last executing test programs: 14.102149716s ago: executing program 3 (id=3562): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000000000000000080045000024000000000073907800774d340b96f24aa9000000fe9a90780200000000000001"], 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1, 0x700}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000400)='sockfs\x00', 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 10.941755473s ago: executing program 0 (id=3570): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYRES32=r2], 0x3c}}, 0x0) 10.736596294s ago: executing program 0 (id=3572): socket$kcm(0x29, 0x5, 0x0) r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) 10.533453329s ago: executing program 0 (id=3573): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8000000065e642ec701d88632d2d8b313e6c051cfb838aac974a2a", @ANYRES16=r4, @ANYBLOB="00022abd7000ffdbdf25030000001400020076657468315f6d6163767461700000000900030073797a31000000001400020062726964676530000000000000000000140002007663616e3000000000000000000000000900030073797a31000000000900010073797a3000000000"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x7dd2da2bd1187064) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000004c0)={0x9, 0x10000, 0x1, 'queue1\x00', 0x9}) r7 = socket$inet6(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000000580)}}, 0x10) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x2}, 0x2}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.254799296s ago: executing program 4 (id=3577): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300), &(0x7f0000000340)=0x14) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c98002982901fec0ffff000000000000ffffe0000001fe8000000000000000000000000000aa"], 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x8c) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000280900010073797a300000000080000000090a010400000000000000000700080008000a40000000000900020073797a31000000000900010073797a3000000000080005400000003f3c001280140001800c000100636f756e7465720004000280100001800c000100636f756e74657200140001800c000100636f756e74657200040002800800034000000110140000001000010000000000000000000084000a"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800) 8.915243848s ago: executing program 3 (id=3578): r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000fe5000/0x2000)=nil, 0x2000, 0x4, 0x810, r0, 0x2c697000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x8040, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) read(r3, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/profiling', 0x109882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) execveat(r4, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)={[&(0x7f0000000180)='/dev/qat_adf_ctl\x00', &(0x7f00000001c0)='/dev/snd/midiC#D#\x00', &(0x7f0000000240)='/dev/qat_adf_ctl\x00', &(0x7f0000000280)='%\x00', &(0x7f0000000340)='/dev/qat_adf_ctl\x00', &(0x7f00000003c0)='/dev/sequencer\x00']}, &(0x7f0000000440), 0x1000) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r8 = dup(r7) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x23, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="32f63eb10fb2409e88540396fcff3ae85dfb64144067d4754ab0bf85c0596901a3c5207cd020959840ddab1bf0e8a0b26bf2e80ebf19ff6010b0"], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 7.631223531s ago: executing program 0 (id=3579): syz_emit_ethernet(0x3b6, &(0x7f0000000780)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf8, 0xfffffffc, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000280ff0000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109025f0003010000000904000000010100"], 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x38, @string={0x38, 0x3, "6cbd87551224e3c8275120611eb137edc1efaa4436a252be915e9ccf0428ac904e71039a29ebe9624df68af5025c0b2c4fbe50f429dc"}}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1c, 0xcafe28741a3524c9, 0x70bd29, 0x20000, {0x7, 0x0, 0x0, r2, 0x80, 0x8f, 0xb}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x2, 0x0, 0xfffff03c}, {0x6}]}, 0x10) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x50080001}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x5c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xaf, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x81, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1d}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x21}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28000000}, 0x20004000) 6.697820204s ago: executing program 4 (id=3582): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYRES32=r2], 0x3c}}, 0x0) 6.519335115s ago: executing program 4 (id=3584): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) accept$unix(r3, &(0x7f0000000280), 0x0) clock_gettime(0x0, &(0x7f0000000780)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000", @ANYBLOB="0000000001"], 0x48}}, 0x0) 6.412805958s ago: executing program 0 (id=3585): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r4, 0xae80, 0xee0f00) 6.386925563s ago: executing program 2 (id=3586): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000500)={0x0, r1, r3, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)="280fd46e3beee656fa98fa39be906b355ffb5fdd3d63a1a83a2a336afd59cb787d28ae5ce22fa166655bea81ffdf74eda4cba83add8fc5725d1061ba85cf7831659f10947bce9d06efc68cf2ce7217", 0x8a) pipe(&(0x7f0000000080)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x4, 0x0, 0x820000000, 0x4000000000000004, 0xffffffff, 0x0, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x3, 0x20000, 0x0, 0x0, 0xc000, 0x0, r7, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000240)=@v3={0x3000000, [{0x40, 0xa}, {0xfffff001, 0x2}], r7}, 0x18, 0x2) syz_fuse_handle_req(r5, &(0x7f0000004280)="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", 0x754, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe7d, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x1, 0xfffffffffffffffd, 0x80000000000, 0x80000000004, 0x400000000000, 0x6, 0x0, 0xfffffffd, 0x1, 0x4000, 0x4000000, r7, r8, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r5, 0xffffffff80000302, r7, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@textreal={0x8, 0x0}], 0x1, 0xae, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000380)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x800, 0x300, 0x0, 0x384, 0x1000, 0x0, 0x18, 0x2, {0x4}, {0x3, 0x0, 0xfffffffd}, {0xf4ef}, {0xffffffff, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x9}) 5.84274916s ago: executing program 2 (id=3587): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000340)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0xffffffffffffffbf, 0x0, {0x7, 0x28, 0x80000001, 0x28080820, 0x0, 0x0, 0xffffffff}}, 0x50) ioprio_set$pid(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newnexthop={0x28, 0x68, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x1, 0x0, 0x4}, [@NHA_GROUP={0x4}, @NHA_ID={0x8}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd28, 0x25dfd3fd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0xf}, {0x4, 0x7}}}, 0xffffffffffffffbd}, 0x1, 0x0, 0x0, 0x44}, 0x20008004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) ioprio_get$pid(0x2, 0x0) 5.743463828s ago: executing program 1 (id=3588): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/schedstat\x00', 0x0, 0x0) readv(r0, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000a40)=""/12, 0xc}], 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x5, 0x5, 0x10, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x700, 0x4, 0x5}}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)=0xfffffffb) 5.500651571s ago: executing program 1 (id=3589): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x26e100, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000100)={0x30b}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) getdents64(r2, &(0x7f00000002c0)=""/119, 0x77) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x1000d, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r5, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000380)=0x800) poll(&(0x7f0000000200)=[{r6, 0x25}], 0x1, 0xe8) 5.35926947s ago: executing program 3 (id=3590): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x2008b1d, 0x10100, 0x0, 0x24e}, &(0x7f00000003c0), &(0x7f00000002c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x161, 0x40000867, r5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="eeddbb00"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="929f03deff0003000000030000080000000048e4cd00000000c42b00"], 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000500)=""/31, 0x1f, 0x0, &(0x7f0000000540)=""/49, 0x31}}, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000380)=0x5, 0x4) connect$inet6(r10, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440), 0x1000a) sendfile(r10, 0xffffffffffffffff, &(0x7f0000000180)=0x2, 0x2001001) r11 = openat$incfs(0xffffffffffffffff, &(0x7f0000000900)='.pending_reads\x00', 0x80040, 0xcc) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1e, 0x34, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xd0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x8, 0x2, 0x0, r7}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x48a}}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x83}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x9, 0xac, &(0x7f00000004c0)=""/172, 0x41100, 0x0, '\x00', r3, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x1, 0x4, 0x3ff}, 0x10, r9, 0xffffffffffffffff, 0x5, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, r11, r0], &(0x7f0000000980)=[{0x0, 0x2, 0x7, 0x3}, {0x0, 0x2, 0xa}, {0x4, 0x4, 0x8, 0xc}, {0x5, 0x1, 0xb}, {0x4, 0x5, 0xb, 0x9}], 0x10, 0xfffffffe, @void, @value}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newtfilter={0x330, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x300, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x4, 0xffff}}, @TCA_FLOW_EMATCHES={0x2f4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xba}}, @TCA_EMATCH_TREE_LIST={0xe4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x90, 0x3, 0x0, 0x0, {{0x401, 0x0, 0x5}, "f246f0a506a361aa9641257584c34f94b56a86de0c5a8b43891f8a8afb2b9293336a36e63c23d1acd015085de596c577403c242d3784bf3dd1bcc8bd52759926f3ec09670d677372ff4eedcdb89d2d7a8115d5ff39f9dabd395d3be70287a0187a3714ee623e4fb05c11ec3c84c21551ec758c0c1861f9b6fd41fe34121ea8e7b2"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x9}, {0x200, 0x6, 0x1, "bdc0af4ae9c8"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x7}, {0x6, 0x3716, 0x2, 0x10000}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xa, 0x3, 0x1}, {0xffffffff, 0xfffffc00, 0x0, 0xfffffff8}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1d0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xd4, 0x1, 0x0, 0x0, {{0x67a, 0x0, 0x7}, "799bd569e94731918e8ce77f81d22c6ee110516f7edb6c42f0e3a6885dc69585c3ddd38dca601fc8b7235481dd2e995bcd8abb997ac0174a84a2e877ab4fc1d0c11636bce4a362023f2137ca2dd8fced42be447bfac9eed0e501988343740d8c9142a338eb21826766a52f3d9b4d476ff422e9b505e6e6713eb83ed5ea870107b555ca37ef1de831d59c00c13ebbc8f244faf5b59653447897527d6406f74c2376bb17561d16ffd0b64483bb85b994a5fc31938c9912650ececcf7b334844c693d0876d321261580"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x5}, {0x8, 0x7, 0x0, "c0b620f4301723"}}}, @TCF_EM_CONTAINER={0xe0, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x9}, "802b16c8ccdaa51f3d4d0116efe3e22c269056165c900f2a0f2566d0f33165cd6512be7941fdd1a444232cd1762a504b5266b95d2af8e287c4da80420e7ee90f7682d162af4203eed8e05b4b11614e78d7cd38265e5a9cdaa911f5a0a3da41720a2af413391c438146ca544f9518d212146e70ceb396b00e4c965dc1da86e28067fb463df238afa7c15e429d5851d708982045c4ff3e10ef18dade807eb8cae83fba05a36adf5dbdf58e21abce35ff05c8eca1955f09978bdba1065ce7b6cf9c10edd380fa238e234cd8bfdb4d201775e4d530"}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x3ff}, {0x7f, 0x5, 0x3, 0x2, 0x5, 0x2, 0x1}}}]}]}]}}]}, 0x330}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 5.302782288s ago: executing program 2 (id=3591): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r0, 0x0, 0x0, 0x8, 0x0) renameat(r0, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008050) sendmsg$NFT_BATCH(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], 0x64}, 0x1, 0x0, 0x0, 0x300480c1}, 0x0) read$hiddev(r2, &(0x7f00000010c0)=""/229, 0xe5) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000001c0)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x10201, 0x3, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) futex(&(0x7f0000000000), 0x1, 0x1, 0x0, 0x0, 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fdffffffac1e03010000000000000000000000000a0101020000000000000000000000000000000000000009000000203c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e000000000000007f9050f64b000000000000000000000000000000000000000100010000000000ffffffffffffffff00004000"/112], 0xb8}, 0x1, 0x0, 0x0, 0x20880}, 0x0) 5.178832415s ago: executing program 2 (id=3592): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x3d18cb791311977c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0xffffffffffffffe0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x682}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480d4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x233}, 0x1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020601080000000000000000020000000c00078008001240002400000500010006000000050005000a00000005000400000000000c"], 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) accept$alg(r5, 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xc6943) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r9, 0xc00464c9, &(0x7f0000000140)={r10}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f0000000800)={r10}) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) 4.22404135s ago: executing program 4 (id=3593): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300), &(0x7f0000000340)=0x14) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c98002982901fec0ffff000000000000ffffe0000001fe8000000000000000000000000000aa"], 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x8c) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000280900010073797a300000000080000000090a010400000000000000000700080008000a40000000000900020073797a31000000000900010073797a3000000000080005400000003f3c001280140001800c000100636f756e7465720004000280100001800c000100636f756e74657200140001800c000100636f756e74657200040002800800034000000110140000001000010000000000000000000084000a"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800) 4.060032717s ago: executing program 3 (id=3594): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r2], 0x3c}}, 0x0) 3.994620299s ago: executing program 3 (id=3595): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) close(0x3) r3 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x3, &(0x7f0000000000)='source', &(0x7f00000001c0)='[\x8b\xa4[\x13\x9b\x04\x00#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x95\xba\x9d\x01O\xc8\t\xd2\xceZ\x8a\x7f\xbc\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3b2m\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) 2.937228266s ago: executing program 4 (id=3596): socket$kcm(0x29, 0x5, 0x0) r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) 2.704009057s ago: executing program 1 (id=3597): r0 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000000380)={0x0, [[0x1fe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5000000, 0x9], [0xffe, 0x1, 0x3, 0x0, 0x0, 0x80, 0x0, 0xfffffff9], [0x2, 0x0, 0x30f, 0xaa83, 0x2]], '\x00', [{0x9, 0x5}, {0x0, 0xa}, {0x0, 0x1efb660a}, {}, {0x61e}, {0xfffffff9}, {}, {0xbffffffd, 0x9}, {0x8, 0x20000000}, {}, {}, {0x0, 0x3}], '\x00', 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}) 2.622574381s ago: executing program 0 (id=3598): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x10000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.550825512s ago: executing program 4 (id=3599): r0 = socket$inet_smc(0x2b, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x4, 0x1, 0x3, 0x0, 0xef}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000200)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000001c0)=0xd) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009040000000202010004"], 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000100)=@IORING_OP_MKDIRAT={0x25, 0x18, 0x0, r1, 0x0, &(0x7f0000000080)='./file0\x00', 0x4, 0x0, 0x1, {0x0, r9}}) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x1c, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_OBJ_TYPE={0xfffffe46, 0x3, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4040808) fcntl$notify(r4, 0x402, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x0, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @private=0xa010100, 0xffffffff, 0xff000000, 'bond_slave_1\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x84, 0x3, 0x19}, 0x0, 0x2d0, 0x2f0, 0x0, {0x200003ae, 0x7f00}, [@common=@addrtype={{0x30}, {0x180, 0x800, 0x1}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0\x00', {0xff}, {}, 0x29}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xc5}, {0x3}], 0x0, 0x2}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x6, 0x40, 'pptp\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) 2.501162556s ago: executing program 1 (id=3600): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xd3af7d65d19b2c75, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecffffff9402000000000000400000000000f2ffffff000000000000000000002c8f380001"], 0x78) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x30d, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8}, @val={0xc, 0x99, {0x5, 