][T12049] sctp: [Deprecated]: syz.4.1839 (pid 12049) Use of struct sctp_assoc_value in delayed_ack socket option. [ 615.421576][T12049] Use struct sctp_sack_info instead [ 615.452972][ T5923] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 615.518749][ T5840] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 615.548908][ T10] usb 5-1: USB disconnect, device number 125 [ 615.559123][ T5840] usb 1-1: device descriptor read/8, error -71 [ 615.629324][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 615.640966][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 615.653163][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 615.669342][ T5840] usb usb1-port1: unable to enumerate USB device [ 615.671866][ T5923] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 615.686923][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.695598][ T47] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 615.704774][ T5923] usb 2-1: Product: syz [ 615.709117][ T5923] usb 2-1: Manufacturer: syz [ 615.713906][ T5923] usb 2-1: SerialNumber: syz [ 615.719907][ T47] usb 3-1: device descriptor read/8, error -71 [ 615.737118][ T5923] usb 2-1: config 0 descriptor?? [ 615.750588][ T5923] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 615.761008][ T5923] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 615.958689][ T47] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 615.979906][ T47] usb 3-1: device descriptor read/8, error -71 [ 616.089275][ T47] usb usb3-port1: unable to enumerate USB device [ 616.188289][T12045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.197396][T12045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.370388][ T5923] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 616.378034][ T5923] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 616.996347][ T5923] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 617.021025][ T5923] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 617.021087][T12060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1848'. [ 617.036747][ T5923] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 617.049855][ T5923] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 617.057096][ T5923] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 617.069253][ T5923] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 617.419394][ T47] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 617.473715][ T5894] gspca_stk1135: reg_w 0x350 err -71 [ 617.493099][ T5923] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 617.500282][ T5923] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 617.508115][ T5923] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 617.525270][ T5923] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 617.533154][ T5923] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 617.560865][ T5923] usb 2-1: USB disconnect, device number 126 [ 617.578693][ T24] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 617.605535][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 617.636574][ T5894] gspca_stk1135: Sensor write failed [ 617.648266][ T47] usb 1-1: config 0 has no interfaces? [ 617.663473][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 617.664706][ T47] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 617.686375][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.695886][ T47] usb 1-1: Product: syz [ 617.702657][ T47] usb 1-1: Manufacturer: syz [ 617.707420][ T5894] gspca_stk1135: Sensor write failed [ 617.713593][ T47] usb 1-1: SerialNumber: syz [ 617.723282][ T47] usb 1-1: config 0 descriptor?? [ 617.741095][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 617.753089][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.785071][ T24] usb 5-1: config 0 descriptor?? [ 617.791650][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 617.800401][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 617.820951][ T5894] gspca_stk1135: Sensor read failed [ 617.826371][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 617.847398][ T5894] gspca_stk1135: Sensor read failed [ 617.858179][ T5894] gspca_stk1135: Detected sensor type unknown (0x0) [ 617.873546][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 617.885172][ T5894] gspca_stk1135: Sensor read failed [ 617.896808][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 617.912093][ T5894] gspca_stk1135: Sensor read failed [ 617.927361][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 617.940917][ T5894] gspca_stk1135: Sensor write failed [ 617.954687][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 617.961205][ T5894] gspca_stk1135: Sensor write failed [ 617.974444][ T5894] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 617.984735][T12066] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1849'. [ 617.996674][ T5894] usb 4-1: USB disconnect, device number 10 [ 618.009661][T12066] 1ªX¹¦D: renamed from 30ªX¹¦D [ 618.048870][T12066] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 618.098967][ T24] gspca_sn9c2028: read1 error -71 [ 618.114917][ T24] gspca_sn9c2028: read1 error -71 [ 618.124989][ T24] gspca_sn9c2028: read1 error -71 [ 618.135145][ T24] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 618.152364][ T24] usb 5-1: USB disconnect, device number 126 [ 618.465226][T12078] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 618.538694][ T24] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 618.587916][T12080] loop2: detected capacity change from 0 to 7 [ 618.647229][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 618.656473][ C1] buffer_io_error: 14 callbacks suppressed [ 618.656490][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 618.726156][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.757848][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.768676][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 618.777862][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 618.785998][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 618.795481][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 618.807808][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 618.817116][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 618.826384][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 618.835639][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 618.844742][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 618.845805][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 618.853978][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 618.855063][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 618.880410][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 618.888344][ T7060] ldm_validate_partition_table(): Disk read failed. [ 618.896401][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 618.905661][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 618.918543][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 618.927767][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 618.937231][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 618.946450][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 618.955775][ T7060] Dev loop2: unable to read RDB block 0 [ 618.962010][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.986920][ T24] usb 2-1: config 0 descriptor?? [ 618.987792][ T7060] loop2: unable to read partition table [ 619.031305][ T7060] loop2: partition table beyond EOD, truncated [ 619.132529][T12080] ldm_validate_partition_table(): Disk read failed. [ 619.140702][T12080] Dev loop2: unable to read RDB block 0 [ 619.150630][T12080] loop2: unable to read partition table [ 619.156541][T12080] loop2: partition table beyond EOD, truncated [ 619.256532][T12080] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 619.635859][T12076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.642773][T12095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1861'. [ 619.652062][T12076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.681251][T12076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.741015][T12076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.759184][ T47] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 619.928960][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 619.941909][ T47] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 619.954092][ T47] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 619.972302][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 620.044152][ T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 620.078717][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.096561][ T47] usb 4-1: Product: syz [ 620.101379][ T47] usb 4-1: Manufacturer: syz [ 620.107558][ T47] usb 4-1: SerialNumber: syz [ 620.439521][ T47] usb 4-1: 0:2 : does not exist [ 620.492100][ T5923] usb 1-1: USB disconnect, device number 12 [ 620.553096][ T47] usb 4-1: USB disconnect, device number 11 [ 620.621106][ T24] uclogic 0003:256C:006D.0044: v1 frame probing failed: -71 [ 620.629805][ T24] uclogic 0003:256C:006D.0044: failed probing parameters: -71 [ 620.663842][ T24] uclogic 0003:256C:006D.0044: probe with driver uclogic failed with error -71 [ 620.679650][ T24] usb 2-1: USB disconnect, device number 127 [ 620.729568][ T5921] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 620.789779][ T7060] udevd[7060]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.898722][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 620.905639][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 620.927874][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 620.964721][ T5921] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 620.978974][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.987336][ T5921] usb 3-1: Product: syz [ 620.992722][ T5921] usb 3-1: Manufacturer: syz [ 621.007770][ T5921] usb 3-1: SerialNumber: syz [ 621.026426][ T5921] usb 3-1: config 0 descriptor?? [ 621.046751][ T5921] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 621.080989][ T5921] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 621.178741][ T5894] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 621.340972][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.366128][ T5894] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 621.384075][ T5894] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 621.396543][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.406871][ T5894] usb 1-1: Product: syz [ 621.414067][ T5894] usb 1-1: Manufacturer: syz [ 621.420906][ T5894] usb 1-1: SerialNumber: syz [ 621.433103][ T5894] usb 1-1: config 0 descriptor?? [ 621.655671][ T5921] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 621.673174][ T5921] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 621.686360][ T47] usb 1-1: USB disconnect, device number 13 [ 621.757547][T12124] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1872'. [ 622.307243][ T5921] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 622.340100][ T5921] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 622.354607][ T5921] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 622.369153][ T5921] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 622.391702][ T5921] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 622.401689][ T5921] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 622.468404][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1878'. [ 622.498195][T12141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1878'. [ 622.621424][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 622.640668][T12147] netlink: 'syz.1.1882': attribute type 10 has an invalid length. [ 622.648751][T12147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1882'. [ 622.660029][T12147] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 622.769190][ T47] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 622.790861][ T24] usb 4-1: config 3 has an invalid interface number: 168 but max is 0 [ 622.808603][ T24] usb 4-1: config 3 has no interface number 0 [ 622.827039][ T24] usb 4-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 622.847000][ T5921] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 622.854759][ T5921] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 622.861718][ T5901] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 622.869754][ T24] usb 4-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 622.881237][ T5921] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 622.887603][ T5921] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 622.896123][ T24] usb 4-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 622.906681][ T5921] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 622.915876][ T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 622.927694][ T5921] usb 3-1: USB disconnect, device number 125 [ 622.933994][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.956734][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.980362][T12135] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 622.986677][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.000286][ T47] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 623.009983][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.037160][ T47] usb 5-1: config 0 descriptor?? [ 623.049087][T12152] input: syz0 as /devices/virtual/input/input124 [ 623.055814][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 623.070793][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 623.083870][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 623.102518][ T5901] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 623.118848][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.126977][ T5901] usb 1-1: Product: syz [ 623.133061][ T5901] usb 1-1: Manufacturer: syz [ 623.137783][ T5901] usb 1-1: SerialNumber: syz [ 623.145930][ T5901] usb 1-1: config 0 descriptor?? [ 623.156936][ T5901] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 623.166661][ T5901] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 623.225041][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1876'. [ 623.240900][ T24] usb 4-1: string descriptor 0 read error: -71 [ 623.253563][ T24] keyspan 4-1:3.168: Keyspan 2 port adapter converter detected [ 623.262380][ T24] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 1 [ 623.274111][ T24] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 84 [ 623.282629][ T24] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 2 [ 623.300335][ T24] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 623.320715][ T24] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 88 [ 623.338686][ T24] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 6 [ 623.353202][ T24] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 623.382641][ T24] usb 4-1: USB disconnect, device number 12 [ 623.478380][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 623.504537][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 623.528063][ T24] keyspan 4-1:3.168: device disconnected [ 623.599436][ T5894] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 623.656366][T12158] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1886'. [ 623.668244][T12158] 0·: renamed from hsr0 (while UP) [ 623.685534][T12143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.707742][T12158] 0·: entered allmulticast mode [ 623.712924][T12143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.832717][T12158] hsr_slave_0: entered allmulticast mode [ 623.841961][T12158] hsr_slave_1: entered allmulticast mode [ 623.848682][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 623.849250][T12158] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 623.869885][T12143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.870210][T12143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.900802][ T5901] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 623.913567][ T5901] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 623.982517][T12161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1887'. [ 624.398687][ T24] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 624.474301][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.480873][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.574231][ T5901] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 624.593259][ T24] usb 3-1: config 0 has no interfaces? [ 624.599608][ T5901] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 624.616841][ T5901] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 624.636087][ T5901] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 624.642934][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 624.654237][ T5901] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 624.667658][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.689680][ T5901] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 624.696395][ T24] usb 3-1: Product: syz [ 624.718560][ T24] usb 3-1: Manufacturer: syz [ 624.730536][ T24] usb 3-1: SerialNumber: syz [ 624.750262][ T24] usb 3-1: config 0 descriptor?? [ 624.865724][ T47] uclogic 0003:256C:006D.0045: v1 frame probing failed: -71 [ 624.898285][ T47] uclogic 0003:256C:006D.0045: failed probing parameters: -71 [ 624.925624][ T47] uclogic 0003:256C:006D.0045: probe with driver uclogic failed with error -71 [ 625.082910][ T47] usb 5-1: USB disconnect, device number 127 [ 625.220377][ T5840] usb 3-1: USB disconnect, device number 126 [ 625.329355][ T5901] em28xx 1-1:0.0: couldn't setup AC97 register 20 [ 625.337272][ T5901] em28xx 1-1:0.0: couldn't setup AC97 register 16 [ 625.363993][ T5901] em28xx 1-1:0.0: couldn't setup AC97 register 12 [ 625.494529][ T5901] em28xx 1-1:0.0: couldn't setup AC97 register 14 [ 625.510249][ T5901] em28xx 1-1:0.0: couldn't setup AC97 register 18 [ 625.520000][ T5901] em28xx 1-1:0.0: couldn't setup AC97 register 22 [ 625.527020][ T5901] em28xx 1-1:0.0: couldn't setup AC97 register 24 [ 625.534786][ T5901] em28xx 1-1:0.0: Binding audio extension [ 625.548210][ T5901] em28xx 1-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 625.570256][T12182] dccp_v6_rcv: dropped packet with invalid checksum [ 625.621027][ T5901] em28xx 1-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 625.663984][ T5901] em28xx 1-1:0.0: alt 0 doesn't exist on interface 7 [ 625.696864][ T5901] usb 1-1: USB disconnect, device number 14 [ 625.714703][ T5901] em28xx 1-1:0.0: Disconnecting em28xx [ 625.721509][ T5901] em28xx 1-1:0.0: Closing audio extension [ 625.862963][ T5901] em28xx 1-1:0.0: Freeing device [ 626.067566][T12189] openvswitch: netlink: Tunnel attr 7 has unexpected len 8 expected 0 [ 626.319581][T12196] netlink: 'syz.2.1897': attribute type 4 has an invalid length. [ 626.349962][T12196] netlink: 'syz.2.1897': attribute