last executing test programs: 5.401571235s ago: executing program 1 (id=534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc0046209, &(0x7f0000001340)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="66b8000000000f23c80f21f86635080070000f23f80f20e06635040000000f22e0f20f11b331edbaf80c66b810b5928066efbafc0c66b8fcff000066ef0f080f9cda66b8830000000f23d00f21f866352000000d0f23f866b9a40a00000f32bad104b8963fef2e65260f01df", 0x6c}], 0x1, 0x14, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f00000001c0)={0x1, 0x0, @pic={0x0, 0x7, 0x19, 0x0, 0x0, 0x2, 0x8, 0xba, 0xf3, 0x7, 0xbb, 0x40, 0x0, 0x3, 0x3}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc0046209, &(0x7f0000001340)) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="66b8000000000f23c80f21f86635080070000f23f80f20e06635040000000f22e0f20f11b331edbaf80c66b810b5928066efbafc0c66b8fcff000066ef0f080f9cda66b8830000000f23d00f21f866352000000d0f23f866b9a40a00000f32bad104b8963fef2e65260f01df", 0x6c}], 0x1, 0x14, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38) (async) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f00000001c0)={0x1, 0x0, @pic={0x0, 0x7, 0x19, 0x0, 0x0, 0x2, 0x8, 0xba, 0xf3, 0x7, 0xbb, 0x40, 0x0, 0x3, 0x3}}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 5.130476693s ago: executing program 1 (id=535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0) r3 = dup(r0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x22) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x0, "ff0f00000000000001a82d866bf4ff0713e4b89c3c00", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x2, 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000200)="c4e3f9df16fa66ba430066b8fdff66efb8a96c71fd0f23c00f21f835010001000f9723f8f8baf80cb8e283a880ef66bafc0cec0f01cbb805000000b9000001000f01d9b9c90100000f3266ba4100b881260000ef640f01ca0f08", 0x5a}], 0x1, 0x74, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.819679078s ago: executing program 1 (id=537): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x108000a, &(0x7f0000000180)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e3a", @ANYRESDEC]) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0), &(0x7f00000002c0)=0x8) mount$tmpfs(0x0, &(0x7f0000000200)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x38, 0x30]}}}}]}) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0083020000000001"]}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x800000, 0x10}}) bind$bt_hci(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r4, 0x540b, &(0x7f0000000000)) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.326738243s ago: executing program 1 (id=546): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) write$fb(r1, &(0x7f0000000080)="9980e66c14965ae065fe3d96c9642d2cbff17dd3b72c3be2c8de640d61cea457eda7f4edd31cd9248c268636839752d8ad5be9312c25341958e1dd4e0787faaf07fa593bb8a4c0571e76b16f984982858bf74d0e77d5f410f264da4fa2e3a8360c6926cf73872e87a8d36400b2fdd3a02ead5bc1458ee21c60494ade52", 0xfd35) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x10, &(0x7f0000000240)={0x40, 0xa, 0x8, "d4d0d2a61e872425"}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000f00)={0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="008b522267ee930bdf0a462b9f46a36b1303000000dabca05bf4b5e2ba9edeec249e6d7d903af25d3eea33000e4bb0d93fd30d1f48c4cdda174efbe142535fbfef63163f4056fb1f6c22f49f1bc88d5bcb650a64a76771f020ef4f961e7a15d37d87941be1ef5b5dd090759491bc54005d0fd6a2d13a708c769900000000"], 0x0, 0x0}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x6, 0x48c9, 0xfffffffffffffffc, 0x800000df}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000006d0200000000000005000080"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x1000800, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) fchown(r6, 0xee01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fchown(r7, 0xee01, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0xc, 0x26, {0x26, 0x0, "ca7a75c7bba3282fd4c660552f3eeccba00eb39be39f9e4d67afd4dfb34b5e28cbd18460"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f00000000c0)={0x20, 0x11, 0x8b, "3e6f9e62258c3b7811b3cfe40610d87f8c9ed8235e46ddf08ea2afb8b819525aa1d3f135e97874a41e6a22dda8b79cde791da6469fd9889353876f14c05becd6ca3640782cca36b0f384eda7f07898c5693e2fde0dc5374b7582178a6391291acbec5d43dc7b3b5cfce1dc4d2e647f053c5fef5acd7fb549b1d5a423087f18234aa1917141156282e26eae"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x77}, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x1000, 0x100, 0x2, 0x3, 0x2, 0x8b5e, 0x4, 0xfffffffe, 0x7, 0x4, 0x6, 0x2}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x400000}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xfff7}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) 2.683110169s ago: executing program 0 (id=553): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x9}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008054}, 0x4004000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$can_raw(r0, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) close(r0) 2.468710227s ago: executing program 2 (id=554): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000080)={0x72, &(0x7f0000000140)="3fd1be025b83470ffb388c45e1fc8c15993c2adc08a08212eec444db282f72338d91e535a0c2092ce24f4a6783fcbc5060547a7643b61ccf7c99361fd744d819392501bd74d5d9ac023bf5ca512c0d1d6ef99561379dc9f7094fdc5155592b73fadaf2ed8db72f3171d1218ba0d3a692d07c"}) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010729bd7000fedbdf251f"], 0x44}}, 0x4040800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r5, @ANYRESHEX=r4], 0x60}}, 0x0) 2.342299989s ago: executing program 2 (id=555): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0500000000000000000008000300000000", @ANYRES32, @ANYBLOB="0a0034000202"], 0x38}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000004540)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x10001011, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x189) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1000000001) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x300, 0xe55, 0x33565348, 0x5, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3, 0x8, 0x0, 0x4}}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f0000000080)=[{0x3, 0x9, 0x8, 0x3385}, {0x0, 0xad, 0xc0, 0x9}, {0x1000, 0x8, 0x7, 0x400}]}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x0, 0x1aa) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x0, "52dddc2e0fe0354add9a2c2a028e07598a134fc7080100fb00000017fffff300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, 0x0) write$cgroup_int(r4, &(0x7f0000000280)=0x10001, 0x12) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0x40045542, &(0x7f0000000040)=0x2000) close_range(r7, r0, 0x2) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000140)={0xa, 0x1, 0x2, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2"}) r9 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x0, 0x0) syz_usb_ep_write(r9, 0x7, 0xb2, &(0x7f00000003c0)="576f1354229b312f1984e0cf9ccfc1970c16c4c5b8368ff64e831e22838c5bd1065d6a14d7366187162a03e6b7cb6cc9fad95fd62491c376212342e92d9fba4d3608fa110c1b1928a592228f55f8b16f516f064373f741a301137a4c0b3229ca186647b98ae774c6b11316b8ddb13b06265b6b5bf35458305d5d50211fe6a7ef55b6115b569c028c7fa9e85257f5af959ca97e8198b3856eb60506a1eae62a77d9a7f59d8d87b8701ae4dd86f507f438cbdc") syz_usb_connect(0x0, 0x64, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e017ad4082407010500070e11240606060509000600040007000300390c2402050302060254df000a0924020500"/94], 0x0) 2.341635508s ago: executing program 0 (id=556): close(0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x10, r2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f00000000c0)={0x28}) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) close(0x3) pselect6(0x40, &(0x7f0000000100)={0x3, 0x7, 0x1, 0x100, 0x80000001, 0x4, 0x100, 0x3}, &(0x7f00000001c0)={0x7, 0xd5, 0x6, 0x9, 0x3, 0x7f, 0x8, 0x3}, &(0x7f0000000200)={0xfffffffffffffff6, 0xc2, 0x5, 0x4, 0xf7b, 0x1, 0x1, 0x8}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) 2.256846511s ago: executing program 0 (id=557): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, 0x0) 2.204532799s ago: executing program 0 (id=558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000002640)=ANY=[@ANYBLOB="000086dd0000120000000000000064f871760f9806fffe8000000000000000110000000000aafe8800000000000000000000000001014e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0xfce) 2.112145121s ago: executing program 0 (id=559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002640)=ANY=[@ANYBLOB="000086dd0000120000000000000064f871760f9806fffe8000120000000000000000000000aafe8800000000000000000000000001014e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0xfce) 1.9258856s ago: executing program 0 (id=562): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="0012ad93a0ddfdd7b40b7bc8ceb61c17c339d28936398495921ce4d0b978520bc6579486a15b9a86ccfdbf22c452e9a97b5c2a6d990c7ae030a4ed0ef80d9c910febbed5acf53659e39f7603118e195ade7aa6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.247934927s ago: executing program 3 (id=564): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x2, 0x0, 0x40, 0x0, 0x8}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="04005b0006006500400000005c2598441726fb8aeef70be663d50ab4e9a4124d056a456bba4c74a23fcb694a16ce6019befe8cc29ccd03caac0d4d884964151304219e7eded5a5dbfc8a924450d6fd9cc36b3d41016db88984f3aa171de7564e68fb302f171b60fd4e7bd822b91d034481c0f745dc8749e93b0262256968ad5a245225b09e05217f6c588a3a81e49773dcdb1cde80120ae736ed532f313640fa4fd2a1217a76927a221d86aa81eb4f2eec9cce2ae30117625551359bb5283b27851a74e0a43a"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="04005b0006006500400000005c2598441726fb8aeef70be663d50ab4e9a4124d056a456bba4c74a23fcb694a16ce6019befe8cc29ccd03caac0d4d884964151304219e7eded5a5dbfc8a924450d6fd9cc36b3d41016db88984f3aa171de7564e68fb302f171b60fd4e7bd822b91d034481c0f745dc8749e93b0262256968ad5a245225b09e05217f6c588a3a81e49773dcdb1cde80120ae736ed532f313640fa4fd2a1217a76927a221d86aa81eb4f2eec9cce2ae30117625551359bb5283b27851a74e0a43a"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x13, 0xa, 0x1, &(0x7f0000000000)) 1.146701822s ago: executing program 3 (id=565): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x9}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008054}, 0x4004000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$can_raw(r0, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) close(r0) 946.515387ms ago: executing program 1 (id=566): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', 0x0}) 921.961172ms ago: executing program 3 (id=567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000002640)=ANY=[@ANYBLOB="000086dd0000120000000000000064f871760f9806fffe8000000000000000110000000000aafe8800000000000000000000000001014e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0xfce) 806.036123ms ago: executing program 1 (id=568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x2226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000700)={0x4, 0x0, @ioapic={0x10000, 0x3, 0x1ff, 0x7, 0x0, [{0x6, 0x80, 0xfe}, {0xe7, 0x0, 0xfb, '\x00', 0x7f}, {0x0, 0x9, 0xc, '\x00', 0xa}, {0x2, 0xc6, 0xe, '\x00', 0xfa}, {0x0, 0x3, 0x7, '\x00', 0x9}, {0x5, 0x8, 0x6, '\x00', 0x1}, {0x16, 0x83, 0x6, '\x00', 0xcd}, {0x2, 0x4, 0x2, '\x00', 0x48}, {0x9, 0x3, 0x1a, '\x00', 0x7}, {0x4, 0x8, 0xdb, '\x00', 0x1}, {0x0, 0x7, 0x5, '\x00', 0x75}, {0x8, 0x0, 0xb, '\x00', 0xf}, {0x2, 0x80, 0x9, '\x00', 0xc3}, {0x9, 0x9, 0x6, '\x00', 0x85}, {0xfa, 0x81, 0x6, '\x00', 0x8}, {0x9, 0xe4, 0x2, '\x00', 0x1}, {0x5c, 0x2, 0x40, '\x00', 0x8}, {0x4a, 0x6, 0xa, '\x00', 0x6}, {0xd, 0x3, 0x2, '\x00', 0x4}, {0x6, 0x4, 0x80, '\x00', 0x80}, {0x7, 0x4, 0xf1, '\x00', 0x8}, {0x6, 0xf9, 0xf, '\x00', 0x10}, {0x8, 0x8, 0x81, '\x00', 0xc9}, {0x7b, 0x7f, 0x7, '\x00', 0x2}]}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x0, 0x4040000}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010101}}, 0x24) r5 = getpid() clock_settime(0x100000000000000, &(0x7f0000000040)={0x0, 0x3938700}) r6 = syz_pidfd_open(r5, 0x0) setreuid(0xee01, 0x0) setns(r6, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x4b, 0x6, 0xc6, 0xff, 0xffffffff00000001, 0x3, 0x6, 0x6, 0x3dd, 0x40, 0x261, 0x202000, 0x5, 0x38, 0x2, 0x8001, 0x8, 0xfff7}, [{0x7, 0x9, 0x7ff, 0x8, 0xffffffff, 0x80, 0x7fff, 0x80}, {0x2, 0x8, 0xf89d, 0x9736, 0x3ff, 0x0, 0x0, 0x8}], "daa3254bcdc545e2ca2793205d68b83ff276565d6f5488966081d68c8083decca4e8a84bc305980882fdb84c4407c264942b9bfa286ae5653549799bae09f2404cd03534bb79e9a043f02ec564c47108ec2c8ee3a9cae755a89bea47dcb6d8e2185ed7dc1e473f73c59dfbba79489bc74196271eca80c41bfd5bc596be016622d50acceea8fb8d0d54be645810f87de343aa8afbfc74aca01577bdbce56c0db90585c328edfce3b43e0696faaa74a32b9ea55141e5b8c8e344f0a3fc3010eb726d8ba6ab3cd9d0a9b3684e6b9ceaacc0c39c6cde", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x684) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800a000100717565756500000014000280060001400010000006000240fffb00000900010073797a5c795df0e5437ae530000000000900020073797a3200000000000000000000000000040000"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x2226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000700)={0x4, 0x0, @ioapic={0x10000, 0x3, 0x1ff, 0x7, 0x0, [{0x6, 0x80, 0xfe}, {0xe7, 0x0, 0xfb, '\x00', 0x7f}, {0x0, 0x9, 0xc, '\x00', 0xa}, {0x2, 0xc6, 0xe, '\x00', 0xfa}, {0x0, 0x3, 0x7, '\x00', 0x9}, {0x5, 0x8, 0x6, '\x00', 0x1}, {0x16, 0x83, 0x6, '\x00', 0xcd}, {0x2, 0x4, 0x2, '\x00', 0x48}, {0x9, 0x3, 0x1a, '\x00', 0x7}, {0x4, 0x8, 0xdb, '\x00', 0x1}, {0x0, 0x7, 0x5, '\x00', 0x75}, {0x8, 0x0, 0xb, '\x00', 0xf}, {0x2, 0x80, 0x9, '\x00', 0xc3}, {0x9, 0x9, 0x6, '\x00', 0x85}, {0xfa, 0x81, 0x6, '\x00', 0x8}, {0x9, 0xe4, 0x2, '\x00', 0x1}, {0x5c, 0x2, 0x40, '\x00', 0x8}, {0x4a, 0x6, 0xa, '\x00', 0x6}, {0xd, 0x3, 0x2, '\x00', 0x4}, {0x6, 0x4, 0x80, '\x00', 0x80}, {0x7, 0x4, 0xf1, '\x00', 0x8}, {0x6, 0xf9, 0xf, '\x00', 0x10}, {0x8, 0x8, 0x81, '\x00', 0xc9}, {0x7b, 0x7f, 0x7, '\x00', 0x2}]}}) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x0, 0x4040000}, 0x0) (async) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') (async) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010101}}, 0x24) (async) getpid() (async) clock_settime(0x100000000000000, &(0x7f0000000040)={0x0, 0x3938700}) (async) syz_pidfd_open(r5, 0x0) (async) setreuid(0xee01, 0x0) (async) setns(r6, 0x24020000) (async) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$binfmt_elf64(r4, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x4b, 0x6, 0xc6, 0xff, 0xffffffff00000001, 0x3, 0x6, 0x6, 0x3dd, 0x40, 0x261, 0x202000, 0x5, 0x38, 0x2, 0x8001, 0x8, 0xfff7}, [{0x7, 0x9, 0x7ff, 0x8, 0xffffffff, 0x80, 0x7fff, 0x80}, {0x2, 0x8, 0xf89d, 0x9736, 0x3ff, 0x0, 0x0, 0x8}], "daa3254bcdc545e2ca2793205d68b83ff276565d6f5488966081d68c8083decca4e8a84bc305980882fdb84c4407c264942b9bfa286ae5653549799bae09f2404cd03534bb79e9a043f02ec564c47108ec2c8ee3a9cae755a89bea47dcb6d8e2185ed7dc1e473f73c59dfbba79489bc74196271eca80c41bfd5bc596be016622d50acceea8fb8d0d54be645810f87de343aa8afbfc74aca01577bdbce56c0db90585c328edfce3b43e0696faaa74a32b9ea55141e5b8c8e344f0a3fc3010eb726d8ba6ab3cd9d0a9b3684e6b9ceaacc0c39c6cde", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x684) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800a000100717565756500000014000280060001400010000006000240fffb00000900010073797a5c795df0e5437ae530000000000900020073797a3200000000000000000000000000040000"], 0x7c}}, 0x0) (async) 766.59495ms ago: executing program 3 (id=569): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d866350800000067f2a50f01c2d838ddeff20f58f3", 0x34}], 0x1, 0x8, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0xa}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xd0060, &(0x7f0000000180)={[{@gid}]}) (async) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xd0060, &(0x7f0000000180)={[{@gid}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 646.533388ms ago: executing program 2 (id=570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002640)=ANY=[@ANYBLOB="000086dd0000120000000000000064f871760f9806fffe8000001100000000000000000000aafe8800000000000000000000000001014e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0xfce) 500.504365ms ago: executing program 2 (id=571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000480)={0x0, 0xfffffffffffffffd, 0xaa, 0x5, @scatter={0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/157, 0x9d}]}, &(0x7f0000000300)="371d6a47f8a25d57aa616502db753cfa551f6da29db238bdae6d459d2879891eeab70b845aa8cc7ab2da5368e949210a5921416e37863699ede4e11cff9c6e436fa3fc46cb902bc32a089e048cb394b6d94c865d80893809a01f4291226785fc7bfc859ae19b9a3a3f50a324df1d8a97723d5f92e8c92e23ad9bb0201f95a3518e7eebbe30f614586cd6f81fc144d18c6d51ce7db8ab8a0b0e0471f310684e346d8e410f9b59c61b53de", &(0x7f00000003c0)=""/130, 0xe, 0x28014, 0x0, &(0x7f0000000140)}) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) read$snapshot(r2, 0x0, 0xffffffbf) 332.543335ms ago: executing program 3 (id=572): syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x11, @empty, 0x15, 0x4, 'wlc\x00', 0x3c, 0xc, 0x83}, 0x2c) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r2, &(0x7f00000001c0)=""/73, 0x49, 0x8f) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r3 = openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a1080012000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6dfe4f36bcf903ece981e8df37df7f8af2f28f", 0xfcc0}], 0x1}, 0x40000) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, 0x0) r6 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x11, @empty, 0x15, 0x4, 'wlc\x00', 0x3c, 0xc, 0x83}, 0x2c) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') (async) pread64(r2, &(0x7f00000001c0)=""/73, 0x49, 0x8f) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) (async) openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) (async) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a1080012000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6dfe4f36bcf903ece981e8df37df7f8af2f28f", 0xfcc0}], 0x1}, 0x40000) (async) openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) ioctl$COMEDI_CMD(r0, 0x80506409, 0x0) (async) syz_usbip_server_init(0x1) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) (async) write$usbip_server(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) (async) 230.280067ms ago: executing program 2 (id=573): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000391000000910356f90ec2a7c1e1831433babaf60c9213806850d3895db982403f22636b8382a57e0dc961c2dcbfc552e28d3ab8ae15b5be0745544ec88e4c49c96fa8c74461d5aa82e7ee676b0f29a4779d77725c20ec63f4fedeb1d344743d081eba89bfd90ca8d03b101c1bd0f87a6db0ee3a8fec9a5494e91f48ad06d2815b4a48dd7afbaf75fb6c49"], 0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380180000800c00018006000100d10300000800034000000001140000001100010000009eed000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad558fac11d875397bdb22d0022b45f819e01177d3d45ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000391000000910356f90ec2a7c1e1831433babaf60c9213806850d3895db982403f22636b8382a57e0dc961c2dcbfc552e28d3ab8ae15b5be0745544ec88e4c49c96fa8c74461d5aa82e7ee676b0f29a4779d77725c20ec63f4fedeb1d344743d081eba89bfd90ca8d03b101c1bd0f87a6db0ee3a8fec9a5494e91f48ad06d2815b4a48dd7afbaf75fb6c49"], 0x0, 0x0, 0x0}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380180000800c00018006000100d10300000800034000000001140000001100010000009eed000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r4, &(0x7f0000000400)=ANY=[], 0x1df) (async) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad558fac11d875397bdb22d0022b45f819e01177d3d45ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) (async) 141.036164ms ago: executing program 3 (id=574): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, r0, r0, r1, r0, r0, r0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) ioctl$TCSBRKP(r2, 0x5425, 0xfffffffffffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000080)={0x17, 0x5, 0x9}) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000140)={0x16, 0x1}) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304, 0x39}, "f3ffff0d00ffffff", "37a0f9ffff4b00000200007d00", "40c28f00", "de3f106b925ded4d"}, 0x28) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@subsystem='cpuacct'}, {@subsystem='cpuset'}, {@subsystem='memory'}, {@xattr}]}) 0s ago: executing program 2 (id=575): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x9}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008054}, 0x4004000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$can_raw(r0, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) syz_emit_vhci(&(0x7f0000001cc0)=ANY=[@ANYBLOB="043e1d195e4db46a337200381450035f0ce006ff000c01000244010600"], 0x20) kernel console output (not intermixed with test programs): oyo_realpath_from_path+0xe3/0x5d0 [ 113.981305][ T6249] ? tomoyo_domain+0xd8/0x130 [ 113.981338][ T6249] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 113.981359][ T6249] tomoyo_path_number_perm+0x1e8/0x5a0 [ 113.981384][ T6249] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 113.981446][ T6249] ? __fget_files+0x2a/0x420 [ 113.981477][ T6249] ? __fget_files+0x3a0/0x420 [ 113.981499][ T6249] ? __fget_files+0x2a/0x420 [ 113.981526][ T6249] security_file_ioctl+0xcb/0x2d0 [ 113.981561][ T6249] __se_sys_ioctl+0x47/0x170 [ 113.981595][ T6249] do_syscall_64+0xfa/0xfa0 [ 113.981616][ T6249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.981637][ T6249] ? clear_bhb_loop+0x60/0xb0 [ 113.981663][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.981687][ T6249] RIP: 0033:0x7f11c1d8f6c9 [ 113.981706][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.981723][ T6249] RSP: 002b:00007f11c2b98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.981745][ T6249] RAX: ffffffffffffffda RBX: 00007f11c1fe5fa0 RCX: 00007f11c1d8f6c9 [ 113.981760][ T6249] RDX: 0000200000000080 RSI: 000000008028640c RDI: 0000000000000003 [ 113.981774][ T6249] RBP: 00007f11c2b98090 R08: 0000000000000000 R09: 0000000000000000 [ 113.981787][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.981799][ T6249] R13: 00007f11c1fe6038 R14: 00007f11c1fe5fa0 R15: 00007ffc1727c858 [ 113.981835][ T6249] [ 114.219742][ T6249] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.223244][ T5920] gspca_sunplus: reg_w_riv err -71 [ 114.236698][ T5920] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 114.274417][ T5920] usb 3-1: USB disconnect, device number 5 [ 114.374203][ T6258] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.541827][ T5872] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 114.666793][ T6260] netlink: 'syz.3.135': attribute type 19 has an invalid length. [ 114.677979][ T6260] netlink: 5 bytes leftover after parsing attributes in process `syz.3.135'. [ 114.701824][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 114.710175][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.737996][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.754563][ T5872] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.773590][ T5872] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.783170][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.801772][ T5872] usb 1-1: Product: syz [ 114.806034][ T5872] usb 1-1: Manufacturer: syz [ 114.810669][ T5872] usb 1-1: SerialNumber: syz [ 114.841580][ T6267] FAULT_INJECTION: forcing a failure. [ 114.841580][ T6267] name failslab, interval 1, probability 0, space 0, times 0 [ 114.844967][ T5872] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 114.891300][ T5872] cdc_ncm 1-1:1.0: bind() failure [ 114.896177][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.136'. [ 114.912262][ T6267] CPU: 0 UID: 0 PID: 6267 Comm: syz.3.137 Not tainted syzkaller #0 PREEMPT(full) [ 114.912290][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.912303][ T6267] Call Trace: [ 114.912311][ T6267] [ 114.912320][ T6267] dump_stack_lvl+0x189/0x250 [ 114.912354][ T6267] ? __pfx____ratelimit+0x10/0x10 [ 114.912387][ T6267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.912414][ T6267] ? __pfx__printk+0x10/0x10 [ 114.912445][ T6267] ? __pfx___might_resched+0x10/0x10 [ 114.912475][ T6267] should_fail_ex+0x414/0x560 [ 114.912514][ T6267] should_failslab+0xa8/0x100 [ 114.912547][ T6267] __kmalloc_noprof+0xdf/0x800 [ 114.912573][ T6267] ? kfree+0x4d/0x6e0 [ 114.912593][ T6267] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 114.912627][ T6267] tomoyo_realpath_from_path+0xe3/0x5d0 [ 114.912655][ T6267] ? tomoyo_domain+0xd8/0x130 [ 114.912688][ T6267] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 114.912717][ T6267] tomoyo_path_number_perm+0x1e8/0x5a0 [ 114.912743][ T6267] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 114.912808][ T6267] ? __fget_files+0x2a/0x420 [ 114.912839][ T6267] ? __fget_files+0x3a0/0x420 [ 114.912862][ T6267] ? __fget_files+0x2a/0x420 [ 114.912891][ T6267] security_file_ioctl+0xcb/0x2d0 [ 114.912928][ T6267] __se_sys_ioctl+0x47/0x170 [ 114.912963][ T6267] do_syscall_64+0xfa/0xfa0 [ 114.912985][ T6267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.913013][ T6267] ? clear_bhb_loop+0x60/0xb0 [ 114.913039][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.913059][ T6267] RIP: 0033:0x7fa4b578f6c9 [ 114.913083][ T6267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.913101][ T6267] RSP: 002b:00007fa4b65d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.913124][ T6267] RAX: ffffffffffffffda RBX: 00007fa4b59e5fa0 RCX: 00007fa4b578f6c9 [ 114.913140][ T6267] RDX: 0000200000000080 RSI: 000000008028640c RDI: 0000000000000003 [ 114.913154][ T6267] RBP: 00007fa4b65d3090 R08: 0000000000000000 R09: 0000000000000000 [ 114.913167][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.913179][ T6267] R13: 00007fa4b59e6038 R14: 00007fa4b59e5fa0 R15: 00007fff053eded8 [ 114.913214][ T6267] [ 114.913223][ T6267] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.294005][ T6280] tipc: Enabling of bearer rejected, failed to enable media [ 115.392151][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 115.403212][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 115.457790][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.466905][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.480490][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.490401][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.503260][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.511895][ T5872] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 115.521153][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.621848][ T5920] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.671788][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 115.679050][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.690108][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.699953][ T5872] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 115.716205][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.726631][ T5872] usb 2-1: config 0 descriptor?? [ 115.771824][ T5920] usb 3-1: device descriptor read/64, error -71 [ 115.935354][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.944326][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.955042][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.963986][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.021840][ T5920] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 116.152279][ T5920] usb 3-1: device descriptor read/64, error -71 [ 116.179849][ T5872] usbhid 2-1:0.0: can't add hid device: -71 [ 116.202716][ T5872] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 116.224519][ T5872] usb 2-1: USB disconnect, device number 8 [ 116.261188][ T6290] syzkaller1: entered promiscuous mode [ 116.262768][ T5920] usb usb3-port1: attempt power cycle [ 116.268452][ T6290] syzkaller1: entered allmulticast mode [ 116.384961][ T6292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.394805][ T6292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.416896][ T6292] dvmrp0: entered allmulticast mode [ 116.532058][ T5872] IPVS: starting estimator thread 0... [ 116.539486][ T6297] IPVS: set_ctl: invalid protocol: 10 0.0.0.0:64514 [ 116.611837][ T5920] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 116.621959][ T6298] IPVS: using max 38 ests per chain, 91200 per kthread [ 116.632446][ T5920] usb 3-1: device descriptor read/8, error -71 [ 116.744657][ T6301] FAULT_INJECTION: forcing a failure. [ 116.744657][ T6301] name failslab, interval 1, probability 0, space 0, times 0 [ 116.758506][ T6301] CPU: 0 UID: 0 PID: 6301 Comm: syz.1.149 Not tainted syzkaller #0 PREEMPT(full) [ 116.758534][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 116.758546][ T6301] Call Trace: [ 116.758554][ T6301] [ 116.758563][ T6301] dump_stack_lvl+0x189/0x250 [ 116.758593][ T6301] ? __pfx____ratelimit+0x10/0x10 [ 116.758624][ T6301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.758650][ T6301] ? __pfx__printk+0x10/0x10 [ 116.758680][ T6301] ? __pfx___might_resched+0x10/0x10 [ 116.758701][ T6301] ? fs_reclaim_acquire+0x7d/0x100 [ 116.758734][ T6301] should_fail_ex+0x414/0x560 [ 116.758771][ T6301] should_failslab+0xa8/0x100 [ 116.758803][ T6301] __kmalloc_noprof+0xdf/0x800 [ 116.758836][ T6301] ? tomoyo_encode+0x28b/0x550 [ 116.758866][ T6301] tomoyo_encode+0x28b/0x550 [ 116.758898][ T6301] tomoyo_realpath_from_path+0x58d/0x5d0 [ 116.758934][ T6301] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 116.758956][ T6301] tomoyo_path_number_perm+0x1e8/0x5a0 [ 116.758980][ T6301] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.759039][ T6301] ? __fget_files+0x2a/0x420 [ 116.759066][ T6301] ? __fget_files+0x3a0/0x420 [ 116.759088][ T6301] ? __fget_files+0x2a/0x420 [ 116.759115][ T6301] security_file_ioctl+0xcb/0x2d0 [ 116.759149][ T6301] __se_sys_ioctl+0x47/0x170 [ 116.759181][ T6301] do_syscall_64+0xfa/0xfa0 [ 116.759202][ T6301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.759222][ T6301] ? clear_bhb_loop+0x60/0xb0 [ 116.759246][ T6301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.759265][ T6301] RIP: 0033:0x7f86f9b8f6c9 [ 116.759283][ T6301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.759299][ T6301] RSP: 002b:00007f86fa97b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.759320][ T6301] RAX: ffffffffffffffda RBX: 00007f86f9de5fa0 RCX: 00007f86f9b8f6c9 [ 116.759334][ T6301] RDX: 0000200000000080 RSI: 000000008028640c RDI: 0000000000000003 [ 116.759347][ T6301] RBP: 00007f86fa97b090 R08: 0000000000000000 R09: 0000000000000000 [ 116.759359][ T6301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.759370][ T6301] R13: 00007f86f9de6038 R14: 00007f86f9de5fa0 R15: 00007ffd734d1138 [ 116.759409][ T6301] [ 116.759546][ T6301] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.891812][ T5920] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 117.016686][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.150'. [ 117.032665][ T5920] usb 3-1: device descriptor read/8, error -71 [ 117.152382][ T5920] usb usb3-port1: unable to enumerate USB device [ 117.166403][ T6307] tipc: Enabling of bearer rejected, failed to enable media [ 117.300705][ T5920] usb 1-1: USB disconnect, device number 12 [ 117.531858][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.540853][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.595485][ T6321] FAULT_INJECTION: forcing a failure. [ 117.595485][ T6321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.611204][ T6321] CPU: 0 UID: 0 PID: 6321 Comm: syz.0.159 Not tainted syzkaller #0 PREEMPT(full) [ 117.611235][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.611248][ T6321] Call Trace: [ 117.611255][ T6321] [ 117.611264][ T6321] dump_stack_lvl+0x189/0x250 [ 117.611295][ T6321] ? __pfx____ratelimit+0x10/0x10 [ 117.611327][ T6321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.611354][ T6321] ? __pfx__printk+0x10/0x10 [ 117.611391][ T6321] ? __might_fault+0xb0/0x130 [ 117.611425][ T6321] should_fail_ex+0x414/0x560 [ 117.611452][ T6321] _copy_from_user+0x2d/0xb0 [ 117.611471][ T6321] comedi_unlocked_ioctl+0x4d6/0x1020 [ 117.611491][ T6321] ? kasan_quarantine_put+0xdd/0x220 [ 117.611517][ T6321] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 117.611538][ T6321] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 117.611557][ T6321] ? do_vfs_ioctl+0xbe8/0x1430 [ 117.611579][ T6321] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 117.611595][ T6321] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 117.611644][ T6321] ? __fget_files+0x2a/0x420 [ 117.611664][ T6321] ? __fget_files+0x3a0/0x420 [ 117.611690][ T6321] ? __fget_files+0x2a/0x420 [ 117.611716][ T6321] ? bpf_lsm_file_ioctl+0x9/0x20 [ 117.611747][ T6321] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 117.611776][ T6321] __se_sys_ioctl+0xfc/0x170 [ 117.611809][ T6321] do_syscall_64+0xfa/0xfa0 [ 117.611830][ T6321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.611850][ T6321] ? clear_bhb_loop+0x60/0xb0 [ 117.611875][ T6321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.611895][ T6321] RIP: 0033:0x7f11c1d8f6c9 [ 117.611914][ T6321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.611939][ T6321] RSP: 002b:00007f11c2b98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.611961][ T6321] RAX: ffffffffffffffda RBX: 00007f11c1fe5fa0 RCX: 00007f11c1d8f6c9 [ 117.611976][ T6321] RDX: 0000200000000080 RSI: 000000008028640c RDI: 0000000000000003 [ 117.611990][ T6321] RBP: 00007f11c2b98090 R08: 0000000000000000 R09: 0000000000000000 [ 117.612002][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.612014][ T6321] R13: 00007f11c1fe6038 R14: 00007f11c1fe5fa0 R15: 00007ffc1727c858 [ 117.612048][ T6321] [ 117.741973][ T5920] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 117.845811][ T6323] FAULT_INJECTION: forcing a failure. [ 117.845811][ T6323] name failslab, interval 1, probability 0, space 0, times 0 [ 117.859363][ T6323] CPU: 1 UID: 0 PID: 6323 Comm: syz.0.160 Not tainted syzkaller #0 PREEMPT(full) [ 