last executing test programs: 2m36.748911199s ago: executing program 0 (id=523): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x23, 0x50, {0x50, 0x3, "5df7fe7164ec4d36b8332170568b40d2d9d5d5785c400fdeedc16d94eaf3f5d38b1fff1ca7655ae1466a98d994d6399c46c04636efab4748e79881f8e99cebcaeb5e72db7da642a9786aa0f32e3e"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}}, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x40, 0x31, 0xc, "9cac0bf5b7af1720443a9991"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000240)={0xc0, 0xa1, 0x4}, &(0x7f0000000280)={0x40, 0xa0, 0x4}, &(0x7f0000000300)={0xc0, 0xa2, 0x2f, "751126c11a237bc697ca282be1b5124acfae4e54dd26df05671ee56f4a5c9f8271e586ba2716fb8425d022026c1955"}}) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x58, 0x83, 0xb2}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x68d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000045673408d016a91014950102030109027b0604000420030904ea040dff"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x68d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000045673408d016a91014950102030109027b0604000420030904ea040dff"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)={0x0, 0x17, 0xa6, "9873594f1ce9cad2f842f9fc51b098dc2291ca0985e6d31e729ec0f9d0be0a02426f75483136d1d7ca7c9e6d062e9f00e45c00867c266e58f9b100e4f949fc76038b53b310fe083e14432ea1325b72c8c96492c621be5c9bb04f3469ad996c4efe4d595f5f6ea752eb71aa23aea2297761dd2869bf62b364a2ac5d43d498964ffdbeb7a2c2284b65133c47a1b3c8567bed3ec035f2871297d8fe778e873c3c9f5850a94b87f2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)={0x0, 0x17, 0xa6, "9873594f1ce9cad2f842f9fc51b098dc2291ca0985e6d31e729ec0f9d0be0a02426f75483136d1d7ca7c9e6d062e9f00e45c00867c266e58f9b100e4f949fc76038b53b310fe083e14432ea1325b72c8c96492c621be5c9bb04f3469ad996c4efe4d595f5f6ea752eb71aa23aea2297761dd2869bf62b364a2ac5d43d498964ffdbeb7a2c2284b65133c47a1b3c8567bed3ec035f2871297d8fe778e873c3c9f5850a94b87f2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000040)=0xffffffffffffff67) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x118, 0x18, 0x1, 0xffffffff, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0xff}, 0x1, 0x71c, 0x4e23, 0x9, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0x9, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x1}, 0x80, 0x3500, 0x2, 0x7, 0x0, 0x1}, [@address_filter={0x28, 0x1a, {@in=@empty, @in=@broadcast, 0xa, 0xe, 0x8}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f0000000040)=ANY=[]) 2m35.545926113s ago: executing program 3 (id=534): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)={0xbc, r2, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x90, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r3}) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x19c) r6 = fanotify_init(0xf00, 0x40000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fanotify_mark(r6, 0x105, 0x4000997d, r5, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) rename(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r3], &(0x7f00000003c0)=[0x7], &(0x7f0000000300)=[r4], &(0x7f0000000180)=[0x31], 0x0, 0xff}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r8, &(0x7f0000000240)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c0000001600010a00000000000000000a0002"], 0x1c}}, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="3789d91ea34966e29e35a8793f23db659590989d11b07d4a08dafcdfeb887aa8aa42ba9cfe6e23f629380fc9484afc8e330cd475f6cca9c966d6d91af6599a1e1ca4d72d7a0b204978f061066f48a3767ce512bd04faaf69e8d6780a42821ca14777b105142fd9ff644d85462efedcee1fc89ba37ef8f0f10d364af9b94dfba07b0403c3dd02b4ecf95a9f0d24bb7e199467e204574ab8534278e7d6f58b57d893241f6faed6a5e72e0269d7faa3a7df8048be525a1793c062a08ecb471eb42992", 0xc1}], 0x1}], 0x1, 0x40800) recvmsg(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000200)=""/157, 0x9d}], 0x2}, 0x2000) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 2m35.173482131s ago: executing program 0 (id=538): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110001000000a30000000000100000002c00000000000000"], 0x20}], 0x1}, 0x0) futex(&(0x7f000000cffc), 0x5, 0x100000, 0x0, &(0x7f0000000000), 0x1000000) getsockopt(r0, 0x2a, 0x6, 0xfffffffffffffffc, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)='ns/time_for_children\x00', 0x0) 2m34.943240338s ago: executing program 0 (id=539): futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x77359400}, 0x0, 0x80000002) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e2200000600054050"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r3, 0x16) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a051702fc000000000109022400010000000009040000010300000009210100080122070009058103"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x15, 0x7, 0x0, 0x180, 0x4, 0x10, 0x2000000000, 0x0, 0x7ff, 0x5, 0x0, 0x9, 0x3, 0x6, 0x0, 0xbdb], 0x1, 0x1d6690}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xda000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x8004) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x418001, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'vlan0\x00', 0x20}) 2m34.697853165s ago: executing program 3 (id=540): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f0000000080), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001088ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20001090"], 0x4a) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x39b, @remote}, 0x1c) 2m34.44302926s ago: executing program 3 (id=542): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000180)=0xec91) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x11) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f0010020000e8ff010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x0, 0x11e, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10c, 0x3, 0x1, 0xff, 0xc0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x301, 0x5, 0x4, 0x73}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x302, 0x1, 0x6, 0x9}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x5, 0x8, "839c395ec1"}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x3, 0x2, [0x5, 0x2], 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x3, 0x1, 0x94}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x80, 0x8, 0x3, "7c91aa"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x4, 0x1001}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x65ae, 0x3ff, 0x9, "fbf32a1b"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x10, 0x4, 0xc, 0xf1, "e955", "833f"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1ff, 0xd, 0x6, "39add3d9a9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x9, 0xa, {0x7, 0x25, 0x1, 0x2, 0x2, 0xe284}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0x2, 0xeb, "db", "5590"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0x0, 0x2, "c430", "0fc9"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x6, 0x1}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0xf5c, 0x1, "1048d33e05ae42c4d1"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x4, 0x4, 0x81, "f82755b1a5efdfe7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xff, 0x2, 0x3, {0x7, 0x25, 0x1, 0x81, 0xf5, 0x3}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x17, 0x9, 0x8, 0x8, 0x6a}, 0xfc, &(0x7f0000000300)={0x5, 0xf, 0xfc, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "06fb4963962b4039ec1260433d448ef4"}, @generic={0xaf, 0x10, 0x3, "72b2cff10a1cccac17918e8d9018f9a219b6188d96b4cc7ca7c24e2348549522457810221388b0450bf69d675a2f120a1f2a31c6edabe5d1797677127afc167130d2440d26ca19c93ef301e5eb79c1000b4a89fdb3bb475e2456a8a1f0b5dc536e2e8071347bbf5c398d892ae3854e8ff016c3d3348a993733685469a48c7eb087ef0d1795e0c59619fa25870acb16147ad38e571e15e7ff1aea64107f15777a7016f53e860109ddc6a608a6"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x5, 0x7ff}, @ssp_cap={0x20, 0x10, 0xa, 0xf, 0x5, 0x100, 0xf, 0x1, [0x3f00, 0x0, 0x3f00, 0xff014f, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0xd2, 0x6}, @ptm_cap={0x3}]}, 0x6, [{0x3a, &(0x7f00000000c0)=@string={0x3a, 0x3, "4e653201cf669dcbea0bc44b6211198d0458bbfaedad72186c13f4c98c6610d184202b61261575b62e6575bd196d41e4b919d605e2ff2759"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc0c}}, {0x8d, &(0x7f0000000400)=@string={0x8d, 0x3, "fd84be591b1146a605700bd322ddfb0b503a2a16439153eab8cf5eb64a4b8c4d574c3b2dfcf78a9daec6c79b39a8c383f5f9bea6278c53d775d6913051e2544f2f337949019439e9041488a0effa3d9d55f20634599571bded20026b2c8e8b3d4835288f062b6401627010312824d8be00eb1058a4090070c1df8d41c0df038f75557e20344e5358428049"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x412}}]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000180)=0xec91) (async) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x11) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f0010020000e8ff010902120001000000000904"], 0x0) (async) syz_usb_connect$uac1(0x0, 0x11e, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10c, 0x3, 0x1, 0xff, 0xc0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x301, 0x5, 0x4, 0x73}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x302, 0x1, 0x6, 0x9}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x5, 0x8, "839c395ec1"}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x3, 0x2, [0x5, 0x2], 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x3, 0x1, 0x94}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x80, 0x8, 0x3, "7c91aa"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x4, 0x1001}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x65ae, 0x3ff, 0x9, "fbf32a1b"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x10, 0x4, 0xc, 0xf1, "e955", "833f"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1ff, 0xd, 0x6, "39add3d9a9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x9, 0xa, {0x7, 0x25, 0x1, 0x2, 0x2, 0xe284}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0x2, 0xeb, "db", "5590"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0x0, 0x2, "c430", "0fc9"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x6, 0x1}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0xf5c, 0x1, "1048d33e05ae42c4d1"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x4, 0x4, 0x81, "f82755b1a5efdfe7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xff, 0x2, 0x3, {0x7, 0x25, 0x1, 0x81, 0xf5, 0x3}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x17, 0x9, 0x8, 0x8, 0x6a}, 0xfc, &(0x7f0000000300)={0x5, 0xf, 0xfc, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "06fb4963962b4039ec1260433d448ef4"}, @generic={0xaf, 0x10, 0x3, "72b2cff10a1cccac17918e8d9018f9a219b6188d96b4cc7ca7c24e2348549522457810221388b0450bf69d675a2f120a1f2a31c6edabe5d1797677127afc167130d2440d26ca19c93ef301e5eb79c1000b4a89fdb3bb475e2456a8a1f0b5dc536e2e8071347bbf5c398d892ae3854e8ff016c3d3348a993733685469a48c7eb087ef0d1795e0c59619fa25870acb16147ad38e571e15e7ff1aea64107f15777a7016f53e860109ddc6a608a6"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x5, 0x7ff}, @ssp_cap={0x20, 0x10, 0xa, 0xf, 0x5, 0x100, 0xf, 0x1, [0x3f00, 0x0, 0x3f00, 0xff014f, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0xd2, 0x6}, @ptm_cap={0x3}]}, 0x6, [{0x3a, &(0x7f00000000c0)=@string={0x3a, 0x3, "4e653201cf669dcbea0bc44b6211198d0458bbfaedad72186c13f4c98c6610d184202b61261575b62e6575bd196d41e4b919d605e2ff2759"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc0c}}, {0x8d, &(0x7f0000000400)=@string={0x8d, 0x3, "fd84be591b1146a605700bd322ddfb0b503a2a16439153eab8cf5eb64a4b8c4d574c3b2dfcf78a9daec6c79b39a8c383f5f9bea6278c53d775d6913051e2544f2f337949019439e9041488a0effa3d9d55f20634599571bded20026b2c8e8b3d4835288f062b6401627010312824d8be00eb1058a4090070c1df8d41c0df038f75557e20344e5358428049"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x412}}]}) (async) 2m33.713402616s ago: executing program 3 (id=544): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@mcast1, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x400, 0x1, 0x4400046, r1}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2000000, 0x0, 0x0, 0x100, 0x5, 0x500096, r1}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000004100)=[{{&(0x7f00000002c0), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c00)=""/43, 0x2b}], 0x1}}], 0x2, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf2509000000280003801400020062726964676530000000000000000208"], 0x3c}, 0x1, 0x0, 0x0, 0x4008}, 0x34008001) 2m33.461097344s ago: executing program 0 (id=545): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 2m33.34304615s ago: executing program 3 (id=546): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x34, r1, 0x1, 0x703d25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040840}, 0x8842) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x3, @sdr={0x30314742, 0x7be}}) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xe0, 0x20, 0x82, 0x7f}, &(0x7f00000000c0)=0x18) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000180)={0x5}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010028bd70f8ffffff250200000008000100", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x90042240}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m33.08802073s ago: executing program 0 (id=547): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000370000/0x1000)=nil, 0x1000, 0x100000d, 0x12, r2, 0x1c5ea000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r3 = socket(0x2b, 0x801, 0x1) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3}, 0x8) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 2m18.273075885s ago: executing program 32 (id=546): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x34, r1, 0x1, 0x703d25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040840}, 0x8842) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x3, @sdr={0x30314742, 0x7be}}) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xe0, 0x20, 0x82, 0x7f}, &(0x7f00000000c0)=0x18) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000180)={0x5}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010028bd70f8ffffff250200000008000100", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x90042240}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m17.986660019s ago: executing program 33 (id=547): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000370000/0x1000)=nil, 0x1000, 0x100000d, 0x12, r2, 0x1c5ea000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r3 = socket(0x2b, 0x801, 0x1) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3}, 0x8) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 1m10.910585536s ago: executing program 2 (id=890): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'batadv_slave_0\x00', @random="0100061f8145"}) 1m10.867859363s ago: executing program 2 (id=891): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0xde, 0xfa, 0x1a, 0x20, 0x5ac, 0x238, 0xdd7c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x4, 0xf0, 0x0, [{{0x9, 0x4, 0xfc, 0x9, 0x0, 0x3, 0x9d, 0x2}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a5c000000060a0104000000000000000002000000300004802c0001800c00010062697477697365001c0002800800034040000000080001400000000008000240000000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "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"}, 0x418, 0x6}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 1m9.607128655s ago: executing program 2 (id=898): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000005c0), 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x4a) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001) (async, rerun: 32) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000140), 0x4) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000300)={'tunl0\x00', r1, 0x8, 0x10, 0x401, 0x0, {{0x21, 0x4, 0x0, 0x5, 0x84, 0x64, 0x0, 0x94, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1b, 0x59, [@rand_addr=0x64010101, @remote, @remote, @multicast2, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x54, 0xe0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local, 0x69ebcff3}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x80000000}, {@empty, 0x1}, {@rand_addr=0x64010102, 0x7}, {@loopback}, {@loopback, 0x7ff}, {@rand_addr=0x64010102, 0x81}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@loopback, 0x6}]}]}}}}}) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0xfee7) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, '\x00', 0x4}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000000003, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x100000001, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x80, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) 1m9.606393355s ago: executing program 2 (id=899): r0 = syz_usb_connect(0x4, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="120109000000000000000450970b0102030109021200010000000009042400003bc64901"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="851606000000da441b5bdf3e9dd039d21852a51872aa034072a349f08247e59fec27694e6f0162b3320ceca3451e6e06671e184334e28fb6bd04138e2ebdea878da6085ff1e1bd5b83d063a03f2323ffc5e54ab39ffebf77ef0abbd2d21d7ae3b0fc8b5798789a609871cd8a9e08a64a17d89f7791891740e92cfeceb01e3be76b818573f4c663215e5b98158d6bff78df0f2de17c7eb8fb80f50b232fd31071ebb72e93000000000000"], 0x0, 0x0}) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000080)={0x900, 0x34343452, 0x140, 0x438, 0x3, @stepwise={{0x8001, 0x6}, {0x3, 0x200}, {0x7ff, 0x84}}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYRES32=r5, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 1m9.068243871s ago: executing program 2 (id=905): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) preadv2(r1, &(0x7f0000000240)=[{&(0x7f0000002dc0)=""/4107, 0x100b}], 0x1, 0x2, 0x0, 0x1c) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x44c00, 0x10, 0x39b4bfda6594ff89}, 0x18) r3 = open_tree(r2, 0x0, 0x8001) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x10) r4 = open(0x0, 0x0, 0x0) unlinkat(r4, &(0x7f0000000280)='./file0\x00', 0x200) close_range(r3, 0xffffffffffffffff, 0x0) 1m8.959169504s ago: executing program 2 (id=906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000300)=0xfffffffa) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd700082a0941344f6c50008000100", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) write$nci(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="40050101d801e25c353cc2c1f7010000007d2d6e235a2e85022b71b13750d13730700faa401e2c0c7410fe2fa7563437cffbecf6c96a2e4a8c44806af300"], 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="66643d47b32e710ef9ab7e59395a245bbcdad5ccb535e0cc2571340f9dd7e5c6da402f25ba719abd7c327cba0be20b03421d9d4125", @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000001']) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r10, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x4) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000280)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',alLow_othM2,\x00']) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007add1520450580800103000000010902120001000000000904"], 0x0) read$alg(r3, &(0x7f0000000480)=""/237, 0xed) 53.57077236s ago: executing program 34 (id=906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000300)=0xfffffffa) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd700082a0941344f6c50008000100", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) write$nci(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="40050101d801e25c353cc2c1f7010000007d2d6e235a2e85022b71b13750d13730700faa401e2c0c7410fe2fa7563437cffbecf6c96a2e4a8c44806af300"], 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="66643d47b32e710ef9ab7e59395a245bbcdad5ccb535e0cc2571340f9dd7e5c6da402f25ba719abd7c327cba0be20b03421d9d4125", @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000001']) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r10, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x4) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000280)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',alLow_othM2,\x00']) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007add1520450580800103000000010902120001000000000904"], 0x0) read$alg(r3, &(0x7f0000000480)=""/237, 