type 2 has an invalid length. [ 626.369482][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 626.538798][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 626.564917][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 626.638514][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 626.708488][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 626.747960][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.789891][ T10] usb 1-1: Product: syz [ 626.810824][ T10] usb 1-1: Manufacturer: syz [ 626.824153][ T10] usb 1-1: SerialNumber: syz [ 626.864616][ T10] usb 1-1: config 0 descriptor?? [ 626.900538][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 626.949801][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 627.131089][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short [ 627.158649][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 627.204491][ T5894] usb 2-1: can't read configurations, error -71 [ 627.368742][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 627.501919][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 627.509494][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 627.668982][ T24] usb 4-1: config 0 has no interfaces? [ 627.695408][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 627.778839][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.828725][ T24] usb 4-1: Product: syz [ 627.832962][ T24] usb 4-1: Manufacturer: syz [ 627.877732][ T24] usb 4-1: SerialNumber: syz [ 627.904604][ T24] usb 4-1: config 0 descriptor?? [ 628.098686][ T5894] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 628.123450][ T10] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 628.131378][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 628.163537][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 628.173269][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 628.192155][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 628.199859][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 628.250590][ T5894] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 628.274197][ T5894] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 628.288795][ T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 628.306623][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.340057][ T5894] usb 2-1: config 0 descriptor?? [ 628.480852][ T24] usb 5-1: config 0 has an invalid interface number: 235 but max is 0 [ 628.502750][ T24] usb 5-1: config 0 has no interface number 0 [ 628.514044][ T24] usb 5-1: config 0 interface 235 has no altsetting 0 [ 628.525137][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 628.544959][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.570234][ T5895] usb 4-1: USB disconnect, device number 13 [ 628.578696][ T24] usb 5-1: Product: syz [ 628.603311][ T24] usb 5-1: Manufacturer: syz [ 628.616468][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 628.637100][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 628.637892][ T24] usb 5-1: SerialNumber: syz [ 628.661265][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 628.678774][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 628.698546][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 628.719812][ T47] usb 2-1: USB disconnect, device number 3 [ 628.761556][ T10] usb 1-1: USB disconnect, device number 15 [ 628.777286][ T24] usb 5-1: config 0 descriptor?? [ 628.792266][ T24] keyspan 5-1:0.235: Keyspan 1 port adapter converter detected [ 628.833086][ T24] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 87 [ 628.857693][ T24] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 7 [ 628.879325][ T24] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 81 [ 628.887320][ T24] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 1 [ 628.897136][ T24] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 85 [ 628.907007][ T24] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 628.948739][ T5901] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 628.995980][ T24] usb 5-1: USB disconnect, device number 2 [ 629.014887][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 629.025803][ T24] keyspan 5-1:0.235: device disconnected [ 629.112317][ T5901] usb 3-1: config 0 has no interfaces? [ 629.120285][ T5901] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 629.129695][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.137757][ T5901] usb 3-1: Product: syz [ 629.138729][ T5895] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 629.142580][ T5901] usb 3-1: Manufacturer: syz [ 629.154780][ T5901] usb 3-1: SerialNumber: syz [ 629.163265][ T5901] usb 3-1: config 0 descriptor?? [ 629.328664][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 629.336783][ T5895] usb 4-1: descriptor type invalid, skip [ 629.347037][ T5895] usb 4-1: descriptor type invalid, skip [ 629.359339][ T5895] usb 4-1: descriptor type invalid, skip [ 629.366861][ T5895] usb 4-1: config 0 has no interfaces? [ 629.377142][ T5895] usb 4-1: New USB device found, idVendor=0af0, idProduct=7031, bcdDevice=78.43 [ 629.386828][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.395172][ T5895] usb 4-1: Product: syz [ 629.399735][ T5895] usb 4-1: Manufacturer: syz [ 629.404419][ T5895] usb 4-1: SerialNumber: syz [ 629.412389][ T5895] usb 4-1: config 0 descriptor?? [ 629.471550][ T5895] usb 3-1: USB disconnect, device number 127 [ 629.508653][ T5901] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 629.663739][ T47] usb 4-1: USB disconnect, device number 14 [ 629.670163][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 629.685989][ T5901] usb 1-1: unable to get BOS descriptor or descriptor too short [ 629.696456][ T5901] usb 1-1: config 7 has an invalid interface number: 79 but max is 0 [ 629.718685][ T5901] usb 1-1: config 7 has no interface number 0 [ 629.724827][ T5901] usb 1-1: config 7 interface 79 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 629.747941][ T5901] usb 1-1: config 7 interface 79 altsetting 6 endpoint 0x7 has an invalid bInterval 64, changing to 10 [ 629.768928][ T5901] usb 1-1: config 7 interface 79 has no altsetting 0 [ 629.779315][ T5901] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f4.98 [ 629.798967][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.807068][ T5901] usb 1-1: Product: syz [ 629.818949][ T5901] usb 1-1: Manufacturer: syz [ 629.823622][ T5901] usb 1-1: SerialNumber: syz [ 629.852114][T12236] FAULT_INJECTION: forcing a failure. [ 629.852114][T12236] name failslab, interval 1, probability 0, space 0, times 0 [ 629.870055][T12236] CPU: 0 UID: 0 PID: 12236 Comm: syz.4.1910 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 629.870089][T12236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 629.870103][T12236] Call Trace: [ 629.870113][T12236] [ 629.870123][T12236] dump_stack_lvl+0x241/0x360 [ 629.870164][T12236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.870196][T12236] ? __pfx__printk+0x10/0x10 [ 629.870230][T12236] ? __pfx___might_resched+0x10/0x10 [ 629.870256][T12236] should_fail_ex+0x424/0x570 [ 629.870295][T12236] should_failslab+0xac/0x100 [ 629.870326][T12236] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 629.870347][T12236] ? __alloc_skb+0x1c2/0x480 [ 629.870378][T12236] __alloc_skb+0x1c2/0x480 [ 629.870409][T12236] ? __pfx___alloc_skb+0x10/0x10 [ 629.870449][T12236] netlink_dump+0x237/0xeb0 [ 629.870476][T12236] ? trace_contention_end+0x3c/0x120 [ 629.870500][T12236] ? __mutex_lock+0x380/0x10c0 [ 629.870530][T12236] ? __pfx_netlink_dump+0x10/0x10 [ 629.870553][T12236] ? __netlink_lookup+0x894/0x980 [ 629.870601][T12236] ? netlink_lookup+0x31/0x200 [ 629.870636][T12236] __netlink_dump_start+0x5a2/0x790 [ 629.870672][T12236] rtnetlink_rcv_msg+0xbba/0xd70 [ 629.870706][T12236] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 629.870732][T12236] ? __lock_acquire+0xad5/0xd80 [ 629.870759][T12236] ? __pfx_rtnl_dumpit+0x10/0x10 [ 629.870784][T12236] ? __pfx_tc_dump_chain+0x10/0x10 [ 629.870827][T12236] netlink_rcv_skb+0x208/0x480 [ 629.870855][T12236] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 629.870885][T12236] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 629.870931][T12236] ? netlink_deliver_tap+0x2e/0x1b0 [ 629.870960][T12236] ? netlink_deliver_tap+0x2e/0x1b0 [ 629.870989][T12236] netlink_unicast+0x7f8/0x9a0 [ 629.871023][T12236] ? __pfx_netlink_unicast+0x10/0x10 [ 629.871049][T12236] ? skb_put+0x114/0x1f0 [ 629.871087][T12236] netlink_sendmsg+0x8c3/0xcd0 [ 629.871123][T12236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.871156][T12236] ? aa_sock_msg_perm+0x91/0x160 [ 629.871190][T12236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.871215][T12236] __sock_sendmsg+0x221/0x270 [ 629.871244][T12236] ____sys_sendmsg+0x523/0x860 [ 629.871287][T12236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.871321][T12236] ? __fget_files+0x2a/0x420 [ 629.871342][T12236] ? __fget_files+0x2a/0x420 [ 629.871369][T12236] __sys_sendmsg+0x271/0x360 [ 629.871402][T12236] ? __pfx___sys_sendmsg+0x10/0x10 [ 629.871495][T12236] ? do_syscall_64+0xb6/0x210 [ 629.871520][T12236] do_syscall_64+0xf3/0x210 [ 629.871543][T12236] ? clear_bhb_loop+0x45/0xa0 [ 629.871570][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.871592][T12236] RIP: 0033:0x7fa93f38e169 [ 629.871611][T12236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.871630][T12236] RSP: 