117.859390][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.859403][ T6323] Call Trace: [ 117.859411][ T6323] [ 117.859420][ T6323] dump_stack_lvl+0x189/0x250 [ 117.859453][ T6323] ? __pfx____ratelimit+0x10/0x10 [ 117.859486][ T6323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.859542][ T6323] ? __pfx__printk+0x10/0x10 [ 117.859574][ T6323] ? __pfx___might_resched+0x10/0x10 [ 117.859597][ T6323] ? fs_reclaim_acquire+0x7d/0x100 [ 117.859633][ T6323] should_fail_ex+0x414/0x560 [ 117.859671][ T6323] should_failslab+0xa8/0x100 [ 117.859705][ T6323] __kmalloc_noprof+0xdf/0x800 [ 117.859733][ T6323] ? do_insn_ioctl+0x100/0x5a0 [ 117.859770][ T6323] do_insn_ioctl+0x100/0x5a0 [ 117.859808][ T6323] comedi_unlocked_ioctl+0x907/0x1020 [ 117.859836][ T6323] ? kasan_quarantine_put+0xdd/0x220 [ 117.859873][ T6323] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 117.859910][ T6323] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 117.859938][ T6323] ? do_vfs_ioctl+0xbe8/0x1430 [ 117.859969][ T6323] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 117.859993][ T6323] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 117.860066][ T6323] ? __fget_files+0x2a/0x420 [ 117.860096][ T6323] ? __fget_files+0x3a0/0x420 [ 117.860119][ T6323] ? __fget_files+0x2a/0x420 [ 117.860147][ T6323] ? bpf_lsm_file_ioctl+0x9/0x20 [ 117.860179][ T6323] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 117.860209][ T6323] __se_sys_ioctl+0xfc/0x170 [ 117.860244][ T6323] do_syscall_64+0xfa/0xfa0 [ 117.860265][ T6323] ? irqentry_exit+0x10f/0x640 [ 117.860283][ T6323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.860304][ T6323] ? clear_bhb_loop+0x60/0xb0 [ 117.860331][ T6323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.860351][ T6323] RIP: 0033:0x7f11c1d8f6c9 [ 117.860370][ T6323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.860388][ T6323] RSP: 002b:00007f11c2b98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.860411][ T6323] RAX: ffffffffffffffda RBX: 00007f11c1fe5fa0 RCX: 00007f11c1d8f6c9 [ 117.860426][ T6323] RDX: 0000200000000080 RSI: 000000008028640c RDI: 0000000000000003 [ 117.860440][ T6323] RBP: 00007f11c2b98090 R08: 0000000000000000 R09: 0000000000000000 [ 117.860454][ T6323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.860466][ T6323] R13: 00007f11c1fe6038 R14: 00007f11c1fe5fa0 R15: 00007ffc1727c858 [ 117.860501][ T6323] [ 118.217703][ T5920] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 118.227002][ T5920] usb 2-1: config 220 has an invalid descriptor of length 33, skipping remainder of the config [ 118.237817][ T5920] usb 2-1: config 220 has no interface number 2 [ 118.244811][ T5920] usb 2-1: config 220 interface 1 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 118.256355][ T5920] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 118.270277][ T5920] usb 2-1: config 220 interface 0 has no altsetting 0 [ 118.277156][ T5920] usb 2-1: config 220 interface 76 has no altsetting 0 [ 118.284546][ T5920] usb 2-1: config 220 interface 1 has no altsetting 0 [ 118.294349][ T5920] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 118.303998][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.312581][ T5920] usb 2-1: Product: syz [ 118.316877][ T5920] usb 2-1: Manufacturer: syz [ 118.321508][ T5920] usb 2-1: SerialNumber: syz [ 118.555972][ T5920] usb 2-1: selecting invalid altsetting 0 [ 118.572178][ T5920] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 118.588055][ T5920] uvcvideo 2-1:220.0: No valid video chain found. [ 118.606235][ T5920] usb 2-1: selecting invalid altsetting 0 [ 118.617554][ T5920] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 118.634211][ T5920] usb 2-1: USB disconnect, device number 9 [ 118.790109][ T6347] FAULT_INJECTION: forcing a failure. [ 118.790109][ T6347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.803726][ T6347] CPU: 0 UID: 0 PID: 6347 Comm: syz.3.169 Not tainted syzkaller #0 PREEMPT(full) [ 118.803754][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.803768][ T6347] Call Trace: [ 118.803776][ T6347] [ 118.803785][ T6347] dump_stack_lvl+0x189/0x250 [ 118.803819][ T6347] ? __pfx____ratelimit+0x10/0x10 [ 118.803853][ T6347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.803881][ T6347] ? __pfx__printk+0x10/0x10 [ 118.803907][ T6347] ? __might_fault+0xb0/0x130 [ 118.803947][ T6347] should_fail_ex+0x414/0x560 [ 118.803986][ T6347] _copy_from_user+0x2d/0xb0 [ 118.804014][ T6347] comedi_unlocked_ioctl+0x4d6/0x1020 [ 118.804044][ T6347] ? kasan_quarantine_put+0xdd/0x220 [ 118.804080][ T6347] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 118.804110][ T6347] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 118.804137][ T6347] ? do_vfs_ioctl+0xbe8/0x1430 [ 118.804168][ T6347] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 118.804191][ T6347] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 118.804261][ T6347] ? __fget_files+0x2a/0x420 [ 118.804291][ T6347] ? __fget_files+0x3a0/0x420 [ 118.804315][ T6347] ? __fget_files+0x2a/0x420 [ 118.804362][ T6347] ? bpf_lsm_file_ioctl+0x9/0x20 [ 118.804394][ T6347] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 118.804422][ T6347] __se_sys_ioctl+0xfc/0x170 [ 118.804456][ T6347] do_syscall_64+0xfa/0xfa0 [ 118.804477][ T6347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.804497][ T6347] ? clear_bhb_loop+0x60/0xb0 [ 118.804522][ T6347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.804542][ T6347] RIP: 0033:0x7fa4b578f6c9 [ 118.804570][ T6347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.804587][ T6347] RSP: 002b:00007fa4b65d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.804609][ T6347] RAX: ffffffffffffffda RBX: 00007fa4b59e5fa0 RCX: 00007fa4b578f6c9 [ 118.804624][ T6347] RDX: 0000200000000080 RSI: 000000008028640c RDI: 0000000000000003 [ 118.804638][ T6347] RBP: 00007fa4b65d3090 R08: 0000000000000000 R09: 0000000000000000 [ 118.804651][ T6347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.804663][ T6347] R13: 00007fa4b59e6038 R14: 00007fa4b59e5fa0 R15: 00007fff053eded8 [ 118.804697][ T6347] [ 119.075691][ T6349] FAULT_INJECTION: forcing a failure. [ 119.075691][ T6349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.097897][ T6349] CPU: 1 UID: 0 PID: 6349 Comm: syz.0.170 Not tainted syzkaller #0 PREEMPT(full) [ 119.097925][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.097938][ T6349] Call Trace: [ 119.097946][ T6349] [ 119.097955][ T6349] dump_stack_lvl+0x189/0x250 [ 119.097987][ T6349] ? __pfx____ratelimit+0x10/0x10 [ 119.098020][ T6349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.098046][ T6349] ? __pfx__printk+0x10/0x10 [ 119.098083][ T6349] should_fail_ex+0x414/0x560 [ 119.098121][ T6349] _copy_from_user+0x2d/0xb0 [ 119.098149][ T6349] do_insn_ioctl+0x23e/0x5a0 [ 119.098187][ T6349] comedi_unlocked_ioctl+0x907/0x1020 [ 119.098214][ T6349] ? kasan_quarantine_put+0xdd/0x220 [ 119.098251][ T6349] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 119.098280][ T6349] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 119.098307][ T6349] ? do_vfs_ioctl+0xbe8/0x1430 [ 119.098338][ T6349] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 119.098361][ T6349] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 119.098431][ T6349] ? __fget_files+0x2a/0x420 [ 119.098460][ T6349] ? __fget_files+0x3a0/0x420 [ 119.098483][ T6349] ? __fget_files+0x2a/0x420 [ 119.098510][ T6349] ? bpf_lsm_file_ioctl+0x9/0x20 [ 119.098542][ T6349] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 119.098571][ T6349] __se_sys_ioctl+0xfc/0x170 [ 119.098611][ T6349] do_syscall_64+0xfa/0xfa0 [ 119.098633][ T6349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.098653][ T6349] ? clear_bhb_loop+0x60/0xb0 [ 119.098678][ T6349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.098697][ T6349] RIP: 0033:0x7f11c1d8f6c9 [ 119.098715][ T6349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.098731][ T6349] RSP: 002b:00007f11c2b98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.098753][ T6349] RAX: ffffffffffffffda RBX: 00007f11c1fe5fa0 RCX: 00007f11c1d8f6c9 [ 119.098768][ T6349] RDX: 0000200000000080 RSI: 000000008028640c RDI: 0000000000000003 [ 119.098781][ T6349] RBP: 00007f11c2b98090 R08: 0000000000000000 R09: 0000000000000000 [ 119.098794][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.098806][ T6349] R13: 00007f11c1fe6038 R14: 00007f11c1fe5fa0 R15: 00007ffc1727c858 [ 119.098838][ T6349] [ 119.118960][ T6351] __nla_validate_parse: 3 callbacks suppressed [ 119.118983][ T6351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.171'. [ 119.345000][ T5911] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 119.470243][ T6358] tipc: Enabling of bearer rejected, failed to enable media [ 119.511854][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 119.524004][ T5911] usb 3-1: config 5 has an invalid interface number: 168 but max is 0 [ 119.554262][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 119.563289][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 119.572269][ T5911] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 119.589138][ T5911] usb 3-1: config 5 has no interface number 0 [ 119.611843][ T5911] usb 3-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 119.649961][ T5911] usb 3-1: config 5 interface 168 altsetting 7 endpoint 0x8B has invalid wMaxPacketSize 0 [ 119.672085][ T5911] usb 3-1: config 5 interface 168 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.691405][ T5911] usb 3-1: config 5 interface 168 has no altsetting 0 [ 119.724005][ T5911] usb 3-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 119.746221][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.754824][ T5911] usb 3-1: Product: syz [ 119.759042][ T5911] usb 3-1: Manufacturer: syz [ 119.764000][ T5911] usb 3-1: SerialNumber: syz [ 119.858241][ T6371] FAULT_INJECTION: forcing a failure. [ 119.858241][ T6371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.872046][ T6371] CPU: 0 UID: 0 PID: 6371 Comm: syz.3.180 Not tainted syzkaller #0 PREEMPT(full) [ 119.872075][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.872089][ T6371] Call Trace: [ 119.872101][ T6371] [ 119.872110][ T6371] dump_stack_lvl+0x189/0x250 [ 119.872144][ T6371] ? __pfx____ratelimit+0x10/0x10 [ 119.872177][ T6371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.872205][ T6371] ? __pfx__printk+0x10/0x10 [ 119.872244][ T6371] should_fail_ex+0x414/0x560 [ 119.872283][ T6371] _copy_from_user+0x2d/0xb0 [ 119.872312][ T6371] do_insn_ioctl+0x23e/0x5a0 [ 119.872351][ T6371] comedi_unlocked_ioctl+0x907/0x1020 [ 119.872378][ T6371] ? kasan_quarantine_put+0xdd/0x220 [ 119.872414][ T6371] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 119.872443][ T6371] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 119.872470][ T6371] ? do_vfs_ioctl+0xbe8/0x1430 [ 119.872499][ T6371] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 119.872522][ T6371] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 119.872603][ T6371] ? __fget_files+0x2a/0x420 [ 119.872650][ T6371] ? __fget_files+0x3a0/0x420 [ 119.872672][ T6371] ? __fget_files+0x2a/0x420 [ 119.872707][ T6371] ? bpf_lsm_file_ioctl+0x9/0x20 [ 119.872740][ T6371] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 119.872770][ T6371] __se_sys_ioctl+0xfc/0x170 [ 119.872804][ T6371] do_syscall_64+0xfa/0xfa0 [ 119.872826][ T6371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.872848][ T6371] ? clear_bhb_loop+0x60/0xb0 [ 119.872874][ T6371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.872896][ T6371] RIP: 0033:0x7fa4b578f6c9 [ 119.872915][ T6371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.872932][ T6371] RSP: 002b:00007fa4b65d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.872954][ T6371] RAX: ffffffffffffffda RBX: 00007fa4b59e5fa0 RCX: 00007fa4b578f6c9 [ 119.872970][ T6371] RDX: 0000200000000080 RSI: 000000008028640c RDI: 0000000000000003 [ 119.872983][ T6371] RBP: 00007fa4b65d3090 R08: 0000000000000000 R09: 0000000000000000 [ 119.872994][ T6371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.873005][ T6371] R13: 00007fa4b59e6038 R14: 00007fa4b59e5fa0 R15: 00007fff053eded8 [ 119.873040][ T6371] [ 120.103971][ T5872] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 120.146483][ T5911] pn533_usb 3-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 120.159695][ T5911] usb 3-1: USB disconnect, device number 10 [ 120.172439][ T6373] FAULT_INJECTION: forcing a failure. [ 120.172439][ T6373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.203072][ T6373] CPU: 0 UID: 0 PID: 6373 Comm: syz.3.181 Not tainted syzkaller #0 PREEMPT(full) [ 120.203102][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.203115][ T6373] Call Trace: [ 120.203123][ T6373] [ 120.203132][ T6373] dump_stack_lvl+0x189/0x250 [ 120.203165][ T6373] ? __pfx____ratelimit+0x10/0x10 [ 120.203198][ T6373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.203226][ T6373] ? __pfx__printk+0x10/0x10 [ 120.203264][ T6373] should_fail_ex+0x414/0x560 [ 120.203303][ T6373] _copy_to_user+0x31/0xb0 [ 120.203332][ T6373] simple_read_from_buffer+0xe1/0x170 [ 120.203361][ T6373] proc_fail_nth_read+0x1b3/0x220 [ 120.203397][ T6373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.203440][ T6373] ? rw_verify_area+0x2a6/0x4d0 [ 120.203472][ T6373] ? __lock_acquire+0xab9/0xd20 [ 120.203492][ T6373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.203527][ T6373] vfs_read+0x200/0xa30 [ 120.203545][ T6373] ? fdget_pos+0x247/0x320 [ 120.203575][ T6373] ? __pfx___mutex_lock+0x10/0x10 [ 120.203597][ T6373] ? __pfx_vfs_read+0x10/0x10 [ 120.203619][ T6373] ? __fget_files+0x2a/0x420 [ 120.203648][ T6373] ? __fget_files+0x3a0/0x420 [ 120.203671][ T6373] ? __fget_files+0x2a/0x420 [ 120.203705][ T6373] ksys_read+0x145/0x250 [ 120.203724][ T6373] ? __fget_files+0x2a/0x420 [ 120.203750][ T6373] ? __pfx_ksys_read+0x10/0x10 [ 120.203774][ T6373] ? do_syscall_64+0xbe/0xfa0 [ 120.203799][ T6373] do_syscall_64+0xfa/0xfa0 [ 120.203821][ T6373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.203842][ T6373] ? clear_bhb_loop+0x60/0xb0 [ 120.203868][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.203889][ T6373] RIP: 0033:0x7fa4b578e0dc [ 120.203908][ T6373] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 120.203926][ T6373] RSP: 002b:00007fa4b65d3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.203949][ T6373] RAX: ffffffffffffffda RBX: 00007fa4b59e5fa0 RCX: 00007fa4b578e0dc [ 120.203965][ T6373] RDX: 000000000000000f RSI: 00007fa4b65d30a0 RDI: 0000000000000004 [ 120.203978][ T6373] RBP: 00007fa4b65d3090 R08: 0000000000000000 R09: 0000000000000000 [ 120.203991][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.204003][ T6373] R13: 00007fa4b59e6038 R14: 00007fa4b59e5fa0 R15: 00007fff053eded8 [ 120.204038][ T6373] [ 120.322685][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 120.328366][ T793] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 120.359411][ T5872] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 120.492689][ T6375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.501485][ T6375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.510151][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.522266][ T5872] usb 2-1: config 0 descriptor?? [ 120.531844][ T5872] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 120.601842][ T793] usb 1-1: Using ep0 maxpacket: 16 [ 120.610708][ T793] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 120.619907][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.629349][ T793] usb 1-1: Product: syz [ 120.633599][ T793] usb 1-1: Manufacturer: syz [ 120.638226][ T793] usb 1-1: SerialNumber: syz [ 120.646475][ T793] usb 1-1: config 0 descriptor?? [ 120.654964][ T793] usb-storage 1-1:0.0: USB Mass Storage device detected [ 120.667300][ T793] usb-storage 1-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 120.674897][ T793] usb-storage 1-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 120.674897][ T793] Please send a copy of this message to and [ 120.858593][ T5913] usb 1-1: USB disconnect, device number 13 [ 120.876091][ T6386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.184'. [ 120.951783][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 121.101493][ T6393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.115008][ T6393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.128157][ T6393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.139159][ T6393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.351813][ T793] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 121.501813][ T793] usb 3-1: Using ep0 maxpacket: 32 [ 121.509244][ T793] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 121.519102][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.529947][ T793] usb 3-1: config 0 descriptor?? [ 121.540773][ T5872] gspca_nw80x: reg_w err -71 [ 121.545669][ T793] gspca_main: sunplus-2.14.0 probing 041e:400b [ 121.557764][ T5872] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 121.574285][ T5872] usb 