0xed) 10.091123945s ago: executing program 1 (id=1085): r0 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0xfd03}, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000001b00)) 8.958877874s ago: executing program 1 (id=1086): mlock(&(0x7f0000feb000/0x14000)=nil, 0x14000) r0 = socket$kcm(0x10, 0x3, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) pivot_root(0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000080)={0x0, "c430d30c2289a9630a942dd187a55b973365715ecd36db572504d2fbf9a7db59"}) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000b5c10900422cf81699090102030109021200010000001009044a0000dda36d00"], 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) accept(r3, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000000)={0x0}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="da8d243517e74db325c78fcfabc0299b86f590fa1532dbf6bee3f9755a84bd46020bf4c2486b5a0199572200e2"}], 0x0, 0x0, 0xffffff80, 0x4000}, 0x28004800) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x44800, 0x68) getdents(r4, &(0x7f0000000080)=""/160, 0xa0) 7.98315539s ago: executing program 1 (id=1087): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d3ea00000000000000010000000009040000050300000000000000ea012205000905810300000c00070000080000000000009c1b399607e4c1debc80303b83f5fe5a4c7d66a9608ce05b12f5f25b9203cff919ca24877daf2f97c76cf7d963146936e35ea4834e3f8a7dcb92989d84e9e8d963a489070ad5424e8e33e1ca948f2993c0be15912654daf3bb202af5974e4a1e47bcb2272d8bdd322c974daab70832053ecaba04303a9f934adaf68a2766402dc374a36e4bc8563e3afb074a300dda0bc31cff39bc"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="00045700000012f44b97"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x4b54, &(0x7f0000000140)={0x0, 0x2daa, 0x2, 0x2, 0x4a}, &(0x7f0000000000), &(0x7f0000000080)) (async, rerun: 64) r2 = socket$kcm(0x1e, 0x1, 0x0) (rerun: 64) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x800000}}, 0x80, 0x0}, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ff", 0x4c}], 0x0, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x10008014) (async, rerun: 32) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) (rerun: 32) read$msr(r3, &(0x7f00000002c0)=""/195, 0xc3) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace$setregs(0xd, r4, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) writev(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="01022abd7000fedbdf250f00000021000e006804020004007e15000403ffffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x48000) r5 = socket(0xb, 0x3, 0x2) connect$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x1}}, 0x10) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="7a391670fc4a4e84132acb9e190403e146c841316fc4631c9aa062f25ca49bcb4ab6cfbb54a77af51bf33445a9f136ad3a8a7d81e2ae25f90f6452d2ef5c74806c7d9e69c6d94563f481f4848855aa247db96d83cac651a8bd3b13c0"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x4c) (async, rerun: 32) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x808a}], 0x1, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0x4044}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000002, 0x5d031, r1, 0x0) (async) r6 = userfaultfd(0x80001) mmap(&(0x7f0000a77000/0x3000)=nil, 0x3000, 0x1, 0x98012, r6, 0xf04cd000) (async) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000000901010000000000000000070000010900010073797a310000000008000540000000153c0002002c00018014000300ff020000000000000000000000000001140004fbffffff00000000000000ffffac14141a0c00028005000100110000000c0004800800014000000004"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x1800) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x5}) 6.135260476s ago: executing program 1 (id=1088): syz_usb_connect(0x2, 0x371, &(0x7f0000000280)=ANY=[], 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 4.574709273s ago: executing program 1 (id=1089): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x4) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev, 0x601}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)}, 0x2004fc10) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8005, &(0x7f0000000000)=0x3f, 0x9, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) futex(&(0x7f00000001c0)=0x1, 0xd, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)=0x2, 0x2) 0s ago: executing program 1 (id=1090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="202901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) kernel console output (not intermixed with test programs): find an available UDC or it's busy [ 160.870217][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.061134][ T5183] Bluetooth: hci3: command tx timeout [ 161.446008][ T8470] overlay: Unknown parameter 'fscontext' [ 161.535187][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.545270][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.555228][ T8474] netlink: 'syz.3.324': attribute type 27 has an invalid length. [ 161.665475][ T8474] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.674129][ T8474] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.892801][ T8474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.923428][ T10] gspca_stk1135: reg_w 0x7 err -71 [ 161.945057][ T8474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.950085][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 161.988898][ T10] gspca_stk1135: Sensor write failed [ 161.992766][ T8501] netlink: 'syz.1.325': attribute type 2 has an invalid length. [ 162.004049][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 162.022464][ T10] gspca_stk1135: Sensor write failed [ 162.049521][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 162.081868][ T10] gspca_stk1135: Sensor read failed [ 162.092368][ T8474] vlan1: left promiscuous mode [ 162.124515][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 162.143477][ T10] gspca_stk1135: Sensor read failed [ 162.148739][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 162.165834][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 162.172306][ T8474] macsec0: left allmulticast mode [ 162.185545][ T10] gspca_stk1135: Sensor read failed [ 162.190820][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 162.209881][ T10] gspca_stk1135: Sensor read failed [ 162.224438][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 162.240956][ T10] gspca_stk1135: Sensor write failed [ 162.254520][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 162.266517][ T10] gspca_stk1135: Sensor write failed [ 162.280747][ T10] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 162.318687][ T10] usb 3-1: USB disconnect, device number 47 [ 162.394180][ T8478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.440313][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.465602][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.478900][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.578940][ T8537] mmap: syz.1.331 (8537) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 162.641084][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 162.682674][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 162.802009][ T9] usb 1-1: no configurations [ 162.806822][ T9] usb 1-1: can't read configurations, error -22 [ 162.843327][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.854444][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.864567][ T10] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 162.874320][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.890959][ T10] usb 3-1: config 0 descriptor?? [ 162.951120][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 163.115641][ T9] usb 1-1: no configurations [ 163.120336][ T9] usb 1-1: can't read configurations, error -22 [ 163.127873][ T9] usb usb1-port1: attempt power cycle [ 163.481013][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 163.502537][ T9] usb 1-1: no configurations [ 163.507316][ T9] usb 1-1: can't read configurations, error -22 [ 163.621024][ T10] razer 0003:1532:010E.000F: failed to enable macro keys: -71 [ 163.633842][ T10] razer 0003:1532:010E.000F: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 163.650248][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 163.658992][ T10] usb 3-1: USB disconnect, device number 48 [ 163.683891][ T9] usb 1-1: no configurations [ 163.690530][ T9] usb 1-1: can't read configurations, error -22 [ 163.699112][ T9] usb usb1-port1: unable to enumerate USB device [ 163.746952][ T8550] fido_id[8550]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 163.807231][ T8564] tipc: Trying to set illegal importance in message [ 163.819329][ T8564] netlink: 'syz.1.334': attribute type 83 has an invalid length. [ 163.960662][ T8573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.337'. [ 164.751071][ T8508] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 164.903133][ T8508] usb 3-1: unable to get BOS descriptor or descriptor too short [ 164.914066][ T8508] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 164.921823][ T8508] usb 3-1: can't read configurations, error -61 [ 165.008742][ T8619] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 165.017525][ T8619] netlink: 204 bytes leftover after parsing attributes in process `syz.3.346'. [ 165.027870][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 165.051163][ T8508] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 165.203448][ T8508] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.213298][ T8508] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 165.221695][ T8508] usb 3-1: can't read configurations, error -61 [ 165.228497][ T8508] usb usb3-port1: attempt power cycle [ 165.417904][ T8634] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 165.571154][ T8508] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 165.604188][ T8508] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.614069][ T8508] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 165.622978][ T8508] usb 3-1: can't read configurations, error -61 [ 165.650973][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 165.751154][ T8508] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 165.774237][ T8508] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.783999][ T8508] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 165.798785][ T8508] usb 3-1: can't read configurations, error -61 [ 165.811728][ T8508] usb usb3-port1: unable to enumerate USB device [ 165.822033][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.846927][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 165.856717][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.879688][ T9] usb 1-1: config 0 descriptor?? [ 166.107261][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 166.117176][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 166.136249][ T9] usb 1-1: USB disconnect, device number 47 [ 166.367237][ T8667] netlink: 'syz.1.354': attribute type 39 has an invalid length. [ 166.475218][ T8673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.355'. [ 166.618107][ T8676] bridge0: port 3(batadv0) entered blocking state [ 166.621035][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 166.631328][ T8676] bridge0: port 3(batadv0) entered disabled state [ 166.643342][ T8676] batadv0: entered allmulticast mode [ 166.652316][ T8676] batadv0: entered promiscuous mode [ 166.671722][ T8680] batadv0: left allmulticast mode [ 166.676876][ T8680] batadv0: left promiscuous mode [ 166.705421][ T8680] bridge0: port 3(batadv0) entered disabled state [ 166.739094][ T8676] loop6: detected capacity change from 0 to 7 [ 166.761883][ T6723] Dev loop6: unable to read RDB block 7 [ 166.767628][ T6723] loop6: AHDI p3 p4 [ 166.774387][ T6723] loop6: partition table partially beyond EOD, truncated [ 166.787888][ T6723] loop6: p3 start 1886353253 is beyond EOD, truncated [ 166.802240][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 166.810420][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.832440][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 166.851497][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.875066][ T9] usb 1-1: config 0 descriptor?? [ 166.903011][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 166.923111][ T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 167.318369][ T8627] netlink: 44 bytes leftover after parsing attributes in process `syz.0.347'. [ 167.334387][ T8496] usb 1-1: USB disconnect, device number 48 [ 167.367317][ T8496] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 167.668944][ T8741] can: request_module (can-proto-5) failed. [ 167.919139][ T8751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.930160][ T8751] netlink: 'syz.0.368': attribute type 2 has an invalid length. [ 167.938313][ T8751] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 167.946939][ T8751] netlink: 152 bytes leftover after parsing attributes in process `syz.0.368'. [ 167.981080][ T9] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 168.493268][ T9] usb 3-1: config 0 has an invalid interface number: 123 but max is 0 [ 168.501710][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.530739][ T9] usb 3-1: config 0 has no interface number 0 [ 168.543841][ T9] usb 3-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 168.570933][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.578985][ T9] usb 3-1: Product: syz [ 168.584508][ T9] usb 3-1: Manufacturer: syz [ 168.589153][ T9] usb 3-1: SerialNumber: syz [ 168.604594][ T9] usb 3-1: config 0 descriptor?? [ 168.618625][ T9] cdc_acm 3-1:0.123: skipping garbage [ 168.824749][ T9] usb 3-1: USB disconnect, device number 53 [ 168.953178][ T8789] binder: 8788:8789 ioctl 4018620d 0 returned -22 [ 168.980002][ T8789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.007027][ T8789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.241239][ T122] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 169.394521][ T122] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 169.413557][ T122] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 169.438531][ T122] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 169.450590][ T122] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 169.460700][ T122] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 169.469384][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 169.484951][ T122] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 169.497740][ T122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.507263][ T122] usb 1-1: Product: syz [ 169.514480][ T122] usb 1-1: Manufacturer: syz [ 169.519295][ T122] usb 1-1: SerialNumber: syz [ 169.540830][ T122] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 169.556735][ T122] imon 1-1:155.0: unable to initialize intf0, err -90 [ 169.563714][ T122] imon:imon_probe: failed to initialize context! [ 169.570285][ T122] imon 1-1:155.0: unable to register, err -19 [ 169.624063][ T8817] Invalid ELF header magic: != ELF [ 169.746763][ T8824] netlink: 'syz.2.382': attribute type 1 has an invalid length. [ 169.747059][ T8794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.770303][ T8794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.786095][ T8794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.795878][ T8794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.808176][ T8794] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 169.824216][ T8794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.856569][ T8794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.874402][ T10] usb 1-1: USB disconnect, device number 49 [ 169.988205][ T8843] netlink: 'syz.1.385': attribute type 10 has an invalid length. [ 170.634275][ T30] audit: type=1326 audit(1757229722.130:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.1.391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6a5f8ebe9 code=0x0 [ 170.655995][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.830997][ T8496] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 170.960999][ T8496] usb 1-1: device descriptor read/64, error -71 [ 171.210989][ T8496] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 171.340997][ T8496] usb 1-1: device descriptor read/64, error -71 [ 171.451512][ T8496] usb usb1-port1: attempt power cycle [ 171.811047][ T8496] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 171.833168][ T8496] usb 1-1: device descriptor read/8, error -71 [ 171.891001][ T5855] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 172.072614][ T8496] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 172.095390][ T5855] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 172.109825][ T8902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.398'. [ 172.110424][ T5855] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 172.131676][ T5855] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 172.131713][ T5855] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 172.131738][ T5855] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 172.135177][ T5855] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 172.176757][ T8496] usb 1-1: device descriptor read/8, error -71 [ 172.185319][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.185349][ T5855] usb 3-1: Product: syz [ 172.185367][ T5855] usb 3-1: Manufacturer: syz [ 172.185385][ T5855] usb 3-1: SerialNumber: syz [ 172.193915][ T5855] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 172.216590][ T5855] imon 3-1:155.0: unable to initialize intf0, err -90 [ 172.216614][ T5855] imon:imon_probe: failed to initialize context! [ 172.216630][ T5855] imon 3-1:155.0: unable to register, err -19 [ 172.291452][ T8496] usb usb1-port1: unable to enumerate USB device [ 172.329804][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.340019][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.400303][ T9] usb 3-1: USB disconnect, device number 54 [ 173.023661][ T8929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.032870][ T8929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.146422][ T8934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.157606][ T8934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.221615][ T122] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 173.372965][ T122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.384088][ T122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.394210][ T122] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 173.403377][ T122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.414195][ T122] usb 3-1: config 0 descriptor?? [ 173.837159][ T122] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 173.850579][ T30] audit: type=1326 audit(1757229725.340:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.3.406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f577238ebe9 code=0x0 [ 173.872255][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.879128][ T122] hid-thrustmaster 0003:044F:B65D.0010: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 173.891694][ T122] hid-thrustmaster 0003:044F:B65D.0010: Wrong number of endpoints? [ 174.029741][ C0] hid-thrustmaster 0003:044F:B65D.0010: Unknown packet type 0x0, unable to proceed further with wheel init [ 174.137717][ T8970] netlink: 'syz.0.408': attribute type 10 has an invalid length. [ 174.156383][ T8970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.168004][ T8970] team0: Port device bond0 added [ 174.231153][ T8496] usb 3-1: USB disconnect, device number 55 [ 174.513476][ T122] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 174.676975][ T122] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 174.698739][ T122] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 174.724116][ T122] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 174.761011][ T122] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.798592][ T122] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 174.819388][ T9004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.836605][ T122] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 174.845928][ T122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.854768][ T9004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.866070][ T122] usb 1-1: Product: syz [ 174.881300][ T122] usb 1-1: Manufacturer: syz [ 174.885958][ T122] usb 1-1: SerialNumber: syz [ 174.894790][ T9004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.910844][ T9004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.925804][ T9004] trusted_key: encrypted_key: keyword 'uew' not recognized [ 174.935134][ T122] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 174.945144][ T122] imon 1-1:155.0: unable to initialize intf0, err -90 [ 174.964636][ T122] imon:imon_probe: failed to initialize context! [ 174.972034][ T122] imon 1-1:155.0: unable to register, err -19 [ 175.118840][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.128743][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.141591][ T122] usb 1-1: USB disconnect, device number 54 [ 175.194752][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 175.363309][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 175.372331][ T10] usb 3-1: config 7 has an invalid interface number: 3 but max is 1 [ 175.380360][ T10] usb 3-1: config 7 has an invalid interface number: 232 but max is 1 [ 175.388926][ T10] usb 3-1: config 7 has no interface number 0 [ 175.396199][ T10] usb 3-1: config 7 has no interface number 1 [ 175.402455][ T10] usb 3-1: config 7 interface 3 has no altsetting 0 [ 175.409075][ T10] usb 3-1: config 7 interface 232 has no altsetting 0 [ 175.418284][ T10] usb 3-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=6f.b0 [ 175.427399][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.435450][ T10] usb 3-1: Product: syz [ 175.439630][ T10] usb 3-1: Manufacturer: syz [ 175.444564][ T10] usb 3-1: SerialNumber: syz [ 175.537995][ T9032] netlink: 116 bytes leftover after parsing attributes in process `syz.3.417'. [ 175.607874][ T9035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.618247][ T9035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.634337][ T9035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.643885][ T9035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.672800][ T10] usb 3-1: unknown number of interfaces: 2 [ 175.689213][ T10] usb 3-1: USB disconnect, device number 56 [ 176.649230][ T9077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.666845][ T9077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.677251][ T9080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.427'. [ 176.678575][ T9077] futex_wake_op: syz.3.426 tries to shift op by 32; fix this program [ 177.050990][ T10] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 177.121042][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 177.181031][ T10] usb 3-1: device descriptor read/64, error -71 [ 177.281090][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 177.288183][ T9] usb 1-1: config 2 has an invalid interface number: 65 but max is 0 [ 177.296798][ T9] usb 1-1: config 2 has no interface number 0 [ 177.303662][ T9] usb 1-1: config 2 interface 65 has no altsetting 0 [ 177.312767][ T9] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 7.6b [ 177.322020][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.330031][ T9] usb 1-1: Product: syz [ 177.334278][ T9] usb 1-1: Manufacturer: syz [ 177.338896][ T9] usb 1-1: SerialNumber: syz [ 177.357232][ T9] (null): radio-mr800 - initialization failed [ 177.363736][ T9] radio-mr800 1-1:2.65: probe with driver radio-mr800 failed with error -22 [ 177.373804][ T9] usbhid 1-1:2.65: couldn't find an input interrupt endpoint [ 177.431336][ T10] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 177.560544][ T9091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.562147][ T10] usb 3-1: device descriptor read/64, error -71 [ 177.574732][ T9091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.588957][ T5855] IPVS: starting estimator thread 0... [ 177.681060][ T9100] IPVS: using max 25 ests per chain, 60000 per kthread [ 177.695740][ T10] usb usb3-port1: attempt power cycle [ 178.008464][ T9] usb 1-1: USB disconnect, device number 55 [ 178.041681][ T10] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 178.072666][ T10] usb 3-1: device descriptor read/8, error -71 [ 178.320980][ T10] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 178.341624][ T10] usb 3-1: device descriptor read/8, error -71 [ 178.452072][ T10] usb usb3-port1: unable to enumerate USB device [ 178.911009][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 179.063293][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 179.071063][ T10] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 179.079286][ T10] usb 1-1: config 0 has no interface number 0 [ 179.087451][ T10] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 179.097707][ T10] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 179.110125][ T10] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 179.119392][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.127634][ T10] usb 1-1: Product: syz [ 179.131949][ T10] usb 1-1: Manufacturer: syz [ 179.136580][ T10] usb 1-1: SerialNumber: syz [ 179.144502][ T10] usb 1-1: config 0 descriptor?? [ 179.150760][ T9114] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 179.158282][ T9114] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 179.177280][ T10] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, ae:93:f7:f2:79:89 [ 179.378244][ T8496] usb 1-1: USB disconnect, device number 56 [ 179.396099][ T8496] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 179.738135][ T9156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.758125][ T9156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.783680][ T9156] ptrace attach of "./syz-executor exec"[5873] was attempted by "ԓ7E\x09Ż P"[9156] [ 179.893438][ T9154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.979620][ T9173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.436'. [ 180.402818][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 180.521468][ T9215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.538072][ T9215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.576261][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.641933][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.654295][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 180.663990][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.682157][ T9] usb 3-1: config 0 descriptor?? [ 180.731440][ T122] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 180.882787][ T122] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 180.893238][ T122] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 180.905446][ T122] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 180.917117][ T122] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 180.927312][ T122] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 180.943724][ T122] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 180.952973][ T122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.961120][ T122] usb 1-1: Product: syz [ 180.965328][ T122] usb 1-1: Manufacturer: syz [ 180.969944][ T122] usb 1-1: SerialNumber: syz [ 180.984380][ T122] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 180.992188][ T122] imon 1-1:155.0: unable to initialize intf0, err -90 [ 180.999010][ T122] imon:imon_probe: failed to initialize context! [ 181.005460][ T122] imon 1-1:155.0: unable to register, err -19 [ 181.127772][ T9] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 181.218063][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.255510][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.290074][ T122] usb 1-1: USB disconnect, device number 57 [ 181.319847][ T9] cp2112 0003:10C4:EA90.0011: Part Number: 0x00 Device Version: 0x00 [ 181.332486][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.354089][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.370057][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.383472][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.728949][ T9] cp2112 0003:10C4:EA90.0011: error setting SMBus config [ 181.742672][ T9] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -71 [ 181.756280][ T9] usb 3-1: USB disconnect, device number 61 [ 182.201016][ T8496] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 182.355752][ T8496] usb 1-1: unable to get BOS descriptor or descriptor too short [ 182.365772][ T8496] usb 1-1: config 0 has an invalid interface number: 182 but max is 0 [ 182.374531][ T8496] usb 1-1: config 0 has no interface number 0 [ 182.380648][ T8496] usb 1-1: config 0 interface 182 has no altsetting 0 [ 182.393764][ T8496] usb 1-1: string descriptor 0 read error: -22 [ 182.400186][ T8496] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=f9.97 [ 182.409512][ T8496] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.419983][ T8496] usb 1-1: config 0 descriptor?? [ 182.428954][ T8496] ems_usb 1-1:0.182 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 182.440035][ T8496] ems_usb 1-1:0.182: probe with driver ems_usb failed with error -22 [ 182.593100][ T5855] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 182.630438][ T122] usb 1-1: USB disconnect, device number 58 [ 182.761076][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 182.770507][ T5855] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 182.780460][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.788540][ T5855] usb 3-1: Product: syz [ 182.792743][ T5855] usb 3-1: Manufacturer: syz [ 182.797357][ T5855] usb 3-1: SerialNumber: syz [ 182.805244][ T5855] usb 3-1: config 0 descriptor?? [ 182.815375][ T5855] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 182.828284][ T5855] usb 3-1: Detected FT-X [ 183.355630][ T9336] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.457'. [ 183.651923][ T9343] 9pnet_fd: Insufficient options for proto=fd [ 183.731389][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 183.742214][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.460'. [ 183.761106][ T5183] Bluetooth: hci2: Malformed LE Event: 0x0d [ 184.010993][ T122] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 184.160931][ T122] usb 1-1: Using ep0 maxpacket: 16 [ 184.168829][ T122] usb 1-1: config 102 has too many interfaces: 41, using maximum allowed: 32 [ 184.178084][ T122] usb 1-1: config 102 has an invalid descriptor of length 245, skipping remainder of the config [ 184.190115][ T122] usb 1-1: config 102 has 0 interfaces, different from the descriptor's value: 41 [ 184.201890][ T122] usb 1-1: New USB device found, idVendor=0704, idProduct=0903, bcdDevice= 1.8a [ 184.211356][ T122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.219364][ T122] usb 1-1: Product: syz [ 184.223680][ T122] usb 1-1: Manufacturer: syz [ 184.228299][ T122] usb 1-1: SerialNumber: syz [ 184.319698][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 184.436007][ T9361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.456274][ T122] usb 1-1: USB disconnect, device number 59 [ 184.467831][ T9361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.067919][ T9379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.095507][ T9379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.235584][ T9394] Dead loop on virtual device ip6_vti0, fix it urgently! [ 185.319816][ T5855] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 185.341763][ T5855] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 185.352378][ T5855] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 185.371978][ T5855] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 185.374989][ T9409] netlink: 92 bytes leftover after parsing attributes in process `syz.2.472'. [ 185.398454][ T5855] usb 3-1: USB disconnect, device number 62 [ 185.409773][ T5855] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 185.415649][ T9407] netlink: 92 bytes leftover after parsing attributes in process `syz.2.472'. [ 185.423281][ T5855] ftdi_sio 3-1:0.0: device disconnected [ 185.594056][ T9431] netlink: 'syz.0.474': attribute type 21 has an invalid length. [ 185.602084][ T9431] netlink: 176 bytes leftover after parsing attributes in process `syz.0.474'. [ 185.612251][ T9431] netlink: 220 bytes leftover after parsing attributes in process `syz.0.474'. [ 185.760805][ T9443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.770484][ T9443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.884310][ T9456] netlink: 'syz.0.479': attribute type 11 has an invalid length. [ 185.892322][ T9456] netlink: 168 bytes leftover after parsing attributes in process `syz.0.479'. [ 185.958898][ T9458] netlink: 'syz.0.479': attribute type 11 has an invalid length. [ 185.967238][ T9458] netlink: 168 bytes leftover after parsing attributes in process `syz.0.479'. [ 186.280970][ T5855] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 186.430978][ T5855] usb 1-1: Using ep0 maxpacket: 8 [ 186.440729][ T9475] Bluetooth: MGMT ver 1.23 [ 186.453908][ T5855] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 186.458942][ T9475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.475218][ T9475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.475284][ T5855] usb 1-1: config 0 has no interface number 0 [ 186.502205][ T5855] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.514784][ T5855] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 186.526967][ T5855] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.538127][ T5855] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 186.551345][ T5855] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 186.560434][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.574536][ T5855] usb 1-1: config 0 descriptor?? [ 186.590460][ T5855] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 186.703346][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 186.786867][ T8481] usb 1-1: USB disconnect, device number 60 [ 186.793029][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 186.808037][ T8481] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 186.871232][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 186.878362][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.890565][ T9] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 186.900001][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.908482][ T9] usb 3-1: Product: syz [ 186.913504][ T9] usb 3-1: Manufacturer: syz [ 186.918137][ T9] usb 3-1: SerialNumber: syz [ 186.927236][ T9] usb 3-1: config 0 descriptor?? [ 186.937256][ T9] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 186.943662][ T9] usb 3-1: selecting invalid altsetting 1 [ 186.997960][ T9462] ldusb: No device or device unplugged -19 [ 187.140582][ T9] gspca_stk014: init reg: 0x00 [ 187.150550][ T9] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 187.175378][ T9509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.186727][ T9509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.200284][ T9509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.209656][ T9509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.344369][ T9] usb 3-1: USB disconnect, device number 63 [ 187.780295][ T9528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.791680][ T9528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.360404][ T9548] netlink: 'syz.3.494': attribute type 21 has an invalid length. [ 188.369361][ T9548] netlink: 168 bytes leftover after parsing attributes in process `syz.3.494'. [ 188.472121][ T9554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.473218][ T9551] netlink: 52 bytes leftover after parsing attributes in process `syz.1.495'. [ 188.494026][ T9551] netlink: 52 bytes leftover after parsing attributes in process `syz.1.495'. [ 188.507706][ T9551] netlink: 52 bytes leftover after parsing attributes in process `syz.1.495'. [ 188.614862][ T9563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.632394][ T9563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.654756][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 189.152835][ T9580] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 189.164957][ T9580] PKCS7: Only support pkcs7_signedData type [ 189.411015][ T5855] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 189.554816][ T9600] dvmrp0: entered allmulticast mode [ 189.563555][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.566125][ T9600] dvmrp0: left allmulticast mode [ 189.574961][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.591117][ T5855] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 189.602760][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.613581][ T5855] usb 3-1: config 0 descriptor?? [ 189.829497][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 189.996361][ T9619] netlink: 'syz.0.509': attribute type 1 has an invalid length. [ 190.004622][ T9619] netlink: 'syz.0.509': attribute type 4 has an invalid length. [ 190.012478][ T9619] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.509'. [ 190.124448][ T5855] hid-u2fzero 0003:10C4:8ACF.0012: unknown main item tag 0x3 [ 190.132183][ T5855] hid-u2fzero 0003:10C4:8ACF.0012: item fetching failed at offset 4/5 [ 190.141637][ T5855] hid-u2fzero 0003:10C4:8ACF.0012: probe with driver hid-u2fzero failed with error -22 [ 190.327945][ T9] usb 3-1: USB disconnect, device number 64 [ 190.661253][ T9650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.674044][ T9650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.685635][ T9650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.695899][ T9650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.777466][ T9661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.786760][ T9661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.121124][ T5947] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 191.382114][ T5947] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 191.471149][ T5947] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 191.568122][ T5947] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 191.604606][ T5947] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.616423][ T5947] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 191.660730][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.675709][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.688904][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.694293][ T5947] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 191.709362][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.723331][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.738768][ T9728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.755095][ T5947] usb 3-1: Product: syz [ 191.755125][ T9728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.769617][ T5947] usb 3-1: Manufacturer: syz [ 191.782549][ T5947] usb 3-1: SerialNumber: syz [ 191.797714][ T5947] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 191.815766][ T5947] imon 3-1:155.0: unable to initialize intf0, err -90 [ 191.829591][ T5947] imon:imon_probe: failed to initialize context! [ 191.847088][ T5947] imon 3-1:155.0: unable to register, err -19 [ 191.939632][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.956449][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.972988][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.990423][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.028495][ T9756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.046779][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.047968][ T9756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.073633][ T9756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.523'. [ 192.076639][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.120191][ T8496] usb 3-1: USB disconnect, device number 65 [ 192.271354][ T5855] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 192.440971][ T5855] usb 1-1: Using ep0 maxpacket: 32 [ 192.447671][ T5855] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 192.456256][ T5855] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 192.465094][ T5855] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 192.474241][ T5855] usb 1-1: config 1 has no interface number 0 [ 192.480400][ T5855] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.491536][ T5855] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 192.504607][ T5855] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 192.513796][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.534381][ T5855] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 192.691179][ T9781] tipc: Started in network mode [ 192.696132][ T9781] tipc: Node identity ac14142f, cluster identity 4711 [ 192.709095][ T9781] tipc: New replicast peer: 0.0.0.0 [ 192.716918][ T9781] tipc: Enabled bearer , priority 10 [ 192.723655][ T9782] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 192.729715][ T5855] snd_usb_pod 1-1:1.1: set_interface failed [ 192.746015][ T5855] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 192.755269][ T5855] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 192.779101][ T5855] usb 1-1: USB disconnect, device number 61 [ 193.120677][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 193.141552][ T8489] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 193.272639][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.282471][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.300809][ T9819] new mount options do not match the existing superblock, will be ignored [ 193.335876][ T8489] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 193.351025][ T8489] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.358792][ T9819] nbd: must specify at least one socket [ 193.367779][ T8489] usb 3-1: config 0 has no interface number 0 [ 193.374301][ T8489] usb 3-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 43 [ 193.385501][ T8489] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 193.400264][ T8489] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 193.410435][ T8489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.425547][ T9827] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 193.439807][ T8489] usb 3-1: config 0 descriptor?? [ 193.446296][ T9796] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 193.488051][ T8489] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 193.663890][ T50] usb 3-1: Failed to submit usb control message: -71 [ 193.671825][ T5947] usb 3-1: USB disconnect, device number 66 [ 193.675458][ T50] usb 3-1: unable to send the bmi data to the device: -71 [ 193.690329][ T50] usb 3-1: unable to get target info from device [ 193.697854][ T50] usb 3-1: could not get target info (-71) [ 193.704358][ T50] usb 3-1: could not probe fw (-71) [ 193.832527][ T8481] tipc: Node number set to 2886997039 [ 194.131033][ T8489] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 194.297114][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 194.313931][ T8489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 194.328394][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.331516][ T8489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.352350][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.367350][ T8489] usb 1-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 194.377041][ T8489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.386445][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.400083][ T8489] usb 1-1: config 0 descriptor?? [ 194.410139][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.428757][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.444385][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.445023][ T9888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.465106][ T9888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.560188][ T9871] infiniband syz1: set down [ 194.565642][ T9871] infiniband syz1: added ipvlan1 [ 194.620981][ T5855] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 194.633741][ T9871] RDS/IB: syz1: added [ 194.639022][ T9871] smc: adding ib device syz1 with port count 1 [ 194.648267][ T9871] smc: ib device syz1 port 1 has no pnetid [ 194.677406][ T8489] usbhid 1-1:0.0: can't add hid device: -71 [ 194.684297][ T8489] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 194.701846][ T8489] usb 1-1: USB disconnect, device number 62 [ 194.790948][ T5855] usb 3-1: Using ep0 maxpacket: 32 [ 194.802171][ T5855] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 194.810516][ T5855] usb 3-1: config 0 has no interface number 0 [ 194.817140][ T5855] usb 3-1: config 0 interface 12 has no altsetting 0 [ 194.833008][ T5855] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 194.842239][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.850260][ T5855] usb 3-1: Product: syz [ 194.855007][ T5855] usb 3-1: Manufacturer: syz [ 194.859646][ T5855] usb 3-1: SerialNumber: syz [ 194.869229][ T5855] usb 3-1: config 0 descriptor?? [ 195.137638][ T9910] netlink: 'syz.2.543': attribute type 12 has an invalid length. [ 195.670013][ T9930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.496501][ T9930] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 196.503134][ T9930] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 196.527777][ T9930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.534111][ T9930] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 196.548644][ T9930] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 196.556313][ T9930] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 196.574448][ T9930] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.584257][ T9930] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 196.905194][ T5855] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 196.913735][ T5855] f81534 3-1:0.12: f81534_find_config_idx: read failed: -32 [ 196.921342][ T5855] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 196.928973][ T5855] f81534 3-1:0.12: probe with driver f81534 failed with error -32 [ 197.300012][ T5947] usb 3-1: USB disconnect, device number 67 [ 197.496408][ T9980] binder: 9979:9980 unknown command 576 [ 197.502324][ T9980] binder: 9979:9980 ioctl c0306201 200000000480 returned -22 [ 197.510538][ T9980] netlink: 'syz.2.553': attribute type 64 has an invalid length. [ 197.518402][ T9980] netlink: 5 bytes leftover after parsing attributes in process `syz.2.553'. [ 198.021140][ T5855] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 198.172739][ T5855] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 198.180983][ T5855] usb 3-1: config 0 has no interface number 0 [ 198.189425][ T5855] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 198.198579][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.206683][ T5855] usb 3-1: Product: syz [ 198.210960][ T5855] usb 3-1: Manufacturer: syz [ 198.215596][ T5855] usb 3-1: SerialNumber: syz [ 198.224042][ T5855] usb 3-1: config 0 descriptor?? [ 198.383758][ T9915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.433314][ T5855] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 198.446407][ T5855] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 198.455584][ T5855] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 198.464389][ T5855] usb 3-1: media controller created [ 198.474080][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.536620][ T5855] DVB: Unable to find symbol dib7000p_attach() [ 198.542988][ T5855] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 198.557434][ T5855] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 198.567725][ T5855] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 198.588923][ T5855] usb 3-1: media controller created [ 198.596912][T10019] tmpfs: Bad value for 'mpol' [ 198.599331][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.608189][T10019] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 198.619724][ T5855] dib0700: the master dib7090 has to be initialized first [ 198.622525][T10019] fuse: Bad value for 'fd' [ 198.631343][ T5855] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 198.701569][ T5855] rc_core: IR keymap rc-dib0700-rc5 not found [ 198.707822][ T5855] Registered IR keymap rc-empty [ 198.709413][T10029] netlink: 'syz.1.562': attribute type 29 has an invalid length. [ 198.715832][ T5855] dvb-usb: could not initialize remote control. [ 198.726494][T10029] netlink: 1 bytes leftover after parsing attributes in process `syz.1.562'. [ 198.730522][ T5855] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 198.771863][ T5855] usb 3-1: USB disconnect, device number 68 [ 198.820295][ T5855] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 199.545782][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.552286][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.330989][ T8489] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 200.491182][ T8489] usb 3-1: Using ep0 maxpacket: 16 [ 200.497870][ T8489] usb 3-1: config 0 has an invalid interface number: 58 but max is 0 [ 200.506112][ T8489] usb 3-1: config 0 has no interface number 0 [ 200.515258][ T8489] usb 3-1: config 0 interface 58 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 200.527206][ T8489] usb 3-1: config 0 interface 58 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 200.537317][ T8489] usb 3-1: config 0 interface 58 has no altsetting 0 [ 200.546258][ T8489] usb 3-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.03 [ 200.555404][ T8489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.563521][ T8489] usb 3-1: Product: syz [ 200.567743][ T8489] usb 3-1: Manufacturer: syz [ 200.572553][ T8489] usb 3-1: SerialNumber: syz [ 200.579508][ T8489] usb 3-1: config 0 descriptor?? [ 200.587103][T10064] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.594954][T10064] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.652092][T10070] netlink: 92 bytes leftover after parsing attributes in process `syz.1.570'. [ 200.813757][T10064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.829157][T10064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.896710][T10081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.906225][T10081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.864906][ T8489] ums-isd200 3-1:0.58: USB Mass Storage device detected [ 201.887973][ T8489] scsi host1: usb-storage 3-1:0.58 [ 201.931258][ T8489] usb 3-1: USB disconnect, device number 69 [ 201.961717][T10102] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.574'. [ 203.017264][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 204.021305][ T122] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 204.185302][ T122] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.198246][ T122] usb 3-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 204.207498][ T122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.218052][ T122] usb 3-1: config 0 descriptor?? [ 204.830033][ T122] usbhid 3-1:0.0: can't add hid device: -71 [ 204.837470][ T122] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 204.847958][ T122] usb 3-1: USB disconnect, device number 70 [ 205.144257][T10210] netlink: 5820 bytes leftover after parsing attributes in process `syz.1.586'. [ 205.631859][ T5855] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 205.781070][ T5855] usb 3-1: Using ep0 maxpacket: 8 [ 205.787808][ T5855] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 205.798794][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.813249][ T5855] usb 3-1: config 0 descriptor?? [ 206.023337][T10218] wg0 speed is unknown, defaulting to 1000 [ 206.029569][T10218] wg0 speed is unknown, defaulting to 1000 [ 206.037008][T10218] wg0 speed is unknown, defaulting to 1000 [ 206.046982][T10218] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 206.061582][T10218] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 206.091901][T10218] wg0 speed is unknown, defaulting to 1000 [ 206.099400][T10218] wg0 speed is unknown, defaulting to 1000 [ 206.107835][T10218] wg0 speed is unknown, defaulting to 1000 [ 206.116176][T10218] wg0 speed is unknown, defaulting to 1000 [ 206.125115][T10218] wg0 speed is unknown, defaulting to 1000 [ 206.146758][ T5855] usb 3-1: USB disconnect, device number 71 [ 206.931192][ T5947] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 207.094232][ T5947] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 207.103445][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.114525][ T5947] usb 3-1: config 0 descriptor?? [ 207.322667][ T5947] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 207.323651][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.342183][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.352598][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.361758][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.370642][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.379975][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.389162][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.398376][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.408107][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.417140][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.553576][ T5947] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 207.560729][ T5947] [drm] Initialized udl on minor 2 [ 207.731607][ T5947] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 207.745763][ T5947] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 207.758336][ T122] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 207.767519][ T122] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 208.175863][T10294] wg0 speed is unknown, defaulting to 1000 [ 208.707128][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.984963][T10328] overlayfs: failed to clone upperpath [ 209.719239][ T122] usb 3-1: USB disconnect, device number 72 [ 209.796616][T10341] block nbd2: Attempted send on invalid socket [ 209.804555][T10341] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 209.815545][T10341] exFAT-fs (nbd2): unable to read boot sector [ 209.822902][T10341] exFAT-fs (nbd2): failed to read boot sector [ 209.829000][T10341] exFAT-fs (nbd2): failed to recognize exfat type [ 210.453298][T10370] netlink: 'syz.1.605': attribute type 21 has an invalid length. [ 210.520919][T10370] netlink: 128 bytes leftover after parsing attributes in process `syz.1.605'. [ 210.608007][ T5947] usb 4-1: USB disconnect, device number 25 [ 210.810981][ T8508] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 210.973886][ T8508] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 210.991043][ T8508] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.002976][ T8508] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1628, setting to 1024 [ 211.014530][ T8508] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 211.028109][ T8508] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 211.037542][ T8508] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.052096][ T8508] usb 3-1: config 0 descriptor?? [ 211.062136][T10379] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 211.485595][ T8508] waterforce 0003:1044:7A4D.0013: hidraw0: USB HID v0.08 Device [HID 1044:7a4d] on usb-dummy_hcd.2-1/input0 [ 211.557837][ T8508] waterforce 0003:1044:7A4D.0013: fw version request failed with -71 [ 211.679627][ T122] usb 3-1: USB disconnect, device number 73 [ 212.470974][ T8508] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 212.620943][ T8508] usb 3-1: Using ep0 maxpacket: 16 [ 212.630090][ T8508] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 212.639800][ T8508] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.648329][ T8508] usb 3-1: Product: syz [ 212.653553][ T8508] usb 3-1: Manufacturer: syz [ 212.658188][ T8508] usb 3-1: SerialNumber: syz [ 212.667957][ T8508] usb 3-1: config 0 descriptor?? [ 212.676784][ T8508] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 213.080553][ T8508] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 213.088970][ T8508] visor 3-1:0.0: probe with driver visor failed with error -71 [ 213.101997][ T8508] usb 3-1: USB disconnect, device number 74 [ 213.890943][ T122] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 214.041011][ T122] usb 3-1: Using ep0 maxpacket: 32 [ 214.047986][ T122] usb 3-1: config 9 has an invalid interface number: 212 but max is 3 [ 214.056389][ T122] usb 3-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 214.066736][ T122] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 4 [ 214.075840][ T122] usb 3-1: config 9 has no interface number 0 [ 214.082028][ T122] usb 3-1: config 9 interface 212 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 214.093055][ T122] usb 3-1: config 9 interface 212 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 214.104217][ T122] usb 3-1: config 9 interface 212 altsetting 3 endpoint 0xC has an invalid bInterval 254, changing to 11 [ 214.115640][ T122] usb 3-1: config 9 interface 212 altsetting 3 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 214.128760][ T122] usb 3-1: config 9 interface 212 has no altsetting 0 [ 214.138153][ T122] usb 3-1: New USB device found, idVendor=19d2, idProduct=1134, bcdDevice=b7.14 [ 214.147379][ T122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.155614][ T122] usb 3-1: Product: syz [ 214.159806][ T122] usb 3-1: Manufacturer: syz [ 214.164463][ T122] usb 3-1: SerialNumber: syz [ 214.387703][ T122] option 3-1:9.212: GSM modem (1-port) converter detected [ 214.406903][ T122] usb 3-1: USB disconnect, device number 75 [ 214.419746][ T122] option 3-1:9.212: device disconnected [ 215.180988][ T122] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 215.342881][ T122] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 215.352106][ T122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.367096][ T122] usb 3-1: config 0 descriptor?? [ 215.818306][T10504] netlink: 48 bytes leftover after parsing attributes in process `syz.1.624'. [ 216.610229][ T122] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 216.625103][ T122] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 216.637040][ T122] asix 3-1:0.0: probe with driver asix failed with error -71 [ 216.650512][ T122] usb 3-1: USB disconnect, device number 76 [ 217.123065][T10542] netlink: 32 bytes leftover after parsing attributes in process `syz.1.632'. [ 217.759659][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'. [ 218.528181][T10567] netdevsim netdevsim2: Direct firmware load for . [ 218.528181][T10567] failed with error -2 [ 218.541154][T10567] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 218.541154][T10567] [ 219.836489][T10581] netlink: 'syz.1.644': attribute type 10 has an invalid length. [ 219.845711][T10581] netlink: 'syz.1.644': attribute type 10 has an invalid length. [ 220.477496][T10608] futex_wake_op: syz.1.650 tries to shift op by -1; fix this program [ 220.521221][ T8508] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 220.651496][ T8508] usb 3-1: device descriptor read/64, error -71 [ 220.891504][ T8508] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 221.021014][ T8508] usb 3-1: device descriptor read/64, error -71 [ 221.134005][ T8508] usb usb3-port1: attempt power cycle [ 221.471034][ T8508] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 221.491633][ T8508] usb 3-1: device descriptor read/8, error -71 [ 221.670330][T10620] netlink: 'syz.1.653': attribute type 3 has an invalid length. [ 221.679708][T10620] netlink: 104 bytes leftover after parsing attributes in process `syz.1.653'. [ 221.731010][ T8508] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 221.752026][ T8508] usb 3-1: device descriptor read/8, error -71 [ 221.862803][ T8508] usb usb3-port1: unable to enumerate USB device [ 224.168672][T10649] netlink: 45 bytes leftover after parsing attributes in process `syz.1.664'. [ 224.345179][T10663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.358207][T10663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.008808][T10679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.500955][ T8508] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 225.660748][ T8508] usb 3-1: Using ep0 maxpacket: 16 [ 225.670902][ T8508] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.691032][ T8508] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.706413][ T8508] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 225.721374][ T8508] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 225.740966][ T8508] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.755845][ T8508] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 225.765362][ T8508] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 225.773497][ T8508] usb 3-1: Manufacturer: syz [ 225.783964][ T8508] usb 3-1: config 0 descriptor?? [ 226.071112][ T8508] rc_core: IR keymap rc-hauppauge not found [ 226.077159][ T8508] Registered IR keymap rc-empty [ 226.086489][ T8508] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.112183][ T8508] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.132800][ T8508] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 226.147487][ T8508] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 226.164547][ T8508] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.191036][ T8508] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.211176][ T8508] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.231207][ T8508] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.251015][ T8508] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.271135][ T8508] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.290992][ T8508] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.311021][ T8508] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.330983][ T8508] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.351014][ T8508] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.375732][ T8508] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 226.385078][ T8508] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 226.468360][ T8508] usb 3-1: USB disconnect, device number 81 [ 227.260961][ T8508] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 227.414635][ T8508] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 227.423932][ T8508] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.432056][ T8508] usb 3-1: Product: syz [ 227.436259][ T8508] usb 3-1: Manufacturer: syz [ 227.440978][ T8508] usb 3-1: SerialNumber: syz [ 227.451028][ T8508] usb 3-1: config 0 descriptor?? [ 227.660940][ T8508] hso 3-1:0.0: Failed to find INT IN ep [ 227.667097][ T8508] usb-storage 3-1:0.0: USB Mass Storage device detected [ 227.864950][ T8508] usb 3-1: USB disconnect, device number 82 [ 228.722049][ T8489] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 228.872711][ T8489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 228.885817][ T8489] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 228.894940][ T8489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.903248][ T8489] usb 3-1: Product: syz [ 228.907455][ T8489] usb 3-1: Manufacturer: syz [ 228.912116][ T8489] usb 3-1: SerialNumber: syz [ 228.919798][ T8489] usb 3-1: config 0 descriptor?? [ 228.928574][ T8489] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 229.134693][ T8489] usb 3-1: USB disconnect, device number 83 [ 229.188678][T10779] vxcan1: tx address claim with dlc 0 [ 229.736089][T10782] fuse: Bad value for 'fd' [ 230.021584][ T5947] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 230.174364][ T5947] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 230.183580][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.191943][ T5947] usb 3-1: Product: syz [ 230.196181][ T5947] usb 3-1: Manufacturer: syz [ 230.201029][ T5947] usb 3-1: SerialNumber: syz [ 230.207945][ T5947] usb 3-1: config 0 descriptor?? [ 230.217318][ T5947] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 230.647737][ T5947] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 230.895453][ T5947] usb 3-1: USB disconnect, device number 84 [ 231.528215][T10836] tmpfs: Bad value for 'mpol' [ 232.661401][T10868] random: crng reseeded on system resumption [ 232.703663][T10872] netlink: 48 bytes leftover after parsing attributes in process `syz.1.697'. [ 233.328102][T10890] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 236.143849][T10914] netlink: 'syz.2.711': attribute type 1 has an invalid length. [ 236.151801][T10914] netlink: 'syz.2.711': attribute type 3 has an invalid length. [ 236.159986][T10914] netlink: 224 bytes leftover after parsing attributes in process `syz.2.711'. [ 236.530976][ T5947] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 236.683258][ T5947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.693692][ T5947] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.705164][ T5947] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.715096][ T5947] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.721782][ T5947] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 236.731050][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.741840][ T5947] usb 3-1: config 0 descriptor?? [ 236.949778][T10924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.958834][T10924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.999625][ T5947] usbhid 3-1:0.0: can't add hid device: -71 [ 237.007073][ T5947] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 237.019304][ T5947] usb 3-1: USB disconnect, device number 86 [ 237.381546][ T5947] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 237.532740][ T5947] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 237.542994][ T5947] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 237.553553][ T5947] usb 3-1: config 1 interface 0 has no altsetting 0 [ 237.562819][ T5947] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 237.571957][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.579949][ T5947] usb 3-1: Product: syz [ 237.584308][ T5947] usb 3-1: Manufacturer: syz [ 237.588926][ T5947] usb 3-1: SerialNumber: syz [ 237.600744][T10954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 237.608467][T10954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 238.627066][ T5947] (unnamed net_device) (uninitialized): Assigned a random MAC address: 8e:28:af:30:c0:97 [ 238.647677][ T5947] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 238.838597][T10954] netlink: 'syz.2.717': attribute type 21 has an invalid length. [ 238.846968][T10954] netlink: 388 bytes leftover after parsing attributes in process `syz.2.717'. [ 238.874832][ T5947] usb 3-1: USB disconnect, device number 87 [ 239.793188][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 239.953432][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 239.965016][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 239.976079][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 239.985907][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 239.997446][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 240.010368][ T9] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 240.019499][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.027722][ T9] usb 3-1: Product: syz [ 240.032114][ T9] usb 3-1: Manufacturer: syz [ 240.036754][ T9] usb 3-1: SerialNumber: syz [ 240.051686][ T9] usb 3-1: config 0 descriptor?? [ 240.061269][ T9] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 240.269141][ T9] usb 3-1: USB disconnect, device number 88 [ 241.161099][ T8489] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 241.320968][ T8489] usb 3-1: Using ep0 maxpacket: 32 [ 241.330260][ T8489] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 241.339505][ T8489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.347619][ T8489] usb 3-1: Product: syz [ 241.351977][ T8489] usb 3-1: Manufacturer: syz [ 241.356605][ T8489] usb 3-1: SerialNumber: syz [ 241.567300][ T8489] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 241.571225][T11091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.733'. [ 241.585415][ T8489] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 241.604690][ T8489] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 241.649150][T11101] netlink: 'syz.1.737': attribute type 6 has an invalid length. [ 241.670996][T11101] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.737'. [ 241.771455][ T8508] usb 3-1: USB disconnect, device number 89 [ 241.785420][T11104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.738'. [ 241.794871][ T8508] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 241.820078][T11103] overlayfs: failed to clone upperpath [ 241.838795][ T8508] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 241.848969][ T8508] visor 3-1:1.0: device disconnected [ 242.468702][T11130] overlayfs: failed to clone lowerpath [ 242.712618][ T8489] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 242.882805][ T8489] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.893039][ T8489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 242.903077][ T8489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 242.912944][ T8489] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 242.925866][ T8489] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 242.934981][ T8489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.945551][ T8489] usb 3-1: config 0 descriptor?? [ 243.005101][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.742'. [ 243.156799][ T8489] usb 3-1: USB disconnect, device number 90 [ 244.860981][ T5947] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 245.010902][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 245.018302][ T5947] usb 3-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.034585][ T5947] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.042823][ T5947] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 245.054864][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.072156][ T5947] usb 3-1: config 0 descriptor?? [ 245.098777][T11180] overlayfs: failed to clone upperpath [ 245.134513][T11178] netlink: 'syz.1.752': attribute type 83 has an invalid length. [ 245.804900][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 246.358341][T11190] netlink: 6 bytes leftover after parsing attributes in process `syz.1.756'. [ 246.417406][T11192] overlayfs: failed to resolve './file1': -2 [ 247.036773][T11195] lo speed is unknown, defaulting to 1000 [ 247.044243][T11195] lo speed is unknown, defaulting to 1000 [ 247.056593][T11195] lo speed is unknown, defaulting to 1000 [ 247.086423][T11195] infiniband yz2: RDMA CMA: cma_listen_on_dev, error -98 [ 247.125652][T11195] lo speed is unknown, defaulting to 1000 [ 247.134507][T11195] lo speed is unknown, defaulting to 1000 [ 247.144196][T11195] lo speed is unknown, defaulting to 1000 [ 247.155515][T11195] lo speed is unknown, defaulting to 1000 [ 247.484185][T11204] netlink: 'syz.1.759': attribute type 21 has an invalid length. [ 247.493293][T11204] netlink: 13562 bytes leftover after parsing attributes in process `syz.1.759'. [ 247.595440][ T5947] usbhid 3-1:0.0: can't add hid device: -71 [ 247.608598][ T5947] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 247.635993][ T5947] usb 3-1: USB disconnect, device number 91 [ 247.649638][T11216] 9pnet: p9_errstr2errno: server reported unknown error ile0 [ 247.916532][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 248.023932][T11229] wg0 speed is unknown, defaulting to 1000 [ 248.031247][T11229] lo speed is unknown, defaulting to 1000 [ 248.401300][ T5855] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 248.586077][ T5855] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.597442][ T5855] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.610925][ T5855] usb 3-1: config 0 interface 0 has no altsetting 0 [ 248.617632][ T5855] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 248.630084][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.641311][ T5855] usb 3-1: config 0 descriptor?? [ 249.060591][ T5855] lenovo 0003:17EF:60EE.0014: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.2-1/input0 [ 249.251050][ T5855] lenovo 0003:17EF:60EE.0014: Failed to switch middle button: -71 [ 249.275844][ T5855] lenovo 0003:17EF:60EE.0014: Fn-lock setting failed: -71 [ 249.287115][ T5855] lenovo 0003:17EF:60EE.0014: Sensitivity setting failed: -71 [ 249.308508][ T5855] usb 3-1: USB disconnect, device number 92 [ 250.181935][T11309] netlink: 'syz.1.774': attribute type 16 has an invalid length. [ 250.190950][T11309] netlink: 48 bytes leftover after parsing attributes in process `syz.1.774'. [ 250.205343][T11310] netlink: 'syz.1.774': attribute type 16 has an invalid length. [ 250.213266][T11310] netlink: 48 bytes leftover after parsing attributes in process `syz.1.774'. [ 250.561093][ T5855] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 250.713125][ T5855] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.723429][ T5855] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.734691][ T5855] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.745907][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.754327][ T5855] usb 3-1: Product: syz [ 250.758511][ T5855] usb 3-1: Manufacturer: syz [ 250.763214][ T5855] usb 3-1: SerialNumber: syz [ 250.907908][T11325] netlink: 'syz.1.777': attribute type 4 has an invalid length. [ 250.938236][ T122] lo speed is unknown, defaulting to 1000 [ 250.946266][ T122] yz2: Port: 1 Link DOWN [ 251.018258][T11314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.027819][T11314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.039560][ T5855] usb 3-1: 0:2 : does not exist [ 251.054317][ T5855] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 251.082186][ T5855] usb 3-1: USB disconnect, device number 93 [ 251.115773][T10958] udevd[10958]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.880967][ T5855] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 252.011325][ T5855] usb 3-1: device descriptor read/64, error -71 [ 252.250975][ T5855] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 252.381129][ T5855] usb 3-1: device descriptor read/64, error -71 [ 252.491217][ T5855] usb usb3-port1: attempt power cycle [ 252.831074][ T5855] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 252.863222][ T5855] usb 3-1: device descriptor read/8, error -71 [ 253.100991][ T5855] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 253.121683][ T5855] usb 3-1: device descriptor read/8, error -71 [ 253.231651][ T5855] usb usb3-port1: unable to enumerate USB device [ 254.826021][T11408] netlink: 'syz.1.792': attribute type 41 has an invalid length. [ 255.021003][ T122] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 255.171048][ T122] usb 3-1: Using ep0 maxpacket: 16 [ 255.178081][ T122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.189173][ T122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.199009][ T122] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 255.208183][ T122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.218674][ T122] usb 3-1: config 0 descriptor?? [ 255.479992][ T122] usbhid 3-1:0.0: can't add hid device: -71 [ 255.501016][ T122] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 255.512044][ T122] usb 3-1: USB disconnect, device number 98 [ 255.707184][T11422] wg0 speed is unknown, defaulting to 1000 [ 255.714523][T11422] lo speed is unknown, defaulting to 1000 [ 259.871063][ T8489] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 260.001010][ T8489] usb 3-1: device descriptor read/64, error -71 [ 260.242667][ T8489] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 260.293253][T11517] sctp: [Deprecated]: syz.1.816 (pid 11517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.293253][T11517] Use struct sctp_sack_info instead [ 260.381006][ T8489] usb 3-1: device descriptor read/64, error -71 [ 260.491584][ T8489] usb usb3-port1: attempt power cycle [ 260.841216][ T8489] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 260.870933][ T8489] usb 3-1: device descriptor read/8, error -71 [ 260.984318][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.990755][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.121113][ T8489] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 261.143085][ T8489] usb 3-1: device descriptor read/8, error -71 [ 261.251329][ T8489] usb usb3-port1: unable to enumerate USB device [ 262.790078][T11545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.800374][T11545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.814047][T11545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.824631][T11545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.070971][ T8489] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 263.220979][ T8489] usb 3-1: Using ep0 maxpacket: 16 [ 263.230501][ T8489] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 263.241459][ T8489] usb 3-1: config 1 interface 0 has no altsetting 0 [ 263.250506][ T8489] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 263.259919][ T8489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.268144][ T8489] usb 3-1: Product: 禰레ꀁ棓嫁ꭐェ劌赆삢ཪｿ݈帪캲眄悔뒺倍髡褗榻⪮㊹竤ꃯ聰ﰩ௼悮島䬦籆娊ꍭ [ 263.282807][ T8489] usb 3-1: Manufacturer: Љ [ 263.287364][ T8489] usb 3-1: SerialNumber: э [ 263.295799][T11544] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 263.531617][ T8489] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 103 if 0 alt 3 proto 3 vid 0x0525 pid 0xA4A8 [ 263.557615][ T8489] usb 3-1: USB disconnect, device number 103 [ 263.592834][ T8489] usblp0: removed [ 263.603936][T11574] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 263.616370][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 263.693906][T11580] netlink: 100 bytes leftover after parsing attributes in process `syz.1.828'. [ 264.571004][ T122] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 264.731012][ T122] usb 3-1: Using ep0 maxpacket: 32 [ 264.737748][ T122] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 264.749936][ T122] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 264.759196][ T122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.767697][ T122] usb 3-1: Product: syz [ 264.771982][ T122] usb 3-1: Manufacturer: syz [ 264.776617][ T122] usb 3-1: SerialNumber: syz [ 264.783969][ T122] usb 3-1: config 0 descriptor?? [ 264.789856][T11591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 264.800359][ T122] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 265.004266][T11591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.017315][T11591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.368816][ T122] usb 3-1: USB disconnect, device number 104 [ 267.386877][T11645] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 267.396750][T11645] netlink: 'syz.2.843': attribute type 1 has an invalid length. [ 267.465670][T11661] udevd[11661]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.522221][T11665] 9pnet_fd: Insufficient options for proto=fd [ 267.840975][ T122] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 267.862779][T11670] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 267.873183][T11670] overlayfs: missing 'lowerdir' [ 267.883238][T11670] overlayfs: failed to clone lowerpath [ 267.889992][T11670] overlayfs: failed to clone upperpath [ 268.003210][ T122] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 268.012513][ T122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.024789][ T122] usb 3-1: config 0 descriptor?? [ 268.233012][ T122] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 268.433901][ T122] [drm:udl_init] *ERROR* Selecting channel failed [ 268.464605][ T122] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 268.473435][ T122] [drm] Initialized udl on minor 2 [ 268.479883][ T122] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 268.490403][ T122] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 268.499883][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 268.510445][ T122] usb 3-1: USB disconnect, device number 105 [ 268.517358][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 269.143590][T11694] netlink: 'syz.2.848': attribute type 5 has an invalid length. [ 269.510974][ T122] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 269.666366][ T122] usb 3-1: unable to get BOS descriptor or descriptor too short [ 269.675911][ T122] usb 3-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.692198][ T122] usb 3-1: config 1 interface 0 has no altsetting 0 [ 269.703919][ T122] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.40 [ 