002b:00007fa9402d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.871653][T12236] RAX: ffffffffffffffda RBX: 00007fa93f5b5fa0 RCX: 00007fa93f38e169 [ 629.871669][T12236] RDX: 0000000000040020 RSI: 0000200000000280 RDI: 0000000000000003 [ 629.871683][T12236] RBP: 00007fa9402d3090 R08: 0000000000000000 R09: 0000000000000000 [ 629.871698][T12236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.871711][T12236] R13: 0000000000000000 R14: 00007fa93f5b5fa0 R15: 00007fa93f6dfa28 [ 629.871743][T12236] [ 630.288255][T12222] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:16384 [ 630.609161][ T5901] usb 1-1: USB disconnect, device number 16 [ 630.868872][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 630.878686][ T47] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 631.038645][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 631.049947][ T10] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 631.050334][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.071943][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.100544][ T10] usb 5-1: config 0 descriptor?? [ 631.114476][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.151135][ T47] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 631.163833][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 631.178547][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.197731][ T47] usb 4-1: config 0 descriptor?? [ 631.347210][T12260] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 631.376484][ T10] gspca_vc032x: reg_r err -32 [ 631.389783][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.389799][ T5901] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 631.395109][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.395125][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.395137][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.395149][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.395160][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.395172][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.496682][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.502487][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.507827][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.517352][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.522760][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.528354][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.537372][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.543047][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.548399][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.555353][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 631.559402][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.559423][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 631.559436][ T10] gspca_vc032x: Unknown sensor... [ 631.559529][ T10] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 631.613799][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 631.625671][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 631.649875][ T5901] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 631.659346][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.667502][ T5901] usb 3-1: Product: syz [ 631.672721][ T5901] usb 3-1: Manufacturer: syz [ 631.677964][ T5901] usb 3-1: SerialNumber: syz [ 631.701706][ T5901] usb 3-1: config 0 descriptor?? [ 631.716580][ T5901] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 631.726059][ T5901] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 631.774192][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 631.934235][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 632.051016][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 632.076060][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 632.094574][ T24] usb 1-1: can't read configurations, error -71 [ 632.258642][ T5895] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 632.273254][ T47] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0046/input/input125 [ 632.317585][ T5901] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 632.325205][ T5901] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 632.365724][ T47] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0046/input/input126 [ 632.386670][ T47] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0046/input/input127 [ 632.406690][ T47] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0046/input/input128 [ 632.430854][ T47] uclogic 0003:256C:006D.0046: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 632.454586][ T5895] usb 2-1: config 0 has no interfaces? [ 632.463615][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 632.473334][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.481529][ T5895] usb 2-1: Product: syz [ 632.485922][ T5895] usb 2-1: Manufacturer: syz [ 632.491638][ T5895] usb 2-1: SerialNumber: syz [ 632.500777][ T5895] usb 2-1: config 0 descriptor?? [ 632.663862][ T5895] usb 4-1: USB disconnect, device number 15 [ 632.827079][ T10] usb 2-1: USB disconnect, device number 4 [ 632.961253][ T5901] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 632.973699][ T5901] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 632.984182][ T5901] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 632.994887][ T5901] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 633.002819][ T5901] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 633.249060][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 633.389161][ T24] usb 1-1: device descriptor read/64, error -71 [ 633.692452][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 633.765641][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 633.779127][ T5894] usb 5-1: USB disconnect, device number 3 [ 633.788775][ T5895] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 633.822558][ T5901] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 633.841429][ T24] usb 1-1: device descriptor read/64, error -71 [ 633.852922][ T5901] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 633.866310][ T5901] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 633.874522][ T5901] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 633.923375][ T5901] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 633.950315][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.951038][ T24] usb usb1-port1: attempt power cycle [ 633.964284][ T5895] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 633.976230][ T5895] usb 4-1: config 0 has no interface number 0 [ 633.995138][ T10] usb 2-1: config 0 has no interfaces? [ 634.002333][ T5895] usb 4-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 634.002524][ T5901] usb 3-1: USB disconnect, device number 2 [ 634.019120][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 634.044489][ T5895] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 634.055972][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.064589][ T5895] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 634.077836][ T10] usb 2-1: config 0 descriptor?? [ 634.085215][ T5895] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 634.159028][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.182940][ T5895] usb 4-1: config 0 descriptor?? [ 634.194297][ T5895] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input129 [ 634.389518][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 634.400821][T12287] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1923'. [ 634.469581][ T24] usb 1-1: device descriptor read/8, error -71 [ 634.580851][T12287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1923'. [ 634.808521][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 634.829194][ T24] usb 1-1: device descriptor read/8, error -71 [ 634.939660][ T24] usb usb1-port1: unable to enumerate USB device [ 635.655251][T12321] loop6: detected capacity change from 0 to 63 [ 635.668921][ T5895] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 635.699678][ T7060] buffer_io_error: 25 callbacks suppressed [ 635.699694][ T7060] Buffer I/O error on dev loop6, logical block 0, async page read [ 635.728683][ T7060] Buffer I/O error on dev loop6, logical block 0, async page read [ 635.740164][ T7060] Buffer I/O error on dev loop6, logical block 0, async page read [ 635.748400][ T7060] Buffer I/O error on dev loop6, logical block 0, async page read [ 635.757491][ T7060] Buffer I/O error on dev loop6, logical block 0, async page read [ 635.860775][ T7060] Buffer I/O error on dev loop6, logical block 0, async page read [ 635.899041][ T5895] usb 3-1: config 0 has no interfaces? [ 635.908092][ T7060] Buffer I/O error on dev loop6, logical block 0, async page read [ 635.927353][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 635.937745][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.951350][ T5895] usb 3-1: Product: syz [ 635.955710][ T5895] usb 3-1: Manufacturer: syz [ 635.975254][ T7060] Buffer I/O error on dev loop6, logical block 0, async page read [ 635.983519][ T5895] usb 3-1: SerialNumber: syz [ 636.000905][ T7060] Buffer I/O error on dev loop6, logical block 0, async page read [ 636.012485][ T5895] usb 3-1: config 0 descriptor?? [ 636.027688][ T7060] Buffer I/O error on dev loop6, logical block 0, async page read [ 636.048561][T12327] FAULT_INJECTION: forcing a failure. [ 636.048561][T12327] name failslab, interval 