last executing test programs: 9.188545425s ago: executing program 0 (id=2445): socket(0x11, 0xa, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201410101090212000100001000090455070003490200"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 8.257955067s ago: executing program 4 (id=2448): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000108000240000000000800044000000002080003400000000008000540000000af0900010073797a30000000000900020073797a3200000000140000001100010000000004000000000000000a83802872fe595ed37176cbf432a19b895ec7c7c0505a93d5086dc39dd462d0913b5a0773a8dd0e5653b0"], 0x98}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCADDRT(r3, 0x890b, 0x0) r4 = socket(0x1d, 0x2, 0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000300)=0x8) sendmmsg$sock(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)="f4e78d4837b4c64b7bce30d85066e820619c9624346344714b2b454ea8f4eef1584fbfa34491c5c24c7b75198d6f0f7b69933483ee784106987e85d5f2a77f21d1c0cb9eb183e1a76d856e5ebd44bf761e52cefa49f6232ab391b4625ed815a87d9eed921d95eaf0cfb3eb3a921c34394f5fe05b9effc5", 0x77}, 0x1, 0x0, 0x0, 0x20048000}, 0x810) socket(0x400000000010, 0x3, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000200), 0x51, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000002c0)={@local, 0x2, 0x0, 0x1, 0x0, 0x82, 0x7}, 0x20) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffecd) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x20000000}, 0x10}, 0x94) 7.646859947s ago: executing program 1 (id=2452): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180)={0x0, 0x8}, &(0x7f0000000580)) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xc, 0x0, &(0x7f0000000240)="63cd5c1672914cd2d5c5ab9c"}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000300)={0x2, @output={0x0, 0x0, {0xffffffff, 0x4}, 0x9, 0x3}}) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmmsg(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="f48f2d", 0x7313485bca3e9141}], 0x1}}], 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.809640968s ago: executing program 3 (id=2453): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/vmcoreinfo', 0x20000, 0x21) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'gretap0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r3) 6.637419587s ago: executing program 4 (id=2454): r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000200008000000008001a00", @ANYRES32, @ANYBLOB="140012800b00010067656e6576650000040002"], 0x3c}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000540), 0x6700, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet(0x2, 0x800, 0xfffffffc) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendto$inet(r4, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 6.407657807s ago: executing program 3 (id=2456): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000004380)={@loopback, @broadcast}, 0x8) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000000300)=0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3fe, 0x400fff, 0x34565348, 0x3, 0x8, [{0x1a5, 0x13}, {0x8, 0xa}, {0xd, 0x208}, {0x5, 0x8}, {0x8, 0x3}, {0x5, 0x9}, {0x6, 0xc}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x20000000000006) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000000000008900000008000300", @ANYRES32, @ANYBLOB="10001d810c00000006"], 0x2c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) io_setup(0x6, &(0x7f0000001380)=0x0) r8 = eventfd(0xffffffff) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x4, r3, &(0x7f0000000440)="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", 0xfc, 0x9, 0x0, 0x2, r8}]) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x1010) 6.105384092s ago: executing program 3 (id=2458): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1ec}}, 0x0) r1 = io_uring_setup(0x679f, &(0x7f0000000380)={0x0, 0x5f41, 0x80}) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) io_uring_enter(r1, 0x3f3c, 0x1acb, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/55, 0x37}, 0x202) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090601020000000000008000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 5.99201253s ago: executing program 0 (id=2459): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x8000000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe1086e890000b420a1a93c523ff45f819e01170800000000000000ac0000000000000000000000000000977e000000000000000000000000001000", "fdff000000801900000000000000000200", [0x0, 0x2002000000000001]}}) 5.94359525s ago: executing program 0 (id=2460): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x42, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) (async) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) r7 = socket$netlink(0x10, 0x3, 0x15) writev(r7, &(0x7f00000003c0)=[{&(0x7f00000002c0)="390000001300034711bb65e1c3e40fff01000000010000005600000025000000190004000400000007fd17e5ffff3f3a0800040000000000000000da743dfc996a2f5ea3a356768876a6a42603147c79199fa17da8be305f75", 0x59}], 0x1) (async) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000000c0)={@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x4, 0x0, 0x0, 0x1}}, {&(0x7f0000000040)=""/59, 0x3b}, &(0x7f0000000080), 0x2}, 0xa0) (async) syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[], 0x0) sendto(r1, &(0x7f0000000180)="98e27a4d52a63089f3cf6ec09d26cc070d69d24ceb14fa4bce45e763b04110928572a366d310d80e5581e8b4e09ea0ae3c01173fd00fb6e51022ddbe8787453dd7c4fb4fe0890fc6af26034533", 0x4d, 0x800, &(0x7f0000000200)=@phonet={0x23, 0xca, 0x6, 0x70}, 0x80) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x68942, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x9, 0x3}, 0x10) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 5.715549819s ago: executing program 0 (id=2461): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000082505a1a440000102030109025c0002010000000904000001020d00000524"], 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '!(*)$@[/'}, {}, {0x20, ':@&'}, {0x20, '+\''}, {}], 0xa, "ea8ad3c686d6a2ca03c4354b4602377e2cdcdd83b52859a6252151b069cbf8242042969dd923f91c231f2dfc8191f544232fb0c7e6c34722"}, 0x55) 5.6275974s ago: executing program 4 (id=2462): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf2, 0x1a, 0x3b, 0x40, 0x54c, 0x69, 0x6d6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x0, 0x3b, 0x7c, 0xc2}}]}}]}}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x19b6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe2, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xa, 0x5, 0x1, {0x22, 0xe91}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0xeb, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2, 0x60, 0x4}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x7, 0x10, 0x2, 0x10, 0x3}, 0xb6, &(0x7f0000000200)={0x5, 0xf, 0xb6, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "5d6c7ac34df6f0885e01fe2f58e72328"}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "1c39c69cf1c16570cbe7947ed309be6c"}, @generic={0x82, 0x10, 0xb, "babc3ef47d643a47bbd2e2f544641e92f27306c7c29143ad2cf7bc94ef2c3867350e634b283c9de41dcfc38fe7c3743bafceab45a0b1e2520ba0e8576e3eca9128203fe49eae016d0e5a438ce06b076fb3fae27663d21a78e404e65bb4b1157175de5c5da3d6d665abcda9a0d9f1ec847516a4808e45cfc18719bc570338c0"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x4, 0xd9}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0xa3, &(0x7f0000000300)=@string={0xa3, 0x3, "08fae2b8485a55bf652c88a537d559fe4191c6b9f71be9bddad666432addbfa3a5976e3cfbe66490eaf55fbfc5395f967afa775a75cd4ffb9b9428ad83ce3827e2e7b17d1cde2cbc24720e701aeb7ca91a3287e9cf927ffb107532f8ca2db14b678d9fdcaf7ef6917f9b96fb4deb648c2c5d7aad727cd0d6d8ea524bfb4a598114c600970dc07b768f07fba1977b827e3c006e68784c539d23998d23420b7094b5"}}, {0x5f, &(0x7f0000000440)=@string={0xfffffffffffffff9, 0x3, "05241efd0729fef658e0ca1339b57011891b2086bb3bf47501192eb488ca8c477bb373786961564fb083f913e562bb809a8fde21164186ac8c57e69fc9abb4e4e7d4da92586c7d378d1217d24ac2a1ed77a1c9cbacfff11626d6e911a3"}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000700)={0x24, &(0x7f00000004c0)={0x0, 0x2a, 0xfc, {0xfc, 0x23, "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"}}, &(0x7f0000000600)={0x0, 0x3, 0x77, @string={0x77, 0x3, "bb787c52a642dfaec48fd3340cf3d7dd17e2f7ef82ade4001b979029a758dded5eda67b27623897f21580ebb1ecfa3ecbbfab504b9b30c75caa5965ad6e7dbedf5a3ff449e5c45d45ff545a080547226a14769edaeefa3d51bd7ecea2b8c854de1f9c069d223ed3e0926f0f6dd9cd565b58d57c0e3"}}, &(0x7f0000000680)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x5, "aba4edb2"}, @main=@item_4={0x3, 0x0, 0xa, "8b495d50"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xb, 0x1, {0x22, 0x614}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000740)={0x40, 0x15, 0x79, "52a76c5bdb2514c8ea71b869c630149a6ea8e01ad17533b3c44c1b5819ee817ff61ee8ac22797fcfd6731c46077d5b88ba9466983296ef4205c425503eb96fec4bb78a313bc1d4bac5b24642a771bf13ce7a9e7e5daf1bb1c35f6b94b4ad3c0223a112c72cd59f56c411800f6dc3ea15ed1f9e8f8346694dae"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x2b}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000840)={0x20, 0x1, 0xe2, "42c245865de89a50ebad11dbdaa2c4b00cea7d3391a18caee9b9047161c508185090c8786abf6e6af36a8f2702454913b9467c160111c0a82e5727e3c37a92b780761b7bde5490b599c4ac5e94b047c3028e6c1eb2e7f4f4ecdbc7b7ef8506eadb95f53e89aea5eb8f683ba7c7359f7215e4fea2da89437a1115ec22f6f88e973900dddd2ed68e71e42ff007c888d04d2f0f8e4baabb9791d78c537c9c6dd10151e9a3283fdac3f692985e4e5c680da2d910ae13ba81b3689215063f784e3fca278995f762707f5e5aa84bb9d74fcbc5bcfca6816af415a9ed01ba30fdad66350eb8"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x1d}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000b40)={0x14, &(0x7f0000000a40)={0x20, 0x3, 0xa3, {0xa3, 0xd, "9d854cea5a11d4e74664aa4a6f236fdeff1f83950a9d074dfab40f8e31394a82414bb04ec96611a025116899e943068ed5ea97eb1f6514355a65e020357592fbd54632f856e9966a0aba4a01cf2a2e5fd62474d27ebe45e33697bd29f7bb7a033c44fe3bf0d34a2fe6032ce97ab4282ada4336c43e00054a4b20ccfb6658b3883714dd48fd5098b08a225ead3fbfdd7dfc3c4135c4593226932f2ef8ccfc3006c3"}}, &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x1c, &(0x7f0000000bc0)={0x40, 0x16, 0xce, "0463bd8907d23064b071b35067d1cd2123937e32e56b83488f811726d7d327295a9f86bedc775bd95411236c0b231e3b538fc601a1777ef156163c1348078aa4263ea1e2d6a6f11a89d9960e91f99183be6f835aee93e24a0905854db79088c0812fbc24dc6ea07b2295f33427c16ea4591459fb968acf2cfd213c7755148e22e4d22cf8c22aa308d65132fce6cd7ae4923cbea49b5d812b1c4eaaf5a9999f350065c8b1c21f592fe07dc400c618d13bee08057c9bb54239d89ab60ed8a4d50f0ab9d609ab9a848491f2e8929807"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x5}}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = getpid() kcmp(r7, r7, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@known='trusted.overlay.origin\x00') ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = socket$inet6(0xa, 0x3, 0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r5, 0x4068aea3, &(0x7f0000000d80)) setsockopt$inet6_int(r8, 0x29, 0x13, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)={0x1c, 0x29, 0xb, 0x70bd27, 0x800, {0x5}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xc}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000e00)) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r9, 0x7a5, &(0x7f0000000a00)={{@hyper, 0x80000001}, 0x0, 0x1, 0xd}) 5.075958443s ago: executing program 2 (id=2465): r0 = syz_io_uring_setup(0x451c, &(0x7f0000000500)={0x0, 0x35cf, 0x40, 0x0, 0x303}, &(0x7f0000000580), &(0x7f00000005c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0xf, 0x88, 0x6, 0xb, "060045fc8aea4eb75941fa3aa7c2804cc17c380687b233ba651a073f687fb2b2"}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x400000) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000100)={0xfffffffa, 0x9, 0x9, 0x6, 0x4, 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000780)=[@ioring_restriction_sqe_flags_required={0x3, 0x21}, @ioring_restriction_sqe_flags_allowed={0x2, 0x5}], 0x2) 4.948182613s ago: executing program 2 (id=2466): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x0, 0x0, 0x100}, {0x6}]}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000300)={@broadcast, @local, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x16, 0x0, 0x0, 0x0, "f8b50d307d74af37e4da9707f653e812f340ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80f7757e423f45751fd1dd4586f5d99cbaaf8b332233f"}}}}, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r7 = syz_open_dev$usbmon(0x0, 0x4, 0x0) r8 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x410180) r9 = dup3(r7, r8, 0x0) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 4.713688809s ago: executing program 1 (id=2467): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ffff000000740008a42a7df23400000000000000", @ANYRES32=r4, @ANYBLOB="7fff000000000000"], 0x20}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000180)={0x0}) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xffffffffffffff5d) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f0000000280)='1', 0x1) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="0162a35f07ea7bc77e00540000000e0001006e657464657673696d0000000f00023dbb9e8c1ff0aa35163a16954ff7dad0aaa482f36c2254edb7a42e20b930159518a9abf40c2462947bc431ac1edd10cb2ff672604e3367f54e2f05b258a1b391df45249f3e4a0ab5d78f35d638bb841add536c09cd4019c87febd611f8ae92a45cf13f57d411e342dd721c88cac9f54994f9083dc41457e95d5ec3f0595974ec220d22bf4ad3ae937e42be45341c270d024c8a5eb6f690e5ab8874d28656d1ef4c151bf6884b1e5efe0fb9505d", @ANYRES16=r11, @ANYRES16=r5], 0x34}}, 0x0) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14af337893472412111ae2000000", @ANYRES16=r12, @ANYBLOB="0100000000000000000054000000"], 0x14}}, 0x0) recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 4.331779309s ago: executing program 0 (id=2468): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x22, 0x7a, {0x7a, 0x1, "7391c9d032a990fa3fb6b4dfd57852e1bba0a1e916779da15f417032c1770c65fe81422cc47a266889a6240a4c45c06963db76fb98ec57cc6a9c3cf9c59a77e3bd1be9930e2458204c29c667bc67bc8c7c8a9fdc306586b253324bd25e48498bb267e6979affa6cdf26e772c493d7cfffa01231563d087b3"}}, &(0x7f0000000380)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "ca2cc4f0f041783277735d9dbda49823b9db5d7bd48a7051607c5c8c8f6af0316f2aa818770a4126e8cd6f40d769fe7e95942c021edef3a99d226212bcc9d296cf3a3200f8172fb83a3dac8f9e51cfb2c4576a3863a2bd02ac7e86abb285650bd3b2e4701b73aded584926f1f3c332b55d1f8afa865c81c146314bb2dc063a43a4a75372bb2742ac7123c7de07e7c43ba8cadbe17257bf9bb0e69779bcf1f7c01d371f4ce85226c0d00ab11317716016205cdd25978f33f19ce1f1862def7073882c4622ceaa"}}, &(0x7f0000000480)={0x0, 0xf, 0x42, {0x5, 0xf, 0x42, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xa9, 0x2, 0xb, 0xf000, 0xf7a, [0xf, 0xf]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x0, 0xd}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x3, 0x1}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x40, 0xe0, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xfe, 0x8f, 0x2, 0x2}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x9, 0x5, "71f65827", 'X\x00uT'}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0x5, 0x8, 0x4, 0x9, 0x9}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000540)={0x40, 0x3, 0xa5, "0709658bb02bbd6c74212a3e8aae5ec285d4c27ecaf301f6ca12aa6902e35e6c22fe3441b572540f049244278b909e506da3fd95a59f0cb25b56202a95d233f4ca7a0c7dc901ac6499bde57a3093cec257700b8983c934cbe3ce3595608435e3070ac2c07b38338e61a625be22145355deb80067b4e8076182b3c83038a48e19d4729d43aa0be6cdf6cf5d6a281519bb18eb9ce61097faf6547abee5e4d59303df66ddc445"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0x80, 0x80, [0x1e0f0]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0xf}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000780)={0x40, 0xb, 0x2, 'lW'}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000000880)={0x40, 0x19, 0x2, 'G0'}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x5d}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0xff}}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1b2e}) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0x18) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 4.315676756s ago: executing program 3 (id=2469): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) dup(r2) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x1, 0x5}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='./file1\x00', 0x56000129) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x2000000) 3.582051843s ago: executing program 2 (id=2470): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) socket(0x200000100000011, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000680)={{r1}, "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"}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206056fd30000000000000000000000140007800800114000000000050015000c0000000500010006000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x18, &(0x7f00000000c0)=0x11, 0x1) sendmsg$nl_xfrm(r5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 3.115816268s ago: executing program 1 (id=2471): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r5}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff94, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0xc8, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x8, 0x1}, {0x0, 0xffe0}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x3ffe, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0xfffffffffffffdac}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x8, 0x3, 0x0, 0x6}, {0x1, 0x9, 0xe, 0x2}, {0xa5a, 0x1e, 0x3}, {0x0, 0x8, 0x0, 0x200}]}}]}}]}, 0xc8}}, 0x4) 2.216137973s ago: executing program 3 (id=2472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) dup(r2) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x1, 0x5}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='./file1\x00', 