269.721705][ T122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.741609][ T122] usb 3-1: Product: syz [ 269.745835][ T122] usb 3-1: Manufacturer: syz [ 269.750457][ T122] usb 3-1: SerialNumber: syz [ 269.973109][ T122] usbhid 3-1:1.0: can't add hid device: -71 [ 269.993548][ T122] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 270.009894][ T122] usb 3-1: USB disconnect, device number 106 [ 270.589915][ T30] audit: type=1326 audit(1757229822.080:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11710 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a5f8ebe9 code=0x7fc00000 [ 270.643460][ T30] audit: type=1326 audit(1757229822.080:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11710 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6a5f8ebe9 code=0x7fc00000 [ 270.752847][ T30] audit: type=1326 audit(1757229822.080:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11710 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a5f8ebe9 code=0x7fc00000 [ 270.800529][ T30] audit: type=1326 audit(1757229822.080:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11710 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a5f8ebe9 code=0x7fc00000 [ 270.827994][ T30] audit: type=1326 audit(1757229822.080:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11710 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a5f8ebe9 code=0x7fc00000 [ 270.850245][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.898216][ T30] audit: type=1326 audit(1757229822.080:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11710 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a5f8ebe9 code=0x7fc00000 [ 270.921420][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.856'. [ 270.931511][ T30] audit: type=1326 audit(1757229822.080:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11710 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a5f8ebe9 code=0x7fc00000 [ 270.955159][ T30] audit: type=1326 audit(1757229822.090:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11710 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a5f8ebe9 code=0x7fc00000 [ 270.978787][T11733] veth1_macvtap: left promiscuous mode [ 271.240965][ T5947] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 271.404828][ T5947] usb 3-1: unable to get BOS descriptor or descriptor too short [ 271.416587][ T5947] usb 3-1: config 10 has an invalid interface number: 81 but max is 0 [ 271.425501][ T5947] usb 3-1: config 10 has no interface number 0 [ 271.437150][ T5947] usb 3-1: config 10 interface 81 has no altsetting 0 [ 273.914440][ T5947] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 273.926264][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.944250][ T5947] usb 3-1: can't set config #10, error -71 [ 273.964155][ T5947] usb 3-1: USB disconnect, device number 107 [ 274.260990][ T5947] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 274.405523][T11788] netlink: 'syz.1.869': attribute type 11 has an invalid length. [ 274.413660][T11788] netlink: 168 bytes leftover after parsing attributes in process `syz.1.869'. [ 274.428345][ T5947] usb 3-1: config 7 interface 0 has no altsetting 0 [ 274.438552][ T5947] usb 3-1: string descriptor 0 read error: -22 [ 274.445046][ T5947] usb 3-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 274.454338][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.473993][ T5947] usb 3-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 274.483005][ T5947] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 274.493904][ T5947] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 274.502534][ T5947] usb 3-1: media controller created [ 274.523240][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.671433][ T5947] usb 3-1: USB disconnect, device number 108 [ 275.052724][T11810] netlink: 92 bytes leftover after parsing attributes in process `syz.1.871'. [ 275.670863][ T8489] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 275.835338][ T8489] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 275.844696][ T8489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.853066][ T8489] usb 3-1: Product: syz [ 275.857253][ T8489] usb 3-1: Manufacturer: syz [ 275.865992][ T8489] usb 3-1: SerialNumber: syz [ 275.879926][ T8489] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 275.918450][ T5855] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 276.076795][T11840] team_slave_1: entered promiscuous mode [ 276.412370][ T8489] usb 3-1: USB disconnect, device number 109 [ 276.545964][T11858] batadv_slave_1: entered promiscuous mode [ 276.963286][T11854] batadv_slave_1: left promiscuous mode [ 276.995275][ T5855] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 277.013293][ T5855] ath9k_htc: Failed to initialize the device [ 277.032432][ T8489] usb 3-1: ath9k_htc: USB layer deinitialized [ 277.193803][T11891] netlink: 'syz.2.886': attribute type 10 has an invalid length. [ 277.208015][T11891] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.217766][T11891] bond0: (slave team0): Enslaving as an active interface with an up link [ 277.627000][T11882] Process accounting resumed [ 277.746249][T11899] siw: device registration error -23 [ 278.100322][ T8489] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 278.253081][ T8489] usb 3-1: config 9 has an invalid interface number: 252 but max is 0 [ 278.261657][ T8489] usb 3-1: config 9 has no interface number 0 [ 278.267861][ T8489] usb 3-1: config 9 interface 252 has no altsetting 0 [ 278.276988][ T8489] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice=dd.7c [ 278.286445][ T8489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.294816][ T8489] usb 3-1: Product: syz [ 278.299303][ T8489] usb 3-1: Manufacturer: syz [ 278.303990][ T8489] usb 3-1: SerialNumber: syz [ 278.467873][T11919] tipc: Started in network mode [ 278.474247][T11919] tipc: Node identity ac14140f, cluster identity 4711 [ 278.481713][T11919] tipc: New replicast peer: 255.255.255.255 [ 278.488311][T11919] tipc: Enabled bearer , priority 10 [ 278.535166][ T8489] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.252/input/input16 [ 278.552532][ T5218] bcm5974 3-1:9.252: could not read from device [ 278.572032][ T5218] bcm5974 3-1:9.252: could not read from device [ 278.575963][ T8489] usb 3-1: USB disconnect, device number 110 [ 278.586586][ T5218] bcm5974 3-1:9.252: could not read from device [ 278.605521][ T5218] bcm5974 3-1:9.252: could not read from device [ 278.797415][T11937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'. [ 279.596033][T11962] capability: warning: `syz.1.904' uses 32-bit capabilities (legacy support in use) [ 279.599830][ T8489] tipc: Node number set to 2886997007 [ 279.903585][T11977] fuse: Bad value for 'fd' [ 280.516404][T11984] netlink: 32 bytes leftover after parsing attributes in process `syz.1.908'. [ 284.987295][T12012] netlink: 'syz.1.917': attribute type 10 has an invalid length. [ 291.035089][T12063] netlink: 'syz.1.935': attribute type 4 has an invalid length. [ 291.049373][T12063] netlink: 'syz.1.935': attribute type 4 has an invalid length. [ 291.061701][ T5855] lo speed is unknown, defaulting to 1000 [ 291.068022][ T5855] yz2: Port: 1 Link ACTIVE [ 291.657618][T12067] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.937'. [ 295.123640][T12095] netlink: 'syz.1.947': attribute type 2 has an invalid length. [ 296.416585][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 299.383735][T12146] netlink: 'syz.1.964': attribute type 29 has an invalid length. [ 299.394360][T12149] netlink: 'syz.1.964': attribute type 29 has an invalid length. [ 300.866073][ T5855] IPVS: starting estimator thread 0... [ 300.868298][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 300.880730][T12159] openvswitch: netlink: Flow actions attr not present in new flow. [ 300.928554][T12162] delete_channel: no stack [ 300.933228][T12162] delete_channel: no stack [ 300.955419][T12160] IPVS: using max 26 ests per chain, 62400 per kthread [ 301.718000][T12165] netlink: 180 bytes leftover after parsing attributes in process `syz.1.970'. [ 303.692968][T12190] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.978'. [ 303.704013][T12190] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 303.715441][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'. [ 303.724956][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 303.772573][T12192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.979'. [ 303.869153][T12198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.981'. [ 303.881010][T12198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.981'. [ 303.937473][T12200] 9p filesystem being mounted at /496/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 304.078125][T12208] overlayfs: failed to clone upperpath [ 304.087503][T12208] netlink: 'syz.1.984': attribute type 12 has an invalid length. [ 304.688742][T12210] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:3328 [ 308.941019][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'. [ 310.940624][T12264] netlink: 'syz.1.998': attribute type 30 has an invalid length. [ 311.089143][T12271] overlayfs: failed to resolve './file0': -2 [ 313.679268][T12289] wg0 speed is unknown, defaulting to 1000 [ 313.686534][T12289] lo speed is unknown, defaulting to 1000 [ 314.556220][T12343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1009'. [ 314.719387][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1013'. [ 315.367141][T12364] netlink: 'syz.1.1016': attribute type 10 has an invalid length. [ 315.643740][T12375] netlink: 'syz.1.1019': attribute type 21 has an invalid length. [ 315.651783][T12375] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1019'. [ 315.923549][T12390] : renamed from wg2 (while UP) [ 317.556634][T12433] U9: renamed from lo (while UP) [ 318.202389][T12440] 9pnet_fd: Insufficient options for proto=fd [ 319.066551][T12461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1035'. [ 319.076109][T12460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1035'. [ 321.065362][T12489] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20000 [ 322.241011][T12497] cgroup: release_agent respecified [ 322.422262][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.428707][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.793607][T12528] fuse: Bad value for 'fd' [ 324.419814][T12534] GUP no longer grows the stack in syz.1.1066 (12534): 200000005000-200000008000 (200000004000) [ 324.431116][T12534] CPU: 0 UID: 0 PID: 12534 Comm: syz.1.1066 Not tainted syzkaller #0 PREEMPT(full) [ 324.431146][T12534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.431167][T12534] Call Trace: [ 324.431176][T12534] [ 324.431185][T12534] dump_stack_lvl+0x189/0x250 [ 324.431218][T12534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.431239][T12534] ? __pfx__printk+0x10/0x10 [ 324.431270][T12534] ? find_vma+0xe7/0x160 [ 324.431318][T12534] fixup_user_fault+0x661/0x720 [ 324.431378][T12534] fault_in_user_writeable+0x72/0xe0 [ 324.431412][T12534] futex_lock_pi+0x773/0xa90 [ 324.431446][T12534] ? __pfx_futex_lock_pi+0x10/0x10 [ 324.431503][T12534] ? __pfx_futex_wake_mark+0x10/0x10 [ 324.431545][T12534] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 324.431581][T12534] do_futex+0x292/0x420 [ 324.431621][T12534] ? __pfx_do_futex+0x10/0x10 [ 324.431656][T12534] ? __vm_munmap+0x2c1/0x380 [ 324.431697][T12534] __se_sys_futex+0x36f/0x400 [ 324.431740][T12534] ? __pfx___se_sys_futex+0x10/0x10 [ 324.431782][T12534] ? __x64_sys_futex+0x21/0xf0 [ 324.431816][T12534] do_syscall_64+0xfa/0xfa0 [ 324.431831][T12534] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.431845][T12534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.431861][T12534] ? clear_bhb_loop+0x60/0xb0 [ 324.431879][T12534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.431895][T12534] RIP: 0033:0x7fb6a5f8ebe9 [ 324.431917][T12534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.431932][T12534] RSP: 002b:00007fb6a6dc8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 324.431952][T12534] RAX: ffffffffffffffda RBX: 00007fb6a61c5fa0 RCX: 00007fb6a5f8ebe9 [ 324.431964][T12534] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 324.431974][T12534] RBP: 00007fb6a6011e19 R08: 0000000000000000 R09: 0000000000000000 [ 324.431989][T12534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.431999][T12534] R13: 00007fb6a61c6038 R14: 00007fb6a61c5fa0 R15: 00007ffc2630d168 [ 324.432024][T12534] [ 326.242286][T12540] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1069'. [ 330.383340][T12551] overlayfs: failed to clone upperpath [ 330.953942][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 331.098846][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 338.157374][T12604] bridge0: entered promiscuous mode [ 338.162664][T12604] bridge0: entered allmulticast mode [ 338.258290][T12604] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.265660][T12604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.273253][T12604] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.280502][T12604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.400177][T12604] pim6reg: entered allmulticast mode [ 345.266862][T12579] syz.1.1079 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 345.358113][T12579] CPU: 0 UID: 0 PID: 12579 Comm: syz.1.1079 Not tainted syzkaller #0 PREEMPT(full) [ 345.358144][T12579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.358159][T12579] Call Trace: [ 345.358168][T12579] [ 345.358177][T12579] dump_stack_lvl+0x189/0x250 [ 345.358209][T12579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.358230][T12579] ? __pfx__printk+0x10/0x10 [ 345.358281][T12579] dump_header+0xd3/0x480 [ 345.358307][T12579] oom_kill_process+0x387/0x920 [ 345.358344][T12579] out_of_memory+0xf09/0x12a0 [ 345.358389][T12579] ? __pfx_out_of_memory+0x10/0x10 [ 345.358430][T12579] mem_cgroup_out_of_memory+0x145/0x240 [ 345.358463][T12579] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 345.358507][T12579] ? _raw_spin_unlock+0x28/0x50 [ 345.358538][T12579] ? memcg1_oom_prepare+0x37f/0x450 [ 345.358564][T12579] try_charge_memcg+0xdff/0x1290 [ 345.358610][T12579] ? __pfx_try_charge_memcg+0x10/0x10 [ 345.358635][T12579] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 345.358676][T12579] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 345.358713][T12579] charge_memcg+0x9f/0x180 [ 345.358740][T12579] __mem_cgroup_charge+0x25/0x80 [ 345.358764][T12579] filemap_add_folio+0x153/0x540 [ 345.358800][T12579] __filemap_get_folio+0x4f6/0xaf0 [ 345.358841][T12579] filemap_fault+0x94c/0x12b0 [ 345.358893][T12579] ? __pfx_filemap_fault+0x10/0x10 [ 345.358928][T12579] ? __pfx_filemap_map_pages+0x10/0x10 [ 345.358961][T12579] ? __handle_mm_fault+0x2789/0x5400 [ 345.358994][T12579] __do_fault+0x135/0x390 [ 345.359025][T12579] __handle_mm_fault+0x35e3/0x5400 [ 345.359067][T12579] ? __pfx___handle_mm_fault+0x10/0x10 [ 345.359118][T12579] ? follow_page_pte+0x7e2/0x13e0 [ 345.359152][T12579] handle_mm_fault+0x40a/0x8e0 [ 345.359186][T12579] __get_user_pages+0x1699/0x2ce0 [ 345.359281][T12579] get_dump_page+0x1ac/0x3f0 [ 345.359319][T12579] ? __pfx_get_dump_page+0x10/0x10 [ 345.359355][T12579] ? dump_user_range+0x19e/0xc90 [ 345.359384][T12579] ? down_read_killable+0x1d1/0x350 [ 345.359408][T12579] ? iov_iter_bvec+0xb8/0x180 [ 345.359447][T12579] dump_user_range+0x1de/0xc90 [ 345.359492][T12579] ? __pfx_dump_user_range+0x10/0x10 [ 345.359520][T12579] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 345.359555][T12579] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 345.359593][T12579] ? dump_emit+0xa6/0xe0 [ 345.359618][T12579] ? elf_core_dump+0x2cd0/0x3960 [ 345.359653][T12579] elf_core_dump+0x3369/0x3960 [ 345.359708][T12579] ? __pfx_elf_core_dump+0x10/0x10 [ 345.359742][T12579] ? kasan_save_track+0x4f/0x80 [ 345.359762][T12579] ? kasan_save_track+0x3e/0x80 [ 345.359782][T12579] ? __kasan_kmalloc+0x93/0xb0 [ 345.359803][T12579] ? __kvmalloc_node_noprof+0x5cd/0x910 [ 345.359828][T12579] ? coredump_write+0x343/0x1900 [ 345.359861][T12579] ? vfs_coredump+0x1db5/0x2a60 [ 345.359886][T12579] ? get_signal+0x1109/0x1340 [ 345.359910][T12579] ? arch_do_signal_or_restart+0x9a/0x750 [ 345.359931][T12579] ? irqentry_exit_to_user_mode+0x81/0x120 [ 345.359952][T12579] ? exc_page_fault+0xab/0x100 [ 345.359982][T12579] ? asm_exc_page_fault+0x26/0x30 [ 345.360060][T12579] ? 0xffffffffff600000 [ 345.360087][T12579] ? up_write+0x1c4/0x420 [ 345.360124][T12579] coredump_write+0x116c/0x1900 [ 345.360177][T12579] ? __pfx_coredump_write+0x10/0x10 [ 345.360216][T12579] ? kfree+0x4d/0x6d0 [ 345.360245][T12579] ? unshare_files+0xa9/0x140 [ 345.360281][T12579] vfs_coredump+0x1db5/0x2a60 [ 345.360337][T12579] ? __pfx_vfs_coredump+0x10/0x10 [ 345.360374][T12579] ? __lock_acquire+0xab9/0xd20 [ 345.360416][T12579] ? __lock_acquire+0xab9/0xd20 [ 345.360449][T12579] ? is_bpf_text_address+0x26/0x2b0 [ 345.360490][T12579] ? is_bpf_text_address+0x26/0x2b0 [ 345.360521][T12579] ? is_bpf_text_address+0x292/0x2b0 [ 345.360546][T12579] ? is_bpf_text_address+0x26/0x2b0 [ 345.360575][T12579] ? kernel_text_address+0xa5/0xe0 [ 345.360598][T12579] ? __kernel_text_address+0xd/0x40 [ 345.360619][T12579] ? unwind_get_return_address+0x4d/0x90 [ 345.360646][T12579] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 345.360679][T12579] ? arch_stack_walk+0xfc/0x150 [ 345.360724][T12579] ? stack_trace_save+0x9c/0xe0 [ 345.360756][T12579] ? __pfx_stack_trace_save+0x10/0x10 [ 345.360792][T12579] ? stack_depot_save_flags+0x40/0x860 [ 345.360829][T12579] ? kasan_save_track+0x4f/0x80 [ 345.360856][T12579] ? kasan_save_track+0x3e/0x80 [ 345.360876][T12579] ? __kasan_save_free_info+0x46/0x50 [ 345.360906][T12579] ? __kasan_slab_free+0x5b/0x80 [ 345.360928][T12579] ? kmem_cache_free+0x19a/0x690 [ 345.360950][T12579] ? get_signal+0xa4c/0x1340 [ 345.360973][T12579] ? arch_do_signal_or_restart+0x9a/0x750 [ 345.360994][T12579] ? irqentry_exit_to_user_mode+0x81/0x120 [ 345.361014][T12579] ? exc_page_fault+0xab/0x100 [ 345.361045][T12579] ? asm_exc_page_fault+0x26/0x30 [ 345.361131][T12579] ? _raw_spin_unlock_irq+0x23/0x50 [ 345.361163][T12579] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.361188][T12579] get_signal+0x1109/0x1340 [ 345.361239][T12579] arch_do_signal_or_restart+0x9a/0x750 [ 345.361272][T12579] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 345.361293][T12579] ? __bad_area_nosemaphore+0x3fb/0x780 [ 345.361337][T12579] ? local_irq_enable_exit_to_user+0x5/0x10 [ 345.361368][T12579] irqentry_exit_to_user_mode+0x81/0x120 [ 345.361392][T12579] exc_page_fault+0xab/0x100 [ 345.361429][T12579] asm_exc_page_fault+0x26/0x30 [ 345.361449][T12579] RIP: 0033:0x7fb6a5e4f927 [ 345.361469][T12579] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 345.361489][T12579] RSP: 002b:00007fb6a6d67120 EFLAGS: 00010202 [ 345.361509][T12579] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb6a5f8ebe9 [ 345.361524][T12579] RDX: 00007fb6a6d67140 RSI: 00007fb6a6d67270 RDI: 000000000000000b [ 345.361538][T12579] RBP: 00007fb6a6011e19 R08: 0000000000000000 R09: 0000000000000000 [ 345.361552][T12579] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 345.361565][T12579] R13: 00007fb6a61c6218 R14: 00007fb6a61c6180 R15: 00007ffc2630d168 [ 345.361604][T12579] [ 345.361627][T12579] memory: usage 307200kB, limit 307200kB, failcnt 30831 [ 345.954717][T12579] memory+swap: usage 432188kB, limit 9007199254740988kB, failcnt 0 [ 345.964868][T12579] kmem: usage 7188kB, limit 9007199254740988kB, failcnt 0 [ 345.972015][T12579] Memory cgroup stats for /syz1: [ 345.972412][T12579] cache 306933760 [ 345.981112][T12579] rss 278528 [ 345.984441][T12579] rss_huge 0 [ 345.987672][T12579] shmem 243888128 [ 345.991302][T12579] mapped_file 0 [ 345.994892][T12579] dirty 0 [ 345.997848][T12579] writeback 0 [ 346.001130][T12579] workingset_refault_anon 43 [ 346.006577][T12579] workingset_refault_file 9464 [ 346.011351][T12579] swap 127987712 [ 346.014956][T12579] swapcached 0 [ 346.018341][T12579] pgpgin 234660 [ 346.021794][T12579] pgpgout 160168 [ 