0x32}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24004904}, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x24d40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000064d564b"]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c0000006800010003001000fdffff7f000000000000000024000200010000000100000000000000cd00000002000000c70000000200000008000000c63af8b9e3e2fa1d6ceeba2c28f8f3e18dca658c34cb6725c0cc93152088c944693d2c985a63d8c42fe4de646afd27e717c8c38a23386197eeba569fc236fa3b98c3892a7f897135872e454bd7c6467f5d390bebbe"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080) syz_open_dev$sndmidi(&(0x7f0000000000), 0xf, 0x200084) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4048aecb, &(0x7f0000000080)=ANY=[]) 2.466606241s ago: executing program 3 (id=3601): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001b80)="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", 0x1000}, {&(0x7f00000010c0)="4b561ee26e1ff16618c49f8a0155c8cbc14b821a1110d2", 0x17}, {&(0x7f0000001100)="bc9341b9f8ea2fa79d9ba29a048a0faaa520d20326a2a4954b967f7b56baaedc9fe5653d6c9adeda3825bbbe0273fca141fc2018e1b4a8bd1c437c7f869976f145b8c1fbdba7f5d643b0687c59654353cf39c960360386344a75bc436cc3b4294bd69ba03b39bf59a1eea02013f05204e6bec26831fe172cab531fc632f7f9c235", 0x81}, {&(0x7f00000011c0)="5f02eac11a1585981a2e5fa6ed9becfe91325c6692f72c14da23804864107706f18961b9032ad2d7ee589c5f55aca0ab51b15094be0d47b459cbf718287daca101adbf1feee5b5625fd45fa6139075004567ebbbc71883a16db68efa340a96d4ab25b8c40be6ea2c46da9e2b35a53454ec212d759f4622", 0x77}, {&(0x7f0000001240)="d7301b1e", 0x4}, {&(0x7f0000001280)="1337c070ecef5a", 0x7}, {&(0x7f00000012c0)="79c23b68e7339a841c47c628574ee9aae21fa9c7b1cf71e406e8d47e22c6acd928a67ad450a9b6dc010d5737fdadfb70a774f043d8ef9cc54933a14b7de7fe2a67a6523c17930998a4b9b0661144aafacc1841d014d27b1895d1f2e9918e11d19201a9234e0f975e27377e1af5d714b6efaa224a926121d058c8f106edae22", 0x7f}, {&(0x7f0000001340)="d68bd8fcd2f9d41bd55f76744cd7b142b39b975699a9344ee889cc3582fea863b87b2f3db6c4ae3668ff0f81480ab236b67a9e60f149ba9cbd51ce8b476999a98538c7a5a158c2f6f6c794fcb039dccf745f15918b916e9d2fdae09ef5395fa44b1087db1ba6ff257d788f78abe8018b3204934f0e746884524b1350fb122e09655f630d17dcba91c366fcbca1b07396209f6ebe74462fd9915ab3db8cf224ae5878fdd8ead934f190ea13a5f82d26baa8b37a68f50cfbe47b772863c6c00f317546", 0xc2}], 0x8}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.463367444s ago: executing program 2 (id=3602): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r0, 0x0, 0x0, 0x8, 0x0) renameat(r0, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008050) sendmsg$NFT_BATCH(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], 0x64}, 0x1, 0x0, 0x0, 0x300480c1}, 0x0) read$hiddev(r2, &(0x7f00000010c0)=""/229, 0xe5) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000001c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) futex(&(0x7f0000000000), 0x1, 0x1, 0x0, 0x0, 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fdffffffac1e03010000000000000000000000000a0101020000000000000000000000000000000000000009000000203c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e000000000000007f9050f64b000000000000000000000000000000000000000100010000000000ffffffffffffffff00004000"/112], 0xb8}, 0x1, 0x0, 0x0, 0x20880}, 0x0) 2.162688071s ago: executing program 1 (id=3603): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) accept$unix(r3, &(0x7f0000000280), 0x0) clock_gettime(0x0, &(0x7f0000000780)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000", @ANYBLOB="0000000001"], 0x48}}, 0x0) 1.953418295s ago: executing program 2 (id=3604): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008000800000000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d61630007784688e4bef232bac4fd16bc642c40c98e36f221cb6c2e5401a4127616867dcfaab25ab6fccf4f02aaab1968c7f541b8e2bb10fd34beb4df04e5074ed3dc659f61f2"], 0x54}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_open_dev$evdev(0x0, 0x2, 0x101000) uname(&(0x7f0000000000)=""/214) timer_create(0x3, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x0, &(0x7f0000000340)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xa2, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029000000001020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000050054b57f1cd27cba"], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, 0x0}]) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000140)={0x54, 0x1, 0x401, {0x7, 0x7fff}, {0x7, 0x9}, @rumble={0x1, 0xf05}}) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, 0x0) 0s ago: executing program 1 (id=3606): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) rt_sigaction(0x20, 0x0, &(0x7f0000000380)={&(0x7f0000000280)="f20f34c4e1f82b710026f3440faedac4e27d1d318f491891c6c4617167302e3e660fe6a30e000000f04383720406426e420f01da", 0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a010100", @ANYRES32, @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x28500) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r10, 0xc0845658, &(0x7f0000000240)={0x0, @bt={0xfffffffd, 0x514, 0x1, 0x1, 0x1, 0x8, 0x6, 0x10001, 0x2, 0x5, 0x3, 0xfffffff7, 0xfffffff7, 0x10, 0x2, 0x0, {0x6, 0x7}, 0x5, 0xd5}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) kernel console output (not intermixed with test programs): cted [ 1113.657739][ T43] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1113.696446][ T30] audit: type=1326 audit(1749073970.758:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f302d98e929 code=0x7ffc0000 [ 1113.700258][ T43] usb 4-1: device descriptor read/8, error -71 [ 1113.718964][ C0] vkms_vblank_simulate: vblank timer overrun [ 1113.733606][ T30] audit: type=1326 audit(1749073970.758:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302d98e929 code=0x7ffc0000 [ 1113.756059][ C0] vkms_vblank_simulate: vblank timer overrun [ 1113.763072][ T30] audit: type=1326 audit(1749073970.758:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f302d98e929 code=0x7ffc0000 [ 1113.785422][ C0] vkms_vblank_simulate: vblank timer overrun [ 1113.795768][ T30] audit: type=1326 audit(1749073970.758:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302d98e929 code=0x7ffc0000 [ 1113.818253][ C0] vkms_vblank_simulate: vblank timer overrun [ 1113.880713][T10011] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1113.907976][T10011] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1113.925372][ T30] audit: type=1326 audit(1749073970.758:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f302d98e929 code=0x7ffc0000 [ 1114.009676][ T43] usb usb4-port1: unable to enumerate USB device [ 1114.036477][ T30] audit: type=1326 audit(1749073971.408:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302d98e929 code=0x7ffc0000 [ 1114.129658][ T30] audit: type=1326 audit(1749073971.408:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302d98e929 code=0x7ffc0000 [ 1114.152184][ C0] vkms_vblank_simulate: vblank timer overrun [ 1114.214301][ T1213] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1114.248341][ T43] usb 5-1: USB disconnect, device number 51 [ 1114.261852][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1114.370762][ T43] cp210x 5-1:0.0: device disconnected [ 1114.510896][ T1213] usb 3-1: Using ep0 maxpacket: 8 [ 1114.529593][ T1213] usb 3-1: no configurations [ 1114.536047][ T1213] usb 3-1: can't read configurations, error -22 [ 1114.709315][ T1213] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1114.750476][T11042] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1114.889729][ T1213] usb 3-1: Using ep0 maxpacket: 8 [ 1114.903689][ T1213] usb 3-1: no configurations [ 1114.908596][ T1213] usb 3-1: can't read configurations, error -22 [ 1114.919335][ T1213] usb usb3-port1: attempt power cycle [ 1114.922514][T11042] usb 4-1: Using ep0 maxpacket: 16 [ 1114.937940][T11042] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1114.959919][T11042] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1114.975574][T11042] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1114.985992][T11042] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1115.006343][T11042] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1115.021238][T11042] usb 4-1: config 0 has no interface number 0 [ 1115.027564][T11042] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1115.240193][T11042] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1115.253969][T11042] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1115.274099][T11042] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1115.291629][ T1213] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1115.313761][T11042] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1115.318861][T18706] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1115.342479][T11042] usb 4-1: config 0 interface 125 has no altsetting 2 [ 1115.371896][ T1213] usb 3-1: Using ep0 maxpacket: 8 [ 1115.384743][ T1213] usb 3-1: no configurations [ 1115.627752][ T1213] usb 3-1: can't read configurations, error -22 [ 1115.670694][T11042] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1115.680562][T11042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.767859][T11042] usb 4-1: Product: syz [ 1115.780030][T11042] usb 4-1: Manufacturer: syz [ 1115.784704][T11042] usb 4-1: SerialNumber: syz [ 1115.798186][T11042] usb 4-1: config 0 descriptor?? [ 1115.812803][T11042] usb 4-1: selecting invalid altsetting 2 [ 1115.854171][T18709] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1115.861960][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.868392][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.968138][ T1213] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1116.009530][ T1213] usb 3-1: Using ep0 maxpacket: 8 [ 1116.021594][ T1213] usb 3-1: no configurations [ 1116.026338][ T1213] usb 3-1: can't read configurations, error -22 [ 1116.039687][ T1213] usb usb3-port1: unable to enumerate USB device [ 1116.840356][ T1213] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1116.867798][T10011] usb 4-1: USB disconnect, device number 57 [ 1116.982786][ T1213] usb 2-1: device descriptor read/64, error -71 [ 1117.233982][T18721] FAULT_INJECTION: forcing a failure. [ 1117.233982][T18721] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.247461][ T1213] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1117.257999][T18721] CPU: 0 UID: 0 PID: 18721 Comm: syz.0.3313 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1117.258028][T18721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1117.258043][T18721] Call Trace: [ 1117.258052][T18721] [ 1117.258061][T18721] dump_stack_lvl+0x189/0x250 [ 1117.258105][T18721] ? __pfx____ratelimit+0x10/0x10 [ 1117.258137][T18721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1117.258171][T18721] ? __pfx__printk+0x10/0x10 [ 1117.258197][T18721] ? __pfx___might_resched+0x10/0x10 [ 1117.258218][T18721] ? fs_reclaim_acquire+0x7d/0x100 [ 1117.258250][T18721] should_fail_ex+0x414/0x560 [ 1117.258287][T18721] should_failslab+0xa8/0x100 [ 1117.258314][T18721] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1117.258336][T18721] ? fsnotify_add_mark_locked+0x50d/0xd40 [ 1117.258367][T18721] fsnotify_add_mark_locked+0x50d/0xd40 [ 1117.258404][T18721] fanotify_add_mark+0x78f/0x12b0 [ 1117.258448][T18721] ? security_capable+0x7e/0x2e0 [ 1117.258487][T18721] do_fanotify_mark+0xe3f/0xf80 [ 1117.258534][T18721] ? __pfx_do_fanotify_mark+0x10/0x10 [ 1117.258575][T18721] ? ksys_write+0x22a/0x250 [ 1117.258593][T18721] ? __pfx_ksys_write+0x10/0x10 [ 1117.258605][T18721] ? rcu_is_watching+0x15/0xb0 [ 1117.258624][T18721] __x64_sys_fanotify_mark+0xb5/0xd0 [ 1117.258649][T18721] do_syscall_64+0xfa/0x3b0 [ 1117.258672][T18721] ? lockdep_hardirqs_on+0x9c/0x150 [ 1117.258694][T18721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.258709][T18721] ? clear_bhb_loop+0x60/0xb0 [ 1117.258727][T18721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.258742][T18721] RIP: 0033:0x7f30e878e929 [ 1117.258757][T18721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.258771][T18721] RSP: 002b:00007f30e9533038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 1117.258788][T18721] RAX: ffffffffffffffda RBX: 00007f30e89b5fa0 RCX: 00007f30e878e929 [ 1117.258802][T18721] RDX: 0000000040000867 RSI: 0000000000000161 RDI: 0000000000000003 [ 1117.258812][T18721] RBP: 00007f30e9533090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.258822][T18721] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1117.258831][T18721] R13: 0000000000000000 R14: 00007f30e89b5fa0 R15: 00007f30e8adfa28 [ 1117.258854][T18721] [ 1117.485114][ C0] vkms_vblank_simulate: vblank timer overrun [ 1117.600070][T18724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.609099][T18724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.629429][ T1213] usb 2-1: device descriptor read/64, error -71 [ 1117.741224][ T1213] usb usb2-port1: attempt power cycle [ 1118.112976][ T1213] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1118.192879][ T1213] usb 2-1: device descriptor read/8, error -71 [ 1118.309118][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3314'. [ 1118.349547][T18734] netlink: 'syz.3.3314': attribute type 5 has an invalid length. [ 1118.379920][T18734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3314'. [ 1118.459323][ T1213] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1118.521208][ T1213] usb 2-1: device descriptor read/8, error -71 [ 1118.589469][ T30] audit: type=1326 audit(1749073976.338:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18740 comm="syz.0.3320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30e878e929 code=0x0 [ 1118.640861][T18743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.649706][T18743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.663654][ T1213] usb usb2-port1: unable to enumerate USB device [ 1119.135766][T18753] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1119.782999][T18757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1119.970472][ T1213] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1120.151266][ T1213] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1120.167302][ T1213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.204494][ T1213] usb 4-1: config 0 descriptor?? [ 1120.232156][ T1213] cp210x 4-1:0.0: cp210x converter detected [ 1120.249759][ T5842] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1120.429543][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 1120.451158][ T5842] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1120.466369][ T5842] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1120.486063][ T5842] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1120.506718][ T5842] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1120.515458][ T5842] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1120.524887][ T5842] usb 2-1: config 0 has no interface number 0 [ 1120.532782][ T5842] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1120.547402][ T5842] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1120.560670][ T5842] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1120.573224][ T5842] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1120.589451][ T5842] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1120.596345][ T5842] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1120.607629][ T5842] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1120.617662][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.628027][ T5842] usb 2-1: Product: syz [ 1120.632858][ T5842] usb 2-1: Manufacturer: syz [ 1120.638157][ T5842] usb 2-1: SerialNumber: syz [ 1120.644633][ T1213] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1120.666380][ T5842] usb 2-1: config 0 descriptor?? [ 1120.677748][ T1213] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1120.702961][ T5842] usb 2-1: selecting invalid altsetting 2 [ 1120.720213][T10011] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1120.882221][T11042] usb 4-1: USB disconnect, device number 58 [ 1120.890589][T10011] usb 5-1: Using ep0 maxpacket: 8 [ 1120.897234][T11042] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1120.913252][T10011] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1120.928424][T10011] usb 5-1: config 0 has no interface number 0 [ 1120.936339][T10011] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1120.949896][T11042] cp210x 4-1:0.0: device disconnected [ 1120.970668][T10011] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1120.993895][T10011] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1121.015213][T10011] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1121.030818][T10011] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1121.044790][T10011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.061872][T10011] usb 5-1: config 0 descriptor?? [ 1121.078809][T10011] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1121.296974][T11042] usb 5-1: USB disconnect, device number 52 [ 1121.315788][T11042] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1121.787552][ T5842] usb 2-1: USB disconnect, device number 61 [ 1121.932768][T11042] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1121.974894][T18770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.056012][T18770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.183733][T11042] usb 4-1: config 0 has no interfaces? [ 1122.211762][T11042] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1122.223460][T11042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.363054][T11042] usb 4-1: Product: syz [ 1122.367399][T11042] usb 4-1: Manufacturer: syz [ 1122.372654][T11042] usb 4-1: SerialNumber: syz [ 1122.407371][T11042] usb 4-1: config 0 descriptor?? [ 1122.599658][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1122.954698][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1122.984668][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1123.037167][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.171010][ T10] usb 5-1: Product: syz [ 1123.257576][ T10] usb 5-1: Manufacturer: syz [ 1123.268580][ T10] usb 5-1: SerialNumber: syz [ 1123.633161][ T10] usb 5-1: config 0 descriptor?? [ 1123.820197][ T10] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1124.148288][T11042] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1124.466887][T11042] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.492789][T11042] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1124.545008][T11042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.596680][T11042] usb 3-1: config 0 descriptor?? [ 1124.627320][T11042] pwc: Askey VC010 type 2 USB webcam detected. [ 1124.763887][T10011] usb 4-1: USB disconnect, device number 59 [ 1125.033596][T11042] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1125.054776][T11042] pwc: recv_control_msg error -32 req 02 val 2700 [ 1125.109757][T11042] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1125.150215][T11042] pwc: recv_control_msg error -71 req 04 val 1000 [ 1125.184616][T11042] pwc: recv_control_msg error -71 req 04 val 1300 [ 1125.209339][T11042] pwc: recv_control_msg error -71 req 04 val 1400 [ 1125.218765][ T10] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 1125.240621][T11042] pwc: recv_control_msg error -71 req 02 val 2000 [ 1125.260110][T11042] pwc: recv_control_msg error -71 req 02 val 2100 [ 1125.277694][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1125.299334][T11042] pwc: recv_control_msg error -71 req 04 val 1500 [ 1125.314619][T11042] pwc: recv_control_msg error -71 req 02 val 2500 [ 1125.369476][ T1213] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 1125.384628][T11042] pwc: recv_control_msg error -71 req 02 val 2400 [ 1125.412697][T11042] pwc: recv_control_msg error -71 req 02 val 2600 [ 1125.420869][ T43] usb 5-1: USB disconnect, device number 53 [ 1125.446113][T11042] pwc: recv_control_msg error -71 req 02 val 2900 [ 1125.476490][T11042] pwc: recv_control_msg error -71 req 02 val 2800 [ 1125.496327][T11042] pwc: recv_control_msg error -71 req 04 val 1100 [ 1125.513572][T11042] pwc: recv_control_msg error -71 req 04 val 1200 [ 1125.535505][T18807] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3341'. [ 1125.545541][T11042] pwc: Registered as video103. [ 1125.561527][ T1213] usb 4-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1125.569898][T11042] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input136 [ 1125.612928][ T1213] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1125.661543][ T1213] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1125.689016][T11042] usb 3-1: USB disconnect, device number 50 [ 1125.697412][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.719327][T18811] fuse: Bad value for 'fd' [ 1125.741516][ T1213] usb 4-1: Product: syz [ 1125.745752][ T1213] usb 4-1: Manufacturer: syz [ 1125.761885][T18811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.771745][ T1213] usb 4-1: SerialNumber: syz [ 1125.800014][T18811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.812587][ T1213] usb 4-1: config 0 descriptor?? [ 1126.642940][T18822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3345'. [ 1126.777948][ T1213] usb 4-1: USB disconnect, device number 60 [ 1127.165435][T18829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3344'. [ 1127.174639][T18829] netlink: 'syz.1.3344': attribute type 5 has an invalid length. [ 1127.205663][T18829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3344'. [ 1127.527981][T18835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3349'. [ 1127.700005][T18841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1127.711044][T18841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3348'. [ 1128.328757][T18807] syz.4.3341 (18807): drop_caches: 2 [ 1128.393407][T18846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.448937][T18846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.835654][ T5842] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1128.874081][T18857] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1129.558050][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.675611][ T5842] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1129.762488][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.798185][ T5842] usb 3-1: config 0 descriptor?? [ 1129.807149][ T5842] pwc: Askey VC010 type 2 USB webcam detected. [ 1130.163115][T18862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.183581][T18862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.213520][ T5842] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1130.222367][ T5842] pwc: recv_control_msg error -32 req 02 val 2700 [ 1130.237906][T18859] fuse: Bad value for 'fd' [ 1130.255859][ T5842] pwc: recv_control_msg error -71 req 04 val 1000 [ 1130.262825][T18859] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1130.270915][ T5842] pwc: recv_control_msg error -71 req 04 val 1300 [ 1130.274619][T18859] [U] J"—e:ÀÆ" [ 1130.282213][ T5842] pwc: recv_control_msg error -71 req 04 val 1400 [ 1130.289419][ T5842] pwc: recv_control_msg error -71 req 02 val 2000 [ 1130.296429][ T5842] pwc: recv_control_msg error -71 req 02 val 2100 [ 1130.304937][ T5842] pwc: recv_control_msg error -71 req 04 val 1500 [ 1130.312094][ T5842] pwc: recv_control_msg error -71 req 02 val 2500 [ 1130.319061][ T5842] pwc: recv_control_msg error -71 req 02 val 2400 [ 1130.327214][ T5842] pwc: recv_control_msg error -71 req 02 val 2600 [ 1130.335400][ T5842] pwc: recv_control_msg error -71 req 02 val 2900 [ 1130.343776][ T5842] pwc: recv_control_msg error -71 req 02 val 2800 [ 1130.352121][ T5842] pwc: recv_control_msg error -71 req 04 val 1100 [ 1130.359119][ T5842] pwc: recv_control_msg error -71 req 04 val 1200 [ 1130.403196][ T1213] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1130.412209][ T5842] pwc: Registered as video103. [ 1130.430851][ T5842] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input137 [ 1130.484562][T11042] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1130.515054][ T5842] usb 3-1: USB disconnect, device number 51 [ 1130.571488][T18871] tipc: Enabling of bearer rejected, already enabled [ 1130.585022][ T1213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.603352][ T1213] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1130.638294][ T1213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.653830][ T1213] usb 4-1: config 0 descriptor?? [ 1130.668083][ T1213] pwc: Askey VC010 type 2 USB webcam detected. [ 1130.671446][T11042] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1130.693452][T11042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.717127][T11042] usb 2-1: config 0 descriptor?? [ 1130.994489][T11042] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1131.237338][ T1213] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1131.262072][ T1213] pwc: recv_control_msg error -32 req 02 val 2700 [ 1131.313735][T18861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.325666][ T1213] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1131.407638][T18861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.513050][ T5842] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1131.567567][ T1213] pwc: recv_control_msg error -32 req 04 val 1000 [ 1131.585339][ T1213] pwc: recv_control_msg error -32 req 04 val 1300 [ 1131.606193][ T1213] pwc: recv_control_msg error -32 req 04 val 1400 [ 1131.638197][ T1213] pwc: recv_control_msg error -32 req 02 val 2000 [ 1131.645334][T11042] [drm:udl_init] *ERROR* Selecting channel failed [ 1131.658435][ T1213] pwc: recv_control_msg error -32 req 02 val 2100 [ 1131.728066][ T5842] usb 3-1: config 0 has no interfaces? [ 1131.737070][ T5842] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1131.750981][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.797066][ T5842] usb 3-1: Product: syz [ 1131.810410][ T5842] usb 3-1: Manufacturer: syz [ 1131.831790][ T5842] usb 3-1: SerialNumber: syz [ 1131.988153][ T1213] pwc: recv_control_msg error -71 req 02 val 2500 [ 1132.008790][ T1213] pwc: recv_control_msg error -71 req 02 val 2400 [ 1132.019323][ T1213] pwc: recv_control_msg error -71 req 02 val 2600 [ 1132.033682][ T5842] usb 3-1: config 0 descriptor?? [ 1132.064225][ T1213] pwc: recv_control_msg error -71 req 02 val 2900 [ 1132.090263][ T1213] pwc: recv_control_msg error -71 req 02 val 2800 [ 1132.099416][T11042] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1132.107192][ T1213] pwc: recv_control_msg error -71 req 04 val 1100 [ 1132.138734][T11042] [drm] Initialized udl on minor 2 [ 1132.144120][ T1213] pwc: recv_control_msg error -71 req 04 val 1200 [ 1132.173126][T11042] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1132.184086][ T1213] pwc: Registered as video103. [ 1132.265673][T11042] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1132.279088][ T1213] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input138 [ 1132.313490][T15740] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1132.338404][T11042] usb 2-1: USB disconnect, device number 62 [ 1132.365525][T15740] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1132.412264][ T1213] usb 4-1: USB disconnect, device number 61 [ 1132.501535][ T30] audit: type=1800 audit(1749073990.228:4641): pid=18881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3360" name="file0" dev="tmpfs" ino=3677 res=0 errno=0 [ 1132.522451][ C0] vkms_vblank_simulate: vblank timer overrun [ 1133.039278][T11042] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1133.230800][T11042] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1133.250443][T11042] usb 2-1: config 1 has no interface number 0 [ 1133.263792][T11042] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.280620][T15740] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1133.298590][T11042] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1133.327179][T11042] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1133.353438][T11042] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1133.369757][T11042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.379616][T11042] usb 2-1: Product: syz [ 1133.384233][T11042] usb 2-1: Manufacturer: syz [ 1133.389779][T11042] usb 2-1: SerialNumber: syz [ 1133.457730][T15740] usb 4-1: Using ep0 maxpacket: 16 [ 1133.474542][T15740] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1133.485192][T15740] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1133.502313][T15740] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1133.513231][T15740] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1133.522954][T15740] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1133.532648][T15740] usb 4-1: config 0 has no interface number 0 [ 1133.541073][T15740] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1133.552784][T15740] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1133.572956][T15740] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1133.590340][T18896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1133.624464][T15740] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1133.638680][T15740] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1133.646340][T15740] usb 4-1: config 0 interface 125 has no altsetting 2 [ 1133.658302][T15740] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1133.668020][T15740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.690621][T10011] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1133.706792][T15740] usb 4-1: Product: syz [ 1133.714216][T15740] usb 4-1: Manufacturer: syz [ 1133.719785][T15740] usb 4-1: SerialNumber: syz [ 1133.730647][T15740] usb 4-1: config 0 descriptor?? [ 1133.743637][T15740] usb 4-1: selecting invalid altsetting 2 [ 1133.879467][T10011] usb 5-1: Using ep0 maxpacket: 32 [ 1133.902324][T10011] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1133.936450][T10011] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1133.955842][T10011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.977487][T10011] usb 5-1: Product: syz [ 1133.995413][T10011] usb 5-1: Manufacturer: syz [ 1134.005613][T10011] usb 5-1: SerialNumber: syz [ 1134.033680][T10011] usb 5-1: config 0 descriptor?? [ 1134.247553][T11042] cdc_ncm 2-1:1.1: bind() failure [ 1134.282260][ T1213] usb 3-1: USB disconnect, device number 52 [ 1134.460688][T18888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.476086][T10011] gs_usb 5-1:0.0: Couldn't get device config: (err=-32) [ 1134.497366][T10011] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 1134.515060][T18902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3367'. [ 1134.524804][T18902] netlink: 'syz.0.3367': attribute type 5 has an invalid length. [ 1134.533184][T18888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.549946][T18902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3367'. [ 1134.588406][ T1213] usb 2-1: USB disconnect, device number 63 [ 1134.763772][T11042] usb 4-1: USB disconnect, device number 62 [ 1135.550424][T11042] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1135.619289][ T1213] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1135.712385][T11042] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.727632][T11042] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1135.744455][T11042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.799025][T18922] tipc: Enabling of bearer rejected, already enabled [ 1135.831901][T11042] usb 4-1: config 0 descriptor?? [ 1135.840067][ T1213] usb 2-1: Using ep0 maxpacket: 16 [ 1135.848105][ T1213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.859832][ T1213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.886566][ T1213] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1135.898234][T11042] pwc: Askey VC010 type 2 USB webcam detected. [ 1135.905000][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.926803][ T1213] usb 2-1: config 0 descriptor?? [ 1136.276210][T11042] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1136.283743][T11042] pwc: recv_control_msg error -32 req 02 val 2700 [ 1136.292484][T18915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.301293][T11042] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1136.310051][T18915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.323423][T11042] pwc: recv_control_msg error -32 req 04 val 1000 [ 1136.331048][T11042] pwc: recv_control_msg error -32 req 04 val 1300 [ 1136.346814][T11042] pwc: recv_control_msg error -32 req 04 val 1400 [ 1136.380116][T11042] pwc: recv_control_msg error -32 req 02 val 2000 [ 1136.484716][T11042] pwc: recv_control_msg error -32 req 02 val 2100 [ 1136.517821][T15740] usb 5-1: USB disconnect, device number 54 [ 1136.561950][T18917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.629752][T18917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.763396][T11042] pwc: recv_control_msg error -71 req 02 val 2500 [ 1136.800787][T11042] pwc: recv_control_msg error -71 req 02 val 2400 [ 1136.888788][T11042] pwc: recv_control_msg error -71 req 02 val 2600 [ 1136.907960][ T1213] letsketch 0003:6161:4D15.001C: Device info: ဉ [ 1136.917160][T11042] pwc: recv_control_msg error -71 req 02 val 2900 [ 1136.937654][T11042] pwc: recv_control_msg error -71 req 02 val 2800 [ 1137.050014][T11042] pwc: recv_control_msg error -71 req 04 val 1100 [ 1137.107292][T11042] pwc: recv_control_msg error -71 req 04 val 1200 [ 1137.120422][ T1213] letsketch 0003:6161:4D15.001C: Device info: 豧 [ 1137.137873][T11042] pwc: Registered as video103. [ 1137.199010][T11042] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input140 [ 1137.306334][T11042] usb 4-1: USB disconnect, device number 63 [ 1137.366034][ T1213] usb 2-1: Max retries (5) exceeded reading string descriptor 202 [ 1137.369406][T15740] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1137.407183][ T1213] letsketch 0003:6161:4D15.001C: probe with driver letsketch failed with error -71 [ 1137.519780][ T1213] usb 2-1: USB disconnect, device number 64 [ 1137.553726][T15740] usb 5-1: Using ep0 maxpacket: 8 [ 1137.564954][T15740] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1137.587115][T15740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.618485][T15740] usb 5-1: Product: syz [ 1137.660935][T15740] usb 5-1: Manufacturer: syz [ 1137.691496][T15740] usb 5-1: SerialNumber: syz [ 1137.709594][T18943] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3380'. [ 1137.727255][T18943] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1137.740674][T15740] usb 5-1: config 0 descriptor?? [ 1137.962679][T15740] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1138.395162][T18957] input: syz1 as /devices/virtual/input/input141 [ 1139.407161][T18968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.435250][T18968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.701450][T15740] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1139.943800][T18978] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1140.489700][ T5842] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1140.899278][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 1140.913019][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.923496][ T5842] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1140.941243][ T5842] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1140.951042][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.104339][ T5842] usb 3-1: Product: syz [ 1141.118240][ T5842] usb 3-1: Manufacturer: syz [ 1141.128723][ T10] usb 5-1: USB disconnect, device number 55 [ 1141.144904][ T5842] usb 3-1: SerialNumber: syz [ 1141.153065][ T5842] usb 3-1: config 0 descriptor?? [ 1141.916178][T18992] FAULT_INJECTION: forcing a failure. [ 1141.916178][T18992] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.937251][T18992] CPU: 0 UID: 0 PID: 18992 Comm: syz.1.3394 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1141.937276][T18992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1141.937286][T18992] Call Trace: [ 1141.937293][T18992] [ 1141.937300][T18992] dump_stack_lvl+0x189/0x250 [ 1141.937329][T18992] ? __pfx____ratelimit+0x10/0x10 [ 1141.937352][T18992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1141.937377][T18992] ? __pfx__printk+0x10/0x10 [ 1141.937398][T18992] ? __pfx___might_resched+0x10/0x10 [ 1141.937412][T18992] ? fs_reclaim_acquire+0x7d/0x100 [ 1141.937435][T18992] should_fail_ex+0x414/0x560 [ 1141.937464][T18992] should_failslab+0xa8/0x100 [ 1141.937483][T18992] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1141.937500][T18992] ? __alloc_skb+0x112/0x2d0 [ 1141.937521][T18992] __alloc_skb+0x112/0x2d0 [ 1141.937540][T18992] netlink_ack+0x146/0xa50 [ 1141.937569][T18992] netlink_rcv_skb+0x28c/0x470 [ 1141.937588][T18992] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1141.937612][T18992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1141.937638][T18992] ? bpf_lsm_capable+0x9/0x20 [ 1141.937652][T18992] ? security_capable+0x7e/0x2e0 [ 1141.937681][T18992] nfnetlink_rcv+0x26a/0x2520 [ 1141.937706][T18992] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 1141.937730][T18992] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1141.937748][T18992] ? __dev_queue_xmit+0x27e/0x3a70 [ 1141.937768][T18992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.937790][T18992] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1141.937812][T18992] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1141.937842][T18992] ? ref_tracker_free+0x63a/0x7d0 [ 1141.937855][T18992] ? __copy_skb_header+0xa7/0x550 [ 1141.937875][T18992] ? __pfx_ref_tracker_free+0x10/0x10 [ 1141.937889][T18992] ? __skb_clone+0x63/0x7a0 [ 1141.937911][T18992] ? __skb_clone+0x483/0x7a0 [ 1141.937934][T18992] ? skb_clone+0x246/0x3a0 [ 1141.937956][T18992] ? __netlink_deliver_tap+0x807/0x850 [ 1141.937973][T18992] ? netlink_deliver_tap+0x2e/0x1b0 [ 1141.937995][T18992] ? netlink_deliver_tap+0x2e/0x1b0 [ 1141.938011][T18992] ? netlink_deliver_tap+0x2e/0x1b0 [ 1141.938031][T18992] netlink_unicast+0x75b/0x8d0 [ 1141.938054][T18992] netlink_sendmsg+0x805/0xb30 [ 1141.938078][T18992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1141.938098][T18992] ? aa_sock_msg_perm+0x94/0x160 [ 1141.938121][T18992] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1141.938141][T18992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1141.938159][T18992] __sock_sendmsg+0x219/0x270 [ 1141.938193][T18992] ____sys_sendmsg+0x505/0x830 [ 1141.938217][T18992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1141.938243][T18992] ? import_iovec+0x74/0xa0 [ 1141.938264][T18992] ___sys_sendmsg+0x21f/0x2a0 [ 1141.938288][T18992] ? __pfx____sys_sendmsg+0x10/0x10 [ 1141.938333][T18992] ? __fget_files+0x2a/0x420 [ 1141.938350][T18992] ? __fget_files+0x3a0/0x420 [ 1141.938376][T18992] __x64_sys_sendmsg+0x19b/0x260 [ 1141.938397][T18992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1141.938423][T18992] ? __pfx_ksys_write+0x10/0x10 [ 1141.938439][T18992] ? rcu_is_watching+0x15/0xb0 [ 1141.938457][T18992] ? do_syscall_64+0xbe/0x3b0 [ 1141.938483][T18992] do_syscall_64+0xfa/0x3b0 [ 1141.938504][T18992] ? lockdep_hardirqs_on+0x9c/0x150 [ 1141.938525][T18992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.938539][T18992] ? clear_bhb_loop+0x60/0xb0 [ 1141.938558][T18992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.938573][T18992] RIP: 0033:0x7f302d98e929 [ 1141.938587][T18992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1141.938600][T18992] RSP: 002b:00007f302e753038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1141.938616][T18992] RAX: ffffffffffffffda RBX: 00007f302dbb5fa0 RCX: 00007f302d98e929 [ 1141.938627][T18992] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000003 [ 1141.938637][T18992] RBP: 00007f302e753090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.938646][T18992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.938656][T18992] R13: 0000000000000000 R14: 00007f302dbb5fa0 R15: 00007f302dcdfa28 [ 1141.938678][T18992] [ 1142.595872][T18995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.607088][T18995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.623511][T18995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.633803][T18995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.806900][ T5905] usb 3-1: USB disconnect, device number 53 [ 1142.853136][T19004] FAULT_INJECTION: forcing a failure. [ 1142.853136][T19004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.878751][T19004] CPU: 0 UID: 0 PID: 19004 Comm: syz.4.3398 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1142.878784][T19004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1142.878799][T19004] Call Trace: [ 1142.878808][T19004] [ 1142.878818][T19004] dump_stack_lvl+0x189/0x250 [ 1142.878858][T19004] ? __pfx____ratelimit+0x10/0x10 [ 1142.878890][T19004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1142.878924][T19004] ? __pfx__printk+0x10/0x10 [ 1142.878949][T19004] ? __might_fault+0xb0/0x130 [ 1142.878983][T19004] should_fail_ex+0x414/0x560 [ 1142.879021][T19004] _copy_from_user+0x2d/0xb0 [ 1142.879050][T19004] __sys_sendto+0x25c/0x520 [ 1142.879077][T19004] ? __pfx___sys_sendto+0x10/0x10 [ 1142.879098][T19004] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1142.879156][T19004] ? __fget_files+0x3a0/0x420 [ 1142.879193][T19004] ? ksys_write+0x22a/0x250 [ 1142.879216][T19004] ? __pfx_ksys_write+0x10/0x10 [ 1142.879234][T19004] ? rcu_is_watching+0x15/0xb0 [ 1142.879259][T19004] __x64_sys_sendto+0xde/0x100 [ 1142.879287][T19004] do_syscall_64+0xfa/0x3b0 [ 1142.879318][T19004] ? lockdep_hardirqs_on+0x9c/0x150 [ 1142.879349][T19004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.879370][T19004] ? clear_bhb_loop+0x60/0xb0 [ 1142.879397][T19004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.879419][T19004] RIP: 0033:0x7fe83498e929 [ 1142.879438][T19004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1142.879457][T19004] RSP: 002b:00007fe835867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1142.879480][T19004] RAX: ffffffffffffffda RBX: 00007fe834bb5fa0 RCX: 00007fe83498e929 [ 1142.879496][T19004] RDX: 000000000000ffe0 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1142.879510][T19004] RBP: 00007fe835867090 R08: 0000200000000100 R09: 0000000000000010 [ 1142.879526][T19004] R10: 0000000004000855 R11: 0000000000000246 R12: 0000000000000001 [ 1142.879539][T19004] R13: 0000000000000000 R14: 00007fe834bb5fa0 R15: 00007fe834cdfa28 [ 1142.879573][T19004] [ 1143.459510][ T5905] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1143.469305][ T5842] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1143.627062][ T5842] usb 5-1: Using ep0 maxpacket: 8 [ 1143.646708][ T5842] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1143.659670][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.667856][ T5842] usb 5-1: Product: syz [ 1143.672531][ T5842] usb 5-1: Manufacturer: syz [ 1143.677181][ T5842] usb 5-1: SerialNumber: syz [ 1143.698833][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.703106][ T5842] usb 5-1: config 0 descriptor?? [ 1143.749659][ T5905] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1143.760013][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.774116][ T5905] usb 3-1: config 0 descriptor?? [ 1143.782662][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 1144.011849][ T5842] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1144.205951][ T5905] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1144.222729][ T5905] pwc: recv_control_msg error -32 req 02 val 2700 [ 1144.496916][ T5905] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1145.269417][ T1213] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1145.542796][ T1213] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1145.558458][ T1213] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 1145.584862][ T1213] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 1145.625258][ T1213] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.668417][ T1213] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1145.688712][ T5842] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1145.766867][ T1213] usb 2-1: config 0 has no interface number 0 [ 1145.805137][ T1213] usb 2-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1145.916367][ T1213] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1145.936146][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.951157][ T1213] usb 2-1: Product: syz [ 1145.955616][ T1213] usb 2-1: Manufacturer: syz [ 1145.960561][ T1213] usb 2-1: SerialNumber: syz [ 1145.971425][ T1213] usb 2-1: config 0 descriptor?? [ 1146.047102][ T5905] pwc: recv_control_msg error -71 req 04 val 1300 [ 1146.054099][T11042] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1146.062688][ T5905] pwc: recv_control_msg error -71 req 04 val 1400 [ 1146.087511][ T5905] pwc: recv_control_msg error -71 req 02 val 2000 [ 1146.098172][ T5905] pwc: recv_control_msg error -71 req 02 val 2100 [ 1146.107700][ T5905] pwc: recv_control_msg error -71 req 04 val 1500 [ 1146.118188][ T5905] pwc: recv_control_msg error -71 req 02 val 2500 [ 1146.127435][ T5905] pwc: recv_control_msg error -71 req 02 val 2400 [ 1146.138022][ T5905] pwc: recv_control_msg error -71 req 02 val 2600 [ 1146.147945][ T5905] pwc: recv_control_msg error -71 req 02 val 2900 [ 1146.164616][ T5905] pwc: recv_control_msg error -71 req 02 val 2800 [ 1146.191311][ T5905] pwc: recv_control_msg error -71 req 04 val 1100 [ 1146.207997][ T5905] pwc: recv_control_msg error -71 req 04 val 1200 [ 1146.219094][ T5905] pwc: Registered as video103. [ 1146.238354][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input142 [ 1146.254095][T11042] usb 4-1: config 0 interface 0 altsetting 9 has an endpoint descriptor with address 0x13, changing to 0x3 [ 1146.286265][T11042] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x3 has invalid maxpacket 14341, setting to 64 [ 1146.326951][ T1213] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1146.352779][ T1213] usb 2-1: MIDIStreaming interface descriptor not found [ 1146.402220][ T5905] usb 3-1: USB disconnect, device number 54 [ 1146.422285][T11042] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1146.431205][T11042] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 1146.447939][T11042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.466900][T11042] usb 4-1: config 0 descriptor?? [ 1146.489785][T11042] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1146.622192][ T1213] usb 2-1: USB disconnect, device number 65 [ 1146.768093][ T10] usb 5-1: USB disconnect, device number 56 [ 1146.827255][ T6452] udevd[6452]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1146.886181][ T5842] usb 4-1: USB disconnect, device number 64 [ 1146.966840][T19053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3408'. [ 1147.065235][T19057] FAULT_INJECTION: forcing a failure. [ 1147.065235][T19057] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.164218][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3411'. [ 1147.176868][T19057] CPU: 1 UID: 0 PID: 19057 Comm: syz.3.3409 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1147.176898][T19057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1147.176912][T19057] Call Trace: [ 1147.176922][T19057] [ 1147.176932][T19057] dump_stack_lvl+0x189/0x250 [ 1147.176970][T19057] ? __pfx____ratelimit+0x10/0x10 [ 1147.177002][T19057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1147.177036][T19057] ? __pfx__printk+0x10/0x10 [ 1147.177067][T19057] ? __pfx___might_resched+0x10/0x10 [ 1147.177092][T19057] should_fail_ex+0x414/0x560 [ 1147.177132][T19057] should_failslab+0xa8/0x100 [ 1147.177163][T19057] __kmalloc_cache_noprof+0x70/0x3d0 [ 1147.177187][T19057] ? mpi_alloc+0x52/0x140 [ 1147.177233][T19057] mpi_alloc+0x52/0x140 [ 1147.177269][T19057] mpi_read_raw_data+0x139/0x970 [ 1147.177310][T19057] dh_set_secret+0x1f3/0x310 [ 1147.177341][T19057] ? crypto_create_tfm_node+0x83/0x3f0 [ 1147.177374][T19057] ? __pfx_dh_set_secret+0x10/0x10 [ 1147.177413][T19057] ? crypto_alloc_tfm_node+0x3c1/0x3f0 [ 1147.177450][T19057] __keyctl_dh_compute+0x507/0xca0 [ 1147.177485][T19057] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1147.177508][T19057] ? __lock_acquire+0xab9/0xd20 [ 1147.177546][T19057] ? __might_fault+0xb0/0x130 [ 1147.177588][T19057] keyctl_dh_compute+0x109/0x160 [ 1147.177615][T19057] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1147.177645][T19057] ? sb_end_write+0xe9/0x1c0 [ 1147.177675][T19057] ? vfs_write+0x8d8/0xa90 [ 1147.177700][T19057] __se_sys_keyctl+0x423/0x910 [ 1147.177735][T19057] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1147.177771][T19057] ? do_sys_openat2+0x154/0x1c0 [ 1147.177797][T19057] ? kmem_cache_free+0x18f/0x400 [ 1147.177835][T19057] ? ksys_write+0x1e1/0x250 [ 1147.177858][T19057] ? __pfx_ksys_write+0x10/0x10 [ 1147.177877][T19057] ? rcu_is_watching+0x15/0xb0 [ 1147.177903][T19057] ? do_syscall_64+0xbe/0x3b0 [ 1147.177934][T19057] ? __x64_sys_keyctl+0x20/0xc0 [ 1147.177966][T19057] do_syscall_64+0xfa/0x3b0 [ 1147.177997][T19057] ? lockdep_hardirqs_on+0x9c/0x150 [ 1147.178028][T19057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.178050][T19057] ? clear_bhb_loop+0x60/0xb0 [ 1147.178076][T19057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.178097][T19057] RIP: 0033:0x7fd2abb8e929 [ 1147.178118][T19057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1147.178137][T19057] RSP: 002b:00007fd2ac978038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1147.178160][T19057] RAX: ffffffffffffffda RBX: 00007fd2abdb5fa0 RCX: 00007fd2abb8e929 [ 1147.178177][T19057] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 1147.178191][T19057] RBP: 00007fd2ac978090 R08: 0000200000000180 R09: 0000000000000000 [ 1147.178214][T19057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1147.178228][T19057] R13: 0000000000000000 R14: 00007fd2abdb5fa0 R15: 00007fd2abedfa28 [ 1147.178261][T19057] [ 1147.609632][ T5842] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1147.812347][ T5842] usb 3-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 1147.829429][ T5842] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1147.864506][ T5842] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1147.874122][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.899690][ T1213] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1147.919702][ T5888] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1147.927478][ T5842] usb 3-1: Product: syz [ 1147.947990][ T5842] usb 3-1: Manufacturer: syz [ 1147.969355][ T5842] usb 3-1: SerialNumber: syz [ 1148.079389][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 1148.091508][ T1213] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.120964][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.141439][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1148.152745][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.162952][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1148.172853][ T5888] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1148.182348][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.190521][ T1213] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1148.210155][ T5888] usb 4-1: config 0 descriptor?? [ 1148.226755][ T1213] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1148.236583][ T5842] usb 3-1: 0:2 : does not exist [ 1148.242491][ T1213] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1148.254445][ T1213] usb 5-1: Manufacturer: syz [ 1148.267699][ T5842] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1148.290922][ T1213] usb 5-1: config 0 descriptor?? [ 1148.311616][ T5842] usb 3-1: USB disconnect, device number 55 [ 1148.413899][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1148.433328][T19074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.446338][T19074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.629382][ T1213] rc_core: IR keymap rc-hauppauge not found [ 1148.635532][ T1213] Registered IR keymap rc-empty [ 1148.641368][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.659448][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.701123][ T1213] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1148.715050][ T1213] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input143 [ 1148.730981][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.756875][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.791149][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.819669][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.849499][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.873654][T19080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3417'. [ 1148.877784][T19066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.892762][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.903974][T19066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.929883][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.969338][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1149.017615][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1149.040827][ T1213] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1149.083162][ T1213] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1149.098017][ T1213] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1149.142581][ T5888] letsketch 0003:6161:4D15.001D: Device info: ဉ [ 1149.199034][ T30] audit: type=1326 audit(1749074006.948:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.1.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302d98e929 code=0x7ffc0000 [ 1149.240050][ T30] audit: type=1326 audit(1749074006.948:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.1.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302d98e929 code=0x7ffc0000 [ 1149.263545][ T30] audit: type=1326 audit(1749074006.958:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.1.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f302d98e929 code=0x7ffc0000 [ 1149.301559][ T30] audit: type=1326 audit(1749074006.958:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.1.