0x56000129) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x2000000) 2.080780937s ago: executing program 4 (id=2473): r0 = io_uring_setup(0x7ee1, &(0x7f0000000bc0)={0x0, 0x1cc1, 0x40, 0x2, 0x383}) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r1, 0x0, 0x4cd) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001540)=""/4096, 0x1000}], 0x1}, 0x10102) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbf, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x9, @loopback, @local, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x7, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc95a70000ffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x22}]}}, 'b'}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x2, 0x7, 0x3, 0x3}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f021404001f00000000020000000200000800000000", 0x1c) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064d1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000040)={0x0, 0x6, 0x2, 0x37a3, 0x2, [0x0], [0x0, 0x8, 0x8, 0xd9f], [0x5, 0x80b, 0x5, 0x21a], [0x4, 0x9, 0x5, 0x4]}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000000c0)={r6}) 1.583823625s ago: executing program 4 (id=2474): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x92fa}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x54}}, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x604000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000440)=0x0) sendto(r2, &(0x7f00000003c0)="0462533b613b646ced6dbcb8575d45d736e126fd217a147673e8ecef89e780fed22a59fb69723d2c11159ef12732a77dee574b55fe268c99d5c5179ce9d3df5a191d865b482ed3372d959f031f38ee204430e5cdc00fcffd8721ffe6c2b8f36be3b34bd585fe3e26486c81a31cb9d1034305c376", 0x74, 0x20008080, &(0x7f0000000480)=@nfc={0x27, r4, 0xffffffffffffffff, 0x6}, 0x80) splice(r2, 0x0, r3, 0xffffffffffffffff, 0x100000004, 0xb) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) (async) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000001c0)=0xfffffff7) (async) fcntl$notify(r2, 0x402, 0x0) (async) recvmmsg(r5, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000003780)=""/4097, 0xe3f}, {&(0x7f00000002c0)=""/177, 0xe0}], 0x3}, 0x4}], 0x4000000000000a0, 0x40010000, 0x0) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @aes256, 0x4, '\x00', @d}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newchain={0x2c, 0x64, 0x1b9945ef5b0d0ba3, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xfff2, 0x1}, {0x8, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8818) 1.45845472s ago: executing program 1 (id=2475): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xfff3}, {}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.426751292s ago: executing program 4 (id=2476): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x13, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x20002, 0x80195764, 0x1000000, 0x8000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file4/file7/file6\x00', 0x73) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x81, 0x120) 1.393167417s ago: executing program 2 (id=2477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) dup(r2) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x1, 0x5}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='./file1\x00', 0x56000129) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x2000000) 1.308179002s ago: executing program 1 (id=2478): r0 = semget$private(0x0, 0x1, 0x262) semop(r0, &(0x7f00000002c0)=[{0x0, 0x9b6a, 0x1000}], 0x1) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x4040840) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, {0xa, 0x0, 0x7, @private0, 0x1000}, r2}}, 0x48) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000340)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000380)=""/227, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="09002cbd7000fd"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x800000}, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, r2}}, 0x48) r5 = fanotify_init(0x200, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x242202, 0x8) fanotify_mark(r5, 0x455, 0x8000003, r6, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x8, 0x1, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x2f4}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x400, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) listen(r9, 0x0) 1.303221851s ago: executing program 3 (id=2479): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) geteuid() r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x0, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x5, 0x191, 0x4, {0x0, 0x2710}, {0x77359400}, {0x2, 0x0, 0x0, 0x1}, 0x1, @can={{0x2}, 0x8, 0x2, 0x0, 0x0, "e6e5408d73014cfe"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000005) r6 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000200)="952bb3"}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$TCXONC(r9, 0x540a, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 405.423798ms ago: executing program 0 (id=2480): set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0x578, 0x3f, 0x4, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4, 0x100}) unshare(0x42060000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r6 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_getsetattr(r6, &(0x7f0000000700)={0x800, 0x10, 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) lseek(r0, 0x1000000, 0x0) 403.457468ms ago: executing program 1 (id=2481): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x24, r0, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x142, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) 205.915407ms ago: executing program 2 (id=2482): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x0, 0x7eaa, 0x7, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0x401, 0x2}, &(0x7f0000000180)=0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)="a6", 0x1}], 0x1) 0s ago: executing program 2 (id=2483): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad3, 0x0, 0xfffffffc, 0x2}, &(0x7f0000000240), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, 0x0, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = open(&(0x7f0000000280)='.\x00', 0x40000, 0x43) getdents(r6, &(0x7f0000000140)=""/48, 0x30) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) kernel console output (not intermixed with test programs): y_hcd.1/usb2/2-1/input/input37 [ 599.987671][T13461] usb 2-1: USB disconnect, device number 5 [ 600.565421][T13865] netlink: 'syz.1.2078': attribute type 1 has an invalid length. [ 600.626939][T13461] usb 1-1: USB disconnect, device number 20 [ 600.647614][T13461] mcba_usb 1-1:0.0 can0: device disconnected [ 601.342478][T13878] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 601.774307][ T5936] usbhid 3-1:0.0: can't add hid device: -71 [ 601.780350][ T5936] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 601.872134][ T5936] usb 3-1: USB disconnect, device number 106 [ 602.076828][T13901] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2086'. [ 602.095991][T13902] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2086'. [ 602.563388][T13905] delete_channel: no stack [ 602.752200][ T5865] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 602.914943][ T5865] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 603.359599][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.431525][ T5865] usb 2-1: Product: syz [ 603.520650][ T5865] usb 2-1: Manufacturer: syz [ 603.525400][ T5865] usb 2-1: SerialNumber: syz [ 603.537393][ T5865] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 603.559009][ T25] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 603.613112][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2092'. [ 603.649704][T13934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2093'. [ 604.035174][ T5936] usb 2-1: USB disconnect, device number 6 [ 604.072614][T13950] fuse: Bad value for 'group_id' [ 604.077620][T13950] fuse: Bad value for 'group_id' [ 604.662063][ T5865] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 604.662100][T13461] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 604.862826][ T25] usb 2-1: Service connection timeout for: 256 [ 604.867970][T13461] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 604.879637][T13461] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 604.901083][ T25] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 604.914162][T13461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.930897][T13461] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.979459][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 604.988207][T13461] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 605.071429][ T25] ath9k_htc: Failed to initialize the device [ 605.079526][ T5865] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 605.104411][ T5936] usb 2-1: ath9k_htc: USB layer deinitialized [ 605.122233][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.143499][ T5865] usb 4-1: config 0 descriptor?? [ 605.414139][ T5865] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 605.802085][ T5936] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 605.932453][ T5865] gspca_sonixj: reg_w1 err -110 [ 605.937386][ T5865] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 605.962309][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 606.003126][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.090730][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.118805][ T5936] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 606.138321][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.165900][ T5936] usb 2-1: config 0 descriptor?? [ 606.421729][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2105'. [ 606.584560][ T5936] corsair 0003:1B1C:1B02.002B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 606.800265][T13973] input: syz1 as /devices/virtual/input/input38 [ 606.847096][ T5936] corsair 0003:1B1C:1B02.002B: Failed to get K90 initial state (error -71). [ 606.865902][ T5936] usb 2-1: USB disconnect, device number 7 [ 607.086210][ T25] usb 4-1: USB disconnect, device number 118 [ 607.178347][ T5936] usb 3-1: USB disconnect, device number 107 [ 607.473793][T14004] vivid-008: ================= START STATUS ================= [ 607.487469][T14004] vivid-008: FM Deviation: 75000 [ 607.498121][T14004] vivid-008: ================== END STATUS ================== [ 607.665519][T14015] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2115'. [ 607.712142][ T5865] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 607.812280][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 607.895358][ T5865] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 607.905002][ T5865] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 607.925797][ T5865] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 607.938916][ T5865] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 607.965061][ T5865] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 607.976546][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 607.987400][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.001508][ T5865] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 608.010677][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 608.022009][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.031785][ T5865] usb 2-1: Product: syz [ 608.036030][ T5865] usb 2-1: Manufacturer: syz [ 608.045862][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 608.071052][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 608.080984][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.091040][ T5865] cdc_wdm 2-1:1.0: skipping garbage [ 608.091057][ T5865] cdc_wdm 2-1:1.0: skipping garbage [ 608.103097][ T5865] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 608.103153][ T5865] cdc_wdm 2-1:1.0: Unknown control protocol [ 608.119337][ T25] usb 1-1: config 0 descriptor?? [ 608.292026][ T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 608.341634][T14023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2118'. [ 608.582222][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 608.591193][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 608.607341][ T10] usb 4-1: config 127 has an invalid interface number: 181 but max is 0 [ 608.627796][ T25] hid_parser_main: 5 callbacks suppressed [ 608.627815][ T25] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 608.644036][ T25] microsoft 0003:045E:07DA.002C: item fetching failed at offset 10/34 [ 608.652898][ T10] usb 4-1: config 127 has no interface number 0 [ 608.659805][ T25] microsoft 0003:045E:07DA.002C: parse failed [ 608.666557][ T10] usb 4-1: config 127 interface 181 altsetting 249 bulk endpoint 0xC has invalid maxpacket 64 [ 608.677200][ T25] microsoft 0003:045E:07DA.002C: probe with driver microsoft failed with error -22 [ 608.697820][ T10] usb 4-1: config 127 interface 181 altsetting 249 bulk endpoint 0x6 has invalid maxpacket 64 [ 608.709609][ T10] usb 4-1: config 127 interface 181 has no altsetting 0 [ 608.722677][ T10] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=12.8b [ 608.735570][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.745520][ T10] usb 4-1: Product: syz [ 608.749838][ T10] usb 4-1: Manufacturer: syz [ 608.756857][ T10] usb 4-1: SerialNumber: syz [ 608.765725][T14019] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 608.777925][T14019] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 608.829743][T13461] usb 1-1: USB disconnect, device number 21 [ 608.978255][ T5936] usb 2-1: USB disconnect, device number 8 [ 609.653608][ T10] kvaser_usb 4-1:127.181: error -ENODEV: Cannot get usb endpoint(s) [ 609.665786][ T10] usb 4-1: USB disconnect, device number 119 [ 609.902103][T13461] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 610.062194][T13461] usb 1-1: Using ep0 maxpacket: 8 [ 610.070483][T13461] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 610.080860][T13461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.093346][T13461] usb 1-1: config 0 descriptor?? [ 610.102173][ T5936] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 610.282085][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 610.289758][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 610.302712][ T5936] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 610.314269][ T5936] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 610.330408][ T5936] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 610.340922][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.349590][ T5936] usb 2-1: Product: syz [ 610.354680][ T5936] usb 2-1: Manufacturer: syz [ 610.359417][ T5936] usb 2-1: SerialNumber: syz [ 610.367416][ T5936] usb 2-1: config 0 descriptor?? [ 610.377714][T14041] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 610.406833][ T5936] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 610.414783][ T5936] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 610.422727][ T5936] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 610.429262][ T5936] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 610.439213][ T5936] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 610.620563][T14041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2123'. [ 610.762960][T13994] delete_channel: no stack [ 611.203115][T14061] ªªªªªª: renamed from wg2 [ 611.570309][T14069] could not allocate digest TFM handle sha1-neon [ 611.629391][T14082] Invalid logical block size (1030) [ 611.670128][ T5529] mcba_usb 2-1:0.0 can0: bit-timing not yet defined [ 611.742094][ T5936] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 611.769149][T13461] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 611.779401][T13461] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 611.793585][T13461] asix 1-1:0.0: probe with driver asix failed with error -71 [ 611.808099][T13461] usb 1-1: USB disconnect, device number 22 [ 611.850548][ T31] audit: type=1326 audit(1755588004.050:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2138ebe9 code=0x7ffc0000 [ 611.874889][ T31] audit: type=1326 audit(1755588004.050:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2138ebe9 code=0x7ffc0000 [ 611.897843][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 611.902988][ T31] audit: type=1326 audit(1755588004.050:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7efc2138ebe9 code=0x7ffc0000 [ 611.928396][ T31] audit: type=1326 audit(1755588004.050:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2138ebe9 code=0x7ffc0000 [ 611.954698][ T5936] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 611.972475][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.981299][ T5936] usb 3-1: Product: syz [ 611.981407][ T31] audit: type=1326 audit(1755588004.050:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2138ebe9 code=0x7ffc0000 [ 612.009602][ T5936] usb 3-1: Manufacturer: syz [ 612.014773][ T5936] usb 3-1: SerialNumber: syz [ 612.038480][T14090] input: syz1 as /devices/virtual/input/input39 [ 612.076696][ T5936] usb 3-1: config 0 descriptor?? [ 612.084305][ T31] audit: type=1326 audit(1755588004.050:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efc2138ebe9 code=0x7ffc0000 [ 612.118897][ T31] audit: type=1326 audit(1755588004.050:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2138ebe9 code=0x7ffc0000 [ 612.181854][ T31] audit: type=1326 audit(1755588004.050:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7efc2138ebe9 code=0x7ffc0000 [ 612.326714][ T5936] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 612.336272][ T5936] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 612.429074][ T5936] usb 3-1: USB disconnect, device number 108 [ 612.727747][ T5936] usb 2-1: USB disconnect, device number 9 [ 612.738962][ T5936] mcba_usb 2-1:0.0 can0: device disconnected [ 613.389492][T14127] ip6gre2: entered allmulticast mode [ 613.564313][T14132] ip6gre3: entered allmulticast mode [ 613.728260][T14140] loop4: detected capacity change from 0 to 7 [ 613.737142][T14140] Dev loop4: unable to read RDB block 7 [ 613.747008][T14140] loop4: AHDI p1 p2 [ 613.750994][T14140] loop4: partition table partially beyond EOD, truncated [ 613.759607][T14140] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 613.821831][ T6011] udevd[6011]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 613.925157][ T5936] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 613.940932][T14142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2146'. [ 614.102057][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 614.113790][ T5936] usb 1-1: config 0 interface 0 has no altsetting 0 [ 614.131168][ T5936] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 614.140700][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.150033][ T5936] usb 1-1: Product: syz [ 614.160122][ T5936] usb 1-1: Manufacturer: syz [ 614.169104][ T5936] usb 1-1: SerialNumber: syz [ 614.182911][ T5936] usb 1-1: config 0 descriptor?? [ 614.398918][ T5936] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 614.411099][ T5936] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 614.429569][ T5936] usb 1-1: USB disconnect, device number 23 [ 614.520615][T14136] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 614.535987][T14136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 614.549828][T14136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 614.557565][T14136] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 614.567047][T14136] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 614.932043][ T25] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 615.072410][ T25] usb 4-1: device descriptor read/64, error -71 [ 615.322001][ T25] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 615.362043][ T5865] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 615.472055][ T25] usb 4-1: device descriptor read/64, error -71 [ 615.583031][ T25] usb usb4-port1: attempt power cycle [ 615.818179][ T5871] Bluetooth: hci0: command 0x0c1a tx timeout [ 615.831092][T14187] loop4: detected capacity change from 0 to 7 [ 615.846014][ T5865] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 615.898292][ T5865] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 615.917774][T14187] Dev loop4: unable to read RDB block 7 [ 615.939501][T14187] loop4: AHDI p1 p2 [ 615.969731][T14187] loop4: partition table partially beyond EOD, truncated [ 615.981140][ T5865] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 615.992564][T14187] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 616.022246][ T25] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 616.052196][ T5865] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 616.071602][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.088385][ T25] usb 4-1: device descriptor read/8, error -71 [ 616.097661][ T6011] udevd[6011]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 616.105516][T14192] FAULT_INJECTION: forcing a failure. [ 616.105516][T14192] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 616.124877][T14192] CPU: 0 UID: 0 PID: 14192 Comm: syz.0.2159 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 616.124911][T14192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 616.124924][T14192] Call Trace: [ 616.124934][T14192] [ 616.124944][T14192] dump_stack_lvl+0x189/0x250 [ 616.124969][T14192] ? __pfx____ratelimit+0x10/0x10 [ 616.124991][T14192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 616.125009][T14192] ? __pfx__printk+0x10/0x10 [ 616.125031][T14192] ? lock_acquire+0x5f/0x360 [ 616.125057][T14192] should_fail_ex+0x414/0x560 [ 616.125079][T14192] prepare_alloc_pages+0x213/0x610 [ 616.125097][T14192] __alloc_frozen_pages_noprof+0x123/0x370 [ 616.125114][T14192] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 616.125130][T14192] ? do_raw_spin_lock+0x121/0x290 [ 616.125149][T14192] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 616.125169][T14192] ? policy_nodemask+0x27c/0x720 [ 616.125193][T14192] alloc_pages_mpol+0x232/0x4a0 [ 616.125222][T14192] alloc_pages_noprof+0xa9/0x190 [ 616.125245][T14192] get_free_pages_noprof+0xf/0x80 [ 616.125260][T14192] __pollwait+0x27b/0x460 [ 616.125282][T14192] ? __pfx___pollwait+0x10/0x10 [ 616.125302][T14192] pipe_poll+0x16c/0x470 [ 616.125326][T14192] ? __pfx_pipe_poll+0x10/0x10 [ 616.125349][T14192] do_sys_poll+0x8c6/0x1070 [ 616.125373][T14192] ? do_sys_poll+0x3d1/0x1070 [ 616.125398][T14192] ? __pfx_do_sys_poll+0x10/0x10 [ 616.125422][T14192] ? aa_file_perm+0x13a/0x1550 [ 616.125437][T14192] ? rcu_is_watching+0x15/0xb0 [ 616.125453][T14192] ? __pfx___pollwait+0x10/0x10 [ 616.125475][T14192] ? __pfx_pollwake+0x10/0x10 [ 616.125497][T14192] ? __pfx_pollwake+0x10/0x10 [ 616.125520][T14192] ? __pfx_pollwake+0x10/0x10 [ 616.125543][T14192] ? __pfx_pollwake+0x10/0x10 [ 616.125566][T14192] ? __pfx_pollwake+0x10/0x10 [ 616.125588][T14192] ? __pfx_pollwake+0x10/0x10 [ 616.125611][T14192] ? __pfx_pollwake+0x10/0x10 [ 616.125634][T14192] ? __pfx_pollwake+0x10/0x10 [ 616.125657][T14192] ? __pfx_pollwake+0x10/0x10 [ 616.125679][T14192] ? rcu_is_watching+0x15/0xb0 [ 616.125694][T14192] ? lock_release+0x4b/0x3e0 [ 616.125715][T14192] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 616.125732][T14192] ? security_file_permission+0x75/0x290 [ 616.125762][T14192] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 616.125785][T14192] ? set_user_sigmask+0xc7/0x1b0 [ 616.125800][T14192] ? __pfx_set_user_sigmask+0x10/0x10 [ 616.125815][T14192] ? __fget_files+0x3a0/0x420 [ 616.125831][T14192] __se_sys_ppoll+0x1ff/0x260 [ 616.125854][T14192] ? __pfx___se_sys_ppoll+0x10/0x10 [ 616.125876][T14192] ? __pfx_ksys_write+0x10/0x10 [ 616.125895][T14192] ? rcu_is_watching+0x15/0xb0 [ 616.125911][T14192] ? rcu_is_watching+0x15/0xb0 [ 616.125925][T14192] ? __x64_sys_ppoll+0x20/0xc0 [ 616.125947][T14192] do_syscall_64+0xfa/0x3b0 [ 616.125971][T14192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.125986][T14192] ? clear_bhb_loop+0x60/0xb0 [ 616.126003][T14192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.126018][T14192] RIP: 0033:0x7fcd3c58ebe9 [ 616.126031][T14192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.126045][T14192] RSP: 002b:00007fcd3d4db038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 616.126062][T14192] RAX: ffffffffffffffda RBX: 00007fcd3c7b5fa0 RCX: 00007fcd3c58ebe9 [ 616.126074][T14192] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 616.126084][T14192] RBP: 00007fcd3d4db090 R08: 0000000000000000 R09: 0000000000000000 [ 616.126094][T14192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.126104][T14192] R13: 00007fcd3c7b6038 R14: 00007fcd3c7b5fa0 R15: 00007fcd3c8dfa28 [ 616.126120][T14192] [ 616.549639][ T5865] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 616.621484][ T5865] usb 2-1: invalid MIDI out EP 0 [ 616.698811][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 616.705823][ T5864] Bluetooth: hci1: command 0x0c1a tx timeout [ 616.708117][ T5871] Bluetooth: hci3: command 0x0c1a tx timeout [ 616.711869][ T5864] Bluetooth: hci2: command 0x0c1a tx timeout [ 616.742058][ T25] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 616.783536][ T25] usb 4-1: device descriptor read/8, error -71 [ 616.809105][ T5865] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 616.931750][T14203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.980398][ T25] usb usb4-port1: unable to enumerate USB device [ 617.007066][T14203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.378618][ T25] usb 2-1: USB disconnect, device number 10 [ 617.397157][T14179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.322041][ T5984] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 618.523782][ T5984] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 618.535433][ T5984] usb 4-1: config 8 has no interface number 0 [ 618.655738][ T5984] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 618.665151][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.688037][ T5984] usb 4-1: Product: syz [ 618.699010][ T5984] usb 4-1: Manufacturer: syz [ 618.711615][ T5984] usb 4-1: SerialNumber: syz [ 618.862186][ T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 619.022082][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 619.032698][ T25] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 619.046794][ T25] usb 1-1: config 0 has no interface number 0 [ 619.062295][ T25] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.083645][ T25] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.108079][ T25] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 619.127105][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.152480][ T25] usb 1-1: config 0 descriptor?? [ 619.182193][ T5985] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 619.222542][ T5984] usb 4-1: USB disconnect, device number 124 [ 619.335468][ T5985] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 619.360405][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.384463][ T5985] usb 2-1: Product: syz [ 619.389126][ T5985] usb 2-1: Manufacturer: syz [ 619.394371][ T5985] usb 2-1: SerialNumber: syz [ 619.400568][ T5985] usb 2-1: config 0 descriptor?? [ 619.408298][ T5985] ch341 2-1:0.0: ch341-uart converter detected [ 619.781116][ T25] input: HID 28bd:0071 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0071.002D/input/input40 [ 619.856673][ T25] input: HID 28bd:0071 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0071.002D/input/input41 [ 619.885160][ T25] uclogic 0003:28BD:0071.002D: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.0-1/input1 [ 620.330378][T14240] FAULT_INJECTION: forcing a failure. [ 620.330378][T14240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.358858][T14240] CPU: 0 UID: 0 PID: 14240 Comm: syz.3.2170 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 620.358889][T14240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 620.358904][T14240] Call Trace: [ 620.358913][T14240] [ 620.358922][T14240] dump_stack_lvl+0x189/0x250 [ 620.358955][T14240] ? __pfx____ratelimit+0x10/0x10 [ 620.358983][T14240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.359007][T14240] ? __pfx__printk+0x10/0x10 [ 620.359037][T14240] ? rcu_is_watching+0x15/0xb0 [ 620.359058][T14240] should_fail_ex+0x414/0x560 [ 620.359090][T14240] _copy_to_user+0x31/0xb0 [ 620.359116][T14240] simple_read_from_buffer+0xe1/0x170 [ 620.359151][T14240] proc_fail_nth_read+0x1b3/0x220 [ 620.359177][T14240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.359203][T14240] ? rw_verify_area+0x2a6/0x4d0 [ 620.359232][T14240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.359257][T14240] vfs_read+0x1fd/0xa30 [ 620.359284][T14240] ? fdget_pos+0x247/0x320 [ 620.359304][T14240] ? __pfx___mutex_lock+0x10/0x10 [ 620.359337][T14240] ? __pfx_vfs_read+0x10/0x10 [ 620.359370][T14240] ? __fget_files+0x3a0/0x420 [ 620.359388][T14240] ? __fget_files+0x2a/0x420 [ 620.359411][T14240] ksys_read+0x145/0x250 [ 620.359440][T14240] ? __pfx_ksys_read+0x10/0x10 [ 620.359466][T14240] ? rcu_is_watching+0x15/0xb0 [ 620.359490][T14240] ? rcu_is_watching+0x15/0xb0 [ 620.359513][T14240] do_syscall_64+0xfa/0x3b0 [ 620.359545][T14240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.359567][T14240] ? clear_bhb_loop+0x60/0xb0 [ 620.359592][T14240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.359614][T14240] RIP: 0033:0x7f837d98d5fc [ 620.359635][T14240] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 620.359655][T14240] RSP: 002b:00007f837e7be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 620.359678][T14240] RAX: ffffffffffffffda RBX: 00007f837dbb5fa0 RCX: 00007f837d98d5fc [ 620.359696][T14240] RDX: 000000000000000f RSI: 00007f837e7be0a0 RDI: 0000000000000004 [ 620.359710][T14240] RBP: 00007f837e7be090 R08: 0000000000000000 R09: 0000000000000000 [ 620.359724][T14240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.359738][T14240] R13: 00007f837dbb6038 R14: 00007f837dbb5fa0 R15: 00007f837dcdfa28 [ 620.359762][T14240] [ 620.684152][ T5985] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 620.845745][T14230] delete_channel: no stack [ 620.927800][ T5985] usb 2-1: USB disconnect, device number 11 [ 620.944058][ T5985] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 620.970894][ T5985] ch341 2-1:0.0: device disconnected [ 621.222995][ T25] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 621.244437][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2177'. [ 621.342247][T13461] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 621.393749][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.409953][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.426232][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.439566][ T25] usb 3-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 621.451698][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.465572][ T25] usb 3-1: config 0 descriptor?? [ 621.512078][T13461] usb 4-1: Using ep0 maxpacket: 32 [ 621.518762][T13461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.537515][T13461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.571241][T13461] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 621.583362][ T5984] usb 1-1: USB disconnect, device number 24 [ 621.601547][T13461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.620672][T13461] usb 4-1: config 0 descriptor?? [ 621.654392][T14268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.667230][T14268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.972151][ T5865] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 622.065682][T13461] ft260 0003:0403:6030.002F: unknown main item tag 0x7 [ 622.100972][ T25] usb 3-1: string descriptor 0 read error: -71 [ 622.108690][ T25] uclogic 0003:5543:0047.002E: failed retrieving string descriptor #200: -71 [ 622.119016][ T25] uclogic 0003:5543:0047.002E: failed retrieving pen parameters: -71 [ 622.127539][ T25] uclogic 0003:5543:0047.002E: failed probing pen v2 parameters: -71 [ 622.136942][ T25] uclogic 0003:5543:0047.002E: failed probing parameters: -71 [ 622.145514][ T5865] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 622.154100][ T25] uclogic 0003:5543:0047.002E: probe with driver uclogic failed with error -71 [ 622.163210][ T5865] usb 2-1: config 8 has no interface number 0 [ 622.171448][ T25] usb 3-1: USB disconnect, device number 109 [ 622.177549][ T5984] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 622.188893][ T5865] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 622.200748][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.209061][ T5865] usb 2-1: Product: syz [ 622.213629][ T5865] usb 2-1: Manufacturer: syz [ 622.218268][ T5865] usb 2-1: SerialNumber: syz [ 622.265216][T14253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.274184][T14253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.284427][T13461] ft260 0003:0403:6030.002F: chip code: 6424 8183 [ 622.352179][ T5984] usb 1-1: Using ep0 maxpacket: 8 [ 622.358744][ T5984] usb 1-1: config 162 has an invalid interface number: 45 but max is 1 [ 622.367221][ T5984] usb 1-1: config 162 has an invalid interface number: 87 but max is 1 [ 622.375643][ T5984] usb 1-1: config 162 has no interface number 0 [ 622.381979][ T5984] usb 1-1: config 162 has no interface number 1 [ 622.388307][ T5984] usb 1-1: config 162 interface 45 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 622.401600][ T5984] usb 1-1: config 162 interface 87 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 622.412662][ T5984] usb 1-1: config 162 interface 87 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 622.424510][ T5984] usb 1-1: config 162 interface 87 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 622.436042][ T5984] usb 1-1: config 162 interface 87 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 622.446560][ T5984] usb 1-1: config 162 interface 87 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.463466][ T5984] usb 1-1: config 162 interface 45 has no altsetting 0 [ 622.470491][ T5984] usb 1-1: config 162 interface 87 has no altsetting 0 [ 622.485590][ T5984] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e [ 622.495178][T13461] ft260 0003:0403:6030.002F: uart interface is not supported [ 622.502638][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.510655][ T5984] usb 1-1: Product: syz [ 622.522039][ T5984] usb 1-1: Manufacturer: syz [ 622.526708][ T5984] usb 1-1: SerialNumber: syz [ 622.611046][ T5865] usb 2-1: USB disconnect, device number 12 [ 622.702718][ T25] usb 4-1: USB disconnect, device number 125 [ 622.748134][T14273] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 622.786984][ T5984] pl2303 1-1:162.45: required endpoints missing [ 622.818049][ T5984] pl2303 1-1:162.87: required interrupt-in endpoint missing [ 622.841754][ T5984] usb 1-1: USB disconnect, device number 25 [ 623.482205][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2188'. [ 623.646237][T14292] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 623.657063][T14292] netlink: 'syz.0.2191': attribute type 21 has an invalid length. [ 623.680682][T14292] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2191'. [ 623.690398][T14292] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2191'. [ 623.856266][T14300] loop8: detected capacity change from 0 to 7 [ 623.864658][T14300] Dev loop8: unable to read RDB block 7 [ 623.870289][T14300] loop8: unable to read partition table [ 623.888866][T14300] loop8: partition table beyond EOD, truncated [ 623.904965][T14300] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 624.322540][ T5984] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 624.345930][T14307] ip6gre5: entered allmulticast mode [ 624.425984][T14309] ip6gre6: entered allmulticast mode [ 624.498118][ T5984] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 624.526661][ T5984] usb 1-1: config 8 has no interface number 0 [ 624.545640][ T5984] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 624.560974][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.569554][T14317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2200'. [ 624.574983][ T5984] usb 1-1: Product: syz [ 624.588883][ T5984] usb 1-1: Manufacturer: syz [ 624.594039][ T5984] usb 1-1: SerialNumber: syz [ 624.699622][T14323] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2203'. [ 624.709340][T14323] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2203'. [ 625.012262][T13461] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 625.275994][T14339] ?: renamed from bond_slave_1 [ 625.323366][T13461] usb 4-1: Using ep0 maxpacket: 16 [ 625.329948][ T5984] usb 1-1: USB disconnect, device number 26 [ 625.339048][T13461] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 625.385619][T13461] usb 4-1: config 0 has no interface number 0 [ 625.405567][T13461] usb 4-1: config 0 interface 34 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.436654][T13461] usb 4-1: config 0 interface 34 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.466717][T13461] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 625.502081][T13461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.540922][T13461] usb 4-1: config 0 descriptor?? [ 625.912120][ T5984] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 626.077096][ T5984] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 626.087866][ T5984] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 626.098855][ T5984] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 626.108149][ T5984] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 626.119699][ T5984] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 626.133843][ T5984] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 626.143080][ T5984] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 626.151125][ T5984] usb 2-1: Product: syz [ 626.155452][ T5984] usb 2-1: Manufacturer: syz [ 626.164330][ T5984] cdc_wdm 2-1:1.0: skipping garbage [ 626.169610][ T5865] usb 4-1: USB disconnect, device number 126 [ 626.169672][ T5984] cdc_wdm 2-1:1.0: skipping garbage [ 626.186774][T14351] FAULT_INJECTION: forcing a failure. [ 626.186774][T14351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.200718][T14351] CPU: 0 UID: 0 PID: 14351 Comm: syz.0.2211 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 626.200749][T14351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 626.200764][T14351] Call Trace: [ 626.200773][T14351] [ 626.200782][T14351] dump_stack_lvl+0x189/0x250 [ 626.200813][T14351] ? __pfx____ratelimit+0x10/0x10 [ 626.200843][T14351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.200868][T14351] ? __pfx__printk+0x10/0x10 [ 626.200894][T14351] ? __might_fault+0xb0/0x130 [ 626.200927][T14351] ? rcu_is_watching+0x15/0xb0 [ 626.200951][T14351] should_fail_ex+0x414/0x560 [ 626.200982][T14351] _copy_from_user+0x2d/0xb0 [ 626.201006][T14351] do_sys_poll+0x242/0x1070 [ 626.201042][T14351] ? rcu_is_watching+0x15/0xb0 [ 626.201064][T14351] ? lock_release+0x4b/0x3e0 [ 626.201101][T14351] ? __pfx_do_sys_poll+0x10/0x10 [ 626.201134][T14351] ? aa_file_perm+0x13a/0x1550 [ 626.201156][T14351] ? rcu_is_watching+0x15/0xb0 [ 626.201207][T14351] ? rcu_is_watching+0x15/0xb0 [ 626.201229][T14351] ? lock_release+0x4b/0x3e0 [ 626.201267][T14351] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 626.201292][T14351] ? security_file_permission+0x75/0x290 [ 626.201334][T14351] ? set_user_sigmask+0xc7/0x1b0 [ 626.201356][T14351] ? __pfx_set_user_sigmask+0x10/0x10 [ 626.201383][T14351] __se_sys_ppoll+0x1ff/0x260 [ 626.201416][T14351] ? __pfx___se_sys_ppoll+0x10/0x10 [ 626.201446][T14351] ? __pfx_ksys_write+0x10/0x10 [ 626.201473][T14351] ? rcu_is_watching+0x15/0xb0 [ 626.201497][T14351] ? rcu_is_watching+0x15/0xb0 [ 626.201517][T14351] ? __x64_sys_ppoll+0x20/0xc0 [ 626.201548][T14351] do_syscall_64+0xfa/0x3b0 [ 626.201581][T14351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.201603][T14351] ? clear_bhb_loop+0x60/0xb0 [ 626.201627][T14351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.201649][T14351] RIP: 0033:0x7fcd3c58ebe9 [ 626.201668][T14351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.201689][T14351] RSP: 002b:00007fcd3d4ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 626.201712][T14351] RAX: ffffffffffffffda RBX: 00007fcd3c7b6090 RCX: 00007fcd3c58ebe9 [ 626.201729][T14351] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 626.201744][T14351] RBP: 00007fcd3d4ba090 R08: 0000000000000000 R09: 0000000000000000 [ 626.201758][T14351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.201772][T14351] R13: 00007fcd3c7b6128 R14: 00007fcd3c7b6090 R15: 00007fcd3c8dfa28 [ 626.201796][T14351] [ 626.458963][T14343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.459648][ T5984] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 626.471508][T14343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.473634][ T5984] cdc_wdm 2-1:1.0: Unknown control protocol [ 626.556492][ T5865] usb 2-1: USB disconnect, device number 13 [ 626.795788][T14356] ip6gre7: entered allmulticast mode [ 626.911646][T14366] syzkaller0: entered promiscuous mode [ 626.921140][T14366] syzkaller0: entered allmulticast mode [ 626.935767][T14365] sch_tbf: peakrate 9 is lower than or equals to rate 8300071979382561303 ! [ 627.252468][ T5936] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 627.412089][ T5936] usb 1-1: Using ep0 maxpacket: 8 [ 627.470021][ T5936] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 627.600698][ T31] audit: type=1326 audit(1755588019.760:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14382 comm="syz.1.2220" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f9578ebe9 code=0x0 [ 627.632134][T14389] netlink: 'syz.1.2220': attribute type 10 has an invalid length. [ 627.657539][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.668643][T14389] team0: Port device dummy0 added [ 627.689840][T14392] netlink: 'syz.1.2220': attribute type 10 has an invalid length. [ 627.802228][ T5936] usb 1-1: Product: syz [ 627.806463][ T5936] usb 1-1: Manufacturer: syz [ 627.983844][T14392] team0: Port device dummy0 removed [ 628.019000][ T5936] usb 1-1: SerialNumber: syz [ 628.025687][T14377] delete_channel: no stack [ 628.061174][ T5936] usb 1-1: config 0 descriptor?? [ 628.272155][ T5936] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 628.362029][ T5865] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 628.512039][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 628.517836][ T5865] usb 3-1: too many configurations: 199, using maximum allowed: 8 [ 628.526930][ T5865] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 187 [ 628.535918][ T5865] usb 3-1: can't read configurations, error -22 [ 628.672101][ T5865] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 628.822052][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 628.829735][ T5865] usb 3-1: too many configurations: 199, using maximum allowed: 8 [ 628.838868][ T5865] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 187 [ 628.850635][ T5865] usb 3-1: can't read configurations, error -22 [ 628.858547][T14398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2224'. [ 628.858599][ T5865] usb usb3-port1: attempt power cycle [ 628.874155][T14398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2224'. [ 629.040984][T14405] FAULT_INJECTION: forcing a failure. [ 629.040984][T14405] name failslab, interval 1, probability 0, space 0, times 0 [ 629.054008][T14405] CPU: 1 UID: 0 PID: 14405 Comm: syz.4.2226 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 629.054031][T14405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.054041][T14405] Call Trace: [ 629.054048][T14405] [ 629.054054][T14405] dump_stack_lvl+0x189/0x250 [ 629.054088][T14405] ? __pfx____ratelimit+0x10/0x10 [ 629.054118][T14405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.054142][T14405] ? __pfx__printk+0x10/0x10 [ 629.054171][T14405] ? __pfx___might_resched+0x10/0x10 [ 629.054186][T14405] ? lock_acquire+0x5f/0x360 [ 629.054210][T14405] should_fail_ex+0x414/0x560 [ 629.054243][T14405] should_failslab+0xa8/0x100 [ 629.054275][T14405] __kmalloc_noprof+0xcb/0x4f0 [ 629.054302][T14405] ? do_sys_poll+0x2ac/0x1070 [ 629.054330][T14405] do_sys_poll+0x2ac/0x1070 [ 629.054355][T14405] ? rcu_is_watching+0x15/0xb0 [ 629.054375][T14405] ? lock_release+0x4b/0x3e0 [ 629.054408][T14405] ? __pfx_do_sys_poll+0x10/0x10 [ 629.054438][T14405] ? aa_file_perm+0x13a/0x1550 [ 629.054461][T14405] ? rcu_is_watching+0x15/0xb0 [ 629.054498][T14405] ? rcu_is_watching+0x15/0xb0 [ 629.054513][T14405] ? lock_release+0x4b/0x3e0 [ 629.054544][T14405] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 629.054568][T14405] ? security_file_permission+0x75/0x290 [ 629.054609][T14405] ? set_user_sigmask+0xc7/0x1b0 [ 629.054625][T14405] ? __pfx_set_user_sigmask+0x10/0x10 [ 629.054644][T14405] __se_sys_ppoll+0x1ff/0x260 [ 629.054669][T14405] ? __pfx___se_sys_ppoll+0x10/0x10 [ 629.054703][T14405] ? __pfx_ksys_write+0x10/0x10 [ 629.054739][T14405] ? rcu_is_watching+0x15/0xb0 [ 629.054759][T14405] ? __x64_sys_ppoll+0x20/0xc0 [ 629.054782][T14405] do_syscall_64+0xfa/0x3b0 [ 629.054806][T14405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.054825][T14405] ? clear_bhb_loop+0x60/0xb0 [ 629.054850][T14405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.054871][T14405] RIP: 0033:0x7efc2138ebe9 [ 629.054890][T14405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.054909][T14405] RSP: 002b:00007efc1f5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 629.054927][T14405] RAX: ffffffffffffffda RBX: 00007efc215b6090 RCX: 00007efc2138ebe9 [ 629.054939][T14405] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 629.054951][T14405] RBP: 00007efc1f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 629.054967][T14405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.054981][T14405] R13: 00007efc215b6128 R14: 00007efc215b6090 R15: 00007efc216dfa28 [ 629.055006][T14405] [ 629.290645][T14371] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 629.291817][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.332496][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.341562][T14370] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 629.364174][T14370] bond0: entered promiscuous mode [ 629.369529][T14370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.390156][T14408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.397473][T14408] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address [ 629.408134][T14408] bond0: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 629.420435][T14408] bond0: (slave vxcan5): making interface the new active one [ 629.427942][T14408] vxcan5: entered promiscuous mode [ 629.434341][T14408] bond0: (slave vxcan5): Enslaving as an active interface with an up link [ 629.456276][ T5865] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 629.466575][ T5936] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 629.482580][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 629.488221][ T5865] usb 3-1: too many configurations: 199, using maximum allowed: 8 [ 629.499291][ T5865] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 187 [ 629.508009][ T5865] usb 3-1: can't read configurations, error -22 [ 629.527370][ T5936] usb 1-1: USB disconnect, device number 27 [ 629.637065][T14410] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 629.649472][ T5865] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 629.662741][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 629.668511][ T5865] usb 3-1: too many configurations: 199, using maximum allowed: 8 [ 629.698071][ T5865] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 187 [ 629.707446][ T5865] usb 3-1: can't read configurations, error -22 [ 629.714349][ T5865] usb usb3-port1: unable to enumerate USB device [ 630.640395][T14433] trusted_key: encrypted_key: keylen parameter is missing [ 630.650937][T14434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.340921][T14461] FAULT_INJECTION: forcing a failure. [ 631.340921][T14461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.355493][T14461] CPU: 0 UID: 0 PID: 14461 Comm: syz.3.2240 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 631.355528][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 631.355543][T14461] Call Trace: [ 631.355553][T14461] [ 631.355562][T14461] dump_stack_lvl+0x189/0x250 [ 631.355594][T14461] ? __pfx____ratelimit+0x10/0x10 [ 631.355625][T14461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.355650][T14461] ? __pfx__printk+0x10/0x10 [ 631.355679][T14461] ? __might_fault+0xb0/0x130 [ 631.355713][T14461] ? rcu_is_watching+0x15/0xb0 [ 631.355737][T14461] should_fail_ex+0x414/0x560 [ 631.355767][T14461] _copy_from_user+0x2d/0xb0 [ 631.355800][T14461] do_sys_poll+0x242/0x1070 [ 631.355837][T14461] ? rcu_is_watching+0x15/0xb0 [ 631.355858][T14461] ? lock_release+0x4b/0x3e0 [ 631.355891][T14461] ? __pfx_do_sys_poll+0x10/0x10 [ 631.355924][T14461] ? aa_file_perm+0x13a/0x1550 [ 631.355946][T14461] ? rcu_is_watching+0x15/0xb0 [ 631.355998][T14461] ? rcu_is_watching+0x15/0xb0 [ 631.356019][T14461] ? lock_release+0x4b/0x3e0 [ 631.356049][T14461] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 631.356075][T14461] ? security_file_permission+0x75/0x290 [ 631.356118][T14461] ? set_user_sigmask+0xc7/0x1b0 [ 631.356141][T14461] ? __pfx_set_user_sigmask+0x10/0x10 [ 631.356168][T14461] __se_sys_ppoll+0x1ff/0x260 [ 631.356201][T14461] ? __pfx___se_sys_ppoll+0x10/0x10 [ 631.356232][T14461] ? __pfx_ksys_write+0x10/0x10 [ 631.356259][T14461] ? rcu_is_watching+0x15/0xb0 [ 631.356283][T14461] ? rcu_is_watching+0x15/0xb0 [ 631.356303][T14461] ? __x64_sys_ppoll+0x20/0xc0 [ 631.356334][T14461] do_syscall_64+0xfa/0x3b0 [ 631.356367][T14461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.356388][T14461] ? clear_bhb_loop+0x60/0xb0 [ 631.356413][T14461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.356435][T14461] RIP: 0033:0x7f837d98ebe9 [ 631.356454][T14461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.356475][T14461] RSP: 002b:00007f837e79d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 631.356499][T14461] RAX: ffffffffffffffda RBX: 00007f837dbb6090 RCX: 00007f837d98ebe9 [ 631.356521][T14461] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 631.356538][T14461] RBP: 00007f837e79d090 R08: 0000000000000000 R09: 0000000000000000 [ 631.356553][T14461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.356566][T14461] R13: 00007f837dbb6128 R14: 00007f837dbb6090 R15: 00007f837dcdfa28 [ 631.356591][T14461] [ 631.938743][T14480] FAULT_INJECTION: forcing a failure. [ 631.938743][T14480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.959898][T14480] CPU: 1 UID: 0 PID: 14480 Comm: syz.2.2246 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 631.959931][T14480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 631.959947][T14480] Call Trace: [ 631.959957][T14480] [ 631.959966][T14480] dump_stack_lvl+0x189/0x250 [ 631.959998][T14480] ? __pfx____ratelimit+0x10/0x10 [ 631.960029][T14480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.960056][T14480] ? __pfx__printk+0x10/0x10 [ 631.960084][T14480] ? __might_fault+0xb0/0x130 [ 631.960118][T14480] ? rcu_is_watching+0x15/0xb0 [ 631.960143][T14480] should_fail_ex+0x414/0x560 [ 631.960174][T14480] _copy_from_user+0x2d/0xb0 [ 631.960200][T14480] do_sys_poll+0x242/0x1070 [ 631.960235][T14480] ? rcu_is_watching+0x15/0xb0 [ 631.960257][T14480] ? lock_release+0x4b/0x3e0 [ 631.960289][T14480] ? __pfx_do_sys_poll+0x10/0x10 [ 631.960322][T14480] ? aa_file_perm+0x13a/0x1550 [ 631.960344][T14480] ? rcu_is_watching+0x15/0xb0 [ 631.960396][T14480] ? rcu_is_watching+0x15/0xb0 [ 631.960418][T14480] ? lock_release+0x4b/0x3e0 [ 631.960448][T14480] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 631.960473][T14480] ? security_file_permission+0x75/0x290 [ 631.960515][T14480] ? set_user_sigmask+0xc7/0x1b0 [ 631.960538][T14480] ? __pfx_set_user_sigmask+0x10/0x10 [ 631.960565][T14480] __se_sys_ppoll+0x1ff/0x260 [ 631.960597][T14480] ? __pfx___se_sys_ppoll+0x10/0x10 [ 631.960640][T14480] ? __pfx_ksys_write+0x10/0x10 [ 631.960668][T14480] ? rcu_is_watching+0x15/0xb0 [ 631.960692][T14480] ? rcu_is_watching+0x15/0xb0 [ 631.960712][T14480] ? __x64_sys_ppoll+0x20/0xc0 [ 631.960743][T14480] do_syscall_64+0xfa/0x3b0 [ 631.960776][T14480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.960798][T14480] ? clear_bhb_loop+0x60/0xb0 [ 631.960822][T14480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.960844][T14480] RIP: 0033:0x7f3eb9f8ebe9 [ 631.960863][T14480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.960884][T14480] RSP: 002b:00007f3ebae46038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 631.960908][T14480] RAX: ffffffffffffffda RBX: 00007f3eba1b5fa0 RCX: 00007f3eb9f8ebe9 [ 631.960925][T14480] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 631.960941][T14480] RBP: 00007f3ebae46090 R08: 0000000000000000 R09: 0000000000000000 [ 631.960955][T14480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.960969][T14480] R13: 00007f3eba1b6038 R14: 00007f3eba1b5fa0 R15: 00007f3eba2dfa28 [ 631.960993][T14480] [ 632.213321][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.343159][ T5865] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 632.492228][ T5865] usb 2-1: device descriptor read/64, error -71 [ 632.763593][ T5865] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 632.790042][T14503] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 632.806751][T14503] nvme_fabrics: unknown parameter or missing value 'œ «' in ctrl creation request [ 632.919433][ T31] audit: type=1800 audit(1755588025.100:1801): pid=14508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2251" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 632.941479][ T5865] usb 2-1: device descriptor read/64, error -71 [ 632.983664][ T31] audit: type=1800 audit(1755588025.100:1802): pid=14508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2251" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 633.062650][ T5865] usb usb2-port1: attempt power cycle [ 633.211559][T14515] FAULT_INJECTION: forcing a failure. [ 633.211559][T14515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 633.241812][T14515] CPU: 0 UID: 0 PID: 14515 Comm: syz.0.2258 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 633.241845][T14515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 633.241877][T14515] Call Trace: [ 633.241886][T14515] [ 633.241896][T14515] dump_stack_lvl+0x189/0x250 [ 633.241928][T14515] ? __pfx____ratelimit+0x10/0x10 [ 633.241962][T14515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.241985][T14515] ? __pfx__printk+0x10/0x10 [ 633.242016][T14515] ? lock_acquire+0x5f/0x360 [ 633.242051][T14515] should_fail_ex+0x414/0x560 [ 633.242082][T14515] prepare_alloc_pages+0x213/0x610 [ 633.242107][T14515] __alloc_frozen_pages_noprof+0x123/0x370 [ 633.242131][T14515] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 633.242153][T14515] ? do_raw_spin_lock+0x121/0x290 [ 633.242181][T14515] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 633.242208][T14515] ? policy_nodemask+0x27c/0x720 [ 633.242241][T14515] alloc_pages_mpol+0x232/0x4a0 [ 633.242274][T14515] alloc_pages_noprof+0xa9/0x190 [ 633.242306][T14515] get_free_pages_noprof+0xf/0x80 [ 633.242328][T14515] __pollwait+0x27b/0x460 [ 633.242364][T14515] ? __pfx___pollwait+0x10/0x10 [ 633.242393][T14515] pipe_poll+0x16c/0x470 [ 633.242426][T14515] ? __pfx_pipe_poll+0x10/0x10 [ 633.242458][T14515] do_sys_poll+0x8c6/0x1070 [ 633.242491][T14515] ? do_sys_poll+0x3d1/0x1070 [ 633.242527][T14515] ? __pfx_do_sys_poll+0x10/0x10 [ 633.242560][T14515] ? aa_file_perm+0x13a/0x1550 [ 633.242581][T14515] ? rcu_is_watching+0x15/0xb0 [ 633.242604][T14515] ? __pfx___pollwait+0x10/0x10 [ 633.242635][T14515] ? __pfx_pollwake+0x10/0x10 [ 633.242667][T14515] ? __pfx_pollwake+0x10/0x10 [ 633.242698][T14515] ? __pfx_pollwake+0x10/0x10 [ 633.242729][T14515] ? __pfx_pollwake+0x10/0x10 [ 633.242760][T14515] ? __pfx_pollwake+0x10/0x10 [ 633.242792][T14515] ? __pfx_pollwake+0x10/0x10 [ 633.242824][T14515] ? __pfx_pollwake+0x10/0x10 [ 633.242855][T14515] ? __pfx_pollwake+0x10/0x10 [ 633.242887][T14515] ? __pfx_pollwake+0x10/0x10 [ 633.242919][T14515] ? rcu_is_watching+0x15/0xb0 [ 633.242941][T14515] ? lock_release+0x4b/0x3e0 [ 633.242969][T14515] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 633.242994][T14515] ? security_file_permission+0x75/0x290 [ 633.243035][T14515] ? set_user_sigmask+0xc7/0x1b0 [ 633.243057][T14515] ? __pfx_set_user_sigmask+0x10/0x10 [ 633.243084][T14515] __se_sys_ppoll+0x1ff/0x260 [ 633.243116][T14515] ? __pfx___se_sys_ppoll+0x10/0x10 [ 633.243146][T14515] ? __pfx_ksys_write+0x10/0x10 [ 633.243173][T14515] ? rcu_is_watching+0x15/0xb0 [ 633.243195][T14515] ? rcu_is_watching+0x15/0xb0 [ 633.243214][T14515] ? __x64_sys_ppoll+0x20/0xc0 [ 633.243240][T14515] do_syscall_64+0xfa/0x3b0 [ 633.243264][T14515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.243279][T14515] ? clear_bhb_loop+0x60/0xb0 [ 633.243296][T14515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.243312][T14515] RIP: 0033:0x7fcd3c58ebe9 [ 633.243326][T14515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.243350][T14515] RSP: 002b:00007fcd3d4ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 633.243368][T14515] RAX: ffffffffffffffda RBX: 00007fcd3c7b6090 RCX: 00007fcd3c58ebe9 [ 633.243380][T14515] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 633.243391][T14515] RBP: 00007fcd3d4ba090 R08: 0000000000000000 R09: 0000000000000000 [ 633.243401][T14515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.243411][T14515] R13: 00007fcd3c7b6128 R14: 00007fcd3c7b6090 R15: 00007fcd3c8dfa28 [ 633.243428][T14515] [ 633.253288][T14517] FAULT_INJECTION: forcing a failure. [ 633.253288][T14517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 633.612079][T14517] CPU: 1 UID: 0 PID: 14517 Comm: syz.4.2259 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 633.612103][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 633.612114][T14517] Call Trace: [ 633.612120][T14517] [ 633.612126][T14517] dump_stack_lvl+0x189/0x250 [ 633.612151][T14517] ? __pfx____ratelimit+0x10/0x10 [ 633.612184][T14517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.612210][T14517] ? __pfx__printk+0x10/0x10 [ 633.612241][T14517] ? lock_acquire+0x5f/0x360 [ 633.612278][T14517] should_fail_ex+0x414/0x560 [ 633.612301][T14517] prepare_alloc_pages+0x213/0x610 [ 633.612326][T14517] __alloc_frozen_pages_noprof+0x123/0x370 [ 633.612344][T14517] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 633.612359][T14517] ? do_raw_spin_lock+0x121/0x290 [ 633.612379][T14517] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 633.612399][T14517] ? policy_nodemask+0x27c/0x720 [ 633.612421][T14517] alloc_pages_mpol+0x232/0x4a0 [ 633.612445][T14517] alloc_pages_noprof+0xa9/0x190 [ 633.612468][T14517] get_free_pages_noprof+0xf/0x80 [ 633.612483][T14517] __pollwait+0x27b/0x460 [ 633.612505][T14517] ? __pfx___pollwait+0x10/0x10 [ 633.612525][T14517] pipe_poll+0x16c/0x470 [ 633.612548][T14517] ? __pfx_pipe_poll+0x10/0x10 [ 633.612572][T14517] do_sys_poll+0x8c6/0x1070 [ 633.612596][T14517] ? do_sys_poll+0x3d1/0x1070 [ 633.612620][T14517] ? __pfx_do_sys_poll+0x10/0x10 [ 633.612644][T14517] ? aa_file_perm+0x13a/0x1550 [ 633.612659][T14517] ? rcu_is_watching+0x15/0xb0 [ 633.612674][T14517] ? __pfx___pollwait+0x10/0x10 [ 633.612695][T14517] ? __pfx_pollwake+0x10/0x10 [ 633.612718][T14517] ? __pfx_pollwake+0x10/0x10 [ 633.612740][T14517] ? __pfx_pollwake+0x10/0x10 [ 633.612763][T14517] ? __pfx_pollwake+0x10/0x10 [ 633.612785][T14517] ? __pfx_pollwake+0x10/0x10 [ 633.612807][T14517] ? __pfx_pollwake+0x10/0x10 [ 633.612830][T14517] ? __pfx_pollwake+0x10/0x10 [ 633.612852][T14517] ? __pfx_pollwake+0x10/0x10 [ 633.612874][T14517] ? __pfx_pollwake+0x10/0x10 [ 633.612896][T14517] ? rcu_is_watching+0x15/0xb0 [ 633.612911][T14517] ? lock_release+0x4b/0x3e0 [ 633.612932][T14517] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 633.612949][T14517] ? security_file_permission+0x75/0x290 [ 633.612979][T14517] ? set_user_sigmask+0xc7/0x1b0 [ 633.612994][T14517] ? __pfx_set_user_sigmask+0x10/0x10 [ 633.613013][T14517] __se_sys_ppoll+0x1ff/0x260 [ 633.613036][T14517] ? __pfx___se_sys_ppoll+0x10/0x10 [ 633.613057][T14517] ? __pfx_ksys_write+0x10/0x10 [ 633.613077][T14517] ? rcu_is_watching+0x15/0xb0 [ 633.613093][T14517] ? rcu_is_watching+0x15/0xb0 [ 633.613106][T14517] ? __x64_sys_ppoll+0x20/0xc0 [ 633.613128][T14517] do_syscall_64+0xfa/0x3b0 [ 633.613151][T14517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.613167][T14517] ? clear_bhb_loop+0x60/0xb0 [ 633.613183][T14517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.613199][T14517] RIP: 0033:0x7efc2138ebe9 [ 633.613212][T14517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.613227][T14517] RSP: 002b:00007efc22112038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 633.613244][T14517] RAX: ffffffffffffffda RBX: 00007efc215b5fa0 RCX: 00007efc2138ebe9 [ 633.613256][T14517] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 633.613269][T14517] RBP: 00007efc22112090 R08: 0000000000000000 R09: 0000000000000000 [ 633.613286][T14517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.613299][T14517] R13: 00007efc215b6038 R14: 00007efc215b5fa0 R15: 00007efc216dfa28 [ 633.613330][T14517] [ 633.971290][ C1] vkms_vblank_simulate: vblank timer overrun [ 634.096919][ T5865] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 634.150260][ T5865] usb 2-1: device descriptor read/8, error -71 [ 634.302057][ T5936] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 634.392622][ T5865] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 634.415117][ T5865] usb 2-1: device descriptor read/8, error -71 [ 634.472226][ T5936] usb 1-1: Using ep0 maxpacket: 8 [ 634.479593][ T5936] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 634.487897][ T5936] usb 1-1: config 0 has no interface number 0 [ 634.508252][ T5936] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 634.522475][ T5865] usb usb2-port1: unable to enumerate USB device [ 634.552158][ T5936] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 634.602033][ T5936] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 634.633981][ T5936] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 634.708697][ T5936] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 634.754492][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.773631][ T5936] usb 1-1: config 0 descriptor?? [ 634.781868][ T5936] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 634.900920][T14536] program syz.3.2267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.988828][T14519] batman_adv: batadv0: Adding interface: dummy0 [ 635.022051][T14519] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.047314][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.054433][T14519] batman_adv: batadv0: Interface activated: dummy0 [ 635.178044][T14545] netlink: 'syz.0.2260': attribute type 10 has an invalid length. [ 635.180589][T14542] ip6gre8: entered allmulticast mode [ 635.235074][T14519] batadv0: mtu less than device minimum [ 635.249184][T14519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.260457][T14519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.271767][T14519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.282988][T14519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.294183][T14519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.305408][T14519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.316642][T14519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.327873][T14519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 635.453892][T14553] FAULT_INJECTION: forcing a failure. [ 635.453892][T14553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.520619][T14553] CPU: 1 UID: 0 PID: 14553 Comm: syz.4.2271 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 635.520652][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 635.520666][T14553] Call Trace: [ 635.520674][T14553] [ 635.520683][T14553] dump_stack_lvl+0x189/0x250 [ 635.520713][T14553] ? __pfx____ratelimit+0x10/0x10 [ 635.520740][T14553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.520764][T14553] ? __pfx__printk+0x10/0x10 [ 635.520793][T14553] ? rcu_is_watching+0x15/0xb0 [ 635.520816][T14553] should_fail_ex+0x414/0x560 [ 635.520846][T14553] _copy_to_user+0x31/0xb0 [ 635.520871][T14553] simple_read_from_buffer+0xe1/0x170 [ 635.520904][T14553] proc_fail_nth_read+0x1b3/0x220 [ 635.520931][T14553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 635.520955][T14553] ? rw_verify_area+0x2a6/0x4d0 [ 635.520982][T14553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 635.521007][T14553] vfs_read+0x1fd/0xa30 [ 635.521033][T14553] ? poll_select_finish+0x26a/0x5e0 [ 635.521109][T14553] ? __pfx_vfs_read+0x10/0x10 [ 635.521135][T14553] ? set_user_sigmask+0xc7/0x1b0 [ 635.521157][T14553] ? __pfx_set_user_sigmask+0x10/0x10 [ 635.521184][T14553] ksys_read+0x145/0x250 [ 635.521214][T14553] ? __pfx_ksys_read+0x10/0x10 [ 635.521241][T14553] ? rcu_is_watching+0x15/0xb0 [ 635.521264][T14553] ? rcu_is_watching+0x15/0xb0 [ 635.521287][T14553] do_syscall_64+0xfa/0x3b0 [ 635.521318][T14553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.521340][T14553] ? clear_bhb_loop+0x60/0xb0 [ 635.521364][T14553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.521385][T14553] RIP: 0033:0x7efc2138d5fc [ 635.521405][T14553] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 635.521425][T14553] RSP: 002b:00007efc1f5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 635.521448][T14553] RAX: ffffffffffffffda RBX: 00007efc215b6090 RCX: 00007efc2138d5fc [ 635.521465][T14553] RDX: 000000000000000f RSI: 00007efc1f5f60a0 RDI: 0000000000000004 [ 635.521480][T14553] RBP: 00007efc1f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 635.521493][T14553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.521506][T14553] R13: 00007efc215b6128 R14: 00007efc215b6090 R15: 00007efc216dfa28 [ 635.521530][T14553] [ 635.749443][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.812156][ T5936] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 635.819773][ T5984] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 635.879513][T13461] usb 1-1: USB disconnect, device number 28 [ 635.890070][T13461] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 635.992030][ T5936] usb 2-1: Invalid ep0 maxpacket: 16 [ 635.997848][ T5984] usb 3-1: Using ep0 maxpacket: 8 [ 636.011047][ T5984] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 636.042949][ T5984] usb 3-1: config 0 has no interface number 0 [ 636.082356][ T5984] usb 3-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 636.126131][ T5984] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 636.135380][ T5936] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 636.144923][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.166443][ T5984] usb 3-1: Product: syz [ 636.170665][ T5984] usb 3-1: Manufacturer: syz [ 636.177999][ T5984] usb 3-1: SerialNumber: syz [ 636.189243][ T5984] usb 3-1: config 0 descriptor?? [ 636.267670][ T5984] msi2500 3-1:0.246: Registered as swradio24 [ 636.279969][ T5984] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 636.294496][ T5936] usb 2-1: Invalid ep0 maxpacket: 16 [ 636.300007][ T5936] usb usb2-port1: attempt power cycle [ 636.305837][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 636.313569][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.661376][T14572] netlink: 'syz.0.2278': attribute type 10 has an invalid length. [ 636.669349][ T5936] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 636.705792][ T5936] usb 2-1: Invalid ep0 maxpacket: 16 [ 636.842088][ T5936] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 636.862510][ T5936] usb 2-1: Invalid ep0 maxpacket: 16 [ 636.868110][ T5936] usb usb2-port1: unable to enumerate USB device [ 637.008383][T14574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2279'. [ 637.224089][T14578] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 637.230636][T14578] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 637.239274][T14578] vhci_hcd vhci_hcd.0: Device attached [ 637.249011][T14578] batman_adv: batadv0: Interface deactivated: dummy0 [ 637.256267][T14578] batman_adv: batadv0: Removing interface: dummy0 [ 637.363585][T14579] vhci_hcd: connection closed [ 637.364131][ T14] vhci_hcd: stop threads [ 637.374016][ T14] vhci_hcd: release socket [ 637.378920][ T14] vhci_hcd: disconnect device [ 637.412802][ T5865] vhci_hcd: vhci_device speed not set [ 637.692087][ T5982] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 637.861084][ T5984] usb 3-1: USB disconnect, device number 114 [ 637.901292][ T5982] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 637.912908][ T5982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.921659][ T5982] usb 1-1: Product: syz [ 637.931005][ T5982] usb 1-1: Manufacturer: syz [ 637.946938][ T5982] usb 1-1: SerialNumber: syz [ 637.974573][ T5982] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 637.982850][ T5985] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 638.005125][ T25] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 638.175918][ T5985] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 638.192221][ T5985] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 638.201616][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.220240][ T5985] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 638.242251][ T5985] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 638.350691][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 639.109208][ T25] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 639.160046][ T25] ath9k_htc: Failed to initialize the device [ 639.223934][ T25] usb 1-1: ath9k_htc: USB layer deinitialized [ 640.102065][ T5865] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 640.274853][ T5865] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 640.286281][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.302232][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.390102][T14616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2288'. [ 640.410323][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 640.430181][ T5865] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 640.445287][ T5865] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 640.456989][ T5865] usb 2-1: Manufacturer: syz [ 640.471208][ T5865] usb 2-1: config 0 descriptor?? [ 640.646810][ T5985] usb 4-1: USB disconnect, device number 127 [ 640.720285][ T5865] appleir 0003:05AC:8243.0031: unknown main item tag 0x0 [ 640.770087][ T5865] appleir 0003:05AC:8243.0031: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 640.845887][ T5865] usb 2-1: USB disconnect, device number 22 [ 640.927625][T14621] fido_id[14621]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 641.142171][ T5984] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 641.295892][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.310907][ T5984] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 641.320271][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.337904][ T5984] usb 4-1: config 0 descriptor?? [ 641.401219][ T5865] usb 1-1: USB disconnect, device number 29 [ 641.755924][ T5936] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 