346.025457][T12579] pgfault 131540 [ 346.029015][T12579] pgmajfault 314 [ 346.032558][T12579] inactive_anon 87728128 [ 346.036872][T12579] active_anon 156438528 [ 346.041042][T12579] inactive_file 16384 [ 346.045122][T12579] active_file 0 [ 346.048681][T12579] unevictable 63029248 [ 346.052823][T12579] hierarchical_memory_limit 314572800 [ 346.058220][T12579] hierarchical_memsw_limit 9223372036854771712 [ 346.064771][T12579] total_cache 306933760 [ 346.068949][T12579] total_rss 278528 [ 346.072772][T12579] total_rss_huge 0 [ 346.076512][T12579] total_shmem 243888128 [ 346.080681][T12579] total_mapped_file 0 [ 346.086559][T12579] total_dirty 0 [ 346.090055][T12579] total_writeback 0 [ 346.093967][T12579] total_workingset_refault_anon 43 [ 346.099101][T12579] total_workingset_refault_file 9464 [ 346.104508][T12579] total_swap 127987712 [ 346.108589][T12579] total_swapcached 0 [ 346.112482][T12579] total_pgpgin 234660 [ 346.116548][T12579] total_pgpgout 160168 [ 346.120632][T12579] total_pgfault 131540 [ 346.124773][T12579] total_pgmajfault 314 [ 346.128856][T12579] total_inactive_anon 87728128 [ 346.133701][T12579] total_active_anon 156438528 [ 346.138410][T12579] total_inactive_file 16384 [ 346.143051][T12579] total_active_file 0 [ 346.147050][T12579] total_unevictable 63029248 [ 346.151653][T12579] anon_cost 0 [ 346.154998][T12579] file_cost 0 [ 346.158296][T12579] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.58,pid=6151,uid=0 [ 346.174322][T12579] Memory cgroup out of memory: Killed process 6151 (syz.1.58) total-vm:101892kB, anon-rss:1176kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 346.244371][T12588] syz.1.1079 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 346.272178][T12588] CPU: 1 UID: 0 PID: 12588 Comm: syz.1.1079 Not tainted syzkaller #0 PREEMPT(full) [ 346.272209][T12588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.272222][T12588] Call Trace: [ 346.272231][T12588] [ 346.272240][T12588] dump_stack_lvl+0x189/0x250 [ 346.272269][T12588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.272291][T12588] ? __pfx__printk+0x10/0x10 [ 346.272342][T12588] dump_header+0xd3/0x480 [ 346.272368][T12588] oom_kill_process+0x387/0x920 [ 346.272404][T12588] out_of_memory+0xf09/0x12a0 [ 346.272447][T12588] ? __pfx_out_of_memory+0x10/0x10 [ 346.272489][T12588] mem_cgroup_out_of_memory+0x145/0x240 [ 346.272522][T12588] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 346.272569][T12588] ? _raw_spin_unlock+0x28/0x50 [ 346.272599][T12588] ? memcg1_oom_prepare+0x37f/0x450 [ 346.272626][T12588] try_charge_memcg+0xdff/0x1290 [ 346.272671][T12588] ? __pfx_try_charge_memcg+0x10/0x10 [ 346.272696][T12588] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 346.272736][T12588] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 346.272773][T12588] charge_memcg+0x9f/0x180 [ 346.272800][T12588] __mem_cgroup_charge+0x25/0x80 [ 346.272831][T12588] filemap_add_folio+0x153/0x540 [ 346.272866][T12588] __filemap_get_folio+0x4f6/0xaf0 [ 346.272907][T12588] filemap_fault+0x94c/0x12b0 [ 346.272950][T12588] ? __pfx_filemap_fault+0x10/0x10 [ 346.272992][T12588] ? __pfx_filemap_map_pages+0x10/0x10 [ 346.273025][T12588] ? __handle_mm_fault+0x2789/0x5400 [ 346.273059][T12588] __do_fault+0x135/0x390 [ 346.273089][T12588] __handle_mm_fault+0x35e3/0x5400 [ 346.273130][T12588] ? __pfx___handle_mm_fault+0x10/0x10 [ 346.273170][T12588] ? follow_page_pte+0x7e2/0x13e0 [ 346.273204][T12588] handle_mm_fault+0x40a/0x8e0 [ 346.273239][T12588] __get_user_pages+0x1699/0x2ce0 [ 346.273316][T12588] get_dump_page+0x1ac/0x3f0 [ 346.273354][T12588] ? __pfx_get_dump_page+0x10/0x10 [ 346.273391][T12588] ? dump_user_range+0x19e/0xc90 [ 346.273421][T12588] ? down_read_killable+0x1d1/0x350 [ 346.273445][T12588] ? iov_iter_bvec+0xb8/0x180 [ 346.273483][T12588] dump_user_range+0x1de/0xc90 [ 346.273529][T12588] ? __pfx_dump_user_range+0x10/0x10 [ 346.273556][T12588] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 346.273591][T12588] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 346.273628][T12588] ? dump_emit+0xa6/0xe0 [ 346.273653][T12588] ? elf_core_dump+0x2cd0/0x3960 [ 346.273688][T12588] elf_core_dump+0x3369/0x3960 [ 346.273742][T12588] ? __pfx_elf_core_dump+0x10/0x10 [ 346.273775][T12588] ? kasan_save_track+0x4f/0x80 [ 346.273796][T12588] ? kasan_save_track+0x3e/0x80 [ 346.273816][T12588] ? __kasan_kmalloc+0x93/0xb0 [ 346.273838][T12588] ? __kvmalloc_node_noprof+0x5cd/0x910 [ 346.273862][T12588] ? coredump_write+0x343/0x1900 [ 346.273888][T12588] ? vfs_coredump+0x1db5/0x2a60 [ 346.273914][T12588] ? get_signal+0x1109/0x1340 [ 346.273937][T12588] ? arch_do_signal_or_restart+0x9a/0x750 [ 346.273958][T12588] ? irqentry_exit_to_user_mode+0x81/0x120 [ 346.273985][T12588] ? exc_page_fault+0xab/0x100 [ 346.274016][T12588] ? asm_exc_page_fault+0x26/0x30 [ 346.274094][T12588] ? 0xffffffffff600000 [ 346.274122][T12588] ? up_write+0x1c4/0x420 [ 346.274159][T12588] coredump_write+0x116c/0x1900 [ 346.274211][T12588] ? __pfx_coredump_write+0x10/0x10 [ 346.274250][T12588] ? kfree+0x4d/0x6d0 [ 346.274278][T12588] ? unshare_files+0xa9/0x140 [ 346.274315][T12588] vfs_coredump+0x1db5/0x2a60 [ 346.274365][T12588] ? __pfx_vfs_coredump+0x10/0x10 [ 346.274394][T12588] ? __lock_acquire+0xab9/0xd20 [ 346.274425][T12588] ? __lock_acquire+0xab9/0xd20 [ 346.274450][T12588] ? is_bpf_text_address+0x26/0x2b0 [ 346.274480][T12588] ? is_bpf_text_address+0x26/0x2b0 [ 346.274504][T12588] ? is_bpf_text_address+0x292/0x2b0 [ 346.274523][T12588] ? is_bpf_text_address+0x26/0x2b0 [ 346.274545][T12588] ? kernel_text_address+0xa5/0xe0 [ 346.274563][T12588] ? __kernel_text_address+0xd/0x40 [ 346.274580][T12588] ? unwind_get_return_address+0x4d/0x90 [ 346.274602][T12588] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 346.274629][T12588] ? arch_stack_walk+0xfc/0x150 [ 346.274684][T12588] ? stack_trace_save+0x9c/0xe0 [ 346.274709][T12588] ? __pfx_stack_trace_save+0x10/0x10 [ 346.274738][T12588] ? stack_depot_save_flags+0x40/0x860 [ 346.274767][T12588] ? kasan_save_track+0x4f/0x80 [ 346.274783][T12588] ? kasan_save_track+0x3e/0x80 [ 346.274798][T12588] ? __kasan_save_free_info+0x46/0x50 [ 346.274822][T12588] ? __kasan_slab_free+0x5b/0x80 [ 346.274839][T12588] ? kmem_cache_free+0x19a/0x690 [ 346.274856][T12588] ? get_signal+0xa4c/0x1340 [ 346.274873][T12588] ? arch_do_signal_or_restart+0x9a/0x750 [ 346.274889][T12588] ? irqentry_exit_to_user_mode+0x81/0x120 [ 346.274905][T12588] ? exc_page_fault+0xab/0x100 [ 346.274929][T12588] ? asm_exc_page_fault+0x26/0x30 [ 346.274999][T12588] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.275024][T12588] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.275043][T12588] get_signal+0x1109/0x1340 [ 346.275082][T12588] arch_do_signal_or_restart+0x9a/0x750 [ 346.275105][T12588] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 346.275122][T12588] ? __bad_area_nosemaphore+0x3fb/0x780 [ 346.275155][T12588] ? local_irq_enable_exit_to_user+0x5/0x10 [ 346.275179][T12588] irqentry_exit_to_user_mode+0x81/0x120 [ 346.275197][T12588] exc_page_fault+0xab/0x100 [ 346.275226][T12588] asm_exc_page_fault+0x26/0x30 [ 346.275241][T12588] RIP: 0033:0x7fb6a5e4f927 [ 346.275257][T12588] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 346.275272][T12588] RSP: 002b:00007fb6a6d67120 EFLAGS: 00010202 [ 346.275288][T12588] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb6a5f8ebe9 [ 346.275299][T12588] RDX: 00007fb6a6d67140 RSI: 00007fb6a6d67270 RDI: 000000000000000b [ 346.275311][T12588] RBP: 00007fb6a6011e19 R08: 0000000000000000 R09: 0000000000000000 [ 346.275322][T12588] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 346.275332][T12588] R13: 00007fb6a61c6218 R14: 00007fb6a61c6180 R15: 00007ffc2630d168 [ 346.275361][T12588] [ 346.855508][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.968221][T12588] memory: usage 307200kB, limit 307200kB, failcnt 31427 [ 346.975459][T12588] memory+swap: usage 432032kB, limit 9007199254740988kB, failcnt 0 [ 346.983444][T12588] kmem: usage 7040kB, limit 9007199254740988kB, failcnt 0 [ 346.990602][T12588] Memory cgroup stats for /syz1: [ 346.990898][T12588] cache 307085312 [ 346.999526][T12588] rss 278528 [ 347.002785][T12588] rss_huge 0 [ 347.006002][T12588] shmem 244019200 [ 347.009695][T12588] mapped_file 4096 [ 347.013472][T12588] dirty 0 [ 347.016428][T12588] writeback 0 [ 347.019734][T12588] workingset_refault_anon 43 [ 347.024418][T12588] workingset_refault_file 9722 [ 347.029204][T12588] swap 127827968 [ 347.032796][T12588] swapcached 0 [ 347.036189][T12588] pgpgin 234950 [ 347.039696][T12588] pgpgout 160421 [ 347.043431][T12588] pgfault 131572 [ 347.046997][T12588] pgmajfault 345 [ 347.050556][T12588] inactive_anon 156491776 [ 347.054945][T12588] active_anon 87805952 [ 347.059061][T12588] inactive_file 28672 [ 347.063973][T12588] active_file 0 [ 347.067457][T12588] unevictable 63029248 [ 347.071537][T12588] hierarchical_memory_limit 314572800 [ 347.076990][T12588] hierarchical_memsw_limit 9223372036854771712 [ 347.083306][T12588] total_cache 307085312 [ 347.087486][T12588] total_rss 278528 [ 347.091251][T12588] total_rss_huge 0 [ 347.095028][T12588] total_shmem 244019200 [ 347.099194][T12588] total_mapped_file 4096 [ 347.103493][T12588] total_dirty 0 [ 347.106996][T12588] total_writeback 0 [ 347.110817][T12588] total_workingset_refault_anon 43 [ 347.115990][T12588] total_workingset_refault_file 9722 [ 347.121288][T12588] total_swap 127827968 [ 347.126104][T12588] total_swapcached 0 [ 347.130044][T12588] total_pgpgin 234950 [ 347.134107][T12588] total_pgpgout 160421 [ 347.138195][T12588] total_pgfault 131572 [ 347.142357][T12588] total_pgmajfault 345 [ 347.146446][T12588] total_inactive_anon 156491776 [ 347.151309][T12588] total_active_anon 87805952 [ 347.155991][T12588] total_inactive_file 28672 [ 347.160535][T12588] total_active_file 0 [ 347.164574][T12588] total_unevictable 63029248 [ 347.169180][T12588] anon_cost 0 [ 347.172531][T12588] file_cost 0 [ 347.175863][T12588] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1079,pid=12583,uid=0 [ 347.191231][T12588] Memory cgroup out of memory: Killed process 12583 (syz.1.1079) total-vm:98316kB, anon-rss:1024kB, file-rss:23920kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 348.332350][T12583] syz.1.1079 (12583) used greatest stack depth: 16816 bytes left [ 349.519197][T12627] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1090'. [ 350.236749][T12576] syz.1.1079 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 350.318124][T12576] CPU: 1 UID: 0 PID: 12576 Comm: syz.1.1079 Not tainted syzkaller #0 PREEMPT(full) [ 350.318156][T12576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.318171][T12576] Call Trace: [ 350.318180][T12576] [ 350.318190][T12576] dump_stack_lvl+0x189/0x250 [ 350.318221][T12576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.318243][T12576] ? __pfx__printk+0x10/0x10 [ 350.318294][T12576] dump_header+0xd3/0x480 [ 350.318321][T12576] oom_kill_process+0x387/0x920 [ 350.318357][T12576] out_of_memory+0xf09/0x12a0 [ 350.318402][T12576] ? __pfx_out_of_memory+0x10/0x10 [ 350.318443][T12576] mem_cgroup_out_of_memory+0x145/0x240 [ 350.318476][T12576] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 350.318532][T12576] ? _raw_spin_unlock+0x28/0x50 [ 350.318570][T12576] ? memcg1_oom_prepare+0x37f/0x450 [ 350.318596][T12576] try_charge_memcg+0xdff/0x1290 [ 350.318638][T12576] ? __pfx_try_charge_memcg+0x10/0x10 [ 350.318663][T12576] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 350.318702][T12576] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 350.318738][T12576] charge_memcg+0x9f/0x180 [ 350.318764][T12576] __mem_cgroup_charge+0x25/0x80 [ 350.318787][T12576] filemap_add_folio+0x153/0x540 [ 350.318822][T12576] __filemap_get_folio+0x4f6/0xaf0 [ 350.318861][T12576] filemap_fault+0x94c/0x12b0 [ 350.318903][T12576] ? __pfx_filemap_fault+0x10/0x10 [ 350.318937][T12576] ? __pfx_filemap_map_pages+0x10/0x10 [ 350.318969][T12576] ? __handle_mm_fault+0x2789/0x5400 [ 350.319001][T12576] __do_fault+0x135/0x390 [ 350.319031][T12576] __handle_mm_fault+0x35e3/0x5400 [ 350.319071][T12576] ? __pfx___handle_mm_fault+0x10/0x10 [ 350.319110][T12576] ? follow_page_pte+0x7e2/0x13e0 [ 350.319144][T12576] handle_mm_fault+0x40a/0x8e0 [ 350.319178][T12576] __get_user_pages+0x1699/0x2ce0 [ 350.319253][T12576] get_dump_page+0x1ac/0x3f0 [ 350.319291][T12576] ? __pfx_get_dump_page+0x10/0x10 [ 350.319326][T12576] ? dump_user_range+0x19e/0xc90 [ 350.319354][T12576] ? down_read_killable+0x1d1/0x350 [ 350.319376][T12576] ? iov_iter_bvec+0xb8/0x180 [ 350.319410][T12576] dump_user_range+0x1de/0xc90 [ 350.319453][T12576] ? __pfx_dump_user_range+0x10/0x10 [ 350.319480][T12576] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 350.319532][T12576] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 350.319576][T12576] ? dump_emit+0xa6/0xe0 [ 350.319602][T12576] ? elf_core_dump+0x2cd0/0x3960 [ 350.319637][T12576] elf_core_dump+0x3369/0x3960 [ 350.319692][T12576] ? __pfx_elf_core_dump+0x10/0x10 [ 350.319724][T12576] ? kasan_save_track+0x4f/0x80 [ 350.319745][T12576] ? kasan_save_track+0x3e/0x80 [ 350.319765][T12576] ? __kasan_kmalloc+0x93/0xb0 [ 350.319787][T12576] ? __kvmalloc_node_noprof+0x5cd/0x910 [ 350.319811][T12576] ? coredump_write+0x343/0x1900 [ 350.319837][T12576] ? vfs_coredump+0x1db5/0x2a60 [ 350.319863][T12576] ? get_signal+0x1109/0x1340 [ 350.319886][T12576] ? arch_do_signal_or_restart+0x9a/0x750 [ 350.319907][T12576] ? irqentry_exit_to_user_mode+0x81/0x120 [ 350.319927][T12576] ? exc_page_fault+0xab/0x100 [ 350.319958][T12576] ? asm_exc_page_fault+0x26/0x30 [ 350.320037][T12576] ? 0xffffffffff600000 [ 350.320064][T12576] ? up_write+0x1c4/0x420 [ 350.320102][T12576] coredump_write+0x116c/0x1900 [ 350.320155][T12576] ? __pfx_coredump_write+0x10/0x10 [ 350.320194][T12576] ? kfree+0x4d/0x6d0 [ 350.320223][T12576] ? unshare_files+0xa9/0x140 [ 350.320260][T12576] vfs_coredump+0x1db5/0x2a60 [ 350.320311][T12576] ? __pfx_vfs_coredump+0x10/0x10 [ 350.320346][T12576] ? __lock_acquire+0xab9/0xd20 [ 350.320387][T12576] ? __lock_acquire+0xab9/0xd20 [ 350.320420][T12576] ? is_bpf_text_address+0x26/0x2b0 [ 350.320460][T12576] ? is_bpf_text_address+0x26/0x2b0 [ 350.320492][T12576] ? is_bpf_text_address+0x292/0x2b0 [ 350.320517][T12576] ? is_bpf_text_address+0x26/0x2b0 [ 350.320553][T12576] ? kernel_text_address+0xa5/0xe0 [ 350.320578][T12576] ? __kernel_text_address+0xd/0x40 [ 350.320599][T12576] ? unwind_get_return_address+0x4d/0x90 [ 350.320628][T12576] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 350.320661][T12576] ? arch_stack_walk+0xfc/0x150 [ 350.320706][T12576] ? stack_trace_save+0x9c/0xe0 [ 350.320738][T12576] ? __pfx_stack_trace_save+0x10/0x10 [ 350.320773][T12576] ? stack_depot_save_flags+0x40/0x860 [ 350.320811][T12576] ? kasan_save_track+0x4f/0x80 [ 350.320831][T12576] ? kasan_save_track+0x3e/0x80 [ 350.320851][T12576] ? __kasan_save_free_info+0x46/0x50 [ 350.320881][T12576] ? __kasan_slab_free+0x5b/0x80 [ 350.320903][T12576] ? kmem_cache_free+0x19a/0x690 [ 350.320925][T12576] ? get_signal+0xa4c/0x1340 [ 350.320948][T12576] ? arch_do_signal_or_restart+0x9a/0x750 [ 350.320968][T12576] ? irqentry_exit_to_user_mode+0x81/0x120 [ 350.320988][T12576] ? exc_page_fault+0xab/0x100 [ 350.321018][T12576] ? asm_exc_page_fault+0x26/0x30 [ 350.321106][T12576] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.321139][T12576] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.321163][T12576] get_signal+0x1109/0x1340 [ 350.321217][T12576] arch_do_signal_or_restart+0x9a/0x750 [ 350.321248][T12576] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 350.321269][T12576] ? __bad_area_nosemaphore+0x3fb/0x780 [ 350.321313][T12576] ? local_irq_enable_exit_to_user+0x5/0x10 [ 350.321345][T12576] irqentry_exit_to_user_mode+0x81/0x120 [ 350.321369][T12576] exc_page_fault+0xab/0x100 [ 350.321407][T12576] asm_exc_page_fault+0x26/0x30 [ 350.321426][T12576] RIP: 0033:0x7fb6a5e4f927 [ 350.321447][T12576] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 350.321466][T12576] RSP: 002b:00007fb6a6d67120 EFLAGS: 00010202 [ 350.321486][T12576] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb6a5f8ebe9 [ 350.321505][T12576] RDX: 00007fb6a6d67140 RSI: 00007fb6a6d67270 RDI: 000000000000000b [ 350.321519][T12576] RBP: 00007fb6a6011e19 R08: 0000000000000000 R09: 0000000000000000 [ 350.321532][T12576] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 350.321544][T12576] R13: 00007fb6a61c6218 R14: 00007fb6a61c6180 R15: 00007ffc2630d168 [ 350.321589][T12576] [ 350.902127][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.914809][ T31] INFO: task kworker/0:10:8481 blocked for more than 143 seconds. [ 350.922739][ T31] Not tainted syzkaller #0 [ 350.927877][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.936624][ T31] task:kworker/0:10 state:D stack:26056 pid:8481 tgid:8481 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 350.948742][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 350.955536][ T31] Call Trace: [ 350.958924][ T31] [ 350.961960][ T31] __schedule+0x1798/0x4cc0 [ 350.966547][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 350.972205][ T31] ? __pfx___schedule+0x10/0x10 [ 350.977196][ T31] ? schedule+0x91/0x360 [ 350.981539][ T31] schedule+0x165/0x360 [ 350.985740][ T31] schedule_preempt_disabled+0x13/0x30 [ 350.991268][ T31] __mutex_lock+0x7e6/0x1350 [ 350.995941][ T31] ? __mutex_lock+0x5bb/0x1350 [ 351.000745][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 351.007095][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 351.012193][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 351.017951][ T31] ? process_scheduled_works+0x9ef/0x17b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 351.023786][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 351.027772][T12576] memory: usage 307200kB, limit 307200kB, failcnt 38317 [ 351.029890][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 351.042821][ T31] process_scheduled_works+0xade/0x17b0 [ 351.048442][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.054537][ T31] worker_thread+0x8a0/0xda0 [ 351.061286][ T31] kthread+0x70e/0x8a0 [ 351.065481][ T31] ? __pfx_worker_thread+0x10/0x10 [ 351.070652][ T31] ? __pfx_kthread+0x10/0x10 [ 351.075331][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.080574][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.085845][ T31] ? __pfx_kthread+0x10/0x10 [ 351.090513][ T31] ret_from_fork+0x47c/0x820 [ 351.095168][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 351.100332][ T31] ? __switch_to_asm+0x39/0x70 [ 351.105174][ T31] ? __switch_to_asm+0x33/0x70 [ 351.109966][ T31] ? __pfx_kthread+0x10/0x10 [ 351.114642][ T31] ret_from_fork_asm+0x1a/0x30 [ 351.119458][ T31] [ 351.122571][ T31] INFO: task syz.3.546:9914 blocked for more than 143 seconds. [ 351.130135][ T31] Not tainted syzkaller #0 [ 351.135128][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.143886][ T31] task:syz.3.546 state:D stack:25608 pid:9914 tgid:9914 ppid:5873 task_flags:0x400040 flags:0x00004004 [ 351.156093][ T31] Call Trace: [ 351.159434][ T31] [ 351.162433][ T31] __schedule+0x1798/0x4cc0 [ 351.167009][ T31] ? __lock_acquire+0xab9/0xd20 [ 351.171942][ T31] ? __pfx___schedule+0x10/0x10 [ 351.176851][ T31] ? schedule+0x91/0x360 [ 351.181138][ T31] schedule+0x165/0x360 [ 351.185390][ T31] schedule_preempt_disabled+0x13/0x30 [ 351.190926][ T31] __mutex_lock+0x7e6/0x1350 [ 351.195582][ T31] ? __mutex_lock+0x5bb/0x1350 [ 351.200396][ T31] ? rfkill_unregister+0xc8/0x220 [ 351.205615][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 351.210681][ T31] ? __pfx_device_del+0x10/0x10 [ 351.215621][ T31] rfkill_unregister+0xc8/0x220 [ 351.220534][ T31] nfc_unregister_device+0x96/0x2a0 [ 351.225827][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 351.231643][ T31] virtual_ncidev_close+0x56/0x90 [ 351.236730][ T31] __fput+0x449/0xa70 [ 351.240813][ T31] task_work_run+0x1d1/0x260 [ 351.245490][ T31] ? __pfx_task_work_run+0x10/0x10 [ 351.250640][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 