last executing test programs: 16.988106462s ago: executing program 0 (id=946): socket$nl_generic(0x11, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000200)={0x8, &(0x7f0000000040)=[{0x5be, 0x9, 0x6, 0x1}, {0x2, 0x5, 0x8, 0x8001}, {0xa94c, 0x7, 0x2, 0x200}, {0x2, 0x3, 0x1, 0x401}, {0x4, 0x8, 0x40, 0x3}, {0x1, 0xb, 0x0, 0x10001}, {0xe, 0x7, 0x8d, 0xa0}, {0xf79, 0xe, 0x2, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, 0xffffffffffffffff, 0x0}]) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x40, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0xa}, {}, {0x13}}}, 0x24}}, 0x4000) 13.948323815s ago: executing program 0 (id=952): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xd2}, &(0x7f0000000480)={0x20, 0x1, 0x35, "3fcb192b4331323979fad9816a9bdc4df9e0e00a403deda8f6cb0e5687f7679484c1b0e4db28c6655cc156708517468c68ad2011bf"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$hid(r0, 0x0, 0x0) 11.74728359s ago: executing program 3 (id=955): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000000c0)=@arm64_sve={0x60800000001500be, &(0x7f0000000040)=0xe33}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) fsetxattr(r1, &(0x7f0000000600)=@known='system.posix_acl_access\x00', &(0x7f0000000640)='}\x00', 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) read$msr(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0400006800010003001000fdffff7f00000000000000000400020004000400080801000100000004000b00"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 11.376479663s ago: executing program 1 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) creat(0x0, 0x6a) 10.554014749s ago: executing program 2 (id=958): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, &(0x7f0000000040), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x4, 0x1, 0xdb96, {0x77359400}, {}, {0x1, 0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "c40bfd856b4f9355"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8044004) 10.483701854s ago: executing program 3 (id=959): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) personality(0x5000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x6, 0x2a2442) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000380)=0x8324021) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000003c0)={0x81, 0xffff, 0x5, 0x5, 0x0, 0x3, 0x8000}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={'wlan1\x00', {0x2, 0x4e26, @rand_addr=0x64010100}}) 8.090567342s ago: executing program 1 (id=960): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002b00)={r1, 0x20, &(0x7f0000002ac0)={0x0, 0x0, 0x0, &(0x7f0000002a00)=""/181, 0xb5}}, 0x10) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x100, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xed, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3"]}]}, 0x100}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000400)={0xc0, 0x0, 0x10000}) 8.020216993s ago: executing program 0 (id=961): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x0, 0x50424752, 0x500, 0x5, 0x0, @stepwise={{0x3be1, 0x5}, {0x6, 0xc}, {0x1, 0x8}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) lsm_set_self_attr(0x64, &(0x7f0000000000)={0x64, 0x5b48, 0xc1, 0xa1, "9728893404e3b36b05ab61f15c50a35d300199f9b7c766ff7900bd9c4d6894d84f0058308e1f2ff0c732dbeace554aaee81ef89b306a93978b9e1f415a82689b490f1f4586626436f049c7ec7356901ed0f1d05aa8b254d758a21bd0969f73db982ed360e0be5b06c050d6272cbdb258e942a82820c49040a698f7015cfdf3b28847a5b35d32338dabda9c3f93b18316b7e4292c2823a723ed408488b503cdc805"}, 0xc1, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r8 = syz_io_uring_setup(0x234, &(0x7f0000000380)={0x0, 0x8100, 0x10, 0x0, 0xf8}, &(0x7f0000000000)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r11 = socket$caif_seqpacket(0x25, 0x5, 0x1) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x7f31, 0x7c5b, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 8.019953153s ago: executing program 4 (id=962): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001500)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000180)=@ethtool_eeprom={0x43, 0x7, 0x1000000}}) 7.956924915s ago: executing program 2 (id=963): gettid() r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x4}}, 0x10, 0x0}, 0x0) 6.850915807s ago: executing program 3 (id=964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) 6.771674344s ago: executing program 4 (id=965): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x40000004}) 6.717262185s ago: executing program 0 (id=966): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x11, 0x2, 0x2) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000100001042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000014110000180012800b00010069703674686c00000800028004001300"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000100001040000000000", @ANYRES32=r2, @ANYBLOB="000100008e840400140012800b000100697036746e6c0000040002"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x9, 0x20000, 0xffffffff, 0x2}, 0x10) r3 = socket(0x1a, 0x1, 0x5) sendmmsg$sock(r3, &(0x7f0000001280), 0x0, 0x20000001) connect$netlink(r3, &(0x7f0000000240), 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x1}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'gre0\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000854) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRESDEC=r4, @ANYRES16=r5, @ANYRES64=0x0, @ANYRES8=r3], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r6, &(0x7f0000000040), 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x20000892) socket$inet(0x2, 0x4, 0x4) keyctl$setperm(0x5, 0x0, 0x52b242d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000004f000000cc00020006000088b6000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 6.600173278s ago: executing program 2 (id=967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000073c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="2a587de304e0cde6115ecf455b39450ba2debbe3f90730c46106b88237412ba48e457d99dbd9a0d0feada49df4e3d89f04f90492a511e9b6977650658ed6d58b4d72c2f8a2e8872fb413928adcf1fbc11d81f442467a1212a3e691b3f6c7486e9d49e54d531af2649d4eb8581353f8138880ca50468765543e0c83460959747ec90be2031b508e1094c2e63c68aec84cbfdca8369e", 0x95}, {&(0x7f00000006c0)="83fddfd96f788fb9877eaeb4a9b18caacdd22a8eeec854198b93ee0f609d2c76a7fbd181e7f7cfeb7015aeebbd859c18", 0x30}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000bc0)="58a99e34c1ecfc63adbf3326d0a4bb5e8b60f14d8b6a85f6ff360ac1224ed437dcc182e78765680e05f637fa9f6c078fd4eb", 0x32}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000f80)="76a0131008790be01e54167dbf902c476d24532574a15e94714576b5de51998391", 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000037c0)="488fcf6e48", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000006b40)=[{&(0x7f00000057c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000006fc0)=[{&(0x7f0000006cc0)}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000072c0)}}], 0x7, 0xc0) dup3(r0, r1, 0x0) 6.302734377s ago: executing program 4 (id=968): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x0, 0x50424752, 0x500, 0x5, 0x0, @stepwise={{0x3be1, 0x5}, {0x6, 0xc}, {0x1, 0x8}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) lsm_set_self_attr(0x64, &(0x7f0000000000)={0x64, 0x5b48, 0xc1, 0xa1, "9728893404e3b36b05ab61f15c50a35d300199f9b7c766ff7900bd9c4d6894d84f0058308e1f2ff0c732dbeace554aaee81ef89b306a93978b9e1f415a82689b490f1f4586626436f049c7ec7356901ed0f1d05aa8b254d758a21bd0969f73db982ed360e0be5b06c050d6272cbdb258e942a82820c49040a698f7015cfdf3b28847a5b35d32338dabda9c3f93b18316b7e4292c2823a723ed408488b503cdc805"}, 0xc1, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r8 = syz_io_uring_setup(0x234, &(0x7f0000000380)={0x0, 0x8100, 0x10, 0x0, 0xf8}, &(0x7f0000000000)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r11 = socket$caif_seqpacket(0x25, 0x5, 0x1) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x7f31, 0x7c5b, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 5.798850235s ago: executing program 2 (id=969): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df9305959f", 0x6d}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4db130420df295ea16aa3e841d50dc813025315eea3990c2de68e835c4fec57e2dd70f47b58472c2f915", 0xcc}, {&(0x7f0000000900)="5c3eb8799e8565193cf737e01055d298a4193e91d6dd89384d12d1da97e7e88852e279071ca7a9b536c7911d618feb48b66f1e17e130b7c2f27b77e2053065d05a00ae7bd353283ee3dcaf244ff26600e520af5091696d833f34518e53327718e7e3298de86f15e6a778f6008b96661a10be65c0a44b21b4c8724f61f6ca10d927", 0x81}, {&(0x7f0000000500)="4c56c5661eb2897219a486044736a64f1a175ba083d2b3ef32bff4a0", 0x1c}, {&(0x7f00000009c0)="8e6487afea5aec79e9dd3278cbb24985e6724be49d1ae08bb9913a5a6d6d6c26d88eb3edece901ad9bfd123a88c27d6e6ea618a42a970bcac49fc3bf5b87b58ba3d1a7dc24d12855a6c54a36b5089658d9482bd0a9a1b9b0d4de13e864e592216f04f31decfaa9", 0x67}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690c", 0x17c}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.182697469s ago: executing program 3 (id=970): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x2, 0x300) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x4169, &(0x7f00000003c0)={0x0, 0xd490, 0x10100, 0x1}, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_io_uring_setup(0x1a94, &(0x7f0000000280)={0x0, 0xb3b9, 0x0, 0x2, 0xfffffffd}, 0x0, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r0], 0x0) 5.155434726s ago: executing program 0 (id=971): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xd2}, &(0x7f0000000480)={0x20, 0x1, 0x35, "3fcb192b4331323979fad9816a9bdc4df9e0e00a403deda8f6cb0e5687f7679484c1b0e4db28c6655cc156708517468c68ad2011bf"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.928192007s ago: executing program 4 (id=972): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) setrlimit(0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}, r6}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000780), r6, 0x2}}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x100) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001"], 0x24}}, 0x0) write$input_event(r7, &(0x7f0000000000)={{}, 0x2, 0x200, 0xff}, 0x10) 4.352345496s ago: executing program 1 (id=973): r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}}], 0x1, 0x0) 4.24317019s ago: executing program 1 (id=974): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1e, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000900)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0x7, 0x7f, 0xff, 0x80}, 0x2d, &(0x7f00000000c0)={0x5, 0xf, 0x2d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xfa, 0x0, 0x8}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x0, 0xfc01}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "3bf4e56d57c0bd630f7d8f512bdcb97b"}]}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xea6d5d78}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000040) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x8, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x300, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c4000000250001"], 0xc4}}, 0x4004) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, &(0x7f0000000100)='V', 0x1) syz_usb_disconnect(r0) 3.260464149s ago: executing program 3 (id=975): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001500)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000180)=@ethtool_eeprom={0x43, 0x7, 0x1000000}}) 2.615528439s ago: executing program 4 (id=976): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000180)=0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x14, 0x2, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x4040041}, 0x44000) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x200, 0x800, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}, 0x0, 0x20040000}) io_uring_enter(r8, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 2.555204399s ago: executing program 2 (id=977): gettid() r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x4}}, 0x10, 0x0}, 0x0) 200.44745ms ago: executing program 1 (id=978): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='user\x00', &(0x7f0000000140)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='user\x00', &(0x7f0000000040), 0x0) 197.819534ms ago: executing program 3 (id=979): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0016005532ed03000000000000000000000000ef4eab638a85c06d35b90e458b25a8ec2fc33511b6d25cacb0f75fc9a959649f4ec5cf51962287d2a1df8e87ed8eb5f905f0bf16a6ee593c9b1ef993a694ad5904de847142f9a5b9b7afab2d2a0c", @ANYRES32=0x0, @ANYBLOB="00800400000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x3c}}, 0x2004c884) r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000080)={0x29, 0x1, 0x6, 0xa, 0x0, 0x81}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_destroy(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@exit]}, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socket$inet6(0xa, 0x1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x94, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x74, 0x3, 0x0, 0x1, [@nested={0x6c, 0x6d, 0x0, 0x1, [@typed={0x68, 0x6d, 0x0, 0x0, @str='\xe8M\xe3-\xdc\xbc\xd2/](\x9d\x9ey*\xee\x9d:\xdd\x03[-\xf8\xadC(\xb0\xe6D\xf9g\xfa\xc0mE\x89\xee\xe1\xd0\xd89|/\x86\xe6<\x8b\xfecp\x1b\'\xd6q\x05\x14*\xfe\xe4%\x1ekO\r3K(\xfay\xa2\xa5.\xb5\x03%\xc9\x93\xd74T\xac\xe7\xc1\xbb\xef\r\x02=\x841\x95\xf85\x1c\x9d\xfdVr\x1f\xc4\xa9'}]}, @nested={0x4, 0xee}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x94}}, 0x0) r6 = syz_open_procfs(r1, 0x0) read$FUSE(r6, &(0x7f0000006180)={0x2020}, 0x2020) 96.842368ms ago: executing program 0 (id=980): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x1, 0xfffffffd, 0x8bd0, 0xffff, 0x0, "4a073b267df2e98c69ba36c5095c911abad88f", 0x4, 0x7}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f000052a000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000000)=ANY=[@ANYRES64=r0]) r3 = syz_open_dev$media(&(0x7f0000000040), 0xa, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)}) write$smackfs_label(0xffffffffffffffff, 0x0, 0x0) 65.463373ms ago: executing program 4 (id=981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) 20.51136ms ago: executing program 1 (id=982): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x1, 0xfffffffd, 0x8bd0, 0xffff, 0x0, "4a073b267df2e98c69ba36c5095c911abad88f", 0x4, 0x7}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f000052a000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000000)=ANY=[@ANYRES64=r0]) r3 = syz_open_dev$media(&(0x7f0000000040), 0xa, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)}) write$smackfs_label(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=983): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) personality(0x5000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x6, 0x2a2442) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000380)=0x8324021) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={'wlan1\x00', {0x2, 0x4e26, @rand_addr=0x64010100}}) kernel console output (not intermixed with test programs): tes in process `syz.1.177'. [ 180.774401][ T6626] [U] è [ 181.528757][ T6644] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 181.758615][ T5823] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 181.935275][ T6649] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 181.942622][ T6649] overlayfs: failed to set xattr on upper [ 181.948577][ T6649] overlayfs: ...falling back to redirect_dir=nofollow. [ 181.956310][ T6649] overlayfs: ...falling back to index=off. [ 181.962509][ T6649] overlayfs: ...falling back to uuid=null. [ 181.968580][ T6649] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 182.383605][ T6644] macvlan2: entered allmulticast mode [ 182.389083][ T6644] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 182.600712][ T6644] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 182.607896][ T6644] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 182.837790][ T6660] [U]  [ 182.911965][ T5861] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 182.920729][ T6658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.186'. [ 183.123419][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 183.130980][ T5861] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 183.531649][ T6657] [U]  [ 184.338386][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.367832][ T5861] usb 2-1: config 0 descriptor?? [ 184.674346][ T5861] usb 2-1: can't set config #0, error -71 [ 184.746719][ T5861] usb 2-1: USB disconnect, device number 4 [ 185.506457][ T6672] netlink: 'syz.2.190': attribute type 11 has an invalid length. [ 186.992000][ T6688] netlink: 40 bytes leftover after parsing attributes in process `syz.2.195'. [ 187.436432][ T6691] netlink: 372 bytes leftover after parsing attributes in process `syz.1.196'. [ 188.213850][ T6698] netlink: 32 bytes leftover after parsing attributes in process `syz.3.198'. [ 189.504239][ T5823] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 189.515862][ T5823] Bluetooth: hci2: Injecting HCI hardware error event [ 189.525162][ T5823] Bluetooth: hci2: hardware error 0x00 [ 190.015347][ T6716] [U]  [ 191.994434][ T5823] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 192.777786][ T5874] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 192.945738][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 192.974092][ T6733] [U]  [ 194.917632][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.933429][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.954534][ T5874] usb 4-1: device descriptor read/all, error -71 [ 195.093409][ T30] audit: type=1326 audit(1751610395.352:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1721b8e929 code=0x7ffc0000 [ 195.222328][ T30] audit: type=1326 audit(1751610395.352:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1721b8e929 code=0x7ffc0000 [ 195.475600][ T5874] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 195.503189][ T30] audit: type=1326 audit(1751610395.352:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1721b8e929 code=0x7ffc0000 [ 196.096860][ T30] audit: type=1326 audit(1751610395.352:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1721b8e929 code=0x7ffc0000 [ 196.119185][ T30] audit: type=1326 audit(1751610395.362:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1721b2ab19 code=0x7ffc0000 [ 196.140653][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.153961][ T30] audit: type=1326 audit(1751610395.362:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1721b2ab19 code=0x7ffc0000 [ 196.175116][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.191886][ T30] audit: type=1326 audit(1751610395.362:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1721b2ab19 code=0x7ffc0000 [ 196.191912][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 196.213594][ T30] audit: type=1326 audit(1751610395.362:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1721b2ab19 code=0x7ffc0000 [ 196.239598][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.301548][ T30] audit: type=1326 audit(1751610395.362:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1721b2ab19 code=0x7ffc0000 [ 196.322831][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.380373][ T6744] netlink: 372 bytes leftover after parsing attributes in process `syz.4.210'. [ 196.413630][ T30] audit: type=1326 audit(1751610395.362:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1721b2ab19 code=0x7ffc0000 [ 196.420070][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 196.533434][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 196.609627][ T6748] netlink: 32 bytes leftover after parsing attributes in process `syz.1.211'. [ 196.631060][ T5874] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 196.652784][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.846206][ T5874] usb 4-1: Product: syz [ 196.856573][ T5874] usb 4-1: Manufacturer: syz [ 196.864766][ T5874] usb 4-1: SerialNumber: syz [ 197.647221][ T5874] usb 4-1: config 0 descriptor?? [ 197.687187][ T5874] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 197.721553][ T5874] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 199.063598][ T980] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 199.343913][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 199.396031][ T980] usb 1-1: unable to get BOS descriptor or descriptor too short [ 199.432857][ T980] usb 1-1: config 7 has an invalid interface number: 6 but max is 0 [ 199.469857][ T980] usb 1-1: config 7 has no interface number 0 [ 199.495751][ T980] usb 1-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254 [ 199.512656][ T980] usb 1-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.542405][ T980] usb 1-1: config 7 interface 6 has no altsetting 0 [ 199.586179][ T980] usb 1-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e [ 199.594565][ T5874] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 199.611325][ T5874] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 199.619494][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.630506][ T980] usb 1-1: Product: syz [ 199.643655][ T5874] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 199.699375][ T5874] em28xx 4-1:0.0: No AC97 audio processor [ 199.708190][ T980] usb 1-1: Manufacturer: syz [ 199.708314][ T980] usb 1-1: SerialNumber: syz [ 199.837741][ T5874] usb 4-1: USB disconnect, device number 7 [ 199.897265][ T5874] em28xx 4-1:0.0: Disconnecting em28xx [ 199.934012][ T5906] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 199.942648][ T6779] Bluetooth: MGMT ver 1.23 [ 199.988928][ T5874] em28xx 4-1:0.0: Freeing device [ 200.106578][ T6782] [U]  [ 200.224905][ T5906] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.308383][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.412033][ T5906] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.458731][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.543789][ T5906] usb 2-1: SerialNumber: syz [ 200.602332][ T980] option 1-1:7.6: GSM modem (1-port) converter detected [ 200.990399][ T980] usb 1-1: USB disconnect, device number 6 [ 201.229774][ T980] option 1-1:7.6: device disconnected [ 201.290205][ T5906] usb 2-1: 0:2 : does not exist [ 201.295219][ T5906] usb 2-1: unit 5: unexpected type 0x09 [ 202.162517][ T5906] usb 2-1: USB disconnect, device number 5 [ 202.588115][ T6799] netlink: 40 bytes leftover after parsing attributes in process `syz.3.224'. [ 203.913863][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.968777][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 204.599777][ T10] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 204.883703][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.891965][ T10] usb 5-1: Product: syz [ 204.897173][ T10] usb 5-1: Manufacturer: syz [ 204.901895][ T10] usb 5-1: SerialNumber: syz [ 204.910701][ T10] usb 5-1: config 0 descriptor?? [ 204.968676][ T10] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 205.802874][ T6817] kvm: pic: non byte write [ 205.957664][ T6826] Invalid ELF header magic: != ELF [ 206.743406][ T980] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 206.811051][ T5861] usb 5-1: USB disconnect, device number 3 [ 206.963849][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 206.990691][ T980] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.006350][ T980] usb 2-1: config 0 has no interface number 0 [ 207.051170][ T980] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 207.184494][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.378055][ T980] usb 2-1: Product: syz [ 207.394429][ T980] usb 2-1: Manufacturer: syz [ 207.412392][ T980] usb 2-1: SerialNumber: syz [ 207.675444][ T980] usb 2-1: config 0 descriptor?? [ 207.696744][ T980] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 207.730352][ T44] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 207.974405][ T5886] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 208.143781][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 209.017546][ T980] gspca_spca1528: reg_w err -110 [ 209.034155][ T980] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 209.050082][ T44] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 209.078729][ T44] usb 4-1: config 0 has no interface number 0 [ 209.113382][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 209.298544][ T44] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.530159][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 209.567214][ T44] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.636326][ T5886] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 209.669243][ T44] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 209.736873][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 209.760576][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.808773][ T44] usb 4-1: config 0 descriptor?? [ 209.823204][ T5886] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 209.882519][ T5886] usb 3-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 209.908253][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.936982][ T5886] usb 3-1: Product: syz [ 210.066967][ T44] usb 4-1: can't set config #0, error -71 [ 210.098653][ T980] usb 2-1: USB disconnect, device number 6 [ 210.104797][ T5886] usb 3-1: Manufacturer: syz [ 210.137732][ T5886] usb 3-1: SerialNumber: syz [ 210.442866][ T44] usb 4-1: USB disconnect, device number 8 [ 210.839511][ T5886] usb 3-1: config 0 descriptor?? [ 210.915553][ T5886] usb 3-1: can't set config #0, error -71 [ 210.941197][ T6864] syz.4.246 uses obsolete (PF_INET,SOCK_PACKET) [ 210.984494][ T5886] usb 3-1: USB disconnect, device number 4 [ 211.079293][ T6871] netlink: 372 bytes leftover after parsing attributes in process `syz.2.247'. [ 212.157105][ T6875] ceph: No mds server is up or the cluster is laggy [ 212.246543][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 212.456697][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 213.448541][ T6897] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 213.455641][ T6897] overlayfs: failed to set xattr on upper [ 213.461389][ T6897] overlayfs: ...falling back to redirect_dir=nofollow. [ 213.468357][ T6897] overlayfs: ...falling back to index=off. [ 213.476263][ T6897] overlayfs: ...falling back to uuid=null. [ 213.482112][ T6897] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 214.064200][ T5138] Bluetooth: hci4: command 0x0405 tx timeout [ 215.063985][ T6906] [U]  [ 215.926460][ T6903] 9pnet: Could not find request transport: f^Rådno=0xffffffffffffffff [ 216.353684][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 216.964388][ T5823] Bluetooth: hci4: command 0x0405 tx timeout [ 216.970676][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 217.065966][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.087892][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.122128][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 217.136793][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.151672][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.172148][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.264197][ T10] usb 3-1: config 0 descriptor?? [ 217.774762][ T980] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 218.344833][ T6929] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 218.352048][ T6929] overlayfs: failed to set xattr on upper [ 218.358142][ T6929] overlayfs: ...falling back to redirect_dir=nofollow. [ 218.365188][ T6929] overlayfs: ...falling back to index=off. [ 218.371229][ T6929] overlayfs: ...falling back to uuid=null. [ 218.377260][ T6929] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 219.474105][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.507473][ T980] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 219.632216][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.661313][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 219.693429][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 219.695222][ T980] usb 2-1: config 0 descriptor?? [ 220.309591][ T10] usb 3-1: USB disconnect, device number 5 [ 220.368209][ T980] ath6kl: Failed to submit usb control message: -71 [ 220.405437][ T980] ath6kl: unable to send the bmi data to the device: -71 [ 220.412554][ T980] ath6kl: Unable to send get target info: -71 [ 220.456796][ T980] ath6kl: Failed to init ath6kl core: -71 [ 220.496986][ T980] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 220.523699][ T6936] fuse: Bad value for 'fd' [ 220.592204][ T980] usb 2-1: USB disconnect, device number 7 [ 220.834537][ T6951] [U]  [ 222.113591][ T5874] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 222.497345][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.530043][ T5874] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 222.632791][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.695709][ T5874] usb 1-1: config 0 descriptor?? [ 223.100408][ T5874] usbhid 1-1:0.0: can't add hid device: -71 [ 223.112772][ T5874] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 223.974796][ T5874] usb 1-1: USB disconnect, device number 7 [ 224.333389][ T5874] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 224.699785][ T6995] FAULT_INJECTION: forcing a failure. [ 224.699785][ T6995] name failslab, interval 1, probability 0, space 0, times 0 [ 224.734057][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.4.280 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 224.734091][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.734103][ T6995] Call Trace: [ 224.734113][ T6995] [ 224.734123][ T6995] dump_stack_lvl+0x189/0x250 [ 224.734169][ T6995] ? __pfx____ratelimit+0x10/0x10 [ 224.734196][ T6995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.734225][ T6995] ? __pfx__printk+0x10/0x10 [ 224.734251][ T6995] ? __pfx___might_resched+0x10/0x10 [ 224.734281][ T6995] ? fs_reclaim_acquire+0x7d/0x100 [ 224.734315][ T6995] should_fail_ex+0x414/0x560 [ 224.734344][ T6995] should_failslab+0xa8/0x100 [ 224.734372][ T6995] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 224.734396][ T6995] ? __alloc_skb+0x112/0x2d0 [ 224.734422][ T6995] __alloc_skb+0x112/0x2d0 [ 224.734447][ T6995] netlink_ack+0x146/0xa50 [ 224.734465][ T6995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.734510][ T6995] netlink_rcv_skb+0x28c/0x470 [ 224.734533][ T6995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.734561][ T6995] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.734602][ T6995] ? down_read+0x1ad/0x2e0 [ 224.734624][ T6995] genl_rcv+0x28/0x40 [ 224.734647][ T6995] netlink_unicast+0x758/0x8d0 [ 224.734691][ T6995] netlink_sendmsg+0x805/0xb30 [ 224.734724][ T6995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.734755][ T6995] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.734779][ T6995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.734801][ T6995] __sock_sendmsg+0x219/0x270 [ 224.734834][ T6995] ____sys_sendmsg+0x505/0x830 [ 224.734864][ T6995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.734898][ T6995] ? import_iovec+0x74/0xa0 [ 224.734938][ T6995] ___sys_sendmsg+0x21f/0x2a0 [ 224.734965][ T6995] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.735035][ T6995] ? __fget_files+0x2a/0x420 [ 224.735061][ T6995] ? __fget_files+0x3a0/0x420 [ 224.735099][ T6995] __x64_sys_sendmsg+0x19b/0x260 [ 224.735125][ T6995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.735160][ T6995] ? __pfx_ksys_write+0x10/0x10 [ 224.735180][ T6995] ? rcu_is_watching+0x15/0xb0 [ 224.735216][ T6995] ? do_syscall_64+0xbe/0x3b0 [ 224.735249][ T6995] do_syscall_64+0xfa/0x3b0 [ 224.735277][ T6995] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.735304][ T6995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.735324][ T6995] ? clear_bhb_loop+0x60/0xb0 [ 224.735349][ T6995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.735368][ T6995] RIP: 0033:0x7f0dbe18e929 [ 224.735393][ T6995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.735408][ T6995] RSP: 002b:00007f0dbf061038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.735434][ T6995] RAX: ffffffffffffffda RBX: 00007f0dbe3b5fa0 RCX: 00007f0dbe18e929 [ 224.735449][ T6995] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 224.735461][ T6995] RBP: 00007f0dbf061090 R08: 0000000000000000 R09: 0000000000000000 [ 224.735473][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.735484][ T6995] R13: 0000000000000000 R14: 00007f0dbe3b5fa0 R15: 00007ffd16ba88b8 [ 224.735517][ T6995] [ 225.049403][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.077077][ T6997] Invalid ELF header magic: != ELF [ 225.178495][ T1145] Bluetooth: hci5: Frame reassembly failed (-84) [ 227.113604][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 228.519780][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 229.093432][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 