641.912017][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 641.923321][ T5936] usb 2-1: unable to get BOS descriptor or descriptor too short [ 641.943191][ T5936] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 641.959769][ T5936] usb 2-1: config 8 interface 0 altsetting 7 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 641.971849][ T5936] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 642.008114][ T5936] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x8F has invalid wMaxPacketSize 0 [ 642.021088][ T5936] usb 2-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 642.034318][ T5936] usb 2-1: config 8 interface 0 has no altsetting 0 [ 642.043526][ T5936] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 642.057392][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.071591][ T5936] usb 2-1: Product: syz [ 642.081440][ T5936] usb 2-1: Manufacturer: syz [ 642.090521][ T5936] usb 2-1: SerialNumber: syz [ 642.311271][ T5936] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 642.329016][ T5936] usb 2-1: selecting invalid altsetting 0 [ 642.384300][ T5936] snd-usb-audio 2-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 642.405571][ T5936] usb 2-1: USB disconnect, device number 23 [ 642.429659][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 642.545726][T14643] loop4: detected capacity change from 0 to 7 [ 642.566966][ T6011] Dev loop4: unable to read RDB block 7 [ 642.573426][ T6011] loop4: AHDI p1 p2 [ 642.577463][ T6011] loop4: partition table partially beyond EOD, truncated [ 642.586857][ T6011] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 642.602393][T14643] Dev loop4: unable to read RDB block 7 [ 642.608159][T14643] loop4: AHDI p1 p2 [ 642.613496][T14643] loop4: partition table partially beyond EOD, truncated [ 642.621307][T14643] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 642.658445][ T6011] udevd[6011]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 642.694342][ T6011] udevd[6011]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 642.741058][T14645] tipc: Enabled bearer , priority 0 [ 642.750834][T14645] syzkaller0: entered promiscuous mode [ 642.752075][ T5865] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 642.756515][T14645] syzkaller0: entered allmulticast mode [ 642.777887][T14645] tipc: Resetting bearer [ 642.911989][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 642.918871][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.930787][ T5865] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 642.940015][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.953713][ T5865] usb 1-1: config 0 descriptor?? [ 643.181705][T14649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.527323][ T5865] uclogic 0003:5543:0005.0032: unknown main item tag 0x0 [ 643.534856][ T5985] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 643.551041][ T5865] uclogic 0003:5543:0005.0032: unknown main item tag 0x0 [ 643.568844][ T5865] uclogic 0003:5543:0005.0032: unknown main item tag 0x0 [ 643.582512][ T5865] uclogic 0003:5543:0005.0032: hidraw0: USB HID v0.05 Device [HID 5543:0005] on usb-dummy_hcd.0-1/input0 [ 643.795971][T14660] input: syz0 as /devices/virtual/input/input44 [ 643.806920][T14641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.824064][ T31] audit: type=1326 audit(1755588035.990:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb9f8ebe9 code=0x7ffc0000 [ 643.846701][ C1] vkms_vblank_simulate: vblank timer overrun [ 643.853906][ T5865] tipc: Node number set to 1304982558 [ 643.903519][ T5985] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 643.914653][T14641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.925974][ T5984] usbhid 4-1:0.0: can't add hid device: -71 [ 643.969786][ T5985] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 643.990175][ T5984] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 643.995383][ T31] audit: type=1326 audit(1755588035.990:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3eb9f8ebe9 code=0x7ffc0000 [ 644.175794][ T5985] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 644.207376][T13461] usb 1-1: USB disconnect, device number 30 [ 644.219590][ T5984] usb 4-1: USB disconnect, device number 2 [ 644.246165][ T31] audit: type=1326 audit(1755588035.990:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb9f8ebe9 code=0x7ffc0000 [ 644.274674][ T31] audit: type=1326 audit(1755588035.990:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f3eb9f8ebe9 code=0x7ffc0000 [ 644.297219][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.451378][ T31] audit: type=1326 audit(1755588035.990:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb9f8ebe9 code=0x7ffc0000 [ 644.477311][ T31] audit: type=1326 audit(1755588035.990:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3eb9f8ebe9 code=0x7ffc0000 [ 644.500568][ T5985] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 644.513015][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.521151][ T5985] usb 2-1: Product: syz [ 644.525410][ T5985] usb 2-1: Manufacturer: syz [ 644.530183][ T31] audit: type=1326 audit(1755588035.990:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb9f8ebe9 code=0x7ffc0000 [ 644.553118][ T5985] usb 2-1: SerialNumber: syz [ 644.560806][ T31] audit: type=1326 audit(1755588035.990:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3eb9f8ebe9 code=0x7ffc0000 [ 644.584314][ T5985] hub 2-1:1.0: bad descriptor, ignoring hub [ 644.590273][ T5985] hub 2-1:1.0: probe with driver hub failed with error -5 [ 644.597904][ T31] audit: type=1326 audit(1755588035.990:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb9f8ebe9 code=0x7ffc0000 [ 644.630809][ T31] audit: type=1326 audit(1755588035.990:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f3eb9f8ebe9 code=0x7ffc0000 [ 644.803626][ T5985] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 645.172061][ T5984] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 645.282193][ T5985] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 645.335800][ T5984] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 645.345204][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.353844][ T5984] usb 3-1: Product: syz [ 645.358154][ T5984] usb 3-1: Manufacturer: syz [ 645.362832][ T5984] usb 3-1: SerialNumber: syz [ 645.372710][ T5984] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 645.390281][ T5936] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 645.412612][T14648] usb 2-1: reset high-speed USB device number 24 using dummy_hcd [ 645.437196][ T5985] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 645.446645][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.456054][ T5985] usb 4-1: Product: syz [ 645.460289][ T5985] usb 4-1: Manufacturer: syz [ 645.465136][ T5985] usb 4-1: SerialNumber: syz [ 645.473968][ T5985] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 645.488651][ T5865] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 645.763423][T14644] tipc: Resetting bearer [ 645.774178][T14644] tipc: Disabling bearer [ 645.976532][T14679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2306'. [ 645.999637][T14682] loop4: detected capacity change from 0 to 7 [ 646.017866][T14682] Dev loop4: unable to read RDB block 7 [ 646.058242][T14682] loop4: AHDI p1 p2 [ 646.068493][T14682] loop4: partition table partially beyond EOD, truncated [ 646.076875][T14682] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 646.267453][ T6011] udevd[6011]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 646.465432][ T5936] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 646.479828][ T5936] ath9k_htc: Failed to initialize the device [ 646.513244][ T5936] usb 3-1: ath9k_htc: USB layer deinitialized [ 646.556896][ T5865] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 647.592534][ T5986] usb 2-1: USB disconnect, device number 24 [ 647.657624][ T5986] usblp0: removed [ 647.845013][ T5865] ath9k_htc: Failed to initialize the device [ 648.114931][ T5865] usb 4-1: ath9k_htc: USB layer deinitialized [ 648.552256][ T5984] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 648.862263][T14702] delete_channel: no stack [ 648.903911][ T5984] usb 2-1: not running at top speed; connect to a high speed hub [ 648.915357][ T5984] usb 2-1: config 0 has an invalid interface number: 139 but max is 1 [ 648.926717][ T5984] usb 2-1: config 0 has an invalid interface number: 23 but max is 1 [ 648.942057][ T5984] usb 2-1: config 0 has no interface number 0 [ 648.958459][ T5984] usb 2-1: config 0 has no interface number 1 [ 648.991126][ T5984] usb 2-1: config 0 interface 23 altsetting 7 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 649.051978][ T5984] usb 2-1: config 0 interface 23 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 649.114804][ T5984] usb 2-1: config 0 interface 23 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 649.162553][ T5984] usb 2-1: config 0 interface 23 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 649.194757][ T5984] usb 2-1: config 0 interface 23 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 649.224843][ T5984] usb 2-1: config 0 interface 23 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 649.271984][ T5984] usb 2-1: config 0 interface 139 has no altsetting 0 [ 649.304824][ T5984] usb 2-1: config 0 interface 23 has no altsetting 0 [ 649.395358][ T5984] usb 2-1: New USB device found, idVendor=10d2, idProduct=f9ba, bcdDevice=6b.71 [ 649.412066][ T5984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.442027][ T5984] usb 2-1: Product: syz [ 649.462003][ T5984] usb 2-1: Manufacturer: syz [ 649.474454][ T5984] usb 2-1: SerialNumber: syz [ 649.486016][ T5984] usb 2-1: config 0 descriptor?? [ 649.520788][T13461] usb 4-1: USB disconnect, device number 3 [ 649.699859][T14707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.710459][T14707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.778712][ T5984] usblcd 2-1:0.139: USBLCD model not supported. [ 649.815267][ T5984] usblcd 2-1:0.23: USBLCD model not supported. [ 649.856912][ T5984] usb 2-1: USB disconnect, device number 25 [ 649.863680][ T5985] usb 3-1: USB disconnect, device number 115 [ 650.097857][T14726] ip6gre6: entered allmulticast mode [ 650.302715][T14728] ip6gre4: entered allmulticast mode [ 650.576760][T14739] fuse: Bad value for 'user_id' [ 650.581695][T14739] fuse: Bad value for 'user_id' [ 650.593048][T14743] tipc: Enabled bearer , priority 10 [ 650.732195][ T5984] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 650.893404][ T5984] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 650.970325][T14753] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 651.020905][ T5984] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 651.057055][ T5984] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 651.134313][ T5984] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 651.166448][ T5984] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 651.198848][ T5984] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 651.212027][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 651.246345][ T5984] usb 4-1: Product: syz [ 651.255002][ T5984] usb 4-1: Manufacturer: syz [ 651.273463][ T5984] cdc_wdm 4-1:1.0: skipping garbage [ 651.286801][ T5984] cdc_wdm 4-1:1.0: skipping garbage [ 651.306915][ T5984] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 651.320706][ T5984] cdc_wdm 4-1:1.0: Unknown control protocol [ 651.519373][T14763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 651.528091][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 651.533738][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 651.540353][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 651.546648][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 651.553247][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 651.559537][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 651.566165][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 651.572384][ T5986] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 651.572661][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 651.586895][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 651.593024][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.599193][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 651.605784][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 651.612042][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 651.618659][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 651.624967][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 651.631603][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 651.637870][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 651.644508][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 651.650776][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 651.657412][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 651.663602][ T5984] usb 4-1: USB disconnect, device number 4 [ 651.670075][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 651.670093][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 651.670105][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 651.863675][ T5986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.873952][ T5986] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 651.892144][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.921418][ T5986] usb 3-1: config 0 descriptor?? [ 651.995376][T14770] ip6gre6: entered allmulticast mode [ 652.321992][ T5984] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 652.505401][ T5984] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 652.566879][ T5984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.591546][ T5984] usb 1-1: config 0 descriptor?? [ 652.613746][ T5984] gspca_main: spca508-2.14.0 probing 8086:0110 [ 652.827146][ T5936] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 652.835467][ T5984] gspca_spca508: reg_read err -32 [ 652.842029][ T5984] gspca_spca508: reg_read err -32 [ 652.942177][ T886] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 653.052696][ T5984] gspca_spca508: reg_read err -71 [ 653.104397][ T5936] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 653.116358][ T5984] gspca_spca508: reg_read err -71 [ 653.131760][ T5984] gspca_spca508: reg write: error -71 [ 653.142007][ T5936] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 653.164564][ T5984] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 653.173219][ T5936] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 653.192249][ T5984] usb 1-1: USB disconnect, device number 31 [ 653.258310][ T886] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 653.270561][ T5936] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 653.312432][ T886] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 653.356152][ T5936] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 653.367486][ T886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.394682][ T5936] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 653.438919][ T5936] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 653.478409][ T886] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 654.085884][ T5936] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.094530][ T886] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 654.095553][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 654.240314][ T5936] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 654.261836][ T5936] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 654.331000][ T5936] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 654.343761][ T5936] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 654.391217][ T5936] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.411315][ T5936] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 654.441229][ T5936] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 654.460225][ T5936] usb 4-1: string descriptor 0 read error: -22 [ 654.463908][T14809] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.2341'. [ 654.466816][ T5936] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 654.476113][T14809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2341'. [ 654.500707][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.526371][ T5936] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 654.536100][ T5986] usbhid 3-1:0.0: can't add hid device: -71 [ 654.546357][ T5986] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 654.568751][ T5986] usb 3-1: USB disconnect, device number 116 [ 654.628516][T14812] ip6gre7: entered allmulticast mode [ 655.322344][ T5986] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 655.512630][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2348'. [ 655.589160][ T25] usb 2-1: USB disconnect, device number 26 [ 655.705333][ T5986] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 655.724877][ T5986] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 655.748177][ T5986] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 655.771618][ T5986] usb 3-1: config 220 has no interface number 2 [ 655.782494][ T5986] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 655.832208][ T5986] usb 3-1: config 220 interface 0 has no altsetting 0 [ 655.842252][ T5986] usb 3-1: config 220 interface 76 has no altsetting 0 [ 655.984799][ T5986] usb 3-1: config 220 interface 1 has no altsetting 0 [ 656.001794][ T5986] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 656.031302][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.055203][ T5986] usb 3-1: Product: syz [ 656.064041][ T5986] usb 3-1: Manufacturer: syz [ 656.075770][ T5986] usb 3-1: SerialNumber: syz [ 656.341136][T14820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.370449][T14820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.394100][ T5986] usb 3-1: selecting invalid