1, probability 0, space 0, times 0 [ 636.062795][T12327] CPU: 0 UID: 0 PID: 12327 Comm: syz.0.1932 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 636.062827][T12327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 636.062839][T12327] Call Trace: [ 636.062846][T12327] [ 636.062853][T12327] dump_stack_lvl+0x241/0x360 [ 636.062886][T12327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.062910][T12327] ? __pfx__printk+0x10/0x10 [ 636.062935][T12327] ? __pfx___might_resched+0x10/0x10 [ 636.062954][T12327] should_fail_ex+0x424/0x570 [ 636.062981][T12327] should_failslab+0xac/0x100 [ 636.063000][T12327] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 636.063017][T12327] ? __alloc_skb+0x1c2/0x480 [ 636.063042][T12327] __alloc_skb+0x1c2/0x480 [ 636.063068][T12327] ? __pfx___alloc_skb+0x10/0x10 [ 636.063093][T12327] ? netlink_has_listeners+0x73/0x3a0 [ 636.063114][T12327] alloc_uevent_skb+0x74/0x230 [ 636.063138][T12327] kobject_uevent_net_broadcast+0x2fd/0x580 [ 636.063163][T12327] kobject_uevent_env+0x57d/0x8e0 [ 636.063190][T12327] device_add+0x63b/0xbf0 [ 636.063219][T12327] input_register_device+0x9ed/0x10c0 [ 636.063248][T12327] uinput_create_device+0x40e/0x630 [ 636.063273][T12327] uinput_ioctl_handler+0x496/0x17f0 [ 636.063293][T12327] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 636.063319][T12327] ? ksys_write+0x266/0x2d0 [ 636.063346][T12327] ? __pfx_uinput_ioctl+0x10/0x10 [ 636.063364][T12327] __se_sys_ioctl+0xf1/0x160 [ 636.063391][T12327] do_syscall_64+0xf3/0x210 [ 636.063409][T12327] ? clear_bhb_loop+0x45/0xa0 [ 636.063427][T12327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.063442][T12327] RIP: 0033:0x7f00f4f8e169 [ 636.063456][T12327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.063470][T12327] RSP: 002b:00007f00f5ddb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.063487][T12327] RAX: ffffffffffffffda RBX: 00007f00f51b5fa0 RCX: 00007f00f4f8e169 [ 636.063498][T12327] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 636.063508][T12327] RBP: 00007f00f5ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 636.063518][T12327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 636.063527][T12327] R13: 0000000000000000 R14: 00007f00f51b5fa0 R15: 00007f00f52dfa28 [ 636.063551][T12327] [ 636.063738][T12327] input: syz0 as /devices/virtual/input/input130 [ 636.462922][T12330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1933'. [ 636.478513][T12330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1933'. [ 636.778766][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 636.794780][ T5921] usb 4-1: USB disconnect, device number 16 [ 636.878865][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 636.997258][ T10] usb 1-1: config 0 has no interfaces? [ 637.025613][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 637.042414][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.052166][ T10] usb 1-1: Product: syz [ 637.056592][ T10] usb 1-1: Manufacturer: syz [ 637.068046][ T10] usb 1-1: SerialNumber: syz [ 637.070481][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.082930][ T10] usb 1-1: config 0 descriptor?? [ 637.110391][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 637.127824][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.154810][ T24] usb 5-1: config 0 descriptor?? [ 637.164872][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 637.328730][ T5921] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 637.339232][ T10] usb 1-1: USB disconnect, device number 23 [ 637.494069][ T5895] usb 2-1: USB disconnect, device number 5 [ 637.508766][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 637.526155][ T5921] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 637.538226][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.562027][ T5921] usb 4-1: config 0 descriptor?? [ 637.572963][ T5921] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 637.585542][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 637.593472][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 637.602993][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 637.613032][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 637.644033][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'. [ 637.676837][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 637.687842][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 637.910203][T12346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.921184][T12346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.296195][ T5901] usb 3-1: USB disconnect, device number 3 [ 638.423631][T12363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1944'. [ 638.434523][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 638.599730][ T5921] gspca_vc032x: reg_w err -71 [ 638.610736][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.635458][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.649158][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.661647][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.675058][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.692550][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.705142][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.718644][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.724150][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.730364][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.736350][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.765775][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.775201][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.784695][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.806217][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.824198][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.854878][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.867314][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 638.880175][ T5921] gspca_vc032x: Unknown sensor... [ 638.892204][ T5921] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 638.923518][ T5921] usb 4-1: USB disconnect, device number 17 [ 639.389052][ T5921] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 639.529358][ T5921] usb 2-1: device descriptor read/64, error -71 [ 639.538578][ T5895] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 639.558527][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 639.662672][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 639.672026][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 639.688995][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 639.691907][ T5895] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 639.702155][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 639.719289][ T10] usb 4-1: config 0 has no interfaces? [ 639.726811][ T5895] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 639.739718][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 639.752946][ T5895] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 639.756947][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 639.765648][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 639.779286][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 639.786970][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 639.794091][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 639.794962][ T5895] usb 3-1: Manufacturer: syz [ 639.806021][ T24] pwc: Registered as video103. [ 639.811415][ T5921] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 639.817799][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.821530][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input131 [ 639.863689][ T5895] usb 3-1: SerialNumber: syz [ 639.879072][ T10] usb 4-1: Product: syz [ 639.887520][ T10] usb 4-1: Manufacturer: syz [ 639.895392][ T24] usb 5-1: USB disconnect, device number 4 [ 639.899236][ T10] usb 4-1: SerialNumber: syz [ 639.937502][ T10] usb 4-1: config 0 descriptor?? [ 639.978789][ T5921] usb 2-1: device descriptor read/64, error -71 [ 640.089637][ T5921] usb usb2-port1: attempt power cycle [ 640.279049][T12399] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1955' sets config #15729 [ 640.298376][T12399] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1955' sets config #1 [ 640.424055][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'. [ 640.449150][ T5921] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 640.518257][ T5921] usb 2-1: device descriptor read/8, error -71 [ 640.768556][ T5921] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 640.810248][ T5921] usb 2-1: device descriptor read/8, error -71 [ 640.959242][ T5921] usb usb2-port1: unable to enumerate USB device [ 641.188773][ T5895] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 641.232461][ T5895] usb 3-1: USB disconnect, device number 4 [ 641.614578][T12405] bridge2: entered promiscuous mode [ 641.620074][T12405] bridge2: entered allmulticast mode [ 641.786788][T12413] netlink: 'syz.0.1960': attribute type 10 has an invalid length. [ 641.795474][T12413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1960'. [ 641.807415][T12413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.877730][T12415] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1961'. [ 641.959033][ T5894] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 642.025108][T12418] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1962'. [ 