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302d98e929 code=0x7ffc0000 [ 1149.324917][ T30] audit: type=1326 audit(1749074006.958:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.1.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302d98e929 code=0x7ffc0000 [ 1149.345374][ T5888] letsketch 0003:6161:4D15.001D: Device info: 豧 [ 1149.348261][T11042] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1149.362102][ T30] audit: type=1326 audit(1749074006.968:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.1.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f302d9858e7 code=0x7ffc0000 [ 1149.364324][ T30] audit: type=1326 audit(1749074006.968:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.1.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f302d92ab19 code=0x7ffc0000 [ 1149.409035][ T30] audit: type=1326 audit(1749074006.968:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.1.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302d98e929 code=0x7ffc0000 [ 1149.434614][ T30] audit: type=1326 audit(1749074006.968:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.1.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f302d9858e7 code=0x7ffc0000 [ 1149.478948][ T30] audit: type=1326 audit(1749074006.968:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.1.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f302d92ab19 code=0x7ffc0000 [ 1149.589466][T11042] usb 3-1: Using ep0 maxpacket: 16 [ 1149.597655][ T5888] usb 4-1: Max retries (5) exceeded reading string descriptor 202 [ 1149.599005][T11042] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1149.608256][ T5888] letsketch 0003:6161:4D15.001D: probe with driver letsketch failed with error -71 [ 1149.620448][T11042] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1149.633027][T11042] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1149.641972][T11042] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1149.650707][T11042] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1149.664570][T11042] usb 3-1: config 0 has no interface number 0 [ 1149.673163][T11042] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1149.677161][ T5888] usb 4-1: USB disconnect, device number 65 [ 1149.773663][T11042] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1149.796384][T11042] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1149.824881][T11042] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1149.894662][T11042] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1149.913711][T11042] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1149.935937][T11042] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1149.948400][T11042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.965935][T11042] usb 3-1: Product: syz [ 1149.977638][T11042] usb 3-1: Manufacturer: syz [ 1150.006378][T11042] usb 3-1: SerialNumber: syz [ 1150.028151][T11042] usb 3-1: config 0 descriptor?? [ 1150.053372][T11042] usb 3-1: selecting invalid altsetting 2 [ 1150.228841][ T1213] usb 5-1: USB disconnect, device number 57 [ 1150.311530][ T5888] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1150.485133][ T5888] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1150.504727][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.612959][ T5888] usb 2-1: config 0 descriptor?? [ 1150.850916][ T5888] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1151.081690][ T1213] usb 3-1: USB disconnect, device number 56 [ 1151.180953][ T5888] [drm:udl_init] *ERROR* Selecting channel failed [ 1151.214448][ T5888] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1151.222070][ T5888] [drm] Initialized udl on minor 2 [ 1151.229845][ T5888] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1151.259544][ T5888] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1151.274810][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1151.301594][ T5888] usb 2-1: USB disconnect, device number 66 [ 1151.308450][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1151.913281][T19136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.941572][T19136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.039478][T15740] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1152.199330][T15740] usb 2-1: device descriptor read/64, error -71 [ 1152.455327][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3439'. [ 1152.464630][T19142] netlink: 'syz.4.3439': attribute type 5 has an invalid length. [ 1152.473050][T19142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3439'. [ 1152.484044][T15740] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1152.649429][T15740] usb 2-1: device descriptor read/64, error -71 [ 1152.759893][T15740] usb usb2-port1: attempt power cycle [ 1153.099574][T15740] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1153.120270][T15740] usb 2-1: device descriptor read/8, error -71 [ 1153.180785][T19161] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1153.249326][ T5905] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1153.370072][T15740] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1153.409616][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 1153.415663][T15740] usb 2-1: device descriptor read/8, error -71 [ 1153.435812][ T5905] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1153.463157][ T5905] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1153.549511][T15740] usb usb2-port1: unable to enumerate USB device [ 1153.569957][ T5905] usb 4-1: string descriptor 0 read error: -22 [ 1153.576269][ T5905] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1153.585538][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.119294][ T5888] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1154.281429][ T5888] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1154.290852][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.308471][ T5888] usb 5-1: config 0 descriptor?? [ 1154.326430][ T5888] cp210x 5-1:0.0: cp210x converter detected [ 1154.619359][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1154.737364][ T5888] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1154.756043][ T5888] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1154.779290][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1154.787500][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 122, changing to 10 [ 1154.800075][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24801, setting to 1024 [ 1154.817445][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1154.827291][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.841146][ T10] usb 3-1: config 0 descriptor?? [ 1155.000867][ T5888] usb 5-1: USB disconnect, device number 58 [ 1155.024561][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1155.054066][ T5888] cp210x 5-1:0.0: device disconnected [ 1155.066330][ T10] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1155.259341][T15740] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1155.268098][ T5888] usb 3-1: USB disconnect, device number 57 [ 1155.422030][T15740] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1155.431522][T15740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.442550][T15740] usb 2-1: config 0 descriptor?? [ 1155.663566][T15740] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1155.985953][ T5905] usb 4-1: USB disconnect, device number 66 [ 1156.004965][T15740] [drm:udl_init] *ERROR* Selecting channel failed [ 1156.048398][T15740] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1156.056822][T15740] [drm] Initialized udl on minor 2 [ 1156.064980][T15740] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1156.075892][T15740] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1156.088535][T19184] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1156.104087][T11042] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1156.121888][T15740] usb 2-1: USB disconnect, device number 71 [ 1156.128267][T19184] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1156.291901][T11042] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.302896][T11042] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1156.313551][T11042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.341527][T11042] usb 3-1: config 0 descriptor?? [ 1156.358476][T11042] pwc: Askey VC010 type 2 USB webcam detected. [ 1156.402381][T19197] fuse: Bad value for 'fd' [ 1156.697755][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1156.761130][T11042] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1156.772521][T11042] pwc: recv_control_msg error -32 req 02 val 2700 [ 1156.781123][T11042] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1156.802914][T11042] pwc: recv_control_msg error -71 req 04 val 1000 [ 1156.819547][T11042] pwc: recv_control_msg error -71 req 04 val 1300 [ 1156.826570][T11042] pwc: recv_control_msg error -71 req 04 val 1400 [ 1156.838207][T11042] pwc: recv_control_msg error -71 req 02 val 2000 [ 1156.855509][T11042] pwc: recv_control_msg error -71 req 02 val 2100 [ 1156.862863][T11042] pwc: recv_control_msg error -71 req 04 val 1500 [ 1156.870499][T11042] pwc: recv_control_msg error -71 req 02 val 2500 [ 1156.877668][T11042] pwc: recv_control_msg error -71 req 02 val 2400 [ 1156.879307][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1156.929529][T15740] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1156.988190][T11042] pwc: recv_control_msg error -71 req 02 val 2600 [ 1156.989375][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.009594][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1157.018733][ T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1157.038019][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.046656][ T10] usb 4-1: Product: syz [ 1157.054685][ T10] usb 4-1: Manufacturer: syz [ 1157.054757][T11042] pwc: recv_control_msg error -71 req 02 val 2900 [ 1157.059902][ T10] usb 4-1: SerialNumber: syz [ 1157.090042][ T10] usb 4-1: config 0 descriptor?? [ 1157.111962][T11042] pwc: recv_control_msg error -71 req 02 val 2800 [ 1157.125892][ T10] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1157.129917][T11042] pwc: recv_control_msg error -71 req 04 val 1100 [ 1157.162480][T15740] usb 2-1: config 0 has no interfaces? [ 1157.184089][T11042] pwc: recv_control_msg error -71 req 04 val 1200 [ 1157.198863][T11042] pwc: Registered as video103. [ 1157.276282][T15740] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1157.285974][T11042] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input145 [ 1157.327778][ T1161] usb 4-1: Failed to submit usb control message: -71 [ 1157.336165][ T10] usb 4-1: USB disconnect, device number 67 [ 1157.359298][T15740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.385622][ T1161] usb 4-1: unable to send the bmi data to the device: -71 [ 1157.419525][ T1161] usb 4-1: unable to get target info from device [ 1157.437116][T11042] usb 3-1: USB disconnect, device number 58 [ 1157.449637][ T1161] usb 4-1: could not get target info (-71) [ 1157.455543][ T1161] usb 4-1: could not probe fw (-71) [ 1157.487827][T15740] usb 2-1: Product: syz [ 1157.507251][T15740] usb 2-1: Manufacturer: syz [ 1157.629294][T15740] usb 2-1: SerialNumber: syz [ 1157.674183][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 1157.674197][ T30] audit: type=1326 audit(1749074015.428:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.2.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9f8e929 code=0x7ffc0000 [ 1157.733687][T15740] usb 2-1: config 0 descriptor?? [ 1157.771443][ T30] audit: type=1326 audit(1749074015.468:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.2.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6e9f8e929 code=0x7ffc0000 [ 1157.906326][ T30] audit: type=1326 audit(1749074015.468:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.2.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9f8e929 code=0x7ffc0000 [ 1158.053436][ T30] audit: type=1326 audit(1749074015.468:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.2.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9f8e929 code=0x7ffc0000 [ 1158.112033][ T30] audit: type=1326 audit(1749074015.478:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.2.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd6e9f8e929 code=0x7ffc0000 [ 1158.137378][ T30] audit: type=1326 audit(1749074015.478:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.2.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9f8e929 code=0x7ffc0000 [ 1158.160767][ T30] audit: type=1326 audit(1749074015.478:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.2.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd6e9f8e929 code=0x7ffc0000 [ 1158.316721][ T30] audit: type=1326 audit(1749074015.478:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.2.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd6e9f8e963 code=0x7ffc0000 [ 1158.392668][ T30] audit: type=1326 audit(1749074015.478:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.2.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd6e9f8e963 code=0x7ffc0000 [ 1158.589308][ T30] audit: type=1326 audit(1749074015.478:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.2.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9f8e929 code=0x7ffc0000 [ 1158.840455][T19233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3467'. [ 1158.949325][ T1213] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1159.009413][ T10] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1159.104171][ T1213] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1159.118672][ T1213] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1159.178688][ T10] usb 5-1: config index 0 descriptor too short (expected 45568, got 9) [ 1159.187578][ T10] usb 5-1: config 0 has too many interfaces: 34, using maximum allowed: 32 [ 1159.207573][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 34 [ 1159.322074][ T1213] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1159.334154][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.345652][ T10] usb 5-1: New USB device found, idVendor=04a5, idProduct=300a, bcdDevice=5f.57 [ 1159.357279][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.366279][ T1213] usb 4-1: Product: syz [ 1159.370767][ T5888] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1159.379363][ T1213] usb 4-1: Manufacturer: syz [ 1159.385499][ T10] usb 5-1: Product: syz [ 1159.390160][ T1213] usb 4-1: SerialNumber: syz [ 1159.394818][ T10] usb 5-1: Manufacturer: syz [ 1159.401176][ T10] usb 5-1: SerialNumber: syz [ 1159.408230][T19229] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1159.441007][ T10] usb 5-1: config 0 descriptor?? [ 1159.557546][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.581608][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1159.595164][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1159.608663][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1159.626415][ T5888] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1159.638046][ T5888] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1159.649040][ T5888] usb 3-1: Manufacturer: syz [ 1159.656202][ T10] usb 5-1: USB disconnect, device number 59 [ 1159.684386][ T5888] usb 3-1: config 0 descriptor?? [ 1159.839801][T19238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.850682][T19238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.968925][ T1213] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1159.986175][ T1213] cdc_ncm 4-1:1.0: bind() failure [ 1160.047674][ T1213] usb 4-1: USB disconnect, device number 68 [ 1160.068259][ T5888] rc_core: IR keymap rc-hauppauge not found [ 1160.080442][ T5888] Registered IR keymap rc-empty [ 1160.085526][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1160.140286][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1160.171056][ T5888] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1160.195287][ T5888] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input146 [ 1160.212180][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1160.239652][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1160.271935][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1160.309449][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1160.329785][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1160.349493][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1160.369436][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1160.399398][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1160.410597][T15740] usb 2-1: USB disconnect, device number 72 [ 1160.439474][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1160.460296][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1160.482574][ T5888] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1160.500419][ T5888] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1160.519511][T11042] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1160.692825][T11042] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.716657][T11042] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1160.734749][T11042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.773200][T11042] usb 5-1: config 0 descriptor?? [ 1160.811826][T11042] pwc: Askey VC010 type 2 USB webcam detected. [ 1161.018963][ T5888] usb 3-1: USB disconnect, device number 59 [ 1161.211329][T11042] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1161.255013][T11042] pwc: recv_control_msg error -32 req 02 val 2700 [ 1161.280656][T11042] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1161.301529][T11042] pwc: recv_control_msg error -71 req 04 val 1000 [ 1161.347425][T11042] pwc: recv_control_msg error -71 req 04 val 1300 [ 1161.374307][T11042] pwc: recv_control_msg error -71 req 04 val 1400 [ 1161.403661][T11042] pwc: recv_control_msg error -71 req 02 val 2000 [ 1161.436361][T11042] pwc: recv_control_msg error -71 req 02 val 2100 [ 1161.463803][T11042] pwc: recv_control_msg error -71 req 04 val 1500 [ 1161.480781][T11042] pwc: recv_control_msg