229.101895][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 229.123814][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 229.767891][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 229.924153][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.932578][ T10] usb 3-1: Product: syz [ 229.941281][ T10] usb 3-1: Manufacturer: syz [ 229.946889][ T10] usb 3-1: SerialNumber: syz [ 229.958373][ T10] usb 3-1: config 0 descriptor?? [ 230.036059][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 230.062094][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 230.921062][ T7036] ALSA: mixer_oss: invalid OSS volume 'LI' [ 231.119651][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 231.145668][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 231.157170][ T10] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 231.384436][ T10] em28xx 3-1:0.0: No AC97 audio processor [ 231.623594][ T10] usb 3-1: USB disconnect, device number 6 [ 231.630997][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 231.642460][ T10] em28xx 3-1:0.0: Freeing device [ 233.081077][ T7057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.590480][ T7057] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.300'. [ 235.610928][ T5965] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 236.225448][ T5965] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.250604][ T5965] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.292079][ T5965] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 236.318160][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 236.345416][ T5965] usb 3-1: SerialNumber: syz [ 236.503667][ T5886] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 236.785996][ T5965] usb 3-1: 0:2 : does not exist [ 237.383429][ T5965] usb 3-1: USB disconnect, device number 7 [ 237.509377][ T6771] udevd[6771]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.603359][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 237.611516][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 237.623575][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 237.641178][ T5886] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 237.653553][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.661742][ T5886] usb 4-1: Product: syz [ 237.669156][ T5886] usb 4-1: Manufacturer: syz [ 237.678054][ T5886] usb 4-1: SerialNumber: syz [ 237.698985][ T5886] usb 4-1: config 0 descriptor?? [ 237.710954][ T5886] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 237.731931][ T5886] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 237.863543][ T5965] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 238.037000][ T5965] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.082785][ T5965] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.094451][ T5965] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.109067][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.122619][ T5965] usb 2-1: SerialNumber: syz [ 238.263748][ T5886] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 238.270251][ T5886] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 238.382648][ T5886] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 238.400702][ T5886] em28xx 4-1:0.0: No AC97 audio processor [ 238.709499][ T5965] usb 2-1: 0:2 : does not exist [ 238.725585][ T5886] usb 4-1: USB disconnect, device number 9 [ 238.747919][ T5886] em28xx 4-1:0.0: Disconnecting em28xx [ 238.776572][ T5886] em28xx 4-1:0.0: Freeing device [ 238.858012][ T5965] usb 2-1: USB disconnect, device number 8 [ 238.873000][ T7107] Invalid ELF header magic: != ELF [ 239.000249][ T6771] udevd[6771]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.323554][ T5886] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 239.511939][ T5886] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 239.546668][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 239.829961][ T5886] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.983553][ T5886] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 239.993016][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.067681][ T5886] usb 4-1: Product: syz [ 240.072245][ T5886] usb 4-1: Manufacturer: syz [ 240.149547][ T5886] cdc_wdm 4-1:1.0: skipping garbage [ 240.184206][ T5886] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 241.627444][ T5886] usb 4-1: USB disconnect, device number 10 [ 243.380141][ T7156] netlink: 176 bytes leftover after parsing attributes in process `syz.0.326'. [ 243.758806][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.328'. [ 243.866629][ T7163] syzkaller1: entered promiscuous mode [ 243.881243][ T7163] syzkaller1: entered allmulticast mode [ 244.045154][ T7169] overlayfs: missing 'lowerdir' [ 244.096793][ T7169] Illegal XDP return value 1155529269 on prog (id 80) dev syz_tun, expect packet loss! [ 244.484745][ T7178] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 244.491896][ T7178] overlayfs: failed to set xattr on upper [ 244.497772][ T7178] overlayfs: ...falling back to redirect_dir=nofollow. [ 244.505386][ T7178] overlayfs: ...falling back to index=off. [ 244.511334][ T7178] overlayfs: ...falling back to uuid=null. [ 244.517750][ T7178] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 246.603416][ T44] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 246.662765][ T7193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.337'. [ 246.773595][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 246.895409][ T44] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 246.997258][ T44] usb 3-1: config 179 has no interface number 0 [ 247.051819][ T44] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 247.155437][ T44] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 247.199924][ T44] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 247.370829][ T44] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 247.382367][ T44] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 247.395923][ T44] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 247.405083][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.490174][ T7185] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 248.244936][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.254777][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.354812][ T7209] Invalid ELF header magic: != ELF [ 248.396329][ T980] usb 3-1: USB disconnect, device number 8 [ 248.396401][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 248.410683][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 248.643600][ T44] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 249.133438][ T5896] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 249.326828][ T44] usb 1-1: config 8 has an invalid interface number: 235 but max is 0 [ 249.335548][ T44] usb 1-1: config 8 has no interface number 0 [ 249.341752][ T44] usb 1-1: config 8 interface 235 has no altsetting 0 [ 249.349029][ T44] usb 1-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 249.349997][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.358267][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.404443][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.418841][ T5896] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.430611][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.441370][ T5896] usb 4-1: SerialNumber: syz [ 249.503535][ T5965] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 249.653427][ T5965] usb 3-1: device descriptor read/64, error -71 [ 249.679322][ T5896] usb 4-1: 0:2 : does not exist [ 249.715919][ T44] usb 1-1: string descriptor 0 read error: -71 [ 249.754288][ T44] keyspan 1-1:8.235: Keyspan - (without firmware) converter detected [ 249.757979][ T5896] usb 4-1: USB disconnect, device number 11 [ 249.791472][ T44] usb 1-1: USB disconnect, device number 9 [ 249.808586][ T44] keyspan 1-1:8.235: device disconnected [ 249.886581][ T6771] udevd[6771]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.933893][ T5965] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 250.203385][ T5965] usb 3-1: device descriptor read/64, error -71 [ 250.211566][ T5874] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 250.302716][ T7229] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 250.309926][ T7229] overlayfs: failed to set xattr on upper [ 250.315820][ T7229] overlayfs: ...falling back to redirect_dir=nofollow. [ 250.322786][ T7229] overlayfs: ...falling back to index=off. [ 250.328708][ T7229] overlayfs: ...falling back to uuid=null. [ 250.334657][ T7229] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 250.832865][ T5965] usb usb3-port1: attempt power cycle [ 251.026282][ T5874] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.042096][ T5874] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.065231][ T5874] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.086100][ T5874] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.086132][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.086153][ T5874] usb 5-1: Product: syz [ 251.086170][ T5874] usb 5-1: Manufacturer: syz [ 251.086185][ T5874] usb 5-1: SerialNumber: syz [ 251.443318][ T5965] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 251.674828][ T5965] usb 3-1: device descriptor read/8, error -71 [ 252.220177][ T5874] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 252.294008][ T5874] cdc_ncm 5-1:1.0: bind() failure [ 252.304838][ T5874] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 252.313384][ T5874] cdc_ncm 5-1:1.1: bind() failure [ 252.323854][ T5965] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 252.339533][ T5874] usb 5-1: USB disconnect, device number 4 [ 252.434831][ T5965] usb 3-1: device descriptor read/8, error -71 [ 252.563678][ T5965] usb usb3-port1: unable to enumerate USB device [ 252.649075][ T7244] loop6: detected capacity change from 0 to 524287999 [ 253.390680][ T7256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.353'. [ 255.547873][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 255.897723][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.912229][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.683611][ T24] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 256.967444][ T24] usb 4-1: device descriptor read/64, error -71 [ 257.198831][ T7301] netlink: 40 bytes leftover after parsing attributes in process `syz.2.367'. [ 257.243445][ T24] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 257.483519][ T5874] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 257.983289][ T5874] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.363378][ T5874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.433821][ T5874] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 258.436240][ T24] usb 4-1: device descriptor read/64, error -71 [ 258.456390][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 258.501803][ T5874] usb 2-1: SerialNumber: syz [ 258.568248][ T24] usb usb4-port1: attempt power cycle [ 259.085401][ T24] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 259.200460][ T24] usb 4-1: device descriptor read/8, error -71 [ 259.561916][ T5874] usb 2-1: 0:2 : does not exist [ 259.593510][ T24] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 259.658474][ T5874] usb 2-1: USB disconnect, device number 9 [ 259.673528][ T24] usb 4-1: device descriptor read/8, error -71 [ 259.812544][ T6771] udevd[6771]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.944803][ T24] usb usb4-port1: unable to enumerate USB device [ 261.783950][ T7325] loop6: detected capacity change from 0 to 524287999 [ 261.873021][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'. [ 262.883933][ T7333] netlink: 176 bytes leftover after parsing attributes in process `syz.1.377'. [ 263.152358][ T7341] kvm: pic: non byte write [ 263.253590][ T5886] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 263.284413][ T7348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.381'. [ 263.477200][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.489931][ T5886] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.500609][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.795626][ T5886] usb 3-1: config 0 descriptor?? [ 264.100786][ T5886] usbhid 3-1:0.0: can't add hid device: -71 [ 264.121583][ T5886] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 264.159146][ T5886] usb 3-1: USB disconnect, device number 13 [ 264.238654][ T7362] bridge_slave_0: left allmulticast mode [ 264.244975][ T7362] bridge_slave_0: left promiscuous mode [ 264.256099][ T7362] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.326239][ T7362] bridge_slave_1: left allmulticast mode [ 264.332116][ T7362] bridge_slave_1: left promiscuous mode [ 264.343145][ T7362] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.362274][ T7362] bond0: (slave bond_slave_0): Releasing backup interface [ 264.387182][ T7362] bond0: (slave bond_slave_1): Releasing backup interface [ 264.461796][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 264.476813][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.389'. [ 264.505443][ T7362] team0: Port device team_slave_0 removed [ 264.545805][ T7362] team0: Port device team_slave_1 removed [ 264.568335][ T7362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.590840][ T7362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.890243][ T7362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.907722][ T7362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.786841][ T7383] FAULT_INJECTION: forcing a failure. [ 266.786841][ T7383] name failslab, interval 1, probability 0, space 0, times 0 [ 266.805407][ T7383] CPU: 0 UID: 0 PID: 7383 Comm: syz.4.393 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 266.805434][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.805446][ T7383] Call Trace: [ 266.805454][ T7383] [ 266.805464][ T7383] dump_stack_lvl+0x189/0x250 [ 266.805500][ T7383] ? __pfx____ratelimit+0x10/0x10 [ 266.805538][ T7383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.805568][ T7383] ? __pfx__printk+0x10/0x10 [ 266.805596][ T7383] ? __pfx___might_resched+0x10/0x10 [ 266.805624][ T7383] ? fs_reclaim_acquire+0x7d/0x100 [ 266.805658][ T7383] should_fail_ex+0x414/0x560 [ 266.805687][ T7383] should_failslab+0xa8/0x100 [ 266.805723][ T7383] __kmalloc_noprof+0xcb/0x4f0 [ 266.805746][ T7383] ? kfree+0x4d/0x440 [ 266.805764][ T7383] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 266.805800][ T7383] tomoyo_realpath_from_path+0xe3/0x5d0 [ 266.805833][ T7383] ? tomoyo_domain+0xda/0x130 [ 266.805870][ T7383] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 266.805894][ T7383] tomoyo_path_number_perm+0x1e8/0x5a0 [ 266.805921][ T7383] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 266.805964][ T7383] ? __lock_acquire+0xab9/0xd20 [ 266.806015][ T7383] ? __fget_files+0x2a/0x420 [ 266.806044][ T7383] ? __fget_files+0x2a/0x420 [ 266.806069][ T7383] ? __fget_files+0x3a0/0x420 [ 266.806093][ T7383] ? __fget_files+0x2a/0x420 [ 266.806124][ T7383] security_file_ioctl+0xcb/0x2d0 [ 266.806153][ T7383] __se_sys_ioctl+0x47/0x170 [ 266.806178][ T7383] do_syscall_64+0xfa/0x3b0 [ 266.806207][ T7383] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.806236][ T7383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.806256][ T7383] ? clear_bhb_loop+0x60/0xb0 [ 266.806282][ T7383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.806301][ T7383] RIP: 0033:0x7f0dbe18e929 [ 266.806320][ T7383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.806337][ T7383] RSP: 002b:00007f0dbf061038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.806358][ T7383] RAX: ffffffffffffffda RBX: 00007f0dbe3b5fa0 RCX: 00007f0dbe18e929 [ 266.806373][ T7383] RDX: 0000200000000040 RSI: 0000000040045612 RDI: 0000000000000008 [ 266.806387][ T7383] RBP: 00007f0dbf061090 R08: 0000000000000000 R09: 0000000000000000 [ 266.806399][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.806410][ T7383] R13: 0000000000000000 R14: 00007f0dbe3b5fa0 R15: 00007ffd16ba88b8 [ 266.806443][ T7383] [ 266.806452][ T7383] ERROR: Out of memory at tomoyo_realpath_from_path. [ 266.841235][ T7384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.649996][ T7398] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 268.848749][ T7406] FAULT_INJECTION: forcing a failure. [ 268.848749][ T7406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.862012][ T7406] CPU: 0 UID: 0 PID: 7406 Comm: syz.3.400 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 268.862033][ T7406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.862042][ T7406] Call Trace: [ 268.862050][ T7406] [ 268.862057][ T7406] dump_stack_lvl+0x189/0x250 [ 268.862090][ T7406] ? __pfx____ratelimit+0x10/0x10 [ 268.862112][ T7406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.862134][ T7406] ? __pfx__printk+0x10/0x10 [ 268.862149][ T7406] ? __might_fault+0xb0/0x130 [ 268.862175][ T7406] should_fail_ex+0x414/0x560 [ 268.862196][ T7406] _copy_from_user+0x2d/0xb0 [ 268.862219][ T7406] ___sys_sendmsg+0x158/0x2a0 [ 268.862243][ T7406] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.862294][ T7406] ? __might_fault+0xb0/0x130 [ 268.862314][ T7406] __sys_sendmmsg+0x227/0x430 [ 268.862342][ T7406] ? __pfx___sys_sendmmsg+0x10/0x10 [ 268.862367][ T7406] ? bpf_trace_run2+0x322/0x4b0 [ 268.862400][ T7406] ? rcu_is_watching+0x15/0xb0 [ 268.862425][ T7406] __x64_sys_sendmmsg+0xa0/0xc0 [ 268.862443][ T7406] do_syscall_64+0xfa/0x3b0 [ 268.862468][ T7406] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.862491][ T7406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.862508][ T7406] ? clear_bhb_loop+0x60/0xb0 [ 268.862529][ T7406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.862543][ T7406] RIP: 0033:0x7fb1bc58e929 [ 268.862556][ T7406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.862568][ T7406] RSP: 002b:00007fb1bd319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 268.862584][ T7406] RAX: ffffffffffffffda RBX: 00007fb1bc7b5fa0 RCX: 00007fb1bc58e929 [ 268.862594][ T7406] RDX: 032bc45944b084a6 RSI: 0000200000000180 RDI: 0000000000000003 [ 268.862604][ T7406] RBP: 00007fb1bd319090 R08: 0000000000000000 R09: 0000000000000000 [ 268.862613][ T7406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.862621][ T7406] R13: 0000000000000000 R14: 00007fb1bc7b5fa0 R15: 00007ffc842803a8 [ 268.862644][ T7406] [ 269.066423][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.450241][ T7421] netlink: 104 bytes leftover after parsing attributes in process `syz.3.406'. [ 273.256524][ T10] IPVS: starting estimator thread 0... [ 273.320967][ T5965] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 273.419453][ T7434] IPVS: using max 27 ests per chain, 64800 per kthread [ 273.438394][ T980] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 273.663405][ T5965] usb 2-1: Using ep0 maxpacket: 8 [ 273.689555][ T5965] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 273.698661][ T5965] usb 2-1: config 179 has no interface number 0 [ 273.715118][ T7438] netlink: 'syz.2.408': attribute type 39 has an invalid length. [ 273.729528][ T5965] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 273.733167][ T980] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 273.779189][ T5965] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 273.866120][ T980] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 273.886597][ T5965] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 273.919619][ T980] usb 4-1: config 8 has no interface number 0 [ 273.977830][ T5965] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 274.072274][ T5965] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 274.189221][ T5965] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 274.283448][ T980] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 274.315836][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.336846][ T980] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.365231][ T7446] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 274.372261][ T7446] overlayfs: failed to set xattr on upper [ 274.378408][ T7446] overlayfs: ...falling back to redirect_dir=nofollow. [ 274.385582][ T7446] overlayfs: ...falling back to index=off. [ 274.391434][ T7446] overlayfs: ...falling back to uuid=null. [ 274.397387][ T7446] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 274.412330][ T7428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 274.680163][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 274.680166][ T24] usb 2-1: USB disconnect, device number 10 [ 274.703350][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 274.926390][ T7450] hsr0: entered promiscuous mode [ 274.946662][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 275.034859][ T7450] hsr_slave_0: left promiscuous mode [ 275.062250][ T7450] hsr_slave_1: left promiscuous mode [ 275.381215][ T7455] bad cache= option: no%e [ 275.381215][ T7455] [ 275.387999][ T7455] CIFS: VFS: bad cache= option: no%e [ 276.034629][ T7454] netlink: 176 bytes leftover after parsing attributes in process `syz.4.413'. [ 277.323376][ T980] usb 4-1: string descriptor 0 read error: -71 [ 277.329763][ T980] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 277.377034][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.429882][ T980] usb 4-1: can't set config #8, error -71 [ 277.511047][ T980] usb 4-1: USB disconnect, device number 16 [ 277.755382][ T5874] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 278.083817][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 278.443455][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.491665][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.522638][ T5874] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 278.541913][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.794368][ T5874] usb 1-1: config 0 descriptor?? [ 279.840209][ T5874] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 279.915709][ T7487] kvm: pic: non byte write [ 280.244412][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 280.693968][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 281.100256][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 281.164991][ T24] usb 4-1: config 179 has no interface number 0 [ 281.233402][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 281.263311][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 281.285254][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 281.313320][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 281.363005][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 281.393356][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 281.402966][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.536077][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 281.563728][ T7491] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 281.725506][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 281.768139][ T10] usb 2-1: config 4 has an invalid interface number: 87 but max is 0 [ 281.821383][ T10] usb 2-1: config 4 has no interface number 0 [ 281.828499][ T5906] usb 4-1: USB disconnect, device number 17 [ 281.833397][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 281.842782][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 281.867859][ T10] usb 2-1: config 4 interface 87 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.547746][ T10] usb 2-1: New USB device found, idVendor=06a3, idProduct=c81a, bcdDevice= f.71 [ 282.743094][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.765422][ T10] usb 2-1: Product: syz [ 282.769741][ T10] usb 2-1: Manufacturer: syz [ 282.784887][ T10] usb 2-1: SerialNumber: syz [ 283.264870][ T6846] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 283.432601][ T6846] usb 1-1: device reset changed ep0 maxpacket size! [ 283.617064][ T5874] usb 1-1: USB disconnect, device number 10 [ 284.421132][ T7532] netlink: 40 bytes leftover after parsing attributes in process `syz.2.436'. [ 284.864327][ T5874] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 285.024705][ T10] usb 2-1: USB disconnect, device number 11 [ 285.065233][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 285.104415][ T5874] usb 1-1: device descriptor read/all, error -71 [ 285.313409][ T6846] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 287.018354][ T7554] netlink: 372 bytes leftover after parsing attributes in process `syz.2.444'. [ 288.037759][ T7560] [U]  [ 289.412652][ T7568] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 289.419928][ T7568] overlayfs: failed to set xattr on upper [ 289.425986][ T7568] overlayfs: ...falling back to redirect_dir=nofollow. [ 289.432866][ T7568] overlayfs: ...falling back to index=off. [ 289.438788][ T7568] overlayfs: ...falling back to uuid=null. [ 289.444725][ T7568] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 289.605032][ T7569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.447'. [ 289.757056][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 290.256234][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 290.973426][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 290.995090][ T10] usb 2-1: config 179 has no interface number 0 [ 291.017344][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 291.051383][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 291.105901][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 291.282092][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 291.301868][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 291.319005][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 291.337087][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.375233][ T7564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 292.175036][ T7576] loop6: detected capacity change from 0 to 524287999 [ 292.283334][ T10] usb 2-1: can't set config #179, error -71 [ 292.333601][ T10] usb 2-1: USB disconnect, device number 12 [ 297.753290][ T7611] netlink: 40 bytes leftover after parsing attributes in process `syz.4.461'. [ 299.671059][ T7621] [U]  [ 301.120991][ T5861] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 301.863682][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 303.386564][ T5861] usb 5-1: unable to read config index 0 descriptor/all [ 303.437596][ T5861] usb 5-1: can't read configurations, error -71 [ 304.743373][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 304.751175][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 305.613650][ T10] usb 2-1: device descriptor read/64, error -32 [ 305.953463][ T5906] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 305.983432][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 306.318617][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 306.336496][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.363825][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 306.404461][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.412695][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 306.433638][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 306.607275][ T7649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.474'. [ 306.706069][ T10] usb 2-1: config 0 descriptor?? [ 306.713951][ T5906] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 306.723831][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.731865][ T5906] usb 1-1: Product: syz [ 306.754798][ T5906] usb 1-1: Manufacturer: syz [ 307.063433][ T5906] usb 1-1: SerialNumber: syz [ 307.085250][ T5906] usb 1-1: config 0 descriptor?? [ 307.273710][ T10] usb 2-1: can't set config #0, error -71 [ 307.281231][ T5906] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 307.291175][ T10] usb 2-1: USB disconnect, device number 14 [ 307.297222][ T5906] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 308.214422][ T5906] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 308.223450][ T5906] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 308.237935][ T5906] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 308.256496][ T5906] em28xx 1-1:0.0: No AC97 audio processor [ 308.993737][ T5906] usb 1-1: USB disconnect, device number 13 [ 309.004026][ T5906] em28xx 1-1:0.0: Disconnecting em28xx [ 309.012809][ T5906] em28xx 1-1:0.0: Freeing device [ 309.263650][ T980] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 309.293465][ T5886] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 309.381538][ T7671] [U]  [ 309.533445][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 309.553678][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 309.638367][ T980] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 309.731653][ T980] usb 4-1: config 179 has no interface number 0 [ 309.795096][ T5886] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 309.862404][ T980] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 309.918951][ T5886] usb 3-1: config 179 has no interface number 0 [ 309.994907][ T5886] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 310.024247][ T980] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 310.123422][ T5886] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 310.152265][ T980] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.242937][ T5886] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.275291][ T980] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 310.369807][ T5886] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 310.393347][ T980] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 310.431285][ T5886] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 310.445590][ T980] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 310.467121][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.475586][ T5886] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 310.493422][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.544031][ T7673] IPVS: stopping backup sync thread 7676 ... [ 310.551091][ T7676] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 310.555618][ T7665] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 310.563061][ T7664] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 311.337049][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.279171][ T5965] usb 4-1: USB disconnect, device number 18 [ 312.283435][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 312.293552][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 312.328589][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.139742][ T5886] usb 3-1: USB disconnect, device number 14 [ 313.139809][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 313.139857][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 314.513097][ T7702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.489'. [ 314.558155][ T7688] netlink: 176 bytes leftover after parsing attributes in process `syz.4.485'. [ 314.597953][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 315.063053][ T7705] 9pnet_fd: Insufficient options for proto=fd [ 315.089483][ T7705] FAULT_INJECTION: forcing a failure. [ 315.089483][ T7705] name failslab, interval 1, probability 0, space 0, times 0 [ 315.128925][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.140574][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 315.144835][ T7705] CPU: 0 UID: 0 PID: 7705 Comm: syz.3.490 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 315.144868][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.144895][ T7705] Call Trace: [ 315.144905][ T7705] [ 315.144916][ T7705] dump_stack_lvl+0x189/0x250 [ 315.144959][ T7705] ? __pfx____ratelimit+0x10/0x10 [ 315.144992][ T7705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.145033][ T7705] ? __pfx__printk+0x10/0x10 [ 315.145060][ T7705] ? __pfx___might_resched+0x10/0x10 [ 315.145093][ T7705] ? fs_reclaim_acquire+0x7d/0x100 [ 315.145131][ T7705] should_fail_ex+0x414/0x560 [ 315.145166][ T7705] should_failslab+0xa8/0x100 [ 315.145197][ T7705] __kmalloc_noprof+0xcb/0x4f0 [ 315.145224][ T7705] ? tomoyo_encode+0x28b/0x550 [ 315.145262][ T7705] tomoyo_encode+0x28b/0x550 [ 315.145302][ T7705] tomoyo_mount_permission+0x44d/0x970 [ 315.145339][ T7705] ? tomoyo_mount_permission+0x27a/0x970 [ 315.145370][ T7705] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 315.145475][ T7705] security_sb_mount+0xec/0x350 [ 315.145516][ T7705] path_mount+0xbc/0xfe0 [ 315.145545][ T7705] ? user_path_at+0x44/0x60 [ 315.145563][ T7705] ? kmem_cache_free+0x18f/0x400 [ 315.145602][ T7705] __se_sys_mount+0x317/0x410 [ 315.145640][ T7705] ? __pfx___se_sys_mount+0x10/0x10 [ 315.145667][ T7705] ? rcu_is_watching+0x15/0xb0 [ 315.145707][ T7705] ? do_syscall_64+0xbe/0x3b0 [ 315.145738][ T7705] ? __x64_sys_mount+0x20/0xc0 [ 315.145770][ T7705] do_syscall_64+0xfa/0x3b0 [ 315.145806][ T7705] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.145837][ T7705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.145861][ T7705] ? clear_bhb_loop+0x60/0xb0 [ 315.145889][ T7705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.145910][ T7705] RIP: 0033:0x7fb1bc58e929 [ 315.145930][ T7705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.145948][ T7705] RSP: 002b:00007fb1bd319038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 315.145974][ T7705] RAX: ffffffffffffffda RBX: 00007fb1bc7b5fa0 RCX: 00007fb1bc58e929 [ 315.145991][ T7705] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 315.146013][ T7705] RBP: 00007fb1bd319090 R08: 0000200000000580 R09: 0000000000000000 [ 315.146027][ T7705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.146041][ T7705] R13: 0000000000000000 R14: 00007fb1bc7b5fa0 R15: 00007ffc842803a8 [ 315.146078][ T7705] [ 315.403991][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.425245][ T24] usb 1-1: config 0 descriptor?? [ 315.573368][ T5906] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 315.644631][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 315.651298][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 315.760490][ T5906] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.839012][ T5906] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.977893][ T5906] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 316.280923][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 316.516467][ T24] usb 1-1: USB disconnect, device number 14 [ 316.565926][ T5906] usb 3-1: SerialNumber: syz [ 316.640981][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 316.662933][ T5906] usb 3-1: can't set config #1, error -32 [ 316.904460][ T24] usb 3-1: USB disconnect, device number 15 [ 317.267986][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.274843][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.648223][ T7735] 9pnet_fd: Insufficient options for proto=fd [ 320.146223][ T7740] IPVS: stopping backup sync thread 7741 ... [ 328.230135][ T5896] kernel write not supported for file /media0 (pid: 5896 comm: kworker/0:4) [ 330.177294][ T24] IPVS: starting estimator thread 0... [ 330.183708][ T7826] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 330.273515][ T7828] IPVS: using max 27 ests per chain, 64800 per kthread [ 331.617296][ T7843] random: crng reseeded on system resumption [ 334.043635][ T5886] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 334.142232][ T5861] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 334.306361][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 334.328517][ T5886] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 334.341037][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.351766][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 334.411431][ T5886] usb 5-1: config 0 descriptor?? [ 336.937977][ T5886] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 337.833355][ T5886] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 337.845763][ T5886] asix 5-1:0.0: probe with driver asix failed with error -71 [ 337.869430][ T5886] usb 5-1: USB disconnect, device number 8 [ 339.450677][ T7902] xt_nfacct: accounting object `syz1' does not exists [ 340.123293][ T5861] usb 2-1: unable to get BOS descriptor or descriptor too short [ 340.517606][ T5861] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 340.669692][ T5861] usb 2-1: chopping to 0 config(s) [ 340.675487][ T5861] usb 2-1: can't read configurations, error -32 [ 340.823421][ T5861] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 341.772387][ T7911] xt_CT: No such helper "pptp" [ 341.853500][ T5965] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 341.903534][ T5861] usb 2-1: device descriptor read/64, error -32 [ 342.021375][ T5861] usb usb2-port1: attempt power cycle [ 342.068590][ T5965] usb 4-1: Using ep0 maxpacket: 16 [ 342.090835][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.118856][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.170753][ T5965] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 342.327745][ T5965] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 343.162976][ T7930] syz.4.547: attempt to access beyond end of device [ 343.162976][ T7930] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 343.177359][ T7930] gfs2: error -5 reading superblock [ 343.237065][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.633022][ T5965] usb 4-1: config 0 descriptor?? [ 344.482996][ T5965] usbhid 4-1:0.0: can't add hid device: -71 [ 344.496870][ T5965] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 344.520636][ T5965] usb 4-1: USB disconnect, device number 19 [ 344.615510][ T5896] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 344.803682][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 344.936038][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.111530][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.280494][ T5896] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 345.409598][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.778708][ T5896] usb 1-1: config 0 descriptor?? [ 345.779887][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057bb8000: rx timeout, send abort [ 345.794409][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057bb8000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 345.809944][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057cf3000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 347.090571][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057cf3c00: rx timeout, send abort [ 347.100053][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057cf3c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 347.114785][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057cf2800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 347.490886][ T5896] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 347.539560][ T5896] corsair 0003:1B1C:1B02.0005: Failed to get K90 initial state (error -71). [ 348.252459][ T5896] usb 1-1: USB disconnect, device number 15 [ 348.411711][ T7966] fido_id[7966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 349.238315][ T7983] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 351.616907][ T7995] kernel profiling enabled (shift: 9) [ 351.711504][ T8011] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[8011] [ 351.918905][ T6189] Bluetooth: hci5: Frame reassembly failed (-84) [ 352.002248][ T5810] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 352.536248][ T8012] program syz.3.573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.673538][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 352.682428][ T8012] program syz.3.573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.692865][ T8012] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 352.813142][ T5810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.993703][ T5810] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 353.034594][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.085340][ T5810] usb 2-1: Product: syz [ 353.326629][ T5810] usb 2-1: Manufacturer: syz [ 353.558600][ T5810] usb 2-1: SerialNumber: syz [ 353.673996][ T5138] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 353.680437][ T5818] Bluetooth: hci5: command 0x1003 tx timeout [ 353.714742][ T5810] usb 2-1: config 0 descriptor?? [ 353.762198][ T5810] cdc_ether 2-1:0.0: probe with driver cdc_ether failed with error -22 [ 353.814201][ T5810] usb 2-1: unsupported MDLM descriptors [ 353.956478][ T5810] usb 2-1: USB disconnect, device number 18 [ 354.142063][ T8029] hub 8-0:1.0: USB hub found [ 354.153417][ T8029] hub 8-0:1.0: 1 port detected [ 354.404142][ T8031] netlink: 20 bytes leftover after parsing attributes in process `syz.3.579'. [ 355.523369][ T5965] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 355.592820][ T8041] mkiss: ax0: crc mode is auto. [ 356.583867][ T5965] usb 1-1: config 4 has an invalid interface number: 95 but max is 0 [ 357.849735][ T5965] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 357.862032][ T5965] usb 1-1: config 4 has no interface number 0 [ 357.868720][ T5965] usb 1-1: config 4 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 357.886325][ T5965] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 357.895828][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.904052][ T5965] usb 1-1: Product: syz [ 357.908392][ T5965] usb 1-1: Manufacturer: syz [ 358.070511][ T5965] usb 1-1: SerialNumber: syz [ 358.393581][ T5965] usb 1-1: can't set config #4, error -71 [ 358.403709][ T5965] usb 1-1: USB disconnect, device number 16 [ 359.459657][ T8057] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 360.125327][ T8057] CIFS: Unable to determine destination address [ 360.456848][ T8077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.591'. [ 361.074858][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072e0b800: rx timeout, send abort [ 361.083696][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888072e0b800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 361.098204][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888072e09800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 363.492426][ T8090] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 363.502025][ T8090] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 363.511677][ T8090] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 363.533488][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 363.533508][ T30] audit: type=1800 audit(2000000022.180:220): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.596" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 363.618373][ T5965] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 363.873419][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 363.908578][ T5965] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 363.991347][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.026411][ T5965] usb 4-1: config 0 descriptor?? [ 364.032444][ T8087] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 364.449126][ T5965] usbhid 4-1:0.0: can't add hid device: -71 [ 364.479190][ T5965] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 364.543708][ T5965] usb 4-1: USB disconnect, device number 20 [ 367.538667][ T8125] netlink: 32 bytes leftover after parsing attributes in process `syz.1.610'. [ 368.350689][ T8128] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.687172][ T8139] xt_socket: unknown flags 0x8 [ 369.345727][ T8128] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.580310][ T8128] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.603570][ T5896] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 369.720803][ T8128] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.793884][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 369.810182][ T5896] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 369.828633][ T5896] usb 2-1: config 0 has no interface number 0 [ 369.852455][ T5896] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 369.866841][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.876966][ T5896] usb 2-1: Product: syz [ 369.881182][ T5896] usb 2-1: Manufacturer: syz [ 369.890723][ T5896] usb 2-1: SerialNumber: syz [ 369.906360][ T5896] usb 2-1: config 0 descriptor?? [ 370.228730][ T8128] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.255954][ T5896] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 370.273563][ T5896] usb 2-1: Failed to initialize entity for entity 6 [ 370.287295][ T5896] usb 2-1: Failed to register entities (-22). [ 370.337760][ T8128] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.688604][ T8128] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.823317][ T5896] usb 2-1: USB disconnect, device number 19 [ 371.100080][ T8128] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.321408][ T8154] syz.3.619 (8154) used greatest stack depth: 17328 bytes left [ 372.891979][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057342000: rx timeout, send abort [ 372.901038][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057342000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 372.916025][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057340000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 374.195217][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057340800: rx timeout, send abort [ 374.208224][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057340800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 374.222807][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057340c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 377.499402][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055d9a400: rx timeout, send abort [ 377.999709][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055d9b400: rx timeout, send abort [ 378.008186][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055d9a400: abort rx timeout. Force session deactivation [ 378.508085][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055d9b400: abort rx timeout. Force session deactivation [ 378.712567][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.719209][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.439678][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 387.179279][ T30] audit: type=1326 audit(2000000045.870:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90978e929 code=0x7ffc0000 [ 387.268544][ T30] audit: type=1326 audit(2000000045.900:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff90978e929 code=0x7ffc0000 [ 387.340812][ T30] audit: type=1326 audit(2000000045.900:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90978e929 code=0x7ffc0000 [ 387.374586][ T5906] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 387.574400][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 389.489309][ T5906] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 389.508940][ T5906] usb 5-1: config 179 has no interface number 0 [ 389.706604][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 389.776025][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 389.970947][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 389.985903][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 389.997678][ T5906] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 390.015061][ T5906] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 390.024226][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.077416][ T8280] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 390.374507][ T8302] trusted_key: encrypted_key: key user:syz not found [ 390.799272][ T5886] usb 5-1: USB disconnect, device number 9 [ 390.799295][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 390.820692][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 390.922056][ T5810] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 391.783384][ T5810] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 391.801604][ T5810] usb 2-1: config 0 has no interface number 0 [ 391.815461][ T5810] usb 2-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 392.523357][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.531425][ T5810] usb 2-1: Product: syz [ 392.620657][ T5810] usb 2-1: Manufacturer: syz [ 392.630746][ T5810] usb 2-1: SerialNumber: syz [ 392.643802][ T5810] usb 2-1: config 0 descriptor?? [ 392.653995][ T5810] ums-usbat 2-1:0.23: USB Mass Storage device detected [ 393.376477][ T5896] usb 2-1: USB disconnect, device number 20 [ 395.908574][ T5906] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 396.012638][ T5965] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 396.188036][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 396.210306][ T5906] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 396.224661][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.323315][ T5965] usb 1-1: Using ep0 maxpacket: 8 [ 396.481683][ T5906] usb 5-1: config 0 descriptor?? [ 396.497926][ T5965] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 396.509153][ T5965] usb 1-1: config 179 has no interface number 0 [ 396.516081][ T8346] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 396.560331][ T5965] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 396.611407][ T5965] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 396.630137][ T5965] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 396.641774][ T5965] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 396.673382][ T5965] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 397.075040][ T5965] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 397.180255][ T5906] usbhid 5-1:0.0: can't add hid device: -71 [ 397.277118][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 397.308071][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.434745][ T5906] usb 5-1: USB disconnect, device number 10 [ 397.441283][ T8348] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 397.670292][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.723872][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.016839][ T5810] usb 1-1: USB disconnect, device number 17 [ 398.016844][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 398.016989][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 398.039547][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.140372][ T8368] Invalid ELF header magic: != ELF [ 400.206844][ T8383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.424250][ T8392] [U]  [ 400.544865][ T5874] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 400.552776][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 402.293353][ T5874] usb 3-1: device descriptor read/64, error -32 [ 403.563363][ T5874] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 403.584423][ T8402] [U]  [ 403.873392][ T5810] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 404.051942][ T5810] usb 1-1: Using ep0 maxpacket: 16 [ 404.107994][ T5810] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 404.203508][ T5861] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 404.283004][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 404.340965][ T5810] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 404.445290][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.510000][ T5861] usb 2-1: Using ep0 maxpacket: 8 [ 404.559926][ T5810] usb 1-1: Product: syz [ 404.565042][ T5861] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 404.581183][ T5810] usb 1-1: Manufacturer: syz [ 404.590652][ T5861] usb 2-1: config 179 has no interface number 0 [ 404.603486][ T5810] usb 1-1: SerialNumber: syz [ 404.608333][ T5861] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 404.631913][ T5861] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 404.649129][ T5810] usb 1-1: config 0 descriptor?? [ 404.785115][ T5810] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 404.797824][ T5861] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 404.827028][ T5810] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 404.847855][ T5861] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 404.870607][ T5861] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 404.899042][ T5861] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 404.909194][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.929623][ T8412] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 404.934128][ T8423] hsr0: entered promiscuous mode [ 404.953495][ T5874] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 404.977800][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 404.990774][ T8423] hsr_slave_0: left promiscuous mode [ 405.003089][ T8423] hsr_slave_1: left promiscuous mode [ 405.031778][ T8423] hsr0 (unregistering): left promiscuous mode [ 405.145138][ T5874] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 405.161923][ T5874] usb 3-1: config 5 has no interface number 0 [ 405.172789][ T5874] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 405.188153][ T5874] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 405.193024][ T8412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.200436][ T5874] usb 3-1: config 5 interface 123 has no altsetting 0 [ 405.215414][ T5965] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 405.249230][ T5874] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 405.252636][ T8412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.261344][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.279443][ T5874] usb 3-1: Product: syz [ 405.284818][ T5874] usb 3-1: Manufacturer: syz [ 405.289569][ T5874] usb 3-1: SerialNumber: syz [ 405.294509][ T5810] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 405.295170][ T5810] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 405.308444][ T8415] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 405.319861][ T5810] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 405.327265][ T5810] em28xx 1-1:0.0: No AC97 audio processor [ 405.367553][ T5810] usb 1-1: USB disconnect, device number 18 [ 405.378553][ T5810] em28xx 1-1:0.0: Disconnecting em28xx [ 405.388371][ T5810] em28xx 1-1:0.0: Freeing device [ 405.408226][ T5965] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.418836][ T5906] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 405.430941][ T5965] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.450832][ T5965] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 405.460276][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 405.468518][ T5965] usb 5-1: SerialNumber: syz [ 405.585857][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.605860][ T5906] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 405.633266][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.656119][ T5906] usb 4-1: config 0 descriptor?? [ 405.698840][ T5965] usb 5-1: 0:2 : does not exist [ 405.736484][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 405.744949][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 405.753437][ T5861] usb 2-1: USB disconnect, device number 21 [ 405.821120][ T5965] usb 5-1: USB disconnect, device number 11 [ 405.910848][ T5906] usbhid 4-1:0.0: can't add hid device: -71 [ 405.919406][ T6771] udevd[6771]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.938403][ T5906] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 405.970656][ T5906] usb 4-1: USB disconnect, device number 21 [ 406.217736][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 406.255493][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'. [ 406.298907][ T8432] netlink: 'syz.1.707': attribute type 13 has an invalid length. [ 406.849014][ T8446] netlink: 60 bytes leftover after parsing attributes in process `syz.4.710'. [ 406.927444][ T8446] hub 8-0:1.0: USB hub found [ 406.934019][ T8446] hub 8-0:1.0: 1 port detected [ 407.853391][ T5906] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 407.957644][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 408.042426][ T8461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.103458][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 408.153300][ T5861] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 408.184330][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 408.265853][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 408.281746][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 408.317334][ T5874] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 408.324123][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 408.343645][ T5861] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 408.354484][ T5861] usb 4-1: config 179 has no interface number 0 [ 408.375188][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 408.394641][ T5861] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 408.410899][ T5874] usb 3-1: USB disconnect, device number 18 [ 408.418748][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.446568][ T5861] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 408.465401][ T5861] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 408.481799][ T5861] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 408.629624][ T10] usb 5-1: Product: syz [ 408.630243][ T5861] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 408.657464][ T10] usb 5-1: Manufacturer: syz [ 408.672287][ T10] usb 5-1: SerialNumber: syz [ 408.690165][ T5861] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 408.691612][ T10] usb 5-1: config 0 descriptor?? [ 408.727968][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 408.747631][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 408.770676][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.979073][ T8470] [U]  [ 411.733328][ T5874] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 411.765292][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 411.771943][ T10] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 411.783260][ T10] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 411.790547][ T10] em28xx 5-1:0.0: No AC97 audio processor [ 411.858781][ T5861] usb 4-1: can't set config #179, error -71 [ 411.882729][ T10] usb 5-1: USB disconnect, device number 12 [ 411.938969][ T5861] usb 4-1: USB disconnect, device number 22 [ 412.019625][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 412.094123][ T10] em28xx 5-1:0.0: Freeing device [ 413.054330][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 413.543262][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 413.569187][ T5906] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 413.576888][ T5906] usb 2-1: chopping to 0 config(s) [ 413.582183][ T5906] usb 2-1: can't read configurations, error -32 [ 413.663306][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.705777][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 413.748084][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.756514][ T5906] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 413.795442][ T10] usb 5-1: config 0 descriptor?? [ 413.913455][ T5906] usb 2-1: device descriptor read/64, error -32 [ 414.051762][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 414.058032][ T5906] usb usb2-port1: attempt power cycle [ 414.073445][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 414.124256][ T10] usb 5-1: USB disconnect, device number 13 [ 414.196695][ T8496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.353620][ T5810] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 414.443397][ T5861] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 414.630179][ T8504] [U]  [ 414.803456][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 415.221825][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 415.411214][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 415.506985][ T10] usb 1-1: config 179 has no interface number 0 [ 415.590811][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 415.689627][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 415.769455][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 415.836480][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 415.893438][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 415.923514][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 415.957488][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.173480][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 416.216262][ T8502] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 416.420949][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 416.875599][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16824, setting to 1024 [ 416.887013][ T5810] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 416.900282][ T5810] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.909622][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.917904][ T8502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.926119][ T8502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.926618][ T5861] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 416.951872][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 416.969124][ T5810] usb 3-1: config 0 descriptor?? [ 416.977435][ T5861] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 416.986941][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.995086][ T5861] usb 4-1: Product: syz [ 416.999426][ T5861] usb 4-1: Manufacturer: syz [ 417.025890][ T5861] usb 4-1: SerialNumber: syz [ 417.081535][ T5861] usb 4-1: config 0 descriptor?? [ 417.110564][ T5861] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 417.140837][ T5810] usb 3-1: can't set config #0, error -71 [ 417.173320][ T5861] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 417.194706][ T5810] usb 3-1: USB disconnect, device number 20 [ 417.253780][ T5886] usb 1-1: USB disconnect, device number 19 [ 417.253781][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 417.253829][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 417.348147][ T5861] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 417.475733][ T5861] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 417.553633][ T5861] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 417.608754][ T980] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 417.651976][ T5861] em28xx 4-1:0.0: No AC97 audio processor [ 417.772598][ T5861] usb 4-1: USB disconnect, device number 23 [ 417.786882][ T5861] em28xx 4-1:0.0: Disconnecting em28xx [ 417.794533][ T5861] em28xx 4-1:0.0: Freeing device [ 417.845776][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 417.921069][ T980] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 418.048141][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.106624][ T980] usb 5-1: config 0 descriptor?? [ 418.231719][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 418.483390][ T5861] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 419.201516][ T980] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 419.213556][ T980] asix 5-1:0.0: probe with driver asix failed with error -32 [ 419.305123][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 419.378768][ T5861] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 419.391935][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.402250][ T5861] usb 4-1: Product: syz [ 419.418999][ T5861] usb 4-1: Manufacturer: syz [ 419.440352][ T5861] usb 4-1: SerialNumber: syz [ 419.465085][ T5861] usb 4-1: config 0 descriptor?? [ 419.511078][ T8538] netlink: 'syz.0.746': attribute type 20 has an invalid length. [ 420.028621][ T5861] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 420.298454][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 420.502249][ T980] usb 5-1: USB disconnect, device number 14 [ 420.600226][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.626393][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 420.643065][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.740256][ T5861] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 420.759256][ T10] usb 3-1: config 0 descriptor?? [ 420.867182][ T8554] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 420.874357][ T8554] overlayfs: failed to set xattr on upper [ 420.880168][ T8554] overlayfs: ...falling back to redirect_dir=nofollow. [ 420.887251][ T8554] overlayfs: ...falling back to index=off. [ 420.893090][ T8554] overlayfs: ...falling back to uuid=null. [ 420.899099][ T8554] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 420.909838][ T5886] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 420.912415][ T8551] netlink: 40 bytes leftover after parsing attributes in process `syz.4.750'. [ 421.158434][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 421.450113][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 421.457594][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 421.474616][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 421.498238][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 421.536515][ T10] usb 3-1: USB disconnect, device number 21 [ 421.551731][ T5886] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 421.569160][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.577732][ T5886] usb 2-1: Product: syz [ 421.582079][ T5886] usb 2-1: Manufacturer: syz [ 421.591772][ T5886] usb 2-1: SerialNumber: syz [ 421.609031][ T5886] usb 2-1: config 0 descriptor?? [ 421.627203][ T5886] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 421.636753][ T5886] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 421.783840][ T5810] usb 4-1: USB disconnect, device number 24 [ 421.816441][ T5896] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 421.986830][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 422.000516][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 422.025001][ T5896] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 422.068880][ T5896] usb 5-1: config 179 has no interface number 0 [ 422.095914][ T5896] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 422.161438][ T5896] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 422.183658][ T5886] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 422.191076][ T5886] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 422.327923][ T5896] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 422.611726][ T5896] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 422.773457][ T5896] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 422.849014][ T5896] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 422.890139][ T5886] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 422.897845][ T5886] em28xx 2-1:0.0: No AC97 audio processor [ 422.926584][ T5886] usb 2-1: USB disconnect, device number 25 [ 422.942291][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.964059][ T5886] em28xx 2-1:0.0: Disconnecting em28xx [ 422.989815][ T5886] em28xx 2-1:0.0: Freeing device [ 423.010051][ T8558] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 423.256707][ T8558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.293313][ T5810] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 423.328067][ T8558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.503676][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 423.541042][ T5810] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 423.607758][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.693315][ T5886] usb 5-1: USB disconnect, device number 15 [ 423.693326][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 423.693476][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 423.781848][ T5810] usb 4-1: config 0 descriptor?? [ 424.489006][ T5810] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 424.505018][ T5810] asix 4-1:0.0: probe with driver asix failed with error -32 [ 424.718538][ T8598] bad cache= option: no%e [ 424.718538][ T8598] [ 424.733697][ T8598] CIFS: VFS: bad cache= option: no%e [ 425.047812][ T5810] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 425.247909][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.319162][ T5810] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 425.451526][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.692000][ T5810] usb 1-1: config 0 descriptor?? [ 425.986022][ T5810] usbhid 1-1:0.0: can't add hid device: -71 [ 426.004739][ T5810] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 426.053599][ T5810] usb 1-1: USB disconnect, device number 20 [ 426.096602][ T8608] netlink: 176 bytes leftover after parsing attributes in process `syz.4.769'. [ 426.103657][ T5896] usb 4-1: USB disconnect, device number 25 [ 426.703591][ T5896] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 427.593287][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 427.611665][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 427.671530][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 427.730473][ T5896] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 427.751709][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.781250][ T5896] usb 4-1: Product: syz [ 427.801894][ T5896] usb 4-1: Manufacturer: syz [ 427.817421][ T5896] usb 4-1: SerialNumber: syz [ 427.833676][ T5810] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 427.841981][ T5896] usb 4-1: config 0 descriptor?? [ 427.851604][ T5896] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 427.865797][ T5896] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 427.998023][ T5810] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.013054][ T5810] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.032038][ T5810] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 428.053934][ T5906] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 428.054432][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 428.083533][ T5810] usb 2-1: SerialNumber: syz [ 428.358125][ T5810] usb 2-1: 0:2 : does not exist [ 428.376425][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 428.396340][ T5906] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 428.414954][ T5906] usb 5-1: config 179 has no interface number 0 [ 428.419250][ T5810] usb 2-1: USB disconnect, device number 26 [ 428.427815][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 428.469708][ T5896] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 428.486137][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 428.503364][ T5896] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 428.521018][ T5896] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 428.535016][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 428.544093][ T6349] udevd[6349]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.562721][ T5896] em28xx 4-1:0.0: No AC97 audio processor [ 428.610669][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 428.633843][ T5896] usb 4-1: USB disconnect, device number 26 [ 428.659122][ T5896] em28xx 4-1:0.0: Disconnecting em28xx [ 428.671064][ T5906] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 428.708458][ T5896] em28xx 4-1:0.0: Freeing device [ 428.722915][ T5906] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 428.762768][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.799035][ T8637] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 428.847159][ T8657] binder: BINDER_SET_CONTEXT_MGR already set [ 428.856726][ T8657] binder: 8656:8657 ioctl 4018620d 200000000040 returned -16 [ 428.903491][ T6846] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 429.041996][ T8637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.071491][ T6846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.104509][ T8637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.112590][ T6846] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.163352][ T6846] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 429.183862][ T6846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 429.237099][ T6846] usb 3-1: SerialNumber: syz [ 429.386981][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 429.496074][ T5896] usb 5-1: USB disconnect, device number 16 [ 429.496139][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 429.510454][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 430.340782][ T6846] usb 3-1: 0:2 : does not exist [ 430.561687][ T6846] usb 3-1: USB disconnect, device number 22 [ 430.604973][ T8680] netlink: 176 bytes leftover after parsing attributes in process `syz.1.786'. [ 430.809341][ T6349] udevd[6349]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.112272][ T8692] bad cache= option: no%e [ 431.112272][ T8692] [ 431.264296][ T8692] CIFS: VFS: bad cache= option: no%e [ 431.477428][ T8699] binder: BINDER_SET_CONTEXT_MGR already set [ 431.493321][ T8699] binder: 8698:8699 ioctl 4018620d 200000000040 returned -16 [ 431.833426][ T5906] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 431.954214][ T5896] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 431.980805][ T8708] hsr0: entered promiscuous mode [ 431.988113][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 431.999766][ T8708] hsr_slave_0: left promiscuous mode [ 432.003418][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 432.010403][ T8708] hsr_slave_1: left promiscuous mode [ 432.015984][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 432.016016][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 432.020179][ T5906] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 432.085346][ T8708] hsr0 (unregistering): left promiscuous mode [ 432.085612][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.113814][ T5906] usb 2-1: Product: syz [ 432.118138][ T5906] usb 2-1: Manufacturer: syz [ 432.122757][ T5906] usb 2-1: SerialNumber: syz [ 432.146968][ T5906] usb 2-1: config 0 descriptor?? [ 432.169870][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 432.177254][ T5896] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 432.188389][ T5906] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 432.204174][ T5896] usb 4-1: config 179 has no interface number 0 [ 432.210630][ T5896] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 432.233258][ T5906] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 432.253350][ T5896] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 432.273594][ T5896] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 432.327294][ T5896] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 432.375037][ T5896] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 432.457141][ T5896] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 432.516733][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.925919][ T8706] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 432.991845][ T5906] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 433.004666][ T5906] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 433.012815][ T5906] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 433.035775][ T5906] em28xx 2-1:0.0: No AC97 audio processor [ 433.067457][ T5906] usb 2-1: USB disconnect, device number 27 [ 433.092443][ T5906] em28xx 2-1:0.0: Disconnecting em28xx [ 433.103490][ T5906] em28xx 2-1:0.0: Freeing device [ 433.215899][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.242218][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.358156][ T5906] usb 4-1: USB disconnect, device number 27 [ 434.364272][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 434.364328][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 434.648111][ T8733] binder: BINDER_SET_CONTEXT_MGR already set [ 434.654499][ T8733] binder: 8732:8733 ioctl 4018620d 200000000040 returned -16 [ 435.066855][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 435.563234][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 435.575589][ T10] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 435.742166][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.081653][ T10] usb 2-1: config 0 descriptor?? [ 437.544994][ T8760] [U]  [ 437.750246][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 437.993679][ T5810] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 438.204052][ T5810] usb 5-1: Using ep0 maxpacket: 16 [ 438.370838][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 438.372964][ T5810] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 438.382524][ T10] asix 2-1:0.0: probe with driver asix failed with error -71 [ 438.404737][ T10] usb 2-1: USB disconnect, device number 28 [ 438.425611][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 438.491490][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.816'. [ 438.493578][ T5810] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 438.549623][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.573422][ T5810] usb 5-1: Product: syz [ 438.577659][ T5810] usb 5-1: Manufacturer: syz [ 438.583434][ T5810] usb 5-1: SerialNumber: syz [ 438.606383][ T5810] usb 5-1: config 0 descriptor?? [ 438.620490][ T5810] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 438.638491][ T5810] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 438.891440][ T8773] hub 8-0:1.0: USB hub found [ 438.897847][ T8773] hub 8-0:1.0: 1 port detected [ 439.763629][ T5810] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 439.770159][ T5810] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 439.779925][ T5810] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 439.791269][ T5810] em28xx 5-1:0.0: No AC97 audio processor [ 439.833742][ T5810] usb 5-1: USB disconnect, device number 17 [ 439.848995][ T5810] em28xx 5-1:0.0: Disconnecting em28xx [ 440.173855][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.183222][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.328795][ T5810] em28xx 5-1:0.0: Freeing device [ 441.302850][ T8792] IPVS: stopping backup sync thread 8794 ... [ 441.308849][ T8794] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 442.049158][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 442.366983][ T8812] [U]  [ 442.644729][ T8814] hub 8-0:1.0: USB hub found [ 442.660268][ T8814] hub 8-0:1.0: 1 port detected [ 443.344287][ T8818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.783013][ T8825] vivid-000: ================= START STATUS ================= [ 444.937832][ T8825] vivid-000: Test Pattern: 75% Colorbar [ 445.094474][ T8825] vivid-000: Fill Percentage of Frame: 100 [ 445.100555][ T8825] vivid-000: Horizontal Movement: No Movement [ 445.126304][ T8825] vivid-000: Vertical Movement: No Movement [ 445.167133][ T8825] vivid-000: OSD Text Mode: All [ 445.176303][ T8825] vivid-000: Show Border: false [ 445.213531][ T8825] vivid-000: Show Square: false [ 445.255571][ T8825] vivid-000: Sensor Flipped Horizontally: false [ 445.334675][ T8825] vivid-000: Sensor Flipped Vertically: false [ 445.453541][ T8825] vivid-000: Insert SAV Code in Image: false [ 445.487335][ T8825] vivid-000: Insert EAV Code in Image: false [ 445.550693][ T8825] vivid-000: Insert Video Guard Band: false [ 445.626979][ T8825] vivid-000: Reduced Framerate: false [ 445.692443][ T8825] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 445.834973][ T8842] binder: BINDER_SET_CONTEXT_MGR already set [ 445.885247][ T8825] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 445.924696][ T8842] binder: 8840:8842 ioctl 4018620d 200000000040 returned -16 [ 445.996938][ T8825] vivid-000: Enable Capture Cropping: true grabbed [ 446.010990][ T8825] vivid-000: Enable Capture Composing: true grabbed [ 446.024294][ T8825] vivid-000: Enable Capture Scaler: true grabbed [ 446.042182][ T8825] vivid-000: Timestamp Source: End of Frame [ 446.075492][ T8825] vivid-000: Colorspace: sRGB [ 446.099556][ T8825] vivid-000: Transfer Function: Default [ 446.323331][ T8825] vivid-000: Y'CbCr Encoding: Default [ 446.420626][ T8825] vivid-000: HSV Encoding: Hue 0-179 [ 446.773768][ T8825] vivid-000: Quantization: Default [ 446.836759][ T8825] vivid-000: Apply Alpha To Red Only: false [ 446.964920][ T8856] hub 8-0:1.0: USB hub found [ 446.973524][ T8856] hub 8-0:1.0: 1 port detected [ 447.221910][ T8825] vivid-000: Standard Aspect Ratio: 4x3 [ 447.235724][ T8825] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 447.243718][ T8825] vivid-000: DV Timings: 640x480p59 inactive [ 447.249847][ T8825] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 447.258496][ T8825] vivid-000: Maximum EDID Blocks: 2 [ 447.263873][ T8825] vivid-000: Limited RGB Range (16-235): false [ 447.270433][ T8825] vivid-000: Rx RGB Quantization Range: Automatic [ 447.277049][ T8825] vivid-000: Power Present: 0x00000001 [ 447.283052][ T8825] tpg source WxH: 320x180 (R'G'B) [ 447.288225][ T8825] tpg field: 1 [ 447.291666][ T8825] tpg crop: (0,0)/320x180 [ 447.296179][ T8825] tpg compose: (0,0)/320x180 [ 447.300951][ T8825] tpg colorspace: 8 [ 447.304874][ T8825] tpg transfer function: 0/2 [ 447.309574][ T8825] tpg quantization: 0/1 [ 447.314260][ T8825] tpg RGB range: 0/2 [ 447.318269][ T8825] vivid-000: ================== END STATUS ================== [ 449.976534][ T8862] [U]  [ 450.646833][ T8887] binder: BINDER_SET_CONTEXT_MGR already set [ 450.684126][ T8887] binder: 8886:8887 ioctl 4018620d 200000000040 returned -16 [ 452.474790][ T8903] hub 8-0:1.0: USB hub found [ 452.506006][ T8903] hub 8-0:1.0: 1 port detected [ 452.924364][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 453.024779][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.859'. [ 453.193169][ T8907] netlink: 'syz.4.859': attribute type 13 has an invalid length. [ 453.565539][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 454.153356][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 454.161217][ T10] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 454.183633][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.223910][ T10] usb 4-1: config 0 descriptor?? [ 455.225053][ T8928] binder: BINDER_SET_CONTEXT_MGR already set [ 455.231402][ T8928] binder: 8927:8928 ioctl 4018620d 200000000040 returned -16 [ 455.813563][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 455.841276][ T10] asix 4-1:0.0: probe with driver asix failed with error -32 [ 456.023423][ T8934] [U]  [ 457.773321][ T10] usb 4-1: USB disconnect, device number 28 [ 460.279881][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 465.397332][ T8998] [U]  [ 468.017743][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 468.094426][ T9001] netlink: 176 bytes leftover after parsing attributes in process `syz.2.884'. [ 469.163358][ T5861] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 470.384621][ T5861] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 470.405296][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.427349][ T5861] usb 4-1: Product: syz [ 470.431584][ T5861] usb 4-1: Manufacturer: syz [ 471.083214][ T5861] usb 4-1: SerialNumber: syz [ 471.114310][ T5861] usb 4-1: config 0 descriptor?? [ 471.162964][ T9030] IPVS: stopping backup sync thread 7983 ... [ 471.339016][ T5861] usb 4-1: can't set config #0, error -71 [ 471.473529][ T5861] usb 4-1: USB disconnect, device number 29 [ 473.763708][ T9057] netlink: 176 bytes leftover after parsing attributes in process `syz.2.900'. [ 474.405221][ T9059] [U]  [ 478.873310][ T5896] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 479.767503][ T5896] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 479.804666][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.955679][ T5896] usb 2-1: Product: syz [ 479.987609][ T5896] usb 2-1: Manufacturer: syz [ 480.094256][ T5896] usb 2-1: SerialNumber: syz [ 480.426814][ T5896] usb 2-1: config 0 descriptor?? [ 480.749305][ T5896] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 480.759237][ T9087] netlink: 176 bytes leftover after parsing attributes in process `syz.0.912'. [ 481.499327][ T9102] [U]  [ 482.714850][ T5896] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 485.803824][ T5896] usb 2-1: USB disconnect, device number 29 [ 485.871225][ T9105] loop6: detected capacity change from 0 to 524287999 [ 488.863386][ T5896] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 489.025530][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.103206][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 489.163953][ T5896] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 489.184647][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 489.300605][ T5896] usb 1-1: SerialNumber: syz [ 489.657111][ T5896] usb 1-1: 0:2 : does not exist [ 489.897231][ T5896] usb 1-1: USB disconnect, device number 21 [ 490.059629][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.928'. [ 490.114217][ T6771] udevd[6771]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.413551][ T9163] IPVS: stopping backup sync thread 9165 ... [ 491.427088][ T9165] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 492.693257][ T6846] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 493.503249][ T6846] usb 4-1: Using ep0 maxpacket: 8 [ 493.538669][ T6846] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 493.620921][ T6846] usb 4-1: config 179 has no interface number 0 [ 493.710067][ T6846] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 493.778309][ T6846] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 494.073003][ T6846] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 494.284760][ T6846] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 494.297337][ T6846] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 494.312364][ T6846] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 494.360380][ T6846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.427110][ T9173] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 494.725177][ T9173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.758335][ T9173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.271400][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.944'. [ 495.273811][ T10] usb 4-1: USB disconnect, device number 30 [ 495.280351][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 495.280406][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 496.532184][ T9216] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 496.535914][ T9213] IPVS: stopping backup sync thread 9216 ... [ 500.403313][ T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 500.669241][ T9244] bad cache= option: no%e [ 500.669241][ T9244] [ 500.676028][ T9244] CIFS: VFS: bad cache= option: no%e [ 502.036860][ T9251] Bluetooth: MGMT ver 1.23 [ 502.588364][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.594961][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.599466][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 503.903361][ T10] usb 1-1: device descriptor read/all, error -71 [ 505.423375][ T9277] IPVS: stopping backup sync thread 9279 ... [ 505.429574][ T9279] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 506.984456][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 507.133416][ T5906] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 507.153187][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 507.175578][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 507.184302][ T5965] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 507.203307][ T10] usb 3-1: config 179 has no interface number 0 [ 507.209652][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 507.233467][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 507.263340][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 507.284024][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 507.304482][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 507.335075][ T5906] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 507.353207][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.362280][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 507.371733][ T5906] usb 1-1: Product: syz [ 507.377841][ T5965] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.393206][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.401429][ T5965] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.410449][ T5906] usb 1-1: Manufacturer: syz [ 507.424802][ T5906] usb 1-1: SerialNumber: syz [ 507.431662][ T9295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 507.441945][ T5965] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 507.455909][ T5906] usb 1-1: config 0 descriptor?? [ 507.465355][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 507.519735][ T5965] usb 4-1: SerialNumber: syz [ 507.684503][ T5906] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 507.760049][ T5965] usb 4-1: 0:2 : does not exist [ 507.774243][ T9295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.806302][ T9295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.552670][ T5886] usb 3-1: USB disconnect, device number 23 [ 508.552712][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 508.552849][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 508.677856][ T5965] usb 4-1: USB disconnect, device number 31 [ 508.997569][ T6349] udevd[6349]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.034706][ T9309] netlink: 176 bytes leftover after parsing attributes in process `syz.1.974'. [ 509.106377][ T5906] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 509.119697][ T5906] usb 1-1: USB disconnect, device number 24 [ 512.380287][ T9343] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 513.308026][ T9338] ------------[ cut here ]------------ [ 513.314027][ T9338] WARNING: CPU: 0 PID: 9338 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 513.324001][ T9338] Modules linked in: [ 513.328191][ T9338] CPU: 0 UID: 0 PID: 9338 Comm: syz.4.981 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 513.340615][ T9338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 513.351057][ T9338] RIP: 0010:folio_memcg+0x1a8/0x310 [ 513.356517][ T9338] Code: 80 3c 28 00 74 08 4c 89 f7 e8 b4 cc 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 89 74 ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 513.376388][ T9338] RSP: 0018:ffffc9001b0e7250 EFLAGS: 00010283 [ 513.382529][ T9338] RAX: ffffffff8205d907 RBX: 0000000000000000 RCX: 0000000000080000 [ 513.390635][ T9338] RDX: ffffc9000d589000 RSI: 0000000000002342 RDI: 0000000000002343 [ 513.398719][ T9338] RBP: 0000000000000000 R08: ffffea0001e3a207 R09: 1ffffd40003c7440 [ 513.407477][ T9338] R10: dffffc0000000000 R11: fffff940003c7441 R12: ffffea0001e3a230 [ 513.416167][ T9338] R13: dffffc0000000000 R14: ffff8880714d7580 R15: 0000000000000002 [ 513.424370][ T9338] FS: 00007f0dbf0406c0(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 513.433719][ T9338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.440371][ T9338] CR2: 0000000000000000 CR3: 0000000057790000 CR4: 00000000003526f0 [ 513.448694][ T9338] Call Trace: [ 513.452081][ T9338] [ 513.455380][ T9338] workingset_activation+0x5f/0x4a0 [ 513.460636][ T9338] ? folio_mark_accessed+0x341/0x4a0 [ 513.466069][ T9338] folio_mark_accessed+0x3b5/0x4a0 [ 513.471237][ T9338] kvm_release_page_clean+0x9a/0xe0 [ 513.476682][ T9338] kvm_tdp_page_fault+0x2dd/0x370 [ 513.481776][ T9338] kvm_mmu_do_page_fault+0x2c5/0x640 [ 513.487193][ T9338] ? vmx_vcpu_run+0xd8b/0x25d0 [ 513.492215][ T9338] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 513.498139][ T9338] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 513.503787][ T9338] kvm_mmu_page_fault+0x22f/0xb70 [ 513.509526][ T9338] ? __pfx_handle_ept_violation+0x10/0x10 [ 513.515895][ T9338] vmx_handle_exit+0x1093/0x18a0 [ 513.520896][ T9338] ? vcpu_run+0x361c/0x6f70 [ 513.525514][ T9338] ? rcu_is_watching+0x15/0xb0 [ 513.530361][ T9338] vcpu_run+0x432e/0x6f70 [ 513.535582][ T9338] ? vcpu_run+0x361c/0x6f70 [ 513.540227][ T9338] ? __pfx_vcpu_run+0x10/0x10 [ 513.545707][ T9338] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 513.551495][ T9338] ? rcu_is_watching+0x15/0xb0 [ 513.557083][ T9338] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 513.562699][ T9338] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 513.569058][ T9338] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 513.575268][ T9338] ? rcu_is_watching+0x15/0xb0 [ 513.580100][ T9338] ? look_up_lock_class+0x74/0x170 [ 513.585539][ T9338] ? register_lock_class+0x51/0x320 [ 513.590808][ T9338] ? __lock_acquire+0xab9/0xd20 [ 513.595831][ T9338] kvm_vcpu_ioctl+0x95c/0xe90 [ 513.600564][ T9338] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 513.605915][ T9338] ? __lock_acquire+0xab9/0xd20 [ 513.611507][ T9338] ? __asan_memset+0x22/0x50 [ 513.616761][ T9338] ? smack_file_ioctl+0x302/0x340 [ 513.621844][ T9338] ? __pfx_smack_file_ioctl+0x10/0x10 [ 513.627355][ T9338] ? __fget_files+0x2a/0x420 [ 513.631999][ T9338] ? __fget_files+0x3a0/0x420 [ 513.637047][ T9338] ? __fget_files+0x2a/0x420 [ 513.641695][ T9338] ? bpf_lsm_file_ioctl+0x9/0x20 [ 513.646978][ T9338] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 513.652417][ T9338] __se_sys_ioctl+0xfc/0x170 [ 513.657232][ T9338] do_syscall_64+0xfa/0x3b0 [ 513.661806][ T9338] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.667690][ T9338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.673861][ T9338] ? clear_bhb_loop+0x60/0xb0 [ 513.678610][ T9338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.684651][ T9338] RIP: 0033:0x7f0dbe18e929 [ 513.689112][ T9338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.709917][ T9338] RSP: 002b:00007f0dbf040038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.719024][ T9338] RAX: ffffffffffffffda RBX: 00007f0dbe3b6080 RCX: 00007f0dbe18e929 [ 513.727162][ T9338] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 513.735303][ T9338] RBP: 00007f0dbe210b39 R08: 0000000000000000 R09: 0000000000000000 [ 513.743654][ T9338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.751678][ T9338] R13: 0000000000000001 R14: 00007f0dbe3b6080 R15: 00007ffd16ba88b8 [ 513.760184][ T9338] [ 513.763383][ T9338] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 513.770706][ T9338] CPU: 0 UID: 0 PID: 9338 Comm: syz.4.981 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 513.782668][ T9338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 513.792779][ T9338] Call Trace: [ 513.796102][ T9338] [ 513.799073][ T9338] dump_stack_lvl+0x99/0x250 [ 513.803824][ T9338] ? __asan_memcpy+0x40/0x70 [ 513.808565][ T9338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.813996][ T9338] ? __pfx__printk+0x10/0x10 [ 513.818632][ T9338] panic+0x2db/0x790 [ 513.822571][ T9338] ? __pfx_panic+0x10/0x10 [ 513.827069][ T9338] __warn+0x31b/0x4b0 [ 513.831086][ T9338] ? folio_memcg+0x1a8/0x310 [ 513.835733][ T9338] ? folio_memcg+0x1a8/0x310 [ 513.840347][ T9338] report_bug+0x2be/0x4f0 [ 513.844697][ T9338] ? folio_memcg+0x1a8/0x310 [ 513.849326][ T9338] ? folio_memcg+0x1a8/0x310 [ 513.854082][ T9338] ? folio_memcg+0x1aa/0x310 [ 513.858717][ T9338] handle_bug+0x84/0x160 [ 513.862998][ T9338] exc_invalid_op+0x1a/0x50 [ 513.867522][ T9338] asm_exc_invalid_op+0x1a/0x20 [ 513.872390][ T9338] RIP: 0010:folio_memcg+0x1a8/0x310 [ 513.877620][ T9338] Code: 80 3c 28 00 74 08 4c 89 f7 e8 b4 cc 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 89 74 ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 513.897251][ T9338] RSP: 0018:ffffc9001b0e7250 EFLAGS: 00010283 [ 513.903370][ T9338] RAX: ffffffff8205d907 RBX: 0000000000000000 RCX: 0000000000080000 [ 513.911356][ T9338] RDX: ffffc9000d589000 RSI: 0000000000002342 RDI: 0000000000002343 [ 513.919354][ T9338] RBP: 0000000000000000 R08: ffffea0001e3a207 R09: 1ffffd40003c7440 [ 513.927464][ T9338] R10: dffffc0000000000 R11: fffff940003c7441 R12: ffffea0001e3a230 [ 513.935463][ T9338] R13: dffffc0000000000 R14: ffff8880714d7580 R15: 0000000000000002 [ 513.943469][ T9338] ? folio_memcg+0x1a7/0x310 [ 513.948114][ T9338] workingset_activation+0x5f/0x4a0 [ 513.953343][ T9338] ? folio_mark_accessed+0x341/0x4a0 [ 513.958652][ T9338] folio_mark_accessed+0x3b5/0x4a0 [ 513.963785][ T9338] kvm_release_page_clean+0x9a/0xe0 [ 513.969034][ T9338] kvm_tdp_page_fault+0x2dd/0x370 [ 513.974176][ T9338] kvm_mmu_do_page_fault+0x2c5/0x640 [ 513.979482][ T9338] ? vmx_vcpu_run+0xd8b/0x25d0 [ 513.984280][ T9338] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 513.990126][ T9338] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 513.995706][ T9338] kvm_mmu_page_fault+0x22f/0xb70 [ 514.000779][ T9338] ? __pfx_handle_ept_violation+0x10/0x10 [ 514.006603][ T9338] vmx_handle_exit+0x1093/0x18a0 [ 514.011568][ T9338] ? vcpu_run+0x361c/0x6f70 [ 514.016092][ T9338] ? rcu_is_watching+0x15/0xb0 [ 514.020905][ T9338] vcpu_run+0x432e/0x6f70 [ 514.025279][ T9338] ? vcpu_run+0x361c/0x6f70 [ 514.029842][ T9338] ? __pfx_vcpu_run+0x10/0x10 [ 514.034544][ T9338] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 514.040289][ T9338] ? rcu_is_watching+0x15/0xb0 [ 514.045085][ T9338] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 514.050656][ T9338] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 514.056478][ T9338] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 514.062488][ T9338] ? rcu_is_watching+0x15/0xb0 [ 514.067275][ T9338] ? look_up_lock_class+0x74/0x170 [ 514.072411][ T9338] ? register_lock_class+0x51/0x320 [ 514.077642][ T9338] ? __lock_acquire+0xab9/0xd20 [ 514.082541][ T9338] kvm_vcpu_ioctl+0x95c/0xe90 [ 514.087239][ T9338] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 514.092460][ T9338] ? __lock_acquire+0xab9/0xd20 [ 514.097345][ T9338] ? __asan_memset+0x22/0x50 [ 514.101952][ T9338] ? smack_file_ioctl+0x302/0x340 [ 514.107002][ T9338] ? __pfx_smack_file_ioctl+0x10/0x10 [ 514.112404][ T9338] ? __fget_files+0x2a/0x420 [ 514.117014][ T9338] ? __fget_files+0x3a0/0x420 [ 514.121718][ T9338] ? __fget_files+0x2a/0x420 [ 514.126342][ T9338] ? bpf_lsm_file_ioctl+0x9/0x20 [ 514.131307][ T9338] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 514.136535][ T9338] __se_sys_ioctl+0xfc/0x170 [ 514.141149][ T9338] do_syscall_64+0xfa/0x3b0 [ 514.145762][ T9338] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.151010][ T9338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.157095][ T9338] ? clear_bhb_loop+0x60/0xb0 [ 514.161789][ T9338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.167693][ T9338] RIP: 0033:0x7f0dbe18e929 [ 514.172127][ T9338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.191755][ T9338] RSP: 002b:00007f0dbf040038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.200191][ T9338] RAX: ffffffffffffffda RBX: 00007f0dbe3b6080 RCX: 00007f0dbe18e929 [ 514.208177][ T9338] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 514.216159][ T9338] RBP: 00007f0dbe210b39 R08: 0000000000000000 R09: 0000000000000000 [ 514.224156][ T9338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.232152][ T9338] R13: 0000000000000001 R14: 00007f0dbe3b6080 R15: 00007ffd16ba88b8 [ 514.240159][ T9338] [ 514.243482][ T9338] Kernel Offset: disabled [ 514.247822][ T9338] Rebooting in 86400 seconds..