642.197387][T12422] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1963'. [ 642.298889][ T5894] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 642.354711][ T5894] usb 5-1: can't read configurations, error -61 [ 642.528614][ T5894] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 642.705037][ T5894] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 642.713092][ T5894] usb 5-1: can't read configurations, error -61 [ 642.730072][ T5894] usb usb5-port1: attempt power cycle [ 642.972403][ T5895] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 643.078761][ T5894] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 643.128558][ T5894] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 643.156097][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 643.168932][ T5894] usb 5-1: can't read configurations, error -61 [ 643.177166][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 643.199345][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 643.213546][ T5895] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 643.227603][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.238352][ T5895] usb 3-1: Product: syz [ 643.243060][ T5895] usb 3-1: Manufacturer: syz [ 643.247701][ T5895] usb 3-1: SerialNumber: syz [ 643.266270][ T5895] usb 3-1: config 0 descriptor?? [ 643.290617][ T6462] bridge0: port 2(batadv0) entered disabled state [ 643.300658][ T5895] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 643.311125][ T5895] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 643.319497][ T6462] bridge_slave_0: left allmulticast mode [ 643.325899][ T5894] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 643.334415][ T6462] bridge_slave_0: left promiscuous mode [ 643.341311][ T6462] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.379855][ T5894] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 643.392446][ T5894] usb 5-1: can't read configurations, error -61 [ 643.415748][ T5894] usb usb5-port1: unable to enumerate USB device [ 644.032306][ T5895] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 644.061375][ T5895] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 644.113922][ T6462] bond0 (unregistering): (slave 4): Releasing backup interface [ 644.124463][ T6462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.135256][ T6462] bond0 (unregistering): Released all slaves [ 644.198068][ T6462] tipc: Left network mode [ 644.687027][ T5895] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 644.695387][ T5895] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 644.702801][ T5895] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 644.714496][ T5895] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 644.722300][ T5895] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 645.534931][ T5895] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 645.541844][ T5895] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 645.548212][ T5895] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 645.554762][ T5895] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 645.561364][ T5895] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 645.571222][ T5895] usb 3-1: USB disconnect, device number 5 [ 685.913048][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.919507][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.352260][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.358778][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 799.188718][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 799.199458][ T31] Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 [ 799.207120][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 799.216473][ T31] task:kworker/0:1 state:D stack:19800 pid:10 tgid:10 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 799.229314][ T31] Workqueue: events rfkill_sync_work [ 799.234687][ T31] Call Trace: [ 799.238000][ T31] [ 799.241062][ T31] __schedule+0x1b88/0x5240 [ 799.245949][ T31] ? do_raw_spin_lock+0x111/0x370 [ 799.251749][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 799.257192][ T31] ? schedule+0x163/0x360 [ 799.261711][ T31] ? __pfx___schedule+0x10/0x10 [ 799.266643][ T31] ? schedule+0x90/0x360 [ 799.271765][ T31] ? schedule+0x90/0x360 [ 799.276076][ T31] schedule+0x163/0x360 [ 799.280436][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 799.285292][ T31] schedule_preempt_disabled+0x13/0x30 [ 799.291578][ T31] __mutex_lock+0x805/0x10c0 [ 799.296245][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 799.301211][ T31] ? nfc_rfkill_set_block+0x50/0x310 [ 799.306565][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 799.312255][ T31] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 799.318227][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 799.324718][ T31] ? __lock_acquire+0xad5/0xd80 [ 799.330518][ T31] nfc_rfkill_set_block+0x50/0x310 [ 799.335698][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 799.341588][ T31] rfkill_set_block+0x1f1/0x440 [ 799.346565][ T31] rfkill_sync_work+0x12c/0x220 [ 799.351914][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 799.357810][ T31] process_scheduled_works+0xac3/0x18e0 [ 799.363943][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 799.370380][ T31] ? assign_work+0x367/0x3d0 [ 799.375051][ T31] worker_thread+0x870/0xd50 [ 799.380354][ T31] ? __kthread_parkme+0x1a8/0x200 [ 799.385556][ T31] ? __pfx_worker_thread+0x10/0x10 [ 799.390829][ T31] kthread+0x7b7/0x940 [ 799.394946][ T31] ? __pfx_worker_thread+0x10/0x10 [ 799.400633][ T31] ? __pfx_kthread+0x10/0x10 [ 799.405277][ T31] ? __pfx_kthread+0x10/0x10 [ 799.410122][ T31] ? __pfx_kthread+0x10/0x10 [ 799.414755][ T31] ? __pfx_kthread+0x10/0x10 [ 799.419733][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 799.425013][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 799.430888][ T31] ? __pfx_kthread+0x10/0x10 [ 799.435537][ T31] ret_from_fork+0x4b/0x80 [ 799.440048][ T31] ? __pfx_kthread+0x10/0x10 [ 799.444691][ T31] ret_from_fork_asm+0x1a/0x30 [ 799.449678][ T31] [ 799.452872][ T31] INFO: task udevd:5212 blocked for more than 143 seconds. [ 799.460318][ T31] Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 [ 799.467979][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 799.476880][ T31] task:udevd state:D stack:22600 pid:5212 tgid:5212 ppid:1 task_flags:0x400140 flags:0x00004002 [ 799.489004][ T31] Call Trace: [ 799.492323][ T31] [ 799.495290][ T31] __schedule+0x1b88/0x5240 [ 799.500002][ T31] ? schedule+0x163/0x360 [ 799.504400][ T31] ? __pfx___schedule+0x10/0x10 [ 799.509631][ T31] ? schedule+0x90/0x360 [ 799.513942][ T31] ? schedule+0x90/0x360 [ 799.518240][ T31] schedule+0x163/0x360 [ 799.522513][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 799.527327][ T31] schedule_preempt_disabled+0x13/0x30 [ 799.532900][ T31] __mutex_lock+0x805/0x10c0 [ 799.537539][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 799.542461][ T31] ? uevent_show+0x17d/0x340 [ 799.547116][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 799.552433][ T31] ? __kasan_kmalloc+0x9d/0xb0 [ 799.557264][ T31] ? uevent_show+0x163/0x340 [ 799.561978][ T31] uevent_show+0x17d/0x340 [ 799.566422][ T31] dev_attr_show+0x55/0xc0 [ 799.570942][ T31] sysfs_kf_seq_show+0x32b/0x4a0 [ 799.575947][ T31] ? __pfx_dev_attr_show+0x10/0x10 [ 799.581201][ T31] seq_read_iter+0x461/0xda0 [ 799.585876][ T31] vfs_read+0x9a0/0xb90 [ 799.590217][ T31] ? __pfx_vfs_read+0x10/0x10 [ 799.595134][ T31] ksys_read+0x19d/0x2d0 [ 799.599478][ T31] ? __pfx_ksys_read+0x10/0x10 [ 799.604286][ T31] ? do_syscall_64+0xb6/0x210 [ 799.609079][ T31] do_syscall_64+0xf3/0x210 [ 799.613625][ T31] ? clear_bhb_loop+0x45/0xa0 [ 799.618321][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.624348][ T31] RIP: 0033:0x7f8f40716b6a [ 799.628952][ T31] RSP: 002b:00007ffc3695adf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 799.637428][ T31] RAX: ffffffffffffffda RBX: 000055576c8e0450 RCX: 00007f8f40716b6a [ 799.645589][ T31] RDX: 0000000000001000 RSI: 000055576c914110 RDI: 000000000000000c [ 799.653631][ T31] RBP: 000055576c8e0450 R08: 000000000000000c R09: 0000000000000000 [ 799.661743][ T31] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 799.669997][ T31] R13: 0000000000003fff R14: 00007ffc3695b2d8 R15: 000000000000000a [ 799.678126][ T31] [ 799.681390][ T31] INFO: task syz-executor:5833 blocked for more than 143 seconds. [ 799.689513][ T31] Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 [ 799.697195][ T31] Blocked by coredump. [ 799.701933][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 799.710771][ T31] task:syz-executor state:D stack:23624 pid:5833 tgid:5833 ppid:5828 task_flags:0x40010c flags:0x00004002 [ 799.722851][ T31] Call Trace: [ 799.726171][ T31] [ 799.729205][ T31] __schedule+0x1b88/0x5240 [ 799.733801][ T31] ? schedule+0x163/0x360 [ 799.738153][ T31] ? __pfx___schedule+0x10/0x10 [ 799.743191][ T31] ? schedule+0x90/0x360 [ 799.747503][ T31] ? schedule+0x90/0x360 [ 799.752533][ T31] schedule+0x163/0x360 [ 799.756769][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 799.763537][ T31] schedule_preempt_disabled+0x13/0x30 [ 799.769149][ T31] __mutex_lock+0x805/0x10c0 [ 799.773793][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 799.778698][ T31] ? rfkill_unregister+0xd0/0x230 [ 799.783818][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 