error -71 req 02 val 2500 [ 1161.505508][T11042] pwc: recv_control_msg error -71 req 02 val 2400 [ 1161.572538][T11042] pwc: recv_control_msg error -71 req 02 val 2600 [ 1161.746070][T11042] pwc: recv_control_msg error -71 req 02 val 2900 [ 1161.783041][T11042] pwc: recv_control_msg error -71 req 02 val 2800 [ 1161.790550][T11042] pwc: recv_control_msg error -71 req 04 val 1100 [ 1161.800345][T11042] pwc: recv_control_msg error -71 req 04 val 1200 [ 1161.814707][T11042] pwc: Registered as video103. [ 1161.831715][T11042] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input147 [ 1161.889384][ T5888] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1161.908367][T11042] usb 5-1: USB disconnect, device number 60 [ 1162.311285][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.373205][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1162.506647][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1162.518049][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1162.552764][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1162.575578][ T5888] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1162.605135][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1162.622293][ T5888] usb 4-1: Product: syz [ 1162.658897][ T5888] usb 4-1: Manufacturer: syz [ 1162.669215][ T5888] usb 4-1: SerialNumber: syz [ 1162.683374][ T5888] usb 4-1: config 0 descriptor?? [ 1162.737246][T19285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.754804][T19285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.870886][ T1213] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1163.039541][ T5888] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1163.046399][ T5888] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1163.099430][ T1213] usb 5-1: config 0 has no interfaces? [ 1163.120030][ T1213] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1163.129482][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.141289][ T1213] usb 5-1: Product: syz [ 1163.145513][ T1213] usb 5-1: Manufacturer: syz [ 1163.289807][ T5888] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 1163.301954][ T1213] usb 5-1: SerialNumber: syz [ 1163.312887][ T5888] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1163.325628][ T5888] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1163.372895][ T1213] usb 5-1: config 0 descriptor?? [ 1163.477250][T19272] fuse: Bad value for 'user_id' [ 1163.482364][T19272] fuse: Bad value for 'user_id' [ 1163.496211][ T5888] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1163.530000][ T5888] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 1163.553497][ T5888] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1163.579827][ T5888] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1163.629800][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1163.643653][ T5888] usb 4-1: USB disconnect, device number 69 [ 1163.755899][T19292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.773647][T19292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.813840][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1163.823928][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.837852][ T10] usb 2-1: config 0 descriptor?? [ 1164.071730][ T10] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1164.342874][T19301] FAULT_INJECTION: forcing a failure. [ 1164.342874][T19301] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.366689][T19301] CPU: 1 UID: 0 PID: 19301 Comm: syz.3.3488 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1164.366721][T19301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1164.366736][T19301] Call Trace: [ 1164.366746][T19301] [ 1164.366756][T19301] dump_stack_lvl+0x189/0x250 [ 1164.366797][T19301] ? __pfx____ratelimit+0x10/0x10 [ 1164.366831][T19301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1164.366865][T19301] ? __pfx__printk+0x10/0x10 [ 1164.366892][T19301] ? __pfx___might_resched+0x10/0x10 [ 1164.366913][T19301] ? fs_reclaim_acquire+0x7d/0x100 [ 1164.366946][T19301] should_fail_ex+0x414/0x560 [ 1164.366986][T19301] should_failslab+0xa8/0x100 [ 1164.367021][T19301] __kmalloc_noprof+0xcb/0x4f0 [ 1164.367043][T19301] ? tomoyo_encode+0x28b/0x550 [ 1164.367069][T19301] tomoyo_encode+0x28b/0x550 [ 1164.367098][T19301] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1164.367131][T19301] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1164.367163][T19301] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1164.367198][T19301] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1164.367248][T19301] ? __lock_acquire+0xab9/0xd20 [ 1164.367304][T19301] ? __fget_files+0x2a/0x420 [ 1164.367333][T19301] ? __fget_files+0x2a/0x420 [ 1164.367357][T19301] ? __fget_files+0x3a0/0x420 [ 1164.367382][T19301] ? __fget_files+0x2a/0x420 [ 1164.367412][T19301] security_file_ioctl+0xcb/0x2d0 [ 1164.367444][T19301] __se_sys_ioctl+0x47/0x170 [ 1164.367480][T19301] do_syscall_64+0xfa/0x3b0 [ 1164.367512][T19301] ? lockdep_hardirqs_on+0x9c/0x150 [ 1164.367544][T19301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.367565][T19301] ? clear_bhb_loop+0x60/0xb0 [ 1164.367597][T19301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.367618][T19301] RIP: 0033:0x7fd2abb8e929 [ 1164.367638][T19301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1164.367657][T19301] RSP: 002b:00007fd2ac978038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.367681][T19301] RAX: ffffffffffffffda RBX: 00007fd2abdb5fa0 RCX: 00007fd2abb8e929 [ 1164.367698][T19301] RDX: 0000200000000040 RSI: 0000000080045505 RDI: 0000000000000003 [ 1164.367713][T19301] RBP: 00007fd2ac978090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.367727][T19301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.367741][T19301] R13: 0000000000000000 R14: 00007fd2abdb5fa0 R15: 00007fd2abedfa28 [ 1164.367773][T19301] [ 1164.368494][T19301] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1164.733613][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 1164.783499][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1164.807996][ T10] [drm] Initialized udl on minor 2 [ 1164.827385][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1164.856698][T19309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.857895][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1164.901765][T19309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.904180][ T1213] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1164.923429][ T10] usb 2-1: USB disconnect, device number 73 [ 1164.937400][ T1213] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1165.079272][T19184] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1165.107416][T19316] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1165.241497][T19184] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.252048][T19184] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1165.259632][ T1213] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1165.273320][T19184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.321424][T19184] usb 3-1: config 0 descriptor?? [ 1165.345122][T19184] pwc: Askey VC010 type 2 USB webcam detected. [ 1165.419336][ T1213] usb 4-1: Using ep0 maxpacket: 16 [ 1165.501428][T15740] usb 5-1: USB disconnect, device number 61 [ 1165.536696][ T1213] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1165.571967][ T1213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.663895][ T1213] usb 4-1: config 0 has no interface number 0 [ 1165.702088][ T1213] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1165.717700][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.739522][ T1213] usb 4-1: Product: syz [ 1165.743762][ T1213] usb 4-1: Manufacturer: syz [ 1165.749277][ T1213] usb 4-1: SerialNumber: syz [ 1165.769831][ T1213] usb 4-1: config 0 descriptor?? [ 1165.783127][ T1213] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 1165.794992][ T1213] usb 4-1: No valid video chain found. [ 1165.812207][T19184] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1165.840873][T19184] pwc: recv_control_msg error -32 req 02 val 2700 [ 1165.873698][T19184] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1165.889806][T19184] pwc: recv_control_msg error -71 req 04 val 1000 [ 1165.923290][T19184] pwc: recv_control_msg error -71 req 04 val 1300 [ 1165.953553][T19184] pwc: recv_control_msg error -71 req 04 val 1400 [ 1165.970778][T19184] pwc: recv_control_msg error -71 req 02 val 2000 [ 1165.994292][T19184] pwc: recv_control_msg error -71 req 02 val 2100 [ 1166.001741][ T1213] usb 4-1: USB disconnect, device number 70 [ 1166.011443][T19184] pwc: recv_control_msg error -71 req 04 val 1500 [ 1166.032748][T19184] pwc: recv_control_msg error -71 req 02 val 2500 [ 1166.060947][T19184] pwc: recv_control_msg error -71 req 02 val 2400 [ 1166.088237][T19184] pwc: recv_control_msg error -71 req 02 val 2600 [ 1166.120435][T19184] pwc: recv_control_msg error -71 req 02 val 2900 [ 1166.153678][T19184] pwc: recv_control_msg error -71 req 02 val 2800 [ 1166.195943][T19184] pwc: recv_control_msg error -71 req 04 val 1100 [ 1166.226283][T19184] pwc: recv_control_msg error -71 req 04 val 1200 [ 1166.269570][T19184] pwc: Registered as video103. [ 1166.303553][T19184] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input148 [ 1166.357996][T19184] usb 3-1: USB disconnect, device number 60 [ 1166.919284][T19184] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1167.110908][T19184] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1167.159374][T19184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.159374][ T1213] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1167.159412][T19184] usb 3-1: Product: syz [ 1167.202008][T19184] usb 3-1: Manufacturer: syz [ 1167.206902][T19184] usb 3-1: SerialNumber: syz [ 1167.228647][T19184] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1167.308315][T11042] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1167.384029][ T1213] usb 2-1: Using ep0 maxpacket: 8 [ 1167.557937][ T1213] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1167.602278][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.614494][ T1213] usb 2-1: Product: syz [ 1167.625301][ T1213] usb 2-1: Manufacturer: syz [ 1167.631872][ T1213] usb 2-1: SerialNumber: syz [ 1167.690868][ T1213] usb 2-1: config 0 descriptor?? [ 1167.862464][ T1213] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1168.133527][T19184] usb 3-1: USB disconnect, device number 61 [ 1168.406015][T11042] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1168.473457][T11042] ath9k_htc: Failed to initialize the device [ 1168.523858][T19184] usb 3-1: ath9k_htc: USB layer deinitialized [ 1169.073327][T19352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.082869][T19352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.132452][ T1213] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 1169.143994][ T1213] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1169.589285][ T1213] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1169.619339][ T5841] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1169.809296][ T1213] usb 5-1: Using ep0 maxpacket: 8 [ 1169.822140][ T5841] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1169.841336][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.877247][ T1213] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1169.897870][ T5841] usb 3-1: config 0 descriptor?? [ 1169.910483][ T1213] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1169.985386][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.003001][ T1213] usb 5-1: Product: syz [ 1170.012179][ T1213] usb 5-1: Manufacturer: syz [ 1170.022029][ T1213] usb 5-1: SerialNumber: syz [ 1170.040209][ T1213] usb 5-1: config 0 descriptor?? [ 1170.180123][ T5841] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1170.205199][T11042] usb 2-1: USB disconnect, device number 74 [ 1170.370043][T19360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3503'. [ 1170.389433][T19360] netlink: 'syz.3.3503': attribute type 5 has an invalid length. [ 1170.397586][T19360] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3503'. [ 1170.841213][T19184] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1170.875429][ T5841] [drm:udl_init] *ERROR* Selecting channel failed [ 1170.909363][ T5841] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1170.927282][ T5841] [drm] Initialized udl on minor 2 [ 1170.947370][ T5841] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1170.995728][ T5841] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1171.051072][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1171.076835][ T5841] usb 3-1: USB disconnect, device number 62 [ 1171.083406][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1171.085239][T19184] usb 2-1: config 0 has no interfaces? [ 1171.211925][T19184] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1171.224092][T19184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.232607][T19184] usb 2-1: Product: syz [ 1171.236845][T19184] usb 2-1: Manufacturer: syz [ 1171.245384][T19184] usb 2-1: SerialNumber: syz [ 1171.267226][T19184] usb 2-1: config 0 descriptor?? [ 1171.729339][ T5841] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1171.904422][ T5841] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.916214][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1171.931249][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1171.947565][ T5841] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1171.977486][ T5841] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1171.989718][ T5841] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1171.997736][ T5841] usb 3-1: Manufacturer: syz [ 1172.110135][ T5841] usb 3-1: config 0 descriptor?? [ 1172.198761][T19184] usb 5-1: USB disconnect, device number 62 [ 1172.541958][ T5841] rc_core: IR keymap rc-hauppauge not found [ 1172.547941][ T5841] Registered IR keymap rc-empty [ 1172.589943][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1172.627209][T19382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.639382][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1172.649349][T19184] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1172.672339][T19382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.683029][ T5841] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1172.700080][T19382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.714061][T19382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.726839][ T5841] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input149 [ 1172.813909][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1172.829797][T19184] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.849817][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1172.864447][T19184] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1172.876675][T19184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.892455][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1172.939571][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1172.939683][T19184] usb 5-1: config 0 descriptor?? [ 1172.975660][T19184] pwc: Askey VC010 type 2 USB webcam detected. [ 1172.994048][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1173.165152][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1173.206079][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1173.239676][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1173.259519][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1173.340707][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1173.376011][ T5841] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1173.381494][T19184] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1173.393437][ T5841] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1173.415193][ T5841] usb 3-1: USB disconnect, device number 63 [ 1173.478642][T19184] pwc: recv_control_msg error -32 req 02 val 2700 [ 1173.543789][T19392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.546142][T19184] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1173.606983][T19392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.647559][T19184] pwc: recv_control_msg error -71 req 04 val 1000 [ 1173.666340][T19184] pwc: recv_control_msg error -71 req 04 val 1300 [ 1173.695722][T19184] pwc: recv_control_msg error -71 req 04 val 1400 [ 1173.738864][T19184] pwc: recv_control_msg error -71 req 02 val 2000 [ 1173.756803][T11042] usb 2-1: USB disconnect, device number 75 [ 1173.781957][T19184] pwc: recv_control_msg error -71 req 02 val 2100 [ 1173.828555][T19184] pwc: recv_control_msg error -71 req 04 val 1500 [ 1173.850551][T19184] pwc: recv_control_msg error -71 req 02 val 2500 [ 1173.871617][T19184] pwc: recv_control_msg error -71 req 02 val 2400 [ 1173.897403][T19184] pwc: recv_control_msg error -71 req 02 val 2600 [ 1173.917013][T19184] pwc: recv_control_msg error -71 req 02 val 2900 [ 1173.937961][T19184] pwc: recv_control_msg error -71 req 02 val 2800 [ 1173.954242][T19184] pwc: recv_control_msg error -71 req 04 val 1100 [ 1173.962126][T19184] pwc: recv_control_msg error -71 req 04 val 1200 [ 1173.978529][T19184] pwc: Registered as video103. [ 1173.994433][T19184] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input150 [ 1174.081786][T19184] usb 5-1: USB disconnect, device number 63 [ 1174.148470][T19401] FAULT_INJECTION: forcing a failure. [ 1174.148470][T19401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.172501][T11042] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1174.215065][T19401] CPU: 0 UID: 0 PID: 19401 Comm: syz.4.3518 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1174.215098][T19401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1174.215112][T19401] Call Trace: [ 1174.215134][T19401] [ 1174.215144][T19401] dump_stack_lvl+0x189/0x250 [ 1174.215184][T19401] ? __pfx____ratelimit+0x10/0x10 [ 1174.215217][T19401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1174.215251][T19401] ? __pfx__printk+0x10/0x10 [ 1174.215276][T19401] ? __might_fault+0xb0/0x130 [ 1174.215311][T19401] should_fail_ex+0x414/0x560 [ 1174.215350][T19401] _copy_from_user+0x2d/0xb0 [ 1174.215379][T19401] ___sys_recvmsg+0x12e/0x510 [ 1174.215414][T19401] ? __pfx____sys_recvmsg+0x10/0x10 [ 1174.215476][T19401] ? __might_fault+0xb0/0x130 [ 1174.215502][T19401] do_recvmmsg+0x307/0x770 [ 1174.215539][T19401] ? __pfx_do_recvmmsg+0x10/0x10 [ 1174.215581][T19401] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1174.215636][T19401] __x64_sys_recvmmsg+0x190/0x240 [ 1174.215668][T19401] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1174.215695][T19401] ? rcu_is_watching+0x15/0xb0 [ 1174.215722][T19401] ? do_syscall_64+0xbe/0x3b0 [ 1174.215767][T19401] do_syscall_64+0xfa/0x3b0 [ 1174.215799][T19401] ? lockdep_hardirqs_on+0x9c/0x150 [ 1174.215830][T19401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.215852][T19401] ? clear_bhb_loop+0x60/0xb0 [ 1174.215879][T19401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.215900][T19401] RIP: 0033:0x7fe83498e929 [ 1174.215919][T19401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.215938][T19401] RSP: 002b:00007fe835867038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1174.215962][T19401] RAX: ffffffffffffffda RBX: 00007fe834bb5fa0 RCX: 00007fe83498e929 [ 1174.215978][T19401] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 1174.215993][T19401] RBP: 00007fe835867090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.216006][T19401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.216019][T19401] R13: 0000000000000000 R14: 00007fe834bb5fa0 R15: 00007fe834cdfa28 [ 1174.216052][T19401] [ 1174.522033][T11042] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1174.531162][T11042] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 1174.539622][T11042] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 1174.613955][T11042] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.682155][T11042] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1174.717903][T11042] usb 3-1: config 0 has no interface number 0 [ 1174.759368][T11042] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1174.768833][T11042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.834206][T11042] usb 3-1: Product: syz [ 1174.838474][T11042] usb 3-1: Manufacturer: syz [ 1174.878361][T11042] usb 3-1: SerialNumber: syz [ 1174.936238][T11042] usb 3-1: config 0 descriptor?? [ 1175.221173][T11042] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1175.255593][T11042] usb 3-1: MIDIStreaming interface descriptor not found [ 1175.351630][T19184] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1175.379519][T11042] usb 3-1: USB disconnect, device number 64 [ 1175.448731][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3524'. [ 1175.520757][T19184] usb 5-1: Using ep0 maxpacket: 8 [ 1175.586150][T19184] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1175.599413][T19184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.629246][T19184] usb 5-1: Product: syz [ 1175.636767][T19184] usb 5-1: Manufacturer: syz [ 1175.644691][T19184] usb 5-1: SerialNumber: syz [ 1175.649654][ T24] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1175.690790][T19184] usb 5-1: config 0 descriptor?? [ 1175.756518][T19184] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1175.847134][ T24] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1175.883853][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.903910][ T24] usb 4-1: Product: syz [ 1175.915060][ T24] usb 4-1: Manufacturer: syz [ 1175.926773][ T24] usb 4-1: SerialNumber: syz [ 1175.970729][ T24] usb 4-1: config 0 descriptor?? [ 1176.019372][T10011] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1176.126647][ T24] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 071 [ 1176.279314][T10011] usb 2-1: Using ep0 maxpacket: 8 [ 1176.321925][T10011] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 1176.330910][T10011] usb 2-1: config 0 has no interface number 1 [ 1176.337832][T10011] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1176.365290][T10011] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1176.395647][T10011] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1176.422358][T10011] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1176.448917][T10011] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1176.552815][T10011] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1176.567559][T19420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.584693][T19420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.609398][T10011] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1176.706525][T10011] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1176.740504][ T24] (null): failure reading functionality [ 1176.748582][ T24] i2c i2c-1: failure reading functionality [ 1176.764099][T19430] binder: 19428:19430 ioctl c0306201 0 returned -14 [ 1176.961608][ T24] i2c i2c-1: connected i2c-tiny-usb device [ 1176.973460][T10011] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1176.989763][T10011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.015986][ T24] usb 4-1: USB disconnect, device number 71 [ 1177.036418][T10011] usb 2-1: Product: syz [ 1177.051124][T10011] usb 2-1: Manufacturer: syz [ 1177.062213][T19184] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 1177.089073][T19184] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1177.096708][T10011] usb 2-1: SerialNumber: syz [ 1177.134580][T10011] usb 2-1: config 0 descriptor?? [ 1177.160722][T19426] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1177.230116][T10011] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1177.275679][T10011] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1177.288854][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.298423][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.377161][T19436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.396038][T19436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.426216][T19426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.439101][T19426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.480216][T10011] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1177.931986][T19184] usb 5-1: USB disconnect, device number 64 [ 1177.989319][T10011] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1178.139547][T10011] usb 3-1: Using ep0 maxpacket: 32 [ 1178.152612][T10011] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1178.168860][T10011] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1178.196288][T10011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.224975][T10011] usb 3-1: Product: syz [ 1178.245291][T10011] usb 3-1: Manufacturer: syz [ 1178.255475][T10011] usb 3-1: SerialNumber: syz [ 1178.268723][T10011] usb 3-1: config 0 descriptor?? [ 1178.289569][T19184] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1178.451720][T19184] usb 5-1: config 12 has an invalid interface number: 26 but max is 0 [ 1178.468034][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3530'. [ 1178.477520][T19448] netlink: 'syz.3.3530': attribute type 5 has an invalid length. [ 1178.485851][T19448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3530'. [ 1178.495348][T19184] usb 5-1: config 12 has no interface number 0 [ 1178.510395][T19184] usb 5-1: config 12 interface 26 has no altsetting 0 [ 1178.529635][T19184] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0003, bcdDevice=3c.82 [ 1178.545175][T19184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.553986][T19184] usb 5-1: Product: syz [ 1178.558549][T19184] usb 5-1: Manufacturer: syz [ 1178.563896][T19184] usb 5-1: SerialNumber: syz [ 1178.672596][ T5841] usb 2-1: USB disconnect, device number 76 [ 1178.726375][T10011] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 1178.744318][T10011] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 1178.810451][T19184] kvaser_usb 5-1:12.26: error -ENODEV: Cannot get usb endpoint(s) [ 1178.874482][T19184] usb 5-1: USB disconnect, device number 65 [ 1179.681340][T19462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3535'. [ 1180.589450][T10011] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1180.726113][ T5841] usb 3-1: USB disconnect, device number 65 [ 1180.741605][T10011] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1180.756318][T10011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.836597][T10011] usb 4-1: config 0 descriptor?? [ 1180.887598][T10011] cp210x 4-1:0.0: cp210x converter detected [ 1181.060505][T10011] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1181.068633][T10011] cp210x 4-1:0.0: querying part number failed [ 1181.125600][T10011] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1181.169719][T10011] usb 4-1: USB disconnect, device number 72 [ 1181.196876][T10011] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1181.215252][T10011] cp210x 4-1:0.0: device disconnected [ 1181.555722][T19492] tipc: Enabling of bearer rejected, already enabled [ 1181.719952][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1181.880173][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1181.887719][ T10] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1181.899266][ T10] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1181.928345][ T10] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1181.949293][ T5841] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1181.978589][ T10] usb 2-1: config 250 has no interface number 0 [ 1181.997451][ T10] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1182.027379][ T10] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1182.087412][ T10] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1182.144428][ T10] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1182.182624][ T5841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.199256][ T5841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1182.208730][ T10] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1182.246042][ T5841] usb 5-1: config 1 has no interface number 0 [ 1182.258253][ T10] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1182.269239][ T5841] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.280436][ T5841] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1182.298206][ T5841] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1182.311752][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1182.322686][ T10] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1182.331495][ T10] usb 2-1: Product: syz [ 1182.336009][ T10] usb 2-1: SerialNumber: syz [ 1182.336742][ T5841] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1182.359374][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.369224][ T5841] usb 5-1: Product: syz [ 1182.373449][ T5841] usb 5-1: Manufacturer: syz [ 1182.378096][ T5841] usb 5-1: SerialNumber: syz [ 1182.395835][ T10] hub 2-1:250.228: bad descriptor, ignoring hub [ 1182.402705][ T10] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1182.687779][ T10] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 77 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1183.094966][T19515] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3552'. [ 1183.107338][T19515] gretap0: entered promiscuous mode [ 1183.130375][T19515] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3552'. [ 1183.169541][T19515] 0ªX¹¦D: renamed from gretap0 [ 1183.181780][T19515] 0ªX¹¦D: left promiscuous mode [ 1183.193481][T19515] 0ªX¹¦D: entered allmulticast mode [ 1183.249078][T19515] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1183.299080][ T5841] cdc_ncm 5-1:1.1: bind() failure [ 1183.430903][T10011] usb 2-1: USB disconnect, device number 77 [ 1183.440343][T10011] usblp0: removed [ 1183.482596][T19497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.498427][T19497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.572851][T10011] usb 5-1: USB disconnect, device number 66 [ 1184.479897][ T5841] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1184.679350][ T5841] usb 2-1: Using ep0 maxpacket: 8 [ 1184.691966][ T5841] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1184.730265][ T5841] usb 2-1: config index 0 descriptor too short (expected 36918, got 54) [ 1184.755563][ T5841] usb 2-1: config 228 has too many interfaces: 44, using maximum allowed: 32 [ 1184.775213][T19537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3559'. [ 1184.799352][ T5841] usb 2-1: config 228 has an invalid interface descriptor of length 8, skipping [ 1184.829301][ T5841] usb 2-1: config 228 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.859421][ T5841] usb 2-1: config 228 has 0 interfaces, different from the descriptor's value: 44 [ 1184.914139][ T5841] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 1184.948539][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.974871][ T5841] usb 2-1: Product: syz [ 1184.981556][ T5841] usb 2-1: Manufacturer: syz [ 1184.987238][ T5841] usb 2-1: SerialNumber: syz [ 1185.219758][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3554'. [ 1185.228684][T19543] netlink: 'syz.2.3554': attribute type 5 has an invalid length. [ 1185.325675][T19544] loop6: detected capacity change from 0 to 524287999 [ 1185.340282][T19543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3554'. [ 1185.974253][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3558'. [ 1185.983454][T19555] netlink: 'syz.0.3558': attribute type 5 has an invalid length. [ 1185.991481][T19555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3558'. [ 1187.434228][ T5841] usb 2-1: USB disconnect, device number 78 [ 1187.519496][T10011] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1187.711140][T10011] usb 3-1: Using ep0 maxpacket: 32 [ 1187.731788][T10011] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 1187.789336][T10011] usb 3-1: config 0 has no interface number 0 [ 1187.796331][T10011] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1187.851907][T10011] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1187.899275][T10011] usb 3-1: config 0 interface 126 has no altsetting 0 [ 1187.899359][ T5841] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1187.927153][T10011] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1187.963157][T10011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.985890][T10011] usb 3-1: Product: syz [ 1187.994043][T10011] usb 3-1: Manufacturer: syz [ 1187.994735][T19572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1188.008897][T10011] usb 3-1: SerialNumber: syz [ 1188.022498][T19572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1188.025192][T10011] usb 3-1: config 0 descriptor?? [ 1188.060435][T19563] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1188.079928][T19563] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1188.162066][ T5841] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1188.192138][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.205530][ T5841] usb 2-1: config 0 descriptor?? [ 1188.233378][ T5841] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1188.255430][ T5841] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1188.463081][T19565] xt_ipcomp: unknown flags 12 [ 1188.499296][ T5841] usb 2-1: USB disconnect, device number 79 [ 1188.619387][T10011] ir_usb 3-1:0.126: IR Dongle converter detected [ 1188.641700][T10011] usb 3-1: IRDA class descriptor not found, device not bound [ 1188.676669][T10011] usb 3-1: USB disconnect, device number 66 [ 1189.086488][T19581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3570'. [ 1189.279416][T19586] netlink: 'syz.1.3571': attribute type 10 has an invalid length. [ 1190.536901][T19601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3574'. [ 1190.631172][ T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1190.789514][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1190.804710][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1190.982492][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.039033][ T10] usb 2-1: Product: syz [ 1191.055944][ T10] usb 2-1: Manufacturer: syz [ 1191.084418][ T10] usb 2-1: SerialNumber: syz [ 1191.142012][ T10] usb 2-1: config 0 descriptor?? [ 1191.273750][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1191.273771][ T30] audit: type=1804 audit(1749074049.028:4777): pid=19634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3578" name="/newroot/703/bus" dev="tmpfs" ino=3623 res=1 errno=0 [ 1191.394003][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1191.518398][T19635] QAT: Invalid ioctl 1075883590 [ 1191.549567][T19635] QAT: Invalid ioctl 1075883590 [ 1191.556300][T19635] QAT: Invalid ioctl 1075883590 [ 1191.649640][T19635] QAT: Invalid ioctl 1075883590 [ 1191.715318][T19637] kernel profiling enabled (shift: 2) [ 1191.750538][T19635] QAT: Invalid ioctl 1075883590 [ 1191.755578][T19635] QAT: Invalid ioctl 1075883590 [ 1191.859553][T19635] QAT: Invalid ioctl 1075883590 [ 1191.882709][T19635] QAT: Invalid ioctl 1075883590 [ 1191.889005][T19635] QAT: Invalid ioctl 1075883590 [ 1191.899639][T19635] QAT: Invalid ioctl 1075883590 [ 1192.396197][T19637] syz.3.3578: vmalloc error: size 174620672, failed to allocated page array size 341056, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1192.433666][T19640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.453851][T19637] CPU: 1 UID: 0 PID: 19637 Comm: syz.3.3578 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1192.453882][T19637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1192.453898][T19637] Call Trace: [ 1192.453908][T19637] [ 1192.453918][T19637] dump_stack_lvl+0x189/0x250 [ 1192.453961][T19637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1192.453995][T19637] ? __pfx__printk+0x10/0x10 [ 1192.454021][T19637] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1192.454046][T19637] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1192.454074][T19637] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1192.454103][T19637] warn_alloc+0x214/0x310 [ 1192.454136][T19637] ? __pfx_warn_alloc+0x10/0x10 [ 1192.454174][T19637] ? __get_vm_area_node+0x28f/0x300 [ 1192.454202][T19637] ? profile_init+0xb4/0x100 [ 1192.454234][T19637] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1192.454289][T19637] ? policy_nodemask+0x27c/0x720 [ 1192.454318][T19637] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1192.454345][T19637] ? alloc_pages_mpol+0x3cd/0x4a0 [ 1192.454374][T19637] ? profile_init+0xb4/0x100 [ 1192.454401][T19637] vzalloc_noprof+0xb2/0xf0 [ 1192.454427][T19637] ? profile_init+0xb4/0x100 [ 1192.454455][T19637] profile_init+0xb4/0x100 [ 1192.454483][T19637] profiling_store+0x6c/0xf0 [ 1192.454507][T19637] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1192.454541][T19637] kernfs_fop_write_iter+0x375/0x4f0 [ 1192.454586][T19637] vfs_write+0x548/0xa90 [ 1192.454616][T19637] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1192.454653][T19637] ? __pfx_vfs_write+0x10/0x10 [ 1192.454703][T19637] ksys_write+0x145/0x250 [ 1192.454730][T19637] ? __pfx_ksys_write+0x10/0x10 [ 1192.454759][T19637] ? do_syscall_64+0xbe/0x3b0 [ 1192.454799][T19637] do_syscall_64+0xfa/0x3b0 [ 1192.454831][T19637] ? lockdep_hardirqs_on+0x9c/0x150 [ 1192.454863][T19637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.454887][T19637] ? clear_bhb_loop+0x60/0xb0 [ 1192.454915][T19637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.454937][T19637] RIP: 0033:0x7fd2abb8e929 [ 1192.454957][T19637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1192.454977][T19637] RSP: 002b:00007fd2ac936038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1192.455001][T19637] RAX: ffffffffffffffda RBX: 00007fd2abdb6160 RCX: 00007fd2abb8e929 [ 1192.455020][T19637] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000008 [ 1192.455034][T19637] RBP: 00007fd2abc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1192.455049][T19637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.455063][T19637] R13: 0000000000000001 R14: 00007fd2abdb6160 R15: 00007fd2abedfa28 [ 1192.455100][T19637] [ 1192.455191][T19637] Mem-Info: [ 1192.490428][T19640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.761756][T19637] active_anon:53312 inactive_anon:0 isolated_anon:0 [ 1192.761756][T19637] active_file:17811 inactive_file:40308 isolated_file:0 [ 1192.761756][T19637] unevictable:768 dirty:251 writeback:0 [ 1192.761756][T19637] slab_reclaimable:9173 slab_unreclaimable:104793 [ 1192.761756][T19637] mapped:32360 shmem:47617 pagetables:1515 [ 1192.761756][T19637] sec_pagetables:0 bounce:0 [ 1192.761756][T19637] kernel_misc_reclaimable:0 [ 1192.761756][T19637] free:1205031 free_pcp:15727 free_cma:0 [ 1192.863451][T19640] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1192.877747][T19637] Node 0 active_anon:213608kB inactive_anon:0kB active_file:71236kB inactive_file:161028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129308kB dirty:1048kB writeback:0kB shmem:188888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11536kB pagetables:5980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1192.919798][T19637] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1192.990507][T19637] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1193.039258][T19637] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 1193.065641][T19637] Node 0 DMA32 free:894132kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:213960kB inactive_anon:0kB active_file:71236kB inactive_file:159204kB unevictable:1536kB writepending:1048kB present:3129332kB managed:2561144kB mlocked:0kB bounce:0kB free_pcp:46448kB local_pcp:24368kB free_cma:0kB [ 1193.102719][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1193.143033][T19637] lowmem_reserve[]: 0 0 1 1 1 [ 1193.163284][T19637] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 1193.244073][T19637] lowmem_reserve[]: 0 0 0 0 0 [ 1193.250072][T19637] Node 1 Normal free:3911552kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14848kB local_pcp:6144kB free_cma:0kB [ 1193.323584][T19637] lowmem_reserve[]: 0 0 0 0 0 [ 1193.330816][T19637] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1193.338870][T19646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3582'. [ 1193.359575][T19637] Node 0 DMA32: 51*4kB (UE) 1319*8kB (UME) 1624*16kB (UME) 1211*32kB (UME) 1000*64kB (UME) 610*128kB (UME) 435*256kB (UME) 336*512kB (UME) 250*1024kB (UME) 17*2048kB (UM) 25*4096kB (UM) = 894180kB [ 1193.425514][T19637] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1193.470917][T19637] Node 1 Normal: 186*4kB (UME) 49*8kB (UE) 47*16kB (UME) 217*32kB (UME) 58*64kB (UME) 13*128kB (UME) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 950*4096kB (ME) = 3911552kB [ 1193.531341][T19637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1193.542399][T19637] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1193.564737][T19637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1193.640533][T19637] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1193.696949][T19637] 105721 total pagecache pages [ 1193.753547][T19637] 0 pages in swap cache [ 1193.758130][T19637] Free swap = 124996kB [ 1193.763177][T19637] Total swap = 124996kB [ 1193.979031][T19637] 2097051 pages RAM [ 1194.010188][T19637] 0 pages HighMem/MovableOnly [ 1194.059278][T19637] 424659 pages reserved [ 1194.068191][T19637] 0 pages cma reserved [ 1194.141315][ T10] usb 2-1: USB disconnect, device number 80 [ 1194.201910][T19664] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1195.444786][T19685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3592'. [ 1195.489035][T19685] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1195.890638][T19689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3594'. [ 1197.699504][T10011] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1197.885578][T10011] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.916821][T10011] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1197.926099][T10011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.939058][T10011] usb 5-1: Product: syz [ 1197.943499][T10011] usb 5-1: Manufacturer: syz [ 1197.948179][T10011] usb 5-1: SerialNumber: syz [ 1197.959871][T10011] usb 5-1: config 0 descriptor?? [ 1197.976065][T10011] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 1197.985987][T10011] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 1198.380591][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3599'. [ 1198.418569][T19721] xt_connbytes: Forcing CT accounting to be enabled [ 1198.505248][T19721] xt_CT: No such helper "pptp" [ 1198.549275][ T10] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1198.734199][ T10] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1198.764217][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 1198.851343][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 1198.870464][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.884144][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1198.939522][ T10] usb 3-1: config 0 has no interface number 0 [ 1198.964903][ T10] usb 3-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1199.018910][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1199.036977][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.082010][ T10] usb 3-1: Product: syz [ 1199.238343][ T10] usb 3-1: Manufacturer: syz [ 1199.240999][ T24] usb 5-1: USB disconnect, device number 67 [ 1199.309215][ T10] usb 3-1: SerialNumber: syz [ 1199.335932][ T10] usb 3-1: config 0 descriptor?? [ 1199.649482][ T10] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1199.672247][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 1199.821154][ T10] usb 3-1: USB disconnect, device number 67 [ 1199.874393][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1200.373777][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1200.392006][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1200.402034][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1200.420330][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1200.438068][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1201.039509][ C0] ------------[ cut here ]------------ [ 1201.045559][ C0] refcount_t: addition on 0; use-after-free. [ 1201.052515][ C0] WARNING: CPU: 0 PID: 0 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 1201.061665][ C0] Modules linked in: [ 1201.066827][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1201.078220][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1201.088452][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1201.094639][ C0] Code: 00 00 e8 a9 76 00 fd 5b 41 5e e9 d1 a3 a7 06 cc e8 9b 76 00 fd c6 05 9a 09 cb 0a 01 90 48 c7 c7 c0 27 e2 8b e8 37 24 c4 fc 90 <0f> 0b 90 90 eb d7 e8 7b 76 00 fd c6 05 7b 09 cb 0a 01 90 48 c7 c7 [ 1201.115461][ C0] RSP: 0018:ffffc90000007828 EFLAGS: 00010246 [ 1201.121638][ C0] RAX: 90c7e8cb865e6500 RBX: 0000000000000002 RCX: ffffffff8de95280 [ 1201.129702][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1201.137733][ C0] RBP: ffffc900000079b0 R08: 0000000000000003 R09: 0000000000000004 [ 1201.145791][ C0] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: ffff888031bd0000 [ 1201.153855][ C0] R13: dffffc0000000000 R14: ffff888031bd016c R15: ffff888034413000 [ 1201.161928][ C0] FS: 0000000000000000(0000) GS:ffff888125c5c000(0000) knlGS:0000000000000000 [ 1201.170952][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1201.177600][ C0] CR2: 00002000000cd030 CR3: 000000009ecfc000 CR4: 00000000003526f0 [ 1201.185662][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1201.193724][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1201.201290][T19741] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1201.201764][ C0] Call Trace: [ 1201.221266][ C0] [ 1201.224146][ C0] tipc_crypto_xmit+0x1820/0x22c0 [ 1201.229290][ C0] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 1201.234713][ C0] tipc_bearer_xmit_skb+0x245/0x400 [ 1201.239993][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 1201.245344][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 1201.251142][ C0] tipc_disc_timeout+0x580/0x6d0 [ 1201.256145][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1201.261776][ C0] call_timer_fn+0x17e/0x5f0 [ 1201.266424][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1201.271954][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1201.276676][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1201.281844][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1201.287069][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1201.292323][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1201.297812][ C0] __run_timer_base+0x61a/0x860 [ 1201.302793][ C0] ? ktime_get+0x3e/0x1f0 [ 1201.307165][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1201.312586][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1201.318872][ C0] run_timer_softirq+0xb7/0x180 [ 1201.323789][ C0] handle_softirqs+0x283/0x870 [ 1201.328586][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1201.333417][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1201.338762][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1201.344005][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1201.348622][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1201.353914][ C0] irq_exit_rcu+0x9/0x30 [ 1201.358204][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1201.363914][ C0] [ 1201.366860][ C0] [ 1201.369847][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1201.375935][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1201.381711][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 75 23 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1201.401390][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 1201.407587][ C0] RAX: 90c7e8cb865e6500 RBX: ffffffff81976078 RCX: 90c7e8cb865e6500 [ 1201.415686][ C0] RDX: 0000000000000001 RSI: ffffffff8d979f2e RDI: ffffffff8be27240 [ 1201.423687][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1201.431865][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0f5f0 [ 1201.440018][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 1201.448018][ C0] ? do_idle+0x1e8/0x510 [ 1201.452338][ C0] default_idle+0x13/0x20 [ 1201.456693][ C0] default_idle_call+0x74/0xb0 [ 1201.461487][ C0] do_idle+0x1e8/0x510 [ 1201.465570][ C0] ? __pfx_do_idle+0x10/0x10 [ 1201.470727][ C0] cpu_startup_entry+0x44/0x60 [ 1201.475529][ C0] rest_init+0x2de/0x300 [ 1201.479838][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1201.485408][ C0] start_kernel+0x47d/0x500 [ 1201.489949][ C0] x86_64_start_reservations+0x24/0x30 [ 1201.495422][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1201.500573][ C0] common_startup_64+0x13e/0x147 [ 1201.505535][ C0] [ 1201.508648][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1201.515934][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 1201.527237][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1201.537317][ C0] Call Trace: [ 1201.540615][ C0] [ 1201.543469][ C0] dump_stack_lvl+0x99/0x250 [ 1201.548083][ C0] ? __asan_memcpy+0x40/0x70 [ 1201.552697][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1201.557913][ C0] ? __pfx__printk+0x10/0x10 [ 1201.562528][ C0] panic+0x2db/0x790 [ 1201.566445][ C0] ? __pfx_panic+0x10/0x10 [ 1201.570888][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 1201.576131][ C0] ? common_startup_64+0x13e/0x147 [ 1201.581263][ C0] __warn+0x31b/0x4b0 [ 1201.585265][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1201.590743][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1201.596212][ C0] report_bug+0x2be/0x4f0 [ 1201.600559][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1201.606051][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1201.611555][ C0] ? refcount_warn_saturate+0xfc/0x1d0 [ 1201.617139][ C0] handle_bug+0x84/0x160 [ 1201.621403][ C0] exc_invalid_op+0x1a/0x50 [ 1201.625917][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1201.630791][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1201.636968][ C0] Code: 00 00 e8 a9 76 00 fd 5b 41 5e e9 d1 a3 a7 06 cc e8 9b 76 00 fd c6 05 9a 09 cb 0a 01 90 48 c7 c7 c0 27 e2 8b e8 37 24 c4 fc 90 <0f> 0b 90 90 eb d7 e8 7b 76 00 fd c6 05 7b 09 cb 0a 01 90 48 c7 c7 [ 1201.656589][ C0] RSP: 0018:ffffc90000007828 EFLAGS: 00010246 [ 1201.662676][ C0] RAX: 90c7e8cb865e6500 RBX: 0000000000000002 RCX: ffffffff8de95280 [ 1201.670659][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1201.678636][ C0] RBP: ffffc900000079b0 R08: 0000000000000003 R09: 0000000000000004 [ 1201.686619][ C0] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: ffff888031bd0000 [ 1201.694689][ C0] R13: dffffc0000000000 R14: ffff888031bd016c R15: ffff888034413000 [ 1201.702700][ C0] ? refcount_warn_saturate+0xf9/0x1d0 [ 1201.708173][ C0] tipc_crypto_xmit+0x1820/0x22c0 [ 1201.713232][ C0] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 1201.718626][ C0] tipc_bearer_xmit_skb+0x245/0x400 [ 1201.723931][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 1201.729242][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 1201.734998][ C0] tipc_disc_timeout+0x580/0x6d0 [ 1201.739960][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1201.745449][ C0] call_timer_fn+0x17e/0x5f0 [ 1201.750052][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1201.755534][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1201.760248][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1201.765521][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1201.770793][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1201.776013][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1201.781496][ C0] __run_timer_base+0x61a/0x860 [ 1201.786368][ C0] ? ktime_get+0x3e/0x1f0 [ 1201.790718][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1201.796104][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1201.802373][ C0] run_timer_softirq+0xb7/0x180 [ 1201.807241][ C0] handle_softirqs+0x283/0x870 [ 1201.812028][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1201.816812][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1201.822144][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1201.827379][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1201.832002][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1201.837238][ C0] irq_exit_rcu+0x9/0x30 [ 1201.841537][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1201.847206][ C0] [ 1201.850199][ C0] [ 1201.853147][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1201.859166][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1201.864936][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 75 23 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1201.884560][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 1201.890642][ C0] RAX: 90c7e8cb865e6500 RBX: ffffffff81976078 RCX: 90c7e8cb865e6500 [ 1201.898626][ C0] RDX: 0000000000000001 RSI: ffffffff8d979f2e RDI: ffffffff8be27240 [ 1201.906608][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1201.914604][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0f5f0 [ 1201.922595][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 1201.930581][ C0] ? do_idle+0x1e8/0x510 [ 1201.934843][ C0] default_idle+0x13/0x20 [ 1201.939192][ C0] default_idle_call+0x74/0xb0 [ 1201.944073][ C0] do_idle+0x1e8/0x510 [ 1201.948153][ C0] ? __pfx_do_idle+0x10/0x10 [ 1201.952826][ C0] cpu_startup_entry+0x44/0x60 [ 1201.957730][ C0] rest_init+0x2de/0x300 [ 1201.961997][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1201.967651][ C0] start_kernel+0x47d/0x500 [ 1201.972215][ C0] x86_64_start_reservations+0x24/0x30 [ 1201.977884][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1201.983025][ C0] common_startup_64+0x13e/0x147 [ 1201.988048][ C0] [ 1201.991440][ C0] Kernel Offset: disabled [ 1201.995806][ C0] Rebooting in 86400 seconds..