2-1: USB disconnect, device number 10 [ 121.712532][ T5913] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 121.720607][ T6400] tipc: Enabling of bearer rejected, failed to enable media [ 121.790943][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 121.800171][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 121.882435][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 121.889451][ T5913] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.903277][ T5913] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.914744][ T5913] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.924028][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.932267][ T5913] usb 1-1: Product: syz [ 121.936453][ T5913] usb 1-1: Manufacturer: syz [ 121.941056][ T5913] usb 1-1: SerialNumber: syz [ 122.166063][ T5913] usb 1-1: 0:2 : does not exist [ 122.186380][ T5913] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 122.256832][ T5913] usb 1-1: USB disconnect, device number 14 [ 122.307621][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.358513][ T6414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.370435][ T6395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.375091][ T6414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.382917][ T6395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.389341][ T5911] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 122.553278][ T5911] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 122.561599][ T5911] usb 2-1: config 220 has an invalid descriptor of length 33, skipping remainder of the config [ 122.573470][ T5911] usb 2-1: config 220 has no interface number 2 [ 122.579825][ T5911] usb 2-1: config 220 interface 1 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 122.591926][ T5911] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 122.605240][ T5911] usb 2-1: config 220 interface 0 has no altsetting 0 [ 122.612438][ T5911] usb 2-1: config 220 interface 76 has no altsetting 0 [ 122.619433][ T5911] usb 2-1: config 220 interface 1 has no altsetting 0 [ 122.628648][ T5911] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 122.637852][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.645960][ T5911] usb 2-1: Product: syz [ 122.650169][ T5911] usb 2-1: Manufacturer: syz [ 122.654869][ T5911] usb 2-1: SerialNumber: syz [ 122.873443][ T5911] usb 2-1: selecting invalid altsetting 0 [ 122.880879][ T5911] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 122.889607][ T5911] uvcvideo 2-1:220.0: No valid video chain found. [ 122.901976][ T5911] usb 2-1: selecting invalid altsetting 0 [ 122.907857][ T5911] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 122.920782][ T5911] usb 2-1: USB disconnect, device number 11 [ 123.012856][ T5913] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 123.025999][ T793] gspca_sunplus: reg_w_riv err -71 [ 123.031393][ T793] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 123.042483][ T793] usb 3-1: USB disconnect, device number 11 [ 123.107961][ T6424] tipc: Enabling of bearer rejected, failed to enable media [ 123.174225][ T5913] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 123.185256][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.196475][ T5913] usb 1-1: config 0 descriptor?? [ 123.432424][ T5913] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 123.451875][ T5913] [drm:udl_init] *ERROR* Selecting channel failed [ 123.475536][ T5913] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 123.485895][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 123.485922][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 123.511664][ T5913] [drm] Initialized udl on minor 2 [ 123.518610][ T5913] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 123.542566][ T5913] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 123.550502][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 123.581248][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 123.604437][ T5913] usb 1-1: USB disconnect, device number 15 [ 123.636890][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.654787][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.736171][ T6444] syzkaller1: entered promiscuous mode [ 123.746137][ T6444] syzkaller1: entered allmulticast mode [ 123.746571][ T6446] netlink: 68 bytes leftover after parsing attributes in process `syz.1.205'. [ 124.118245][ T6463] tipc: Enabling of bearer rejected, failed to enable media [ 124.210018][ T6471] __nla_validate_parse: 1 callbacks suppressed [ 124.210038][ T6471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.207'. [ 124.235945][ T6471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.207'. [ 124.262606][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 124.282145][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 124.350038][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.362186][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.381933][ T5913] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 124.553258][ T5913] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 124.562757][ T5913] usb 1-1: config 220 has an invalid descriptor of length 33, skipping remainder of the config [ 124.573174][ T5913] usb 1-1: config 220 has no interface number 2 [ 124.579520][ T5913] usb 1-1: config 220 interface 1 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 124.590773][ T5913] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 124.604550][ T5913] usb 1-1: config 220 interface 0 has no altsetting 0 [ 124.611383][ T5913] usb 1-1: config 220 interface 76 has no altsetting 0 [ 124.619294][ T5913] usb 1-1: config 220 interface 1 has no altsetting 0 [ 124.632945][ T5913] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 124.646577][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.654693][ T5913] usb 1-1: Product: syz [ 124.659018][ T5913] usb 1-1: Manufacturer: syz [ 124.663885][ T5913] usb 1-1: SerialNumber: syz [ 124.724487][ T6485] syzkaller1: entered promiscuous mode [ 124.730128][ T6485] syzkaller1: entered allmulticast mode [ 124.891649][ T5913] usb 1-1: selecting invalid altsetting 0 [ 124.901826][ T5913] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 124.909316][ T5913] uvcvideo 1-1:220.0: No valid video chain found. [ 124.924193][ T5913] usb 1-1: selecting invalid altsetting 0 [ 124.930082][ T5913] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 124.942129][ T5913] usb 1-1: USB disconnect, device number 16 [ 125.071851][ T793] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 125.222724][ T793] usb 3-1: Using ep0 maxpacket: 16 [ 125.239560][ T793] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 125.250698][ T793] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 125.262135][ T793] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 125.272132][ T793] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 125.281992][ T793] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 125.292281][ T793] usb 3-1: config 1 interface 0 has no altsetting 0 [ 125.298970][ T793] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 125.308340][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.325400][ T793] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 125.531280][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.541312][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.616384][ T793] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 125.650897][ T793] usb 3-1: USB disconnect, device number 12 [ 125.854170][ T6507] tipc: Enabling of bearer rejected, failed to enable media [ 125.916177][ T6509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.928330][ T6509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.943352][ T6509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.953015][ T6509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.992328][ T793] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 126.125882][ T6513] syzkaller1: entered promiscuous mode [ 126.132914][ T6513] syzkaller1: entered allmulticast mode [ 126.154104][ T793] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 126.163489][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.171525][ T793] usb 1-1: Product: syz [ 126.176292][ T793] usb 1-1: Manufacturer: syz [ 126.180909][ T793] usb 1-1: SerialNumber: syz [ 126.188113][ T793] usb 1-1: config 0 descriptor?? [ 126.201886][ T5144] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 126.202399][ T5835] Bluetooth: hci4: command 0x1003 tx timeout [ 126.605546][ T793] airspy 1-1:0.0: Board ID: 00 [ 126.610450][ T793] airspy 1-1:0.0: Firmware version: [ 126.722022][ T5825] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 126.745803][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 126.754731][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 126.764015][ T5911] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 126.861850][ T5825] usb 2-1: device descriptor read/64, error -71 [ 126.922767][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 126.940125][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 126.951630][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 126.971801][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.999281][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 127.013441][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 127.017251][ T6505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.034496][ T5911] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 127.037616][ T6505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.046535][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.060848][ T5911] usb 3-1: Product: syz [ 127.066070][ T5911] usb 3-1: Manufacturer: syz [ 127.081791][ T5911] usb 3-1: SerialNumber: syz [ 127.104249][ T5911] usb 3-1: config 0 descriptor?? [ 127.110328][ T6525] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 127.117737][ T5825] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 127.140097][ T5911] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 127.158309][ T5179] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 127.174061][ T5179] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 127.188182][ T5179] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 127.239683][ C1] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 127.251769][ T5179] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 127.251818][ T5825] usb 2-1: device descriptor read/64, error -71 [ 127.292534][ T5179] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 127.304465][ T5836] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 127.330166][ T6525] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 127.361588][ T5179] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 127.376154][ T5913] usb 3-1: USB disconnect, device number 13 [ 127.382212][ C1] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 127.383297][ T5825] usb usb2-port1: attempt power cycle [ 127.453500][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.468044][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.684207][ T793] airspy 1-1:0.0: Registered as swradio24 [ 127.691185][ T793] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 127.761857][ T5825] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 127.783550][ T5825] usb 2-1: device descriptor read/8, error -71 [ 127.887324][ T793] usb 1-1: USB disconnect, device number 17 [ 128.021800][ T5825] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 128.042869][ T5825] usb 2-1: device descriptor read/8, error -71 [ 128.153133][ T5825] usb usb2-port1: unable to enumerate USB device [ 128.166670][ T6552] XFS (nullb0): Invalid superblock magic number [ 128.189958][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.201390][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.214170][ T5920] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 128.363081][ T5920] usb 3-1: device descriptor read/64, error -71 [ 128.446080][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 128.455145][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 128.603885][ T5920] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 128.630370][ T6566] netlink: 'syz.0.240': attribute type 10 has an invalid length. [ 128.639399][ T6566] macvlan0: entered promiscuous mode [ 128.653866][ T6566] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 128.719838][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 128.728948][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 128.751155][ T5920] usb 3-1: device descriptor read/64, error -71 [ 128.778357][ T6569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.787552][ T6569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.862031][ T5920] usb usb3-port1: attempt power cycle [ 129.211793][ T5920] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 129.232427][ T5920] usb 3-1: device descriptor read/8, error -71 [ 129.346424][ T6571] netlink: 48 bytes leftover after parsing attributes in process `syz.3.242'. [ 129.483048][ T5920] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 129.526656][ T5920] usb 3-1: device descriptor read/8, error -71 [ 129.630989][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 129.644308][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 129.645247][ T5920] usb usb3-port1: unable to enumerate USB device [ 129.782838][ T5913] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 129.827597][ T6586] tipc: Enabling of bearer rejected, failed to enable media [ 129.954156][ T5913] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 129.962931][ T5913] usb 1-1: config 220 has an invalid descriptor of length 33, skipping remainder of the config [ 129.973996][ T5913] usb 1-1: config 220 has no interface number 2 [ 129.980605][ T5913] usb 1-1: config 220 interface 1 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 129.993021][ T5913] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 130.006527][ T5913] usb 1-1: config 220 interface 0 has no altsetting 0 [ 130.013781][ T5913] usb 1-1: config 220 interface 76 has no altsetting 0 [ 130.020838][ T5913] usb 1-1: config 220 interface 1 has no altsetting 0 [ 130.031935][ T5913] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 130.041276][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.051471][ T5913] usb 1-1: Product: syz [ 130.056911][ T5913] usb 1-1: Manufacturer: syz [ 130.061761][ T5913] usb 1-1: SerialNumber: syz [ 130.127884][ T30] audit: type=1326 audit(1762873403.162:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6595 comm="syz.3.252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4b578f6c9 code=0x0 [ 130.162122][ T5920] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 130.223800][ T6601] netlink: 52 bytes leftover after parsing attributes in process `syz.3.253'. [ 130.233808][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 130.291789][ T5913] usb 1-1: selecting invalid altsetting 0 [ 130.301009][ T6603] Bluetooth: MGMT ver 1.23 [ 130.307476][ T5913] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 130.316317][ T5913] uvcvideo 1-1:220.0: No valid video chain found. [ 130.334542][ T6603] netlink: 'syz.3.254': attribute type 3 has an invalid length. [ 130.345358][ T5913] usb 1-1: selecting invalid altsetting 0 [ 130.345372][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.352408][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 130.363259][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.367959][ T5913] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 130.375865][ T6603] netlink: 100 bytes leftover after parsing attributes in process `syz.3.254'. [ 130.386508][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 130.406786][ T5913] usb 1-1: USB disconnect, device number 18 [ 130.415969][ T5920] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 130.435824][ T5920] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 130.445606][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 130.455886][ T5920] usb 2-1: Product: syz [ 130.460063][ T5920] usb 2-1: Manufacturer: syz [ 130.464741][ T5920] usb 2-1: SerialNumber: syz [ 130.475196][ T5920] usb 2-1: config 0 descriptor?? [ 130.700688][ T6591] Zero length message leads to an empty skb [ 131.444431][ T5920] usb 2-1: USB disconnect, device number 16 [ 131.871807][ T5920] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 131.964626][ T6633] tipc: Enabling of bearer rejected, failed to enable media [ 132.001811][ T5825] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 132.028581][ T5920] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 132.041490][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.052268][ T6636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.064817][ T6636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.075806][ T5920] usb 2-1: config 0 descriptor?? [ 132.176888][ T5825] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 132.186164][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.195370][ T5825] usb 3-1: Product: syz [ 132.199614][ T5825] usb 