799.789006][ T31] ? __pfx_device_del+0x10/0x10 [ 799.793890][ T31] ? hci_sock_dev_event+0x480/0x660 [ 799.799169][ T31] rfkill_unregister+0xd0/0x230 [ 799.804075][ T31] hci_unregister_dev+0x366/0x510 [ 799.809246][ T31] vhci_release+0x80/0xd0 [ 799.813621][ T31] ? __pfx_vhci_release+0x10/0x10 [ 799.818806][ T31] __fput+0x3e9/0x9f0 [ 799.822836][ T31] task_work_run+0x251/0x310 [ 799.827473][ T31] ? __pfx_task_work_run+0x10/0x10 [ 799.832836][ T31] ? switch_task_namespaces+0xe4/0x110 [ 799.838518][ T31] do_exit+0xa11/0x27f0 [ 799.843206][ T31] ? __pfx_do_exit+0x10/0x10 [ 799.847819][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 799.853164][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 799.858542][ T31] do_group_exit+0x207/0x2c0 [ 799.863189][ T31] __x64_sys_exit_group+0x3f/0x40 [ 799.868314][ T31] x64_sys_call+0x26c3/0x26d0 [ 799.873125][ T31] do_syscall_64+0xf3/0x210 [ 799.877694][ T31] ? clear_bhb_loop+0x45/0xa0 [ 799.882589][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.888572][ T31] RIP: 0033:0x7f00f4f8e169 [ 799.893036][ T31] RSP: 002b:00007ffd6aed4d88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 799.901578][ T31] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f00f4f8e169 [ 799.909808][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 799.917921][ T31] RBP: 00007f00f51b6738 R08: 00007ffd6aed2b27 R09: 0000000000000008 [ 799.926144][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 799.934300][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 799.942382][ T31] [ 799.945464][ T31] INFO: task kworker/0:3:5840 blocked for more than 144 seconds. [ 799.953385][ T31] Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 [ 799.961092][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 799.969859][ T31] task:kworker/0:3 state:D stack:19248 pid:5840 tgid:5840 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 799.981949][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 799.988965][ T31] Call Trace: [ 799.992280][ T31] [ 799.995243][ T31] __schedule+0x1b88/0x5240 [ 799.999862][ T31] ? do_raw_spin_lock+0x111/0x370 [ 800.004952][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 800.010905][ T31] ? schedule+0x163/0x360 [ 800.015427][ T31] ? __pfx___schedule+0x10/0x10 [ 800.020411][ T31] ? schedule+0x90/0x360 [ 800.024723][ T31] ? schedule+0x90/0x360 [ 800.029153][ T31] schedule+0x163/0x360 [ 800.033371][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 800.038165][ T31] schedule_preempt_disabled+0x13/0x30 [ 800.044091][ T31] __mutex_lock+0x805/0x10c0 [ 800.048776][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 800.053615][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 800.059964][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 800.065028][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 800.070464][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 800.076543][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 800.082691][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 800.088594][ T31] process_scheduled_works+0xac3/0x18e0 [ 800.095608][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 800.101707][ T31] ? assign_work+0x367/0x3d0 [ 800.106389][ T31] worker_thread+0x870/0xd50 [ 800.111433][ T31] ? __kthread_parkme+0x1a8/0x200 [ 800.116514][ T31] ? __pfx_worker_thread+0x10/0x10 [ 800.121726][ T31] kthread+0x7b7/0x940 [ 800.125867][ T31] ? __pfx_worker_thread+0x10/0x10 [ 800.131082][ T31] ? __pfx_kthread+0x10/0x10 [ 800.135707][ T31] ? __pfx_kthread+0x10/0x10 [ 800.140408][ T31] ? __pfx_kthread+0x10/0x10 [ 800.145044][ T31] ? __pfx_kthread+0x10/0x10 [ 800.149807][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 800.155063][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 800.160383][ T31] ? __pfx_kthread+0x10/0x10 [ 800.165036][ T31] ret_from_fork+0x4b/0x80 [ 800.169570][ T31] ? __pfx_kthread+0x10/0x10 [ 800.174554][ T31] ret_from_fork_asm+0x1a/0x30 [ 800.179436][ T31] [ 800.182551][ T31] INFO: task kworker/u8:9:6462 blocked for more than 144 seconds. [ 800.190522][ T31] Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 [ 800.198177][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 800.206916][ T31] task:kworker/u8:9 state:D stack:20424 pid:6462 tgid:6462 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 800.219044][ T31] Workqueue: netns cleanup_net [ 800.223866][ T31] Call Trace: [ 800.227176][ T31] [ 800.230483][ T31] __schedule+0x1b88/0x5240 [ 800.235084][ T31] ? schedule+0x163/0x360 [ 800.239512][ T31] ? __pfx___schedule+0x10/0x10 [ 800.244430][ T31] ? schedule+0x90/0x360 [ 800.249010][ T31] ? schedule+0x90/0x360 [ 800.253322][ T31] schedule+0x163/0x360 [ 800.257542][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 800.262591][ T31] schedule_preempt_disabled+0x13/0x30 [ 800.268135][ T31] __mutex_lock+0x805/0x10c0 [ 800.272923][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 800.277752][ T31] ? rfkill_unregister+0xd0/0x230 [ 800.282923][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 800.288003][ T31] ? __pfx_device_del+0x10/0x10 [ 800.292978][ T31] rfkill_unregister+0xd0/0x230 [ 800.297905][ T31] wiphy_unregister+0x23d/0xaf0 [ 800.302846][ T31] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 800.309139][ T31] ? __pfx_wiphy_unregister+0x10/0x10 [ 800.314580][ T31] ? kfree+0x198/0x430 [ 800.318714][ T31] ? ieee80211_unregister_hw+0x144/0x2c0 [ 800.324397][ T31] ieee80211_unregister_hw+0x1e2/0x2c0 [ 800.329986][ T31] mac80211_hwsim_del_radio+0x2c6/0x4c0 [ 800.335619][ T31] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 800.341826][ T31] hwsim_exit_net+0x5c3/0x670 [ 800.346575][ T31] ? __pfx_hwsim_exit_net+0x10/0x10 [ 800.351972][ T31] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 800.357828][ T31] cleanup_net+0x814/0xd60 [ 800.362345][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 800.367336][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 800.373179][ T31] process_scheduled_works+0xac3/0x18e0 [ 800.378862][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 800.384909][ T31] ? assign_work+0x367/0x3d0 [ 800.389740][ T31] worker_thread+0x870/0xd50 [ 800.394382][ T31] ? __kthread_parkme+0x1a8/0x200 [ 800.399531][ T31] ? __pfx_worker_thread+0x10/0x10 [ 800.404686][ T31] kthread+0x7b7/0x940 [ 800.408840][ T31] ? __pfx_worker_thread+0x10/0x10 [ 800.413989][ T31] ? __pfx_kthread+0x10/0x10 [ 800.418855][ T31] ? __pfx_kthread+0x10/0x10 [ 800.423507][ T31] ? __pfx_kthread+0x10/0x10 [ 800.428104][ T31] ? __pfx_kthread+0x10/0x10 [ 800.432874][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 800.438130][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 800.443425][ T31] ? __pfx_kthread+0x10/0x10 [ 800.448076][ T31] ret_from_fork+0x4b/0x80 [ 800.452632][ T31] ? __pfx_kthread+0x10/0x10 [ 800.457293][ T31] ret_from_fork_asm+0x1a/0x30 [ 800.462151][ T31] [ 800.465226][ T31] INFO: task syz.3.1951:12380 blocked for more than 144 seconds. [ 800.473305][ T31] Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 [ 800.481087][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 800.489946][ T31] task:syz.3.1951 state:D stack:24616 pid:12380 tgid:12380 ppid:5856 task_flags:0x400040 flags:0x00004004 [ 800.501971][ T31] Call Trace: [ 800.505308][ T31] [ 800.508278][ T31] __schedule+0x1b88/0x5240 [ 800.513028][ T31] ? schedule+0x163/0x360 [ 800.517464][ T31] ? __pfx___schedule+0x10/0x10 [ 800.522482][ T31] ? register_lock_class+0x54/0x330 [ 800.527751][ T31] ? schedule+0x90/0x360 [ 800.532114][ T31] ? schedule+0x90/0x360 [ 800.536406][ T31] schedule+0x163/0x360 [ 800.540680][ T31] schedule_timeout+0xb1/0x2b0 [ 800.545485][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 800.551074][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 800.556325][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 800.561624][ T31] ? wait_for_completion+0x2d4/0x600 [ 800.566964][ T31] wait_for_completion+0x32f/0x600 [ 800.572220][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 800.577923][ T31] ? __flush_work+0xee/0xc60 [ 800.582638][ T31] __flush_work+0xa48/0xc60 [ 800.587180][ T31] ? __flush_work+0xee/0xc60 [ 800.591964][ T31] ? __pfx___flush_work+0x10/0x10 [ 800.597070][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 800.602452][ T31] ? __pfx___cancel_work+0x10/0x10 [ 800.607609][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 800.612722][ T31] ? nfc_genl_device_removed+0x266/0x380 [ 800.618493][ T31] __cancel_work_sync+0xbc/0x110 [ 800.623470][ T31] rfkill_unregister+0x96/0x230 [ 800.628402][ T31] nfc_unregister_device+0x96/0x2a0 [ 800.633670][ T31] virtual_ncidev_close+0x56/0x90 [ 800.638897][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 800.644674][ T31] __fput+0x3e9/0x9f0 [ 800.648758][ T31] task_work_run+0x251/0x310 [ 800.653394][ T31] ? _raw_spin_unlock+0x28/0x50 [ 800.658295][ T31] ? __pfx_task_work_run+0x10/0x10 [ 800.663576][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 800.669468][ T31] syscall_exit_to_user_mode+0x13f/0x340 [ 800.675195][ T31] do_syscall_64+0x100/0x210 [ 800.679848][ T31] ? clear_bhb_loop+0x45/0xa0 [ 800.684591][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.690582][ T31] RIP: 0033:0x7f38bef8e169 [ 800.695026][ T31] RSP: 002b:00007f38bf2dfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 800.703545][ T31] RAX: 0000000000000000 RBX: 000000000009c124 