altsetting 0 [ 656.405409][ T5986] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 656.417639][ T5986] usb 3-1: No valid video chain found. [ 656.447387][ T5986] usb 3-1: selecting invalid altsetting 0 [ 656.453462][ T5986] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 656.470102][ T5986] usb 3-1: USB disconnect, device number 117 [ 656.662031][ T25] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 656.823799][ T25] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 656.842014][ T25] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 656.864998][ T25] usb 1-1: config 220 has no interface number 2 [ 656.881504][ T25] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 656.902148][ T25] usb 1-1: config 220 interface 0 has no altsetting 0 [ 656.912215][ T25] usb 1-1: config 220 interface 76 has no altsetting 0 [ 656.919131][ T25] usb 1-1: config 220 interface 1 has no altsetting 0 [ 656.938328][ T25] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 656.949275][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.972048][ T25] usb 1-1: Product: syz [ 656.976281][ T25] usb 1-1: Manufacturer: syz [ 656.991451][ T25] usb 1-1: SerialNumber: syz [ 657.218649][ T25] usb 1-1: selecting invalid altsetting 0 [ 657.254914][ T25] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 657.276311][ T25] usb 1-1: No valid video chain found. [ 657.298449][ T25] usb 1-1: selecting invalid altsetting 0 [ 657.309894][ T25] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 657.330998][ T25] usb 1-1: USB disconnect, device number 32 [ 657.342038][ T5985] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 657.506204][ T5985] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.532137][ T5985] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 657.552379][ T5985] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 657.561638][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 657.582267][ T5985] usb 2-1: SerialNumber: syz [ 657.767054][T14850] Invalid logical block size (4194304) [ 657.798306][ T5985] usb 2-1: 0:2 : does not exist [ 657.809643][ T5985] usb 2-1: unit 5 not found! [ 657.837592][ T5985] usb 2-1: USB disconnect, device number 27 [ 657.905581][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.083379][ T5985] usb 4-1: USB disconnect, device number 5 [ 658.312162][ T5986] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 658.349063][T14868] netlink: 'syz.1.2361': attribute type 12 has an invalid length. [ 658.362190][ T5936] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 658.369440][T14868] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2361'. [ 658.491985][ T5985] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 658.492011][ T5986] usb 3-1: Using ep0 maxpacket: 32 [ 658.545844][ T5986] usb 3-1: unable to get BOS descriptor or descriptor too short [ 658.554969][ T5986] usb 3-1: config 120 has an invalid interface number: 86 but max is 0 [ 658.577637][ T5936] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 658.593984][ T5936] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 658.617474][ T5986] usb 3-1: config 120 has no interface number 0 [ 658.638620][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.649626][ T5986] usb 3-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af [ 658.652068][ T5922] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 658.671813][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.684448][ T5985] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 658.697650][ T5936] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 658.706406][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.708523][ T5986] usb 3-1: Product: syz [ 658.718734][ T5985] usb 4-1: Product: syz [ 658.723274][ T5986] usb 3-1: Manufacturer: syz [ 658.734354][ T5986] usb 3-1: SerialNumber: syz [ 658.747371][ T5936] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 658.766219][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.788787][ T5985] usb 4-1: Manufacturer: syz [ 658.798698][ T5985] usb 4-1: SerialNumber: syz [ 658.845299][ T5985] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 658.862171][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 658.868689][ T25] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 658.889883][ T5922] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 659.045697][ T5922] usb 2-1: config 0 has no interface number 0 [ 659.057927][ T5986] huawei_cdc_ncm 3-1:120.86: More than one union descriptor, skipping ... [ 659.066890][ T5922] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 659.078161][ T5922] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 659.090497][ T5922] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 659.098795][ T5986] huawei_cdc_ncm 3-1:120.86: CDC Union missing and no IAD found [ 659.101849][ T5922] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 659.172110][ T5986] huawei_cdc_ncm 3-1:120.86: bind() failure [ 659.198648][ T5986] usb 3-1: USB disconnect, device number 118 [ 659.229437][ T5922] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 659.240839][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.280062][ T5922] usb 2-1: config 0 descriptor?? [ 659.298431][ T5922] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 659.729685][T14872] delete_channel: no stack [ 659.775092][ T5986] usb 2-1: USB disconnect, device number 28 [ 659.982183][ T25] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 659.982531][ T25] ath9k_htc: Failed to initialize the device [ 659.987374][ T5986] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 660.041496][T14882] tty tty25: ldisc open failed (-12), clearing slot 24 [ 660.122265][ T25] usb 4-1: ath9k_htc: USB layer deinitialized [ 661.053992][ T5922] usb 1-1: USB disconnect, device number 33 [ 661.165221][T14905] loop2: detected capacity change from 0 to 7 [ 661.593497][T14905] Dev loop2: unable to read RDB block 7 [ 661.599182][T14905] loop2: unable to read partition table [ 661.612567][T14905] loop2: partition table beyond EOD, truncated [ 661.823490][T14905] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 662.162106][ T5922] usb 4-1: USB disconnect, device number 6 [ 662.327006][T14916] ip6gre8: entered allmulticast mode [ 663.303930][T14930] netlink: 'syz.4.2376': attribute type 9 has an invalid length. [ 663.418693][T14921] delete_channel: no stack [ 663.510722][T14933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2378'. [ 663.884573][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2381'. [ 663.902903][T14946] netlink: 'syz.0.2381': attribute type 18 has an invalid length. [ 663.923118][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2381'. [ 663.935359][T14946] netlink: 'syz.0.2381': attribute type 18 has an invalid length. [ 664.192073][ T5936] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 664.232005][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 664.341981][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 664.358295][ T5936] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 664.371299][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.388739][ T5936] usb 3-1: Product: syz [ 664.393334][ T5936] usb 3-1: Manufacturer: syz [ 664.397950][ T5936] usb 3-1: SerialNumber: syz [ 664.409741][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 664.423223][ T5936] usb 3-1: config 0 descriptor?? [ 664.431490][ T5936] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 664.432112][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.448256][ T25] usb 4-1: Product: syz [ 664.453379][ T25] usb 4-1: Manufacturer: syz [ 664.458037][ T25] usb 4-1: SerialNumber: syz [ 664.469271][ T25] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 664.486398][ T5985] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 664.839103][T14965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.849842][T14965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.882314][ T5936] gspca_m5602: Failed to find a sensor [ 664.897098][ T5936] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 664.916265][ T5936] usb 3-1: USB disconnect, device number 119 [ 665.663579][ T5985] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 665.687060][ T5985] ath9k_htc: Failed to initialize the device [ 665.741115][ T5985] usb 4-1: ath9k_htc: USB layer deinitialized [ 665.769532][T14968] delete_channel: no stack [ 665.891160][T14981] ip6gre8: entered allmulticast mode [ 666.114983][T14984] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 666.676163][T14996] loop4: detected capacity change from 0 to 7 [ 666.811475][T14996] Dev loop4: unable to read RDB block 7 [ 666.817411][T14996] loop4: AHDI p1 p2 [ 666.833045][T14996] loop4: partition table partially beyond EOD, truncated [ 666.842247][T14996] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 666.921809][ T6011] udevd[6011]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 667.124290][T15004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 667.281807][ T25] usb 4-1: USB disconnect, device number 7 [ 668.065449][T15016] ip6gre7: entered allmulticast mode [ 668.187270][T15010] delete_channel: no stack [ 668.305893][ T5936] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 668.332001][ T25] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 668.425119][ T5936] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 668.466003][T15022] netlink: 'syz.3.2404': attribute type 12 has an invalid length. [ 668.478271][T15022] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2404'. [ 668.478493][ T25] usb 3-1: device descriptor read/64, error -71 [ 668.802082][ T886] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 668.872091][ T25] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 668.952489][ T5865] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 668.962143][ T886] usb 4-1: Using ep0 maxpacket: 8 [ 668.968549][ T886] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 668.976763][ T886] usb 4-1: config 0 has no interface number 0 [ 668.982953][ T5936] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 668.990576][ T886] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 669.001520][ T886] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 669.013457][ T886] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 669.025419][ T886] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 669.031202][ T25] usb 3-1: device descriptor read/64, error -71 [ 669.038787][ T886] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 669.054020][ T886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.067799][ T886] usb 4-1: config 0 descriptor?? [ 669.075905][ T886] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 669.123879][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.133870][ T5865] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 669.143043][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.152946][ T5865] usb 2-1: config 0 descriptor?? [ 669.172492][ T25] usb usb3-port1: attempt power cycle [ 669.182191][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 669.188649][ T5936] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 669.197328][ T5936] usb 1-1: config 0 has no interface number 0 [ 669.203514][ T5936] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 669.216237][ T5936] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 669.225441][ T5936] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 669.233808][ T5936] usb 1-1: Product: syz [ 669.237998][ T5936] usb 1-1: Manufacturer: syz [ 669.242698][ T5936] usb 1-1: SerialNumber: syz [ 669.248781][ T5936] usb 1-1: config 0 descriptor?? [ 669.257035][ T5936] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 669.264986][ T5936] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 669.273540][ T5936] keyspan 1-1:0.107: unsupported endpoint type 0 [ 669.280884][ T5936] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 669.291016][ T5936] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 669.300681][ T5936] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 669.309534][ T5936] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 669.319228][ T5936] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 669.328137][ T5936] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 669.337367][ T5936] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 669.346339][ T5936] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 669.460726][ T5936] usb 1-1: USB disconnect, device number 34 [ 669.552061][ T25] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 669.565650][ T5936] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 669.575199][ T25] usb 3-1: device descriptor read/8, error -71 [ 669.593951][ T5936] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 669.613892][ T5936] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 669.658625][ T5936] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 669.714181][ T5936] keyspan 1-1:0.107: device disconnected [ 669.822109][ T25] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 669.846676][ T25] usb 3-1: device descriptor read/8, error -71 [ 669.962519][ T25] usb usb3-port1: unable to enumerate USB device [ 670.552228][ T5984] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 670.713448][ T5984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.724563][ T5984] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 670.733767][ T5984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.743549][ T5984] usb 1-1: config 0 descriptor?? [ 671.333382][ T25] usb 4-1: USB disconnect, device number 8 [ 671.341280][ T25] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 671.522711][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2409'. [ 671.815360][T15052] binder: 15050:15052 ioctl c0306201 200000001a80 returned -14 [ 671.823198][ T5865] usbhid 2-1:0.0: can't add hid device: -71 [ 671.960184][ T5865] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 672.055473][ T5865] usb 2-1: USB disconnect, device number 29 [ 672.343859][T15066] : renamed from bridge_slave_0 (while UP) [ 672.656737][T15059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.102010][ T5936] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 673.222237][ T886] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 673.289521][ T5936] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 673.303677][ T5936] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 673.334864][ T5936] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 673.370286][T15073] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 673.370286][T15073] program syz.4.2415 not setting count and/or reply_len properly [ 673.393656][ T886] usb 4-1: Using ep0 maxpacket: 16 [ 673.417844][ T5936] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 673.434097][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.442691][ T5936] usb 3-1: Product: syz [ 673.447244][ T886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.461806][ T886] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 673.481104][ T5936] usb 3-1: Manufacturer: syz [ 673.485983][ T5936] usb 3-1: SerialNumber: syz [ 673.490637][ T886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.549747][ T5936] hub 3-1:1.0: bad descriptor, ignoring hub [ 673.556599][ T886] usb 4-1: config 0 descriptor?? [ 673.567080][ T5936] hub 3-1:1.0: probe with driver hub failed with error -5 [ 673.832967][ T5936] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 124 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 674.092528][ T886] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 674.126978][ T886] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 674.138837][ T5984] usbhid 1-1:0.0: can't add hid device: -71 [ 674.148678][ T886] mcp2221 0003:04D8:00DD.0034: item fetching failed at offset 2/5 [ 674.164411][ T5984] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 674.175653][ T886] mcp2221 0003:04D8:00DD.0034: can't parse reports [ 674.187266][ T5984] usb 1-1: USB disconnect, device number 35 [ 674.193417][ T886] mcp2221 0003:04D8:00DD.0034: probe with driver mcp2221 failed with error -22 [ 674.503925][ T5984] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 674.564286][ T25] usb 4-1: USB disconnect, device number 9 [ 674.663451][ T5984] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.677134][ T5984] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 674.686667][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.695137][ T5984] usb 1-1: Product: syz [ 674.699562][ T5984] usb 1-1: Manufacturer: syz [ 674.704316][ T5984] usb 1-1: SerialNumber: syz [ 674.710929][ T5984] usb 1-1: config 0 descriptor?? [ 674.882044][ T5982] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 674.930097][ T5984] usb 1-1: probing VID:PID(2201:012C) [ 674.937247][ T5984] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 674.945238][ T5984] vub300 1-1:0.0: probe with driver vub300 failed with error -22 [ 674.957888][ T5984] usb 1-1: USB disconnect, device number 36 [ 675.022018][ T5982] usb 2-1: device descriptor read/64, error -71 [ 675.322201][ T5982] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 675.392114][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 675.462051][ T5982] usb 2-1: device descriptor read/64, error -71 [ 675.562103][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 675.569659][ T25] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 675.581035][ T25] usb 4-1: config 0 has no interface number 0 [ 675.591242][ T25] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 675.603887][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.612119][ T25] usb 4-1: Product: syz [ 675.616391][ T25] usb 4-1: Manufacturer: syz [ 675.620993][ T25] usb 4-1: SerialNumber: syz [ 675.627860][ T25] usb 4-1: config 0 descriptor?? [ 675.634698][ T25] smsc95xx v2.0.0 [ 675.652314][ T5982] usb usb2-port1: attempt power cycle [ 676.012466][ T5982] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 676.052063][T15107] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 676.120579][ T25] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 676.137186][ T25] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 676.164267][ T5982] usb 2-1: device descriptor read/8, error -71 [ 676.402177][ T5982] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 676.446572][ T5982] usb 2-1: device descriptor read/8, error -71 [ 676.566164][ T5982] usb usb2-port1: unable to enumerate USB device [ 676.765315][T15109] vlan3: entered promiscuous mode [ 676.770643][T15109] 0·: entered promiscuous mode [ 676.778605][T15109] vlan3: entered allmulticast mode [ 676.792264][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2425'. [ 677.493819][ T5865] usb 3-1: USB disconnect, device number 124 [ 677.501642][ T5865] usblp0: removed [ 677.620973][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 677.620994][ T31] audit: type=1326 audit(1755588069.820:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.2.2429" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3eb9f8ebe9 code=0x0 [ 678.477820][ T25] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 678.570643][T15140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2433'. [ 678.628658][T15140] sctp: [Deprecated]: syz.1.2433 (pid 15140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 678.628658][T15140] Use struct sctp_sack_info instead [ 678.663127][ T25] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 678.676467][ T25] usb 4-1: USB disconnect, device number 10 [ 679.622120][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 679.716601][ T5922] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 679.802009][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 679.953595][ T5922] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 679.965759][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.981335][ T5922] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 679.997128][ T5922] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 680.011663][ T5922] usb 1-1: Manufacturer: syz [ 680.024655][ T5922] usb 1-1: config 0 descriptor?? [ 680.103512][ T5922] rc_core: IR keymap rc-hauppauge not found [ 680.152258][ T5922] Registered IR keymap rc-empty [ 680.189236][ T5922] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 680.215678][ T5922] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input45 [ 680.259272][ T5922] usb 1-1: USB disconnect, device number 37 [ 680.539349][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2442'. [ 680.548720][T15169] netlink: 'syz.1.2442': attribute type 18 has an invalid length. [ 680.556638][T15169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2442'. [ 681.042397][ T5984] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 681.102335][ T5936] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 681.172428][ T5984] usb 1-1: device descriptor read/64, error -71 [ 681.263564][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 681.278137][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 15557, setting to 64 [ 681.299064][T15201] loop2: detected capacity change from 0 to 7 [ 681.306172][ T5936] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 681.306416][T15201] Dev loop2: unable to read RDB block 7 [ 681.327357][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.335662][T15201] loop2: unable to read partition table [ 681.341700][T15201] loop2: partition table beyond EOD, truncated [ 681.352101][ T5936] usb 2-1: config 0 descriptor?? [ 681.360243][ T5936] hub 2-1:0.0: bad descriptor, ignoring hub [ 681.367002][T15201] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 681.376499][ T5936] hub 2-1:0.0: probe with driver hub failed with error -5 [ 681.385543][ T5936] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 681.422108][ T5984] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 681.562374][ T5984] usb 1-1: device descriptor read/64, error -71 [ 681.672195][ T5936] usb 2-1: USB disconnect, device number 34 [ 681.678516][ T5984] usb usb1-port1: attempt power cycle [ 682.062209][ T5984] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 682.092535][T15210] vivid-000: disconnect [ 682.116406][ T5984] usb 1-1: device descriptor read/8, error -71 [ 682.911987][ T5984] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 682.928456][T15202] vivid-000: reconnect [ 682.942507][ T5984] usb 1-1: device descriptor read/8, error -71 [ 683.062358][ T5984] usb usb1-port1: unable to enumerate USB device [ 683.117439][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 683.155955][ T25] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 683.192088][ T25] usb 4-1: can't read configurations, error -71 [ 683.425897][T15227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2455'. [ 683.872021][ T5984] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 683.978466][T15239] Invalid logical block size (134217728) [ 684.022047][ T5984] usb 3-1: Using ep0 maxpacket: 32 [ 684.033232][ T5984] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 684.041627][ T5984] usb 3-1: config 0 has no interface number 0 [ 684.053478][ T5984] usb 3-1: config 0 interface 188 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 684.071967][ T5984] usb 3-1: config 0 interface 188 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 684.091966][ T5984] usb 3-1: config 0 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 129, changing to 11 [ 684.110245][ T5984] usb 3-1: config 0 interface 188 altsetting 0 endpoint 0x8D has invalid maxpacket 10062, setting to 1024 [ 684.110292][ T5984] usb 3-1: config 0 interface 188 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 684.116038][ T5984] usb 3-1: New USB device found, idVendor=2c7c, idProduct=6002, bcdDevice=42.9b [ 684.116071][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.116094][ T5984] usb 3-1: Product: syz [ 684.116110][ T5984] usb 3-1: Manufacturer: syz [ 684.116125][ T5984] usb 3-1: SerialNumber: syz [ 684.118187][ T5984] usb 3-1: config 0 descriptor?? [ 684.118980][T15235] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 684.125410][ T5984] option 3-1:0.188: GSM modem (1-port) converter detected [ 684.252411][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 684.370665][T15235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.379965][T15235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.415405][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 684.418290][ T5984] usb 3-1: USB disconnect, device number 125 [ 684.431836][ T5984] option 3-1:0.188: device disconnected [ 684.462463][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.490335][ T25] usb 4-1: Product: syz [ 684.498866][ T25] usb 4-1: Manufacturer: syz [ 684.509267][ T25] usb 4-1: SerialNumber: syz [ 684.522093][ T5922] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 684.542190][ T25] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 684.557316][ T5982] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 684.702152][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 684.710155][ T5922] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.721752][ T5922] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 684.731055][ T5922] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 684.774847][ T5922] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 684.786249][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.794497][ T5922] usb 1-1: Product: syz [ 684.798943][ T5922] usb 1-1: Manufacturer: syz [ 684.803899][ T5922] usb 1-1: SerialNumber: syz [ 684.823202][ T5922] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 684.834984][ T5922] cdc_ncm 1-1:1.0: bind() failure [ 685.040125][ T886] usb 1-1: USB disconnect, device number 42 [ 685.075052][ T25] usb 4-1: USB disconnect, device number 12 [ 685.355637][T15273] netlink: 'syz.1.2467': attribute type 1 has an invalid length. [ 685.655343][ T5982] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 685.678905][ T5982] ath9k_htc: Failed to initialize the device [ 685.706928][ T25] usb 4-1: ath9k_htc: USB layer deinitialized [ 685.739812][T15281] ptrace attach of "./syz-executor exec"[5882] was attempted by "./syz-executor exec"[15281] [ 686.665463][T15289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2470'. [ 686.674630][T15289] macsec0: left allmulticast mode [ 686.679769][T15289] veth1_macvtap: left allmulticast mode [ 686.685597][T15289] macsec0: left promiscuous mode [ 686.691453][T15289] bridge0: port 3(macsec0) entered disabled state [ 686.856616][T15289] bridge_slave_1: left allmulticast mode [ 686.973986][T15289] bridge_slave_1: left promiscuous mode [ 686.980371][T15289] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.016591][T15289] bridge_slave_0: left allmulticast mode [ 687.025979][T15289] bridge_slave_0: left promiscuous mode [ 687.035631][T15289] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.052172][T15278] delete_channel: no stack [ 688.445627][T15305] ip6gretap1: entered promiscuous mode [ 688.606226][T15296] delete_channel: no stack [ 689.229463][T15328] : renamed from bridge_slave_0 (while UP) [ 689.704090][T15313] delete_channel: no stack [ 689.832054][ T5954] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 689.842248][ T25] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 689.993403][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 690.012100][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 690.025876][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.043347][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 690.062042][ T32] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 690.075524][ T32] Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 [ 690.120295][ T5954] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 690.120326][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.125225][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 690.125240][ T32] task:kworker/0:0 state:D stack:20720 pid:9 tgid:9 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 690.125301][ T32] Workqueue: usb_hub_wq hub_event [ 690.125333][ T32] Call Trace: [ 690.125343][ T32] [ 690.125356][ T32] __schedule+0x1798/0x4cc0 [ 690.125400][ T32] ? __pfx___schedule+0x10/0x10 [ 690.125428][ T32] ? preempt_schedule_common+0x83/0xd0 [ 690.125460][ T32] ? __pfx_preempt_schedule+0x10/0x10 [ 690.125494][ T32] ? lock_release+0x4b/0x3e0 [ 690.125533][ T32] schedule+0x165/0x360 [ 690.125564][ T32] schedule_timeout+0x9a/0x270 [ 690.125590][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 690.125619][ T32] ? rcu_is_watching+0x15/0xb0 [ 690.125645][ T32] ? rcu_is_watching+0x15/0xb0 [ 690.125677][ T32] ? wait_for_completion+0x267/0x5d0 [ 690.125711][ T32] wait_for_completion+0x2bf/0x5d0 [ 690.125748][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 690.125786][ T32] i2c_del_adapter+0x581/0x6e0 [ 690.125826][ T32] ? __pfx_i2c_del_adapter+0x10/0x10 [ 690.125858][ T32] ? rcu_is_watching+0x15/0xb0 [ 690.125881][ T32] ? dvb_usb_adapter_exit+0xd7/0x240 [ 690.125914][ T32] dvb_usb_i2c_exit+0x64/0xb0 [ 690.125945][ T32] dvb_usb_device_exit+0x1be/0x350 [ 690.125975][ T32] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 690.126003][ T32] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 690.126037][ T32] ? usb_disable_interface+0x31d/0x350 [ 690.126070][ T32] usb_unbind_interface+0x26b/0x910 [ 690.126105][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 690.126136][ T32] device_release_driver_internal+0x4d9/0x800 [ 690.126168][ T32] bus_remove_device+0x34d/0x410 [ 690.126205][ T32] device_del+0x511/0x8e0 [ 690.126231][ T32] ? __pm_runtime_barrier+0x212/0x460 [ 690.126321][ T32] ? __pfx_device_del+0x10/0x10 [ 690.126348][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 690.126382][ T32] ? rcu_is_watching+0x15/0xb0 [ 690.126408][ T32] usb_disable_device+0x3e9/0x8a0 [ 690.126443][ T32] usb_disconnect+0x330/0x950 [ 690.126472][ T32] hub_event+0x1cf5/0x4a20 [ 690.126513][ T32] ? do_raw_spin_lock+0x121/0x290 [ 690.126543][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 690.126579][ T32] ? __pfx_hub_event+0x10/0x10 [ 690.126607][ T32] ? rcu_is_watching+0x15/0xb0 [ 690.126630][ T32] ? lock_acquire+0x5f/0x360 [ 690.126666][ T32] ? rcu_is_watching+0x15/0xb0 [ 690.126696][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 690.126719][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 690.126743][ T32] process_scheduled_works+0xade/0x17b0 [ 690.126780][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 690.126811][ T32] worker_thread+0x8a0/0xda0 [ 690.126848][ T32] kthread+0x70e/0x8a0 [ 690.126878][ T32] ? __pfx_worker_thread+0x10/0x10 [ 690.126902][ T32] ? __pfx_kthread+0x10/0x10 [ 690.126930][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 690.126958][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.126990][ T32] ? __pfx_kthread+0x10/0x10 [ 690.127018][ T32] ret_from_fork+0x3f9/0x770 [ 690.127044][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 690.127071][ T32] ? __switch_to_asm+0x39/0x70 [ 690.127101][ T32] ? __switch_to_asm+0x33/0x70 [ 690.127130][ T32] ? __pfx_kthread+0x10/0x10 [ 690.127159][ T32] ret_from_fork_asm+0x1a/0x30 [ 690.127198][ T32] [ 690.127435][ T32] INFO: lockdep is turned off. [ 690.127453][ T32] NMI backtrace for cpu 0 [ 690.127468][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 690.127494][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 690.127508][ T32] Call Trace: [ 690.127517][ T32] [ 690.127526][ T32] dump_stack_lvl+0x189/0x250 [ 690.127554][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.127580][ T32] ? __pfx__printk+0x10/0x10 [ 690.127617][ T32] nmi_cpu_backtrace+0x39e/0x3d0 [ 690.127643][ T32] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 690.127677][ T32] ? __pfx__printk+0x10/0x10 [ 690.127709][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 690.127746][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 690.127774][ T32] watchdog+0xf93/0xfe0 [ 690.127802][ T32] ? watchdog+0x1de/0xfe0 [ 690.127826][ T32] kthread+0x70e/0x8a0 [ 690.127846][ T32] ? __pfx_watchdog+0x10/0x10 [ 690.127867][ T32] ? __pfx_kthread+0x10/0x10 [ 690.127886][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 690.127905][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.127927][ T32] ? __pfx_kthread+0x10/0x10 [ 690.127946][ T32] ret_from_fork+0x3f9/0x770 [ 690.127962][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 690.127980][ T32] ? __switch_to_asm+0x39/0x70 [ 690.128000][ T32] ? __switch_to_asm+0x33/0x70 [ 690.128020][ T32] ? __pfx_kthread+0x10/0x10 [ 690.128039][ T32] ret_from_fork_asm+0x1a/0x30 [ 690.128066][ T32] [ 690.128073][ T32] Sending NMI from CPU 0 to CPUs 1: [ 690.128129][ C1] NMI backtrace for cpu 1 [ 690.128143][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 690.128165][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 690.128177][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 690.128205][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 b7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 690.128221][ C1] RSP: 0018:ffffc900001a7de0 EFLAGS: 000002c2 [ 690.128238][ C1] RAX: 0b4062576be55400 RBX: ffffffff81968308 RCX: 0b4062576be55400 [ 690.128253][ C1] RDX: 0000000000000001 RSI: ffffffff8be336e0 RDI: ffffffff81968308 [ 690.128267][ C1] RBP: ffffc900001a7f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 690.128282][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38330 [ 690.128297][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a5f000 [ 690.128310][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 690.128325][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.128338][ C1] CR2: 0000200000069000 CR3: 00000000682b8000 CR4: 00000000003526f0 [ 690.128355][ C1] Call Trace: [ 690.128362][ C1] [ 690.128369][ C1] default_idle+0x13/0x20 [ 690.128386][ C1] default_idle_call+0x74/0xb0 [ 690.128403][ C1] do_idle+0x1e8/0x510 [ 690.128423][ C1] ? __pfx_do_idle+0x10/0x10 [ 690.128446][ C1] cpu_startup_entry+0x44/0x60 [ 690.128467][ C1] start_secondary+0x101/0x110 [ 690.128497][ C1] common_startup_64+0x13e/0x147 [ 690.128529][ C1] [ 690.130222][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 690.130235][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 690.130255][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 690.130265][ T32] Call Trace: [ 690.130272][ T32] [ 690.130278][ T32] dump_stack_lvl+0x99/0x250 [ 690.130299][ T32] ? __asan_memcpy+0x40/0x70 [ 690.130318][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.130337][ T32] ? __pfx__printk+0x10/0x10 [ 690.130363][ T32] vpanic+0x281/0x750 [ 690.130383][ T32] ? __pfx_vpanic+0x10/0x10 [ 690.130400][ T32] ? preempt_schedule+0xae/0xc0 [ 690.130421][ T32] ? preempt_schedule_common+0x83/0xd0 [ 690.130445][ T32] panic+0xb9/0xc0 [ 690.130462][ T32] ? __pfx_panic+0x10/0x10 [ 690.130480][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 690.130507][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 690.130527][ T32] watchdog+0xfd2/0xfe0 [ 690.130550][ T32] ? watchdog+0x1de/0xfe0 [ 690.130574][ T32] kthread+0x70e/0x8a0 [ 690.130594][ T32] ? __pfx_watchdog+0x10/0x10 [ 690.130615][ T32] ? __pfx_kthread+0x10/0x10 [ 690.130635][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 690.130654][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.130680][ T32] ? __pfx_kthread+0x10/0x10 [ 690.130700][ T32] ret_from_fork+0x3f9/0x770 [ 690.130717][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 690.130735][ T32] ? __switch_to_asm+0x39/0x70 [ 690.130756][ T32] ? __switch_to_asm+0x33/0x70 [ 690.130776][ T32] ? __pfx_kthread+0x10/0x10 [ 690.130796][ T32] ret_from_fork_asm+0x1a/0x30 [ 690.130823][ T32] [ 690.131184][ T32] Kernel Offset: disabled