3-1: Manufacturer: syz [ 132.204652][ T5825] usb 3-1: SerialNumber: syz [ 132.212256][ T5825] usb 3-1: config 0 descriptor?? [ 132.301808][ T5872] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 132.426111][ T5825] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 132.471762][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 132.479092][ T5872] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 132.487658][ T5872] usb 1-1: config 0 has no interface number 0 [ 132.496529][ T5920] ath6kl: Failed to submit usb control message: -71 [ 132.505940][ T5920] ath6kl: unable to send the bmi data to the device: -71 [ 132.513186][ T5872] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 132.523364][ T5920] ath6kl: Unable to send get target info: -71 [ 132.529981][ T5872] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 132.540123][ T5920] ath6kl: Failed to init ath6kl core: -71 [ 132.547485][ T5920] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 132.559331][ T5872] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 132.571531][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.579977][ T5920] usb 2-1: USB disconnect, device number 17 [ 132.585982][ T5872] usb 1-1: Product: syz [ 132.590177][ T5872] usb 1-1: Manufacturer: syz [ 132.597927][ T5872] usb 1-1: SerialNumber: syz [ 132.621841][ T5872] usb 1-1: config 0 descriptor?? [ 132.627873][ T6637] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 132.628563][ T6630] trusted_key: encrypted_key: insufficient parameters specified [ 132.645875][ T6637] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 132.690154][ T5872] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, ea:dd:2d:70:c8:db [ 133.133933][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 133.369928][ T6672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.272'. [ 133.514708][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 133.541258][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 133.649211][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.664347][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.684963][ T6681] tipc: Enabling of bearer rejected, failed to enable media [ 133.766166][ T5920] usb 1-1: USB disconnect, device number 19 [ 133.776436][ T5920] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 133.879332][ T5825] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 133.912512][ T5825] usb 3-1: USB disconnect, device number 18 [ 133.928911][ T6688] loop8: detected capacity change from 0 to 7 [ 133.945949][ T5833] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 133.953822][ T5833] loop8: partition table partially beyond EOD, truncated [ 133.970436][ T5833] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 133.999798][ T5833] loop8: p2 start 956478 is beyond EOD, truncated [ 134.042324][ T6688] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 134.049611][ T6688] loop8: partition table partially beyond EOD, truncated [ 134.060484][ T6688] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 134.075706][ T6688] loop8: p2 start 956478 is beyond EOD, truncated [ 134.551804][ T5920] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 134.570761][ T6710] netlink: 44 bytes leftover after parsing attributes in process `syz.3.281'. [ 134.583824][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 134.603643][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 134.721915][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 134.743228][ T5920] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.771654][ T5920] usb 2-1: config 0 has no interface number 0 [ 134.793999][ T6720] tipc: Enabling of bearer rejected, failed to enable media [ 134.798261][ T5920] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 134.812397][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.820837][ T5920] usb 2-1: Product: syz [ 134.827219][ T6718] syzkaller1: entered promiscuous mode [ 134.832995][ T6718] syzkaller1: entered allmulticast mode [ 134.843178][ T5920] usb 2-1: Manufacturer: syz [ 134.847811][ T5920] usb 2-1: SerialNumber: syz [ 134.856815][ T5920] usb 2-1: config 0 descriptor?? [ 134.875453][ T5920] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 135.402986][ T793] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 135.471891][ T5825] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 135.579772][ T793] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.602609][ T793] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 135.628616][ T793] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.637999][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 135.646958][ T793] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 135.660694][ T5825] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 135.669851][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.679120][ T793] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 135.697270][ T5825] usb 3-1: config 0 descriptor?? [ 135.705013][ T793] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.716917][ T5825] gspca_main: sunplus-2.14.0 probing 041e:400b [ 135.732493][ T793] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.740519][ T793] usb 1-1: Product: syz [ 135.751248][ T793] usb 1-1: Manufacturer: syz [ 135.774781][ T6761] comedi comedi4: comedi_config --init_data is deprecated [ 135.798633][ T793] cdc_wdm 1-1:1.0: skipping garbage [ 135.822514][ T793] cdc_wdm 1-1:1.0: skipping garbage [ 135.843467][ T793] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 135.854140][ T793] cdc_wdm 1-1:1.0: Unknown control protocol [ 136.002194][ T5920] gspca_spca1528: reg_w err -110 [ 136.021875][ T5920] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 136.507588][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.524452][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.636509][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.646398][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.171011][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.224956][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.320673][ T793] usb 2-1: USB disconnect, device number 18 [ 137.528109][ T5825] gspca_sunplus: reg_w_riv err -71 [ 137.535823][ T5825] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 137.562178][ T5825] usb 3-1: USB disconnect, device number 19 [ 137.832190][ T6805] syzkaller1: entered promiscuous mode [ 137.837826][ T6805] syzkaller1: entered allmulticast mode [ 137.951920][ T5920] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 137.988526][ T6807] usb usb8: usbfs: process 6807 (syz.3.298) did not claim interface 0 before use [ 138.076012][ T6809] overlayfs: conflicting lowerdir path [ 138.128400][ T5920] usb 2-1: config 0 has no interfaces? [ 138.138422][ T979] usb 1-1: USB disconnect, device number 20 [ 138.144570][ T5920] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 138.144599][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.155607][ T5920] usb 2-1: config 0 descriptor?? [ 138.209691][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.221420][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.446878][ T5920] usb 2-1: USB disconnect, device number 19 [ 138.454705][ T6801] netlink: ct family unspecified [ 138.459808][ T6801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.534564][ T6803] pim6reg: entered allmulticast mode [ 138.741866][ T979] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 138.871822][ T979] usb 1-1: device descriptor read/64, error -71 [ 139.117786][ T979] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 139.200542][ T30] audit: type=1800 audit(1762873412.232:3): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.307" name="bus" dev="tmpfs" ino=602 res=0 errno=0 [ 139.272179][ T979] usb 1-1: device descriptor read/64, error -71 [ 139.382208][ T979] usb usb1-port1: attempt power cycle [ 139.467101][ T6841] kvm: user requested TSC rate below hardware speed [ 139.509457][ T6841] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3510134640 (7020269280 ns) > initial count (5369474572 ns). Using initial count to start timer. [ 139.538414][ T6841] kvm: kvm [6840]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 139.548076][ T6841] kvm: kvm [6840]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 139.574859][ T793] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 139.732390][ T979] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 139.742814][ T793] usb 2-1: Using ep0 maxpacket: 32 [ 139.755756][ T793] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 139.766879][ T979] usb 1-1: device descriptor read/8, error -71 [ 139.775312][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.788210][ T793] usb 2-1: config 0 descriptor?? [ 139.798962][ T793] gspca_main: sunplus-2.14.0 probing 041e:400b [ 139.993572][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 140.011865][ T5825] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 140.019580][ T979] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 140.052734][ T979] usb 1-1: device descriptor read/8, error -71 [ 140.076651][ T6856] dvmrp5: entered allmulticast mode [ 140.085480][ T6856] dvmrp0: left allmulticast mode [ 140.090630][ T6856] dvmrp5: left allmulticast mode [ 140.172395][ T979] usb usb1-port1: unable to enumerate USB device [ 140.184352][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.210588][ T5825] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 140.239633][ T5825] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 140.248841][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.270371][ T5825] usb 3-1: config 0 descriptor?? [ 140.603855][ T6867] Unsupported ieee802154 address type: 0 [ 140.701009][ T5825] logitech 0003:046D:CA04.0002: item fetching failed at offset 2/5 [ 140.711268][ T5825] logitech 0003:046D:CA04.0002: parse failed [ 140.717734][ T5825] logitech 0003:046D:CA04.0002: probe with driver logitech failed with error -22 [ 140.813027][ T793] gspca_sunplus: reg_r err -32 [ 140.817936][ T793] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 140.896101][ T793] usb 3-1: USB disconnect, device number 20 [ 141.710227][ T6878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.722518][ T6878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.981756][ T5920] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 142.049043][ T793] libceph: connect (1)[c::]:6789 error -101 [ 142.056564][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 142.089006][ T6894] ceph: No mds server is up or the cluster is laggy [ 142.166640][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.178268][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.188376][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.201361][ T5920] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.210607][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.221212][ T5920] usb 3-1: config 0 descriptor?? [ 142.356533][ T5825] usb 2-1: USB disconnect, device number 20 [ 142.401776][ T793] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 142.574419][ T793] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 142.584944][ T793] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 142.594460][ T793] usb 1-1: config 220 has an invalid descriptor of length 33, skipping remainder of the config [ 142.605850][ T793] usb 1-1: config 220 has no interface number 2 [ 142.612591][ T793] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 142.626068][ T793] usb 1-1: config 220 interface 0 has no altsetting 0 [ 142.633635][ T793] usb 1-1: config 220 interface 76 has no altsetting 0 [ 142.641993][ T793] usb 1-1: config 220 interface 1 has no altsetting 0 [ 142.651938][ T793] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 142.661032][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.670109][ T793] usb 1-1: Product: syz [ 142.682217][ T793] usb 1-1: Manufacturer: syz [ 142.687043][ T793] usb 1-1: SerialNumber: syz [ 142.689061][ T5920] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 142.720661][ T6910] tipc: Enabling of bearer rejected, failed to enable media [ 142.731892][ T5825] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 142.893716][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 142.918385][ T793] usb 1-1: selecting invalid altsetting 0 [ 142.925722][ T5825] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.938178][ T793] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 142.947985][ T5825] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.958202][ T793] uvcvideo 1-1:220.0: No valid video chain found. [ 142.965018][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0 [ 142.973454][ T5825] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 142.987839][ T793] usb 1-1: selecting invalid altsetting 0 [ 142.994274][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.002595][ T793] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 143.017420][ T5825] usb 2-1: config 0 descriptor?? [ 143.042913][ T793] usb 1-1: USB disconnect, device number 25 [ 143.109339][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.122840][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.133109][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.138461][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.155112][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.165173][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.167133][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.175270][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.338177][ T5913] usb 3-1: USB disconnect, device number 21 [ 143.450305][ T5825] hid (null): unknown global tag 0xc [ 143.464280][ T5825] hid (null): unknown global tag 0xd [ 143.476852][ T5825] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 143.485891][ T5825] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 143.493570][ T5825] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 143.500708][ T5825] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 143.508079][ T5825] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 143.515417][ T5825] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 143.522437][ T5825] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 143.529635][ T5825] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 143.536923][ T5825] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 143.544318][ T5825] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 143.552509][ T5825] cougar 0003:060B:500A.0004: unexpected long global item [ 143.562870][ T5825] cougar 0003:060B:500A.0004: parse failed [ 143.568816][ T5825] cougar 0003:060B:500A.0004: probe with driver cougar failed with error -22 [ 143.649841][ T24] usb 2-1: USB disconnect, device number 21 [ 143.741968][ T5913] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 143.851056][ T6943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.871163][ T6943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.913052][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 143.931553][ T5913] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 143.951850][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.983709][ T5913] usb 3-1: config 0 descriptor?? [ 144.005465][ T5913] gspca_main: sunplus-2.14.0 probing 041e:400b [ 144.471803][ T5825] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 144.541916][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 144.582574][ T6964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.595420][ T6964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.631930][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 144.639250][ T5825] usb 2-1: config 1 interface 0 has no altsetting 0 [ 144.648726][ T5825] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b23, bcdDevice= 0.40 [ 144.657970][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.666123][ T5825] usb 2-1: Product: 䀊 [ 144.670304][ T5825] usb 2-1: Manufacturer: ခ [ 144.675022][ T5825] usb 2-1: SerialNumber: 診韾㝖尶ᱽﴑ碌箚嚫ࡍ囗ꁺ윲섭坋캮㋞넂ფ㼰墦ќΜ㘨펲벻筞穩ㇿ碫꒐됔럚⼑ [ 144.692009][ T24] usb 1-1: device descriptor read/64, error -71 [ 144.951799][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 145.091913][ T24] usb 1-1: device descriptor read/64, error -71 [ 145.113673][ T5825] usbhid 2-1:1.0: can't add hid device: -71 [ 145.121295][ T5825] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 145.138548][ T5825] usb 2-1: USB disconnect, device number 22 [ 145.203781][ T24] usb usb1-port1: attempt power cycle [ 145.294508][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.304146][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.561813][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 145.593055][ T24] usb 1-1: device descriptor read/8, error -71 [ 145.814116][ T5913] gspca_sunplus: reg_w_riv err -71 [ 145.829745][ T5913] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 145.839923][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 145.860623][ T5913] usb 3-1: USB disconnect, device number 22 [ 145.872410][ T24] usb 1-1: device descriptor read/8, error -71 [ 146.002383][ T24] usb usb1-port1: unable to enumerate USB device [ 146.173528][ T6987] tipc: Enabling of bearer rejected, failed to enable media [ 146.222414][ T5913] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 146.235519][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.246191][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.352043][ T5913] usb 2-1: device descriptor read/64, error -71 [ 146.611776][ T5893] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 146.621865][ T5913] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 146.751769][ T5913] usb 2-1: device descriptor read/64, error -71 [ 146.763299][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.773298][ T5893] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 146.783163][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.794300][ T5893] usb 3-1: config 0 descriptor?? [ 146.833773][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.846112][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.862134][ T5913] usb usb2-port1: attempt power cycle [ 146.897400][ T6998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.906360][ T6998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.201911][ T5913] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 147.215312][ T5893] kye 0003:0458:501A.