RCX: 00007f38bef8e169 [ 800.711744][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 800.719809][ T31] RBP: 00007f38bf1b7ba0 R08: 0000000000000001 R09: 0000000abf2dfe7f [ 800.727839][ T31] R10: 00007f38bee00000 R11: 0000000000000246 R12: 00007f38bf1b5fac [ 800.735918][ T31] R13: 00007f38bf1b5fa0 R14: ffffffffffffffff R15: 00007f38bf2dfca0 [ 800.743994][ T31] [ 800.747052][ T31] [ 800.747052][ T31] Showing all locks held in the system: [ 800.754970][ T31] 4 locks held by kworker/0:1/10: [ 800.760100][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 800.771237][ T31] #1: ffffc900000f7c60 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 800.783746][ T31] #2: ffffffff903d88c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x23/0x220 [ 800.794218][ T31] #3: ffff88807d223100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x310 [ 800.804294][ T31] 1 lock held by khungtaskd/31: [ 800.810045][ T31] #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 800.820205][ T31] 4 locks held by udevd/5212: [ 800.824924][ T31] #0: ffff88806314c418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xda0 [ 800.834394][ T31] #1: ffff88807c9ac088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 [ 800.844026][ T31] #2: ffff888034e23c38 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 800.854020][ T31] #3: ffff88807d223100 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 [ 800.863297][ T31] 2 locks held by getty/5599: [ 800.868025][ T31] #0: ffff888031d330a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 800.879564][ T31] #1: ffffc9000334b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 800.889886][ T31] 1 lock held by syz-executor/5833: [ 800.895123][ T31] #0: ffffffff903d88c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xd0/0x230 [ 800.905791][ T31] 3 locks held by kworker/0:3/5840: [ 800.911118][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 800.922381][ T31] #1: ffffc90003f7fc60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 800.936898][ T31] #2: ffffffff903d88c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 800.949852][ T31] 4 locks held by kworker/u8:9/6462: [ 800.955183][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 800.966189][ T31] #1: ffffc90002e57c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 800.977217][ T31] #2: ffffffff900f0a90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 800.986906][ T31] #3: ffffffff903d88c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xd0/0x230 [ 800.997703][ T31] 5 locks held by kworker/u8:14/6503: [ 801.005315][ T31] #0: ffff8880b8639b18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 801.015699][ T31] #1: ffff8880b8723b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41f/0x7a0 [ 801.027330][ T31] #2: ffff8880b8725558 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x24c/0x10f0 [ 801.036980][ T31] #3: ffffffff9a9fea08 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x190/0x5c0 [ 801.047525][ T31] #4: ffffffff8ebea1c8 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 801.058112][ T31] 1 lock held by syz.3.1951/12380: [ 801.063323][ T31] #0: ffff88807d223100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 801.073211][ T31] [ 801.075555][ T31] ============================================= [ 801.075555][ T31] [ 801.084084][ T31] NMI backtrace for cpu 1 [ 801.084103][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 801.084129][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 801.084140][ T31] Call Trace: [ 801.084149][ T31] [ 801.084158][ T31] dump_stack_lvl+0x241/0x360 [ 801.084196][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.084224][ T31] ? __pfx__printk+0x10/0x10 [ 801.084263][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 801.084296][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 801.084323][ T31] ? _printk+0xd5/0x120 [ 801.084352][ T31] ? __wake_up_klogd+0xcc/0x110 [ 801.084378][ T31] ? __pfx__printk+0x10/0x10 [ 801.084411][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 801.084434][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 801.084469][ T31] watchdog+0x1058/0x10a0 [ 801.084499][ T31] ? watchdog+0x1ea/0x10a0 [ 801.084532][ T31] ? __pfx_watchdog+0x10/0x10 [ 801.084560][ T31] kthread+0x7b7/0x940 [ 801.084588][ T31] ? __pfx_watchdog+0x10/0x10 [ 801.084616][ T31] ? __pfx_kthread+0x10/0x10 [ 801.084638][ T31] ? __pfx_kthread+0x10/0x10 [ 801.084662][ T31] ? __pfx_kthread+0x10/0x10 [ 801.084686][ T31] ? __pfx_kthread+0x10/0x10 [ 801.084710][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 801.084754][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 801.084775][ T31] ? __pfx_kthread+0x10/0x10 [ 801.084801][ T31] ret_from_fork+0x4b/0x80 [ 801.084821][ T31] ? __pfx_kthread+0x10/0x10 [ 801.084846][ T31] ret_from_fork_asm+0x1a/0x30 [ 801.084883][ T31] [ 801.084891][ T31] Sending NMI from CPU 1 to CPUs 0: [ 801.246531][ C0] NMI backtrace for cpu 0 [ 801.246550][ C0] CPU: 0 UID: 0 PID: 6498 Comm: kworker/u8:10 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 801.246573][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 801.246586][ C0] Workqueue: bat_events batadv_nc_worker [ 801.246618][ C0] RIP: 0010:__lock_acquire+0xa1/0xd80 [ 801.246645][ C0] Code: c3 45 89 cd e8 a0 f0 ff ff 45 89 e9 45 31 ed 41 89 d8 48 85 c0 0f 84 85 0a 00 00 8b bd e8 0a 00 00 83 3d 41 1b d5 18 00 75 09 <83> ff 30 0f 83 f4 00 00 00 8b 94 24 98 00 00 00 8b 9c 24 88 00 00 [ 801.246661][ C0] RSP: 0018:ffffc9000bc0f998 EFLAGS: 00000046 [ 801.246675][ C0] RAX: ffffffff9410fc38 RBX: ffffffff8ed3df20 RCX: 0000000000000001 [ 801.246688][ C0] RDX: ffffffff942bf6c0 RSI: 0000000000000000 RDI: 0000000000000002 [ 801.246700][ C0] RBP: ffff8880274b5a00 R08: 0000000000000000 R09: 0000000000000000 [ 801.246713][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 801.246723][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff8ed3df20 [ 801.246735][ C0] FS: 0000000000000000(0000) GS:ffff888124f9a000(0000) knlGS:0000000000000000 [ 801.246750][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 801.246762][ C0] CR2: 0000562860c3a680 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 801.246778][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 801.246789][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 801.246800][ C0] Call Trace: [ 801.246808][ C0] [ 801.246820][ C0] lock_acquire+0x116/0x2f0 [ 801.246844][ C0] ? batadv_nc_worker+0xcb/0x610 [ 801.246870][ C0] ? batadv_nc_worker+0xcb/0x610 [ 801.246896][ C0] batadv_nc_worker+0xec/0x610 [ 801.246919][ C0] ? batadv_nc_worker+0xcb/0x610 [ 801.246944][ C0] ? batadv_nc_worker+0xcb/0x610 [ 801.246969][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 801.246995][ C0] process_scheduled_works+0xac3/0x18e0 [ 801.247033][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 801.247064][ C0] ? assign_work+0x367/0x3d0 [ 801.247090][ C0] worker_thread+0x870/0xd50 [ 801.247113][ C0] ? __kthread_parkme+0x1a8/0x200 [ 801.247131][ C0] ? __pfx_worker_thread+0x10/0x10 [ 801.247147][ C0] kthread+0x7b7/0x940 [ 801.247167][ C0] ? __pfx_worker_thread+0x10/0x10 [ 801.247184][ C0] ? __pfx_kthread+0x10/0x10 [ 801.247202][ C0] ? __pfx_kthread+0x10/0x10 [ 801.247220][ C0] ? __pfx_kthread+0x10/0x10 [ 801.247239][ C0] ? __pfx_kthread+0x10/0x10 [ 801.247257][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 801.247282][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 801.247298][ C0] ? __pfx_kthread+0x10/0x10 [ 801.247317][ C0] ret_from_fork+0x4b/0x80 [ 801.247334][ C0] ? __pfx_kthread+0x10/0x10 [ 801.247352][ C0] ret_from_fork_asm+0x1a/0x30 [ 801.247376][ C0] [ 801.247528][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 801.529117][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 801.540935][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 801.551003][ T31] Call Trace: [ 801.554296][ T31] [ 801.557247][ T31] dump_stack_lvl+0x241/0x360 [ 801.561961][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.567182][ T31] ? __pfx__printk+0x10/0x10 [ 801.571800][ T31] ? vscnprintf+0x5d/0x90 [ 801.576151][ T31] panic+0x349/0x880 [ 801.580065][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 801.586239][ T31] ? __pfx_panic+0x10/0x10 [ 801.590689][ T31] ? irq_work_queue+0xd1/0x150 [ 801.595471][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 801.601463][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 801.607459][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 801.613550][ T31] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 801.619753][ T31] watchdog+0x1097/0x10a0 [ 801.624114][ T31] ? watchdog+0x1ea/0x10a0 [ 801.628555][ T31] ? __pfx_watchdog+0x10/0x10 [ 801.633523][ T31] kthread+0x7b7/0x940 [ 801.637611][ T31] ? __pfx_watchdog+0x10/0x10 [ 801.642322][ T31] ? __pfx_kthread+0x10/0x10 [ 801.647042][ T31] ? __pfx_kthread+0x10/0x10 [ 801.651662][ T31] ? __pfx_kthread+0x10/0x10 [ 801.656267][ T31] ? __pfx_kthread+0x10/0x10 [ 801.660892][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 801.666132][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 801.671366][ T31] ? __pfx_kthread+0x10/0x10 [ 801.676052][ T31] ret_from_fork+0x4b/0x80 [ 801.680526][ T31] ? __pfx_kthread+0x10/0x10 [ 801.685160][ T31] ret_from_fork_asm+0x1a/0x30 [ 801.689957][ T31] [ 801.693250][ T31] Kernel Offset: disabled [ 801.697593][ T31] Rebooting in 86400 seconds..