351.256197][ T31] exit_to_user_mode_loop+0xec/0x130 [ 351.261570][ T31] do_syscall_64+0x2bd/0xfa0 [ 351.266188][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.272342][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 351.278527][ T31] ? clear_bhb_loop+0x60/0xb0 [ 351.283736][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.289694][ T31] RIP: 0033:0x7f577238ebe9 [ 351.294229][ T31] RSP: 002b:00007ffce70c53e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 351.302725][ T31] RAX: 0000000000000000 RBX: 00007f57725c7da0 RCX: 00007f577238ebe9 [ 351.308352][T12576] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 351.310748][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 351.326803][ T31] RBP: 00007f57725c7da0 R08: 0000000000000208 R09: 0000001ce70c56df [ 351.334865][ T31] R10: 00007f57725c7cb0 R11: 0000000000000246 R12: 000000000002fe4d [ 351.342937][ T31] R13: 00007f57725c6180 R14: ffffffffffffffff R15: 00007ffce70c5500 [ 351.350966][ T31] [ 351.354090][ T31] INFO: task syz.0.547:9930 blocked for more than 144 seconds. [ 351.361722][ T31] Not tainted syzkaller #0 [ 351.366686][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.375442][ T31] task:syz.0.547 state:D stack:26296 pid:9930 tgid:9929 ppid:5860 task_flags:0x400040 flags:0x00004006 [ 351.387481][ T31] Call Trace: [ 351.390838][ T31] [ 351.393850][ T31] __schedule+0x1798/0x4cc0 [ 351.398413][ T31] ? __lock_acquire+0xab9/0xd20 [ 351.403386][ T31] ? __lock_acquire+0xab9/0xd20 [ 351.408298][ T31] ? __pfx___schedule+0x10/0x10 [ 351.413280][ T31] ? schedule+0x91/0x360 [ 351.417576][ T31] schedule+0x165/0x360 [ 351.421880][ T31] schedule_preempt_disabled+0x13/0x30 [ 351.427388][ T31] __mutex_lock+0x7e6/0x1350 [ 351.432068][ T31] ? __mutex_lock+0x5bb/0x1350 [ 351.436867][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 351.442264][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 351.447339][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.452592][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 351.458566][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.464990][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 351.470750][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 351.475995][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 351.481816][ T31] rfkill_set_block+0x1cf/0x440 [ 351.486715][ T31] rfkill_fop_write+0x44b/0x570 [ 351.491653][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 351.497052][ T31] ? security_file_permission+0x70/0x290 [ 351.502794][ T31] ? rw_verify_area+0x255/0x4d0 [ 351.507700][ T31] ? __lock_acquire+0xab9/0xd20 [ 351.512919][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 351.518341][ T31] vfs_write+0x27b/0xb30 [ 351.522923][ T31] ? __pfx_vfs_write+0x10/0x10 [ 351.527730][ T31] ? __fget_files+0x2a/0x420 [ 351.532436][ T31] ? __fget_files+0x2a/0x420 [ 351.537072][ T31] ? __fget_files+0x3a0/0x420 [ 351.541869][ T31] ? __fget_files+0x2a/0x420 [ 351.546511][ T31] ksys_write+0x145/0x250 [ 351.550887][ T31] ? __pfx_ksys_write+0x10/0x10 [ 351.555950][ T31] ? do_syscall_64+0xbe/0xfa0 [ 351.560661][ T31] do_syscall_64+0xfa/0xfa0 [ 351.565291][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.570524][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.576705][ T31] ? clear_bhb_loop+0x60/0xb0 [ 351.577200][T12576] kmem: usage 6900kB, limit 9007199254740988kB, failcnt 0 [ 351.581463][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.581492][ T31] RIP: 0033:0x7f3300b8ebe9 [ 351.581511][ T31] RSP: 002b:00007f33019e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 351.581538][ T31] RAX: ffffffffffffffda RBX: 00007f3300dc5fa0 RCX: 00007f3300b8ebe9 [ 351.581557][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 351.581574][ T31] RBP: 00007f3300c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 351.581590][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.581606][ T31] R13: 00007f3300dc6038 R14: 00007f3300dc5fa0 R15: 00007fffebffd2d8 [ 351.581645][ T31] [ 351.581713][ T31] [ 351.581713][ T31] Showing all locks held in the system: [ 351.581728][ T31] 1 lock held by khungtaskd/31: [ 351.581743][ T31] #0: ffffffff8e53cf20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 351.673985][T12576] Memory cgroup stats for /syz1 [ 351.681280][ T31] 2 locks held by getty/5624: [ 351.690942][ T31] #0: ffff88814de9c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 351.721242][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 351.734023][T12576] : [ 351.734179][T12576] cache 307200000 [ 351.740281][T12576] rss 8192 [ 351.741197][ T31] 3 locks held by kworker/1:3/5855: [ 351.748528][ T31] #0: ffff88801a871548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 351.761167][ T31] #1: ffffc90003fffba0 ((work_completion)(&rfkill->uevent_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 351.781175][ T31] #2: ffffffff8fc2c588 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_uevent_work+0x1d/0xa0 [ 351.801239][ T31] 3 locks held by kworker/0:10/8481: [ 351.806607][ T31] #0: ffff88801a871548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 351.817709][ T31] #1: ffffc9001a83fba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 351.841183][ T31] #2: ffffffff8fc2c588 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 351.852772][ T31] 2 locks held by kworker/u8:13/9701: [ 351.858272][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 351.868365][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 351.877411][ T31] 2 locks held by syz.1.535/9825: [ 351.891167][ T31] 2 locks held by syz.3.546/9914: [ 351.896261][ T31] #0: ffff888026312100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 351.906165][ T31] #1: ffffffff8fc2c588 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 351.906815][T12576] rss_huge 0 [ 351.916370][ T31] 2 locks held by syz.0.547/9930: [ 351.916389][ T31] #0: ffffffff8fc2c588 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 351.916451][ T31] #1: ffff888026312100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 351.916517][ T31] 2 locks held by syz.1.567/10056: [ 351.916532][ T31] 2 locks held by syz-executor/10397: [ 351.916546][ T31] #0: ffff88801eae4118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 351.916611][ T31] #1: ffffffff8fc2c588 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 351.916683][ T31] 2 locks held by syz-executor/10402: [ 351.916697][ T31] #0: ffff88801a960918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 351.997000][ T31] #1: ffffffff8fc2c588 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 352.007072][ T31] 2 locks held by syz.1.782/11367: [ 352.014821][ T31] 2 locks held by syz-executor/11743: [ 352.020230][ T31] #0: ffff88807cdf2118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 352.038277][ T31] #1: ffffffff8fc2c588 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 352.048472][ T31] 2 locks held by syz-executor/11745: [ 352.053937][ T31] #0: ffff888025fff918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 352.071096][ T31] #1: ffffffff8fc2c588 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 352.086930][ T31] 3 locks held by syz.2.906/11968: [ 352.091126][T12576] shmem 244088832 [ 352.093193][ T31] #0: ffffffff8edd8848 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 352.096091][T12576] mapped_file 0 [ 352.107567][ T31] #1: ffff88805275f100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 352.121426][ T31] #2: ffffffff8fc2c588 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 352.141109][ T31] 1 lock held by syz.2.906/11976: [ 352.146199][ T31] #0: ffffffff8edd8848 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 352.154885][ T31] 1 lock held by syz.2.906/11977: [ 352.159942][ T31] #0: ffffffff8edd8848 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 352.168527][ T31] 1 lock held by syz-executor/12096: [ 352.174029][ T31] #0: ffffffff8edd8848 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 352.182619][ T31] 1 lock held by syz-executor/12564: [ 352.187971][ T31] #0: ffffffff8edd8848 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 352.196545][ T31] 1 lock held by syz-executor/12565: [ 352.201904][ T31] #0: ffffffff8edd8848 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 352.207231][T12576] dirty 0 [ 352.210433][ T31] 10 locks held by syz.1.1079/12576: [ 352.218720][ T31] 1 lock held by syz.1.1079/12578: [ 352.223988][ T31] 1 lock held by syz.1.1079/12579: [ 352.229124][ T31] 1 lock held by syz.1.1079/12580: [ 352.234765][ T31] 3 locks held by syz.1.1079/12585: [ 352.240107][ T31] 2 locks held by syz.1.1079/12586: [ 352.245849][ T31] [ 352.248277][ T31] ============================================= [ 352.248277][ T31] [ 352.262162][ T31] NMI backtrace for cpu 1 [ 352.262181][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 352.262205][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.262219][ T31] Call Trace: [ 352.262227][ T31] [ 352.262237][ T31] dump_stack_lvl+0x189/0x250 [ 352.262265][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.262285][ T31] ? __pfx__printk+0x10/0x10 [ 352.262331][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 352.262363][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 352.262388][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.262419][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 352.262445][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 352.262476][ T31] watchdog+0xf60/0xfa0 [ 352.262504][ T31] ? watchdog+0x1e2/0xfa0 [ 352.262532][ T31] kthread+0x70e/0x8a0 [ 352.262569][ T31] ? __pfx_watchdog+0x10/0x10 [ 352.262590][ T31] ? __pfx_kthread+0x10/0x10 [ 352.262625][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.262660][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.262678][ T31] ? __pfx_kthread+0x10/0x10 [ 352.262729][ T31] ret_from_fork+0x47c/0x820 [ 352.262758][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 352.262792][ T31] ? __switch_to_asm+0x39/0x70 [ 352.262814][ T31] ? __switch_to_asm+0x33/0x70 [ 352.262835][ T31] ? __pfx_kthread+0x10/0x10 [ 352.262870][ T31] ret_from_fork_asm+0x1a/0x30 [ 352.262911][ T31] [ 352.262919][ T31] Sending NMI from CPU 1 to CPUs 0: [ 352.323182][T12576] writeback 0 [ 352.328099][ C0] NMI backtrace for cpu 0 [ 352.328115][ C0] CPU: 0 UID: 0 PID: 12576 Comm: syz.1.1079 Not tainted syzkaller #0 PREEMPT(full) [ 352.328137][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.328149][ C0] RIP: 0010:delay_tsc+0x5b/0xc0 [ 352.328176][ C0] Code: 90 49 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 53 bf 01 00 00 00 e8 42 b0 0b f6 65 8b 05 cb c4 60 07 85 c0 74 1c f3 90 01 00 00 00 e8 7b ae 0b f6 e8 96 5f 01 00 39 c5 75 0e 0f 01 f9 [ 352.328192][ C0] RSP: 0018:ffffc9001a2ada70 EFLAGS: 00000082 [ 352.328209][ C0] RAX: 0000000080000002 RBX: 0000000000000899 RCX: 0000000000000000 [ 352.328221][ C0] RDX: 00000000000000b6 RSI: ffffffff8c04ff60 RDI: 00000000ffffffff [ 352.328233][ C0] RBP: 0000000000000000 R08: ffff888024aa8237 R09: 1ffff11004955046 [ 352.328245][ C0] R10: dffffc0000000000 R11: ffffffff8b859b10 R12: 1ffffffff344dc86 [ 352.328259][ C0] R13: 00000000ffffffff R14: 000000b6e11ee0d9 R15: 00000000000000f0 [ 352.328271][ C0] FS: 0000000000000000(0000) GS:ffff8881257ba000(0000) knlGS:0000000000000000 [ 352.328286][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.328299][ C0] CR2: 0000560655cc1000 CR3: 000000003247c000 CR4: 00000000003526f0 [ 352.328315][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.328325][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 352.328337][ C0] Call Trace: [ 352.328344][ C0] [ 352.328352][ C0] wait_for_lsr+0x160/0x2f0 [ 352.328378][ C0] serial8250_console_write+0x134c/0x1ba0 [ 352.328419][ C0] ? __lock_acquire+0xab9/0xd20 [ 352.328440][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 352.328470][ C0] ? console_flush_all+0x13a/0xb10 [ 352.328498][ C0] ? console_flush_all+0x13a/0xb10 [ 352.328527][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 352.328555][ C0] ? console_flush_all+0x13a/0xb10 [ 352.328581][ C0] console_flush_all+0x6f0/0xb10 [ 352.328609][ C0] ? console_flush_all+0x13a/0xb10 [ 352.328638][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 352.328670][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 352.328689][ C0] console_unlock+0xbb/0x190 [ 352.328712][ C0] ? vprintk_emit+0x2ee/0x590 [ 352.328736][ C0] ? __pfx_console_unlock+0x10/0x10 [ 352.328761][ C0] ? vprintk_emit+0x2ee/0x590 [ 352.328784][ C0] ? vprintk_emit+0x2ee/0x590 [ 352.328807][ C0] vprintk_emit+0x4c5/0x590 [ 352.328832][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 352.328854][ C0] ? vsnprintf+0x386/0xf00 [ 352.328877][ C0] ? vsnprintf+0xe11/0xf00 [ 352.328904][ C0] _printk+0xcf/0x120 [ 352.328932][ C0] ? __pfx__printk+0x10/0x10 [ 352.328963][ C0] ? memcg1_stat_format+0xa4d/0xa70 [ 352.328981][ C0] seq_buf_do_printk+0x19e/0x280 [ 352.329013][ C0] mem_cgroup_print_oom_meminfo+0x2b5/0x4b0 [ 352.329041][ C0] ? __pfx_mem_cgroup_print_oom_meminfo+0x10/0x10 [ 352.329077][ C0] dump_header+0x107/0x480 [ 352.329095][ C0] oom_kill_process+0x387/0x920 [ 352.329122][ C0] out_of_memory+0xf09/0x12a0 [ 352.329151][ C0] ? __pfx_out_of_memory+0x10/0x10 [ 352.329179][ C0] mem_cgroup_out_of_memory+0x145/0x240 [ 352.329205][ C0] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 352.329235][ C0] ? _raw_spin_unlock+0x28/0x50 [ 352.329260][ C0] ? memcg1_oom_prepare+0x37f/0x450 [ 352.329278][ C0] try_charge_memcg+0xdff/0x1290 [ 352.329306][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 352.329325][ C0] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 352.329353][ C0] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 352.329380][ C0] charge_memcg+0x9f/0x180 [ 352.329405][ C0] __mem_cgroup_charge+0x25/0x80 [ 352.329423][ C0] filemap_add_folio+0x153/0x540 [ 352.329449][ C0] __filemap_get_folio+0x4f6/0xaf0 [ 352.329477][ C0] filemap_fault+0x94c/0x12b0 [ 352.329506][ C0] ? __pfx_filemap_fault+0x10/0x10 [ 352.329533][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 352.329558][ C0] ? __handle_mm_fault+0x2789/0x5400 [ 352.329580][ C0] __do_fault+0x135/0x390 [ 352.329603][ C0] __handle_mm_fault+0x35e3/0x5400 [ 352.329628][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 352.329653][ C0] ? follow_page_pte+0x7e2/0x13e0 [ 352.329675][ C0] handle_mm_fault+0x40a/0x8e0 [ 352.329697][ C0] __get_user_pages+0x1699/0x2ce0 [ 352.329742][ C0] get_dump_page+0x1ac/0x3f0 [ 352.329771][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 352.329799][ C0] ? dump_user_range+0x19e/0xc90 [ 352.329823][ C0] ? down_read_killable+0x1d1/0x350 [ 352.329842][ C0] ? iov_iter_bvec+0xb8/0x180 [ 352.329871][ C0] dump_user_range+0x1de/0xc90 [ 352.329901][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 352.329924][ C0] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 352.329949][ C0] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 352.329974][ C0] ? dump_emit+0xa6/0xe0 [ 352.329995][ C0] ? elf_core_dump+0x2cd0/0x3960 [ 352.330021][ C0] elf_core_dump+0x3369/0x3960 [ 352.330055][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 352.330081][ C0] ? kasan_save_track+0x4f/0x80 [ 352.330098][ C0] ? kasan_save_track+0x3e/0x80 [ 352.330114][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 352.330132][ C0] ? __kvmalloc_node_noprof+0x5cd/0x910 [ 352.330162][ C0] ? coredump_write+0x343/0x1900 [ 352.330184][ C0] ? vfs_coredump+0x1db5/0x2a60 [ 352.330205][ C0] ? get_signal+0x1109/0x1340 [ 352.330224][ C0] ? arch_do_signal_or_restart+0x9a/0x750 [ 352.330241][ C0] ? irqentry_exit_to_user_mode+0x81/0x120 [ 352.330258][ C0] ? exc_page_fault+0xab/0x100 [ 352.330283][ C0] ? asm_exc_page_fault+0x26/0x30 [ 352.330324][ C0] ? 0xffffffffff600000 [ 352.330341][ C0] ? up_write+0x1c4/0x420 [ 352.330369][ C0] coredump_write+0x116c/0x1900 [ 352.330405][ C0] ? __pfx_coredump_write+0x10/0x10 [ 352.330432][ C0] ? kfree+0x4d/0x6d0 [ 352.330451][ C0] ? unshare_files+0xa9/0x140 [ 352.330478][ C0] vfs_coredump+0x1db5/0x2a60 [ 352.330512][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 352.330538][ C0] ? __lock_acquire+0xab9/0xd20 [ 352.330563][ C0] ? __lock_acquire+0xab9/0xd20 [ 352.330585][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 352.330611][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 352.330634][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 352.330653][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 352.330674][ C0] ? kernel_text_address+0xa5/0xe0 [ 352.330692][ C0] ? __kernel_text_address+0xd/0x40 [ 352.330709][ C0] ? unwind_get_return_address+0x4d/0x90 [ 352.330732][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 352.330759][ C0] ? arch_stack_walk+0xfc/0x150 [ 352.330788][ C0] ? stack_trace_save+0x9c/0xe0 [ 352.330813][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 352.330840][ C0] ? stack_depot_save_flags+0x40/0x860 [ 352.330865][ C0] ? kasan_save_track+0x4f/0x80 [ 352.330882][ C0] ? kasan_save_track+0x3e/0x80 [ 352.330898][ C0] ? __kasan_save_free_info+0x46/0x50 [ 352.330922][ C0] ? __kasan_slab_free+0x5b/0x80 [ 352.330940][ C0] ? kmem_cache_free+0x19a/0x690 [ 352.330958][ C0] ? get_signal+0xa4c/0x1340 [ 352.330982][ C0] ? arch_do_signal_or_restart+0x9a/0x750 [ 352.331001][ C0] ? irqentry_exit_to_user_mode+0x81/0x120 [ 352.331019][ C0] ? exc_page_fault+0xab/0x100 [ 352.331046][ C0] ? asm_exc_page_fault+0x26/0x30 [ 352.331095][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.331125][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.331145][ C0] get_signal+0x1109/0x1340 [ 352.331182][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 352.331207][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 352.331227][ C0] ? __bad_area_nosemaphore+0x3fb/0x780 [ 352.331260][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 352.331286][ C0] irqentry_exit_to_user_mode+0x81/0x120 [ 352.331307][ C0] exc_page_fault+0xab/0x100 [ 352.331340][ C0] asm_exc_page_fault+0x26/0x30 [ 352.331359][ C0] RIP: 0033:0x7fb6a5e4f927 [ 352.331376][ C0] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 352.331392][ C0] RSP: 002b:00007fb6a6d67120 EFLAGS: 00010202 [ 352.331413][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb6a5f8ebe9 [ 352.331425][ C0] RDX: 00007fb6a6d67140 RSI: 00007fb6a6d67270 RDI: 000000000000000b [ 352.331449][ C0] RBP: 00007fb6a6011e19 R08: 0000000000000000 R09: 0000000000000000 [ 352.331459][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 352.331469][ C0] R13: 00007fb6a61c6218 R14: 00007fb6a61c6180 R15: 00007ffc2630d168 [ 352.331489][ C0] [ 352.357112][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 352.357137][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 352.357173][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.357189][ T31] Call Trace: [ 352.357199][ T31] [ 352.357210][ T31] dump_stack_lvl+0x99/0x250 [ 352.357249][ T31] ? __asan_memcpy+0x40/0x70 [ 352.357273][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.357297][ T31] ? __pfx__printk+0x10/0x10 [ 352.357346][ T31] vpanic+0x237/0x6d0 [ 352.357377][ T31] ? __pfx_vpanic+0x10/0x10 [ 352.357406][ T31] ? preempt_schedule_common+0x83/0xd0 [ 352.357452][ T31] panic+0xb9/0xc0 [ 352.357480][ T31] ? __pfx_panic+0x10/0x10 [ 352.357512][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 352.357550][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 352.357585][ T31] watchdog+0xf9f/0xfa0 [ 352.357618][ T31] ? watchdog+0x1e2/0xfa0 [ 352.357652][ T31] kthread+0x70e/0x8a0 [ 352.357693][ T31] ? __pfx_watchdog+0x10/0x10 [ 352.357718][ T31] ? __pfx_kthread+0x10/0x10 [ 352.357757][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.357792][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.357811][ T31] ? __pfx_kthread+0x10/0x10 [ 352.357848][ T31] ret_from_fork+0x47c/0x820 [ 352.357879][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 352.357915][ T31] ? __switch_to_asm+0x39/0x70 [ 352.357939][ T31] ? __switch_to_asm+0x33/0x70 [ 352.357962][ T31] ? __pfx_kthread+0x10/0x10 [ 352.358001][ T31] ret_from_fork_asm+0x1a/0x30 [ 352.358047][ T31] [ 352.358853][ T31] Kernel Offset: disabled