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 147.222424][ T5913] usb 2-1: device descriptor read/8, error -71 [ 147.230915][ T5893] kye 0003:0458:501A.0005: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 147.243508][ T5893] kye 0003:0458:501A.0005: tablet-enabling feature report not found [ 147.255335][ T5893] kye 0003:0458:501A.0005: tablet enabling failed [ 147.367772][ T7001] syzkaller1: entered promiscuous mode [ 147.373422][ T7001] syzkaller1: entered allmulticast mode [ 147.416627][ T24] usb 3-1: USB disconnect, device number 23 [ 147.474448][ T5913] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 147.505601][ T5913] usb 2-1: device descriptor read/8, error -71 [ 147.622954][ T5913] usb usb2-port1: unable to enumerate USB device [ 147.741157][ T7018] netlink: 'syz.3.369': attribute type 15 has an invalid length. [ 147.748986][ T7018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.369'. [ 147.782631][ T5893] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 147.931961][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 147.943655][ T5893] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.961118][ T5893] usb 1-1: config 0 has no interface number 0 [ 147.992376][ T5893] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.021798][ T5893] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.035418][ T5893] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 148.044915][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.059125][ T5893] usb 1-1: config 0 descriptor?? [ 148.105615][ T7030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.117082][ T7030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.321819][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 148.473790][ T24] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 148.491792][ T24] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 148.500774][ T24] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 148.541762][ T24] usb 3-1: config 220 has no interface number 2 [ 148.548141][ T24] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 148.581741][ T24] usb 3-1: config 220 interface 0 has no altsetting 0 [ 148.588567][ T24] usb 3-1: config 220 interface 76 has no altsetting 0 [ 148.602216][ T24] usb 3-1: config 220 interface 1 has no altsetting 0 [ 148.624480][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 148.633601][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.641627][ T24] usb 3-1: Product: syz [ 148.662012][ T24] usb 3-1: Manufacturer: syz [ 148.666645][ T24] usb 3-1: SerialNumber: syz [ 148.703456][ T5893] input: HID 28bd:0094 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.0006/input/input8 [ 148.761563][ T5893] uclogic 0003:28BD:0094.0006: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 148.895961][ T24] usb 3-1: selecting invalid altsetting 0 [ 148.919326][ T24] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 148.922035][ T7005] netlink: 'syz.0.366': attribute type 21 has an invalid length. [ 148.935045][ T24] uvcvideo 3-1:220.0: No valid video chain found. [ 148.951979][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 148.987992][ T24] usb 3-1: selecting invalid altsetting 0 [ 149.040952][ T24] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 149.093406][ T24] usb 3-1: USB disconnect, device number 24 [ 149.279816][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.292901][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.337681][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.352332][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.361508][ T6218] Bluetooth: hci4: Frame reassembly failed (-84) [ 149.512589][ T7042] tipc: Enabling of bearer rejected, failed to enable media [ 149.666811][ T7044] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 149.714651][ T7049] netlink: 52 bytes leftover after parsing attributes in process `syz.2.380'. [ 149.731236][ T5825] usb 1-1: USB disconnect, device number 30 [ 149.755003][ T793] IPVS: starting estimator thread 0... [ 149.841778][ T7051] IPVS: using max 25 ests per chain, 60000 per kthread [ 150.171978][ T5825] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 150.301771][ T5825] usb 1-1: device descriptor read/64, error -71 [ 150.530581][ T7058] overlayfs: upper fs does not support file handles, falling back to index=off. [ 150.543076][ T7058] evm: overlay not supported [ 150.549858][ T5825] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 150.596494][ T7060] tmpfs: Bad value for 'mpol' [ 150.712760][ T5825] usb 1-1: device descriptor read/64, error -71 [ 150.716549][ T7067] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.386'. [ 150.737800][ T7067] sock: sock_timestamping_bind_phc: sock not bind to device [ 150.738143][ T7065] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 150.753616][ T7065] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 150.760103][ T7065] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 150.766746][ T7065] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 150.773303][ T7065] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 150.779847][ T7065] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 150.786742][ T7065] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 150.793386][ T7065] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 150.799953][ T7065] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 150.822210][ T5825] usb usb1-port1: attempt power cycle [ 150.837443][ T7065] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 150.859343][ T7065] comedi comedi3: 8255: I/O port conflict (0xc4,4) [ 150.867531][ T7065] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 150.874545][ T7065] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 151.024340][ T7081] netlink: 'syz.1.389': attribute type 39 has an invalid length. [ 151.077927][ T7081] hsr_slave_0 (unregistering): left promiscuous mode [ 151.178678][ T7083] overlayfs: failed to resolve './file1': -2 [ 151.185201][ T5825] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 151.214155][ T5825] usb 1-1: device descriptor read/8, error -71 [ 151.242887][ T5913] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 151.393874][ T5913] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 151.405373][ T5144] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 151.406780][ T5835] Bluetooth: hci4: command 0x1003 tx timeout [ 151.412852][ T5913] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 151.442192][ T5913] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 151.451791][ T5825] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 151.453428][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.468896][ T5913] usb 3-1: Product: syz [ 151.477765][ T5913] usb 3-1: Manufacturer: syz [ 151.483450][ T5913] usb 3-1: SerialNumber: syz [ 151.493194][ T5825] usb 1-1: device descriptor read/8, error -71 [ 151.501489][ T5913] usb 3-1: config 0 descriptor?? [ 151.507821][ T7078] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 151.515610][ T7078] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 151.602490][ T5825] usb usb1-port1: unable to enumerate USB device [ 151.727690][ T7078] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 151.735101][ T7078] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 152.198132][ T7092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.208476][ T7092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.391847][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 152.569015][ T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 152.577850][ T5913] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 152.587022][ T24] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 152.602894][ T5913] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 152.615531][ T24] usb 2-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 152.624600][ T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 152.637566][ T5913] usb 3-1: USB disconnect, device number 25 [ 152.643725][ T24] usb 2-1: config 220 has no interface number 2 [ 152.650155][ T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 152.665259][ T5913] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 152.676446][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 152.684143][ T24] usb 2-1: config 220 interface 76 has no altsetting 0 [ 152.691034][ T24] usb 2-1: config 220 interface 1 has no altsetting 0 [ 152.705550][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 152.715640][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.723686][ T24] usb 2-1: Product: syz [ 152.727873][ T24] usb 2-1: Manufacturer: syz [ 152.735968][ T24] usb 2-1: SerialNumber: syz [ 152.960039][ T24] usb 2-1: selecting invalid altsetting 0 [ 152.968456][ T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 152.977206][ T24] uvcvideo 2-1:220.0: No valid video chain found. [ 152.996239][ T24] usb 2-1: selecting invalid altsetting 0 [ 153.008724][ T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 153.029376][ T24] usb 2-1: USB disconnect, device number 27 [ 153.206605][ T7103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.222455][ T7103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.812501][ T5825] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 153.965231][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 153.974224][ T5825] usb 3-1: unable to get BOS descriptor or descriptor too short [ 153.995708][ T5825] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 154.008778][ T5825] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 154.018896][ T5825] usb 3-1: config 8 interface 0 has no altsetting 0 [ 154.034469][ T5825] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 154.046131][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.054636][ T5825] usb 3-1: Product: syz [ 154.058848][ T5825] usb 3-1: Manufacturer: syz [ 154.063753][ T5825] usb 3-1: SerialNumber: syz [ 154.070383][ T7134] syzkaller1: entered promiscuous mode [ 154.079205][ T7134] syzkaller1: entered allmulticast mode [ 154.287396][ T7117] fuse: Unknown parameter 'usrquotaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 154.302965][ T5825] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.307423][ T7142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.404694][ T5825] usb 3-1: selecting invalid altsetting 0 [ 154.453294][ T7142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.507490][ T5825] snd-usb-audio 3-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 154.512728][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.531900][ T5893] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 154.542707][ T5825] usb 3-1: USB disconnect, device number 26 [ 154.570077][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.598678][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.697251][ T5893] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 154.715146][ T5893] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 154.733469][ T5893] usb 1-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 154.747038][ T5893] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 154.757997][ T5893] usb 1-1: config 220 has no interface number 2 [ 154.769556][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 154.771434][ T5893] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 154.796741][ T7155] nfs4: Unknown parameter '' [ 154.804502][ T5893] usb 1-1: config 220 interface 0 has no altsetting 0 [ 154.815186][ T5893] usb 1-1: config 220 interface 76 has no altsetting 0 [ 154.816182][ T7155] nfs: Unknown parameter 'uid>18446744073709551615' [ 154.822533][ T5893] usb 1-1: config 220 interface 1 has no altsetting 0 [ 154.841350][ T5893] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 154.855066][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.863239][ T5893] usb 1-1: Product: syz [ 154.867559][ T5893] usb 1-1: Manufacturer: syz [ 154.918312][ T5893] usb 1-1: SerialNumber: syz [ 155.095886][ T7159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.165198][ T5893] usb 1-1: selecting invalid altsetting 0 [ 155.181648][ T5893] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 155.202959][ T5893] uvcvideo 1-1:220.0: No valid video chain found. [ 155.243231][ T5893] usb 1-1: selecting invalid altsetting 0 [ 155.249118][ T5893] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 155.280331][ T5893] usb 1-1: USB disconnect, device number 35 [ 155.319015][ T7166] syzkaller1: entered promiscuous mode [ 155.326759][ T7166] syzkaller1: entered allmulticast mode [ 155.871786][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 155.971959][ T5913] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 156.031761][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 156.039605][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 156.054443][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 156.068857][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 156.078474][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.089130][ T24] usb 3-1: Product: syz [ 156.093711][ T24] usb 3-1: Manufacturer: syz [ 156.098427][ T24] usb 3-1: SerialNumber: syz [ 156.112599][ T5913] usb 2-1: device descriptor read/64, error -71 [ 156.123562][ T24] usb 3-1: config 0 descriptor?? [ 156.137260][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 156.146812][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 156.305971][ T7181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.317032][ T7181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.327471][ T7181] Unknown options in mask b7f2 [ 156.349836][ T7181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.362078][ T5913] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 156.363175][ T7181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.380248][ T7181] openvswitch: netlink: Flow actions attr not present in new flow. [ 156.501802][ T5913] usb 2-1: device descriptor read/64, error -71 [ 156.555493][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 156.562471][ T24] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 156.572160][ T24] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 156.579156][ T24] em28xx 3-1:0.0: No AC97 audio processor [ 156.612383][ T5913] usb usb2-port1: attempt power cycle [ 156.921004][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 156.961289][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.971789][ T5913] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 156.993380][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.153889][ T5893] usb 3-1: USB disconnect, device number 27 [ 157.161583][ T5893] em28xx 3-1:0.0: Disconnecting em28xx [ 157.197798][ T5913] usb 2-1: device descriptor read/8, error -71 [ 157.225337][ T5893] em28xx 3-1:0.0: Freeing device [ 157.242227][ T7194] syzkaller1: entered promiscuous mode [ 157.247748][ T7194] syzkaller1: entered allmulticast mode [ 157.461944][ T5913] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 157.502525][ T5913] usb 2-1: device descriptor read/8, error -71 [ 157.613324][ T5913] usb usb2-port1: unable to enumerate USB device [ 157.704004][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 157.704212][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.722298][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.787700][ T7215] syz_tun: entered allmulticast mode [ 157.800222][ T7215] dvmrp6: entered allmulticast mode [ 157.904589][ T7214] syz_tun: left allmulticast mode [ 157.957366][ T7219] syzkaller1: entered promiscuous mode [ 157.964008][ T7219] syzkaller1: entered allmulticast mode [ 158.321810][ T5893] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 158.544642][ T7227] syzkaller1: entered promiscuous mode [ 158.550335][ T7227] syzkaller1: entered allmulticast mode [ 159.292856][ T24] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 159.316298][ T5893] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 159.325720][ T5893] usb 1-1: can't read configurations, error -71 [ 159.464569][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 159.474539][ T24] usb 3-1: config 3 has an invalid interface number: 214 but max is 3 [ 159.483023][ T24] usb 3-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 159.493808][ T24] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 159.503301][ T24] usb 3-1: config 3 has no interface number 0 [ 159.509831][ T24] usb 3-1: config 3 interface 214 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.532716][ T24] usb 3-1: config 3 interface 214 has no altsetting 0 [ 159.551966][ T24] usb 3-1: New USB device found, idVendor=05e0, idProduct=2004, bcdDevice=ae.78 [ 159.561078][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.571602][ T24] usb 3-1: Product: Є [ 159.585198][ T24] usb 3-1: Manufacturer: ㎀쪃䌥撈短齴䯣㹁芀㆒쐣㼚嬈끸巑ፍ뫜⚌ᡵ粠힭楰⢄䁜࿳碸渡金햤쪇㞾歽ز橽蓣묿얚啤븆꼦骇䳊鈛ꩧ꒧䩏䷁扡탞ዀ꩛⧒₭燂鏺鸟ᡷ楂噕绾ꋩ䈪岚㩿汙ᳯ௱勄 [ 159.609944][ T24] usb 3-1: SerialNumber: ᇣ㻼ꆰ⹳ꝧ僤畈ἑ歊譿쟔㤉檙齼⃿㥺崩⟊淸㷼⏹閭珒뿋䛹﨤☚ጅ碙㊷ꗈ䫩밿蒡뇶좓໒Ꝑ焂೺簈诲䓘Ⴗꈖ酧젾⨔ᘾ꬀뱺⭷♬Ⱕ艂雑᰹㼝줚䗣ٗ鄇ᑑ袆浱䈧ẃ묷郾쐂ᘂ뭐㧽싔텔䆞幼⴮䎮乛酑瓢ᘆ鷑漒빡㑴劆ㄙ擫溧뭴꟢얹㽦횓졟용嵄媹ᜫ㊅᪚ [ 159.721994][ T5144] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 159.725934][ T5835] Bluetooth: hci4: command 0x1003 tx timeout [ 159.847368][ T7257] netlink: 'syz.1.451': attribute type 10 has an invalid length. [ 159.855781][ T7257] netlink: 40 bytes leftover after parsing attributes in process `syz.1.451'. [ 159.877117][ T7257] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 159.886114][ T7257] team0: Failed to send options change via netlink (err -105) [ 159.893765][ T7257] team0: Port device geneve0 added [ 159.981879][ T5893] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 160.131812][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 160.138728][ T5893] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 160.149472][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.160203][ T5893] usb 1-1: config 0 descriptor?? [ 160.172470][ T5893] gspca_main: sunplus-2.14.0 probing 041e:400b [ 160.231823][ T793] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 160.361857][ T793] usb 2-1: device descriptor read/64, error -71 [ 160.388438][ T7266] netlink: 96 bytes leftover after parsing attributes in process `syz.3.454'. [ 160.561618][ T7266] overlayfs: failed to resolve './file0': -2 [ 160.605400][ T793] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 160.639849][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.649113][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.761785][ T793] usb 2-1: device descriptor read/64, error -71 [ 160.873065][ T793] usb usb2-port1: attempt power cycle [ 161.213072][ T793] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 161.234154][ T793] usb 2-1: device descriptor read/8, error -71 [ 161.255386][ T7275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.265551][ T7275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.481814][ T793] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 161.502599][ T793] usb 2-1: device descriptor read/8, error -71 [ 161.612046][ T793] usb usb2-port1: unable to enumerate USB device [ 161.837506][ T7278] warning: `syz.3.457' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 161.850410][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.859686][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.940501][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.951747][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.952021][ T5893] gspca_sunplus: reg_w_riv err -110 [ 161.982212][ T5893] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 162.030879][ T24] usb 3-1: USB disconnect, device number 28 [ 162.268800][ T7285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.277756][ T7285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.684950][ T5893] usb 1-1: USB disconnect, device number 37 [ 162.832971][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 162.901814][ T793] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 163.032118][ T793] usb 3-1: device descriptor read/64, error -71 [ 163.142958][ T7309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.467'. [ 163.157311][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.467'. [ 163.185743][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.194860][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.281807][ T793] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 163.377795][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.387013][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.398646][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.407436][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.412360][ T793] usb 3-1: device descriptor read/64, error -71 [ 163.441840][ T24] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 163.523226][ T793] usb usb3-port1: attempt power cycle [ 163.603545][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.613830][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 163.625491][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 163.637180][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 163.646997][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 163.662813][ T24] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 163.671929][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 163.680012][ T24] usb 1-1: Product: syz [ 163.684226][ T24] usb 1-1: Manufacturer: syz [ 163.688843][ T24] usb 1-1: SerialNumber: syz [ 163.696876][ T24] usb 1-1: config 0 descriptor?? [ 163.871831][ T793] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 163.892500][ T793] usb 3-1: device descriptor read/8, error -71 [ 163.905871][ T24] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 163.916195][ T24] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 163.943451][ T24] usb 1-1: USB disconnect, device number 38 [ 164.132330][ T793] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 164.173457][ T793] usb 3-1: device descriptor read/8, error -71 [ 164.203815][ T7333] syzkaller1: entered promiscuous mode [ 164.209430][ T7333] syzkaller1: entered allmulticast mode [ 164.282241][ T793] usb usb3-port1: unable to enumerate USB device [ 164.313306][ T7335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.322267][ T7335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.401854][ T979] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 164.552217][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 164.559462][ T979] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 164.567837][ T979] usb 2-1: config 0 has no interface number 0 [ 164.576278][ T979] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 164.585525][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.593669][ T979] usb 2-1: Product: syz [ 164.597883][ T979] usb 2-1: Manufacturer: syz [ 164.602637][ T979] usb 2-1: SerialNumber: syz [ 164.609631][ T979] usb 2-1: config 0 descriptor?? [ 164.619101][ T979] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 164.691859][ T5872] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 164.820419][ T979] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 164.834498][ T979] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 164.854884][ T5872] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 164.872729][ T5872] usb 1-1: config 0 has no interface number 0 [ 164.889892][ T5872] usb 1-1: config 0 interface 217 altsetting 16 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 164.913995][ T5872] usb 1-1: config 0 interface 217 has no altsetting 0 [ 164.936084][ T5872] usb 1-1: New USB device found, idVendor=2040, idProduct=651f, bcdDevice=26.93 [ 164.948437][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.956926][ T5872] usb 1-1: Product: syz [ 164.963147][ T5872] usb 1-1: Manufacturer: syz [ 164.967785][ T5872] usb 1-1: SerialNumber: syz [ 164.975997][ T5872] usb 1-1: config 0 descriptor?? [ 164.982019][ T7338] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 165.020353][ C0] quatech-serial ttyUSB1: qt2_process_read_urb - unsupported command 6 [ 165.199057][ T5872] em28xx 1-1:0.217: New device syz syz @ 12 Mbps (2040:651f, interface 217, class 217) [ 165.209038][ T5872] em28xx 1-1:0.217: Device initialization failed. [ 165.215728][ T5872] em28xx 1-1:0.217: Device must be connected to a high-speed USB 2.0 port. [ 165.226245][ T7331] netlink: 'syz.1.474': attribute type 3 has an invalid length. [ 165.232944][ T5872] usb 1-1: USB disconnect, device number 39 [ 165.241186][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 165.249831][ T24] usb 2-1: USB disconnect, device number 36 [ 165.271196][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 165.291231][ T24] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 165.306785][ T24] quatech2 2-1:0.51: device disconnected [ 165.809008][ T7343] tipc: Enabling of bearer rejected, failed to enable media [ 165.829552][ T7346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.848006][ T7346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.950492][ T7354] sctp: [Deprecated]: syz.3.482 (pid 7354) Use of int in maxseg socket option. [ 165.950492][ T7354] Use struct sctp_assoc_value instead [ 166.041855][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 166.069619][ T7359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.111847][ T979] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 166.134150][ T7359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.196661][ T7359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.209951][ T7359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.243023][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 166.250074][ T24] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 166.258543][ T24] usb 1-1: config 0 has no interface number 0 [ 166.265870][ T24] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.277479][ T24] usb 1-1: config 0 interface 89 has no altsetting 0 [ 166.288606][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 166.301403][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.302730][ T979] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 166.310261][ T24] usb 1-1: Product: syz [ 166.324753][ T24] usb 1-1: Manufacturer: syz [ 166.329500][ T24] usb 1-1: SerialNumber: syz [ 166.338690][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.339474][ T24] usb 1-1: config 0 descriptor?? [ 166.357485][ T979] usb 2-1: Product: syz [ 166.360438][ T24] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 166.367619][ T979] usb 2-1: Manufacturer: syz [ 166.373528][ T24] em28xx 1-1:0.89: Video interface 89 found: [ 166.376756][ T979] usb 2-1: SerialNumber: syz [ 166.386729][ T793] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 166.541769][ T793] usb 3-1: Using ep0 maxpacket: 32 [ 166.548850][ T793] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 166.557410][ T793] usb 3-1: config 0 has no interface number 0 [ 166.572072][ T793] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 166.581256][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.589393][ T793] usb 3-1: Product: syz [ 166.594930][ T793] usb 3-1: Manufacturer: syz [ 166.600693][ T793] usb 3-1: SerialNumber: syz [ 166.608937][ T793] usb 3-1: config 0 descriptor?? [ 166.622282][ T24] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 166.623137][ T793] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 166.635997][ T793] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 166.688368][ T24] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 166.696866][ T24] em28xx 1-1:0.89: board has no eeprom [ 166.762046][ T24] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 166.769388][ T24] em28xx 1-1:0.89: analog set to bulk mode. [ 166.776529][ T5913] em28xx 1-1:0.89: Registering V4L2 extension [ 166.788410][ T24] usb 1-1: USB disconnect, device number 40 [ 166.797182][ T24] em28xx 1-1:0.89: Disconnecting em28xx [ 166.823315][ T793] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 166.845820][ T5913] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 166.846341][ T793] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 166.853257][ T5913] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 166.872946][ T5913] em28xx 1-1:0.89: No AC97 audio processor [ 166.886783][ T5913] usb 1-1: Decoder not found [ 166.891421][ T5913] em28xx 1-1:0.89: failed to create media graph [ 166.897782][ T5913] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 166.909677][ T5913] em28xx 1-1:0.89: Registering snapshot button... [ 166.919317][ T5913] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input10 [ 166.936612][ T5913] em28xx 1-1:0.89: Remote control support is not available for this card. [ 166.946515][ T24] em28xx 1-1:0.89: Closing input extension [ 166.955060][ T24] em28xx 1-1:0.89: Deregistering snapshot button [ 166.989357][ T7370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.990803][ T24] em28xx 1-1:0.89: Freeing device [ 166.999264][ T7370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.016969][ T7348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.028042][ T793] usb 3-1: USB disconnect, device number 33 [ 167.052740][ T7348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.611092][ T7387] tipc: Enabling of bearer rejected, failed to enable media [ 167.648806][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.719992][ T7391] netlink: 'syz.3.494': attribute type 83 has an invalid length. [ 167.738987][ T7394] tmpfs: Unknown parameter '584/S -sǠkq|G_+ [ 167.738987][ T7394] [~䊴/p*'8u%ZC Re%_'G4<ֶGS`x}U|-WEO"54y-' [ 167.759712][ T30] audit: type=1800 audit(1762873440.792:4): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.495" name="bus" dev="tmpfs" ino=603 res=0 errno=0 [ 167.785635][ T7395] Invalid ELF header type: 3 != 1 [ 168.046658][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'. [ 168.136865][ T7396] netlink: 84 bytes leftover after parsing attributes in process `syz.2.495'. [ 168.145878][ T7396] openvswitch: netlink: Flow key attr not present in new flow. [ 168.494814][ T7348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.504960][ T7348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.515110][ T979] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 168.527751][ T979] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 168.538272][ T979] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 168.552811][ T979] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 168.575039][ T979] usb 2-1: USB disconnect, device number 37 [ 169.090967][ T7416] tipc: Enabling of bearer rejected, failed to enable media [ 169.181906][ T979] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 169.250206][ T7423] netlink: 'syz.3.505': attribute type 39 has an invalid length. [ 169.344174][ T979] usb 3-1: config 0 has an invalid interface number: 182 but max is 0 [ 169.352890][ T793] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 169.360990][ T979] usb 3-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 169.374194][ T979] usb 3-1: config 0 has no interface number 0 [ 169.380402][ T979] usb 3-1: too many endpoints for config 0 interface 182 altsetting 96: 185, using maximum allowed: 30 [ 169.391875][ T979] usb 3-1: config 0 interface 182 altsetting 96 has 0 endpoint descriptors, different from the interface descriptor's value: 185 [ 169.405607][ T979] usb 3-1: config 0 interface 182 has no altsetting 0 [ 169.415412][ T979] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 169.425366][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.436254][ T979] usb 3-1: Product: syz [ 169.443562][ T979] usb 3-1: Manufacturer: syz [ 169.448323][ T979] usb 3-1: SerialNumber: syz [ 169.456506][ T979] usb 3-1: config 0 descriptor?? [ 169.521893][ T793] usb 2-1: Using ep0 maxpacket: 8 [ 169.529654][ T793] usb 2-1: unable to get BOS descriptor or descriptor too short [ 169.550535][ T793] usb 2-1: config 150 has an invalid interface number: 57 but max is 0 [ 169.559105][ T793] usb 2-1: config 150 has no interface number 0 [ 169.566654][ T793] usb 2-1: config 150 interface 57 altsetting 145 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 169.580179][ T793] usb 2-1: config 150 interface 57 has no altsetting 0 [ 169.590241][ T793] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=9d.d8 [ 169.599842][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.610653][ T793] usb 2-1: Product: syz [ 169.615344][ T793] usb 2-1: Manufacturer: syz [ 169.619998][ T793] usb 2-1: SerialNumber: syz [ 169.679339][ T979] imon 3-1:0.182: unable to register, err -19 [ 169.688575][ T979] usb 3-1: USB disconnect, device number 34 [ 169.838002][ T7418] loop4: detected capacity change from 0 to 2560 [ 169.857732][ T5919] Buffer I/O error on dev loop4, logical block 0, async page read [ 169.878356][ T5919] Buffer I/O error on dev loop4, logical block 0, async page read [ 169.898871][ T5919] Buffer I/O error on dev loop4, logical block 0, async page read [ 169.908392][ T5919] Buffer I/O error on dev loop4, logical block 0, async page read [ 169.919682][ T5919] Buffer I/O error on dev loop4, logical block 0, async page read [ 169.949936][ T793] snd-usb-audio 2-1:150.57: probe with driver snd-usb-audio failed with error -71 [ 169.969161][ T7428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.980436][ T7428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.988583][ T793] usb 2-1: USB disconnect, device number 38 [ 170.249115][ T7430] ksmbd: Unknown IPC event: 3, ignore. [ 170.568147][ T7442] tipc: Enabling of bearer rejected, failed to enable media [ 170.730424][ T7452] syzkaller1: entered promiscuous mode [ 170.737341][ T7452] syzkaller1: entered allmulticast mode [ 170.848286][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 170.857315][ T7456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.516'. [ 170.867999][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 171.102928][ T793] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 171.152426][ T979] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 171.265505][ T793] usb 3-1: too many endpoints for config 32 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 171.291747][ T793] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.302979][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 171.309088][ T793] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9472, setting to 1024 [ 171.324833][ T979] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 171.333264][ T979] usb 1-1: config 0 has no interface number 0 [ 171.339516][ T793] usb 3-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 171.353349][ T979] usb 1-1: config 0 interface 12 has no altsetting 0 [ 171.364577][ T979] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 171.374008][ T793] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 171.383491][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.388000][ T7481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.525'. [ 171.391589][ T793] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 171.409081][ T979] usb 1-1: Product: syz [ 171.424274][ T979] usb 1-1: Manufacturer: syz [ 171.428931][ T979] usb 1-1: SerialNumber: syz [ 171.434948][ T793] usb 3-1: Manufacturer: syz [ 171.453708][ T979] usb 1-1: config 0 descriptor?? [ 171.459244][ T7458] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.577465][ T7485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.588013][ T7485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.879084][ T793] appleir 0003:05AC:8243.0007: item fetching failed at offset 0/1 [ 171.887765][ T793] appleir 0003:05AC:8243.0007: parse failed [ 171.894133][ T793] appleir 0003:05AC:8243.0007: probe with driver appleir failed with error -22 [ 172.096526][ T7489] input: syz1 as /devices/virtual/input/input11 [ 172.098115][ T7487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.143018][ T7487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.534935][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.557824][ T7507] openvswitch: netlink: Flow key attribute not present in set flow. [ 172.569462][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.156404][ T7525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.167962][ T7525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.411959][ T7529] tmpfs: Bad value for 'mpol' [ 173.651791][ T793] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 173.803998][ T793] usb 2-1: Using ep0 maxpacket: 16 [ 173.818434][ T793] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 173.827623][ T793] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.838339][ T793] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.851304][ T793] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.861309][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.866922][ T24] usb 3-1: USB disconnect, device number 35 [ 173.873077][ T793] usb 2-1: Product: syz [ 173.889746][ T793] usb 2-1: Manufacturer: syz [ 173.901897][ T793] usb 2-1: SerialNumber: syz [ 173.997934][ T7539] capability: warning: `syz.3.541' uses deprecated v2 capabilities in a way that may be insecure [ 174.330809][ T793] usb 2-1: 0:2 : does not exist [ 174.350330][ T793] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 174.402234][ T793] usb 2-1: USB disconnect, device number 39 [ 174.446874][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.533889][ T7549] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 174.540671][ T7549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.553455][ T7549] vhci_hcd vhci_hcd.0: Device attached [ 174.563123][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.570249][ T7549] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 174.574682][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.578026][ T7549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.595097][ T7549] vhci_hcd vhci_hcd.0: Device attached [ 174.602573][ T7555] vhci_hcd: connection closed [ 174.604740][ T6256] vhci_hcd vhci_hcd.2: stop threads [ 174.604786][ T7550] vhci_hcd: connection closed [ 174.610062][ T6256] vhci_hcd vhci_hcd.2: release socket [ 174.625404][ T6256] vhci_hcd vhci_hcd.2: disconnect device [ 174.632417][ T6256] vhci_hcd vhci_hcd.2: stop threads [ 174.637789][ T6256] vhci_hcd vhci_hcd.2: release socket [ 174.643565][ T6256] vhci_hcd vhci_hcd.2: disconnect device [ 174.906911][ T7460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.917046][ T7460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.931088][ T979] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 174.939085][ T979] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 174.947502][ T979] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 174.955348][ T979] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 174.967179][ T979] usb 1-1: USB disconnect, device number 41 [ 175.141991][ T793] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 175.316855][ T793] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 175.331916][ T793] usb 2-1: config 0 has no interface number 0 [ 175.351317][ T793] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 175.389652][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.406692][ T793] usb 2-1: Product: syz [ 175.421337][ T793] usb 2-1: Manufacturer: syz [ 175.431445][ T793] usb 2-1: SerialNumber: syz [ 175.479568][ T793] usb 2-1: config 0 descriptor?? [ 175.494965][ T7575] netlink: 'syz.3.551': attribute type 2 has an invalid length. [ 175.518112][ T7575] netlink: 'syz.3.551': attribute type 1 has an invalid length. [ 175.766297][ T7591] netlink: 48 bytes leftover after parsing attributes in process `syz.2.554'. [ 175.869950][ T7595] tun0: tun_chr_ioctl cmd 21731 [ 175.875719][ T7595] tun0: tun_chr_ioctl cmd 1074812117 [ 175.899956][ T793] usb 2-1: Firmware version (0.0) predates our first public release. [ 175.908325][ T793] usb 2-1: Please update to version 0.2 or newer [ 176.131802][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 176.181009][ T7606] netlink: 156 bytes leftover after parsing attributes in process `syz.3.560'. [ 176.250956][ T7609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.260094][ T7609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.305644][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 176.317934][ T24] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 176.326382][ T24] usb 3-1: config 0 has no interface number 0 [ 176.333316][ T24] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 176.343728][ T24] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.357058][ T24] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 176.366574][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.374829][ T24] usb 3-1: Product: syz [ 176.379014][ T24] usb 3-1: Manufacturer: syz [ 176.384899][ T24] usb 3-1: SerialNumber: syz [ 176.394470][ T24] usb 3-1: config 0 descriptor?? [ 176.400263][ T7595] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 176.409521][ T24] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 176.424322][ T24] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB1 [ 176.521779][ T5872] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 176.665226][ T793] usb 2-1: USB disconnect, device number 40 [ 176.692159][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 176.699194][ T5872] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 176.707675][ T5872] usb 1-1: config 0 has no interface number 0 [ 176.713878][ T5872] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 176.724578][ T5872] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 176.734771][ T5872] usb 1-1: config 0 interface 41 has no altsetting 0 [ 176.746298][ T5872] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 176.755478][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.768241][ T5872] usb 1-1: Product: syz [ 176.772820][ T5872] usb 1-1: Manufacturer: syz [ 176.777464][ T5872] usb 1-1: SerialNumber: syz [ 176.784967][ T5872] usb 1-1: config 0 descriptor?? [ 176.790894][ T7611] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 176.798550][ T7611] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 176.812262][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.821053][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.831362][ T979] usb 3-1: USB disconnect, device number 36 [ 176.848390][ T979] cyberjack ttyUSB1: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB1 [ 176.861243][ T979] cyberjack 3-1:0.69: device disconnected [ 176.918109][ T7614] /dev/sg0: Can't lookup blockdev [ 177.011611][ T7611] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 177.019206][ T7611] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 177.435358][ T5872] Error reading MAC address [ 177.441602][ T7611] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 177.465980][ T7611] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 177.552860][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'. [ 177.886689][ T5872] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 177.944894][ T7645] netlink: 180 bytes leftover after parsing attributes in process `syz.3.572'. [ 177.971458][ T7645] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 177.978019][ T7645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.980074][ T7649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 177.986280][ T7645] vhci_hcd vhci_hcd.0: Device attached [ 178.000807][ T7649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 178.001265][ T7647] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 178.019743][ T1137] vhci_hcd vhci_hcd.3: stop threads [ 178.033416][ T7649] loop6: detected capacity change from 0 to 7 [ 178.038826][ T1137] vhci_hcd vhci_hcd.3: release socket [ 178.046559][ T1137] vhci_hcd vhci_hcd.3: disconnect device [ 178.054644][ T5919] Dev loop6: unable to read RDB block 7 [ 178.069918][ T5919] loop6: AHDI p1 [ 178.075323][ T5919] loop6: partition table partially beyond EOD, truncated [ 178.095619][ T7649] Dev loop6: unable to read RDB block 7 [ 178.116436][ T7649] loop6: AHDI p1 [ 178.120214][ T7649] loop6: partition table partially beyond EOD, truncated [ 178.155167][ T979] ------------[ cut here ]------------ [ 178.160844][ T979] WARNING: ./include/linux/ns_common.h:255 at destroy_super_work+0x15c/0x1a0, CPU#0: kworker/0:3/979 [ 178.172508][ T979] Modules linked in: [ 178.176605][ T979] CPU: 0 UID: 0 PID: 979 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 178.186634][ T979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.196805][ T979] Workqueue: events destroy_super_work [ 178.202341][ T979] RIP: 0010:destroy_super_work+0x15c/0x1a0 [ 178.208203][ T979] Code: 7b 63 ff 48 81 c3 a8 fc ff ff 48 89 df e8 bc 7b 63 ff 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6a 7c e1 ff e8 f5 e6 86 ff 90 <0f> 0b 90 e9 6d ff ff ff e8 e7 e6 86 ff 4c 89 e7 be 03 00 00 00 e8 [ 178.228026][ T979] RSP: 0018:ffffc90003857a48 EFLAGS: 00010293 [ 178.231421][ T7657] cgroup: Unknown subsys name 'cpuset' [ 178.234176][ T979] RAX: ffffffff823a788b RBX: ffff88806b944898 RCX: ffff888026059e80 [ 178.234214][ T979] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 178.234232][ T979] RBP: 0000000000000004 R08: ffff88807f5e45bb R09: 1ffff1100febc8b7 [ 178.263848][ T979] R10: dffffc0000000000 R11: ffffed100febc8b8 R12: ffff88807f5e45b8 [ 178.271897][ T979] R13: dffffc0000000000 R14: ffff88806b944000 R15: ffff88807f5e4428 [ 178.280590][ T979] FS: 0000000000000000(0000) GS:ffff888125a82000(0000) knlGS:0000000000000000 [ 178.290758][ T979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.297711][ T979] CR2: 0000200000001000 CR3: 000000006462e000 CR4: 00000000003526f0 [ 178.305828][ T979] Call Trace: [ 178.309137][ T979] [ 178.312166][ T979] ? process_one_work+0x868/0x15e0 [ 178.317314][ T979] process_one_work+0x93a/0x15e0 [ 178.322364][ T979] ? __lock_acquire+0xab9/0xd20 [ 178.327272][ T979] ? __pfx_process_one_work+0x10/0x10 [ 178.332750][ T979] ? assign_work+0x3a1/0x410 [ 178.337376][ T979] worker_thread+0x9b0/0xee0 [ 178.342130][ T979] kthread+0x711/0x8a0 [ 178.346249][ T979] ? __pfx_worker_thread+0x10/0x10 [ 178.351391][ T979] ? __pfx_kthread+0x10/0x10 [ 178.356104][ T979] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.361343][ T979] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.366677][ T979] ? __pfx_kthread+0x10/0x10 [ 178.371307][ T979] ret_from_fork+0x599/0xb30 [ 178.376627][ T979] ? __pfx_ret_from_fork+0x10/0x10 [ 178.382419][ T979] ? __switch_to_asm+0x39/0x70 [ 178.387228][ T979] ? __switch_to_asm+0x33/0x70 [ 178.392133][ T979] ? __pfx_kthread+0x10/0x10 [ 178.396779][ T979] ret_from_fork_asm+0x1a/0x30 [ 178.401597][ T979] [ 178.404756][ T979] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 178.412062][ T979] CPU: 0 UID: 0 PID: 979 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 178.421378][ T979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.431481][ T979] Workqueue: events destroy_super_work [ 178.437018][ T979] Call Trace: [ 178.440328][ T979] [ 178.443286][ T979] dump_stack_lvl+0x99/0x250 [ 178.447945][ T979] ? __asan_memcpy+0x40/0x70 [ 178.452576][ T979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.457830][ T979] ? __pfx__printk+0x10/0x10 [ 178.462470][ T979] vpanic+0x237/0x6d0 [ 178.466481][ T979] ? __pfx_vpanic+0x10/0x10 [ 178.471009][ T979] ? is_bpf_text_address+0x292/0x2b0 [ 178.476326][ T979] ? is_bpf_text_address+0x26/0x2b0 [ 178.481577][ T979] panic+0xb9/0xc0 [ 178.485326][ T979] ? __pfx_panic+0x10/0x10 [ 178.489779][ T979] ? ret_from_fork_asm+0x1a/0x30 [ 178.494756][ T979] __warn+0x318/0x4d0 [ 178.498757][ T979] ? destroy_super_work+0x15c/0x1a0 [ 178.503998][ T979] ? destroy_super_work+0x15c/0x1a0 [ 178.509215][ T979] report_bug+0x2be/0x4f0 [ 178.513569][ T979] ? destroy_super_work+0x15c/0x1a0 [ 178.518800][ T979] ? destroy_super_work+0x15c/0x1a0 [ 178.524019][ T979] ? destroy_super_work+0x15e/0x1a0 [ 178.529228][ T979] handle_bug+0x84/0x160 [ 178.533496][ T979] exc_invalid_op+0x1a/0x50 [ 178.538020][ T979] asm_exc_invalid_op+0x1a/0x20 [ 178.542880][ T979] RIP: 0010:destroy_super_work+0x15c/0x1a0 [ 178.548696][ T979] Code: 7b 63 ff 48 81 c3 a8 fc ff ff 48 89 df e8 bc 7b 63 ff 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6a 7c e1 ff e8 f5 e6 86 ff 90 <0f> 0b 90 e9 6d ff ff ff e8 e7 e6 86 ff 4c 89 e7 be 03 00 00 00 e8 [ 178.568336][ T979] RSP: 0018:ffffc90003857a48 EFLAGS: 00010293 [ 178.574429][ T979] RAX: ffffffff823a788b RBX: ffff88806b944898 RCX: ffff888026059e80 [ 178.582433][ T979] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 178.590415][ T979] RBP: 0000000000000004 R08: ffff88807f5e45bb R09: 1ffff1100febc8b7 [ 178.598406][ T979] R10: dffffc0000000000 R11: ffffed100febc8b8 R12: ffff88807f5e45b8 [ 178.606386][ T979] R13: dffffc0000000000 R14: ffff88806b944000 R15: ffff88807f5e4428 [ 178.614386][ T979] ? destroy_super_work+0x15b/0x1a0 [ 178.619601][ T979] ? destroy_super_work+0x15b/0x1a0 [ 178.624811][ T979] ? process_one_work+0x868/0x15e0 [ 178.629934][ T979] process_one_work+0x93a/0x15e0 [ 178.634878][ T979] ? __lock_acquire+0xab9/0xd20 [ 178.639777][ T979] ? __pfx_process_one_work+0x10/0x10 [ 178.645164][ T979] ? assign_work+0x3a1/0x410 [ 178.649773][ T979] worker_thread+0x9b0/0xee0 [ 178.654401][ T979] kthread+0x711/0x8a0 [ 178.658486][ T979] ? __pfx_worker_thread+0x10/0x10 [ 178.663605][ T979] ? __pfx_kthread+0x10/0x10 [ 178.668208][ T979] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.673420][ T979] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.678620][ T979] ? __pfx_kthread+0x10/0x10 [ 178.683224][ T979] ret_from_fork+0x599/0xb30 [ 178.687823][ T979] ? __pfx_ret_from_fork+0x10/0x10 [ 178.692957][ T979] ? __switch_to_asm+0x39/0x70 [ 178.697736][ T979] ? __switch_to_asm+0x33/0x70 [ 178.702508][ T979] ? __pfx_kthread+0x10/0x10 [ 178.707130][ T979] ret_from_fork_asm+0x1a/0x30 [ 178.711990][ T979] [ 178.715429][ T979] Kernel Offset: disabled [ 178.719756][ T979] Rebooting in 86400 seconds..